Function at 0x14000c210
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3a0]
sub rsp, 0x4a0
mov rax, qword [0x1400b6040]
xor rax, rsp
mov qword [rbp + 0x390], rax
xor r12d, r12d
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
mov qword [rbp + 0x1c0], r12
lea rdi, str.bad_cast
lea rsi, [0x140098790]
sub rdi, rsi
je 0x14000c2a1
mov rdx, rdi
lea rcx, [rbp + 0x1b0]
call fcn.140011130
mov rbx, qword [rbp + 0x1b0]
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rdx, [rbx + rdi]
mov qword [rbp + 0x1b8], rdx
jmp 0x14000c2a8
mov rdx, qword [rbp + 0x1b8]
mov rcx, qword [rbp + 0x1b0]
cmp rcx, rdx
jne 0x14000c41b
movdqa xmm0, xmmword [0x1400a4af0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4a90]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4b60]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4ad0]
movdqa xmmword [rbp - 0x50], xmm1
mov dword [rbp - 0x40], 0x7c667029
mov dword [rbp - 0x3c], 0x4059297b
mov word [rbp - 0x38], 0x274d
mov byte [rbp - 0x36], 0
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7f], al
inc rcx
cmp rcx, 0x49
jb 0x14000c310
mov byte [rbp - 0x36], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp - 0x7f]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000c342
mov r8, rdi
lea rdx, [rbp - 0x7f]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000c3a9
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c3a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c3a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
nop
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x14000c3e9
mov rdx, qword [rbp + 0x1c0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c3e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e480
call fcn.14008caa4
xor al, al
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.14008ca40
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rax
movdqu xmmword [rbp + 0x30], xmm0
mov rax, r12
mov qword [rbp + 0x40], rax
sub rdx, rcx
je 0x14000c48c
lea rcx, [rbp + 0x30]
call fcn.140011130
mov rdi, qword [rbp + 0x30]
mov rbx, qword [rbp + 0x1b0]
mov rsi, qword [rbp + 0x1b8]
mov r8, rsi
sub r8, rbx
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sub rsi, rbx
add rsi, rdi
mov rax, qword [rbp + 0x40]
jmp 0x14000c490
mov rsi, qword [rbp + 0x38]
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x38], r12
mov rcx, qword [rbp + 0x30]
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x160], rcx
mov qword [rbp + 0x168], rsi
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], r12
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x198], r12
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x190], rcx
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp + 0x198], rcx
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp + 0x1a0], rcx
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_horizon::roblox::init_void_::_6::_lambda_2___bool___.0
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x90]
mov qword [rbp + 0xc8], rcx
mov ebx, r12d
movabs r14, 0x7fffffffe2329aff
movabs r13, 0x7fffffffffffffff
nop
test rcx, rcx
je 0x14000e48e
mov rax, qword [rcx]
call qword [rax + 0x10]
test al, al
jne 0x14000c589
lea rcx, [rbp + 0x10]
call fcn.140007be0
mov rax, qword [rbp + 0x10]
cmp rax, r14
je 0x14000c568
setl cl
test cl, cl
je 0x14000c568
add rax, 0x1dcd6500
mov qword [rbp + 0x18], rax
jmp 0x14000c56c
mov qword [rbp + 0x18], r13
lea rcx, [rbp + 0x18]
call fcn.140009980
inc ebx
cmp ebx, 3
jge 0x14000c585
mov rcx, qword [rbp + 0xc8]
jmp 0x14000c530
mov bl, 1
jmp 0x14000c58b
xor bl, bl
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x14000c5aa
mov rax, qword [rcx]
lea rdx, [rbp + 0x90]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
test bl, bl
je 0x14000c779
movdqa xmm0, xmmword [0x1400a4aa0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4ab0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4ac0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4610]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4660]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a45e0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a45f0]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400a4780]
movdqa xmmword [rbp - 0x10], xmm1
mov dword [rbp], 0x66343329
mov dword [rbp + 4], 0x68020f16
mov byte [rbp + 8], 0
mov rcx, r12
nop
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7f], al
inc rcx
cmp rcx, 0x87
jb 0x14000c630
mov byte [rbp + 8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp - 0x7f]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000c665
mov r8, rdi
lea rdx, [rbp - 0x7f]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000c6cc
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
nop
mov rcx, qword [rbp + 0x178]
test rcx, rcx
je 0x14000c71e
mov rdx, qword [rbp + 0x188]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c707
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e41f
call fcn.14008caa4
xorps xmm0, xmm0
mov qword [rbp + 0x178], r12
movdqa xmmword [rbp + 0x180], xmm0
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x14000c3a9
mov rdx, qword [rbp + 0x170]
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000c75d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e41f
call fcn.14008caa4
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r12
jmp 0x14000c3a9
lea rcx, [rbp + 0x1c8]
call fcn.140005e90
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_horizon::roblox::init_void_::_2::_lambda_4___unsigned_long_long_unsigned___int64___char_const____ptr64__char_const____ptr64_.0
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x80]
mov qword [rbp - 0x48], rax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x160]
call fcn.1400051c0
mov r9, qword [rbp + 0x178]
mov rdi, qword [rbp + 0x180]
cmp r9, rdi
je 0x14000c7c5
mov rdi, r9
mov qword [rbp + 0x180], r9
mov r8, qword [rbp + 0x198]
mov ebx, dword [r8 + 0x50]
mov rcx, rdi
sub rcx, r9
cmp rbx, rcx
jae 0x14000c7e1
lea rax, [rbx + r9]
jmp 0x14000c833
jbe 0x14000c83a
mov rax, qword [rbp + 0x188]
sub rax, r9
cmp rbx, rax
jbe 0x14000c811
mov rdx, rbx
lea rcx, [rbp + 0x178]
call fcn.1400053b0
mov r8, qword [rbp + 0x198]
mov r9, qword [rbp + 0x178]
jmp 0x14000c83a
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
lea rax, [rbx + rdi]
mov r8, qword [rbp + 0x198]
mov r9, qword [rbp + 0x178]
mov qword [rbp + 0x180], rax
mov eax, dword [r8 + 0x54]
test eax, eax
je 0x14000c862
mov r8d, eax
mov rdx, qword [rbp + 0x160]
mov rcx, r9
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rbp + 0x198]
mov r9, qword [rbp + 0x178]
mov rbx, r12
cmp r12w, word [r8 + 6]
jae 0x14000c8ba
mov rdi, r12
nop
mov rdx, qword [rbp + 0x1a0]
mov ecx, dword [rdx + rdi + 0xc]
add rcx, r9
mov r10d, dword [rdx + rdi + 0x10]
mov edx, dword [rdx + rdi + 0x14]
add rdx, qword [rbp + 0x160]
test r10d, r10d
je 0x14000c8a9
mov r8d, r10d
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rbp + 0x198]
mov r9, qword [rbp + 0x178]
inc rbx
add rdi, 0x28
movzx eax, word [r8 + 6]
cmp rbx, rax
jb 0x14000c870
mov esi, dword [r8 + 0x50]
mov ebx, 0x10
mov rax, qword gs:[0x58]
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x1400b91d8], eax
jle 0x14000c910
lea rcx, [0x1400b91d8]
call fcn.14008cb80
cmp dword [0x1400b91d8], 0xffffffff
jne 0x14000c910
xor r8d, r8d
lea rdx, [0x1400935b8]
call fcn.140005550
mov qword [0x1400b91a0], rax
lea rcx, [0x1400b91d8]
call fcn.14008cb14
mov rdi, qword [0x1400b91a0]
mov eax, dword [rbx]
cmp dword [0x1400b91c0], eax
jle 0x14000c966
lea rcx, [0x1400b91c0]
call fcn.14008cb80
cmp dword [0x1400b91c0], 0xffffffff
jne 0x14000c966
lea rcx, [0x140093590]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b91b0], rax
lea rcx, [0x1400b91c0]
call fcn.14008cb14
mov rcx, qword [0x1400b76c8]
mov rdx, rdi
call fcn.140005b90
mov rax, qword [0x1400b91b0]
mov rdx, rsi
xor ecx, ecx
call rax
mov r15, rax
mov rcx, qword [0x1400b76c8]
call fcn.140005d90
test r15, r15
jne 0x14000ca9f
movdqa xmm0, xmmword [0x1400a49f0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a45a0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4a00]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4590]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4510]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4530]
movdqa xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x20], 0x3d245406
mov word [rbp - 0x1c], 0x5a30
mov byte [rbp - 0x1a], r15b
mov rcx, r12
nop dword [rax]
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7f], al
inc rcx
cmp rcx, 0x65
jb 0x14000ca00
mov byte [rbp - 0x1a], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp - 0x7f]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000ca32
mov r8, rdi
lea rdx, [rbp - 0x7f]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000c6cc
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp + 0x198]
test byte [rax + 0x16], 1
jne 0x14000cbb9
mov rcx, qword [rbp + 0x178]
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov r14, rax
mov r8d, 5
lea r9, [rbp + 0x150]
mov dl, 1
mov rcx, rax
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov rbx, rax
mov rdi, r15
sub rdi, qword [r14 + 0x30]
je 0x14000cba8
mov eax, dword [rbp + 0x150]
test eax, eax
je 0x14000cba8
lea rsi, [rbx + rax]
cmp rbx, rsi
jae 0x14000cba8
lea r13, [0x140000000]
nop word [rax + rax]
xor r9d, r9d
mov r8d, dword [rbx]
mov rdx, qword [rbp + 0x178]
mov rcx, r14
call qword [sym.imp.dbghelp.dll_ImageRvaToVa]
mov r9, rax
mov r8d, dword [rbx + 4]
sub r8d, 8
shr r8d, 1
lea rbx, [rbx + 8]
mov r10d, r12d
je 0x14000cb95
nop dword [rax]
movzx edx, word [rbx]
mov ecx, edx
shr ecx, 0xc
cmp ecx, 0xa
ja case.0x14000cb58.5
mov ecx, dword [r13 + rcx*4 + 0xe498]
add rcx, r13
jmp rcx
and edx, 0xfff
add rdx, r9
mov rax, rdi
shr rax, 0x10
add word [rdx], ax
jmp case.0x14000cb58.0
and edx, 0xfff
add rdx, r9
add word [rdx], di
jmp case.0x14000cb58.0
and edx, 0xfff
add rdx, r9
add qword [rdx], rdi
inc r10d
add rbx, 2
cmp r10d, r8d
jb 0x14000cb40
cmp rbx, rsi
jb 0x14000cb10
movabs r13, 0x7fffffffffffffff
mov rax, qword [rbp + 0x198]
movabs r14, 0x7fffffffe2329aff
mov edi, dword [rax + 0x50]
mov rsi, qword [rbp + 0x178]
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, 0x10
mov ecx, dword [rax + rbx]
cmp dword [0x1400b91c4], ecx
jle 0x14000cc16
lea rcx, [0x1400b91c4]
call fcn.14008cb80
cmp dword [0x1400b91c4], 0xffffffff
jne 0x14000cc16
xor r8d, r8d
lea rdx, str.RtlCopyMemory
call fcn.140005550
mov qword [0x1400b91d0], rax
lea rcx, [0x1400b91c4]
call fcn.14008cb14
mov qword [rsp + 0x20], rdi
mov r9, rsi
mov r8, r15
call fcn.140006fe0
mov rax, qword [rbp + 0x198]
mov edi, dword [rax + 0x28]
add rdi, r15
mov esi, dword [rax + 0x50]
mov eax, 0x10
mov ecx, dword [rax + rbx]
cmp dword [0x1400b9294], ecx
jle 0x14000cc8b
lea rcx, [0x1400b9294]
call fcn.14008cb80
cmp dword [0x1400b9294], 0xffffffff
jne 0x14000cc8b
lea rcx, [0x140093590]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b9258], rax
lea rcx, [0x1400b9294]
call fcn.14008cb14
mov rcx, qword [0x1400b76c8]
mov rdx, rdi
call fcn.140005b90
mov rdx, rsi
mov rcx, r15
call qword [0x1400b9258]
mov rcx, qword [0x1400b76c8]
call fcn.140005d90
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x198]
mov esi, dword [rax + 0x54]
mov eax, 0x10
mov ecx, dword [rax + rbx]
cmp dword [0x1400b91a8], ecx
jle 0x14000cd0e
lea rcx, [0x1400b91a8]
call fcn.14008cb80
cmp dword [0x1400b91a8], 0xffffffff
jne 0x14000cd0e
xor r8d, r8d
lea rdx, str.RtlZeroMemory
call fcn.140005550
mov qword [0x1400b9190], rax
lea rcx, [0x1400b91a8]
call fcn.14008cb14
mov rdi, qword [0x1400b9190]
mov eax, 0x10
mov r8d, dword [rax + rbx]
cmp dword [0x1400b9238], r8d
jle 0x14000cd6c
lea rcx, [0x1400b9238]
call fcn.14008cb80
cmp dword [0x1400b9238], 0xffffffff
jne 0x14000cd6c
lea rcx, [0x140093590]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b9198], rax
lea rcx, [0x1400b9238]
call fcn.14008cb14
mov rcx, qword [0x1400b76c8]
mov rdx, rdi
call fcn.140005b90
mov rdx, rsi
mov rcx, r15
call qword [0x1400b9198]
mov rcx, qword [0x1400b76c8]
call fcn.140005d90
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_horizon::roblox::init_void_::_12::_lambda_6___bool___.0
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 0xd0]
mov qword [rbp + 0x108], rcx
mov ebx, r12d
test rcx, rcx
je 0x14000e487
mov rax, qword [rcx]
call qword [rax + 0x10]
test al, al
jne 0x14000ce14
lea rcx, [rbp + 0x60]
call fcn.140007be0
mov rax, qword [rbp + 0x60]
cmp rax, r14
je 0x14000cded
setl cl
test cl, cl
je 0x14000cded
add rax, 0x1dcd6500
mov qword [rbp + 0x150], rax
jmp 0x14000cdf4
mov qword [rbp + 0x150], r13
lea rcx, [rbp + 0x150]
call fcn.140009980
inc ebx
cmp ebx, 3
jge 0x14000ce10
mov rcx, qword [rbp + 0x108]
jmp 0x14000cdb2
mov bl, 1
jmp 0x14000ce16
xor bl, bl
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x14000ce35
mov rax, qword [rcx]
lea rdx, [rbp + 0xd0]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
test bl, bl
je 0x14000cf5d
movdqa xmm0, xmmword [0x1400a4570]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4a50]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a49e0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a49d0]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4a30]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4a40]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a4990]
movdqa xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x7f0f5d5a
mov dword [rbp - 0xc], 0x16b66
mov rcx, r12
nop dword [rax]
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7f], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7e], al
add rcx, 2
cmp rcx, 0x76
jb 0x14000ceb0
mov byte [rbp - 9], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp - 0x7f]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000cef0
mov r8, rdi
lea rdx, [rbp - 0x7f]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000c6cc
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..IoControl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1400b76e8], rax
test rax, rax
je 0x14000e21c
cmp rax, 0xffffffffffffffff
je 0x14000e21c
movdqa xmm0, xmmword [0x1400a4b10]
movdqu xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x58], 0x78652e61
mov word [rsp + 0x5c], 0x65
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0x260], 0x130
lea rdx, [rbp + 0x260]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000d02e
nop word [rax + rax]
lea rdx, [rsp + 0x49]
lea rcx, [rbp + 0x28c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x14000d150
lea rdx, [rbp + 0x260]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14000d000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r12d
mov dword [0x1400b76e0], eax
test eax, eax
jne 0x14000d161
movdqa xmm0, xmmword [0x1400a4b00]
movdqu xmmword [rbp + 0x1f8], xmm0
movdqa xmm1, xmmword [0x1400a4a70]
movdqu xmmword [rbp + 0x208], xmm1
movdqa xmm0, xmmword [0x1400a4b80]
movdqu xmmword [rbp + 0x218], xmm0
mov dword [rbp + 0x228], 0x347a7164
mov dword [rbp + 0x22c], 0x78767b66
mov dword [rbp + 0x230], 0x1e3a6c7b
mov byte [rbp + 0x234], al
mov rcx, r12
nop
movzx eax, byte [rbp + 0x1f8]
xor byte [rbp + rcx + 0x1f9], al
inc rcx
cmp rcx, 0x3b
jb 0x14000d0a0
mov byte [rbp + 0x234], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp + 0x1f9]
mov rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000d0e0
mov r8, rdi
lea rdx, [rbp + 0x1f9]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000c6cc
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x268]
jmp 0x14000d03a
call fcn.14000bdd0
lea rcx, [rax + 0x10]
call fcn.140010b40
mov rbx, rax
mov qword [rbp + 0x150], r12
mov dword [rbp + 0x110], 0x85b3e12
mov eax, dword [0x1400b76e0]
mov dword [rbp + 0x114], eax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x118], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x10
lea r8, [rbp + 0x110]
mov edx, 0x2201c8
mov rcx, qword [0x1400b76e8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x150]
mov qword [0x1400b76f0], rax
call fcn.14000bdd0
lea rcx, [rax + 0xd8]
call fcn.140010b40
call fcn.14000bdd0
lea rcx, [rax + 0x10]
call fcn.140010b40
lea rcx, [rax + 0x7d0]
call fcn.140010b40
lea rcx, [rax + 0x60]
call fcn.140010b40
mov qword [rbp + 0x150], rax
mov qword [0x1400b7718], rax
mov dword [rbp + 0x20], 0x616c507e
mov dword [rbp + 0x24], 0x73726579
mov byte [rbp + 0x28], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp + 0x21]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d252
lea rdx, [rbp + 0x21]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x150]
call fcn.14000ec60
mov rcx, qword [rbp + 0x50]
test rcx, rcx
jne 0x14000d41d
movdqa xmm0, xmmword [0x1400a4670]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [str.___l_8l9___l]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4680]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4600]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4720]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4690]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a45d0]
movdqa xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x1c6c3e39
mov dword [rbp - 0xc], 0x46620805
mov byte [rbp - 8], cl
mov rcx, r12
nop dword [rax + rax]
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7f], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7e], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7d], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7c], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7b], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7a], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x79], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x78], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x77], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x76], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x75], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x74], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x73], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x72], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x71], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x70], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x6f], al
add rcx, 0x11
cmp rcx, 0x77
jb 0x14000d300
mov byte [rbp - 8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp - 0x7f]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000d3b0
mov r8, rdi
lea rdx, [rbp - 0x7f]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000c6cc
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [0x1400b7758], rcx
test rbx, rbx
jne 0x14000d63d
movdqa xmm0, xmmword [0x1400a49c0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4a60]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4550]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4560]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [str.CYY_O_nZOXYCYY]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4a20]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a49a0]
movdqa xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x530a4f4e
mov dword [rbp - 0xc], 0xa585f45
mov dword [rbp - 8], 0x46e637a
mov word [rbp - 4], 0x20
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7f], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7e], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7d], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7c], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7b], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x7a], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x79], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x78], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x77], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x76], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x75], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x74], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x73], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x72], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x71], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x70], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x6f], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x6e], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x6d], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x6c], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x6b], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x6a], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x69], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x68], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x67], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x66], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x65], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x64], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x63], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x62], al
movzx eax, byte [rbp - 0x80]
xor byte [rbp + rcx - 0x61], al
add rcx, 0x1f
cmp rcx, 0x7c
jb 0x14000d4b0
mov byte [rbp - 3], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp - 0x7f]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000d5d0
mov r8, rdi
lea rdx, [rbp - 0x7f]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000c6cc
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [0x1400b7760], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1f0], 0xf
mov byte [rbp + 0x1d8], 0
add rcx, 0x100
call fcn.140010b40
lea rcx, [rax + 0x200]
call fcn.140010b40
test rax, rax
je 0x14000d747
lea rcx, [rax + 0x48]
call fcn.140010b40
test rax, rax
je 0x14000d6a5
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000e700
jmp 0x14000d6e9
mov dword [rsp + 0x70], 0x3f3f3f66
mov byte [rsp + 0x74], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rsp + 0x71]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000d6d0
lea rdx, [rsp + 0x71]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0xf
jbe 0x14000d72d
inc rdx
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d728
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d728
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp + 0x1d8], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rbp + 0x1e8], xmm1
jmp 0x14000d7b9
mov dword [rsp + 0x70], 0x6e6f6e5a
mov word [rsp + 0x74], 0x65
lea rax, [rsp + 0x71]
mov rsi, rdi
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000d760
mov rax, qword [rbp + 0x1f0]
cmp rsi, rax
ja 0x14000d7a5
lea rbx, [rbp + 0x1d8]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x1d8]
mov qword [rbp + 0x1e8], rsi
mov r8, rsi
lea rdx, [rsp + 0x71]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14000d7b9
lea r9, [rsp + 0x71]
mov rdx, rsi
lea rcx, [rbp + 0x1d8]
call fcn.140010f40
call fcn.140028a10
mov rsi, rax
test rax, rax
jne 0x14000d828
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0xf
jbe 0x14000d80a
inc rdx
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d805
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d805
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1f0], 0xf
mov byte [rbp + 0x1d8], 0
jmp 0x14000c6cc
lea rdx, str.Workspace
lea rcx, [rbp + 0x110]
call fcn.140003980
mov r8, rax
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x150]
call fcn.14000e8d0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
mov r8d, 6
lea rdx, str.Camera
lea rcx, [rsp + 0x48]
call fcn.1400049f0
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x80]
mov rcx, rbx
call fcn.14000e8d0
mov rax, qword [rbp + 0x80]
mov qword [0x1400b7748], rax
mov ecx, 8
call fcn.14008ca60
lea rcx, [0x1400090f0]
mov qword [rax], rcx
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140011ab0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14000e20c
cmp dword [rbp + 0x38], 0
je 0x14000e200
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000e200
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
lea ecx, [rax + 8]
call fcn.14008ca60
lea rcx, [0x140085fa0]
mov qword [rax], rcx
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140011ab0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x14000e1f0
cmp dword [rbp + 0x78], 0
je 0x14000e1e4
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000e1e4
movabs rax, 0x249a5775c
cmp rsi, rax
jne 0x14000da06
lea rdx, str.Workspace
lea rcx, [rsp + 0x48]
call fcn.140003980
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [0x1400b7718]
call fcn.14000ec60
mov rbx, rax
lea rdx, str.Players
lea rcx, [rbp + 0x110]
call fcn.140003980
mov r8, rax
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.14000ec60
mov rbx, rax
lea rdx, str.InBox
lea rcx, [rbp + 0x30]
call fcn.140003980
lea rdx, [rsp + 0x40]
jmp 0x14000dc9c
mov eax, 0xa6310100
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x3c097f862
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x3892b0eb2
cmp rsi, rax
je 0x14000db9b
movabs rax, 0x40d50c16e
cmp rsi, rax
je 0x14000db9b
movabs rax, 0x3efd9f682
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x2e2c9baa7
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x10b3af953
cmp rsi, rax
je 0x14000db9b
mov eax, 0xc0c14df7
cmp rsi, rax
jne 0x14000dac1
lea rdx, str.Workspace
lea rcx, [rsp + 0x48]
call fcn.140003980
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [0x1400b7718]
call fcn.14000ec60
lea rdx, str.Characters
jmp 0x14000dc88
movabs rax, 0x261a4f850
cmp rsi, rax
je 0x14000db9b
movabs rax, 0x14de894e2
cmp rsi, rax
je 0x14000da90
cmp rsi, 0x110d64bd
je 0x14000db9b
cmp rsi, 0x8834f7b
je 0x14000db9b
movabs rax, 0x3530334cb
cmp rsi, rax
je 0x14000dc5c
mov eax, 0xa3b71f54
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x3fbc2ec11
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x409d4b7db
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x3d5aa14b3
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x4204702ac
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x3310398cd
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x40d50b7a2
cmp rsi, rax
je 0x14000db9b
movabs rax, 0x1b5471826
cmp rsi, rax
jne 0x14000dbbd
lea rdx, str.Workspace
lea rcx, [rsp + 0x48]
call fcn.140003980
lea rdx, [rsp + 0x68]
lea rcx, [0x1400b7718]
jmp 0x14000dc9f
movabs rax, 0x406abae41
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x408f73e42
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x4085134c4
cmp rsi, rax
je 0x14000dc5c
movabs rax, 0x3fbc8ca59
cmp rsi, rax
je 0x14000dc5c
cmp rsi, 0x3374651f
je 0x14000da90
movabs rax, 0x1341975b6
cmp rsi, rax
jne 0x14000dc4d
lea rdx, [0x14009e229]
lea rcx, [rsp + 0x48]
call fcn.140003980
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [0x1400b7718]
call fcn.14000ec60
mov rcx, qword [rax]
mov qword [0x1400b7740], rcx
jmp 0x14000dd5e
movabs rax, 0x406582d17
cmp rsi, rax
jne 0x14000dcb6
lea rdx, str.Workspace
lea rcx, [rsp + 0x48]
call fcn.140003980
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [0x1400b7718]
call fcn.14000ec60
lea rdx, str.Players
mov rbx, rax
lea rcx, [rbp + 0x110]
call fcn.140003980
lea rdx, [rsp + 0x78]
mov rcx, rbx
mov r8, rax
call fcn.14000ec60
mov rcx, qword [rax]
mov qword [0x1400b7740], rcx
jmp 0x14000dd5e
lea rdx, [rbp + 0x110]
call fcn.14000e4d0
lea rdx, [rax + 1]
movzx ecx, byte [rax]
xor byte [rdx], cl
xor byte [rax + 2], cl
xor byte [rax + 3], cl
xor byte [rax + 4], cl
xor byte [rax + 5], cl
xor byte [rax + 6], cl
xor byte [rax + 7], cl
xor byte [rax + 8], cl
xor byte [rax + 9], cl
xor byte [rax + 0xa], cl
xor byte [rax + 0xb], cl
xor byte [rax + 0xc], cl
xor byte [rax + 0xd], cl
xor byte [rax + 0xe], cl
xor byte [rax + 0xf], cl
xor byte [rax + 0x10], cl
xor byte [rax + 0x11], cl
xor byte [rax + 0x12], cl
xor byte [rax + 0x13], cl
xor byte [rax + 0x14], cl
xor byte [rax + 0x15], cl
xor byte [rax + 0x16], cl
xor byte [rax + 0x17], cl
xor byte [rax + 0x18], cl
xor byte [rax + 0x19], cl
xor byte [rax + 0x1a], cl
xor byte [rax + 0x1b], cl
xor byte [rax + 0x1c], cl
xor byte [rax + 0x1d], cl
xor byte [rax + 0x1e], cl
xor byte [rax + 0x1f], cl
xor byte [rax + 0x20], cl
xor byte [rax + 0x21], cl
xor byte [rax + 0x22], cl
xor byte [rax + 0x23], cl
xor byte [rax + 0x24], cl
xor byte [rax + 0x25], cl
xor byte [rdx + 0x25], cl
mov byte [rdx + 0x26], 0
lea rcx, [rsp + 0x48]
call fcn.140003980
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
lea rcx, [rsp + 0x48]
call fcn.140003920
mov rcx, qword [0x1400b7758]
add rcx, 0x100
call fcn.140010b40
lea rcx, [rax + 0x298]
call fcn.140010b40
lea rcx, [rax + 0x48]
call fcn.140010b40
test rax, rax
je 0x14000dd9c
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.14000e700
jmp 0x14000dde1
mov dword [rbp + 0x10], 0x3f3f3f66
mov byte [rbp + 0x14], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
mov qword [rbp + 0x248], r12
mov qword [rbp + 0x250], r12
lea rax, [rbp + 0x11]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000ddc6
lea rdx, [rbp + 0x11]
lea rcx, [rbp + 0x238]
call fcn.1400049f0
nop
mov rsi, qword [rbp + 0x248]
lea r9, [rbp + 0x238]
cmp qword [rbp + 0x250], 0xf
cmova r9, qword [rbp + 0x238]
mov rax, qword [0x1400b6178]
cmp rsi, rax
ja 0x14000de39
lea rbx, [0x1400b6160]
cmp rax, 0xf
cmova rbx, qword [0x1400b6160]
mov qword [0x1400b6170], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x14000de48
mov rdx, rsi
lea rcx, [0x1400b6160]
call fcn.140010f40
lea rcx, [rbp + 0x1f8]
call fcn.140031df0
nop
movdqa xmm0, xmmword [0x1400a4580]
movdqu xmmword [rbp + 0x110], xmm0
movdqa xmm1, xmmword [0x1400a4520]
movdqu xmmword [rbp + 0x120], xmm1
movdqa xmm0, xmmword [0x1400a4a10]
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x140], 0x7d
mov rcx, r12
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x111], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x112], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x113], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x114], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x115], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x116], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x117], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x118], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x119], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x11a], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x11b], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x11c], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x11d], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x11e], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x11f], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x120], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x121], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x122], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x123], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x124], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x125], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x126], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x127], al
movzx eax, byte [rbp + 0x110]
xor byte [rbp + rcx + 0x128], al
add rcx, 0x18
cmp rcx, 0x30
jb 0x14000de91
mov byte [rbp + 0x141], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp + 0x111]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000e012
lea rdx, [rbp + 0x111]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000e079
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e074
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e074
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400a4620]
movdqu xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x58], 0x6a6e4520
mov dword [rsp + 0x5c], 0xa796f
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x128], r12
lea rax, [rsp + 0x49]
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e0c0
mov r8, rdi
lea rdx, [rsp + 0x49]
lea rcx, [rbp + 0x110]
call fcn.1400049f0
nop
lea rcx, [rbp + 0x110]
call fcn.14000b940
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x14000e12f
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e12a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e12a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
lea rcx, [rbp + 0x88]
call fcn.140007be0
movabs rcx, 0x7fffffff4d2fa1ff
mov rax, qword [rbp + 0x88]
cmp rax, rcx
je 0x14000e166
setl cl
test cl, cl
je 0x14000e166
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rbp + 0x10], rcx
jmp 0x14000e16a
mov qword [rbp + 0x10], r13
lea rcx, [rbp + 0x10]
call fcn.140009980
movabs rbx, 0x7ffffffdabf41bff
movabs rdi, 0x2540be400
lea rcx, [rbp + 0x58]
call fcn.140007be0
mov rax, qword [rbp + 0x58]
cmp rax, rbx
je 0x14000e1aa
setl cl
test cl, cl
je 0x14000e1aa
lea rcx, [rax + rdi]
mov qword [rbp + 0x10], rcx
jmp 0x14000e1ae
mov qword [rbp + 0x10], r13
lea rcx, [rbp + 0x10]
call fcn.140009980
mov dword [rbp + 0x18], 0x626f5262
mov dword [rbp + 0x1c], 0x786f6c
lea rdx, [rbp + 0x19]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000e187
call fcn.14000b900
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x78], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x38], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movdqa xmm0, xmmword [0x1400a4ae0]
movdqa xmmword [rbp + 0x260], xmm0
movdqa xmm1, xmmword [0x1400a4630]
movdqa xmmword [rbp + 0x270], xmm1
movdqa xmm0, xmmword [0x1400a4b70]
movdqa xmmword [rbp + 0x280], xmm0
movdqa xmm1, xmmword [0x1400a4b50]
movdqa xmmword [rbp + 0x290], xmm1
movdqa xmm0, xmmword [0x1400a4650]
movdqa xmmword [rbp + 0x2a0], xmm0
movdqa xmm1, xmmword [0x1400a4b90]
movdqa xmmword [rbp + 0x2b0], xmm1
movdqa xmm0, xmmword [str..gk.kgz_8l___l__:___l5f645_525jf]
movdqa xmmword [rbp + 0x2c0], xmm0
movdqa xmm1, xmmword [0x1400a4640]
movdqa xmmword [rbp + 0x2d0], xmm1
movdqa xmm0, xmmword [0x1400a4b40]
movdqa xmmword [rbp + 0x2e0], xmm0
mov dword [rbp + 0x2f0], 0x2e6b6a67
mov dword [rbp + 0x2f4], 0x7c7b6177
mov dword [rbp + 0x2f8], 0x4a475e2e
mov word [rbp + 0x2fc], 0x20
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rbp + 0x260]
xor byte [rbp + rcx + 0x261], al
movzx eax, byte [rbp + 0x260]
xor byte [rbp + rcx + 0x262], al
add rcx, 2
cmp rcx, 0x9c
jb 0x14000e2e0
mov byte [rbp + 0x2fd], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea rax, [rbp + 0x261]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e330
mov r8, rdi
lea rdx, [rbp + 0x261]
lea rcx, [rsp + 0x48]
call fcn.1400049f0
nop
lea rcx, [rsp + 0x48]
call fcn.14000b940
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000e39a
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e394
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e394
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
nop
mov rcx, qword [rbp + 0x178]
test rcx, rcx
je 0x14000e3e8
mov rdx, qword [rbp + 0x188]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e3d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e41f
call fcn.14008caa4
mov qword [rbp + 0x178], r12
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x180], xmm0
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x14000e43d
mov rdx, qword [rbp + 0x170]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e426
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e426
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008caa4
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r12
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x14000c3e9
mov rdx, qword [rbp + 0x1c0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c3e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c3e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
nop
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3