Function at 0x1400795a0
Capabilities:
Capture webcam image
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xc0
mov rax, qword [0x1401198e8]
xor rax, rsp
mov qword [rbp - 1], rax
mov r13, r9
mov r15d, r8d
mov rbx, rcx
mov r12, qword [rbp + 0x6f]
mov rdi, qword [rbp + 0x77]
mov eax, dword [rbp + 0x7f]
mov r14d, 1
test eax, eax
je 0x140079d61
sub eax, r14d
je 0x1400798f9
cmp eax, 2
jne 0x140079b44
cmp r8d, 0x200
jne 0x14007977c
call qword [sym.imp.USER32.dll_GetMessagePos]
mov ecx, eax
cwde
mov dword [rbp - 0x71], eax
shr ecx, 0x10
movsx eax, cx
mov dword [rbp - 0x6d], eax
xor esi, esi
mov r12d, esi
test byte [rbx + 0xf0], r14b
je 0x14007975b
mov r15, qword [rbx + 8]
mov rcx, qword [rbp - 0x71]
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, r15
jne 0x140079769
lea rdx, [rbp - 0x71]
mov rcx, r15
call qword [sym.imp.USER32.dll_ScreenToClient]
lea r9, [rbp - 0x71]
xor r8d, r8d
mov edx, 0x445
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
mov eax, dword [0x1401196d8]
cmp dword [rbp - 0x71], eax
jne 0x140079689
mov eax, dword [0x1401196dc]
cmp dword [rbp - 0x6d], eax
je 0x140079769
test r15d, r15d
js 0x140079769
mov rcx, qword [rbx + 0x78]
call qword [sym.imp.USER32.dll_GetMenuItemCount]
cmp r15d, eax
jge 0x140079769
mov eax, dword [rbx + 0xf4]
cmp r15d, eax
je 0x140079769
cmp eax, 0xffffffff
je 0x140079769
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
movsxd r8, r15d
lea r9, [rbp - 0x21]
mov edx, 0x417
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
test byte [rbp - 0x19], 4
je 0x140079769
or r15d, 0xffff0000
mov dword [rbx + 0xf8], r15d
movsxd rcx, dword [rbx + 0x18]
lea eax, [rcx - 1]
test eax, eax
jns 0x140079706
mov rbx, rsi
jmp 0x14007970f
mov rax, qword [rbx + 0x10]
mov rbx, qword [rax + rcx*8 - 8]
movzx r9d, word [rbp - 0x6d]
shl r9d, 0x10
movzx eax, word [rbp - 0x71]
or r9, rax
xor r8d, r8d
mov edx, 0x202
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0x1b]
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
mov r12d, r14d
mov rax, qword [rbp - 0x71]
mov qword [0x1401196d8], rax
test r14d, r14d
jmp 0x140079b3b
lea rdx, [rbp - 0x71]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [rbp - 0x71]
mov qword [0x1401196d8], rax
test r12d, r12d
jmp 0x140079b3b
cmp r15d, 0x104
jne 0x140079842
cmp r13, 0x12
jne 0x1400797bb
cmp byte [rcx + 0xf0], 0
jge 0x1400797c1
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x1400797c1
test cl, 8
je 0x1400797c1
movzx edx, r14b
mov rcx, rbx
call fcn.14007f5b0
jmp 0x1400797c1
cmp r13, 0x20
je 0x14007980e
test byte [rbx + 0xf0], r14b
jne 0x140079831
mov rsi, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rsi
jne 0x140079831
and byte [rbx + 0xf1], 0xf7
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, rbx
call fcn.14006f410
or byte [rbx + 0xf0], 0x40
xor esi, esi
mov qword [rdi], rsi
jmp 0x140079b44
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 6
jne 0x140079831
or cl, 8
mov byte [rbx + 0xf1], cl
xor edx, edx
mov rcx, rbx
call fcn.14007f5b0
mov dword [rbx + 0x118], r13d
xor esi, esi
mov qword [rdi], rsi
jmp 0x140079b44
cmp r15d, 0x105
jne 0x140079868
movzx eax, byte [rcx + 0xf1]
test al, 8
jne 0x14007985e
or al, 8
mov byte [rcx + 0xf1], al
xor esi, esi
mov qword [rdi], rsi
jmp 0x140079b44
cmp r15d, 0x106
jne 0x14007989b
test byte [rcx + 0xf0], r14b
jne 0x140079804
mov rax, qword [rcx + 8]
cmp qword [rcx + 0x30], rax
je 0x140079804
cmp r13, 0x20
je 0x140079804
xor esi, esi
mov qword [rdi], rsi
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x100
jne 0x1400798cb
mov dword [rbp - 0x71], r14d
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r15d
call fcn.140075bb0
mov qword [rdi], rax
cmp dword [rbp - 0x71], 0
jmp 0x140079b3e
cmp r15d, 0x213
je 0x140079d22
cmp r15d, 0x102
jne 0x140079b44
xor esi, esi
mov qword [rdi], rsi
cmp r13, 0x1b
je 0x14007a29d
jmp 0x140079b44
xor esi, esi
cmp r15d, 0x4e
jne 0x140079a4a
cmp dword [r12 + 0x10], 0xfffffd37
jne 0x1400799bd
mov rax, qword [rcx + 8]
cmp qword [r12], rax
jne 0x1400799ba
mov byte [rbp - 0x69], sil
test byte [rcx + 0x98], 8
jne 0x14007994f
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
lea rdx, [rbp - 0x71]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [rbp - 0x71]
setne byte [rbp - 0x69]
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x140079966
cmp byte [rbp - 0x69], sil
je 0x140079971
test byte [r12 + 0x20], r14b
jne 0x140079cc9
mov eax, dword [r12 + 0x20]
test al, 0x85
jne 0x1400799ba
test al, 0x10
je 0x140079997
mov r9, qword [rbx + 0x78]
xor r8d, r8d
mov edx, 0x11f
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
test byte [r12 + 0x20], 0x20
je 0x1400799ba
xor r9d, r9d
mov edx, 0x11f
mov r8d, 0xffff0000
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi], rsi
cmp dword [r12 + 0x10], 0xfffffd3a
jne 0x140079a7a
mov rax, qword [rbx + 8]
cmp qword [r12], rax
je 0x1400799de
mov qword [rdi], r14
jmp 0x140079a7a
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [rbx + 8]
je 0x140079a13
test byte [rbx + 0x98], 4
je 0x140079a09
cmp qword [rbx + 0x120], rsi
jne 0x140079a09
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rbx + 0x120], rax
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SetFocus]
mov r8d, dword [r12 + 0x18]
xor r9d, r9d
mov edx, 0x419
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
and byte [rbx + 0xf0], 0xcf
movzx r8d, r14b
mov edx, eax
mov rcx, rbx
call fcn.14006a2d0
mov qword [rdi], rsi
mov rax, r14
jmp 0x140079b46
cmp r15d, 0x117
jne 0x140079a7a
mov dword [rbp - 0x71], r14d
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r15d
call fcn.140075f20
mov qword [rdi], rax
cmp dword [rbp - 0x71], esi
jne 0x14007a29d
call fcn.14006e670
cmp r15d, eax
je 0x140079ecb
cmp r15d, 0x112
jne 0x140079b6d
mov r15d, esi
mov eax, dword [rbx + 0x118]
cmp eax, 0x12
je 0x140079abe
cmp eax, 0x79
jne 0x140079ab5
lea ecx, [rax - 0x69]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, al
jns 0x140079abe
cmp dword [rbx + 0x118], 0x20
jne 0x140079b31
cmp r13, 0xf100
jne 0x140079b31
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [rbx + 8]
jne 0x140079af3
mov rcx, rbx
call fcn.14006f410
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140079b31
cmp dword [rbx + 0x118], 0x20
je 0x140079b31
test byte [rbx + 0xf0], 0x40
jne 0x140079b2e
movzx ecx, byte [rbx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x140079b26
test cl, 8
je 0x140079b26
movzx edx, r14b
mov rcx, rbx
call fcn.14007f5b0
mov rcx, rbx
call fcn.14007fea0
mov r15d, r14d
and byte [rbx + 0xf0], 0xbf
test r15d, r15d
mov qword [rdi], rsi
jne 0x14007a29d
xor eax, eax
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.14009c570
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r15d, 0x52e
je 0x14007a1f9
cmp r15d, 0x120
je 0x140079f45
cmp r15d, 0x52f
je 0x14007a211
cmp r15d, 0x52d
je 0x14007a25e
cmp r15d, 0x1a
jne 0x140079bd3
cmp r13, 0x2a
je 0x140079bc3
cmp r13, 0x100b
je 0x140079bc3
cmp r13, 0x1023
jne 0x140079d22
mov rcx, rbx
call fcn.14006ed00
mov qword [rdi], r14
jmp 0x140079b44
cmp r15d, 0x2b
jne 0x140079c6b
mov rsi, qword [r12 + 0x38]
cmp dword [r12], r14d
jne 0x140079d22
test rsi, rsi
je 0x140079d22
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
movups xmmword [rbp - 0x41], xmm0
movups xmmword [rbp - 0x31], xmm0
lea r8d, [r15 + 5]
lea rdx, [rbp - 0x51]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp qword [rbp - 0x51], 0
je 0x140079d22
test byte [rbp - 0x2d], 6
je 0x140079d22
cmp dword [rsi], 0x1313
jne 0x140079d22
mov rdx, r12
mov rcx, rbx
test byte [rbx + 0xf1], r14b
je 0x140079c58
call fcn.14006cf60
mov rax, r14
mov qword [rdi], rax
mov eax, r14d
jmp 0x140079b46
call fcn.14006c5a0
mov rax, r14
mov qword [rdi], rax
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x2c
jne 0x140079cd4
mov rsi, qword [r12 + 0x18]
cmp dword [r12], r14d
jne 0x140079d22
test rsi, rsi
je 0x140079d22
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
movups xmmword [rbp - 0x41], xmm0
movups xmmword [rbp - 0x31], xmm0
lea r8d, [r15 + 4]
lea rdx, [rbp - 0x51]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp qword [rbp - 0x51], 0
je 0x140079d22
test byte [rbp - 0x2d], 6
je 0x140079d22
cmp dword [rsi], 0x1313
jne 0x140079d22
mov rdx, r12
mov rcx, rbx
call fcn.140071ac0
mov qword [rdi], r14
mov eax, r14d
jmp 0x140079b46
cmp r15d, 6
jne 0x140079d2a
neg r13w
sbb cl, cl
and cl, 0x80
movzx eax, byte [rbx + 0xf0]
and al, 0x7f
or cl, al
mov byte [rbx + 0xf0], cl
jl 0x140079d09
movzx eax, byte [rbx + 0xf1]
and al, r15b
cmp al, r15b
je 0x140079f87
mov r8d, r14d
xor edx, edx
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rdi], r14
jmp 0x140079b44
cmp r15d, 0x4e
jne 0x140079b44
cmp dword [r12 + 0x10], 0xfffffff4
jne 0x140079b44
mov dword [rbp - 0x71], r14d
lea r9, [rbp - 0x71]
mov r8, r12
mov edx, r13d
mov rcx, rbx
call fcn.140077ab0
mov qword [rdi], rax
cmp dword [rbp - 0x71], esi
jmp 0x140079b3e
cmp r15d, r14d
jne 0x140079d88
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r14d
call fcn.140072e70
mov qword [rdi], rax
mov eax, r14d
jmp 0x140079b46
cmp r15d, 2
jne 0x140079db0
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r15d
call fcn.1400744c0
mov qword [rdi], rax
mov rax, r14
jmp 0x140079b46
xor esi, esi
cmp r15d, 0x14
jne 0x140079e08
test byte [rcx + 0xf0], 2
jne 0x140079e00
test byte [rcx + 0x98], r14b
jne 0x140079e00
mov qword [rbp - 0x71], r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
lea rdx, [rbp - 0x61]
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_GetClientRect]
lea r8d, [rsi + 5]
lea rdx, [rbp - 0x61]
mov rcx, r13
call qword [sym.imp.USER32.dll_FillRect]
nop
mov qword [rdi], r14
mov eax, r14d
jmp 0x140079b46
mov qword [rdi], rsi
jmp 0x140079e9e
cmp r15d, 0x116
jne 0x140079e48
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
movzx r8d, ax
or r8, 0x900000
mov r9, qword [rbx + 0x78]
lea edx, [r15 + 9]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi], r14
jmp 0x140079e9e
cmp r15d, 0x117
jne 0x140079e6e
mov dword [rbp - 0x71], r14d
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r15d
call fcn.140075f20
jmp 0x140079e92
cmp r15d, 0x11f
jne 0x140079e9e
mov dword [rbp - 0x71], r14d
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r15d
call fcn.140076b40
cmp dword [rbp - 0x71], esi
mov qword [rdi], rax
jne 0x14007a29d
call fcn.14006e5d0
cmp r15d, eax
jne 0x140079ec1
xor r8d, r8d
mov edx, r13d
mov rcx, rbx
call fcn.14006a2d0
mov qword [rdi], rsi
mov eax, r14d
jmp 0x140079b46
call fcn.14006e670
cmp r15d, eax
jne 0x140079f0b
test r13, r13
je 0x140079eda
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [r13], eax
lea r15, [rbx + 8]
mov rcx, qword [r15]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x140079efd
test rbx, rbx
cmove r15, rsi
mov qword [rdi], r15
mov eax, r14d
jmp 0x140079b46
mov r15, rsi
mov qword [rdi], rsi
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x1a
jne 0x140079f3c
cmp r13, 0x2a
je 0x140079f29
cmp r13, 0x100b
je 0x140079f29
cmp r13, 0x1023
jne 0x140079f31
mov rcx, rbx
call fcn.14006ed00
mov qword [rdi], rsi
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x120
jne 0x140079f70
mov dword [rbp - 0x71], r14d
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, 0x120
mov rcx, rbx
call fcn.140076760
mov qword [rdi], rax
cmp dword [rbp - 0x71], esi
jmp 0x140079b3e
cmp r15d, 8
jne 0x140079f99
movzx eax, byte [rbx + 0xf1]
and al, 6
cmp al, 6
jne 0x140079d22
xor edx, edx
mov rcx, rbx
call fcn.14007f5b0
mov qword [rdi], r14
jmp 0x140079b44
cmp r15d, 0x100
jne 0x14007a077
movzx edx, byte [rbx + 0xf0]
mov ecx, esi
mov dword [rbp - 0x71], ecx
test dl, 2
jne 0x140079d22
cmp r13, 0x20
jne 0x140079fe7
bts r12, 0x1d
mov r9, r12
lea edx, [r15 + 4]
mov r8, r13
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_PostMessageW]
mov ecx, r14d
test ecx, ecx
jmp 0x140079b3b
lea rax, [r13 - 0x25]
test rax, 0xfffffffffffffffd
jne 0x14007a070
movzx r15d, byte [rbx + 0xf1]
shr r15, 5
not r15
and r15d, 2
or r15, 0x25
test r14b, dl
jne 0x14007a070
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, eax
mov rcx, rbx
cmp r13, r15
jne 0x14007a035
call fcn.14006e890
jmp 0x14007a03a
call fcn.14006eac0
cmp eax, 0xfffffffe
jne 0x14007a06d
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.140069a20
mov ecx, dword [rbp - 0x71]
test al, al
cmovne ecx, r14d
test ecx, ecx
jmp 0x140079b3b
mov ecx, dword [rbp - 0x71]
test ecx, ecx
jmp 0x140079b3b
cmp r15d, 0x101
jne 0x14007a09f
test byte [rbx + 0xf0], 2
jne 0x140079d22
mov qword [rdi], rsi
cmp r13, 0x20
je 0x14007a29d
jmp 0x140079b44
cmp r15d, 0x102
jne 0x14007a1e0
mov r15d, r14d
test byte [rbx + 0xf0], 2
jne 0x140079d22
cmp r13, 0x20
je 0x140079b38
mov r15d, esi
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x140079806
mov r12, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, r12
jne 0x140079806
mov dword [rbp - 0x71], esi
cmp r13, 0xd
je 0x14007a12c
movzx r8d, r13w
lea r9, [rbp - 0x71]
mov edx, 0x45a
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14007a12c
cmp r13w, 0x2f
je 0x140079b38
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
jmp 0x140079b38
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
lea rdx, [rbp - 0x61]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
movsxd r8, dword [rbp - 0x71]
lea r9, [rbp - 0x21]
mov edx, 0x41d
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
movups xmmword [rbp - 0x41], xmm0
movsxd r8, dword [rbp - 0x71]
lea r9, [rbp - 0x51]
mov edx, 0x417
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
movzx eax, byte [rbp - 0x49]
test al, 4
je 0x14007a1d0
test al, 8
jne 0x14007a1d0
mov eax, dword [rbp - 0x59]
cmp dword [rbp - 0x19], eax
jg 0x14007a1d0
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0x28]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
cmp r13, 0xd
je 0x140079b38
movsxd r8, dword [rbp - 0x71]
xor r9d, r9d
mov edx, 0x448
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140079b38
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
mov r15d, r14d
jmp 0x140079b38
lea eax, [r15 - 0x104]
cmp eax, 2
jbe 0x140079806
cmp r15d, 0x52e
jne 0x14007a208
mov rax, qword [rbx + 0x78]
mov qword [rdi], rax
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x52f
jne 0x14007a255
test r12, r12
je 0x14007a24a
cmp dword [r12], 0x28
jne 0x14007a24a
mov rax, qword [r12 + 0x20]
mov qword [rsp + 0x28], rax
mov eax, dword [r12 + 0x18]
mov dword [rsp + 0x20], eax
mov r9d, dword [r12 + 0x14]
mov r8d, dword [r12 + 0x10]
mov rdx, qword [r12 + 8]
mov rcx, rbx
call fcn.14007fee0
movsxd rsi, eax
mov qword [rdi], rsi
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x52d
jne 0x14007a26d
mov rax, qword [rbx + 8]
mov qword [rdi], rax
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x2b
jne 0x14007a2a5
mov dword [rbp - 0x71], r14d
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r15d
mov rcx, rbx
call fcn.140074a40
mov qword [rdi], rax
cmp dword [rbp - 0x71], esi
je 0x140079b44
mov eax, r14d
jmp 0x140079b46
cmp r15d, 0x2c
jne 0x14007a2da
mov dword [rbp - 0x71], r14d
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
mov edx, r15d
mov rcx, rbx
call fcn.1400766c0
mov qword [rdi], rax
cmp dword [rbp - 0x71], esi
setne sil
mov eax, esi
jmp 0x140079b46
cmp r15d, 0x37f
jne 0x140079b44
mov ecx, dword [r12 + 8]
lea eax, [rcx - 0x200]
cmp eax, 0xe
ja 0x14007a300
and byte [rbx + 0xf1], 0xef
jmp 0x14007a312
lea eax, [rcx - 0x100]
cmp eax, 9
ja 0x14007a312
or byte [rbx + 0xf1], 0x10
mov qword [rbp - 0x71], rsi
mov r10, qword [rbx]
mov dword [rsp + 0x30], 3
lea rax, [rbp - 0x71]
mov qword [rsp + 0x28], rax
mov rax, qword [r12 + 0x18]
mov qword [rsp + 0x20], rax
mov r9, qword [r12 + 0x10]
mov r8d, dword [r12 + 8]
mov rdx, qword [r12]
mov rcx, rbx
call qword [r10]
mov rax, qword [rbp - 0x71]
mov qword [rdi], rax
mov eax, r14d
jmp 0x140079b46