Function at 0x140002d50
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140288040]
xor rax, rsp
mov qword [rbp + 0x140], rax
movabs rdx, 0x6599d925f3c092d2
movabs r14, 0x5e453057340fbd78
movabs r15, 0x1d687d324266fb23
movabs r12, 0xa4a0736791d5f638
movabs r13, 0xd6ffd5584f2a6155
cmp byte [0x140293b80], 0
jne 0x140002fee
movabs rsi, 0x7d0f5a2bc749a9ac
movabs rbx, 0x7ffffffed5fa0dff
movabs rdi, 0x12a05f200
movabs r8, 0xc1f3533ae5b49350
movabs r9, 0xf698bb3127491334
movabs r10, 0xefb063d3b2fdb4
movabs r11, 0x991080c62360cd0a
nop word [rax + rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x991080c62360ec67
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xc0]
vxorps xmm0, xmm0, xmmword [rbp + 0x120]
vmovdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [rbp + 0xa0]
vzeroupper
call fcn.140004d40
lea rdx, [0x140004f20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140293b00]
call fcn.140022440
cmp byte [0x140293b80], 0
jne 0x140002fe4
lea rcx, [rbp + 0x20]
call fcn.140001c80
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x10], rax
cmp rax, rbx
je 0x140002f8e
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x140002f8e
lea rcx, [rax + rdi]
mov qword [rbp + 0x10], rcx
jmp 0x140002f9c
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.140005be0
cmp byte [0x140293b80], 0
movabs rdx, 0x6599d925f3c092d2
movabs r8, 0xc1f3533ae5b49350
movabs r9, 0xf698bb3127491334
movabs r10, 0xefb063d3b2fdb4
movabs r11, 0x991080c62360cd0a
je 0x140002e30
movabs rdx, 0x6599d925f3c092d2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xcbed533ae5b49350
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xb38cb41a2a461431
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x6599d9258bf0b2e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rdx, [rbp + 0x80]
vzeroupper
call fcn.140004d40
lea rdx, [0x140001a40]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [0x140293bd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140004f20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, dword [0x140293bc8]
call fcn.14007b810
call fcn.14007b9e0
mov ecx, 1
call fcn.14007ee30
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
xor r14d, r14d
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140006090]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x140003c28
cmp dword [rbp + 0x88], r14d
je 0x140003c1c
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xe0], xmm0
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003c1c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov ecx, 1
call fcn.14007ee30
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400060c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x140003c09
cmp dword [rbp + 0x88], r14d
je 0x140003bfd
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xe0], xmm0
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003bfd
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov ecx, 1
call fcn.14007ee30
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400060f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x140003bea
cmp dword [rbp + 0x88], r14d
je 0x140003bde
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xe0], xmm0
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003bde
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov ecx, 1
call fcn.14007ee30
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140006120]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x140003bcb
cmp dword [rbp + 0x88], r14d
je 0x140003bbf
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xe0], xmm0
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003bbf
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
cmp byte [0x1402935b3], al
je 0x140003b6e
xor eax, eax
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], rax
mov rsi, qword [0x140293698]
mov rdi, qword [0x140293638]
mov dword [rbp + 0x118], 1
mov byte [rbp + 0x11c], 1
mov rax, qword [0x140293690]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x110], rdi
mov rbx, qword [0x140293628]
mov ecx, 0x61c8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r8, qword [0x140293628]
test r8, r8
je 0x1400033d5
mov r10d, dword [r8 + 0x3f90]
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x1400033ca
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [r8 + 0x607c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r14d
inc word [rdx + 4]
inc dword [r8 + 0x6070]
mov qword [rbp + 0xe0], r9
lea rax, [rbp + 8]
mov qword [rbp], rax
mov qword [rbp + 0x20], r9
test r9, r9
je 0x1400033f9
xor edx, edx
mov rcx, r9
call fcn.14002f710
jmp 0x1400033fc
mov rax, r14
mov qword [0x140293628], rax
call fcn.140033e60
test rbx, rbx
je 0x140003414
mov qword [0x140293628], rbx
mov rcx, qword [rbp + 0x100]
call fcn.140060c80
mov rdx, rsi
mov rcx, rdi
call fcn.140060ac0
nop
mov rax, qword [0x140293628]
mov dword [rax + 0x3900], 0x40e00000
mov dword [rax + 0x3904], 0x3f800000
mov qword [rax + 0x38f8], r14
mov dword [rax + 0x39d4], r14d
mov qword [rax + 0x3964], 0x40400000
mov dword [rax + 0x3924], 0x40a00000
xorps xmm0, xmm0
movups xmmword [rax + 0x3ac0], xmm0
xorps xmm1, xmm1
movups xmmword [rax + 0x3b90], xmm1
movups xmmword [rax + 0x3bb0], xmm0
movups xmmword [rax + 0x3ba0], xmm1
movups xmmword [rax + 0x3bc0], xmm0
movups xmmword [rax + 0x3be0], xmm1
movups xmmword [rax + 0x3bd0], xmm0
movdqa xmm1, xmmword [0x14027ac30]
movups xmmword [rax + 0x3a20], xmm1
movdqa xmm0, xmmword [0x14027ad40]
movups xmmword [rax + 0x3ad0], xmm0
movups xmmword [rax + 0x3af0], xmm0
movups xmmword [rax + 0x3ae0], xmm0
movups xmmword [rax + 0x3a00], xmm1
movdqa xmm0, xmmword [0x14027ac60]
movups xmmword [rax + 0x3a30], xmm0
mov rcx, qword [rbp + 0x110]
call fcn.1400741f0
lea rcx, [0x140293f18]
call fcn.140007950
lea rax, [0x140084be8]
mov qword [rbp + 0x28], rax
lea rax, [0x14007b1a0]
mov qword [rbp + 0x30], rax
movzx eax, byte [rbp + 0x88]
mov byte [rbp + 0x38], al
movzx eax, byte [rbp + 0x89]
mov byte [rbp + 0x39], al
movzx eax, byte [rbp + 0x8a]
mov byte [rbp + 0x3a], al
movzx eax, byte [rbp + 0x8b]
mov byte [rbp + 0x3b], al
lea rax, [rbp + 0x100]
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x28]
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0x28]
mov qword [rbp + 0xe0], rax
lea rdx, [rbp + 0x28]
call fcn.14007c3d0
nop
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x14000357a
mov rax, qword [rcx]
lea rdx, [rbp + 0x28]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movdqa xmm9, xmmword [0x14027ac50]
movdqa xmm10, xmmword [0x14027ad90]
movss xmm6, dword [0x14027a73c]
movss xmm7, dword [0x14027a7e4]
movss xmm8, dword [0x14027a778]
nop dword [rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x140293690]
lea rcx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140003600
lea rcx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rcx, qword [0x140293628]
movzx eax, byte [rbp + 0x11c]
mov byte [rcx + 0x58], al
lea rcx, [0x140293b00]
call fcn.140027690
call fcn.14002a0a0
mov r8d, dword [rbp + 0x120]
mov r9d, dword [rbp + 0x124]
test r9d, r9d
jne 0x14000363e
test r8d, r8d
je 0x1400036c4
mov rcx, qword [0x1402936c0]
test rcx, rcx
je 0x140003665
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1402936c0], r14
mov r9d, dword [rbp + 0x124]
mov r8d, dword [rbp + 0x120]
mov rcx, qword [0x1402936a8]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
xor edx, edx
call qword [rax + 0x68]
mov qword [rbp + 0x120], r14
mov rcx, qword [0x1402936a8]
mov rax, qword [rcx]
lea r9, [rbp + 0x68]
lea r8, [0x14027a6b8]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x140293638]
mov rax, qword [rcx]
lea r9, [0x1402936c0]
xor r8d, r8d
mov rdx, qword [rbp + 0x68]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ecx, dword [0x140292610]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000373b
cmp byte [0x140293ad0], 0
jne 0x140003742
mov byte [0x140293ad0], 1
cmp byte [rbp + 0x11c], 0
sete al
mov byte [rbp + 0x11c], al
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x100]
test al, al
je 0x140003720
mov r8d, 0x80000a8
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x140003742
mov r8d, 0x80800a8
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [rbp + 0x108]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x140003742
mov byte [0x140293ad0], 0
lea rdx, [rbp + 0x80]
mov rcx, qword [0x1402936a0]
call qword [sym.imp.USER32.dll_GetClientRect]
mov r9d, 2
lea r8, [rbp + 0x80]
xor edx, edx
mov rcx, qword [0x1402936a0]
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [rbp + 0x8c]
mov r8d, dword [rbp + 0x84]
sub eax, r8d
mov r9d, dword [rbp + 0x88]
mov edx, dword [rbp + 0x80]
sub r9d, edx
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], eax
mov rcx, qword [0x140293690]
call qword [sym.imp.USER32.dll_MoveWindow]
movzx eax, byte [0x140292614]
cmp al, byte [0x140293590]
je 0x14000387e
mov byte [0x140293590], al
neg al
sbb edi, edi
and edi, 0x11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140003854
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140003854
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
add r8, r10
mov edx, 0x3a1d6b70
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14000384f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140003830
cmp edx, 0x1b298162
je 0x140003859
test r9d, r9d
jne 0x140003810
mov rax, qword [rax]
jmp 0x1400037e0
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [r8 + rcx*4]
add rax, r10
mov edx, edi
mov rcx, qword [0x140293690]
call rax
mov rax, qword [0x140293628]
test rax, rax
je 0x140003893
mov rcx, qword [rax + 0x98]
jmp 0x140003896
mov rcx, r14
cmp qword [rcx + 0x48], 0
jne 0x1400038a2
call fcn.140060460
call fcn.140061690
call fcn.140036730
mov rax, qword [0x140293628]
cmp byte [0x1402925e4], 0
je 0x140003977
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140035d90
mov rbx, rax
movups xmmword [rbp + 0x10], xmm10
lea rcx, [rbp + 0x10]
call fcn.140031cf0
mov edi, eax
movd xmm2, dword [0x140292514]
cvtdq2ps xmm2, xmm2
mov rax, qword [0x140293628]
movss xmm1, dword [rax + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm1
test edi, 0xff000000
je 0x140003977
comiss xmm6, xmm2
ja 0x140003977
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
lea rdx, [rbp + 0x20]
mov rcx, rbx
call fcn.1400564a0
movss dword [rsp + 0x28], xmm8
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140054ab0
mov dword [rbx + 0x78], r14d
mov rax, qword [0x140293628]
cmp byte [0x1402925e5], 0
je 0x140003a33
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140035d90
mov rbx, rax
movups xmmword [rbp + 0x10], xmm9
lea rcx, [rbp + 0x10]
call fcn.140031cf0
mov edi, eax
movd xmm2, dword [0x140292538]
cvtdq2ps xmm2, xmm2
mov rcx, qword [0x140293628]
movss xmm1, dword [rcx + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm6
movss dword [rbp], xmm0
movss dword [rbp + 4], xmm1
test eax, 0xff000000
je 0x140003a33
comiss xmm6, xmm2
ja 0x140003a33
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
lea rdx, [rbp]
mov rcx, rbx
call fcn.1400564a0
movss dword [rsp + 0x28], xmm8
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140054ab0
mov dword [rbx + 0x78], r14d
cmp byte [0x1402925cc], 0
je 0x140003a41
call fcn.1400206f0
cmp byte [0x140292550], 0
je 0x140003a4f
call fcn.14001e060
lea rcx, [rbp + 0x100]
call fcn.14007a460
call fcn.140038330
call fcn.140038750
mov rcx, qword [0x140293698]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1402936c0]
mov edx, 1
call qword [rax + 0x108]
mov rcx, qword [0x140293698]
mov rax, qword [rcx]
lea r8, [0x140293ae8]
mov rdx, qword [0x1402936c0]
call qword [rax + 0x190]
mov rax, qword [0x140293628]
mov rax, qword [rax + 0x4b00]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r14
cmp byte [rcx], r14b
cmovne rax, rcx
mov rcx, rax
call fcn.14005f9f0
mov rcx, qword [0x1402936a8]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
cmp byte [0x140292608], 0
jne 0x140003bb7
movsxd rbx, dword [0x140292618]
lea rcx, [rbp + 0xe0]
call fcn.140001c80
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x10], rax
test rbx, rbx
je 0x140003b52
js 0x140003b52
imul rdx, rbx, 0xf4240
imul r8, rbx, 0xf4240
movabs r9, 0x7fffffffffffffff
mov rcx, r9
sub rcx, r8
cmp rax, rcx
je 0x140003b4e
mov ecx, 0xff
mov r8d, 1
cmovl r8d, ecx
test r8b, r8b
jns 0x140003b4e
lea rcx, [rax + rdx]
mov qword [rbp + 0x10], rcx
jmp 0x140003b52
mov qword [rbp + 0x10], r9
lea rcx, [rbp + 0x10]
call fcn.140005be0
cmp dword [rbp + 0xa8], 0x12
jne 0x1400035c0
call fcn.14007b1f0
nop
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.14007ee10
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14007b1f0
nop
jmp 0x140003b6e
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x88], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x88], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x88], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x88], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3