Function at 0x14000f7e0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Enumerate processes
Execute command
Hash data using fnv
Resolve function by parsing pe exports
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x140064010]
xor rax, rsp
mov qword [rbp + 0x120], rax
xor r12d, r12d
lea rcx, [0x1400542e4]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.14000cda0
test al, al
jne 0x14000f838
xor eax, eax
jmp 0x1400103ee
lea rcx, str.Loading_driver..._n
call fcn.1400013a0
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..winio_device
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x14000f924
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
xor r8d, r8d
lea rdx, [0x140053a10]
lea rcx, [rbp - 0x60]
call fcn.140012c10
lea rcx, [rbp - 0x60]
call fcn.14000ed00
lea rcx, str.Driver_Hypervisor_successfully_loaded__n
call fcn.1400013a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
xor r8d, r8d
lea rdx, [0x140053a10]
lea rcx, [rbp - 0x60]
call fcn.140012c10
lea rcx, [rbp - 0x60]
call fcn.14000f270
lea rcx, str.Driver_successfully_loaded__n
call fcn.1400013a0
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..winio_device
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x14000f924
lea rcx, str.Error_Loading_of_driver..._n
call fcn.1400013a0
lea rcx, str.Driver_successfully_loaded__n
call fcn.1400013a0
lea rdx, str.Waiting_game_
mov rcx, qword [0x1400532f0]
call fcn.140011e90
lea rdx, [0x140012060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm1, xmmword [0x14005a4e0]
movdqu xmmword [rbp - 0x80], xmm1
movdqa xmm2, xmmword [str.MQ_bG_bAFBMK_]
movdqu xmmword [rbp - 0x70], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp - 0x7f], al
xor byte [rbp - 0x7e], dl
xor byte [rbp - 0x7d], dl
xor byte [rbp - 0x7c], dl
xor byte [rbp - 0x7b], dl
xor byte [rbp - 0x7a], dl
xor byte [rbp - 0x79], dl
xor byte [rbp - 0x78], dl
xor byte [rbp - 0x77], dl
xor byte [rbp - 0x76], dl
xor byte [rbp - 0x75], dl
xor byte [rbp - 0x74], dl
xor byte [rbp - 0x73], dl
xor byte [rbp - 0x72], dl
xor byte [rbp - 0x71], dl
movd eax, xmm2
xor al, dl
mov byte [rbp - 0x70], al
xor byte [rbp - 0x6f], dl
xor byte [rbp - 0x6e], dl
xor byte [rbp - 0x6d], dl
xor byte [rbp - 0x6c], dl
xor byte [rbp - 0x6b], dl
xor byte [rbp - 0x6a], dl
xor byte [rbp - 0x69], dl
xor byte [rbp - 0x68], dl
xor byte [rbp - 0x67], dl
xor byte [rbp - 0x66], dl
xor byte [rbp - 0x65], dl
xor byte [rbp - 0x64], dl
xor byte [rbp - 0x63], dl
xor byte [rbp - 0x62], dl
mov byte [rbp - 0x61], 0
lea rdx, [rbp - 0x7f]
mov rcx, qword [0x1400532f0]
call fcn.140011e90
lea rdx, [0x140012060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140054390]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r15, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov rdx, qword [rdx + rbx + 0x88]
mov qword [rbp - 0x80], rdx
mov r14d, edx
add r14, rbx
cmp r14, rbx
je 0x14000fab6
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14000fab6
mov esi, dword [r14 + 0x20]
nop dword [rax]
dec r11d
lea rax, [rsi + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
mov r10d, 0x7943935a
movzx eax, byte [r9]
inc r9
test al, al
je 0x14000fab1
nop
movsx edx, al
sub al, 0x41
mov r8d, edx
or r8d, 0x20
cmp al, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx eax, byte [r9]
lea r9, [r9 + 1]
test al, al
jne 0x14000fa80
cmp r10d, 0x7e64a38f
je 0x14000fabe
test r11d, r11d
jne 0x14000fa60
mov rcx, qword [rcx]
jmp 0x14000fa30
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov edx, 5
mov rcx, r15
call r8
lea rcx, str.RustClient.exe
call fcn.140014d40
test eax, eax
je 0x1400103dc
lea rcx, str.RustClient.exe
call fcn.140014d40
mov dword [0x14015b730], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x14015b734], eax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..winio_device
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x14015b728], rax
cmp rax, 0xffffffffffffffff
je 0x1400103cf
mov byte [rsp + 0x40], 8
mov al, 0x5a
mov cl, 0x7d
mov dl, 0x7b
mov r8b, 0x7c
xor r9d, r9d
xor al, 8
mov byte [rsp + 0x41], al
xor cl, 8
mov byte [rsp + 0x42], cl
xor dl, 8
mov byte [rsp + 0x43], dl
xor r8b, 8
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
mov byte [rsp + 0x48], 0x55
xor al, al
mov cl, 0x3b
mov dl, 0x3c
mov r8b, 0x21
mov r9b, 0x2c
mov r10b, 2
movzx r11d, cl
mov bl, 0x31
mov dil, 0x16
mov sil, 0x39
mov r14b, 0x34
mov r15b, 0x26
movzx r12d, r15b
xor r13d, r13d
xor al, 0x55
mov byte [rsp + 0x49], al
xor cl, 0x55
mov byte [rsp + 0x4a], cl
xor dl, 0x55
mov byte [rsp + 0x4b], dl
xor r8b, 0x55
mov byte [rsp + 0x4c], r8b
xor r9b, 0x55
mov byte [rsp + 0x4d], r9b
xor r10b, 0x55
mov byte [rsp + 0x4e], r10b
xor r11b, 0x55
mov byte [rsp + 0x4f], r11b
xor bl, 0x55
mov byte [rsp + 0x50], bl
xor dil, 0x55
mov byte [rsp + 0x51], dil
xor sil, 0x55
mov byte [rsp + 0x52], sil
xor r14b, 0x55
mov byte [rsp + 0x53], r14b
xor r15b, 0x55
mov byte [rsp + 0x54], r15b
xor r12b, 0x55
mov byte [rsp + 0x55], r12b
mov byte [rsp + 0x56], r13b
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x49]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000fc49
xor edx, edx
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_SleepEx]
jmp 0x14000fb51
movdqa xmm1, xmmword [0x140059f40]
movdqu xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x7f], al
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
xor byte [rbp - 0x79], cl
xor byte [rbp - 0x78], cl
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
mov byte [rbp - 0x71], r13b
lea rcx, [rbp - 0x7f]
call fcn.14000f710
mov ebx, eax
mov rcx, qword [0x1400532f0]
test eax, eax
lea rdx, str.game_has_been_found_
jg 0x14000fcbb
lea rdx, str.game_not_found_
call fcn.140011e90
lea rdx, [0x140012060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
test ebx, ebx
je 0x1400103c0
lea rdx, str.Successful_Start
mov rcx, qword [0x1400532f0]
call fcn.140011e90
lea rdx, [0x140012060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [0x14015b881], 1
mov ecx, 0x10
call fcn.140050b04
mov rbx, rax
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor r12d, r12d
mov dword [rax], r12d
mov qword [rax + 8], r12
movdqa xmm1, xmmword [0x140059f20]
movdqu xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x7f], al
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
xor byte [rbp - 0x79], cl
xor byte [rbp - 0x78], cl
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
mov byte [rbp - 0x71], r12b
mov dword [rbp - 0x10], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
lea rdx, [rbp - 0x10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000fded
lea rdx, [rbp - 0x10]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
jne 0x14000fded
nop word [rax + rax]
lea rax, [rbp + 0x1c]
lea r8, [rbp - 0x7f]
sub r8, rax
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14000fdd3
inc rax
test ecx, ecx
jne 0x14000fdc0
test edx, edx
je 0x1400102ff
lea rdx, [rbp - 0x10]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
je 0x14000fdb0
mov dword [rbx], r12d
mov qword [0x14015c4c0], rbx
mov ecx, 0x10
call fcn.140050b04
mov qword [rax], r12
mov qword [rax + 8], r12
mov rbx, qword [0x14015c588]
mov qword [0x14015c588], rax
test rbx, rbx
je 0x14000fe43
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x14000fe29
call fcn.140011030
mov rdx, qword [rbx]
test rdx, rdx
je 0x14000fe36
call fcn.140011030
mov edx, 0x10
mov rcx, rbx
call fcn.140050d90
lea rcx, [rsp + 0x60]
call fcn.1400120a0
mov r8, qword [0x14015c588]
cmp r8, rax
je 0x14000fe6f
mov rcx, qword [rax]
mov qword [rax], r12
mov rdx, qword [r8]
mov qword [r8], rcx
test rdx, rdx
je 0x14000fe6f
call fcn.140011030
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14000fe7e
call fcn.140011030
lea rcx, [rsp + 0x58]
call fcn.1400120a0
mov r8, qword [0x14015c588]
add r8, 8
cmp r8, rax
je 0x14000feae
mov rcx, qword [rax]
mov qword [rax], r12
mov rdx, qword [r8]
mov qword [r8], rcx
test rdx, rdx
je 0x14000feae
call fcn.140011030
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x14000febd
call fcn.140011030
mov ecx, 0x18
call fcn.140050b04
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rdx, qword [0x14015c5a8]
mov qword [0x14015c5a8], rax
test rdx, rdx
je 0x14000feea
call fcn.140010f60
mov ecx, 0x18
call fcn.140050b04
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rdx, qword [0x14015c5a0]
mov qword [0x14015c5a0], rax
test rdx, rdx
je 0x14000ff17
call fcn.140010ec0
mov ecx, 0x18
call fcn.140050b04
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rdx, qword [0x14015c590]
mov qword [0x14015c590], rax
test rdx, rdx
je 0x14000ff44
call fcn.140010ec0
mov ecx, 0x18
call fcn.140050b04
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rdx, qword [0x14015c578]
mov qword [0x14015c578], rax
test rdx, rdx
je 0x14000ff71
call fcn.140010ec0
mov ecx, 0x10
call fcn.140050b04
mov qword [rax], r12
mov qword [rax + 8], r12
mov rbx, qword [0x14015c570]
mov qword [0x14015c570], rax
test rbx, rbx
je 0x14000ffcd
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x14000ffa3
call fcn.140010e30
mov rdi, qword [rbx]
test rdi, rdi
je 0x14000ffc0
mov rcx, rdi
call fcn.140002940
mov edx, 0x88
mov rcx, rdi
call fcn.140050d90
mov edx, 0x10
mov rcx, rbx
call fcn.140050d90
lea rcx, str.RustClient.exe
call fcn.14000f710
mov dword [0x14015c554], eax
lea rdx, str.PID:
mov rcx, qword [0x1400532f0]
call fcn.140011e90
mov edx, dword [0x14015c554]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
lea rdx, [0x140012060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.localPlayer:
mov rcx, qword [0x1400532f0]
call fcn.140011e90
mov rbx, rax
mov rdx, qword [0x14015c570]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [0x140012060]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
mov r8d, 0x10
lea rdx, str.GameAssembly.dll
lea rcx, [rbp - 0x80]
call fcn.140012c10
nop
lea rdx, [rbp - 0x80]
call fcn.140014a70
mov qword [0x14015c598], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1400100b8
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400100b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010339
call fcn.140050d90
lea rdx, str.GameAssemblyBase:
mov rcx, qword [0x1400532f0]
call fcn.140011e90
mov rdx, qword [0x14015c598]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140012060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
mov r8d, 0xf
lea rdx, str.UnityPlayer.dll
lea rcx, [rbp - 0x80]
call fcn.140012c10
nop
lea rdx, [rbp - 0x80]
call fcn.140014a70
mov qword [0x14015c580], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14001015c
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010157
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010340
call fcn.140050d90
lea rdx, str.UnityPlayerBase:
mov rcx, qword [0x1400532f0]
call fcn.140011e90
mov rdx, qword [0x14015c580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140012060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov ecx, 8
call fcn.140050b04
lea rcx, [0x14004ce90]
mov qword [rax], rcx
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400145f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x40], rax
test rax, rax
je 0x1400103b0
mov ecx, 8
call fcn.140050b04
lea rcx, [0x14000a010]
mov qword [rax], rcx
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400145f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1400103a0
mov ecx, 8
call fcn.140050b04
lea rcx, [0x140004d60]
mov qword [rax], rcx
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400145f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140010390
mov ecx, 8
call fcn.140050b04
lea rcx, [0x140009a10]
mov qword [rax], rcx
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400145f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140010380
cmp dword [rbp - 0x38], 0
je 0x140010374
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x38], eax
je 0x140010368
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x80], xmm0
xor edx, edx
lea rcx, [rbp - 0x80]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x14001035c
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
cmp dword [rbp - 0x28], eax
jne 0x140010355
cmp dword [rbp - 0x18], eax
jne 0x14001034e
cmp dword [rbp - 0x58], eax
jne 0x140010347
jmp 0x14000f953
mov eax, dword [rbp - 8]
mov dword [rbx], eax
test eax, eax
je 0x14000fdf0
mov ecx, 0x20
call fcn.140050b04
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov edx, dword [rbx]
mov rcx, rax
call fcn.140001d40
nop
mov qword [rbx + 8], rax
jmp 0x14000fdf0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x28], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x18], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x58], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x38], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
xor edx, edx
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_SleepEx]
jmp 0x1400103c0
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400532e0]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov eax, 1
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.1400505b0
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret