Function at 0x140002bf0
Capabilities:
Encode data using xor
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140085080]
xor rax, rsp
mov qword [rbp + 0x27], rax
movups xmm0, xmmword [str.SGU_QWTK]
movups xmmword [rbp - 0x49], xmm0
mov eax, dword [0x14007a708]
mov dword [rbp - 0x39], eax
cmp word [0x14007a70a], 0
je 0x140002c76
mov eax, 0x67
mov word [rbp - 0x49], ax
xor word [rbp - 0x47], 0x35
xor word [rbp - 0x45], 0x36
xor word [rbp - 0x43], 0x37
xor word [rbp - 0x41], 0x38
xor word [rbp - 0x3f], 0x39
xor word [rbp - 0x3d], 0x3a
xor word [rbp - 0x3b], 0x3b
xor word [rbp - 0x39], 0x3c
xor word [rbp - 0x37], 0x3d
xor edx, edx
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140002cad
lea r9d, [rax + 0x10]
lea r8, str.An_error_occurred
lea rdx, str._Please_open_FiveM
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x20], 0x46bd4695
mov dword [rsp + 0x24], 0x46b346a3
mov dword [rsp + 0x28], 0x4687469a
mov dword [rbp - 0x7d], 0x46e846bb
mov dword [rbp - 0x79], 0x46ec46e3
mov dword [rbp - 0x75], 0x468146ef
mov dword [rbp - 0x71], 0x46b44698
mov dword [rbp - 0x6d], 0x46b246a0
mov dword [rbp - 0x69], 0x468b4691
mov dword [rbp - 0x65], 0x46834686
mov dword [rbp - 0x61], 0x469b4694
mov dword [rbp - 0x5d], 0x468f46c7
mov dword [rbp - 0x59], 0x46894693
xor edi, edi
mov word [rbp - 0x55], di
mov byte [rbp - 0x53], 1
mov ecx, edi
mov r14d, 0x46d3
nop dword [rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0x1a
jb 0x140002d20
mov byte [rbp - 0x53], dil
lea rcx, [rsp + 0x20]
call fcn.140002660
mov esi, eax
test eax, eax
jne 0x140002f85
mov dword [rsp + 0x20], 0x46bd4695
mov dword [rsp + 0x24], 0x46b346a3
mov dword [rsp + 0x28], 0x4687469a
mov dword [rbp - 0x7d], 0x46e846bb
mov dword [rbp - 0x79], 0x46ec46e3
mov dword [rbp - 0x75], 0x468146ef
mov dword [rbp - 0x71], 0x46b44698
mov dword [rbp - 0x6d], 0x46b246a0
mov dword [rbp - 0x69], 0x468b4691
mov dword [rbp - 0x65], 0x46834686
mov dword [rbp - 0x61], 0x469b4694
mov dword [rbp - 0x5d], 0x468f46c7
mov dword [rbp - 0x59], 0x46894693
mov word [rbp - 0x55], di
mov byte [rbp - 0x53], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0x1a
jb 0x140002dc0
mov byte [rbp - 0x53], dil
lea rcx, [rsp + 0x20]
call fcn.140002660
mov esi, eax
test eax, eax
jne 0x140002f85
mov dword [rsp + 0x20], 0x46bd4695
mov dword [rsp + 0x24], 0x46b346a3
mov dword [rsp + 0x28], 0x4687469a
mov dword [rbp - 0x7d], 0x46e846bb
mov dword [rbp - 0x79], 0x46e546ed
mov dword [rbp - 0x75], 0x468146e4
mov dword [rbp - 0x71], 0x46b44698
mov dword [rbp - 0x6d], 0x46b246a0
mov dword [rbp - 0x69], 0x468b4691
mov dword [rbp - 0x65], 0x46834686
mov dword [rbp - 0x61], 0x469b4694
mov dword [rbp - 0x5d], 0x468f46c7
mov dword [rbp - 0x59], 0x46894693
mov word [rbp - 0x55], di
mov byte [rbp - 0x53], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0x1a
jb 0x140002e60
mov byte [rbp - 0x53], dil
lea rcx, [rsp + 0x20]
call fcn.140002660
mov esi, eax
test eax, eax
jne 0x140002f85
mov dword [rbp - 9], 0x46bd4695
mov dword [rbp - 5], 0x46b346a3
mov dword [rbp - 1], 0x4687469a
mov dword [rbp + 3], 0x468e469e
mov dword [rbp + 7], 0x468c469a
mov dword [rbp + 0xb], 0x46b146af
mov dword [rbp + 0xf], 0x468546bc
mov dword [rbp + 0x13], 0x46914692
mov dword [rbp + 0x17], 0x468146cd
mov dword [rbp + 0x1b], 0x4683469d
mov word [rbp + 0x1f], di
mov byte [rbp + 0x21], 1
mov rcx, rdi
nop dword [rax + rax]
lea eax, [r14 + rcx]
xor word [rbp + rcx*2 - 9], ax
inc rcx
cmp rcx, 0x14
jb 0x140002ee0
mov byte [rbp + 0x21], dil
lea rcx, [rbp - 9]
call fcn.140002660
mov esi, eax
test eax, eax
jne 0x140002f85
lea rdx, str._e_31m____Process_Not_found__0x_lX__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, reloc.WS2_32.dll_ioctlsocket
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
lea rdx, str._e_31m____Pls_Open_FiveM_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x51], 0xa6b8b0
mov byte [rbp - 0x4d], 1
nop
lea eax, [rdi - 0x2d]
xor byte [rbp + rdi - 0x51], al
inc rdi
cmp rdi, 3
jb 0x140002f60
mov byte [rbp - 0x4d], 0
lea rcx, [rbp - 0x51]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
jmp 0x140003872
mov dword [rsp + 0x20], 0x46bd4695
mov dword [rsp + 0x24], 0x46b346a3
mov dword [rsp + 0x28], 0x4687469a
mov dword [rbp - 0x7d], 0x468e469e
mov dword [rbp - 0x79], 0x468c469a
mov dword [rbp - 0x75], 0x46b146af
mov dword [rbp - 0x71], 0x468546bc
mov dword [rbp - 0x6d], 0x46914692
mov dword [rbp - 0x69], 0x468146cd
mov dword [rbp - 0x65], 0x4683469d
mov word [rbp - 0x61], di
mov byte [rbp - 0x5f], 1
mov rcx, rdi
nop dword [rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0x14
jb 0x140002fe0
mov byte [rbp - 0x5f], dil
lea rcx, [rsp + 0x20]
call fcn.140002660
cmp esi, eax
jne 0x140003272
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x29], dil
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x49], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140004b50
