Function at 0x140001370
Capabilities:
Manipulate console buffer

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x140007040]
xor rax, rsp
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor ebp, ebp
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], rbp
mov ecx, 0x40
call fcn.1400026e0
mov rdx, rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], 0x35
mov qword [rsp + 0x58], 0x3f
movups xmm0, xmmword [str.____________DLL_Injector_Made_By_IOCTL]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140004508]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140004518]
movups xmmword [rax + 0x20], xmm0
mov ecx, dword [0x140004528]
mov dword [rax + 0x30], ecx
movzx eax, byte [0x14000452c]
mov byte [rdx + 0x34], al
mov byte [rdx + 0x35], bpl
mov dword [rsp + 0x28], 0xa000c
mov dword [rsp + 0x2c], 0xf0009
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r15, rax
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov ebx, dword [rsp + 0x64]
mov dword [rsp + 0x30], ebx
mov word [rsp + 0x22], bp
mov r14d, ebp
movabs rsi, 0x7fffffffffffffff
movabs rbx, 0xb2f4fc0794908cf3
movabs r12, 0x4e94914f0000
movabs r13, 0x431bde82d7b634db
mov word [rsp + 0x20], bp
mov edx, dword [rsp + 0x20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov rax, r14
and eax, 3
movzx edi, word [rsp + rax*2 + 0x28]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movzx edx, di
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002300
lea rcx, [rsp + 0x38]
call fcn.140001290
mov rax, qword [rsp + 0x38]
movabs rcx, 0x7ffffffffd050f7f
cmp rax, rcx
jge 0x1400014f0
lea rsi, [rax + 0x2faf080]
nop dword [rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rdi, 0x989680
jne 0x140001511
imul rax, rcx, 0x64
jmp 0x140001580
cmp rdi, 0x16e3600
jne 0x140001565
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x140001580
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rsi
jge 0x1400015ce
mov rcx, rsi
sub rcx, rax
cmp rcx, r12
jl 0x14000159f
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x1400014f0
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x1400015c2
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1400014f0
inc ebp
inc r14
cmp ebp, 0x50
movabs rsi, 0x7fffffffffffffff
jl 0x140001471
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, dword [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000164d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001648
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001648
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000271c
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.1400026c0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret