Function at 0x14008d120
Capabilities:
Get geographical location
Get keyboard layout

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa8
movaps xmmword [rsp + 0x90], xmm6
mov rax, qword [0x1400b3040]
xor rax, rsp
mov qword [rbp - 9], rax
mov r13, r9
mov qword [rbp - 0x11], r8
mov r9, qword [0x1400b6390]
mov r14d, edx
mov r12, rcx
test r9, r9
je case.0x14008d782.527
mov rsi, qword [r9 + 0x98]
lea rdi, [r9 + 8]
mov qword [rbp - 0x59], rdi
cmp edx, 0x200
ja 0x14008d758
je case.0x14008d1b4.160
lea eax, [rdx - 7]
cmp eax, 0xfe
ja case.0x14008d782.527
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x8d9ac]
mov ecx, dword [rdx + rax*4 + 0x8d98c]
add rcx, rdx
jmp rcx
lea eax, [r14 - 0x100]
mov esi, pe_nt_image_headers64
test eax, 0xfffffffb
sete bl
cmp r8, rsi
jae case.0x14008d782.527
mov ecx, send
call qword [sym.imp.USER32.dll_GetKeyState]
movss xmm6, dword [0x1400a1ffc]
shr eax, 0xf
and al, 1
je 0x14008d1f2
movaps xmm3, xmm6
jmp 0x14008d1f5
xorps xmm3, xmm3
movzx r8d, al
mov edx, 0x281
mov rcx, rdi
call fcn.140003130
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
je 0x14008d21d
movaps xmm3, xmm6
jmp 0x14008d220
xorps xmm3, xmm3
movzx r8d, al
mov edx, 0x282
mov rcx, rdi
call fcn.140003130
mov ecx, send
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
je 0x14008d248
movaps xmm3, xmm6
jmp 0x14008d24b
xorps xmm3, xmm3
movzx r8d, al
mov edx, 0x283
mov rcx, rdi
call fcn.140003130
mov ecx, 0x5d
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
je 0x14008d273
movaps xmm3, xmm6
jmp 0x14008d276
xorps xmm3, xmm3
movzx r8d, al
mov edx, 0x284
mov rcx, rdi
call fcn.140003130
mov rdi, qword [rbp - 0x11]
cmp rdi, 0xd
jne 0x14008d2a1
shr r13, 0x10
mov eax, 0x10d
test si, r13w
cmovne edi, eax
movsxd r15, edi
mov rcx, r15
call fcn.14008cbd0
movsxd r14, eax
cmp r14d, 0x256
jne 0x14008d355
test bl, bl
jne 0x14008d359
mov rsi, qword [0x1400b6390]
movaps xmm3, xmm6
mov r8b, 1
mov edx, r14d
lea rcx, [rsi + 8]
call fcn.140003130
cmp edi, 0x1ff
ja 0x14008d2f3
mov dword [rsi + r15*4 + 0x100], r14d
mov dword [rsi + 0xa58], edi
mov rsi, qword [0x1400b6390]
add rsi, 8
xorps xmm3, xmm3
movzx r8d, bl
mov edx, r14d
mov rcx, rsi
call fcn.140003130
cmp edi, 0x1ff
ja 0x14008d328
mov dword [rsi + r15*4 + 0xf8], r14d
mov dword [rsi + r14*4 + 0xf8], edi
cmp edi, 0x10
jne 0x14008d3ea
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
cmp al, bl
jne 0x14008d396
mov rdi, qword [0x1400b6390]
test bl, bl
je 0x14008d36d
movaps xmm3, xmm6
jmp 0x14008d370
test eax, eax
je 0x14008d328
mov rsi, qword [0x1400b6390]
add rsi, 8
test bl, bl
je 0x14008d2fe
movaps xmm3, xmm6
jmp 0x14008d301
xorps xmm3, xmm3
movzx r8d, bl
lea rcx, [rdi + 8]
mov edx, 0x210
call fcn.140003130
mov dword [rdi + 0x380], 0x210
mov dword [rdi + 0x940], 0xa0
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
cmp al, bl
jne case.0x14008d782.527
mov rdi, qword [0x1400b6390]
test bl, bl
jne 0x14008d3bc
xorps xmm6, xmm6
movaps xmm3, xmm6
lea rcx, [rdi + 8]
movzx r8d, bl
mov edx, 0x214
call fcn.140003130
mov dword [rdi + 0x384], 0x214
mov dword [rdi + 0x950], 0xa1
jmp case.0x14008d782.527
cmp edi, 0x11
jne 0x14008d494
mov ecx, 0xa2
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
cmp al, bl
jne 0x14008d440
mov rdi, qword [0x1400b6390]
test bl, bl
je 0x14008d417
movaps xmm3, xmm6
jmp 0x14008d41a
xorps xmm3, xmm3
movzx r8d, bl
lea rcx, [rdi + 8]
mov edx, 0x20f
call fcn.140003130
mov dword [rdi + 0x388], 0x20f
mov dword [rdi + 0x93c], 0xa2
mov ecx, 0xa3
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
cmp al, bl
jne case.0x14008d782.527
mov rdi, qword [0x1400b6390]
test bl, bl
jne 0x14008d466
xorps xmm6, xmm6
movaps xmm3, xmm6
lea rcx, [rdi + 8]
movzx r8d, bl
mov edx, 0x213
call fcn.140003130
mov dword [rdi + 0x38c], 0x213
mov dword [rdi + 0x94c], 0xa3
jmp case.0x14008d782.527
cmp edi, 0x12
jne case.0x14008d782.527
mov ecx, 0xa4
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
cmp al, bl
jne 0x14008d4ea
mov rdi, qword [0x1400b6390]
test bl, bl
je 0x14008d4c1
movaps xmm3, xmm6
jmp 0x14008d4c4
xorps xmm3, xmm3
movzx r8d, bl
lea rcx, [rdi + 8]
mov edx, 0x211
call fcn.140003130
mov dword [rdi + 0x390], 0x211
mov dword [rdi + 0x944], 0xa4
mov ecx, 0xa5
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
cmp al, bl
jne case.0x14008d782.527
mov rdi, qword [0x1400b6390]
test bl, bl
jne 0x14008d510
xorps xmm6, xmm6
movaps xmm3, xmm6
lea rcx, [rdi + 8]
movzx r8d, bl
mov edx, 0x215
call fcn.140003130
mov dword [rdi + 0x394], 0x215
mov dword [rdi + 0x954], 0xa5
jmp case.0x14008d782.527
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
cmp r14d, 7
mov qword [rbp - 0x41], rax
mov dword [rbp - 0x51], 7
sete byte [rbp - 0x49]
jmp 0x14008d7c7
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
shr rax, 0x10
mov r9d, 4
movzx ecx, ax
lea r8, [rsi + 0x2c]
mov edx, 0x20001004
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne case.0x14008d782.527
xor ebx, ebx
mov dword [rsi + 0x2c], ebx
jmp case.0x14008d782.527
mov rcx, r12
call qword [sym.imp.USER32.dll_IsWindowUnicode]
test eax, eax
je 0x14008d5c3
mov rdx, qword [rbp - 0x11]
lea rax, [rdx - 1]
cmp rax, 0xfffe
ja case.0x14008d782.527
mov rcx, rdi
call fcn.140002f50
jmp case.0x14008d782.527
mov ecx, dword [rsi + 0x2c]
lea rax, [rbp - 0x21]
mov edi, 1
lea r8, [rbp - 0x11]
xor ebx, ebx
mov dword [rsp + 0x28], edi
mov r9d, edi
mov qword [rsp + 0x20], rax
mov edx, edi
mov word [rbp - 0x21], bx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movzx eax, word [rbp - 0x21]
test eax, eax
je case.0x14008d782.527
mov qword [rbp - 0x45], rbx
mov r15d, 2
mov dword [rbp - 0x3d], ebx
mov rbx, qword [0x1400b6390]
add rbx, 0x38e8
mov dword [rbp - 0x51], 6
mov dword [rbp - 0x4d], r15d
mov dword [rbp - 0x49], eax
mov ecx, dword [rbx]
mov r8d, dword [rbx + 4]
cmp ecx, r8d
jne 0x14008d801
inc ecx
test r8d, r8d
je 0x14008d7ed
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x14008d7f2
cmp r13w, 1
jne case.0x14008d782.527
call fcn.14008be60
test al, al
je case.0x14008d782.527
mov eax, 1
jmp 0x14008d963
mov byte [rsi + 0x30], 1
jmp case.0x14008d782.527
mov eax, dword [rsi + 0x10]
xor ebx, ebx
cmp r14d, 0x200
mov qword [rsi + 8], r12
mov edi, ebx
setne dil
inc edi
cmp eax, edi
je 0x14008d6eb
cmp r14d, 0x200
mov dword [rbp - 0x51], 0x18
mov ecx, send
mov dword [rbp - 0x4d], 0x80000000
mov r15d, 2
mov qword [rbp - 0x49], r12
cmovne r15d, ecx
mov dword [rbp - 0x41], ebx
mov dword [rbp - 0x35], r15d
mov dword [rbp - 0x39], 0x18
mov qword [rbp - 0x31], r12
mov dword [rbp - 0x29], ebx
test eax, eax
je 0x14008d6de
lea rcx, [rbp - 0x51]
call qword [sym.imp.USER32.dll_TrackMouseEvent]
lea rcx, [rbp - 0x39]
call qword [sym.imp.USER32.dll_TrackMouseEvent]
mov dword [rsi + 0x10], edi
movsx eax, r13w
mov dword [rbp - 0x19], eax
shr r13, 0x10
movsx eax, r13w
mov dword [rbp - 0x15], eax
mov rax, qword [rbp - 0x59]
mov eax, dword [rax]
shr eax, 0xa
and al, 1
cmp r14d, 0x200
jne 0x14008d724
test al, al
je 0x14008d73e
lea rdx, [rbp - 0x19]
mov rcx, r12
call qword [sym.imp.USER32.dll_ClientToScreen]
jmp 0x14008d73e
cmp r14d, 0xa0
jne 0x14008d73e
test al, al
jne 0x14008d73e
lea rdx, [rbp - 0x19]
mov rcx, r12
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm2, dword [rbp - 0x15]
movd xmm1, dword [rbp - 0x19]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.1400032a0
jmp case.0x14008d782.527
lea eax, [rdx - 0x201]
cmp eax, 0xa2
ja case.0x14008d782.527
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x8dac8]
mov ecx, dword [rdx + rax*4 + 0x8daac]
add rcx, rdx
jmp rcx
xor ebx, ebx
cmp r14d, 0x2a3
mov eax, ebx
setne al
inc eax
cmp dword [rsi + 0x10], eax
jne case.0x14008d782.527
cmp qword [rsi + 8], r12
jne 0x14008d7a7
mov qword [rsi + 8], rbx
mov edi, 1
mov dword [rsi + 0x10], ebx
mov dword [rbp - 0x51], edi
mov dword [rbp - 0x4d], edi
mov qword [rbp - 0x41], rbx
mov dword [rbp - 0x49], 0xff7fffff
mov dword [rbp - 0x45], 0xff7fffff
lea rbx, [r9 + 0x38e8]
mov ecx, dword [rbx]
mov r8d, dword [rbx + 4]
cmp ecx, r8d
jne 0x14008d801
inc ecx
test r8d, r8d
je 0x14008d7ed
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x14008d7f2
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rbx
call fcn.1400285d0
movsxd rax, dword [rbx]
movups xmm0, xmmword [rbp - 0x51]
movsd xmm1, qword [rbp - 0x41]
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 8]
movups xmmword [rax + rcx*8], xmm0
movsd qword [rax + rcx*8 + 0x10], xmm1
inc dword [rbx]
jmp case.0x14008d782.527
xor ebx, ebx
cmp r14d, 0x204
je 0x14008d83c
mov edi, ebx
cmp r14d, 0x206
jne 0x14008d841
mov edi, 1
lea eax, [r14 - 0x207]
mov r15d, 2
test eax, 0xfffffffd
lea eax, [r14 - 0x20b]
cmove edi, r15d
test eax, 0xfffffffd
jne 0x14008d874
shr r8, 0x10
cmp r8w, 1
setne bl
lea edi, [rbx + 3]
cmp dword [rsi + 0x14], 0
jne 0x14008d88e
call qword [sym.imp.USER32.dll_GetCapture]
test rax, rax
jne 0x14008d88e
mov rcx, r12
call qword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [rsi + 0x14]
mov r8b, 1
bts eax, edi
mov edx, edi
mov dword [rsi + 0x14], eax
call fcn.140003340
jmp case.0x14008d782.527
xor ebx, ebx
cmp r14d, 0x205
mov r15d, ebx
sete r15b
cmp r14d, 0x208
jne 0x14008d8c5
lea r15d, [rbx + 2]
jmp 0x14008d8e2
cmp r14d, 0x20c
jne 0x14008d8e2
shr r8, 0x10
mov r15d, ebx
cmp r8w, 1
setne r15b
add r15d, 3
mov eax, dword [rsi + 0x14]
btr eax, r15d
mov dword [rsi + 0x14], eax
test eax, eax
jne 0x14008d901
call qword [sym.imp.USER32.dll_GetCapture]
cmp rax, r12
jne 0x14008d901
call qword [sym.imp.USER32.dll_ReleaseCapture]
xor r8d, r8d
mov edx, r15d
call fcn.140003340
jmp case.0x14008d782.527
shr r8, 0x10
xorps xmm1, xmm1
movsx eax, r8w
movd xmm2, eax
cvtdq2ps xmm2, xmm2
divss xmm2, dword [0x1400a2098]
call fcn.1400033e0
jmp case.0x14008d782.527
shr r8, 0x10
xorps xmm2, xmm2
movsx eax, r8w
movd xmm1, eax
cvtdq2ps xmm1, xmm1
xorps xmm1, xmmword [0x1400a2290]
divss xmm1, dword [0x1400a2098]
call fcn.1400033e0
jmp case.0x14008d782.527
cmp r8d, 7
jne case.0x14008d782.527
mov byte [rsi + 0x32], 1
xor eax, eax
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.140092450
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret