Function at 0x1400529d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140181600]
xor rax, rsp
mov qword [rbp + 0x28], rax
xor r13d, r13d
mov dword [rsp + 0x40], r13d
mov edi, r13d
movsd xmm12, qword [0x1400bd8b0]
movsd xmm7, qword [0x1400bdee0]
movsd xmm9, qword [0x1400bdf18]
nop dword [rax + rax]
mov rcx, qword [0x140181a58]
mov r14, r13
mov rax, r13
mov esi, Ordinal_26
nop dword [rax]
nop word [rax + rax]
lea rbx, [rax + 0x1000]
add rax, 0x250
add rcx, rax
call fcn.140050ce0
mov rcx, qword [0x140181a58]
cmp eax, 0x260e020b
mov rax, rbx
jne 0x140052aba
lea r14, [rbx + rcx]
sub rsi, 1
jne 0x140052a90
mov rax, qword [0x140181f70]
cmp rax, qword [0x140181f78]
je 0x140052ad7
mov qword [0x140181f78], rax
mov rax, qword [0x140181b20]
mov rcx, qword [rax]
add rcx, r14
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov qword [rcx], rax
mov rcx, qword [0x140181b20]
mov rcx, qword [rcx + 0x40]
add rcx, rax
call fcn.140050f40
mov rdx, qword [0x140181e98]
mov qword [rdx + 0x48], rax
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 8]
add rcx, qword [rdx]
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov qword [rcx + 8], rax
mov rcx, qword [0x140181b20]
mov rcx, qword [rcx + 0x10]
add rcx, rax
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov qword [rcx + 0x10], rax
mov rcx, rax
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov qword [rcx + 0x18], rax
mov rcx, qword [0x140181b20]
mov rcx, qword [rcx + 0x30]
add rcx, rax
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov qword [rcx + 0x20], rax
mov rcx, qword [0x140181b20]
mov rcx, qword [rcx + 0x28]
add rcx, rax
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov qword [rcx + 0x28], rax
mov rcx, qword [0x140181b20]
mov rcx, qword [rcx + 0x18]
add rcx, rax
call fcn.140050f40
mov rdx, qword [0x140181e98]
mov qword [rdx + 0x40], rax
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x38]
add rcx, qword [rdx + 0x28]
call fcn.140050f40
mov rcx, qword [0x140181e98]
lea r8, [rbp - 0x40]
mov qword [rsp + 0x38], r13
xorps xmm6, xmm6
mov qword [rsp + 0x30], r13
mov r9d, Ordinal_45
mov dword [rsp + 0x28], r13d
mov edx, 0x225914
mov qword [rcx + 0x60], rax
mov rcx, qword [0x140181b20]
mov dword [rbp - 0x1f], r13d
mov word [rbp - 0x1b], r13w
mov byte [rbp - 0x19], r13b
mov rcx, qword [rcx + 0x60]
add rcx, rax
movsd qword [rbp - 0x18], xmm6
lea rax, [rbp - 0x18]
mov qword [rbp - 0x38], rcx
mov rcx, qword [0x140181a60]
mov qword [rbp - 0x30], rax
mov eax, dword [0x140181a68]
mov dword [rbp - 0x3c], eax
movups xmmword [rbp - 0x10], xmm6
mov dword [rbp - 0x40], 0x85b3b69
mov qword [rbp - 0x28], Ordinal_26
mov byte [rbp - 0x20], r13b
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [0x140181e98]
movsd xmm0, qword [rbp - 0x18]
movsd qword [rdx + 0xa0], xmm0
movsd xmm1, qword [rbp - 0x10]
movsd qword [rdx + 0xa8], xmm1
movsd xmm0, qword [rbp - 8]
movsd qword [rdx + 0xb0], xmm0
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x80]
add rcx, qword [rdx + 0x40]
call fcn.140050ce0
mov rdx, qword [0x140181e98]
mov byte [rdx + 0xb8], al
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x58]
add rcx, qword [rdx + 0x48]
call fcn.140050f40
mov rdx, qword [0x140181e98]
mov qword [rdx + 0x30], rax
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x58]
mov rax, qword [rdx + 0x48]
add rax, 8
add rcx, rax
call fcn.140050ce0
mov rcx, qword [0x140181e98]
lea r8, [rbp - 0x40]
mov qword [rsp + 0x38], r13
mov r9d, Ordinal_45
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rcx + 0x80], eax
mov rax, qword [0x140181b20]
mov dword [rbp - 0x1f], r13d
mov word [rbp - 0x1b], r13w
mov byte [rbp - 0x19], r13b
mov rdx, qword [rax + 0x68]
lea rax, [rbp - 0x18]
add rdx, qword [rcx + 0x60]
mov rcx, qword [0x140181a60]
mov qword [rbp - 0x38], rdx
mov edx, 0x225914
mov qword [rbp - 0x30], rax
mov eax, dword [0x140181a68]
movsd qword [rbp - 0x18], xmm6
movups xmmword [rbp - 0x10], xmm6
mov dword [rbp - 0x40], 0x85b3b69
mov qword [rbp - 0x28], Ordinal_26
mov dword [rbp - 0x3c], eax
mov byte [rbp - 0x20], r13b
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [0x140181e98]
movsd xmm0, qword [rbp - 0x18]
movsd qword [rdx + 0x88], xmm0
movsd xmm1, qword [rbp - 0x10]
movsd qword [rdx + 0x90], xmm1
movsd xmm0, qword [rbp - 8]
movsd qword [rdx + 0x98], xmm0
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0xa0]
add rcx, qword [rdx + 0x28]
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov r12d, r13d
mov qword [rcx + 0x68], rax
cmp dword [rcx + 0x80], r13d
jle 0x1400536e2
nop
mov rax, qword [0x140181e98]
movsxd rdx, r12d
unpcklpd xmm6, xmm6
mov rcx, qword [rax + 0x30]
lea rcx, [rcx + rdx*8]
call fcn.140050f40
mov rcx, qword [0x140181b20]
mov r15, rax
mov rcx, qword [rcx + 0x50]
add rcx, rax
call fcn.140050f40
mov rcx, qword [0x140181b20]
mov r14, rax
mov rcx, qword [rcx + 0x38]
add rcx, rax
call fcn.140050f40
mov rcx, qword [0x140181b20]
lea r8, [rbp]
mov qword [rsp + 0x38], r13
mov r9d, Ordinal_45
mov qword [rsp + 0x30], r13
mov edx, 0x225914
mov dword [rsp + 0x28], r13d
mov rcx, qword [rcx + 0x60]
add rcx, rax
movsd qword [rbp - 0x18], xmm6
lea rax, [rbp - 0x18]
mov qword [rbp + 8], rcx
mov rcx, qword [0x140181a60]
mov qword [rbp + 0x10], rax
mov eax, dword [0x140181a68]
mov dword [rbp + 4], eax
movups xmmword [rbp - 0x10], xmm6
mov dword [rbp + 0x21], r13d
mov word [rbp + 0x25], r13w
mov byte [rbp + 0x27], r13b
mov dword [rbp], 0x85b3b69
mov qword [rbp + Ordinal_26], 0x18
mov byte [rbp + 0x20], r13b
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movsd xmm0, qword [0x140181ed8]
or edi, 1
mulsd xmm0, xmm7
divsd xmm0, xmm9
cvtpd2ps xmm6, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
xorps xmm10, xmm10
cvtss2sd xmm10, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movsd xmm1, qword [0x140181ee0]
xorps xmm15, xmm15
mulsd xmm1, xmm7
cvtss2sd xmm15, xmm0
divsd xmm1, xmm9
cvtpd2ps xmm6, xmm1
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
xorps xmm11, xmm11
cvtss2sd xmm11, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movsd xmm1, qword [0x140181ee8]
xorps xmm8, xmm8
mulsd xmm1, xmm7
cvtss2sd xmm8, xmm0
divsd xmm1, xmm9
cvtpd2ps xmm6, xmm1
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
xorps xmm7, xmm7
cvtss2sd xmm7, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm1, xmm8
xorps xmm4, xmm4
mulsd xmm1, xmm15
cvtss2sd xmm4, xmm0
cvtpd2ps xmm6, xmm1
mov rbx, qword [0x140181b58]
movaps xmm3, xmm7
movaps xmm0, xmm11
mulsd xmm3, xmm10
mulsd xmm0, xmm15
movaps xmm2, xmm4
mov esi, dword [rbx + 0xc]
mulsd xmm2, xmm8
xorps xmm14, xmm14
movaps xmm1, xmm3
mulsd xmm3, xmm11
cvtpd2ps xmm5, xmm0
mulsd xmm1, xmm8
addsd xmm2, xmm3
movaps xmm0, xmm4
mulsd xmm0, xmm11
cvtpd2ps xmm13, xmm2
subsd xmm1, xmm0
movaps xmm2, xmm4
mulsd xmm4, xmm15
mulsd xmm2, xmm10
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm7
movss dword [rsp + 0x70], xmm0
movaps xmm0, xmm7
xorps xmm0, xmm12
mulsd xmm1, xmm11
mulsd xmm0, xmm15
mulsd xmm7, xmm8
cvtpd2ps xmm9, xmm10
movsd xmm10, qword [rbp - 8]
subsd xmm10, qword [0x140181ed0]
cvtsd2ss xmm14, xmm0
movaps xmm0, xmm2
mulsd xmm2, xmm11
movsd xmm11, qword [rbp - 0x18]
subsd xmm11, qword [0x140181ec0]
mulsd xmm0, xmm8
movsd xmm8, qword [rbp - 0x10]
subsd xmm7, xmm2
subsd xmm8, qword [0x140181ec8]
cvtps2pd xmm2, xmm5
addsd xmm1, xmm0
xorps xmm0, xmm0
mulsd xmm2, xmm8
cvtpd2ps xmm15, xmm4
xorps xmm1, xmm12
cvtsd2ss xmm0, xmm1
cvtpd2ps xmm12, xmm7
movsd xmm7, qword [0x1400b8b48]
movss dword [rsp + 0x40], xmm0
cvtps2pd xmm0, xmm6
xorps xmm6, xmm6
mulsd xmm0, xmm11
cvtps2pd xmm1, xmm9
addsd xmm2, xmm0
movss xmm0, dword [0x140181ef0]
mulss xmm0, dword [0x1400bc8d8]
mulsd xmm1, xmm10
divss xmm0, dword [0x1400b8b60]
cvtsi2ss xmm6, esi
addsd xmm2, xmm1
mulss xmm6, dword [0x1400b6f54]
maxsd xmm7, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_tanf
movaps xmm1, xmm6
divss xmm1, xmm0
movss xmm0, dword [rsp + 0x70]
cvtps2pd xmm3, xmm1
cvtps2pd xmm0, xmm0
cvtps2pd xmm5, xmm13
mulsd xmm0, xmm11
mulsd xmm5, xmm8
cvtps2pd xmm1, xmm14
addsd xmm5, xmm0
mulsd xmm1, xmm10
cvtps2pd xmm0, xmm6
addsd xmm5, xmm1
mulsd xmm5, xmm3
divsd xmm5, xmm7
addsd xmm5, xmm0
mov eax, dword [rbx + 0x10]
xorps xmm0, xmm0
cvtps2pd xmm2, xmm12
cvtsi2ss xmm0, eax
mulsd xmm2, xmm8
xorps xmm6, xmm6
comisd xmm5, xmm6
mulss xmm0, dword [0x1400b6f54]
cvtps2pd xmm1, xmm15
cvtps2pd xmm4, xmm0
movss xmm0, dword [rsp + 0x40]
cvtps2pd xmm0, xmm0
mulsd xmm1, xmm10
mulsd xmm0, xmm11
addsd xmm2, xmm0
addsd xmm2, xmm1
mulsd xmm2, xmm3
divsd xmm2, xmm7
subsd xmm4, xmm2
jbe 0x140053136
movd xmm0, esi
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm5
jbe 0x140053136
comisd xmm4, xmm6
jbe 0x140053136
movd xmm0, eax
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm4
ja 0x140053156
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x78]
add rcx, r14
call fcn.140050f40
test rax, rax
jne 0x140053156
and edi, 0xfffffffe
jmp 0x1400536b1
and edi, 0xfffffffe
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
xorps xmm11, xmm11
movdqa xmmword [rbp - 0x70], xmm11
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x80], r14
test r14, r14
je 0x1400536b1
mov rax, qword [0x140181e98]
cmp r14, qword [rax + 0x28]
je 0x1400536b1
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x80]
add rcx, r15
call fcn.140050ce0
mov rcx, qword [0x140181b20]
mov ebx, eax
mov dword [rbp - 0x44], eax
mov rcx, qword [rcx + 0xa0]
add rcx, r15
call fcn.140050f40
mov rcx, qword [0x140181e98]
mov qword [rbp - 0x50], rax
mov rax, qword [rcx + 0x28]
test rax, rax
je 0x14005322c
movsx ecx, byte [rcx + 0xb8]
cmp ebx, ecx
je 0x1400536b1
lea rcx, [rax + 0x2a18]
call fcn.140050f40
mov rcx, qword [0x140181b38]
mov rbx, rax
cmp byte [rcx + 1], r13b
je 0x14005322c
test rax, rax
je 0x14005321e
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14005321e
xor edx, edx
jmp 0x140053220
mov dl, 1
lea rcx, [rbx + 0x87a]
call fcn.1400514c0
mov rax, qword [0x140181b38]
cmp byte [rax + 2], r13b
je 0x14005363d
mov rax, qword [0x140181e98]
mov rcx, qword [rax + 0x28]
add rcx, 0x320
call fcn.140050f40
mov rbx, rax
test rax, rax
je 0x14005363d
mov rcx, qword [0x140181b20]
mov edx, 0x101
mov rcx, qword [rcx + 0x110]
add rcx, rax
call fcn.140051380
mov rax, qword [0x140181b20]
lea r8, [rbp - 0x40]
mov rcx, qword [0x140181a60]
xorps xmm0, xmm0
mov qword [rsp + 0x38], r13
mov r9d, Ordinal_45
mov qword [rsp + 0x30], r13
mov edx, 0x225914
mov rax, qword [rax + 0x108]
add rax, rbx
movaps xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1400bdf30]
mov qword [rbp - 0x38], rax
lea rax, [rsp + 0x50]
movsd qword [rbp - 0x30], xmm0
mov qword [rbp - 0x30], rax
mov eax, dword [0x140181a68]
mov dword [rsp + 0x28], r13d
mov dword [rbp - 0x3c], eax
movsd qword [rsp + 0x60], xmm0
mov dword [rbp - 0x1f], r13d
mov word [rbp - 0x1b], r13w
mov byte [rbp - 0x19], r13b
mov dword [rbp - 0x40], 0x85b3b69
mov qword [rbp - 0x28], Ordinal_26
mov byte [rbp - 0x20], 1
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x140181b20]
mov dl, 1
mov rcx, qword [rax + 0x118]
add rcx, rbx
call fcn.1400514c0
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14005344f
movsd xmm6, qword [0x140181ee0]
mulsd xmm6, qword [0x1400bded0]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movsd xmm9, qword [0x140181ed8]
movaps xmm6, xmm0
xorps xmm9, xmmword [0x1400bd8b0]
mulsd xmm9, qword [0x1400bded0]
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm10, xmm0
movaps xmm7, xmm0
mulsd xmm7, xmm6
movaps xmm0, xmm9
movsd xmm6, qword [0x1400bdf28]
mulsd xmm10, xmm8
mulsd xmm7, xmm6
mulsd xmm10, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
xorps xmm0, xmmword [0x1400bd8b0]
lea r8, [rbp - 0x40]
mov rax, qword [0x140181b20]
mov r9d, Ordinal_45
mov rcx, qword [0x140181a60]
mov edx, 0x225914
mov qword [rsp + 0x38], r13
mulsd xmm0, xmm6
mov rax, qword [rax + 0x120]
add rax, rbx
unpcklpd xmm7, xmm10
mov qword [rbp - 0x38], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], r13
mulsd xmm0, qword [0x1400bdee8]
mov dword [rsp + 0x28], r13d
movaps xmmword [rsp + 0x50], xmm7
mov dword [rbp - 0x1f], r13d
mov word [rbp - 0x1b], r13w
movsd qword [rbp - 0x30], xmm0
mov qword [rbp - 0x30], rax
mov eax, dword [0x140181a68]
mov dword [rbp - 0x3c], eax
movsd qword [rsp + 0x60], xmm0
mov byte [rbp - 0x19], r13b
mov dword [rbp - 0x40], 0x85b3b69
mov qword [rbp - 0x28], Ordinal_26
mov byte [rbp - 0x20], 1
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm6, xmm6
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400534f1
mov rax, qword [0x140181b20]
lea r8, [rbp - 0x40]
mov rcx, qword [0x140181a60]
xorps xmm0, xmm0
mov qword [rsp + 0x38], r13
mov r9d, Ordinal_45
movsd qword [rbp - 0x30], xmm6
mov edx, 0x225914
mov rax, qword [rax + 0x120]
add rax, rbx
unpcklpd xmm0, xmm6
mov qword [rbp - 0x38], rax
lea rax, [rsp + 0x50]
mov qword [rbp - 0x30], rax
mov eax, dword [0x140181a68]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rbp - 0x3c], eax
movaps xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm6
mov dword [rbp - 0x1f], r13d
mov word [rbp - 0x1b], r13w
mov byte [rbp - 0x19], r13b
mov dword [rbp - 0x40], 0x85b3b69
mov qword [rbp - 0x28], Ordinal_26
mov byte [rbp - 0x20], 1
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140053597
mov rax, qword [0x140181b20]
lea r8, [rbp - 0x40]
mov rcx, qword [0x140181a60]
xorps xmm0, xmm0
mov qword [rsp + 0x38], r13
mov r9d, Ordinal_45
mov qword [rsp + 0x30], r13
mov edx, 0x225914
mov rax, qword [rax + 0x120]
add rax, rbx
movaps xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1400bdf20]
mov qword [rbp - 0x38], rax
lea rax, [rsp + 0x50]
movsd qword [rbp - 0x30], xmm0
mov qword [rbp - 0x30], rax
mov eax, dword [0x140181a68]
mov dword [rsp + 0x28], r13d
mov dword [rbp - 0x3c], eax
movsd qword [rsp + 0x60], xmm0
mov dword [rbp - 0x1f], r13d
mov word [rbp - 0x1b], r13w
mov byte [rbp - 0x19], r13b
mov dword [rbp - 0x40], 0x85b3b69
mov qword [rbp - 0x28], Ordinal_26
mov byte [rbp - 0x20], 1
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14005363d
mov rax, qword [0x140181b20]
lea r8, [rbp - 0x40]
mov rcx, qword [0x140181a60]
xorps xmm0, xmm0
mov qword [rsp + 0x38], r13
mov r9d, Ordinal_45
mov qword [rsp + 0x30], r13
mov edx, 0x225914
mov rax, qword [rax + 0x120]
add rax, rbx
movaps xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1400bdf60]
mov qword [rbp - 0x38], rax
lea rax, [rsp + 0x50]
movsd qword [rbp - 0x30], xmm0
mov qword [rbp - 0x30], rax
mov eax, dword [0x140181a68]
mov dword [rsp + 0x28], r13d
mov dword [rbp - 0x3c], eax
movsd qword [rsp + 0x60], xmm0
mov dword [rbp - 0x1f], r13d
mov word [rbp - 0x1b], r13w
mov byte [rbp - 0x19], r13b
mov dword [rbp - 0x40], 0x85b3b69
mov qword [rbp - 0x28], Ordinal_26
mov byte [rbp - 0x20], 1
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x70]
add rcx, r14
call fcn.140050f40
mov qword [rbp - 0x60], rax
mov rax, qword [0x140181b20]
mov rcx, qword [rax + 0x18]
add rcx, r14
call fcn.140050f40
mov rdx, qword [0x140181f78]
cmp rdx, qword [0x140181f80]
mov qword [rbp - 0x58], rax
je 0x1400536a1
movaps xmm0, xmmword [rbp - 0x80]
movaps xmm1, xmmword [rbp - 0x50]
movups xmmword [rdx], xmm0
movaps xmm0, xmmword [rbp - 0x60]
movups xmmword [rdx + 0x10], xmm11
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm1
add qword [0x140181f78], 0x40
jmp 0x1400536b1
lea r8, [rbp - 0x80]
lea rcx, [0x140181f70]
call fcn.1400505a0
mov rax, qword [0x140181e98]
inc r12d
movsd xmm12, qword [0x1400bd8b0]
movsd xmm7, qword [0x1400bdee0]
movsd xmm9, qword [0x1400bdf18]
cmp r12d, dword [rax + 0x80]
jl 0x140052dd0
mov rax, qword [0x140181558]
cmp rax, qword [0x140181560]
je 0x1400536f9
mov qword [0x140181560], rax
mov r8, qword [0x140181f78]
lea rcx, [0x140181558]
mov rdx, qword [0x140181f70]
sub r8, rdx
sar r8, 6
call fcn.14004ff60
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_200
call fcn.140050fe0
jmp 0x140052a70