Function at 0x14009ad00
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x210
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x1400d3010]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov r15, r9
mov rbx, rdx
mov r14, qword [rbp + 0x188]
mov rax, qword [rbp + 0x190]
mov qword [rsp + 0x78], rax
xor edi, edi
test edx, edx
jne 0x14009adf5
mov rax, rdx
shr rax, 0x20
test eax, eax
jne 0x14009adf5
mov rdx, qword [r9 + 0x18]
cmp rdx, 0x10
jb 0x14009ada5
inc rdx
mov rcx, qword [r9]
cmp rdx, 0x1000
jb 0x14009ada0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009b975
mov rcx, r8
call fcn.1400c2080
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], dil
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14009adee
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14009ade9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009b975
mov rcx, r8
call fcn.1400c2080
xor eax, eax
jmp 0x14009b934
mov eax, dword [rbp + 0x15c]
add eax, 0x1fe
mov dword [rsp + 0x50], eax
lea r8d, [rax + 6]
lea eax, [rdx + 0x37]
mov dword [rsp + 0x70], eax
mov edx, dword [0x1400d4068]
mov r10d, dword [0x1400d4070]
cmp edx, r10d
jl 0x14009ae69
cmp edx, dword [0x1400d4078]
jg 0x14009ae69
mov ecx, dword [0x1400d406c]
mov r9d, dword [0x1400d4074]
cmp ecx, r9d
jl 0x14009ae69
cmp ecx, dword [0x1400d407c]
jg 0x14009ae69
sub edx, r10d
cmp edx, eax
jl 0x14009ae69
add eax, 0xe6
cmp edx, eax
jg 0x14009ae69
sub ecx, r9d
cmp ecx, r8d
jl 0x14009ae69
lea eax, [r8 + 5]
cmp ecx, eax
mov r13d, 1
jle 0x14009ae6c
mov r13d, edi
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x1400d4048]
jne 0x14009afb4
cmp dword [0x1400d408c], edi
jne 0x14009afb4
test r13d, r13d
je 0x14009af14
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14009aeaa
mov cl, 0x25
jmp 0x14009aebe
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14009aed5
mov cl, 0x26
xor r9d, r9d
lea r8d, [r9 + 2]
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
dec dword [0x1400d3dd0]
jmp 0x14009af14
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14009aeeb
mov cl, 0x27
jmp 0x14009aeff
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14009af14
mov cl, 0x28
xor r9d, r9d
lea r8d, [r9 + 2]
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
inc dword [0x1400d3dd0]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14009af3f
test r13d, r13d
je 0x14009af3f
cmp dword [0x1400d3ca8], edi
jne 0x14009af47
mov dword [0x1400d3ca8], 1
jmp 0x14009af47
cmp dword [0x1400d3ca8], edi
je 0x14009af96
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14009af96
mov eax, dword [0x1400d4068]
sub eax, dword [0x1400d4070]
sub eax, ebx
sub eax, 0x36
imul ecx, eax, 0x1d
mov eax, 0x473c1ab7
imul ecx
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
inc ecx
add ecx, edx
mov dword [0x1400d4084], 1
mov dword [0x1400d4088], 1
jmp 0x14009afba
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x14009afb4
mov dword [0x1400d3ca8], edi
mov dword [0x1400d4088], edi
mov ecx, dword [0x1400d3dd0]
lea eax, [rcx - 1]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x1400c83cc]
mulss xmm0, dword [0x1400c8a94]
cvttss2si r12d, xmm0
mov eax, 0xe6
cmp r12d, eax
jle 0x14009afe8
mov r12d, eax
jmp 0x14009afef
test r12d, r12d
cmovs r12d, edi
mov eax, 0x1e
cmp ecx, 1
jg 0x14009b005
mov dword [0x1400d3dd0], 1
jmp 0x14009b010
cmp ecx, eax
cmovge ecx, eax
mov dword [0x1400d3dd0], ecx
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp - 0x50]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1400c8178]
mov qword [rbp - 0x50], rax
lea rax, [0x1400c80a0]
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x48]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r8d, r8d
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rbp - 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x50], rax
mov rax, qword [rbp - 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x54], edx
lea rcx, [rbp - 0x38]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x38], rax
mov qword [rbp + 0x30], rdi
mov dword [rbp + 0x38], edi
mov edx, 4
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setprecision_long_long___int64__]
mov rsi, rax
lea rdx, [0x140007a00]
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rsi + 8]
call qword [rsi]
mov edx, dword [0x1400d3dd0]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x1400d3dd0]
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
xor edi, edi
mov qword [rsp + 0x60], rdi
mov edx, dword [rsp + 0x50]
add edx, 5
lea ecx, [rbx + 0x36]
mov word [rbp + 0xde], di
mov word [rbp + 0xee], di
mov dword [rbp - 0x60], edi
mov dword [rbp - 0x5c], 1
mov eax, edi
shr rax, 0x20
movzx r8d, al
shl r8d, 8
mov dword [rbp + 0xd0], ecx
mov dword [rbp + 0xd4], edx
lea eax, [rcx + 0xe8]
mov dword [rbp + 0xe0], eax
lea eax, [rdx + 7]
mov dword [rbp + 0xe4], eax
movzx ecx, r8b
shl cx, 8
mov word [rbp + 0xd8], cx
mov word [rbp + 0xda], r8w
mov eax, r8d
shr eax, 0x10
shl ax, 8
mov word [rbp + 0xdc], ax
mov word [rbp + 0xe8], cx
mov word [rbp + 0xea], r8w
mov word [rbp + 0xec], ax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp - 0x60]
lea r8d, [rdi + 2]
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x1400d4060]
call qword [sym.imp.MSIMG32.dll_GradientFill]
test r13d, r13d
jne 0x14009b2ea
cmp dword [0x1400d3ca8], edi
jne 0x14009b2ea
mov eax, 0x66666667
imul dword [0x1400d4034]
mov r9d, edx
sar r9d, 1
mov eax, r9d
shr eax, 0x1f
add r9d, eax
mov dword [rbp + 0xd0], r9d
mov eax, 0x66666667
imul dword [0x1400d4038]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0xd4], edx
mov dword [rsp + 0x60], 0x14
mov dword [rsp + 0x64], 0x14
mov word [rbp + 0xbe], di
mov word [rbp + 0xce], di
mov dword [rbp - 0x60], edi
mov dword [rbp - 0x5c], 1
mov rax, qword [rsp + 0x60]
shr rax, 0x20
movzx ecx, al
shl ecx, 8
or ecx, 0x140014
mov rax, qword [rbp + 0xd0]
shr rax, 0x20
movzx r8d, al
shl r8d, 8
mov eax, 0x66666667
imul dword [0x1400d403c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dl
shl eax, 0x10
or r8d, eax
movzx eax, r9b
or r8d, eax
mov esi, dword [rsp + 0x70]
mov edi, dword [rsp + 0x50]
add edi, 6
lea eax, [rsi + 0xe6]
mov dword [rbp + 0xc0], eax
lea eax, [rdi + 5]
mov dword [rbp + 0xc4], eax
movzx eax, cl
shl ax, 8
mov word [rbp + 0xb8], ax
movzx eax, cx
mov r13d, 0xff00
and ax, r13w
mov word [rbp + 0xba], ax
shr ecx, 0x10
shl cx, 8
mov word [rbp + 0xbc], cx
movzx eax, r8b
shl ax, 8
mov word [rbp + 0xc8], ax
movzx eax, r8w
shr r8d, 0x10
shl r8w, 8
mov word [rbp + 0xcc], r8w
jmp 0x14009b403
mov eax, dword [0x1400d4034]
cdq
and edx, 3
lea r8d, [rdx + rax]
sar r8d, 2
mov dword [rbp + 0xd0], r8d
mov eax, dword [0x1400d4038]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbp + 0xd4], eax
mov dword [rsp + 0x60], 0x1e
mov dword [rsp + 0x64], 0x1e
mov word [rbp + 0xbe], di
mov word [rbp + 0xce], di
mov dword [rbp - 0x60], edi
mov dword [rbp - 0x5c], 1
mov rax, qword [rsp + 0x60]
shr rax, 0x20
movzx r9d, al
shl r9d, 8
or r9d, 0x1e001e
mov rax, qword [rbp + 0xd0]
shr rax, 0x20
movzx r10d, al
shl r10d, 8
mov eax, dword [0x1400d403c]
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx ecx, al
shl ecx, 0x10
or r10d, ecx
movzx eax, r8b
or r10d, eax
mov esi, dword [rsp + 0x70]
mov edi, dword [rsp + 0x50]
add edi, 6
lea eax, [rsi + 0xe6]
mov dword [rbp + 0xc0], eax
lea eax, [rdi + 5]
mov dword [rbp + 0xc4], eax
movzx eax, r9b
shl ax, 8
mov word [rbp + 0xb8], ax
movzx eax, r9w
mov r13d, 0xff00
and ax, r13w
mov word [rbp + 0xba], ax
shr r9d, 0x10
shl r9w, 8
mov word [rbp + 0xbc], r9w
movzx eax, r10b
shl ax, 8
mov word [rbp + 0xc8], ax
movzx eax, r10w
shr r10d, 0x10
shl r10w, 8
mov word [rbp + 0xcc], r10w
mov dword [rbp + 0xb4], edi
mov dword [rbp + 0xb0], esi
mov dword [rsp + 0x28], 1
and ax, r13w
mov dword [rsp + 0x20], 1
mov word [rbp + 0xca], ax
lea r9, [rbp - 0x60]
mov r8d, 2
lea rdx, [rbp + 0xb0]
mov rcx, qword [0x1400d4060]
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov eax, 0x66666667
imul dword [0x1400d4034]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [rbp + 0xd0], edx
mov eax, 0x66666667
imul dword [0x1400d4038]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [rbp + 0xd4], edx
mov eax, 0x66666667
imul dword [0x1400d403c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0xd8], edx
movups xmm0, xmmword [0x1400d4034]
movaps xmmword [rsp + 0x60], xmm0
movd xmm6, r12d
cvtdq2ps xmm6, xmm6
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400d4c0c], eax
jle 0x14009b4ef
lea rcx, [0x1400d4c0c]
call fcn.1400c21e0
cmp dword [0x1400d4c0c], 0xffffffff
jne 0x14009b4ef
movss dword [0x1400d4c88], xmm6
lea rcx, [0x1400d4c0c]
call fcn.1400c2180
movss xmm1, dword [0x1400d4c88]
comiss xmm6, xmm1
jbe 0x14009b50e
subss xmm6, xmm1
mulss xmm6, dword [0x1400c81b8]
addss xmm1, xmm6
jmp 0x14009b526
comiss xmm1, xmm6
jbe 0x14009b52e
movaps xmm0, xmm1
subss xmm0, xmm6
mulss xmm0, dword [0x1400c81b8]
subss xmm1, xmm0
movss dword [0x1400d4c88], xmm1
xor eax, eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
ja 0x14009b54d
mov ecx, 0xe6
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jbe 0x14009b558
movss dword [0x1400d4c88], xmm0
movaps xmm1, xmm0
mov word [rbp + 0xbe], ax
mov word [rbp + 0xce], ax
mov dword [rbp - 0x60], eax
mov dword [rbp - 0x5c], 1
movzx ecx, byte [rsp + 0x64]
shl ecx, 8
movzx eax, byte [rsp + 0x68]
shl eax, 0x10
or ecx, eax
movzx eax, byte [rsp + 0x60]
or ecx, eax
movzx edx, byte [rbp + 0xd4]
shl edx, 8
movzx eax, byte [rbp + 0xd8]
shl eax, 0x10
or edx, eax
movzx eax, byte [rbp + 0xd0]
or edx, eax
mov dword [rbp + 0xb0], esi
mov dword [rbp + 0xb4], edi
cvttss2si eax, xmm1
add eax, esi
mov dword [rbp + 0xc0], eax
lea eax, [rdi + 5]
mov dword [rbp + 0xc4], eax
movzx eax, cl
shl ax, 8
mov word [rbp + 0xb8], ax
movzx eax, cx
and ax, r13w
mov word [rbp + 0xba], ax
shr ecx, 0x10
shl cx, 8
mov word [rbp + 0xbc], cx
movzx eax, dl
shl ax, 8
mov word [rbp + 0xc8], ax
movzx eax, dx
and ax, r13w
mov word [rbp + 0xca], ax
shr edx, 0x10
shl dx, 8
mov word [rbp + 0xcc], dx
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp - 0x60]
mov r8d, 2
lea rdx, [rbp + 0xb0]
mov rcx, qword [0x1400d4060]
call qword [sym.imp.MSIMG32.dll_GradientFill]
movdqa xmm0, xmmword [0x1400cb440]
movdqa xmmword [rsp + 0x60], xmm0
mov r12d, 0x190
lea rdx, [0x1400d4010]
lea rcx, [rbp - 0x80]
call fcn.14004c200
mov rdi, rax
mov rdx, r15
lea rcx, [rbp + 0xb0]
call fcn.14004c200
mov r9, rax
mov r13d, dword [rsp + 0x50]
lea r8d, [r13 - 9]
lea edx, [rbx + 0x38]
mov word [rsp + 0x38], r12w
movzx ecx, word [0x1400d4030]
mov word [rsp + 0x30], cx
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.14000d800
mov rax, qword [rsp + 0x78]
movaps xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [0x1400d4010]
lea rcx, [rbp - 0x80]
call fcn.14004c200
mov rdi, rax
mov rdx, r15
lea rcx, [rbp + 0xb0]
call fcn.14004c200
mov r9, rax
lea r8d, [r13 - 0xa]
mov word [rsp + 0x38], r12w
movzx ecx, word [0x1400d4030]
mov word [rsp + 0x30], cx
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov edx, esi
call fcn.14000d800
movdqa xmm0, xmmword [0x1400cb4e0]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
movdqa xmm1, xmmword [0x1400cb3d0]
movdqu xmmword [rbp + 0xc0], xmm1
mov byte [rbp + 0xb0], 0
movups xmmword [rbp + 0xd0], xmm0
mov ecx, dword [rbp + 0x38]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14009b777
mov rax, qword [rbp + 8]
mov r8, qword [rax]
test r8, r8
je 0x14009b777
mov rax, qword [rbp - 0x18]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x30]
cmovb r8, qword [rbp + 0x30]
sub r8, rdx
jmp 0x14009b7ac
test cl, 4
jne 0x14009b79e
mov rax, qword [rbp]
mov rcx, qword [rax]
test rcx, rcx
je 0x14009b79e
mov rax, qword [rbp - 0x20]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x18]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x14009b7ac
mov r8, qword [rbp + 0xd8]
mov rdx, qword [rbp + 0xd0]
test rdx, rdx
je 0x14009b7bd
lea rcx, [rbp + 0xb0]
call fcn.14004c9d0
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14009b7ca
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0xb0]
call fcn.14004cb30
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea r8d, [r13 + 2]
lea edx, [rbx + 0x127]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
call fcn.14000dbd0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x14009b86a
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009b865
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009b865
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2080
mov ebx, dword [0x1400d3dd0]
mov rax, qword [rbp - 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x50], rax
mov rax, qword [rbp - 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x54], edx
lea rcx, [rbp - 0x38]
call fcn.14004bf70
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14009b8ed
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14009b8e8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009b975
mov rcx, r8
call fcn.1400c2080
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], dil
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14009b932
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14009b92d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009b975
mov rcx, r8
call fcn.1400c2080
mov eax, ebx
mov byte [r14], dil
mov qword [r14 + 0x18], 0xf
mov qword [r14 + 0x10], rdi
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.1400c2060
mov rbx, qword [rsp + 0x250]
movaps xmm6, xmmword [rsp + 0x200]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3