Function at 0x14000c2f0
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x430]
sub rsp, 0x530
mov rax, qword [0x1400b8040]
xor rax, rsp
mov qword [rbp + 0x420], rax
xor r12d, r12d
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x230], xmm1
mov qword [rbp + 0x240], r12
lea rdi, str.bad_cast
lea rsi, [0x14009a780]
sub rdi, rsi
je 0x14000c381
mov rdx, rdi
lea rcx, [rbp + 0x230]
call fcn.140011b20
mov rbx, qword [rbp + 0x230]
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rdx, [rbx + rdi]
mov qword [rbp + 0x238], rdx
jmp 0x14000c388
mov rdx, qword [rbp + 0x238]
mov rcx, qword [rbp + 0x230]
cmp rcx, rdx
jne 0x14000c4fb
movdqa xmm0, xmmword [0x1400a6600]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a6670]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a6590]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a6610]
movdqa xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x20], 0x3190f56
mov dword [rbp - 0x1c], 0x3f265604
mov word [rbp - 0x18], 0x5832
mov byte [rbp - 0x16], 0
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
inc rcx
cmp rcx, 0x49
jb 0x14000c3f0
mov byte [rbp - 0x16], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x5f]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000c422
mov r8, rdi
lea rdx, [rbp - 0x5f]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000c489
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c483
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c483
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
nop
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x14000c4c9
mov rdx, qword [rbp + 0x240]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e5d0
call fcn.14008ea04
xor al, al
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.14008e9a0
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1f0], xmm0
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], rax
movdqu xmmword [rsp + 0x60], xmm0
mov rax, r12
mov qword [rsp + 0x70], rax
sub rdx, rcx
je 0x14000c571
lea rcx, [rsp + 0x60]
call fcn.140011b20
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rbp + 0x230]
mov rsi, qword [rbp + 0x238]
mov r8, rsi
sub r8, rbx
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sub rsi, rbx
add rsi, rdi
mov rax, qword [rsp + 0x70]
jmp 0x14000c576
mov rsi, qword [rsp + 0x68]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], r12
mov qword [rbp + 0x1e0], rcx
mov qword [rbp + 0x1e8], rsi
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], r12
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x218], r12
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x210], rcx
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp + 0x218], rcx
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp + 0x220], rcx
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_horizon::roblox::init_void_::_6::_lambda_2___bool___.0
mov qword [rbp + 0x140], rax
lea rcx, [rbp + 0x140]
mov qword [rbp + 0x178], rcx
mov ebx, r12d
movabs r14, 0x7fffffffe2329aff
movabs r13, 0x7fffffffffffffff
nop dword [rax]
test rcx, rcx
je 0x14000e5de
mov rax, qword [rcx]
call qword [rax + 0x10]
test al, al
jne 0x14000c679
lea rcx, [rbp - 0x68]
call fcn.140007c60
mov rax, qword [rbp - 0x68]
cmp rax, r14
je 0x14000c658
setl cl
test cl, cl
je 0x14000c658
add rax, 0x1dcd6500
mov qword [rbp + 0x30], rax
jmp 0x14000c65c
mov qword [rbp + 0x30], r13
lea rcx, [rbp + 0x30]
call fcn.140009a60
inc ebx
cmp ebx, 3
jge 0x14000c675
mov rcx, qword [rbp + 0x178]
jmp 0x14000c620
mov bl, 1
jmp 0x14000c67b
xor bl, bl
mov rcx, qword [rbp + 0x178]
test rcx, rcx
je 0x14000c69a
mov rax, qword [rcx]
lea rdx, [rbp + 0x140]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
test bl, bl
je 0x14000c869
movdqa xmm0, xmmword [0x1400a6720]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a6700]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a66a0]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a6bb0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a6c80]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400a6bf0]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [0x1400a6bc0]
movdqa xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x1400a6c30]
movdqa xmmword [rbp + 0x10], xmm1
mov dword [rbp + 0x20], 0x2f7d7a60
mov dword [rbp + 0x24], 0x214b465f
mov byte [rbp + 0x28], 0
mov rcx, r12
nop
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
inc rcx
cmp rcx, 0x87
jb 0x14000c720
mov byte [rbp + 0x28], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x5f]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000c755
mov r8, rdi
lea rdx, [rbp - 0x5f]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000c7bc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
nop
mov rcx, qword [rbp + 0x1f8]
test rcx, rcx
je 0x14000c80e
mov rdx, qword [rbp + 0x208]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7f7
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e56f
call fcn.14008ea04
xorps xmm0, xmm0
mov qword [rbp + 0x1f8], r12
movdqa xmmword [rbp + 0x200], xmm0
mov rcx, qword [rbp + 0x1e0]
test rcx, rcx
je 0x14000c489
mov rdx, qword [rbp + 0x1f0]
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000c84d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e56f
call fcn.14008ea04
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r12
jmp 0x14000c489
lea rcx, [rbp + 0x250]
call fcn.140005f10
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_horizon::roblox::init_void_::_2::_lambda_4___unsigned_long_long_unsigned___int64___char_const____ptr64__char_const____ptr64_.0
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x60]
mov qword [rbp - 0x28], rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x1e0]
call fcn.140005240
mov r9, qword [rbp + 0x1f8]
mov rdi, qword [rbp + 0x200]
cmp r9, rdi
je 0x14000c8b5
mov rdi, r9
mov qword [rbp + 0x200], r9
mov r8, qword [rbp + 0x218]
mov ebx, dword [r8 + 0x50]
mov rcx, rdi
sub rcx, r9
cmp rbx, rcx
jae 0x14000c8d1
lea rax, [rbx + r9]
jmp 0x14000c923
jbe 0x14000c92a
mov rax, qword [rbp + 0x208]
sub rax, r9
cmp rbx, rax
jbe 0x14000c901
mov rdx, rbx
lea rcx, [rbp + 0x1f8]
call fcn.140005430
mov r8, qword [rbp + 0x218]
mov r9, qword [rbp + 0x1f8]
jmp 0x14000c92a
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
lea rax, [rbx + rdi]
mov r8, qword [rbp + 0x218]
mov r9, qword [rbp + 0x1f8]
mov qword [rbp + 0x200], rax
mov eax, dword [r8 + 0x54]
test eax, eax
je 0x14000c952
mov r8d, eax
mov rdx, qword [rbp + 0x1e0]
mov rcx, r9
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rbp + 0x218]
mov r9, qword [rbp + 0x1f8]
mov rbx, r12
cmp r12w, word [r8 + 6]
jae 0x14000c9aa
mov rdi, r12
nop
mov rdx, qword [rbp + 0x220]
mov ecx, dword [rdx + rdi + 0xc]
add rcx, r9
mov r10d, dword [rdx + rdi + 0x10]
mov edx, dword [rdx + rdi + 0x14]
add rdx, qword [rbp + 0x1e0]
test r10d, r10d
je 0x14000c999
mov r8d, r10d
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rbp + 0x218]
mov r9, qword [rbp + 0x1f8]
inc rbx
add rdi, 0x28
movzx eax, word [r8 + 6]
cmp rbx, rax
jb 0x14000c960
mov esi, dword [r8 + 0x50]
mov ebx, 0x10
mov rax, qword gs:[0x58]
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x1400bb2a0], eax
jle 0x14000ca00
lea rcx, [0x1400bb2a0]
call fcn.14008eae0
cmp dword [0x1400bb2a0], 0xffffffff
jne 0x14000ca00
xor r8d, r8d
lea rdx, [0x1400955d8]
call fcn.1400055d0
mov qword [0x1400bb268], rax
lea rcx, [0x1400bb2a0]
call fcn.14008ea74
mov rdi, qword [0x1400bb268]
mov eax, dword [rbx]
cmp dword [0x1400bb288], eax
jle 0x14000ca56
lea rcx, [0x1400bb288]
call fcn.14008eae0
cmp dword [0x1400bb288], 0xffffffff
jne 0x14000ca56
lea rcx, [0x1400955b0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400bb278], rax
lea rcx, [0x1400bb288]
call fcn.14008ea74
mov rcx, qword [0x1400b9708]
mov rdx, rdi
call fcn.140005c10
mov rax, qword [0x1400bb278]
mov rdx, rsi
xor ecx, ecx
call rax
mov r15, rax
mov rcx, qword [0x1400b9708]
call fcn.140005e10
test r15, r15
jne 0x14000cb8f
movdqa xmm0, xmmword [0x1400a6c60]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a6750]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a6c70]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a67b0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a66d0]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400a66f0]
movdqa xmmword [rbp - 0x10], xmm1
mov dword [rbp], 0x1108782a
mov word [rbp + 4], 0x761c
mov byte [rbp + 6], r15b
mov rcx, r12
nop dword [rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
inc rcx
cmp rcx, 0x65
jb 0x14000caf0
mov byte [rbp + 6], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x5f]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000cb22
mov r8, rdi
lea rdx, [rbp - 0x5f]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000c7bc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp + 0x218]
test byte [rax + 0x16], 1
jne 0x14000cca9
mov rcx, qword [rbp + 0x1f8]
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov r14, rax
mov r8d, 5
lea r9, [rbp + 0x248]
mov dl, 1
mov rcx, rax
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov rbx, rax
mov rdi, r15
sub rdi, qword [r14 + 0x30]
je 0x14000cc98
mov ecx, dword [rbp + 0x248]
test ecx, ecx
je 0x14000cc98
lea rsi, [rax + rcx]
cmp rax, rsi
jae 0x14000cc98
lea r13, [0x140000000]
nop word [rax + rax]
xor r9d, r9d
mov r8d, dword [rbx]
mov rdx, qword [rbp + 0x1f8]
mov rcx, r14
call qword [sym.imp.dbghelp.dll_ImageRvaToVa]
mov r9, rax
mov r8d, dword [rbx + 4]
sub r8d, 8
shr r8d, 1
lea rbx, [rbx + 8]
mov r10d, r12d
je 0x14000cc85
nop dword [rax]
movzx edx, word [rbx]
mov ecx, edx
shr ecx, 0xc
cmp ecx, 0xa
ja case.0x14000cc48.5
mov ecx, dword [r13 + rcx*4 + 0xe5e8]
add rcx, r13
jmp rcx
and edx, 0xfff
add rdx, r9
mov rax, rdi
shr rax, 0x10
add word [rdx], ax
jmp case.0x14000cc48.0
and edx, 0xfff
add rdx, r9
add word [rdx], di
jmp case.0x14000cc48.0
and edx, 0xfff
add rdx, r9
add qword [rdx], rdi
inc r10d
add rbx, 2
cmp r10d, r8d
jb 0x14000cc30
cmp rbx, rsi
jb 0x14000cc00
movabs r13, 0x7fffffffffffffff
mov rax, qword [rbp + 0x218]
movabs r14, 0x7fffffffe2329aff
mov edi, dword [rax + 0x50]
mov rsi, qword [rbp + 0x1f8]
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, 0x10
mov ecx, dword [rax + rbx]
cmp dword [0x1400bb28c], ecx
jle 0x14000cd06
lea rcx, [0x1400bb28c]
call fcn.14008eae0
cmp dword [0x1400bb28c], 0xffffffff
jne 0x14000cd06
xor r8d, r8d
lea rdx, str.RtlCopyMemory
call fcn.1400055d0
mov qword [0x1400bb298], rax
lea rcx, [0x1400bb28c]
call fcn.14008ea74
mov qword [rsp + 0x20], rdi
mov r9, rsi
mov r8, r15
call fcn.140007060
mov rax, qword [rbp + 0x218]
mov edi, dword [rax + 0x28]
add rdi, r15
mov esi, dword [rax + 0x50]
mov eax, 0x10
mov ecx, dword [rax + rbx]
cmp dword [0x1400bb35c], ecx
jle 0x14000cd7b
lea rcx, [0x1400bb35c]
call fcn.14008eae0
cmp dword [0x1400bb35c], 0xffffffff
jne 0x14000cd7b
lea rcx, [0x1400955b0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400bb320], rax
lea rcx, [0x1400bb35c]
call fcn.14008ea74
mov rcx, qword [0x1400b9708]
mov rdx, rdi
call fcn.140005c10
mov rdx, rsi
mov rcx, r15
call qword [0x1400bb320]
mov rcx, qword [0x1400b9708]
call fcn.140005e10
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x218]
mov esi, dword [rax + 0x54]
mov eax, 0x10
mov ecx, dword [rax + rbx]
cmp dword [0x1400bb270], ecx
jle 0x14000cdfe
lea rcx, [0x1400bb270]
call fcn.14008eae0
cmp dword [0x1400bb270], 0xffffffff
jne 0x14000cdfe
xor r8d, r8d
lea rdx, str.RtlZeroMemory
call fcn.1400055d0
mov qword [0x1400bb258], rax
lea rcx, [0x1400bb270]
call fcn.14008ea74
mov rdi, qword [0x1400bb258]
mov eax, 0x10
mov r8d, dword [rax + rbx]
cmp dword [0x1400bb300], r8d
jle 0x14000ce5c
lea rcx, [0x1400bb300]
call fcn.14008eae0
cmp dword [0x1400bb300], 0xffffffff
jne 0x14000ce5c
lea rcx, [0x1400955b0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400bb260], rax
lea rcx, [0x1400bb300]
call fcn.14008ea74
mov rcx, qword [0x1400b9708]
mov rdx, rdi
call fcn.140005c10
mov rdx, rsi
mov rcx, r15
call qword [0x1400bb260]
mov rcx, qword [0x1400b9708]
call fcn.140005e10
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_horizon::roblox::init_void_::_12::_lambda_6___bool___.0
mov qword [rbp + 0x180], rax
lea rcx, [rbp + 0x180]
mov qword [rbp + 0x1b8], rcx
mov ebx, r12d
test rcx, rcx
je 0x14000e5d7
mov rax, qword [rcx]
call qword [rax + 0x10]
test al, al
jne 0x14000cf0a
lea rcx, [rbp + 0x1d0]
call fcn.140007c60
mov rax, qword [rbp + 0x1d0]
cmp rax, r14
je 0x14000cee3
setl cl
test cl, cl
je 0x14000cee3
add rax, 0x1dcd6500
mov qword [rbp + 0x248], rax
jmp 0x14000ceea
mov qword [rbp + 0x248], r13
lea rcx, [rbp + 0x248]
call fcn.140009a60
inc ebx
cmp ebx, 3
jge 0x14000cf06
mov rcx, qword [rbp + 0x1b8]
jmp 0x14000cea2
mov bl, 1
jmp 0x14000cf0c
xor bl, bl
mov rcx, qword [rbp + 0x1b8]
test rcx, rcx
je 0x14000cf2b
mov rax, qword [rcx]
lea rdx, [rbp + 0x180]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
test bl, bl
je 0x14000d04d
movdqa xmm0, xmmword [0x1400a6c10]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [str.r__36r6___7_7r1_31r_____jn_v_z__L_r_7_____r]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a6770]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a6780]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a66b0]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400a6690]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [0x1400a67c0]
movdqa xmmword [rbp], xmm0
mov dword [rbp + 0x10], 0x2722027
mov dword [rbp + 0x14], 0x7c161b
mov rcx, r12
nop
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5e], al
add rcx, 2
cmp rcx, 0x76
jb 0x14000cfa0
mov byte [rbp + 0x17], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x5f]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000cfe0
mov r8, rdi
lea rdx, [rbp - 0x5f]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000c7bc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..IoControl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1400b9720], rax
test rax, rax
je 0x14000e36f
cmp rax, 0xffffffffffffffff
je 0x14000e36f
movdqa xmm0, xmmword [0x1400a6c20]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x78652e61
mov word [rsp + 0x54], 0x65
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0x2f0], 0x130
lea rdx, [rbp + 0x2f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000d11e
nop word [rax + rax]
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x31c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x14000d240
lea rdx, [rbp + 0x2f0]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14000d0f0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r12d
mov dword [0x1400b9728], eax
test eax, eax
jne 0x14000d251
movdqa xmm0, xmmword [str.bh7_f]
movdqu xmmword [rbp + 0x278], xmm0
movdqa xmm1, xmmword [0x1400a6630]
movdqu xmmword [rbp + 0x288], xmm1
movdqa xmm0, xmmword [0x1400a65f0]
movdqu xmmword [rbp + 0x298], xmm0
mov dword [rbp + 0x2a8], 0x420c0712
mov dword [rbp + 0x2ac], 0xe000d10
mov dword [rbp + 0x2b0], 0x684c1a0d
mov byte [rbp + 0x2b4], al
mov rcx, r12
nop
movzx eax, byte [rbp + 0x278]
xor byte [rbp + rcx + 0x279], al
inc rcx
cmp rcx, 0x3b
jb 0x14000d190
mov byte [rbp + 0x2b4], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp + 0x279]
mov rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000d1d0
mov r8, rdi
lea rdx, [rbp + 0x279]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000c7bc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x2f8]
jmp 0x14000d12a
call fcn.14000beb0
lea rcx, [rax + 0x10]
call fcn.140011050
mov rbx, rax
mov qword [rbp + 0x110], rax
xor eax, eax
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x248], r12
mov dword [rbp + 0x1c0], 0x85b3e12
mov ecx, dword [0x1400b9728]
mov dword [rbp + 0x1c4], ecx
lea rax, [rbp + 0x248]
mov qword [rbp + 0x1c8], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x10
lea r8, [rbp + 0x1c0]
mov edx, 0x2201c8
mov rcx, qword [0x1400b9720]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x248]
mov qword [0x1400b9730], rax
call fcn.14000beb0
lea rcx, [rax + 0xd8]
call fcn.140011050
call fcn.14000beb0
lea rcx, [rax + 0x10]
call fcn.140011050
lea rcx, [rax + 0x7d0]
call fcn.140011050
lea rcx, [rax + 0x60]
call fcn.140011050
mov qword [rbp + 0x80], rax
xor eax, eax
mov qword [rbp + 0x88], rax
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [0x1400b9768], xmm0
mov dword [rbp + 0x68], 0x616c5069
mov dword [rbp + 0x6c], 0x73726579
mov byte [rbp + 0x70], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp + 0x69]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d361
lea rdx, [rbp + 0x69]
lea rcx, [rsp + 0x40]
call fcn.140004a70
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x80]
call fcn.14000f0b0
mov rdx, qword [rbp + 0x100]
test rdx, rdx
jne 0x14000d52d
movdqa xmm0, xmmword [0x1400a6790]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [str._23_._4__5._l_]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a6760]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a66c0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400a6740]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400a6730]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [0x1400a6710]
movdqa xmmword [rbp], xmm0
mov dword [rbp + 0x10], 0x10603235
mov dword [rbp + 0x14], 0x4a6e0409
mov byte [rbp + 0x18], dl
mov rcx, r12
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5e], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5d], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5c], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5b], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5a], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x59], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x58], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x57], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x56], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x55], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x54], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x53], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x52], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x51], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x50], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4f], al
add rcx, 0x11
cmp rcx, 0x77
jb 0x14000d410
mov byte [rbp + 0x18], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x5f]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000d4c0
mov r8, rdi
lea rdx, [rbp - 0x5f]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000c7bc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movups xmm0, xmmword [rbp + 0x100]
movups xmmword [0x1400b97d0], xmm0
test rbx, rbx
jne 0x14000d74d
movdqa xmm0, xmmword [0x1400a6b60]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a6b40]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400a6660]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400a6650]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [str.QKKM_]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400a6b30]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [0x1400a6b50]
movdqa xmmword [rbp], xmm0
mov dword [rbp + 0x10], 0x41185d5c
mov dword [rbp + 0x14], 0x184a4d57
mov dword [rbp + 0x18], 0x167c7168
mov word [rbp + 0x1c], 0x32
mov rcx, r12
nop dword [rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5e], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5d], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5c], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5b], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5a], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x59], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x58], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x57], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x56], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x55], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x54], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x53], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x52], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x51], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x50], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4e], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4d], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4c], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4b], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4a], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x49], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x48], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x47], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x46], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x45], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x44], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x43], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x42], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x41], al
add rcx, 0x1f
cmp rcx, 0x7c
jb 0x14000d5c0
mov byte [rbp + 0x1d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x5f]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000d6e0
mov r8, rdi
lea rdx, [rbp - 0x5f]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000c7bc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movups xmm0, xmmword [rbp + 0x110]
movups xmmword [0x1400b97e0], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x258], xmm1
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x270], 0xf
mov byte [rbp + 0x258], 0
add rdx, 0x100
lea rcx, [rbp + 0x98]
call fcn.1400110f0
mov rdx, qword [rbp + 0x98]
add rdx, 0x200
lea rcx, [rbp + 0x2e0]
call fcn.1400110f0
cmp qword [rbp + 0x2e0], 0
je 0x14000d899
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x2e0]
call fcn.14000eaa0
mov rbx, rax
lea rax, [rbp + 0x258]
cmp rax, rbx
je 0x14000d853
mov rdx, qword [rbp + 0x270]
cmp rdx, 0xf
jbe 0x14000d816
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d811
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d88b
call fcn.14008ea04
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x270], 0xf
mov byte [rbp + 0x258], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x258], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x268], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000d907
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d892
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d892
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
jmp 0x14000d907
mov dword [rbp - 0x68], 0x6e6f6e17
mov word [rbp - 0x64], 0x65
lea rax, [rbp - 0x67]
mov rsi, rdi
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000d8b0
mov rax, qword [rbp + 0x270]
cmp rsi, rax
ja 0x14000d8f4
lea rbx, [rbp + 0x258]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x258]
mov qword [rbp + 0x268], rsi
mov r8, rsi
lea rdx, [rbp - 0x67]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14000d907
lea r9, [rbp - 0x67]
mov rdx, rsi
lea rcx, [rbp + 0x258]
call fcn.1400118a0
call fcn.1400288a0
mov rsi, rax
test rax, rax
jne 0x14000d976
mov rdx, qword [rbp + 0x270]
cmp rdx, 0xf
jbe 0x14000d958
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d953
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d953
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x270], 0xf
mov byte [rbp + 0x258], 0
jmp 0x14000c7bc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 9
lea rdx, str.Workspace
lea rcx, [rsp + 0x40]
call fcn.140004a70
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x80]
call fcn.14000ecc0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
mov r8d, 6
lea rdx, str.Camera
lea rcx, [rbp + 0x98]
call fcn.140004a70
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call fcn.14000ecc0
movups xmm0, xmmword [rbp + 0xc0]
movups xmmword [0x1400b97b8], xmm0
mov ecx, 8
call fcn.14008e9c0
lea rcx, [0x140008e40]
mov qword [rax], rcx
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x2d8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140012830]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x2d0], rax
test rax, rax
je 0x14000e35c
mov edx, edi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov ecx, 8
call fcn.14008e9c0
lea rcx, [0x140087fc0]
mov qword [rax], rcx
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x2c8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140012830]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x2c0], rax
test rax, rax
je 0x14000e349
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
cmp dword [rbp + 0x2d8], 0
je 0x14000e33d
movaps xmm0, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000e33d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2d0], xmm0
cmp dword [rbp + 0x2c8], eax
je 0x14000e33d
movaps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000e33d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2c0], xmm0
movabs rax, 0x249a5775c
cmp rsi, rax
jne 0x14000dbf7
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 9
lea rdx, str.Workspace
lea rcx, [rsp + 0x40]
call fcn.140004a70
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x48]
lea rcx, [0x1400b9768]
call fcn.14000f0b0
mov rbx, rax
lea rdx, str.Players
lea rcx, [rbp + 0xc0]
call fcn.140003a00
mov r8, rax
lea rdx, [rbp + 0x38]
mov rcx, rbx
call fcn.14000f0b0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], r12
mov r8d, 5
lea rdx, str.InBox
lea rcx, [rbp + 0xe0]
call fcn.140004a70
lea r8, [rbp + 0xe0]
lea rdx, [rsp + 0x60]
jmp 0x14000dec7
movabs rax, 0x42ac94608
cmp rsi, rax
je 0x14000de88
mov eax, 0xa6310100
cmp rsi, rax
je 0x14000de88
movabs rax, 0x3c097f862
cmp rsi, rax
je 0x14000de88
movabs rax, 0x3892b0eb2
cmp rsi, rax
je 0x14000ddb5
movabs rax, 0x40d50c16e
cmp rsi, rax
je 0x14000ddb5
movabs rax, 0x3efd9f682
cmp rsi, rax
je 0x14000de88
movabs rax, 0x2e2c9baa7
cmp rsi, rax
je 0x14000de88
movabs rax, 0x10b3af953
cmp rsi, rax
je 0x14000ddb5
mov eax, 0xc0c14df7
cmp rsi, rax
jne 0x14000dcc5
lea rdx, str.Workspace
lea rcx, [rsp + 0x40]
call fcn.140003a00
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [0x1400b9768]
call fcn.14000f0b0
lea rdx, str.Characters
jmp 0x14000deb4
movabs rax, 0x261a4f850
cmp rsi, rax
je 0x14000ddb5
movabs rax, 0x14de894e2
cmp rsi, rax
je 0x14000dc94
cmp rsi, 0x110d64bd
je 0x14000ddb5
cmp rsi, 0x8834f7b
je 0x14000ddb5
movabs rax, 0x3530334cb
cmp rsi, rax
je 0x14000de88
mov eax, 0xa3b71f54
cmp rsi, rax
je 0x14000de88
movabs rax, 0x3fbc2ec11
cmp rsi, rax
je 0x14000de88
movabs rax, 0x409d4b7db
cmp rsi, rax
je 0x14000de88
movabs rax, 0x3d5aa14b3
cmp rsi, rax
je 0x14000de88
cmp rsi, 0x35289865
je 0x14000de88
movabs rax, 0x4204702ac
cmp rsi, rax
je 0x14000de88
movabs rax, 0x3310398cd
cmp rsi, rax
je 0x14000de88
movabs rax, 0x40d50b7a2
cmp rsi, rax
jne 0x14000dda6
lea rdx, str.Players
jmp 0x14000ddbc
movabs rax, 0x1b5471826
cmp rsi, rax
jne 0x14000dde9
lea rdx, str.Workspace
lea rcx, [rsp + 0x40]
call fcn.140003a00
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [0x1400b9768]
call fcn.14000f0b0
movups xmm0, xmmword [rax]
movups xmmword [0x1400b97a0], xmm0
jmp 0x14000df84
movabs rax, 0x406abae41
cmp rsi, rax
je 0x14000de88
movabs rax, 0x408f73e42
cmp rsi, rax
je 0x14000de88
movabs rax, 0x4085134c4
cmp rsi, rax
je 0x14000de88
movabs rax, 0x3fbc8ca59
cmp rsi, rax
je 0x14000de88
cmp rsi, 0x3374651f
je 0x14000dc94
movabs rax, 0x1341975b6
cmp rsi, rax
jne 0x14000de79
lea rdx, [0x1400a0219]
lea rcx, [rsp + 0x40]
call fcn.140003a00
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [0x1400b9768]
call fcn.14000f0b0
movups xmm0, xmmword [rax]
movups xmmword [0x1400b97a0], xmm0
jmp 0x14000df84
movabs rax, 0x406582d17
cmp rsi, rax
jne 0x14000dede
lea rdx, str.Workspace
lea rcx, [rsp + 0x40]
call fcn.140003a00
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [0x1400b9768]
call fcn.14000f0b0
lea rdx, str.Players
mov rbx, rax
lea rcx, [rbp + 0x48]
call fcn.140003a00
mov r8, rax
lea rdx, [rbp + 0x38]
mov rcx, rbx
call fcn.14000f0b0
movups xmm0, xmmword [rax]
movups xmmword [0x1400b97a0], xmm0
jmp 0x14000df84
lea rdx, [rsp + 0x60]
call fcn.14000e620
lea rdx, [rax + 1]
movzx ecx, byte [rax]
xor byte [rdx], cl
xor byte [rax + 2], cl
xor byte [rax + 3], cl
xor byte [rax + 4], cl
xor byte [rax + 5], cl
xor byte [rax + 6], cl
xor byte [rax + 7], cl
xor byte [rax + 8], cl
xor byte [rax + 9], cl
xor byte [rax + 0xa], cl
xor byte [rax + 0xb], cl
xor byte [rax + 0xc], cl
xor byte [rax + 0xd], cl
xor byte [rax + 0xe], cl
xor byte [rax + 0xf], cl
xor byte [rax + 0x10], cl
xor byte [rax + 0x11], cl
xor byte [rax + 0x12], cl
xor byte [rax + 0x13], cl
xor byte [rax + 0x14], cl
xor byte [rax + 0x15], cl
xor byte [rax + 0x16], cl
xor byte [rax + 0x17], cl
xor byte [rax + 0x18], cl
xor byte [rax + 0x19], cl
xor byte [rax + 0x1a], cl
xor byte [rax + 0x1b], cl
xor byte [rax + 0x1c], cl
xor byte [rax + 0x1d], cl
xor byte [rax + 0x1e], cl
xor byte [rax + 0x1f], cl
xor byte [rax + 0x20], cl
xor byte [rax + 0x21], cl
xor byte [rax + 0x22], cl
xor byte [rax + 0x23], cl
xor byte [rax + 0x24], cl
xor byte [rax + 0x25], cl
xor byte [rdx + 0x25], cl
mov byte [rdx + 0x26], 0
lea rcx, [rsp + 0x40]
call fcn.140003a00
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
lea rcx, [rsp + 0x40]
call fcn.1400039a0
mov rdx, qword [0x1400b97d0]
add rdx, 0x100
lea rcx, [rbp + 0x120]
call fcn.1400110f0
mov rdx, qword [rbp + 0x120]
add rdx, 0x298
lea rcx, [rbp + 0x130]
call fcn.1400110f0
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x130]
call fcn.14000eaa0
nop
lea r9, [rbp + 0x278]
cmp qword [rbp + 0x290], 0xf
cmova r9, qword [rbp + 0x278]
mov rsi, qword [rbp + 0x288]
mov rax, qword [0x1400b8180]
cmp rsi, rax
ja 0x14000e024
lea rbx, [0x1400b8168]
cmp rax, 0xf
cmova rbx, qword [0x1400b8168]
mov qword [0x1400b8178], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x14000e033
mov rdx, rsi
lea rcx, [0x1400b8168]
call fcn.1400118a0
movdqa xmm0, xmmword [0x1400a6c00]
movdqu xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a6bd0]
movdqu xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a67a0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x70], 0x1d
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x61], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x62], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x63], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x64], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x65], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x66], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x67], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x68], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x69], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x6a], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x6b], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x6c], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x6d], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x6e], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x6f], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x70], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x71], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x72], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x73], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x74], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x75], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x76], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x77], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x78], al
add rcx, 0x18
cmp rcx, 0x30
jb 0x14000e070
mov byte [rbp - 0x6f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rsp + 0x61]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000e174
lea rdx, [rsp + 0x61]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000e1d9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e1d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e1d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400a66e0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x6a6e4520
mov dword [rsp + 0x54], 0xa796f
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
lea rax, [rsp + 0x41]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e220
mov r8, rdi
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x60]
call fcn.140004a70
nop
lea rcx, [rsp + 0x60]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000e287
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e282
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e282
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
lea rcx, [rbp + 0x90]
call fcn.140007c60
movabs rcx, 0x7fffffff4d2fa1ff
mov rax, qword [rbp + 0x90]
cmp rax, rcx
je 0x14000e2be
setl cl
test cl, cl
je 0x14000e2be
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rbp - 0x68], rcx
jmp 0x14000e2c2
mov qword [rbp - 0x68], r13
lea rcx, [rbp - 0x68]
call fcn.140009a60
movabs rbx, 0x7ffffffdabf41bff
movabs rdi, 0x2540be400
nop
lea rcx, [rbp + 0x78]
call fcn.140007c60
mov rax, qword [rbp + 0x78]
cmp rax, rbx
je 0x14000e303
setl cl
test cl, cl
je 0x14000e303
lea rcx, [rax + rdi]
mov qword [rbp - 0x68], rcx
jmp 0x14000e307
mov qword [rbp - 0x68], r13
lea rcx, [rbp - 0x68]
call fcn.140009a60
mov dword [rbp + 0x30], 0x626f521a
mov dword [rbp + 0x34], 0x786f6c
lea rdx, [rbp + 0x31]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000e2e0
call fcn.14000b9e0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x2c8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x2d8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movdqa xmm0, xmmword [0x1400a6b20]
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm1, xmmword [0x1400a65c0]
movdqa xmmword [rbp + 0x300], xmm1
movdqa xmm0, xmmword [0x1400a6ba0]
movdqa xmmword [rbp + 0x310], xmm0
movdqa xmm1, xmmword [0x1400a6b80]
movdqa xmmword [rbp + 0x320], xmm1
movdqa xmm0, xmmword [0x1400a65e0]
movdqa xmmword [rbp + 0x330], xmm0
movdqa xmm1, xmmword [0x1400a6b70]
movdqa xmmword [rbp + 0x340], xmm1
movdqa xmm0, xmmword [str._vBXXN_v_NYXBX_X_aGN_v_D_vIN_vMDEO_a_v_vGNJXN_vHDE_JH__vBYX_vDY_vYNX_JY__v]
movdqa xmmword [rbp + 0x350], xmm0
movdqa xmm1, xmmword [0x1400a65d0]
movdqa xmmword [rbp + 0x360], xmm1
movdqa xmm0, xmmword [0x1400a6b90]
movdqa xmmword [rbp + 0x370], xmm0
mov dword [rbp + 0x380], 0xb4e4f42
mov dword [rbp + 0x384], 0x595e4452
mov dword [rbp + 0x388], 0x6f627b0b
mov word [rbp + 0x38c], 5
mov rcx, r12
nop dword [rax]
movzx eax, byte [rbp + 0x2f0]
xor byte [rbp + rcx + 0x2f1], al
movzx eax, byte [rbp + 0x2f0]
xor byte [rbp + rcx + 0x2f2], al
add rcx, 2
cmp rcx, 0x9c
jb 0x14000e430
mov byte [rbp + 0x38d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp + 0x2f1]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e480
mov r8, rdi
lea rdx, [rbp + 0x2f1]
lea rcx, [rsp + 0x40]
call fcn.140004a70
nop
lea rcx, [rsp + 0x40]
call fcn.14000ba20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000e4ea
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e4e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e4e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
nop
mov rcx, qword [rbp + 0x1f8]
test rcx, rcx
je 0x14000e538
mov rdx, qword [rbp + 0x208]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e521
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e56f
call fcn.14008ea04
mov qword [rbp + 0x1f8], r12
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x200], xmm0
mov rcx, qword [rbp + 0x1e0]
test rcx, rcx
je 0x14000e58d
mov rdx, qword [rbp + 0x1f0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e576
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e576
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ea04
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r12
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x14000c4c9
mov rdx, qword [rbp + 0x240]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c4c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
nop
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3