Function at 0x140077d90
Capabilities:
Get keyboard layout
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14011e258]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rcx, qword [0x1401207c8]
mov rsi, rdx
mov edx, 0x49
mov qword [rsp + 0x60], r9
mov r14, r9
mov qword [rsp + 0x58], r8
mov rdi, r8
mov rbx, r9
call fcn.1400034c0
mov rcx, qword [0x1401207c8]
mov edx, 0x4b
mov r12d, eax
mov dword [rsp + 0x4c], eax
call fcn.140003460
mov rcx, qword [0x1401207c8]
mov edx, 0x64
movzx r13d, al
mov byte [rsp + 0x44], al
call fcn.140003460
mov rcx, qword [0x1401207c8]
mov edx, 0x56
movzx r15d, al
call fcn.140003460
xor ecx, ecx
mov byte [rsp + 0x45], al
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x68], rax
call qword [sym.imp.USER32.dll_GetKeyboardState]
mov edx, 0xc000
test eax, eax
jne 0x140077e60
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x100
call fcn.14008e4e0
jmp 0x140077ed0
cmp rsi, 0x12
jne 0x140077e80
movzx ecx, byte [rbp + 0x15]
mov rax, rdi
shr rax, 0x10
bt ax, 8
movzx eax, byte [rbp - 0x7e]
cmovb ecx, eax
mov byte [rbp + 0x15], cl
cmp r12d, 3
je 0x140077ea1
cmp r12d, 1
jg 0x140077ec5
mov rax, qword [0x1401207d0]
cmp byte [rax + 0x189], 0
je 0x140077ec5
test r13b, r13b
jne 0x140077ec5
cmp rsi, 0x90
jne 0x140077ec5
test byte [rbp - 0x80], 0x80
jne 0x140077ec5
mov rax, rdi
mov esi, 0x2b
shr rax, 0x10
test dx, ax
jne 0x140077ec5
xor byte [rbp], 1
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_SetKeyboardState]
mov r10, qword [0x1401207d0]
mov r13, rdi
shr r13, 0x10
mov edx, 0x4000
cmp byte [r10 + 0x18b], 0
je 0x140077f02
movzx eax, r13w
mov ecx, 0xc000
and ax, cx
cmp ax, dx
je 0x140078189
bt r13w, 0xd
movzx ecx, byte [rbp - 0x7f]
movzx edx, r13w
mov dword [rsp + 0x48], edx
jae 0x140077f49
test byte [rbp + 0x15], 0x80
jne 0x140077f49
shr r13w, 0xf
mov r8b, 1
not r13b
mov byte [rsp + 0x40], r8b
and r13b, r8b
test cl, cl
jns 0x140077f5b
test r15b, r15b
je 0x140077f43
mov byte [rbp - 0x7e], 0
mov byte [rsp + 0x40], r8b
jmp 0x140077f5b
mov byte [rbp + 0x15], 0x80
jmp 0x140077f55
shr r13w, 0xf
not r13b
and r13b, 1
xor al, al
mov byte [rsp + 0x40], al
mov eax, edx
shr ecx, 7
mov edx, dword [0x140120fa0]
and eax, 0x81ff
mov dword [rsp + 0x50], eax
xor r12d, r12d
movzx eax, byte [rbp - 0x80]
mov edi, 1
shr eax, 7
lea r15d, [rax + rcx*2]
test edx, edx
jne 0x140078001
mov rcx, qword [0x1401207c8]
lea edx, [rdi + 0x62]
mov qword [0x140121000], 0x100
call fcn.140003460
test al, al
je 0x140077fd0
cmp rsi, 0x12
jne 0x140077fd0
mov eax, dword [rsp + 0x48]
mov r9d, 0x100
test r9w, ax
je 0x140077ff2
mov r10, qword [0x1401207d0]
mov edx, dword [0x140120fa0]
mov qword [0x140121000], rsi
jmp 0x140078014
mov r9d, 0x100
cmp rsi, 0x5d
jne 0x140077ff2
mov r10, qword [0x1401207d0]
mov edx, dword [0x140120fa0]
mov qword [0x140121000], rsi
jmp 0x140078010
mov r10, qword [0x1401207d0]
mov edx, dword [0x140120fa0]
jmp 0x140078007
mov r9d, 0x100
cmp rsi, qword [0x140121000]
jne 0x140078045
mov eax, dword [rsp + 0x48]
test edx, edx
jne 0x14007802c
mov ecx, 0xc000
test cx, ax
jne 0x140078053
mov edx, edi
mov dword [0x140120fa0], edx
jmp 0x140078060
cmp edx, edi
jne 0x140078053
test ax, ax
jns 0x140078053
mov edx, 2
mov dword [0x140120fa0], edx
jmp 0x1400780d3
cmp edx, edi
jne 0x1400780cd
cmp rsi, 0x11
je 0x14007805c
mov edx, r12d
mov dword [0x140120fa0], edx
mov eax, dword [rsp + 0x48]
movzx r8d, byte [rsp + 0x40]
test r8b, r8b
jne 0x140078098
mov ecx, dword [rsp + 0x4c]
cmp byte [r10 + 0x189], r12b
je 0x140078084
cmp byte [rsp + 0x44], r12b
jne 0x140078084
cmp ecx, 2
jne 0x140078098
cmp ecx, 3
je 0x140078098
cmp byte [rsp + 0x45], r12b
jne 0x140078098
test edx, edx
je case.0x1400780cb.13
test r9w, ax
jne case.0x1400780cb.13
lea rax, [rsi - 0xc]
cmp rax, 0x22
ja case.0x1400780cb.13
lea r9, [0x140000000]
movzx eax, byte [r9 + rax + 0x78bcc]
mov ecx, dword [r9 + rax*4 + 0x78b9c]
add rcx, r9
jmp rcx
jle 0x14007805c
mov eax, dword [rsp + 0x48]
movzx r8d, byte [rsp + 0x40]
test r8b, r8b
je 0x14007806b
mov edx, r12d
mov dword [0x140120fa0], edx
jmp 0x140078098
mov esi, 0x60
jmp 0x140078134
mov esi, 0x61
jmp 0x140078134
mov esi, 0x62
jmp 0x140078134
mov esi, 0x63
jmp 0x140078134
mov esi, 0x64
jmp 0x140078134
mov esi, 0x65
jmp 0x140078134
mov esi, 0x66
jmp 0x140078134
mov esi, 0x67
jmp 0x140078134
mov esi, 0x68
jmp 0x140078134
mov esi, 0x69
jmp 0x140078134
mov esi, 0x6e
test byte [rbp], dil
je case.0x1400780cb.13
or r15d, edi
test r13b, r13b
je case.0x1400785ed.14
test byte [rbp + 0x15], 0x80
jne case.0x1400785ed.14
test edx, edx
jne case.0x1400785ed.14
test r8b, r8b
je 0x140078165
mov byte [r14], 0x1b
lea rbx, [r14 + 1]
cmp rsi, 0x21
jne 0x1400781df
cmp r15d, edi
jne 0x140078190
mov rcx, qword [0x14011e228]
lea r8d, [rsi - 0x1f]
xor r9d, r9d
mov edx, 0x115
call qword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
jmp 0x140078b72
cmp r15d, 3
jne 0x1400781b6
mov rcx, qword [0x14011e228]
lea r8d, [r15 + 3]
xor r9d, r9d
mov edx, 0x115
call qword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
jmp 0x140078b72
cmp r15d, 2
jne 0x140078259
mov rcx, qword [0x14011e228]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x115
call qword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
jmp 0x140078b72
cmp rsi, 0x22
jne 0x140078279
cmp r15d, 3
jne 0x14007820f
mov rcx, qword [0x14011e228]
lea r8d, [rsi - 0x1b]
xor r9d, r9d
mov edx, 0x115
call qword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
jmp 0x140078b72
cmp r15d, edi
jne 0x140078234
mov rcx, qword [0x14011e228]
xor r9d, r9d
mov edx, 0x115
lea r8d, [r9 + 3]
call qword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
jmp 0x140078b72
cmp r15d, 2
jne 0x140078259
mov rcx, qword [0x14011e228]
xor r9d, r9d
mov r8, rdi
mov edx, 0x115
call qword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
jmp 0x140078b72
cmp r15d, 3
jne 0x140078279
cmp rsi, 0x21
mov rcx, r10
setne r12b
mov edx, r12d
call fcn.1400697c0
xor eax, eax
jmp 0x140078b72
cmp rsi, 0x2d
jne 0x1400782ca
cmp r15d, 2
jne 0x14007828a
lea edx, [rsi + 0x71]
jmp 0x1400782d9
cmp r15d, edi
jne 0x140078334
mov edx, 0x9e
mov rcx, qword [0x1401207c8]
call fcn.1400034c0
mov ecx, eax
sub ecx, edi
je 0x14007831f
cmp ecx, edi
jne 0x140078189
mov rcx, qword [0x1401207d0]
mov edx, 2
call fcn.140069590
xor eax, eax
jmp 0x140078b72
cmp rsi, 0x43
jne 0x14007830b
cmp r15d, 3
jne 0x140078334
lea edx, [rsi + 0x5c]
mov rcx, qword [0x1401207c8]
call fcn.1400034c0
cmp eax, 2
jne 0x140078189
mov rcx, qword [0x1401207d0]
lea rdx, [0x1400cb068]
mov r8d, edi
call fcn.140069510
xor eax, eax
jmp 0x140078b72
cmp rsi, 0x56
jne 0x140078334
cmp r15d, 3
jne 0x140078334
lea edx, [rsi + 0x49]
jmp 0x140078298
mov rcx, qword [0x1401207d0]
mov edx, edi
call fcn.140069590
xor eax, eax
jmp 0x140078b72
test r8b, r8b
je 0x140078443
cmp rsi, 0x73
jne 0x14007839b
mov rcx, qword [0x1401207c8]
lea edx, [rsi - 0x1a]
call fcn.140003460
test al, al
jne 0x140078b6d
mov r10, qword [0x1401207d0]
movzx r8d, byte [rsp + 0x40]
cmp r15d, 2
jne 0x1400785a9
lea rax, [rsi - 0x32]
cmp rax, 6
ja 0x14007856c
lea rax, [0x140000000]
movzx eax, byte [rsi + rax + 0xcb766]
mov byte [rbx], al
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
cmp rsi, 0x20
jne 0x1400783e6
mov rcx, qword [0x1401207c8]
lea edx, [rsi + 0x3a]
call fcn.140003460
test al, al
je 0x1400783d4
mov rcx, qword [0x14011e228]
xor r9d, r9d
mov edx, 0x112
mov r8d, 0xf100
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x140078b6d
mov r10, qword [0x1401207d0]
movzx r8d, byte [rsp + 0x40]
jmp 0x14007850e
cmp rsi, 0xd
jne 0x140078443
mov rcx, qword [0x1401207c8]
lea edx, [rsi + 0x52]
call fcn.140003460
test al, al
je 0x14007835a
mov rcx, qword [0x1401207c8]
lea edx, [rsi + 0x6a]
call fcn.1400034c0
cmp eax, edi
je 0x14007835a
mov rax, qword [rsp + 0x58]
mov ecx, 0xc000
shr rax, 0x10
and ax, cx
mov ecx, 0x4000
cmp ax, cx
je 0x140078b6d
call fcn.14007d630
jmp 0x140078b6d
cmp rsi, 0x13
jne 0x140078477
cmp r15d, 2
jne 0x140078468
cmp byte [r10 + 0x189], 0
sete al
mov byte [r10 + 0x189], al
xor eax, eax
jmp 0x140078b72
mov word [rbx], 0x1a
mov eax, 0xfffffffe
jmp 0x140078b72
cmp rsi, 8
jne 0x1400784e2
test r15d, r15d
jne 0x1400784ab
mov rcx, qword [0x1401207c8]
lea edx, [rsi + 0x3f]
call fcn.140003460
test al, al
mov ecx, esi
mov edx, 0x7f
lea eax, [rsi - 0xa]
cmovne ecx, edx
mov byte [rbx], cl
mov byte [rbx + 1], r15b
jmp 0x140078b72
cmp r15d, edi
jne 0x140078367
mov rcx, qword [0x1401207c8]
mov edx, 0x47
call fcn.140003460
test al, al
mov ecx, 8
mov edx, 0x7f
cmovne edx, ecx
mov byte [rbx], dl
mov byte [rbx + 1], 0
lea eax, [rcx - 0xa]
jmp 0x140078b72
cmp rsi, 9
jne 0x140078508
cmp r15d, edi
jne 0x140078367
mov word [rbx], 0x5b1b
add rbx, 2
mov byte [rbx], 0x5a
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
cmp rsi, 0x20
jne 0x14007853a
cmp r15d, 2
jne 0x140078522
mov byte [rbx], 0
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
cmp r15d, 3
jne 0x1400785c6
mov byte [rbx], 0xa0
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
cmp rsi, 3
jne 0x140078367
cmp r15d, 2
jne 0x1400785a9
mov rcx, qword [0x14011fc88]
test rcx, rcx
je 0x140078189
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x30]
xor eax, eax
jmp 0x140078b72
lea rax, [rsi - 0xbd]
test rax, 0xfffffffffffffffd
je 0x14007859b
cmp rsi, 0xdf
je 0x14007858d
cmp rsi, 0xdc
jne 0x1400785c6
mov byte [rbx], 0x1c
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
mov byte [rbx], 0x1f
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
cmp r15d, 3
jne 0x1400785c6
cmp rsi, 0xde
jne 0x1400785c6
mov byte [rbx], 0x1e
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
lea rax, [rsi - 0xc]
cmp rax, 0x77
ja case.0x1400785ed.14
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x78cb4]
mov ecx, dword [rdx + rax*4 + 0x78bf0]
add rcx, rdx
jmp rcx
mov r14b, 0x30
jmp 0x1400787bb
mov r14b, 0x31
jmp 0x1400787bb
mov r14b, 0x32
jmp 0x1400787bb
mov r14b, 0x33
jmp 0x1400787bb
mov r14b, 0x34
jmp 0x1400787bb
mov r14b, 0x35
jmp 0x1400787bb
mov r14b, 0x36
jmp 0x1400787bb
mov r14b, 0x37
jmp 0x1400787bb
mov r14b, 0x38
jmp 0x1400787bb
mov r14b, 0x39
jmp 0x1400787bb
mov r14b, 0x2e
jmp 0x1400787bb
mov r14b, 0x2b
jmp 0x1400787bb
mov r14b, 0x2d
jmp 0x1400787bb
mov r14b, 0x2a
jmp 0x1400787bb
mov r14b, 0x2f
jmp 0x1400787bb
mov r14b, 0x47
jmp 0x1400787bb
mov edi, 2
jmp case.0x1400785ed.112
mov edi, 3
jmp case.0x1400785ed.112
mov edi, 4
jmp case.0x1400785ed.112
mov edi, 5
jmp case.0x1400785ed.112
mov edi, 6
jmp case.0x1400785ed.112
mov edi, 7
jmp case.0x1400785ed.112
mov edi, 8
jmp case.0x1400785ed.112
mov edi, 9
jmp case.0x1400785ed.112
mov edi, 0xa
jmp case.0x1400785ed.112
mov edi, 0xb
jmp case.0x1400785ed.112
mov edi, 0xc
jmp case.0x1400785ed.112
mov edi, 0xd
jmp case.0x1400785ed.112
mov edi, 0xe
jmp case.0x1400785ed.112
mov edi, 0xf
jmp case.0x1400785ed.112
mov edi, 0x10
jmp case.0x1400785ed.112
mov edi, 0x11
jmp case.0x1400785ed.112
mov edi, 0x12
jmp case.0x1400785ed.112
mov edi, 0x13
jmp case.0x1400785ed.112
mov edi, 0x14
mov eax, r15d
mov r8d, edi
shr eax, 1
and r15b, 1
movzx r9d, r15b
mov byte [rsp + 0x20], al
mov rdx, r10
mov rcx, rbx
call fcn.1400604a0
sub ebx, r14d
add eax, ebx
jmp 0x140078b72
mov r8d, r12d
jmp 0x140078743
mov r8d, edi
jmp 0x140078743
mov r8d, 2
jmp 0x140078743
mov r8d, 3
jmp 0x140078743
mov r8d, 4
jmp 0x140078743
mov r8d, 5
test r15b, 2
jne case.0x1400785ed.14
mov rdx, r10
mov rcx, rbx
call fcn.140060860
sub ebx, r14d
add eax, ebx
jmp 0x140078b72
mov r8d, 0x41
jmp 0x140078788
mov r8d, 0x42
jmp 0x140078788
mov r8d, 0x43
jmp 0x140078788
mov r8d, 0x44
jmp 0x140078788
mov r8d, 0x47
shr r15d, 1
mov rdx, r10
movzx r9d, r15b
mov rcx, rbx
call fcn.140060420
sub ebx, r14d
add eax, ebx
jmp 0x140078b72
mov rax, qword [rsp + 0x58]
shr rax, 0x10
bt ax, 8
jae 0x140078857
mov r14b, 0xd
test r8b, r8b
je 0x140078822
lea eax, [r14 - 0x30]
cmp al, 9
ja 0x1400787dd
mov eax, dword [0x140120ff0]
lea edx, [rax + rax*4]
movsx eax, r14b
lea edx, [rdx - 0x18]
lea edx, [rax + rdx*2]
jmp 0x1400787e0
mov edx, r12d
mov dword [0x140120ff0], edx
cmp byte [rbp - 0x7c], 0
mov byte [rsp + 0x44], 0
je 0x140078893
mov rcx, qword [0x1401207c8]
mov edx, 0xa7
call fcn.140003460
movzx r14d, byte [rsp + 0x40]
test al, al
je 0x140078899
test r14b, r14b
mov byte [rbp - 0x7c], 0
sete byte [rsp + 0x44]
jmp 0x140078899
mov eax, r15d
movzx r9d, r15b
shr eax, 1
and r9b, dil
movzx r8d, r14b
mov byte [rsp + 0x20], al
mov rdx, r10
mov rcx, rbx
call fcn.1400605b0
test eax, eax
jne 0x140078879
cmp r14b, 0xd
jne case.0x1400785ed.14
mov r10, qword [0x1401207d0]
mov r14, qword [rsp + 0x60]
test r15d, r15d
jne 0x140078884
cmp byte [r10 + 0x18d], r15b
je 0x140078884
mov byte [rbx], 0xd
inc rbx
mov byte [rbx], 0xa
sub ebx, r14d
lea eax, [rbx + 1]
jmp 0x140078b72
sub ebx, dword [rsp + 0x60]
add eax, ebx
jmp 0x140078b72
mov word [rbx], 0xd
mov eax, 0xfffffffe
jmp 0x140078b72
movzx r14d, byte [rsp + 0x40]
cmp dword [0x140123468], 2
jne 0x1400788fc
mov rax, qword [0x140120fe8]
test rax, rax
je 0x1400788fc
mov rcx, qword [rsp + 0x68]
lea r15, [0x140120ff4]
mov edx, dword [rsp + 0x50]
lea r8, [rsp + 0x70]
mov qword [rsp + 0x30], rcx
mov r9, r15
mov dword [rsp + 0x28], r12d
mov ecx, esi
mov dword [rsp + 0x20], 3
call rax
mov ebx, eax
test eax, eax
jg 0x140078972
test r14b, r14b
jne 0x140078b11
mov word [0x140120ff4], r12w
jmp 0x140078b50
mov rcx, qword [rsp + 0x68]
lea r15, [0x140121008]
mov edx, dword [rsp + 0x50]
lea r8, [rsp + 0x70]
mov qword [rsp + 0x28], rcx
mov r9, r15
mov ecx, esi
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_ToAsciiEx]
movsxd rbx, eax
test eax, eax
jle 0x1400788e6
lea r8, [0x140121010]
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [r15 + rcx*2]
mov byte [rcx + r8], al
inc rcx
cmp rcx, rbx
jl 0x140078940
lea r15, [0x140120ff4]
mov dword [rsp + 0x28], 3
mov r9d, ebx
mov qword [rsp + 0x20], r15
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rsi, ebx
test ebx, ebx
jle 0x140078af6
mov rbx, r12
mov edx, 0x80
cmp dword [0x140120fa0], 2
mov eax, 0x1b
movzx ecx, word [r15 + rbx*2]
mov word [rsp + 0x48], cx
jne 0x1400789bb
lea eax, [rcx - 0x20]
cmp ax, 0x5f
ja 0x140078a08
mov dword [0x140120ffc], ecx
mov dword [0x140120fa0], 3
jmp 0x140078aea
cmp dword [0x140120fa0], 3
jne 0x140078a0d
lea eax, [rcx - 0x20]
cmp ax, 0x5f
ja 0x140078a08
mov edx, ecx
mov dword [0x140120fa0], r12d
mov ecx, dword [0x140120ffc]
call fcn.140089ff0
cmp eax, 0xffffffff
je 0x140078b02
mov rcx, qword [0x1401207d0]
lea rdx, [rsp + 0x40]
mov r8d, edi
mov word [rsp + 0x40], ax
call fcn.140065150
jmp 0x140078ae5
mov eax, 0x1b
mov dword [0x140120fa0], r12d
test r13b, r13b
jne 0x140078a82
mov edx, dword [0x140120ff0]
mov rcx, qword [0x1401207d0]
test edx, edx
je 0x140078a78
call fcn.14007dbb0
test al, al
jne 0x140078a5d
cmp byte [0x14011fc98], al
jne 0x140078a5d
mov byte [rsp + 0x45], dl
lea r8, [rsp + 0x45]
mov edx, 0xffffffff
mov r9d, edi
call fcn.140065010
mov dword [0x140120ff0], r12d
jmp 0x140078ade
mov word [rsp + 0x40], dx
mov r8d, edi
lea rdx, [rsp + 0x40]
call fcn.140065150
mov dword [0x140120ff0], r12d
jmp 0x140078ade
mov r8d, edi
lea rdx, [rsp + 0x48]
jmp 0x140078ad9
cmp byte [rsp + 0x44], 0
je 0x140078aa4
cmp cx, dx
jae 0x140078aa4
mov word [rsp + 0x50], ax
call fcn.14008ae20
mov word [rsp + 0x52], ax
lea rdx, [rsp + 0x50]
jmp 0x140078ab3
mov word [rsp + 0x4c], ax
lea rdx, [rsp + 0x4c]
mov word [rsp + 0x4e], cx
test r14b, r14b
mov r8d, r12d
mov ecx, 2
mov rax, r12
setne r8b
inc r8d
test r14b, r14b
cmove rax, rcx
mov rcx, qword [0x1401207d0]
add rdx, rax
call fcn.140065150
xor ecx, ecx
call fcn.14007f1f0
mov edx, 0x80
inc rbx
cmp rbx, rsi
jl 0x140078985
mov word [0x140120ff4], r12w
xor eax, eax
jmp 0x140078b72
mov ecx, 0x10
call qword [sym.imp.USER32.dll_MessageBeep]
xor eax, eax
jmp 0x140078b72
cmp word [0x140120ff4], 0
je 0x140078b50
mov rax, qword [0x1401207d0]
cmp byte [rax + 0x109], 0
jne 0x140078b44
mov rax, qword [rax + 0x10d0]
cmp dword [rax + 0x10], 0xfde9
je 0x140078b44
cmp byte [0x14011fc98], 0
je 0x140078b50
mov eax, 0xa
mov word [0x140120ff4], ax
cmp rsi, 0x12
jne 0x140078b6d
mov rcx, qword [0x1401207c8]
lea edx, [rsi + 0x49]
call fcn.140003460
test al, al
je 0x140078189
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.14008ce70
mov rbx, qword [rsp + 0x1c0]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret