Function at 0x1400110ac
Capabilities:
Create thread
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r13
push rbp
push r14
push r15
lea rbp, [rax - 0x2b8]
sub rsp, 0x3a0
mov rax, qword [0x140185080]
xor rax, rsp
mov qword [rbp + 0x290], rax
xor edi, edi
lea esi, [rdi + 1]
lea r14d, [rdi + 0xf]
mov r15d, 0x1000
or r13, 0xffffffffffffffff
cmp byte [0x1404632d0], dil
jne 0x14001181d
lea r8, [0x1401673a2]
lea rdx, [0x140163590]
lea rcx, [rbp + 0x230]
call fcn.140014950
nop
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x250]
call fcn.1400096c4
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140009948
nop
call fcn.1400104b0
test al, al
jne 0x1400112e0
movdqa xmm0, xmmword [str.P493__477]
movdqu xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1d0], dil
mov ecx, edi
mov al, byte [rbp + 0x1c0]
xor byte [rbp + rcx + 0x1c1], al
add rcx, rsi
cmp rcx, r14
jb 0x140011164
mov byte [rbp + 0x1d0], dil
movdqa xmm0, xmmword [0x14016d900]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [0x14016d9d0]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [0x14016d940]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [0x14016d9c0]
movdqa xmmword [rbp + 0x210], xmm1
mov dword [rbp + 0x220], 0x25364634
mov byte [rbp + 0x224], dil
mov rcx, rdi
mov al, byte [rbp + 0x1e0]
xor byte [rbp + rcx + 0x1e1], al
add rcx, rsi
cmp rcx, 0x43
jb 0x1400111d4
mov byte [rbp + 0x224], dil
mov r9d, Ordinal_50
lea r8, [rbp + 0x1c1]
lea rdx, [rbp + 0x1e1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rdi
mov r8d, Ordinal_41
lea rdx, str.Unable_to_load_driver_RESTART_YOUR_PC
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov r15d, 0x1000
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140011292
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x14001128c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001128c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
nop
lea rcx, [rbp - 0x80]
call fcn.14001286c
nop
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x1400112d8
mov rdx, qword [rbp + 0x240]
sub rdx, rcx
mov r8, rcx
cmp rdx, r15
jb 0x1400112d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x140011811
call fcn.14012c324
mov al, sil
jmp 0x14001283a
lea rcx, [rsp + 0x40]
call fcn.14000a6b4
lea rcx, [rbp + 0xc0]
call fcn.140014408
nop
lea rdx, [0x14016ac84]
lea rcx, [rbp + 0xc0]
call fcn.140007060
lea rdx, str.NtShutdownSystem
mov rcx, rax
call fcn.140007060
mov rcx, rax
lea rdx, str._mapped_physical_page___
call fcn.140007060
mov rbx, rax
mov rdx, qword [0x1404619d0]
lea rcx, [rbp + 0x1e0]
call fcn.140006c6c
nop
lea rdx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], r14
cmova rdx, qword [rbp + 0x1e0]
mov r8, qword [rbp + 0x1f0]
mov rcx, rbx
call fcn.140008688
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x1400113a4
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x14001139f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001139f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xc8]
call fcn.14001456c
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140011404
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x1400113ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400113ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
lea rcx, [rbp - 0x30]
call fcn.140014408
nop
lea rdx, [0x14016ac84]
lea rcx, [rbp - 0x30]
call fcn.140007060
lea rdx, str.NtShutdownSystem
mov rcx, rax
call fcn.140007060
mov rcx, rax
lea rdx, str._page_offset___
call fcn.140007060
mov rbx, rax
movzx edx, word [0x1404619e4]
lea rcx, [rbp + 0x1e0]
call fcn.140006bdc
nop
lea rdx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], r14
cmova rdx, qword [rbp + 0x1e0]
mov r8, qword [rbp + 0x1f0]
mov rcx, rbx
call fcn.140008688
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x1400114b8
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x1400114b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400114b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x28]
call fcn.14001456c
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140011515
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140011510
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011510
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_bizz::roblox::init_void_::_5::_lambda_3___unsigned_long_long_unsigned___int64___char_const____ptr64__char_const____ptr64_.0
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x1e0]
mov qword [rbp + 0x218], rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x80]
call fcn.140009c30
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rdi
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Driver_imports_fixed.
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x1400115bf
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x1400115ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400115ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
lea rcx, [rbp - 0x80]
call fcn.140009a0c
mov word [rbp + 0x25e], di
mov qword [rbp + 0x260], reloc.WS2_32.dll_ntohl
mov qword [rbp + 0x268], r14
movsd xmm0, qword [str.Driver_mapped.]
movsd qword [rbp + 0x250], xmm0
mov eax, dword [0x14016acc8]
mov dword [rbp + 0x258], eax
movzx eax, word [0x14016accc]
mov word [rbp + 0x25c], ax
mov byte [rbp + 0x25e], dil
lea rdx, [rbp + 0x250]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, r14
jbe 0x14001165e
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, r15
jb 0x140011659
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011659
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
mov rbx, qword [rbp - 0x48]
mov edx, dword [rbx + 0x50]
call fcn.14000acbc
mov rdi, rax
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140009b0c
mov r9d, dword [rbx + 0x50]
mov r8, qword [rbp - 0x68]
mov rdx, rdi
call fcn.14000adc4
mov eax, dword [rbx + 0x28]
add rax, rdi
mov qword [rbp + 0x1c0], rax
mov ebx, dword [rbx + 0x50]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax]
mov ecx, dword [rcx + rax]
cmp dword [0x140463464], ecx
jle 0x1400116fa
lea rcx, [0x140463464]
call fcn.14012c400
cmp dword [0x140463464], r13d
jne 0x1400116fa
lea rcx, [0x14015e150]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140463430], rax
lea rcx, [0x140463464]
call fcn.14012c394
mov rcx, qword [0x1404619d0]
mov rdx, qword [rbp + 0x1c0]
call fcn.14000a454
mov rdx, rbx
mov rcx, rdi
call qword [0x140463430]
mov rcx, qword [0x1404619d0]
call fcn.14000a634
mov rax, qword [rbp - 0x48]
mov r8d, dword [rax + 0x54]
mov rdx, rdi
call fcn.14000ae50
mov byte [0x1404632d0], sil
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x30], rbx
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x28]
call fcn.14001433c
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x58]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0xc0], rbx
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xc8]
call fcn.14001433c
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x148]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x80]
call fcn.14001286c
nop
mov rcx, qword [rbp + 0x230]
xor edi, edi
test rcx, rcx
je 0x14001181d
mov rdx, qword [rbp + 0x240]
sub rdx, rcx
mov rax, rcx
cmp rdx, r15
jb 0x140011818
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011818
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
lea rcx, str._e_37mBizze_32mSensee_37m_____Successfully_loaded_
call fcn.140001f1c
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov r8d, 3
mov dword [rsp + 0x20], r8d
xor r9d, r9d
mov edx, 0xc0000000
lea rcx, str..IoControl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140461a08], rax
test rax, rax
je 0x140012725
cmp rax, r13
je 0x140012725
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rdi
mov r8d, gethostname
lea rdx, str.Driver_mapping_and_verification_completed_successfully.
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x1400118e9
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x1400118e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400118e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
movdqa xmm0, xmmword [0x14016d9b0]
movdqu xmmword [rbp + 0x1c0], xmm0
mov dword [rbp + 0x1d0], 0x203d7639
mov word [rbp + 0x1d4], 0x3d
mov rcx, rdi
mov al, byte [rbp + 0x1c0]
xor byte [rbp + rcx + 0x1c1], al
add rcx, rsi
cmp rcx, 0x14
jb 0x14001190f
mov byte [rbp + 0x1d5], dil
lea rcx, [rbp + 0x1c1]
call fcn.14000f28c
mov dword [0x140461a10], eax
test eax, eax
jne 0x140011a37
movdqa xmm0, xmmword [str.m6v6Z]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [0x14016da00]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [0x14016dcc0]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [0x14016d8a0]
movdqa xmmword [rbp + 0x210], xmm1
mov rcx, rdi
mov al, byte [rbp + 0x1e0]
xor byte [rbp + rcx + 0x1e1], al
add rcx, rsi
cmp rcx, 0x3e
jb 0x140011989
mov byte [rbp + 0x21f], dil
lea rcx, [rbp + 0x1e1]
call fcn.140001f1c
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rdi
mov r8d, Ordinal_27
lea rdx, str.Roblox_is_not_initialized
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140012838
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140012833
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012833
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov cl, sil
mov byte [rbp + 0x1b0], cl
mov dword [rbp + 0x1b1], 0x6d636e53
mov word [rbp + 0x1b5], 0x796e
mov byte [rbp + 0x1b7], dil
mov rax, rdi
xor byte [rbp + rax + 0x1b1], cl
add rax, rsi
cmp rax, 6
jae 0x140011a75
mov cl, byte [rbp + 0x1b0]
jmp 0x140011a5d
mov byte [rbp + 0x1b7], dil
lea rdx, [rbp + 0x1b1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140461a90], rax
call fcn.140010d10
lea rcx, [rax + 0x10]
call fcn.140014b94
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], 9
mov qword [rbp + 0x1f8], r14
movsd xmm0, qword [str.Workspace]
movsd qword [rbp + 0x1e0], xmm0
mov al, byte [0x14016ada0]
mov byte [rbp + 0x1e8], al
xor ebx, ebx
mov byte [rbp + 0x1e9], bl
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1c0]
lea rcx, [0x140461a68]
call fcn.140013670
mov qword [rbp + 0x258], rbx
mov qword [rbp + 0x260], 7
mov qword [rbp + 0x268], r14
mov rcx, qword [str.Players]
mov dword [rbp + 0x250], ecx
movzx ecx, word [0x14016adac]
mov word [rbp + 0x254], cx
mov cl, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rbp + 0x256], cl
mov byte [rbp + 0x257], bl
lea r8, [rbp + 0x250]
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call fcn.140013670
mov rcx, qword [rax]
mov qword [0x140461a48], rcx
lea rdx, [rbp + 0x1c0]
lea rcx, [0x140461a88]
call fcn.140013860
lea rdx, [rbp + 0x1e0]
mov rcx, rax
call fcn.1400131b8
mov rdx, rax
lea rcx, [0x140460518]
call fcn.1400060b8
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140011bd3
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140011bce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011bce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
call fcn.140010d10
lea rcx, [rax + 0x118]
call fcn.140014b94
lea rcx, [rax + 0x198]
call fcn.140014b94
mov rbx, rax
mov qword [rbp + 0x1c0], rax
xor edx, edx
test rdi, rdi
jne 0x140011d4a
mov cl, reloc.WS2_32.dll_recvfrom
mov dword [rbp + 0x1b0], 0x6b787311
mov word [rbp + 0x1b4], WSAGetLastError
mov eax, edx
xor byte [rbp + rax + 0x1b1], cl
add rax, rsi
cmp rax, 4
jae 0x140011c34
mov cl, byte [rbp + 0x1b0]
jmp 0x140011c1c
mov byte [rbp + 0x1b5], dl
movdqa xmm0, xmmword [0x14016d920]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [0x14016d8e0]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [0x14016d8b0]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [0x14016d8d0]
movdqa xmmword [rbp + 0x210], xmm1
mov dword [rbp + 0x220], 0x45160b10
mov word [rbp + 0x224], WSAGetLastError
mov rcx, rdx
mov al, byte [rbp + 0x1e0]
xor byte [rbp + rcx + 0x1e1], al
add rcx, rsi
cmp rcx, 0x44
jb 0x140011c90
mov byte [rbp + 0x225], dl
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x1b1]
lea rdx, [rbp + 0x1e1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
and qword [rbp + 0x1f0], 0
and qword [rbp + 0x1f8], 0
mov r8d, 0x43
lea rdx, str.failed_to_get_visual_engine__please_run_the_cheat_as_administrator_
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140011d48
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140011d43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011d43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
xor edx, edx
test rbx, rbx
jne 0x140011e8f
mov cl, reloc.WS2_32.dll_select
mov dword [rbp + 0x1b0], 0x687b7012
mov word [rbp + 0x1b4], WSAGetLastError
mov rax, rdx
xor byte [rbp + rax + 0x1b1], cl
add rax, rsi
cmp rax, 4
jae 0x140011d83
mov cl, byte [rbp + 0x1b0]
jmp 0x140011d6b
mov byte [rbp + 0x1b5], dl
movdqa xmm0, xmmword [0x14016d970]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [0x14016d950]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [0x14016d930]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [0x14016dce0]
movdqa xmmword [rbp + 0x210], xmm1
mov word [rbp + 0x220], 0x79
mov rcx, rdx
mov al, byte [rbp + 0x1e0]
xor byte [rbp + rcx + 0x1e1], al
add rcx, rsi
cmp rcx, 0x40
jb 0x140011dd5
mov byte [rbp + 0x221], dl
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x1b1]
lea rdx, [rbp + 0x1e1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
and qword [rbp + 0x1f0], 0
and qword [rbp + 0x1f8], 0
mov r8d, 0x3f
lea rdx, str.failed_to_get_datamodel__please_run_the_cheat_as_administrator_
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140011e8d
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140011e88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011e88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
xor edx, edx
mov qword [0x140461a68], rbx
mov cl, reloc.WS2_32.dll_socket
mov dword [rbp + 0x230], 0x767b4717
mov dword [rbp + 0x234], 0x6465726e
mov byte [rbp + 0x238], dl
mov rax, rdx
xor byte [rbp + rax + 0x231], cl
add rax, rsi
cmp rax, 7
jae 0x140011ecd
mov cl, byte [rbp + 0x230]
jmp 0x140011eb5
mov byte [rbp + 0x238], dl
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rdx
mov qword [rbp + 0x1f8], rdx
lea rax, [rbp + 0x231]
mov r8, r13
inc r8
cmp byte [rax + r8], dl
jne 0x140011ef5
lea rdx, [rbp + 0x231]
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x1c0]
call fcn.140013670
mov rbx, qword [rbp + 0x230]
test rbx, rbx
jne 0x14001206c
mov cl, 0x4a
mov dword [rbp + 0x1b0], 0x3023284a
mov word [rbp + 0x1b4], Ordinal_50
xor eax, eax
xor byte [rbp + rax + 0x1b1], cl
add rax, rsi
cmp rax, 4
jae 0x140011f6a
mov cl, byte [rbp + 0x1b0]
jmp 0x140011f52
mov byte [rbp + 0x1b5], 0
movdqa xmm0, xmmword [0x14016dd10]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [0x14016dcf0]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [0x14016d910]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [str.JOFBEBX_YJ_DY_n_]
movdqa xmmword [rbp + 0x210], xmm1
xor ecx, ecx
mov al, byte [rbp + 0x1e0]
xor byte [rbp + rcx + 0x1e1], al
add rcx, rsi
cmp rcx, 0x3e
jb 0x140011fb3
mov byte [rbp + 0x21f], 0
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x1b1]
lea rdx, [rbp + 0x1e1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
and qword [rbp + 0x1f0], 0
and qword [rbp + 0x1f8], 0
mov r8d, 0x3d
lea rdx, str.failed_to_get_players__please_run_the_cheat_as_administrator_
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x14001206c
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140012067
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012067
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], 9
mov qword [rbp + 0x1f8], r14
movsd xmm0, qword [str.Workspace]
movsd qword [rbp + 0x1e0], xmm0
mov al, byte [0x14016ada0]
mov byte [rbp + 0x1e8], al
mov byte [rbp + 0x1e9], 0
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1c0]
call fcn.140013670
mov rax, qword [rbp + 0x1b0]
mov qword [0x140461a98], rax
mov qword [0x140461a88], rbx
mov qword [0x140461a60], rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xor edi, edi
mov qword [rbp + 0x280], rdi
mov qword [rbp + 0x288], r14
mov byte [rbp + 0x270], dil
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x230]
call fcn.140013860
lea rdx, [rbp + 0x1c0]
mov rcx, rax
call fcn.140013c5c
cmp qword [rbp + 0x1c0], rdi
je 0x140012205
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x1c0]
call fcn.1400131b8
mov rbx, rax
lea rax, [rbp + 0x270]
cmp rax, rbx
je 0x1400121c0
mov rdx, qword [rbp + 0x288]
cmp rdx, r14
jbe 0x14001218b
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, r15
jb 0x140012186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400121f7
call fcn.14012c324
mov qword [rbp + 0x280], rdi
mov qword [rbp + 0x288], r14
mov byte [rbp + 0x270], dil
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x270], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x280], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], r14
mov byte [rbx], dil
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140012262
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x1400121fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400121fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
jmp 0x140012262
mov cl, reloc.WLDAP32.dll_Ordinal_45
mov dword [rbp + 0x1b0], 0x4342432d
mov word [rbp + 0x1b4], Ordinal_79
mov rax, rdi
xor byte [rbp + rax + 0x1b1], cl
add rax, rsi
cmp rax, 4
jae 0x140012235
mov cl, byte [rbp + 0x1b0]
jmp 0x14001221d
mov byte [rbp + 0x1b5], dil
lea rax, [rbp + 0x1b1]
inc r13
cmp byte [rax + r13], dil
jne 0x140012243
mov r8, r13
lea rdx, [rbp + 0x1b1]
lea rcx, [rbp + 0x270]
call fcn.1400097f8
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x230]
call fcn.140013860
mov rcx, qword [rax]
mov qword [0x140461a58], rcx
lea rdx, [fcn.14000d4b4]
lea rcx, [rbp + 0x230]
call fcn.14000c710
mov rbx, rax
cmp dword [rax + 8], edi
je 0x14001271c
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001271c
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x238], edi
je 0x1400122db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x14000d1f8]
lea rcx, [rbp + 0x230]
call fcn.14000c710
mov rbx, rax
cmp dword [rax + 8], edi
je 0x140012713
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140012713
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x238], edi
je 0x140012337
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x14000d2b8]
lea rcx, [rbp + 0x230]
call fcn.14000c710
mov rbx, rax
cmp dword [rax + 8], edi
je 0x14001270a
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001270a
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x238], edi
je 0x140012393
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x14000ddb0]
lea rcx, [rbp + 0x230]
call fcn.14000c710
mov rbx, rax
cmp dword [rax + 8], edi
je 0x140012701
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140012701
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x238], edi
je 0x1400123ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x14000e49c]
lea rcx, [rbp + 0x230]
call fcn.14000c710
mov rbx, rax
cmp dword [rax + 8], edi
je 0x1400126f8
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400126f8
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x238], edi
je 0x14001244b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov eax, esi
xchg byte [0x140461aa0], al
lea rdx, [0x140019cf4]
lea rcx, [rsp + 0x50]
call fcn.14000c710
nop
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x70], rax
cmp dword [rsp + 0x58], edi
je 0x1400126ef
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400126ef
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
lea ecx, [rax + 0x18]
call fcn.14012c0a0
lea rcx, [rsp + 0x70]
mov qword [rax], rcx
lea rcx, [rsp + 0x50]
mov qword [rax + 8], rcx
lea rcx, [0x14001a33c]
mov qword [rax + 0x10], rcx
mov qword [rbp + 0x1c0], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140015398]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x1400126df
cmp dword [rsp + 0x68], edi
je 0x1400126d6
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400126d6
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
lea ecx, [rax + 8]
call fcn.14012c0a0
lea rcx, [0x140068fe0]
mov qword [rax], rcx
mov qword [rbp + 0x1c0], rax
lea rcx, [rbp + 0x238]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14000c798]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x230], rax
test rax, rax
je 0x1400126c4
cmp dword [rbp + 0x238], edi
je 0x1400126bb
movaps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400126bb
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rdi
lea r8d, [rax + 0x1c]
lea rdx, str.init_completed_successfully.
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x14001262d
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140012628
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012628
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
mov qword [rbp + 0x1c0], rsi
lea rcx, [rbp + 0x1c0]
call fcn.14000c60c
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x140461a90]
sete byte [0x140461a3f]
mov cl, r14b
mov byte [rbp + 0x1b0], cl
mov dword [rbp + 0x1b1], 0x636d605d
mov word [rbp + 0x1b5], 0x7760
mov byte [rbp + 0x1b7], dil
mov rax, rdi
xor byte [rbp + rax + 0x1b1], cl
add rax, rsi
cmp rax, 6
jae 0x140012692
mov cl, byte [rbp + 0x1b0]
jmp 0x14001267a
mov byte [rbp + 0x1b7], dil
lea rdx, [rbp + 0x1b1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140012634
call fcn.1400105ec
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x238], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x68], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movdqa xmm0, xmmword [0x14016d960]
movdqu xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1d0], dil
mov rcx, rdi
mov al, byte [rbp + 0x1c0]
xor byte [rbp + rcx + 0x1c1], al
add rcx, rsi
cmp rcx, r14
jb 0x14001273f
mov byte [rbp + 0x1d0], dil
movdqa xmm0, xmmword [0x14016d8f0]
movdqu xmmword [rbp + 0x230], xmm0
mov dword [rbp + 0x240], 0x1040a
mov word [rbp + 0x244], 1
mov rcx, rdi
mov al, byte [rbp + 0x230]
xor byte [rbp + rcx + 0x231], al
add rcx, rsi
cmp rcx, 0x14
jb 0x140012781
mov byte [rbp + 0x245], dil
mov r9d, Ordinal_50
lea r8, [rbp + 0x1c1]
lea rdx, [rbp + 0x231]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rdi
mov r8d, 0x33
lea rdx, str.Post_mapping_verification_failed._Driver_not_found.
lea rcx, [rbp + 0x1e0]
call fcn.140007b20
nop
lea rdx, [rbp + 0x1e0]
call fcn.1400109f4
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, r14
jbe 0x140012838
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, r15
jb 0x140012833
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012833
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c324
xor al, al
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14012c080
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r13, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret