Function at 0x14004ed20
Capabilities:
Capture webcam image
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xc0
mov rax, qword [0x140121c38]
xor rax, rsp
mov qword [rbp + 7], rax
mov eax, dword [rbp + 0x7f]
mov r14, r9
mov rdi, qword [rbp + 0x77]
mov esi, r8d
mov r13, qword [rbp + 0x6f]
mov rbx, rcx
mov r15d, 1
test eax, eax
je 0x14004f47c
sub eax, r15d
je 0x14004f07f
cmp eax, 2
jne 0x14004ef77
cmp r8d, 0x200
jne 0x14004eee6
call qword [sym.imp.USER32.dll_GetMessagePos]
mov ecx, eax
xor r12d, r12d
cwde
mov r14d, r12d
shr ecx, 0x10
mov dword [rbp - 0x69], eax
movsx eax, cx
mov dword [rbp - 0x65], eax
test byte [rbx + 0xf0], r15b
je 0x14004eec2
mov rcx, qword [rbp - 0x69]
mov rsi, qword [rbx + 8]
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, rsi
jne 0x14004eed0
lea rdx, [rbp - 0x69]
mov rcx, rsi
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x69]
xor r8d, r8d
mov edx, 0x445
call qword [sym.imp.USER32.dll_SendMessageW]
mov rsi, rax
mov eax, dword [0x140121c20]
cmp dword [rbp - 0x69], eax
jne 0x14004ee0a
mov eax, dword [0x140121c24]
cmp dword [rbp - 0x65], eax
je 0x14004eed0
test esi, esi
js 0x14004eed0
mov rcx, qword [rbx + 0x78]
call qword [sym.imp.USER32.dll_GetMenuItemCount]
cmp esi, eax
jge 0x14004eed0
mov eax, dword [rbx + 0xf4]
cmp esi, eax
je 0x14004eed0
cmp eax, 0xffffffff
je 0x14004eed0
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x59]
xorps xmm0, xmm0
movsxd r8, esi
mov edx, 0x417
movups xmmword [rbp - 0x59], xmm0
movups xmmword [rbp - 0x49], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
test byte [rbp - 0x51], 4
je 0x14004eed0
or esi, 0xffff0000
mov dword [rbx + 0xf8], esi
movsxd rcx, dword [rbx + 0x18]
lea eax, [rcx - 1]
test eax, eax
jns 0x14004ee7e
mov rbx, r12
jmp 0x14004ee87
mov rax, qword [rbx + 0x10]
mov rbx, qword [rax + rcx*8 - 8]
movzx r9d, word [rbp - 0x65]
xor r8d, r8d
movzx eax, word [rbp - 0x69]
mov edx, 0x202
shl r9d, 0x10
mov rcx, rbx
or r9, rax
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, 0x100
mov rcx, rbx
lea r8d, [r9 + 0x1b]
call qword [sym.imp.USER32.dll_PostMessageW]
mov r14d, r15d
jmp 0x14004eed0
mov rcx, qword [rbx + 8]
lea rdx, [rbp - 0x69]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [rbp - 0x69]
test r14d, r14d
mov qword [0x140121c20], rax
mov qword [rdi], r12
jmp 0x14004f996
cmp esi, 0x104
jne 0x14004efcc
cmp r14, 0x12
jne 0x14004ef24
cmp byte [rcx + 0xf0], 0
jge 0x14004ef2a
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x14004ef2a
test cl, 8
je 0x14004ef2a
movzx edx, r15b
mov rcx, rbx
call fcn.140054a40
jmp 0x14004ef2a
cmp r14, 0x20
je 0x14004efa0
test byte [rbx + 0xf0], r15b
jne 0x14004efc3
mov rsi, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rsi
jne 0x14004efc3
and byte [rbx + 0xf1], 0xf7
xor r9d, r9d
mov edx, 0x448
mov rcx, rsi
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, rbx
call fcn.14004b170
or byte [rbx + 0xf0], 0x40
xor r12d, r12d
mov qword [rdi], r12
xor eax, eax
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140056c90
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 6
jne 0x14004efc3
or cl, 8
xor edx, edx
mov byte [rbx + 0xf1], cl
mov rcx, rbx
call fcn.140054a40
mov dword [rbx + 0x118], r14d
jmp 0x14004ef71
cmp esi, 0x105
jne 0x14004efe9
movzx eax, byte [rcx + 0xf1]
test al, 8
jne 0x14004ef71
or al, 8
mov byte [rcx + 0xf1], al
jmp 0x14004ef71
cmp esi, 0x106
jne 0x14004f024
test byte [rcx + 0xf0], r15b
jne 0x14004ef71
mov rax, qword [rcx + 8]
cmp qword [rcx + 0x30], rax
je 0x14004ef71
cmp r14, 0x20
je 0x14004ef71
xor r12d, r12d
mov eax, r15d
mov qword [rdi], r12
jmp 0x14004ef79
cmp esi, 0x100
jne 0x14004f04f
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, esi
call fcn.14004c800
cmp dword [rbp - 0x69], 0
jmp 0x14004f993
cmp esi, 0x213
je 0x14004f445
cmp esi, 0x102
jne 0x14004ef77
xor r12d, r12d
mov qword [rdi], r12
cmp r14, 0x1b
jne 0x14004ef77
mov eax, r15d
jmp 0x14004ef79
xor r12d, r12d
cmp esi, 0x4e
jne 0x14004f1d4
cmp dword [r13 + 0x10], 0xfffffd37
jne 0x14004f140
mov rax, qword [rcx + 8]
cmp qword [r13], rax
jne 0x14004f13d
test byte [rcx + 0x98], 8
mov byte [rbp - 0x71], r12b
jne 0x14004f0d4
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
lea rdx, [rbp - 0x69]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [rbp - 0x69]
setne byte [rbp - 0x71]
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x14004f0eb
cmp byte [rbp - 0x71], r12b
je 0x14004f0f5
test byte [r13 + 0x20], r15b
jne 0x14004f50a
mov eax, dword [r13 + 0x20]
test al, 0x85
jne 0x14004f13d
test al, 0x10
je 0x14004f11e
mov r9, qword [rbx + 0x78]
xor r8d, r8d
mov rcx, qword [rbx + 0xa0]
mov edx, 0x11f
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [r13 + 0x20]
test al, 0x20
je 0x14004f13d
mov rcx, qword [rbx + 0xa0]
xor r9d, r9d
mov edx, 0x11f
mov r8d, 0xffff0000
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi], r12
cmp dword [r13 + 0x10], 0xfffffd3a
jne 0x14004f203
mov rax, qword [rbx + 8]
cmp qword [r13], rax
je 0x14004f160
mov qword [rdi], r15
jmp 0x14004f203
mov rsi, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rsi
je 0x14004f19f
test byte [rbx + 0x98], 4
je 0x14004f192
cmp qword [rbx + 0x120], r12
jne 0x14004f192
call qword [sym.imp.USER32.dll_GetFocus]
mov rsi, qword [rbx + 8]
mov qword [rbx + 0x120], rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetFocus]
mov rsi, qword [rbx + 8]
mov r8d, dword [r13 + 0x18]
xor r9d, r9d
mov edx, 0x419
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
and byte [rbx + 0xf0], 0xcf
movzx r8d, r15b
mov edx, eax
mov rcx, rbx
call fcn.140047cb0
mov rax, r15
mov qword [rdi], r12
jmp 0x14004ef79
cmp esi, 0x117
jne 0x14004f203
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, esi
call fcn.14004cbc0
mov qword [rdi], rax
cmp dword [rbp - 0x69], r12d
jne 0x14004f99c
call fcn.14004a9e0
cmp esi, eax
je 0x14004f5e8
cmp esi, 0x112
jne 0x14004f2dc
mov eax, dword [rbx + 0x118]
mov esi, r12d
cmp eax, 0x12
je 0x14004f249
cmp eax, 0x79
jne 0x14004f23c
lea ecx, [rax - 0x69]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, al
jns 0x14004f249
cmp dword [rbx + 0x118], 0x20
jne 0x14004f2cb
cmp r14, 0xf100
jne 0x14004f2cb
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [rbx + 8]
jne 0x14004f28d
mov rcx, rbx
call fcn.14004b170
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_PostMessageW]
and byte [rbx + 0xf0], 0xbf
test esi, esi
mov qword [rdi], r12
jmp 0x14004f996
cmp dword [rbx + 0x118], 0x20
je 0x14004f2cb
test byte [rbx + 0xf0], 0x40
jne 0x14004f2c8
movzx ecx, byte [rbx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x14004f2c0
test cl, 8
je 0x14004f2c0
movzx edx, r15b
mov rcx, rbx
call fcn.140054a40
mov rcx, rbx
call fcn.140054c60
mov esi, r15d
and byte [rbx + 0xf0], 0xbf
test esi, esi
mov qword [rdi], r12
jmp 0x14004f996
cmp esi, 0x52e
je 0x14004f8f1
cmp esi, 0x120
jne 0x14004f315
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, 0x120
mov rcx, rbx
call fcn.14004d4d0
jmp 0x14004f98f
cmp esi, 0x52f
je 0x14004f908
cmp esi, 0x52d
je 0x14004f937
cmp esi, 0x1a
jne 0x14004f35e
cmp r14, 0x2a
je 0x14004f34e
cmp r14, 0x100b
je 0x14004f34e
cmp r14, 0x1023
jne 0x14004f445
mov rcx, rbx
call fcn.14004ad20
mov qword [rdi], r15
jmp 0x14004ef77
cmp esi, 0x2b
jne 0x14004f3ef
mov rsi, qword [r13 + 0x38]
cmp dword [r13], r15d
jne 0x14004f445
test rsi, rsi
je 0x14004f445
xorps xmm0, xmm0
lea rdx, [rbp - 0x39]
mov r8d, 0x30
mov rcx, rsi
movups xmmword [rbp - 0x39], xmm0
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp - 0x19], xmm0
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp qword [rbp - 0x39], r12
je 0x14004f445
test byte [rbp - 0x15], 6
je 0x14004f445
cmp dword [rsi], 0x1313
jne 0x14004f445
mov rdx, r13
mov rcx, rbx
test byte [rbx + 0xf1], r15b
je 0x14004f3df
call fcn.140049ac0
mov eax, r15d
mov qword [rdi], r15
jmp 0x14004ef79
call fcn.1400490e0
mov eax, r15d
mov qword [rdi], r15
jmp 0x14004ef79
cmp esi, 0x2c
je 0x14004f96f
cmp esi, 6
jne 0x14004f44d
movzx eax, byte [rbx + 0xf0]
neg r14w
sbb cl, cl
and al, 0x7f
and cl, 0x80
or cl, al
mov byte [rbx + 0xf0], cl
jl 0x14004f42c
movzx eax, byte [rbx + 0xf1]
and al, sil
cmp al, sil
je 0x14004f67e
mov rcx, qword [rbx + 8]
mov r8d, r15d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rdi], r15
jmp 0x14004ef77
cmp esi, 0x4e
jne 0x14004ef77
cmp dword [r13 + 0x10], 0xfffffff4
jne 0x14004ef77
lea r9, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r8, r13
mov edx, r14d
mov rcx, rbx
call fcn.14004dd20
jmp 0x14004f98f
cmp esi, r15d
jne 0x14004f4a3
lea rax, [rbp - 0x69]
mov r9, r13
mov r8, r14
mov qword [rsp + 0x20], rax
mov edx, r15d
call fcn.14004bec0
mov qword [rdi], rax
mov eax, r15d
jmp 0x14004ef79
cmp esi, 2
jne 0x14004f4c9
lea rax, [rbp - 0x69]
mov r9, r13
mov r8, r14
mov qword [rsp + 0x20], rax
mov edx, esi
call fcn.14004c190
mov qword [rdi], rax
mov rax, r15
jmp 0x14004ef79
xor r12d, r12d
cmp esi, 0x14
jne 0x14004f51d
test byte [rcx + 0xf0], 2
jne 0x14004f515
test byte [rcx + 0x98], r15b
jne 0x14004f515
mov rcx, qword [rcx + 8]
lea rdx, [rbp - 0x69]
xorps xmm0, xmm0
movups xmmword [rbp - 0x69], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
lea r8d, [r12 + 5]
mov rcx, r14
lea rdx, [rbp - 0x69]
call qword [sym.imp.USER32.dll_FillRect]
mov qword [rdi], r15
mov eax, r15d
jmp 0x14004ef79
mov qword [rdi], r12
jmp 0x14004f5bd
cmp esi, 0x116
jne 0x14004f55b
mov rcx, qword [rcx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, qword [rbx + 0x78]
lea edx, [rsi + 9]
mov rcx, qword [rbx + 8]
movzx r8d, ax
or r8, 0x900000
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi], r15
jmp 0x14004f5bd
cmp esi, 0x117
jne 0x14004f58e
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, esi
call fcn.14004cbc0
mov qword [rdi], rax
cmp dword [rbp - 0x69], r12d
je 0x14004f5bd
mov eax, r15d
jmp 0x14004ef79
cmp esi, 0x11f
jne 0x14004f5bd
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, esi
call fcn.14004d890
mov qword [rdi], rax
cmp dword [rbp - 0x69], r12d
jne 0x14004f99c
call fcn.14004a980
cmp esi, eax
jne 0x14004f5df
xor r8d, r8d
mov edx, r14d
mov rcx, rbx
call fcn.140047cb0
mov eax, r15d
mov qword [rdi], r12
jmp 0x14004ef79
call fcn.14004a9e0
cmp esi, eax
jne 0x14004f628
test r14, r14
je 0x14004f5f6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [r14], eax
mov rcx, qword [rbx + 8]
lea rsi, [rbx + 8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x14004f61a
test rbx, rbx
mov eax, r15d
cmove rsi, r12
mov qword [rdi], rsi
jmp 0x14004ef79
mov rsi, r12
mov qword [rdi], r12
mov eax, r15d
jmp 0x14004ef79
cmp esi, 0x1a
jne 0x14004f65c
cmp r14, 0x2a
je 0x14004f649
cmp r14, 0x100b
je 0x14004f649
cmp r14, 0x1023
jne 0x14004f8cf
mov rcx, rbx
call fcn.14004ad20
mov eax, r15d
mov qword [rdi], r12
jmp 0x14004ef79
cmp esi, 0x120
je 0x14004f2f0
cmp esi, 8
jne 0x14004f690
movzx eax, byte [rbx + 0xf1]
and al, 6
cmp al, 6
jne 0x14004f445
xor edx, edx
mov rcx, rbx
call fcn.140054a40
mov qword [rdi], r15
jmp 0x14004ef77
cmp esi, 0x100
jne 0x14004f772
movzx edx, byte [rbx + 0xf0]
mov ecx, r12d
mov dword [rbp - 0x69], ecx
test dl, 2
jne 0x14004f445
cmp r14, 0x20
jne 0x14004f6de
mov rcx, qword [rbx + 0xa0]
lea edx, [rsi + 4]
bts r13, 0x1d
mov r8, r14
mov r9, r13
call qword [sym.imp.USER32.dll_PostMessageW]
mov eax, r15d
mov qword [rdi], r12
jmp 0x14004ef79
lea rax, [r14 - 0x25]
test rax, 0xfffffffffffffffd
jne 0x14004f768
movzx esi, byte [rbx + 0xf1]
shr rsi, 5
not rsi
and esi, 2
or rsi, 0x25
test r15b, dl
jne 0x14004f768
mov rcx, qword [rbx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
mov edx, eax
cmp r14, rsi
jne 0x14004f72a
call fcn.14004aaf0
jmp 0x14004f72f
call fcn.14004ac20
cmp eax, 0xfffffffe
jne 0x14004f765
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.1400476f0
mov ecx, dword [rbp - 0x69]
test al, al
mov qword [rdi], r12
cmovne ecx, r15d
test ecx, ecx
jmp 0x14004f996
mov ecx, dword [rbp - 0x69]
mov qword [rdi], r12
test ecx, ecx
jmp 0x14004f996
cmp esi, 0x101
jne 0x14004f79c
test byte [rbx + 0xf0], 2
jne 0x14004f445
mov qword [rdi], r12
cmp r14, 0x20
jne 0x14004ef77
mov eax, r15d
jmp 0x14004ef79
cmp esi, 0x102
jne 0x14004f8da
test byte [rbx + 0xf0], 2
jne 0x14004f445
cmp r14, 0x20
je 0x14004f8cf
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x14004ef74
mov rsi, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rsi
jne 0x14004ef74
mov dword [rbp - 0x69], r12d
cmp r14, 0xd
je 0x14004f823
movzx r8d, r14w
lea r9, [rbp - 0x69]
mov edx, 0x45a
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14004f823
cmp r14w, 0x2f
je 0x14004ef74
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
jmp 0x14004ef74
mov rcx, qword [rbx + 8]
lea rdx, [rbp - 9]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
movsxd r8, dword [rbp - 0x69]
lea r9, [rbp - 0x59]
mov rcx, qword [rbx + 8]
xorps xmm0, xmm0
mov edx, 0x41d
movups xmmword [rbp - 0x59], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, dword [rbp - 0x69]
lea r9, [rbp - 0x39]
mov rcx, qword [rbx + 8]
xorps xmm0, xmm0
mov edx, 0x417
movups xmmword [rbp - 0x39], xmm0
movups xmmword [rbp - 0x29], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
movzx eax, byte [rbp - 0x31]
test al, 4
je 0x14004f8c7
test al, 8
jne 0x14004f8c7
mov eax, dword [rbp - 1]
cmp dword [rbp - 0x51], eax
jg 0x14004f8c7
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0x28]
call qword [sym.imp.USER32.dll_PostMessageW]
cmp r14, 0xd
je 0x14004ef74
movsxd r8, dword [rbp - 0x69]
xor r9d, r9d
mov rcx, qword [rbx + 8]
mov edx, 0x448
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14004ef74
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
mov qword [rdi], r12
mov eax, r15d
jmp 0x14004ef79
lea eax, [rsi - 0x104]
cmp eax, 2
jbe 0x14004ef74
cmp esi, 0x52e
jne 0x14004f900
mov rax, qword [rbx + 0x78]
mov qword [rdi], rax
mov eax, r15d
jmp 0x14004ef79
cmp esi, 0x52f
jne 0x14004f92f
lea rax, [rbp - 0x69]
mov r9, r13
mov r8, r14
mov qword [rsp + 0x20], rax
mov edx, 0x52f
mov rcx, rbx
call fcn.14004b650
mov qword [rdi], rax
mov eax, r15d
jmp 0x14004ef79
cmp esi, 0x52d
jne 0x14004f946
mov rax, qword [rbx + 8]
mov qword [rdi], rax
mov eax, r15d
jmp 0x14004ef79
cmp esi, 0x2b
jne 0x14004f96a
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, esi
mov rcx, rbx
call fcn.14004c460
jmp 0x14004f98f
cmp esi, 0x2c
jne 0x14004f9a4
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, 0x2c
mov rcx, rbx
call fcn.14004d290
cmp dword [rbp - 0x69], r12d
mov qword [rdi], rax
je 0x14004ef77
mov eax, r15d
jmp 0x14004ef79
cmp esi, 0x37f
jne 0x14004ef77
mov ecx, dword [r13 + 8]
lea eax, [rcx - 0x200]
cmp eax, 0xe
ja 0x14004f9c8
and byte [rbx + 0xf1], 0xef
jmp 0x14004f9da
lea eax, [rcx - 0x100]
cmp eax, 9
ja 0x14004f9da
or byte [rbx + 0xf1], 0x10
mov r10, qword [rbx]
lea rax, [rbp - 0x69]
mov r9, qword [r13 + 0x10]
mov rcx, rbx
mov r8d, dword [r13 + 8]
mov rdx, qword [r13]
mov dword [rsp + 0x30], 3
mov qword [rsp + 0x28], rax
mov rax, qword [r13 + 0x18]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x69], r12
call qword [r10]
mov rax, qword [rbp - 0x69]
mov qword [rdi], rax
mov eax, r15d
jmp 0x14004ef79