Function at 0x14009a2e0
Capabilities:
Capture webcam image
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xc0
mov rax, qword [0x14013d0a8]
xor rax, rsp
mov qword [rbp + 7], rax
mov eax, dword [rbp + 0x7f]
mov r15, r9
mov r13, qword [rbp + 0x6f]
mov r14d, r8d
mov rdi, qword [rbp + 0x77]
mov rbx, rcx
mov esi, 1
test eax, eax
je 0x14009aa9f
sub eax, esi
je 0x14009a63e
cmp eax, 2
jne 0x14009a884
cmp r8d, 0x200
jne 0x14009a4ba
call qword [sym.imp.USER32.dll_GetMessagePos]
mov ecx, eax
xor r12d, r12d
cwde
mov r15d, r12d
shr ecx, 0x10
mov dword [rbp - 0x69], eax
movsx eax, cx
mov dword [rbp - 0x65], eax
test byte [rbx + 0xf0], sil
je 0x14009a499
mov rcx, qword [rbp - 0x69]
mov r14, qword [rbx + 8]
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, r14
jne 0x14009a4a7
lea rdx, [rbp - 0x69]
mov rcx, r14
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x69]
xor r8d, r8d
mov edx, 0x445
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
mov eax, dword [0x14013cfb0]
cmp dword [rbp - 0x69], eax
jne 0x14009a3c8
mov eax, dword [0x14013cfb4]
cmp dword [rbp - 0x65], eax
je 0x14009a4a7
test r14d, r14d
js 0x14009a4a7
mov rcx, qword [rbx + 0x78]
call qword [sym.imp.USER32.dll_GetMenuItemCount]
cmp r14d, eax
jge 0x14009a4a7
mov eax, dword [rbx + 0xf4]
cmp r14d, eax
je 0x14009a4a7
cmp eax, 0xffffffff
je 0x14009a4a7
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x29]
xorps xmm0, xmm0
movsxd r8, r14d
mov edx, 0x417
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp - 0x19], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
test byte [rbp - 0x21], 4
je 0x14009a4a7
or r14d, 0xffff0000
mov dword [rbx + 0xf8], r14d
movsxd rcx, dword [rbx + 0x18]
lea eax, [rcx - 1]
test eax, eax
jns 0x14009a445
mov rbx, r12
jmp 0x14009a44e
mov rax, qword [rbx + 0x10]
mov rbx, qword [rax + rcx*8 - 8]
movzx r9d, word [rbp - 0x65]
xor r8d, r8d
movzx eax, word [rbp - 0x69]
mov edx, 0x202
shl r9d, 0x10
mov rcx, rbx
or r9, rax
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, 0x100
mov rcx, rbx
lea r8d, [r9 + 0x1b]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rax, qword [rbp - 0x69]
mov r15d, esi
mov qword [0x14013cfb0], rax
test esi, esi
jmp 0x14009a87b
mov rcx, qword [rbx + 8]
lea rdx, [rbp - 0x69]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [rbp - 0x69]
test r15d, r15d
mov qword [0x14013cfb0], rax
jmp 0x14009a87b
cmp r14d, 0x104
jne 0x14009a582
cmp r15, 0x12
jne 0x14009a4f9
cmp byte [rcx + 0xf0], 0
jge 0x14009a4ff
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x14009a4ff
test cl, 8
je 0x14009a4ff
movzx edx, sil
mov rcx, rbx
call fcn.14009d560
jmp 0x14009a4ff
cmp r15, 0x20
je 0x14009a54d
test byte [rbx + 0xf0], sil
jne 0x14009a570
mov rsi, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rsi
jne 0x14009a570
and byte [rbx + 0xf1], 0xf7
xor r9d, r9d
mov edx, 0x448
mov rcx, rsi
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, rbx
call fcn.1400971e0
or byte [rbx + 0xf0], 0x40
xor r12d, r12d
mov qword [rdi], r12
jmp 0x14009a884
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 6
jne 0x14009a570
or cl, 8
xor edx, edx
mov byte [rbx + 0xf1], cl
mov rcx, rbx
call fcn.14009d560
xor r12d, r12d
mov dword [rbx + 0x118], r15d
mov qword [rdi], r12
jmp 0x14009a884
cmp r14d, 0x105
jne 0x14009a5a9
movzx eax, byte [rcx + 0xf1]
test al, 8
jne 0x14009a59e
or al, 8
mov byte [rcx + 0xf1], al
xor r12d, r12d
mov qword [rdi], r12
jmp 0x14009a884
cmp r14d, 0x106
jne 0x14009a5e0
test byte [rcx + 0xf0], sil
jne 0x14009a542
mov rax, qword [rcx + 8]
cmp qword [rcx + 0x30], rax
je 0x14009a542
cmp r15, 0x20
je 0x14009a542
xor r12d, r12d
mov eax, esi
mov qword [rdi], r12
jmp 0x14009a886
cmp r14d, 0x100
jne 0x14009a60f
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, r14d
call fcn.1400980b0
cmp dword [rbp - 0x69], 0
mov qword [rdi], rax
jmp 0x14009a87e
cmp r14d, 0x213
je 0x14009aa61
cmp r14d, 0x102
jne 0x14009a884
xor r12d, r12d
mov qword [rdi], r12
cmp r15, 0x1b
je 0x14009afb0
jmp 0x14009a884
xor r12d, r12d
cmp r14d, 0x4e
jne 0x14009a78a
cmp dword [r13 + 0x10], 0xfffffd37
jne 0x14009a6ff
mov rax, qword [rcx + 8]
cmp qword [r13], rax
jne 0x14009a6fc
test byte [rcx + 0x98], 8
mov byte [rbp - 0x71], r12b
jne 0x14009a694
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
lea rdx, [rbp - 0x69]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [rbp - 0x69]
setne byte [rbp - 0x71]
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x14009a6ab
cmp byte [rbp - 0x71], r12b
je 0x14009a6b5
test byte [r13 + 0x20], sil
jne 0x14009aa09
mov eax, dword [r13 + 0x20]
test al, 0x85
jne 0x14009a6fc
test al, 0x10
je 0x14009a6da
mov r9, qword [rbx + 0x78]
xor r8d, r8d
mov rcx, qword [rbx + 0xa0]
mov edx, 0x11f
call qword [sym.imp.USER32.dll_SendMessageW]
test byte [r13 + 0x20], 0x20
je 0x14009a6fc
mov rcx, qword [rbx + 0xa0]
xor r9d, r9d
mov edx, 0x11f
mov r8d, 0xffff0000
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi], r12
cmp dword [r13 + 0x10], 0xfffffd3a
jne 0x14009a7ba
mov rax, qword [rbx + 8]
cmp qword [r13], rax
je 0x14009a71f
mov qword [rdi], rsi
jmp 0x14009a7ba
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [rbx + 8]
je 0x14009a754
test byte [rbx + 0x98], 4
je 0x14009a74a
cmp qword [rbx + 0x120], r12
jne 0x14009a74a
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rbx + 0x120], rax
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SetFocus]
mov r8d, dword [r13 + 0x18]
xor r9d, r9d
mov rcx, qword [rbx + 8]
mov edx, 0x419
call qword [sym.imp.USER32.dll_SendMessageW]
and byte [rbx + 0xf0], 0xcf
movzx r8d, sil
mov edx, eax
mov rcx, rbx
call fcn.140094150
mov rax, rsi
mov qword [rdi], r12
jmp 0x14009a886
cmp r14d, 0x117
jne 0x14009a7ba
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, r14d
call fcn.140098470
mov qword [rdi], rax
cmp dword [rbp - 0x69], r12d
jne 0x14009afb0
call fcn.140096a50
cmp r14d, eax
je 0x14009ac01
cmp r14d, 0x112
jne 0x14009a8ad
mov eax, dword [rbx + 0x118]
mov r14d, r12d
cmp eax, 0x12
je 0x14009a7fe
cmp eax, 0x79
jne 0x14009a7f5
lea ecx, [rax - 0x69]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, al
jns 0x14009a7fe
cmp dword [rbx + 0x118], 0x20
jne 0x14009a871
cmp r15, 0xf100
jne 0x14009a871
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [rbx + 8]
jne 0x14009a833
mov rcx, rbx
call fcn.1400971e0
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14009a871
cmp dword [rbx + 0x118], 0x20
je 0x14009a871
test byte [rbx + 0xf0], 0x40
jne 0x14009a86e
movzx ecx, byte [rbx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x14009a866
test cl, 8
je 0x14009a866
movzx edx, sil
mov rcx, rbx
call fcn.14009d560
mov rcx, rbx
call fcn.14009de90
mov r14d, esi
and byte [rbx + 0xf0], 0xbf
test r14d, r14d
mov qword [rdi], r12
jne 0x14009afb0
xor eax, eax
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400b5660
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r14d, 0x52e
je 0x14009af2c
cmp r14d, 0x120
je 0x14009ac78
cmp r14d, 0x52f
je 0x14009af43
cmp r14d, 0x52d
je 0x14009af72
cmp r14d, 0x1a
jne 0x14009a913
cmp r15, 0x2a
je 0x14009a903
cmp r15, 0x100b
je 0x14009a903
cmp r15, 0x1023
jne 0x14009aa61
mov rcx, rbx
call fcn.140096d90
mov qword [rdi], rsi
jmp 0x14009a884
cmp r14d, 0x2b
jne 0x14009a9aa
mov r14, qword [r13 + 0x38]
cmp dword [r13], esi
jne 0x14009aa61
test r14, r14
je 0x14009aa61
xorps xmm0, xmm0
lea rdx, [rbp - 0x59]
mov r8d, gethostbyaddr
mov rcx, r14
movups xmmword [rbp - 0x59], xmm0
movups xmmword [rbp - 0x49], xmm0
movups xmmword [rbp - 0x39], xmm0
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp qword [rbp - 0x59], r12
je 0x14009aa61
test byte [rbp - 0x35], 6
je 0x14009aa61
cmp dword [r14], 0x1313
jne 0x14009aa61
mov rdx, r13
mov rcx, rbx
test byte [rbx + 0xf1], sil
je 0x14009a998
call fcn.140095df0
mov rax, rsi
mov qword [rdi], rax
mov eax, esi
jmp 0x14009a886
call fcn.140095450
mov rax, rsi
mov qword [rdi], rax
mov eax, esi
jmp 0x14009a886
cmp r14d, 0x2c
jne 0x14009aa13
mov r14, qword [r13 + 0x18]
cmp dword [r13], esi
jne 0x14009aa61
test r14, r14
je 0x14009aa61
xorps xmm0, xmm0
lea rdx, [rbp - 0x59]
mov r8d, gethostbyaddr
mov rcx, r14
movups xmmword [rbp - 0x59], xmm0
movups xmmword [rbp - 0x49], xmm0
movups xmmword [rbp - 0x39], xmm0
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp qword [rbp - 0x59], r12
je 0x14009aa61
test byte [rbp - 0x35], 6
je 0x14009aa61
cmp dword [r14], 0x1313
jne 0x14009aa61
mov rdx, r13
mov rcx, rbx
call fcn.1400973a0
mov qword [rdi], rsi
mov eax, esi
jmp 0x14009a886
cmp r14d, 6
jne 0x14009aa69
movzx eax, byte [rbx + 0xf0]
neg r15w
sbb cl, cl
and al, 0x7f
and cl, 0x80
or cl, al
mov byte [rbx + 0xf0], cl
jl 0x14009aa48
movzx eax, byte [rbx + 0xf1]
and al, r14b
cmp al, r14b
je 0x14009acba
mov rcx, qword [rbx + 8]
mov r8d, esi
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rdi], rsi
jmp 0x14009a884
cmp r14d, 0x4e
jne 0x14009a884
cmp dword [r13 + 0x10], 0xfffffff4
jne 0x14009a884
lea r9, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r8, r13
mov edx, r15d
mov rcx, rbx
call fcn.140099260
cmp dword [rbp - 0x69], r12d
mov qword [rdi], rax
jmp 0x14009a87e
cmp r14d, esi
jne 0x14009aac4
lea rax, [rbp - 0x69]
mov r9, r13
mov r8, r15
mov qword [rsp + 0x20], rax
mov edx, esi
call fcn.140097ac0
mov qword [rdi], rax
mov eax, esi
jmp 0x14009a886
cmp r14d, 2
jne 0x14009aaec
lea rax, [rbp - 0x69]
mov r9, r13
mov r8, r15
mov qword [rsp + 0x20], rax
mov edx, r14d
call fcn.140097df0
mov qword [rdi], rax
mov rax, rsi
jmp 0x14009a886
xor r12d, r12d
cmp r14d, 0x14
jne 0x14009ab40
test byte [rcx + 0xf0], 2
jne 0x14009ab38
test byte [rcx + 0x98], sil
jne 0x14009ab38
mov rcx, qword [rcx + 8]
lea rdx, [rbp - 0x69]
xorps xmm0, xmm0
movups xmmword [rbp - 0x69], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
lea r8d, [r12 + 5]
mov rcx, r15
lea rdx, [rbp - 0x69]
call qword [sym.imp.USER32.dll_FillRect]
mov eax, esi
mov qword [rdi], rsi
jmp 0x14009a886
mov qword [rdi], r12
jmp 0x14009abd5
cmp r14d, 0x116
jne 0x14009ab80
mov rcx, qword [rcx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, qword [rbx + 0x78]
lea edx, [r14 + 9]
mov rcx, qword [rbx + 8]
movzx r8d, ax
or r8, 0x900000
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rdi], rsi
jmp 0x14009abd5
cmp r14d, 0x117
jne 0x14009aba5
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, r14d
call fcn.140098470
jmp 0x14009abc8
cmp r14d, 0x11f
jne 0x14009abd5
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, r14d
call fcn.140099050
mov qword [rdi], rax
cmp dword [rbp - 0x69], r12d
jne 0x14009afb0
call fcn.1400969f0
cmp r14d, eax
jne 0x14009abf7
xor r8d, r8d
mov edx, r15d
mov rcx, rbx
call fcn.140094150
mov eax, esi
mov qword [rdi], r12
jmp 0x14009a886
call fcn.140096a50
cmp r14d, eax
jne 0x14009ac3f
test r15, r15
je 0x14009ac0f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [r15], eax
mov rcx, qword [rbx + 8]
lea r14, [rbx + 8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x14009ac32
test rbx, rbx
mov eax, esi
cmove r14, r12
mov qword [rdi], r14
jmp 0x14009a886
mov r14, r12
mov qword [rdi], r12
mov eax, esi
jmp 0x14009a886
cmp r14d, 0x1a
jne 0x14009ac6f
cmp r15, 0x2a
je 0x14009ac5d
cmp r15, 0x100b
je 0x14009ac5d
cmp r15, 0x1023
jne 0x14009ac65
mov rcx, rbx
call fcn.140096d90
mov qword [rdi], r12
mov eax, esi
jmp 0x14009a886
cmp r14d, 0x120
jne 0x14009aca3
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, 0x120
mov rcx, rbx
call fcn.140098c90
cmp dword [rbp - 0x69], r12d
mov qword [rdi], rax
jmp 0x14009a87e
cmp r14d, 8
jne 0x14009accc
movzx eax, byte [rbx + 0xf1]
and al, 6
cmp al, 6
jne 0x14009aa61
xor edx, edx
mov rcx, rbx
call fcn.14009d560
mov qword [rdi], rsi
jmp 0x14009a884
cmp r14d, 0x100
jne 0x14009ada9
movzx edx, byte [rbx + 0xf0]
mov ecx, r12d
mov dword [rbp - 0x69], ecx
test dl, 2
jne 0x14009aa61
cmp r15, 0x20
jne 0x14009ad1a
mov rcx, qword [rbx + 0xa0]
lea edx, [r14 + 4]
bts r13, 0x1d
mov r8, r15
mov r9, r13
call qword [sym.imp.USER32.dll_PostMessageW]
mov ecx, esi
test ecx, ecx
jmp 0x14009a87b
lea rax, [r15 - 0x25]
test rax, 0xfffffffffffffffd
jne 0x14009ada2
movzx r14d, byte [rbx + 0xf1]
shr r14, 5
not r14
and r14d, 2
or r14, 0x25
test sil, dl
jne 0x14009ada2
mov rcx, qword [rbx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
mov edx, eax
cmp r15, r14
jne 0x14009ad68
call fcn.140096b60
jmp 0x14009ad6d
call fcn.140096c90
cmp eax, 0xfffffffe
jne 0x14009ad9f
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.140093b90
mov ecx, dword [rbp - 0x69]
test al, al
cmovne ecx, esi
test ecx, ecx
jmp 0x14009a87b
mov ecx, dword [rbp - 0x69]
test ecx, ecx
jmp 0x14009a87b
cmp r14d, 0x101
jne 0x14009add1
test byte [rbx + 0xf0], 2
jne 0x14009aa61
mov qword [rdi], r12
cmp r15, 0x20
je 0x14009afb0
jmp 0x14009a884
cmp r14d, 0x102
jne 0x14009af13
test byte [rbx + 0xf0], 2
mov r14d, esi
jne 0x14009aa61
cmp r15, 0x20
je 0x14009a878
mov rcx, qword [rbx + 0xa0]
mov r14d, r12d
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x14009a545
mov r13, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, r13
jne 0x14009a545
mov dword [rbp - 0x69], r12d
cmp r15, 0xd
je 0x14009ae5f
movzx r8d, r15w
lea r9, [rbp - 0x69]
mov edx, 0x45a
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14009ae5f
cmp r15w, 0x2f
je 0x14009a878
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
jmp 0x14009a878
mov rcx, qword [rbx + 8]
lea rdx, [rbp - 9]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
movsxd r8, dword [rbp - 0x69]
lea r9, [rbp - 0x29]
mov rcx, qword [rbx + 8]
xorps xmm0, xmm0
mov edx, 0x41d
movups xmmword [rbp - 0x29], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, dword [rbp - 0x69]
lea r9, [rbp - 0x59]
mov rcx, qword [rbx + 8]
xorps xmm0, xmm0
mov edx, 0x417
movups xmmword [rbp - 0x59], xmm0
movups xmmword [rbp - 0x49], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
movzx eax, byte [rbp - 0x51]
test al, 4
je 0x14009af03
test al, 8
jne 0x14009af03
mov eax, dword [rbp - 1]
cmp dword [rbp - 0x21], eax
jg 0x14009af03
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0x28]
call qword [sym.imp.USER32.dll_PostMessageW]
cmp r15, 0xd
je 0x14009a878
movsxd r8, dword [rbp - 0x69]
xor r9d, r9d
mov rcx, qword [rbx + 8]
mov edx, 0x448
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14009a878
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
mov r14d, esi
jmp 0x14009a878
lea eax, [r14 - 0x104]
cmp eax, 2
jbe 0x14009a545
cmp r14d, 0x52e
jne 0x14009af3a
mov rax, qword [rbx + 0x78]
mov qword [rdi], rax
mov eax, esi
jmp 0x14009a886
cmp r14d, 0x52f
jne 0x14009af69
lea rax, [rbp - 0x69]
mov r9, r13
mov r8, r15
mov qword [rsp + 0x20], rax
mov edx, 0x52f
mov rcx, rbx
call fcn.140097740
mov qword [rdi], rax
mov eax, esi
jmp 0x14009a886
cmp r14d, 0x52d
jne 0x14009af80
mov rax, qword [rbx + 8]
mov qword [rdi], rax
mov eax, esi
jmp 0x14009a886
cmp r14d, 0x2b
jne 0x14009afb7
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, r14d
mov rcx, rbx
call fcn.140098000
mov qword [rdi], rax
cmp dword [rbp - 0x69], r12d
je 0x14009a884
mov eax, esi
jmp 0x14009a886
cmp r14d, 0x2c
jne 0x14009afed
lea rax, [rbp - 0x69]
mov dword [rbp - 0x69], esi
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, r14d
mov rcx, rbx
call fcn.140098bf0
cmp dword [rbp - 0x69], r12d
mov qword [rdi], rax
setne r12b
mov eax, r12d
jmp 0x14009a886
cmp r14d, 0x37f
jne 0x14009a884
mov ecx, dword [r13 + 8]
lea eax, [rcx - 0x200]
cmp eax, 0xe
ja 0x14009b012
and byte [rbx + 0xf1], 0xef
jmp 0x14009b024
lea eax, [rcx - 0x100]
cmp eax, 9
ja 0x14009b024
or byte [rbx + 0xf1], 0x10
mov r10, qword [rbx]
lea rax, [rbp - 0x69]
mov r9, qword [r13 + 0x10]
mov rcx, rbx
mov r8d, dword [r13 + 8]
mov rdx, qword [r13]
mov dword [rsp + 0x30], 3
mov qword [rsp + 0x28], rax
mov rax, qword [r13 + 0x18]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x69], r12
call qword [r10]
mov rax, qword [rbp - 0x69]
mov qword [rdi], rax
mov eax, esi
jmp 0x14009a886