Function at 0x14001c220
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140159140]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r14d, r8d
mov r15, rdx
xor edx, edx
cmp ecx, 0x7b
ja 0x14001c264
movsxd rax, ecx
lea rdx, [0x14012dae0]
mov rdx, qword [rdx + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 0
mov edi, 0xf
mov qword [rbp - 0x18], rdi
mov byte [rbp - 0x30], 0
test rdx, rdx
jne 0x14001c2aa
mov qword [rbp - 0x20], 0xa
movsd xmm0, qword [str.Select_Key]
movsd qword [rbp - 0x30], xmm0
movzx eax, word [0x1400af3e8]
mov word [rbp - 0x28], ax
mov byte [rbp - 0x26], dl
jmp 0x14001c2c8
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14001c2b1
lea rcx, [rbp - 0x30]
call fcn.14000a250
mov rdi, qword [rbp - 0x18]
cmp r14d, 1
jne 0x14001c3fe
cmp rdi, 0xd
jb 0x14001c30b
lea rbx, [rbp - 0x30]
cmp rdi, 0xf
cmova rbx, qword [rbp - 0x30]
mov qword [rbp - 0x20], 0xd
mov r8d, 0xd
lea rdx, str.Press_the_key
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xd], 0
jmp 0x14001c3fe
mov rcx, rdi
shr rcx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rcx
cmp rdi, rax
jbe 0x14001c353
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400a84bc
test rax, rax
je 0x14001c3ee
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001c390
lea rax, [rdi + rcx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14001c370
xor ebx, ebx
jmp 0x14001c390
cmp rcx, 0x1000
jb 0x14001c388
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001c507
jmp 0x14001c334
call fcn.1400a84bc
mov rbx, rax
mov qword [rbp - 0x20], 0xd
mov qword [rbp - 0x18], rsi
movsd xmm0, qword [str.Press_the_key]
movsd qword [rbx], xmm0
mov ecx, dword [0x1400af3f8]
mov dword [rbx + 8], ecx
movzx ecx, byte [0x1400af3fc]
mov byte [rbx + 0xc], cl
mov byte [rbx + 0xd], 0
cmp rdi, 0xf
jbe 0x14001c3fa
lea rdx, [rdi + 1]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c3f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c3f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a84f8
mov qword [rbp - 0x30], rbx
movdqa xmm0, xmmword [0x1400afe00]
movups xmmword [rbp - 0x40], xmm0
lea rdx, [rbp - 0x40]
mov ecx, 0x15
call fcn.140043d80
movdqa xmm0, xmmword [0x1400afe10]
movups xmmword [rbp - 0x40], xmm0
lea rdx, [rbp - 0x40]
mov ecx, 0x17
call fcn.140043d80
movdqa xmm0, xmmword [0x1400afe10]
movups xmmword [rbp - 0x40], xmm0
lea rdx, [rbp - 0x40]
mov ecx, 0x16
call fcn.140043d80
mov dword [rbp - 0x40], 0x42fa0000
mov dword [rbp - 0x3c], 0x41c80000
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rcx, qword [rbp - 0x30]
lea rdx, [rbp - 0x40]
call fcn.140065830
test al, al
je 0x14001c498
test r14d, r14d
jne 0x14001c498
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], r14d
xor r9d, r9d
mov r8, r15
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 3
call fcn.140043670
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14001c4e1
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c4dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c4dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a84f8
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400a88c0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400023e0
nop
int3