mov rax, qword [rbp - 0x11]
cmp rax, 0x14
jb 0x140003079
lea rbx, [rbp - 0x29]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x29]
mov qword [rbp - 0x19], reloc.WS2_32.dll_sendto
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.FiveM_GTAProcess.exe
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x14], 0
jmp 0x14000308e
lea r9, str.FiveM_GTAProcess.exe
mov edx, reloc.WS2_32.dll_sendto
lea rcx, [rbp - 0x29]
call fcn.140005bc0
mov rax, qword [rbp - 0x31]
cmp rax, 0x19
jb 0x1400030c8
lea rbx, [rbp - 0x49]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x49]
mov qword [rbp - 0x39], Ordinal_27
mov r8d, Ordinal_27
lea rdx, str.C:WindowsReFucsiton.dll
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x19], 0
jmp 0x1400030dd
lea r9, str.C:WindowsReFucsiton.dll
mov edx, Ordinal_27
lea rcx, [rbp - 0x49]
call fcn.140005bc0
lea r8, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova r8, qword [rbp - 0x49]
add r8, qword [rbp - 0x39]
lea rdx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rdx, qword [rbp - 0x49]
lea rcx, [rbp - 9]
call fcn.140004db0
nop
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0xf
cmova rcx, qword [rbp - 0x29]
call fcn.140002860
mov ebx, eax
test eax, eax
jne 0x1400031b6
lea rdx, reloc.WS2_32.dll_ioctlsocket
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
lea rdx, reloc.WS2_32.dll_ioctlsocket
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14007a410]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rdx, qword [rbp - 0x49]
mov ecx, ebx
call fcn.140002720
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 7
jbe 0x1400031e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400031e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r9d, Ordinal_50
lea r8, [0x14007a308]
lea rdx, str.English_n_n_Please_press_OK_when_the_characters_feet_touch_the_ground.__n_nThai_n_n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x140003162
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140067ef4
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x140003224
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000321f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000321f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067ef4
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x49], 0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140003272
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000326d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000326d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067ef4
mov dword [rsp + 0x20], 0x46bd4695
mov dword [rsp + 0x24], 0x46b346a3
mov dword [rsp + 0x28], 0x4687469a
mov dword [rbp - 0x7d], 0x46e846bb
mov dword [rbp - 0x79], 0x46e546ed
mov dword [rbp - 0x75], 0x468146e4
mov dword [rbp - 0x71], 0x46b44698
mov dword [rbp - 0x6d], 0x46b246a0
mov dword [rbp - 0x69], 0x468b4691
mov dword [rbp - 0x65], 0x46834686
mov dword [rbp - 0x61], 0x469b4694
mov dword [rbp - 0x5d], 0x468f46c7
mov dword [rbp - 0x59], 0x46894693
mov word [rbp - 0x55], di
mov byte [rbp - 0x53], 1
mov rcx, rdi
nop dword [rax + rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0x1a
jb 0x1400032e0
mov byte [rbp - 0x53], 0
lea rcx, [rsp + 0x20]
call fcn.140002660
cmp esi, eax
jne 0x140003572
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x29], 0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x49], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140004b50
mov rax, qword [rbp - 0x11]
cmp rax, 0x1a
jb 0x140003379
lea rbx, [rbp - 0x29]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x29]
mov qword [rbp - 0x19], reloc.WLDAP32.dll_Ordinal_26
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.FiveM_b2699_GTAProcess.exe
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1a], 0
jmp 0x14000338e
lea r9, str.FiveM_b2699_GTAProcess.exe
mov edx, reloc.WLDAP32.dll_Ordinal_26
lea rcx, [rbp - 0x29]
call fcn.140005bc0
mov rax, qword [rbp - 0x31]
cmp rax, 0x19
jb 0x1400033c8
lea rbx, [rbp - 0x49]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x49]
mov qword [rbp - 0x39], Ordinal_27
mov r8d, Ordinal_27
lea rdx, str.C:WindowsReFucsiton.dll
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x19], 0
jmp 0x1400033dd
lea r9, str.C:WindowsReFucsiton.dll
mov edx, Ordinal_27
lea rcx, [rbp - 0x49]
call fcn.140005bc0
lea r8, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova r8, qword [rbp - 0x49]
add r8, qword [rbp - 0x39]
lea rdx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rdx, qword [rbp - 0x49]
lea rcx, [rbp - 9]
call fcn.140004db0
nop
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0xf
cmova rcx, qword [rbp - 0x29]
call fcn.140002860
mov ebx, eax
test eax, eax
jne 0x1400034b6
lea rdx, reloc.WS2_32.dll_ioctlsocket
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
lea rdx, reloc.WS2_32.dll_ioctlsocket
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14007a410]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rdx, qword [rbp - 0x49]
mov ecx, ebx
call fcn.140002720
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 7
jbe 0x1400034e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400034e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r9d, Ordinal_50
lea r8, [0x14007a308]
lea rdx, str.English_n_n_Please_press_OK_when_the_characters_feet_touch_the_ground.__n_nThai_n_n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x140003462
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140067ef4
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x140003524
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000351f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000351f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067ef4
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x49], 0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140003572
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000356d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000356d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067ef4
mov dword [rsp + 0x20], 0x46bd4695
mov dword [rsp + 0x24], 0x46b346a3
mov dword [rsp + 0x28], 0x4687469a
mov dword [rbp - 0x7d], 0x46e846bb
mov dword [rbp - 0x79], 0x46ec46e3
mov dword [rbp - 0x75], 0x468146ef
mov dword [rbp - 0x71], 0x46b44698
mov dword [rbp - 0x6d], 0x46b246a0
mov dword [rbp - 0x69], 0x468b4691
mov dword [rbp - 0x65], 0x46834686
mov dword [rbp - 0x61], 0x469b4694
mov dword [rbp - 0x5d], 0x468f46c7
mov dword [rbp - 0x59], 0x46894693
mov word [rbp - 0x55], di
mov byte [rbp - 0x53], 1
mov rcx, rdi
nop dword [rax + rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0x1a
jb 0x1400035e0
mov byte [rbp - 0x53], 0
lea rcx, [rsp + 0x20]
call fcn.140002660
cmp esi, eax
jne 0x140003872
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x29], 0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x49], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140004b50
mov rax, qword [rbp - 0x11]
cmp rax, 0x1a
jb 0x140003679
lea rbx, [rbp - 0x29]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x29]
mov qword [rbp - 0x19], reloc.WLDAP32.dll_Ordinal_26
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.FiveM_b2802_GTAProcess.exe
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1a], 0
jmp 0x14000368e
lea r9, str.FiveM_b2802_GTAProcess.exe
mov edx, reloc.WLDAP32.dll_Ordinal_26
lea rcx, [rbp - 0x29]
call fcn.140005bc0
mov rax, qword [rbp - 0x31]
cmp rax, 0x19
jb 0x1400036c8
lea rbx, [rbp - 0x49]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x49]
mov qword [rbp - 0x39], Ordinal_27
mov r8d, Ordinal_27
lea rdx, str.C:WindowsReFucsiton.dll
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x19], 0
jmp 0x1400036dd
lea r9, str.C:WindowsReFucsiton.dll
mov edx, Ordinal_27
lea rcx, [rbp - 0x49]
call fcn.140005bc0
lea r8, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova r8, qword [rbp - 0x49]
add r8, qword [rbp - 0x39]
lea rdx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rdx, qword [rbp - 0x49]
lea rcx, [rbp - 9]
call fcn.140004db0
nop
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0xf
cmova rcx, qword [rbp - 0x29]
call fcn.140002860
mov ebx, eax
test eax, eax
jne 0x1400037b6
lea rdx, reloc.WS2_32.dll_ioctlsocket
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
lea rdx, reloc.WS2_32.dll_ioctlsocket
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004980
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14007a410]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rdx, qword [rbp - 0x49]
mov ecx, ebx
call fcn.140002720
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 7
jbe 0x1400037e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400037e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r9d, Ordinal_50
lea r8, [0x14007a308]
lea rdx, str.English_n_n_Please_press_OK_when_the_characters_feet_touch_the_ground.__n_nThai_n_n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x140003762
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140067ef4
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x140003824
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000381f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000381f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067ef4
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x49], 0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140003872
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000386d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000386d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140067ef4
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140067c50
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret