Function at 0x1400020b0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x440
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1403d3080]
xor rax, rsp
mov qword [rbp + 0x340], rax
xor esi, esi
call qword [sym.imp.KERNEL32.dll_FreeConsole]
movabs r14, 0x7fffffffffffffff
cmp byte [0x140415dc0], sil
jne 0x1400021ad
movabs rbx, 0x7ffffffed5fa0dff
movabs rdi, 0x12a05f200
nop word [rax + rax]
lea rcx, [0x140415d40]
call fcn.140021a40
cmp byte [0x140415dc0], sil
jne 0x1400021ad
lea rcx, [rbp + 0x100]
call fcn.140001c50
mov rax, qword [rbp + 0x100]
cmp rax, rbx
je 0x140002191
setl cl
test cl, cl
je 0x140002191
lea rcx, [rax + rdi]
mov qword [rbp + 0x80], rcx
jmp 0x140002198
mov qword [rbp + 0x80], r14
lea rcx, [rbp + 0x80]
call fcn.140004c20
cmp byte [0x140415dc0], sil
je 0x140002150
mov ecx, dword [0x140415e10]
call fcn.140086eb0
call fcn.140087080
mov ecx, 1
call fcn.1401617e0
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0xd8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140005090]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x1400030cc
mov qword [rbp + 0x260], rsi
cmp dword [rbp + 0xd8], 0
je 0x1400030c0
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400030c0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea ecx, [rax + 1]
call fcn.1401617e0
mov qword [rbp + 0x268], rax
lea rcx, [rbp + 0xe8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400050c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x1400030ae
mov qword [rbp + 0x268], rsi
cmp dword [rbp + 0xe8], 0
je 0x1400030a2
movaps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400030a2
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0xe0], xmm0
lea ecx, [rax + 1]
call fcn.1401617e0
mov qword [rbp + 0x270], rax
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400050f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x140003090
mov qword [rbp + 0x270], rsi
cmp dword [rbp + 0x98], 0
je 0x140003084
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x190], xmm0
lea rcx, [rbp + 0x190]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003084
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movdqa xmmword [rbp + 0x90], xmm0
lea ecx, [rax + 1]
call fcn.1401617e0
mov qword [rbp + 0x278], rax
lea rcx, [rbp + 0xf8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140005120]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140003072
mov qword [rbp + 0x278], rsi
cmp dword [rbp + 0xf8], 0
je 0x140003066
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003066
xorps xmm0, xmm0
movaps xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0xf0], xmm0
cmp byte [0x1404156f3], al
je 0x140003006
xor eax, eax
movups xmmword [rbp + 0x208], xmm0
movups xmmword [rbp + 0x218], xmm0
mov qword [rbp + 0x228], rax
mov dword [rbp + 0x220], 1
mov byte [rbp + 0x224], 1
mov rax, qword [0x1404157f8]
mov qword [rsp + 0x20], rax
mov r9, qword [0x1404157e0]
mov rdx, qword [0x1404157e8]
lea rcx, [rbp + 0x208]
call fcn.14007f2b0
nop
mov rax, qword [0x140415778]
mov qword [rax + 0x38f4], rsi
mov dword [rax + 0x38f0], esi
mov dword [rax + 0x38fc], esi
mov dword [rax + 0x392c], 0x40400000
mov dword [rax + 0x3924], 0x41600000
mov dword [rax + 0x3928], 0x41400000
mov dword [rax + 0x3930], 0x3f800000
mov qword [rax + 0x391c], 0x40400000
mov dword [rax + 0x3914], 0x40800000
mov dword [rax + 0x3918], 0x3f800000
mov dword [rax + 0x3934], 0x41a00000
mov dword [rax + 0x3938], 0x41a00000
mov dword [rax + 0x393c], 0x41200000
mov dword [rax + 0x3940], 0x41200000
mov dword [rax + 0x3960], 0x40800000
mov dword [rax + 0x395c], 0x40800000
call fcn.140069cc0
lea rcx, [0x1404160d8]
call fcn.140006440
lea rax, [0x1401b97a8]
mov qword [rbp + 0x108], rax
lea rax, [0x1400866b0]
mov qword [rbp + 0x110], rax
movzx eax, byte [rbp + 0x158]
mov byte [rbp + 0x118], al
movzx eax, byte [rbp + 0x159]
mov byte [rbp + 0x119], al
movzx eax, byte [rbp + 0x15a]
mov byte [rbp + 0x11a], al
movzx eax, byte [rbp + 0x15b]
mov byte [rbp + 0x11b], al
lea rax, [rbp + 0x208]
mov qword [rbp + 0x120], rax
lea rax, [rbp + 0x108]
mov qword [rbp + 0x140], rax
lea rax, [rbp + 0x108]
mov qword [rbp + 0x20], rax
lea rdx, [rbp + 0x108]
call fcn.140087670
nop
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x1400025a6
mov rax, qword [rcx]
lea rdx, [rbp + 0x108]
cmp rcx, rdx
setne dl
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov qword [rbp + 0x140], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
movabs r12, 0x79f5aaf0680a26f4
movabs r13, 0xf3561bf17a1a5c06
movabs r15, 0x95390ba98931ff78
movss xmm6, dword [0x1403b298c]
movss xmm8, dword [0x1403b2a74]
xorps xmm7, xmm7
movss xmm9, dword [0x1403b29dc]
movss xmm10, dword [0x1403b2b70]
movss xmm11, dword [0x1403b2b60]
movss xmm12, dword [0x1403b29d4]
movss xmm13, dword [0x1403b2aac]
nop dword [rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x1404157e8]
lea rcx, [rbp + 0x280]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140002660
lea rcx, [rbp + 0x280]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x280]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rcx, qword [0x140415778]
movzx eax, byte [rbp + 0x224]
mov byte [rcx + 0x58], al
lea rcx, [0x140415d40]
call fcn.140026f10
call fcn.140028f90
mov r8d, dword [rbp + 0x228]
mov r9d, dword [rbp + 0x22c]
test r9d, r9d
jne 0x14000269e
test r8d, r8d
je 0x14000272b
mov rcx, qword [0x140415818]
test rcx, rcx
je 0x1400026c5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140415818], rsi
mov r9d, dword [rbp + 0x22c]
mov r8d, dword [rbp + 0x228]
mov rcx, qword [0x140415800]
mov rax, qword [rcx]
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor edx, edx
call qword [rax + 0x68]
mov qword [rbp + 0x228], rsi
mov rcx, qword [0x140415800]
mov rax, qword [rcx]
lea r9, [rbp + 0x200]
lea r8, [0x1403af298]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1404157e0]
mov rax, qword [rcx]
lea r9, [0x140415818]
xor r8d, r8d
mov rdx, qword [rbp + 0x200]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x200]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, dword [0x1403de1d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400027a2
cmp byte [0x140415d10], 0
jne 0x1400027a9
mov byte [0x140415d10], 1
cmp byte [rbp + 0x224], 0
sete al
mov byte [rbp + 0x224], al
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x208]
test al, al
je 0x140002787
mov r8d, 0xa8
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [rbp + 0x208]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1400027a9
mov r8d, 0x800a8
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [rbp + 0x210]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1400027a9
mov byte [0x140415d10], 0
lea rdx, [rbp + 0x230]
mov rcx, qword [0x1404157f0]
call qword [sym.imp.USER32.dll_GetClientRect]
mov r9d, 2
lea r8, [rbp + 0x230]
xor edx, edx
mov rcx, qword [0x1404157f0]
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [rbp + 0x23c]
mov r8d, dword [rbp + 0x234]
sub eax, r8d
mov r9d, dword [rbp + 0x238]
mov edx, dword [rbp + 0x230]
sub r9d, edx
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], eax
mov rcx, qword [0x1404157e8]
call qword [sym.imp.USER32.dll_MoveWindow]
movzx eax, byte [0x1403de1dc]
cmp al, byte [0x1404156c8]
je 0x1400028dd
mov byte [0x1404156c8], al
neg al
sbb edi, edi
and edi, 0x11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400028b4
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400028b4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x744fec61
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400028af
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140002890
cmp edx, 0xee7426af
je 0x1400028b9
test r9d, r9d
jne 0x140002870
mov rax, qword [rax]
jmp 0x140002840
mov r8d, dword [rbx + 0x1c]
add r8, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [r8 + rcx*4]
add rax, r10
mov edx, edi
mov rcx, qword [0x1404157e8]
call rax
mov rax, qword [0x140415778]
test rax, rax
je 0x1400028f2
mov rcx, qword [rax + 0x98]
jmp 0x1400028f5
mov rcx, rsi
cmp qword [rcx + 0x48], 0
jne 0x140002901
call fcn.14005ec40
call fcn.14005fc50
call fcn.14003e850
movups xmm0, xmmword [0x1403de164]
movups xmmword [rbp + 0x240], xmm0
movups xmm0, xmmword [0x1403de174]
movups xmmword [rbp + 0x250], xmm0
cmp byte [0x1403de160], 0
je 0x1400029f1
mov rax, qword [0x140415778]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd10
mov rbx, rax
lea rcx, [rbp + 0x240]
call fcn.140039e80
mov edi, eax
movd xmm2, dword [0x1403de094]
cvtdq2ps xmm2, xmm2
mov rcx, qword [0x140415778]
movss xmm1, dword [rcx + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0xa0], xmm0
movss dword [rbp + 0xa4], xmm1
test eax, 0xff000000
je 0x1400029f1
comiss xmm6, xmm2
ja 0x1400029f1
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm7
lea rdx, [rbp + 0xa0]
mov rcx, rbx
call fcn.140056530
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140054b70
mov dword [rbx + 0x78], esi
cmp byte [0x1403de161], 0
je 0x140002abb
mov rax, qword [0x140415778]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd10
mov rbx, rax
lea rcx, [rbp + 0x250]
call fcn.140039e80
mov edi, eax
movd xmm2, dword [0x1403de0b8]
cvtdq2ps xmm2, xmm2
mov rcx, qword [0x140415778]
movss xmm1, dword [rcx + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0xa8], xmm0
movss dword [rbp + 0xac], xmm1
test eax, 0xff000000
je 0x140002abb
comiss xmm6, xmm2
ja 0x140002abb
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm7
lea rdx, [rbp + 0xa8]
mov rcx, rbx
call fcn.140056530
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140054b70
mov dword [rbx + 0x78], esi
cmp byte [0x1403de148], 0
je 0x140002ac9
call fcn.140020000
cmp byte [0x1403de0cc], 0
je 0x140002ad7
call fcn.14001d560
cmp byte [0x1403de1d2], 0
je 0x140002efb
mov rax, qword [0x140415778]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd10
mov rbx, rax
movaps xmm0, xmmword [0x1403b2cd0]
movups xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.140039e80
mov rcx, qword [0x140415778]
movss xmm0, dword [rcx + 0x10]
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x41f00000
mov qword [rbp + 0xb8], 0
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm7
mov r9d, eax
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xb8]
mov rcx, rbx
call fcn.1400570f0
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rdi, 0xa3d42469118f5e49
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0xcd19c9cb0ef654fd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xd6abec585573126d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x1681cb840b6f56a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0xdb767e9515577c74
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xf091041a62ea2c19
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xac7c85eb61a274be
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xd6abec58555a771b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x2e0]
vmovdqa xmmword [rbp + 0x60], xmm0
mov rbx, qword [0x140415778]
mov qword [rsp + 0x30], rsi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
vmovss dword [rsp + 0x20], xmm10
vmovaps xmm3, xmm11
vmovss xmm2, dword [rbx + 0x3d38]
lea rdx, [rbp + 0x18]
mov rcx, qword [rbx + 0x3d30]
vzeroupper
call fcn.140059af0
movss xmm0, dword [rbp + 0x18]
addss xmm0, xmm12
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
mov rax, qword [rbx + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd10
mov rbx, rax
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x50], rcx
movabs rax, 0xcd19c9cb0ef654fd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xd6abec585573126d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x1681cb840b6f56a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0xdb767e9515577c74
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0xf091041a62ea2c19
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0xac7c85eb61a274be
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0xd6abec58555a771b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm0, ymm0, ymmword [rbp + 0x300]
vmovdqu ymmword [rbp + 0x40], ymm0
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x320]
vmovdqa xmmword [rbp + 0x60], xmm0
vmovaps xmm0, xmmword [0x1403b2de0]
vmovups xmmword [rbp + 0x1b0], xmm0
lea rcx, [rbp + 0x1b0]
vzeroupper
call fcn.140039e80
mov edx, eax
movss xmm0, dword [rbp + 0x1c]
mulss xmm0, xmm6
movaps xmm2, xmm13
subss xmm2, xmm0
mov rcx, qword [0x140415778]
movss xmm1, dword [rcx + 0x10]
mulss xmm1, xmm6
movss xmm0, dword [rbp + 0x18]
mulss xmm0, xmm6
subss xmm1, xmm0
movss dword [rbp + 0xc0], xmm1
movss dword [rbp + 0xc4], xmm2
test eax, 0xff000000
je 0x140002ed3
cmp byte [rbp + 0x40], 0
je 0x140002ed3
lea rcx, [rbp + 0x40]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140002e70
lea rcx, [rbp + 0x40]
add rcx, rax
mov rax, qword [rbx + 0x38]
movups xmm0, xmmword [rbx + 0x88]
movups xmmword [rbp + 0x1c0], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm7
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x1c0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0xc0]
movss xmm2, dword [rax + 0x10]
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.140059d10
mov ecx, reloc.WLDAP32.dll_Ordinal_27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140002efb
xor r8d, r8d
xor edx, edx
lea rcx, [0x140415d40]
call fcn.14002a590
mov byte [0x1403de1d2], 0
lea rcx, [rbp + 0x208]
call fcn.14007f470
call fcn.140040300
call fcn.140040700
mov rcx, qword [0x1404157f8]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140415818]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x1404157f8]
mov rax, qword [rcx]
lea r8, [0x140415d18]
mov rdx, qword [0x140415818]
call qword [rax + 0x190]
mov rax, qword [0x140415778]
mov rax, qword [rax + 0x4b10]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, rsi
cmp byte [rcx], sil
cmovne rax, rcx
mov rcx, rax
call fcn.14005e1e0
mov rcx, qword [0x140415800]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
cmp byte [0x1403de1d0], 0
jne 0x14000305e
movsxd rbx, dword [0x1403de1e0]
lea rcx, [rbp + 0x20]
call fcn.140001c50
mov rax, qword [rbp + 0x20]
mov qword [rbp], rax
test rbx, rbx
je 0x140002fea
mov rcx, rbx
shr rcx, 0x3f
xor cl, 1
je 0x140002fea
imul rdx, rbx, 0xf4240
imul r8, rbx, 0xf4240
mov rcx, r14
sub rcx, r8
cmp rax, rcx
je 0x140002fe6
setl cl
test cl, cl
je 0x140002fe6
lea rcx, [rdx + rax]
mov qword [rbp], rcx
jmp 0x140002fea
mov qword [rbp], r14
lea rcx, [rbp]
call fcn.140004c20
cmp dword [rbp + 0x288], 0x12
jne 0x140002620
call fcn.140086700
nop
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.1401617c0
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140086700
nop
jmp 0x140003006
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x98], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xe8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xd8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3