Function at 0x140085860
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Execute command
Hide graphical window
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], r15
push rbp
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov rax, qword [0x14015c040]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..SWGSKOOL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140439120], rax
test rax, rax
je 0x1400870bd
cmp rax, 0xffffffffffffffff
je 0x1400870bd
movdqa xmm0, xmmword [0x140142f90]
movdqu xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x20], 0x78652e61
mov word [rbp + 0x24], 0x65
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0xc0], 0x130
lea rdx, [rbp + 0xc0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14008594f
lea rdx, [rbp + 0x11]
lea rcx, [rbp + 0xec]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x140085a92
lea rdx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140085922
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x140439128], r15d
lea rcx, str.color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140142a80]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142a10]
movdqu xmmword [rbp - 0x78], xmm1
movdqa xmm0, xmmword [0x140142a90]
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp - 0x58], 0x322f2824
mov dword [rbp - 0x54], 0x2d2d2035
mov word [rbp - 0x50], 0x4b6f
mov byte [rbp - 0x4e], r15b
nop dword [rax]
movzx eax, byte [rsp + 0x78]
xor byte [rsp + r15 + 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + r15 + 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + r15 + 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + r15 + 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + r15 + 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + r15 + 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + r15 + 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x80], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x78], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x77], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x76], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + r15 - 0x75], al
add r15, 0x13
cmp r15, 0x39
jb 0x1400859b0
mov byte [rbp - 0x4e], 0
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
nop word [rax + rax]
jmp 0x140085a90
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [rbp + 0xc8]
mov dword [0x140439128], edx
test edx, edx
je 0x14008595f
movdqa xmm0, xmmword [0x140142a00]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142dc0]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x49206874
mov dword [rbp - 0x64], 0x25203a44
mov word [rbp - 0x60], 0xa64
mov byte [rbp - 0x5e], r15b
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
call fcn.140084ad0
lea rdx, [rax + 0x118]
call fcn.140089b20
lea rdx, [rax + 0x198]
call fcn.140089b20
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x140085b6e
lea rcx, str.color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140142f70]
movdqu xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x140142990]
movdqu xmmword [rbp - 0x38], xmm1
mov byte [rbp - 0x28], r15b
lea rcx, [rbp - 0x47]
call fcn.14000d7c0
xor al, al
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.140113570
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov r15, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
movdqa xmm0, xmmword [0x140142d60]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142f30]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x3a737365
mov dword [rbp - 0x64], 0x25783020
mov dword [rbp - 0x60], 0xa786c6c
mov byte [rbp - 0x5c], r15b
mov rdx, rax
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
mov dword [rbp - 0x20], 0x67694c60
mov dword [rbp - 0x1c], 0x6e697468
mov word [rbp - 0x18], 0x67
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
lea rax, [rbp - 0x1f]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r15b
jne 0x140085be0
lea rdx, [rbp - 0x1f]
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.140087a60
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov r8d, 9
lea rdx, str.Workspace
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x40]
call fcn.140087a60
cmp qword [rsp + 0x60], r15
jne 0x140085c84
movdqa xmm0, xmmword [0x140142e70]
mov dword [rbp - 0x38], 0x6f662074
mov dword [rbp - 0x34], 0x2e646e75
mov word [rbp - 0x30], 0xa
movdqu xmmword [rbp - 0x48], xmm0
lea rcx, [rbp - 0x47]
call fcn.14000d7c0
lea rcx, str.color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140085b44
movdqa xmm0, xmmword [0x140142e20]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142d90]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x203a7373
mov dword [rbp - 0x64], 0x6c257830
mov dword [rbp - 0x60], 0xa786c
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
cmp qword [rsp + 0x68], r15
jne 0x140085cef
movdqa xmm0, xmmword [0x140142de0]
mov dword [rbp - 0x38], 0x6620746f
mov dword [rbp - 0x34], 0x646e756f
mov word [rbp - 0x30], 0xa2e
mov byte [rbp - 0x2e], r15b
jmp 0x140085c64
movdqa xmm0, xmmword [0x140142d50]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142f20]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x3a737365
mov dword [rbp - 0x64], 0x25783020
mov dword [rbp - 0x60], 0xa786c6c
mov byte [rbp - 0x5c], r15b
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov r8d, 7
lea rdx, str.Players
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.140087a60
mov rbx, qword [rsp + 0x58]
mov qword [0x1404382d0], rbx
test rbx, rbx
jne 0x140085d9a
movdqa xmm0, xmmword [0x140142fd0]
mov dword [rbp - 0x38], 0x756f6620
mov dword [rbp - 0x34], 0xa2e646e
mov byte [rbp - 0x30], r15b
jmp 0x140085c64
movdqa xmm0, xmmword [0x140142f60]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142f50]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x30203a73
mov dword [rbp - 0x64], 0x6c6c2578
mov word [rbp - 0x60], 0xa78
mov byte [rbp - 0x5e], r15b
mov rdx, rbx
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
lea rcx, [rbp - 0x20]
call fcn.140085140
lea rdx, str.Place_ID:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089bd0
mov rdx, qword [rbp - 0x20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140089db0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x140142e30]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142f40]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x73646165
mov dword [rbp - 0x64], 0xa2e2e2e
mov byte [rbp - 0x60], r15b
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
mov ecx, 8
call fcn.1401136b0
lea rcx, [0x140004b30]
mov qword [rax], rcx
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140091f60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x1400870ad
mov ecx, 8
call fcn.1401136b0
lea rcx, [0x14009deb0]
mov qword [rax], rcx
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140091f60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14008709d
mov ecx, 8
call fcn.1401136b0
lea rcx, [0x14009e0c0]
mov qword [rax], rcx
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140091f60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14008708d
mov ecx, 8
call fcn.1401136b0
lea rcx, [0x1400a8500]
mov qword [rax], rcx
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140091f60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x14008707a
movdqa xmm0, xmmword [0x140142db0]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142fa0]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x44492068
mov dword [rbp - 0x64], 0x6425203a
mov word [rbp - 0x60], 0xa
mov edx, dword [rbp + 0x68]
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
movdqa xmm0, xmmword [str.u.107_2_U__a]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142970]
movdqu xmmword [rbp - 0x78], xmm1
movdqa xmm0, xmmword [0x140142960]
movdqu xmmword [rbp - 0x68], xmm0
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x80], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x78], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x77], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x76], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x75], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x74], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x73], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x72], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x71], al
add rcx, 0x17
cmp rcx, 0x2e
jb 0x140085fe0
mov byte [rbp - 0x59], 0
mov edx, dword [rbp + 0x58]
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
movdqa xmm0, xmmword [0x1401429f0]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142fe0]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x20687469
mov dword [rbp - 0x64], 0x203a4449
mov dword [rbp - 0x60], 0xa6425
mov edx, dword [rbp + 0x48]
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
cmp dword [rbp + 0x68], 0
je 0x14008706e
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14008706e
xorps xmm0, xmm0
movaps xmmword [rbp + 0x60], xmm0
movdqa xmmword [rbp + 0x60], xmm0
cmp dword [rbp + 0x58], eax
je 0x14008706e
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14008706e
xorps xmm0, xmm0
movaps xmmword [rbp + 0x50], xmm0
movdqa xmmword [rbp + 0x50], xmm0
cmp dword [rbp + 0x48], eax
je 0x14008706e
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14008706e
xorps xmm0, xmm0
movaps xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm0, xmmword [0x140142ce0]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142cf0]
movdqu xmmword [rbp - 0x78], xmm1
movdqa xmm0, xmmword [0x1401428c0]
movdqu xmmword [rbp - 0x68], xmm0
mov word [rbp - 0x58], 0x24
mov rcx, r15
nop dword [rax]
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x80], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x78], al
add rcx, 0x10
cmp rcx, 0x30
jb 0x1400861d0
mov byte [rbp - 0x57], 0
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
add rbx, 0x110
mov dword [rbp + 0x31], r15d
mov word [rbp + 0x35], r15w
mov byte [rbp + 0x37], 0
mov dword [rbp + 0x10], 0x12b2d92
mov qword [rbp + 0x18], rbx
lea rax, [rsp + 0x70]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], 8
mov edx, dword [0x140439128]
mov dword [rbp + 0x14], edx
mov byte [rbp + 0x30], 0
mov rcx, qword [0x140439120]
test edx, edx
je 0x140086306
test rcx, rcx
je 0x140086306
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x10]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edx, dword [0x140439128]
mov rcx, qword [0x140439120]
mov rax, qword [rsp + 0x70]
add rax, 0x298
mov dword [rbp + 1], r15d
mov word [rbp + 5], r15w
mov byte [rbp + 7], 0
mov dword [rbp - 0x20], 0x12b2d92
mov qword [rbp - 0x18], rax
lea rax, [rsp + 0x50]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 8
mov dword [rbp - 0x1c], edx
mov byte [rbp], 0
test edx, edx
je 0x14008637a
test rcx, rcx
je 0x14008637a
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x20]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov r8d, 0xa
lea rdx, str.LowerTorso
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x50]
call fcn.140087a60
mov dword [rbp + 0x91], r15d
mov word [rbp + 0x95], r15w
mov byte [rbp + 0x97], 0
mov dword [rbp + 0x70], 0x12b2d92
mov qword [rbp + 0x78], rbx
lea rax, [rsp + 0x48]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], 8
mov edx, dword [0x140439128]
mov dword [rbp + 0x74], edx
mov byte [rbp + 0x90], 0
mov rcx, qword [0x140439120]
test edx, edx
je 0x140086446
test rcx, rcx
je 0x140086446
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x70]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edx, dword [0x140439128]
mov rcx, qword [0x140439120]
mov rax, qword [rsp + 0x48]
add rax, 0x298
mov dword [rbp - 0x67], r15d
mov word [rbp - 0x63], r15w
mov byte [rbp - 0x61], 0
mov dword [rsp + 0x78], 0x12b2d92
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x20]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 8
mov dword [rsp + 0x7c], edx
mov byte [rbp - 0x68], 0
test edx, edx
je 0x1400864bd
test rcx, rcx
je 0x1400864bd
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rsp + 0x78]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
mov r8d, 0xa
lea rdx, str.UpperTorso
lea rcx, [rbp + 0x10]
call fcn.14000c8c0
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x20]
call fcn.140087a60
mov dword [rbp - 0x67], r15d
mov word [rbp - 0x63], r15w
mov byte [rbp - 0x61], 0
mov dword [rsp + 0x78], 0x12b2d92
mov qword [rbp - 0x80], rbx
lea rax, [rsp + 0x50]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 8
mov edx, dword [0x140439128]
mov dword [rsp + 0x7c], edx
mov byte [rbp - 0x68], 0
mov rcx, qword [0x140439120]
test edx, edx
je 0x14008657b
test rcx, rcx
je 0x14008657b
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rsp + 0x78]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edx, dword [0x140439128]
mov rcx, qword [0x140439120]
mov rax, qword [rsp + 0x50]
add rax, 0x298
mov dword [rbp + 0x91], r15d
mov word [rbp + 0x95], r15w
mov byte [rbp + 0x97], 0
mov dword [rbp + 0x70], 0x12b2d92
mov qword [rbp + 0x78], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], 8
mov dword [rbp + 0x74], edx
mov byte [rbp + 0x90], 0
test edx, edx
je 0x140086601
test rcx, rcx
je 0x140086601
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x70]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov r8d, 0x10
lea rdx, str.HumanoidRootPart
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.140087a60
movdqa xmm0, xmmword [0x140142d30]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0x79
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
lea rax, [rbp - 0x1f]
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x140086660
mov r8, rdi
lea rdx, [rbp - 0x1f]
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x58]
call fcn.140087a60
cmp qword [rbp - 0x20], 0
jne 0x140086704
lea rcx, str.color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140142e90]
movdqu xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x140142a70]
movdqu xmmword [rbp - 0x38], xmm1
mov word [rbp - 0x28], 0xa
lea rcx, [rbp - 0x47]
call fcn.14000d7c0
nop
cmp dword [rbp + 0xb8], 0
je 0x1400866d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x48], 0
je 0x1400866e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x58], 0
je 0x1400866f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x68], 0
je 0x140085b44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
movdqa xmm0, xmmword [0x140142e80]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x6579616c
mov dword [rbp - 0x34], 0x6f662072
mov dword [rbp - 0x30], 0x2e646e75
mov word [rbp - 0x2c], 0xa
lea rcx, [rbp - 0x47]
call fcn.14000d7c0
movdqa xmm0, xmmword [0x140142d80]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x61472064
mov dword [rbp - 0x34], 0x4420656d
mov dword [rbp - 0x30], 0x3a617461
mov word [rbp - 0x2c], 0xa
lea rcx, [rbp - 0x47]
call fcn.14000d7c0
lea rdx, [0x140084670]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
movdqa xmm0, xmmword [0x1401429d0]
movdqu xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x20], 0x30203e2d
mov word [rbp + 0x24], 0x78
lea rdx, [rbp + 0x11]
mov rcx, rax
call fcn.140089bd0
mov rdi, qword [rsp + 0x40]
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140089db0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140084670]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
movdqa xmm0, xmmword [0x140142a40]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x7830203e
mov byte [rbp - 0xc], 0
lea rdx, [rbp - 0x1f]
mov rcx, rax
call fcn.140089bd0
mov rdx, qword [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140089db0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140084670]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
movdqa xmm0, xmmword [0x1401429c0]
movdqu xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x20], 0x30203e2d
mov word [rbp + 0x24], 0x78
lea rdx, [rbp + 0x11]
mov rcx, rax
call fcn.140089bd0
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140089db0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140084670]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
movdqa xmm0, xmmword [0x140142ac0]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x783020
lea rdx, [rbp - 0x1f]
mov rcx, rax
call fcn.140089bd0
mov rbx, qword [rsp + 0x58]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140089db0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x140142dd0]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142d20]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0x616d206e
mov dword [rbp - 0x64], 0x2e686374
mov word [rbp - 0x60], 0xa
lea rdx, [rsp + 0x79]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089bd0
lea rcx, str.color_A
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [0x1404382d0], rbx
call fcn.140084ad0
lea rdx, [rax + 0x10]
call fcn.140089b20
mov qword [0x140438288], rax
mov qword [0x1404382b8], rdi
add rbx, 0x110
mov dword [rbp - 0x67], r15d
mov word [rbp - 0x63], r15w
mov byte [rbp - 0x61], 0
mov dword [rsp + 0x78], 0x12b2d92
mov qword [rbp - 0x80], rbx
lea rax, [rbp - 0x20]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 8
mov eax, dword [0x140439128]
mov dword [rsp + 0x7c], eax
mov byte [rbp - 0x68], 0
test eax, eax
je 0x1400869b4
mov rcx, qword [0x140439120]
test rcx, rcx
je 0x1400869b4
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rsp + 0x78]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov r8d, 0xa
lea rdx, str.LowerTorso
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x20]
call fcn.140087a60
mov dword [rbp - 0x67], r15d
mov word [rbp - 0x63], r15w
mov byte [rbp - 0x61], 0
mov dword [rsp + 0x78], 0x12b2d92
mov qword [rbp - 0x80], rbx
lea rax, [rsp + 0x48]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 8
mov eax, dword [0x140439128]
mov dword [rsp + 0x7c], eax
mov byte [rbp - 0x68], 0
test eax, eax
je 0x140086a65
mov rcx, qword [0x140439120]
test rcx, rcx
je 0x140086a65
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rsp + 0x78]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
mov r8d, 0xa
lea rdx, str.UpperTorso
lea rcx, [rbp + 0x10]
call fcn.14000c8c0
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x48]
call fcn.140087a60
mov dword [rbp - 0x67], r15d
mov word [rbp - 0x63], r15w
mov byte [rbp - 0x61], 0
mov dword [rsp + 0x78], 0x12b2d92
mov qword [rbp - 0x80], rbx
lea rax, [rbp - 0x20]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 8
mov eax, dword [0x140439128]
mov dword [rsp + 0x7c], eax
mov byte [rbp - 0x68], 0
test eax, eax
je 0x140086b15
mov rcx, qword [0x140439120]
test rcx, rcx
je 0x140086b15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rsp + 0x78]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov r8d, 0x10
lea rdx, str.HumanoidRootPart
lea rcx, [rbp - 0x48]
call fcn.14000c8c0
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x20]
call fcn.140087a60
movdqa xmm0, xmmword [0x140142e40]
movdqu xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x140142a60]
movdqu xmmword [rbp - 0x38], xmm1
mov dword [rbp - 0x28], 0xa2e2e
lea rcx, [rbp - 0x47]
call fcn.14000d7c0
mov eax, 1
xchg byte [0x1404381f3], al
mov ecx, 8
call fcn.1401136b0
lea rcx, [0x1400a3b50]
mov qword [rax], rcx
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140091f60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rdx, rax
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x14008705b
movdqa xmm0, xmmword [0x1401429a0]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142cd0]
movdqu xmmword [rbp - 0x78], xmm1
movdqa xmm0, xmmword [0x140142d00]
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp - 0x58], 0x3d4f5b
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x80], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7e], al
add rcx, 0xa
cmp rcx, 0x32
jb 0x140086c10
mov byte [rbp - 0x55], 0
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x58]
call fcn.1400877d0
nop
mov rdx, qword [rax + 8]
sub rdx, qword [rax]
sar rdx, 3
movdqa xmm0, xmmword [0x140142fb0]
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140142a20]
movdqu xmmword [rbp + 0x20], xmm1
mov word [rbp + 0x30], 0xa64
mov byte [rbp + 0x32], 0
lea rcx, [rbp + 0x11]
call fcn.14000d7c0
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140086d13
mov rax, qword [rbp - 0x38]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086d0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140086d0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140113934
movdqa xmm0, xmmword [0x140142d10]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140142da0]
movdqu xmmword [rbp - 0x78], xmm1
movdqa xmm0, xmmword [0x140142a30]
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp - 0x58], 0xf707767
mov byte [rbp - 0x54], 0
mov rcx, r15
nop dword [rax]
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rsp + rcx + 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x80], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7f], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7e], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7d], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7c], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7b], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x7a], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x79], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x78], al
movzx eax, byte [rsp + 0x78]
xor byte [rbp + rcx - 0x77], al
add rcx, 0x11
cmp rcx, 0x33
jb 0x140086d50
mov byte [rbp - 0x54], 0
lea rcx, [rsp + 0x79]
call fcn.14000d7c0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
cmp dword [rbp + 0xa8], 0
je 0x14008704f
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14008704f
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
nop word [rax + rax]
mov rax, qword [0x1404382d0]
add rax, 0x110
mov dword [rbp - 0x67], r15d
mov word [rbp - 0x63], r15w
mov byte [rbp - 0x61], 0
mov dword [rsp + 0x78], 0x12b2d92
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x20]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 8
mov eax, dword [0x140439128]
mov dword [rsp + 0x7c], eax
mov byte [rbp - 0x68], 0
test eax, eax
je 0x140086ee6
mov rcx, qword [0x140439120]
test rcx, rcx
je 0x140086ee6
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rsp + 0x78]
mov edx, 0x224a14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x20]
call fcn.1400877d0
nop
mov dword [rsp + 0x40], 0x626f5243
mov dword [rsp + 0x44], 0x786f6c
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140086f79
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140086e60
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086f68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086f72
call fcn.140113934
jmp 0x140086e60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x10]
call fcn.140087100
movzx edx, byte [rax]
xor byte [rax + 1], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
xor byte [rax + 7], dl
xor byte [rax + 8], dl
xor byte [rax + 9], dl
xor byte [rax + 0xa], dl
xor byte [rax + 0xb], dl
xor byte [rax + 0xc], dl
xor byte [rax + 0xd], dl
xor byte [rax + 0xe], dl
xor byte [rax + 0xf], dl
xor byte [rax + 0x10], dl
xor byte [rax + 0x11], dl
xor byte [rax + 0x12], dl
xor byte [rax + 0x13], dl
mov byte [rax + 0x14], 0
lea rcx, [rax + 1]
call fcn.14000d7c0
lea rdx, [rbp + 0x10]
call fcn.140087130
movzx edx, byte [rax]
xor byte [rax + 1], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
xor byte [rax + 7], dl
xor byte [rax + 8], dl
xor byte [rax + 9], dl
xor byte [rax + 0xa], dl
xor byte [rax + 0xb], dl
xor byte [rax + 0xc], dl
xor byte [rax + 0xd], dl
xor byte [rax + 0xe], dl
xor byte [rax + 0xf], dl
xor byte [rax + 0x10], dl
xor byte [rax + 0x11], dl
xor byte [rax + 0x12], dl
xor byte [rax + 0x13], dl
xor byte [rax + 0x14], dl
xor byte [rax + 0x15], dl
mov byte [rax + 0x16], 0
lea rcx, [rax + 1]
call fcn.14000d7c0
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xa8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xb8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x48], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x58], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x68], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, str.color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140142e10]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x6c20746f
mov dword [rbp - 0x34], 0x6564616f
mov dword [rbp - 0x30], 0xa2e64
lea rcx, [rbp - 0x47]
call fcn.14000d7c0
jmp 0x1400870f5