Function at 0x14008bfc0
Capabilities:
Delete registry value
Execute command
Query or enumerate registry value
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x438]
sub rsp, 0x510
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14018ef00]
xor rax, rsp
mov qword [rbp + 0x3f0], rax
mov r15, rdx
mov qword [rbp + 0x128], rdx
mov edi, ecx
mov dword [rbp + 0xd8], ecx
xor ebx, ebx
mov dword [rbp + 0x120], ebx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
cmp edi, 3
jge 0x14008c032
xor eax, eax
jmp 0x14008e090
mov rdx, qword [r15 + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rbx
mov qword [rbp + 0x1a8], rbx
mov r12, 0xffffffffffffffff
mov r8, r12
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], bl
jne 0x14008c060
lea rcx, [rbp + 0x190]
call fcn.1400034d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x168], xmm1
mov r8d, 2
cmp qword [rbp + 0x1a0], r8
cmovb r8, qword [rbp + 0x1a0]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0xf
cmova rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x158]
call fcn.1400034d0
lea rcx, [rbp + 0x158]
mov rdi, qword [rbp + 0x158]
mov rsi, qword [rbp + 0x170]
cmp rsi, 0xf
cmova rcx, rdi
mov r8, qword [rbp + 0x168]
cmp r8, 2
jne 0x14008c102
lea rdx, [0x14016dc5c]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008c102
xor r14b, r14b
jmp 0x14008c105
mov r14b, 1
cmp rsi, 0xf
jbe 0x14008c13f
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14008c137
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c137
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140139a10
test r14b, r14b
jne 0x14008e04a
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rbx
mov qword [rbp + 0x170], rbx
mov rax, qword [rbp + 0x1a0]
cmp rax, 2
jb 0x14008e0d1
add rax, 0xfffffffffffffffe
mov r8, r12
cmp rax, r12
cmovb r8, rax
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0xf
cmova rdx, qword [rbp + 0x190]
add rdx, 2
lea rcx, [rbp + 0x158]
call fcn.1400034d0
nop
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
mov rcx, qword [0x1401914c0]
sub rax, rcx
cmp rax, 9
jb 0x14008e0d7
lea rax, [0x1401914b0]
cmp qword [0x1401914c8], 0xf
cmova rax, qword [0x1401914b0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.Loader__
lea r8, [0x1401914b0]
movzx edx, byte [rbp + 0xd8]
lea rcx, [rbp + 0x100]
call fcn.140092270
mov r12d, 0x1c
mov esi, 1
mov r8d, esi
lea rdx, [0x14016dc80]
lea rcx, [rbp + 0x100]
call fcn.14000b910
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x148], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r14b
or r12d, 0x20
lea rdx, [0x1401914d0]
cmp qword [0x1401914e8], 0xf
cmova rdx, qword [0x1401914d0]
mov r8, qword [0x1401914e0]
lea rcx, [rbp + 0x138]
call fcn.14000b910
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1e0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1e0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r14b
or r12d, 0x40
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x14008c31c
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c317
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c317
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
movdqa xmm0, xmmword [0x1401740d0]
movdqu xmmword [rbp + 0x148], xmm0
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14008c37f
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c372
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c372
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
movdqa xmm0, xmmword [0x1401740d0]
movdqu xmmword [rbp + 0x110], xmm0
mov byte [rbp + 0x100], 0
lea rcx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0xf
cmova rcx, qword [rbp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x140191550]
call fcn.1400a8040
cmp byte [0x140191760], 0
je 0x14008dfa9
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], rbx
lea r13, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova r13, qword [rbp + 0x158]
mov r14, qword [rbp + 0x168]
cmp r14, rdi
ja 0x14008e0dd
cmp r14, 0xf
ja 0x14008c42c
mov qword [rbp + 0xf0], r14
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
movups xmm0, xmmword [r13]
movups xmmword [rbp + 0xe0], xmm0
jmp 0x14008c4d3
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x14008c471
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140139d28
mov rcx, rax
test rax, rax
je 0x14008c4a3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14008c4af
mov eax, socket
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14008c48b
mov rax, rbx
jmp 0x14008c4af
cmp rcx, 0x1000
jb 0x14008c4aa
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14008e0cb
jmp 0x14008c453
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139d28
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0xf8], rdi
lea r8, [r14 + 1]
mov rdx, r13
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0xe0]
lea rcx, [0x140191550]
call fcn.1400aaba0
cmp byte [0x140191760], 0
je 0x14008dfa9
mov rdx, qword [r15 + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], rbx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14008c516
lea rcx, [rbp + 0x1b0]
call fcn.1400034d0
nop
lea rcx, [rbp + 0x1b0]
mov r14, qword [rbp + 0x1b0]
mov r13, qword [rbp + 0x1c8]
cmp r13, 0xf
cmova rcx, r14
mov rdi, qword [rbp + 0x1c0]
cmp rdi, 5
jne 0x14008c56a
mov r8, rdi
lea rdx, str.__run
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14008c5c2
lea rcx, [rbp + 0x1b0]
cmp r13, 0xf
cmova rcx, r14
cmp rdi, 6
jne 0x14008c592
mov r8, rdi
lea rdx, str.__auto
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14008c5c2
lea rcx, [rbp + 0x1b0]
cmp r13, 0xf
cmova rcx, r14
cmp rdi, 7
jne 0x14008c984
mov r8, rdi
lea rdx, str.__clean
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008c984
cmp dword [rbp + 0xd8], 4
jl 0x14008c71b
lea rdx, [r15 + 0x18]
mov qword [rbp + 0xc8], rdx
mov rdx, qword [rdx]
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14008c600
lea rcx, [rbp + 0x100]
call fcn.1400034d0
nop
or r12d, 1
mov dword [rbp + 0x120], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, 6
cmp qword [rbp + 0x110], r8
cmovb r8, qword [rbp + 0x110]
lea rdx, [rbp + 0x100]
mov rcx, qword [rbp + 0x100]
mov r9, qword [rbp + 0x118]
cmp r9, 0xf
cmova rdx, rcx
cmp r8, 0xf
jbe 0x14008c6ba
mov qword [rbp + 0x110], r8
lea rax, [rbp + 0x100]
cmp r9, 0xf
cmova rax, rcx
mov byte [rax + r8], 0
movups xmm0, xmmword [rbp + 0x100]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rbp + 0x110]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x100], 0
jmp 0x14008c6d4
lea rcx, [rbp + 0xe0]
call fcn.1400034d0
mov rax, qword [rbp + 0x118]
mov qword [rbp + 0x120], rax
or r12d, 0x202
lea rcx, [rbp + 0xe0]
mov r15, qword [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rcx, r15
mov r8, qword [rbp + 0xf0]
cmp r8, 6
jne 0x14008c730
lea rdx, str.__cfg
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008c730
mov byte [rbp + 0xd8], 1
jmp 0x14008c749
mov rax, qword [rbp + 0x118]
mov qword [rbp + 0x120], rax
mov r15, qword [rbp + 0xe0]
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x128]
add rdx, 0x18
mov qword [rbp + 0xc8], rdx
test r12b, 2
je 0x14008c795
and r12d, 0xfffffffd
mov rax, qword [rbp + 0xf8]
cmp rax, 0xf
jbe 0x14008c795
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14008c78c
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c78c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140139a10
nop
test r12b, 1
je 0x14008c7e1
and r12d, 0xfffffffe
mov rax, qword [rbp + 0x120]
cmp rax, 0xf
jbe 0x14008c7e1
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c7dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d318
call fcn.140139a10
cmp byte [rbp + 0xd8], 0
je 0x14008c991
mov rdx, qword [rbp + 0x128]
add rdx, 0x18
mov qword [rbp + 0xc8], rdx
mov rdx, qword [rdx]
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14008c822
lea rcx, [rbp + 0x100]
call fcn.1400034d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov rax, qword [rbp + 0x110]
cmp rax, 6
jb 0x14008e0e3
add rax, 0xfffffffffffffffa
cmp rax, 0xffffffffffffffff
cmovb r15, rax
lea rcx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rcx, qword [rbp + 0x100]
lea rdx, [rcx + 6]
mov r8, r15
cmp r15, 0xf
jbe 0x14008c8e1
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x110], r15
lea rax, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rax, qword [rbp + 0x100]
mov byte [rax + r15], 0
movups xmm0, xmmword [rbp + 0x100]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rbp + 0x110]
movups xmmword [rbp + 0xf0], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x100], 0
jmp 0x14008c8f4
lea rcx, [rbp + 0xe0]
call fcn.1400034d0
mov rdx, qword [rbp + 0x118]
bts r12d, 0xa
cmp rdx, 0xf
jbe 0x14008c933
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c92e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d318
call fcn.140139a10
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14008c991
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c96f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d318
call fcn.140139a10
mov r15, qword [rbp + 0xc8]
mov qword [rbp + 0xc8], r15
jmp 0x14008c998
add r15, 0x18
mov qword [rbp + 0xc8], r15
jmp 0x14008c998
mov r15, qword [rbp + 0xc8]
lea rcx, [rbp + 0x1b0]
cmp r13, 0xf
cmova rcx, r14
cmp rdi, 5
jne 0x14008cffa
mov r8, rdi
lea rdx, str.__run
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008cffa
mov rdx, qword [r15]
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14008c9f0
lea rcx, [rbp + 0x100]
call fcn.1400034d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
mov rax, qword [rbp + 0x110]
cmp rax, 6
jb 0x14008e0e9
add rax, 0xfffffffffffffffa
cmp rax, 0xffffffffffffffff
cmovb rdi, rax
lea rcx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rcx, qword [rbp + 0x100]
lea rdx, [rcx + 6]
mov r8, rdi
cmp rdi, 0xf
jbe 0x14008caae
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x110], rdi
lea rax, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rax, qword [rbp + 0x100]
mov byte [rax + rdi], 0
movups xmm0, xmmword [rbp + 0x100]
movups xmmword [rbp + 0x138], xmm0
movups xmm1, xmmword [rbp + 0x110]
movups xmmword [rbp + 0x148], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x100], 0
jmp 0x14008cac1
lea rcx, [rbp + 0x138]
call fcn.1400034d0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14008cafb
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008caf6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008cf88
call fcn.140139a10
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0xe0]
call fcn.140088a40
nop
cmp qword [rbp + 0xf0], 0
jne 0x14008cb20
mov esi, ebx
jmp 0x14008cf50
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rbp + 0x100]
call fcn.140091ca0
nop
lea rcx, [rbp + 0x100]
call fcn.140088450
mov edi, eax
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x14008cba6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008cba1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008cba1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
test edi, edi
je 0x14008cf50
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
test rax, rax
je 0x14008cf50
mov ecx, edi
call fcn.140089500
test rax, rax
jne 0x14008cbe4
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008cf50
mov dword [rbp + 0x128], edi
mov byte [rbp + 0x12c], 1
mov rdx, qword [rbp + 0x128]
mov rcx, qword [0x140191970]
call fcn.140096c70
mov ecx, edi
call fcn.140088a20
mov rsi, rax
call fcn.140094ed0
lea rdx, [rax + 0x118]
mov rcx, qword [0x140191970]
call fcn.140091010
lea rdx, [rax + 0x1a8]
mov rcx, qword [0x140191970]
call fcn.140091010
mov qword [0x140191980], rax
lea rdx, str.CorePackages
lea rcx, [rsp + 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140191980]
call fcn.140093800
lea rdx, str.CoreGui
lea rcx, [rsp + 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [0x140191980]
call fcn.140093800
lea rdx, str.RobloxGui
lea rcx, [rsp + 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp + 0x128]
lea rcx, [rsp + 0x68]
call fcn.140093800
lea rdx, str.Modules
lea rcx, [rsp + 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x128]
call fcn.140093800
lea rdx, str.CorePackages
lea rcx, [rsp + 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140191980]
call fcn.140093800
mov rdi, rax
lea rdx, str.Workspace
lea rcx, [rbp + 0x38]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x28]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
lea rdx, str.Packages
lea rcx, [rbp + 0x18]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
lea rdx, str._Workspace
lea rcx, [rbp - 8]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x38]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
lea rdx, str.SMSProtocol
lea rcx, [rbp + 0x100]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
lea rdx, [0x140172dd4]
lea rcx, [rsp + 0x48]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x48]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
lea rdx, str.JestGlobals
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp + 0xc8]
mov rcx, rdi
call fcn.140093800
lea rcx, [rbp + 0x100]
call fcn.140003f10
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x100], xmm1
mov qword [rbp + 0x110], rbx
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0xc8]
call fcn.140093560
lea rdx, str.PlayerList
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp + 0x128]
lea rcx, [rsp + 0x68]
call fcn.140093800
lea rdx, str.PlayerListManager
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x128]
call fcn.140093800
mov rdx, qword [rbp + 0x120]
add rdx, 8
lea r8, [rbp + 0xc8]
mov rcx, qword [0x140191970]
call fcn.1400911f0
lea rcx, [rbp + 0x178]
call fcn.140003f10
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x70]
call fcn.1400888e0
nop
lea r8, [rsp + 0x68]
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.1400885e0
nop
lea rcx, [rbp - 0x70]
call fcn.140002ca0
lea rdx, [rbp + 0x178]
lea rcx, [rsp + 0x48]
call fcn.14008f8a0
mov r8d, dword [rsp + 0x68]
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.1400933e0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, reloc.WS2_32.dll_recv
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp + 0x100]
lea rcx, [rsp + 0x48]
call fcn.14008f8a0
mov r8d, dword [rbp + 0xd0]
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.1400933e0
mov rdx, qword [rbp + 0x120]
add rdx, 8
lea r8, [rbp + 0x120]
mov rcx, qword [0x140191970]
call fcn.1400911f0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, ebx
lea rcx, [rbp + 0x178]
call fcn.140003f20
nop
lea rcx, [rbp + 0x100]
call fcn.140003f20
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14008cf94
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008cf8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008cf8f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
mov qword [rbp + 0xf0], rbx
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x14008d432
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008cff0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008cff0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
jmp 0x14008d432
lea rcx, [rbp + 0x1b0]
cmp r13, 0xf
cmova rcx, r14
cmp rdi, 7
jne 0x14008d472
mov r8, rdi
lea rdx, str.__clean
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008d472
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, 0x1e
lea rdx, str.fsutil_usn_deletejournal__D_C:
lea rcx, [rbp + 0xe0]
call fcn.1400034d0
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rcx, qword [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14008d0b9
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d0b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008d0b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, 0x19
lea rdx, str.fsutil_usn_readjournal_C:
lea rcx, [rbp + 0xe0]
call fcn.1400034d0
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rcx, qword [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14008d148
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d143
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008d143
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
call fcn.14008b050
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, reloc.WS2_32.dll_gethostname
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerRunMRU
lea rcx, [rbp + 0xe0]
call fcn.140091ca0
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 7
cmova rdx, qword [rbp + 0xe0]
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008d31f
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x14008d202
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d1fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d40b
call fcn.140139a10
call fcn.14008ae40
call fcn.1400895e0
call fcn.14008a3d0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, 5
lea rdx, [0x140172528]
lea rcx, [rbp + 0xe0]
call fcn.140091ca0
nop
lea rcx, [rbp + 0xe0]
call fcn.14008a810
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x14008d293
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d28e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d318
call fcn.140139a10
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, 0x28
lea rdx, str.Microsoft_Windows_PowerShell_Operational
lea rcx, [rbp + 0xe0]
call fcn.140091ca0
nop
lea rcx, [rbp + 0xe0]
call fcn.140089ff0
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x14008d417
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d412
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008d412
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp + 0xd8], 0x100
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0xd8]
lea r8, [rbp + 0x1f0]
xor edx, edx
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x14008d3b5
nop
lea rdx, [rbp + 0x1f0]
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rbp + 0xd8], 0x100
mov edx, esi
inc esi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0xd8]
lea r8, [rbp + 0x1f0]
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
je 0x14008d360
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x14008d202
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d1fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008d1fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
call fcn.14008a120
call fcn.14008a290
call fcn.1400895b0
call fcn.1400898d0
call fcn.14008b400
mov esi, ebx
mov ebx, esi
cmp r13, 0xf
jbe 0x14008dfa9
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14008dfa0
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008dfa0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp + 0x1b0]
cmp r13, 0xf
cmova rcx, r14
cmp rdi, 6
jne 0x14008d434
mov r8, rdi
lea rdx, str.__auto
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008d434
movabs r13, 0x7fffffffc46535ff
movdqa xmm6, xmmword [0x1401740b0]
nop dword [rax]
mov r14d, 0xff
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rsp + 0x48]
call fcn.140091ca0
nop
lea rcx, [rsp + 0x48]
call fcn.140088450
mov edi, eax
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14008d53d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d529
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008df8b
call fcn.140139a10
lea rcx, [rbp - 0x50]
call fcn.140086a70
mov rax, qword [rbp - 0x50]
jmp 0x14008d551
lea rcx, [rbp - 0x50]
call fcn.140086a70
mov rax, qword [rbp - 0x50]
mov qword [rbp + 0xd0], rax
cmp rax, r13
je 0x14008d579
mov ecx, esi
cmovl ecx, r14d
test cl, cl
jns 0x14008d579
add rax, 0x3b9aca00
mov qword [rbp + 0xd0], rax
movabs r14, 0x7fffffffffffffff
jmp 0x14008d58a
movabs r14, 0x7fffffffffffffff
mov qword [rbp + 0xd0], r14
lea rcx, [rbp + 0xd0]
call fcn.140092610
test edi, edi
je 0x14008d4b0
lea rcx, [rbp - 0x20]
call fcn.140086a70
mov rax, qword [rbp - 0x20]
mov qword [rbp + 0xd0], rax
movabs rdx, 0x7ffffffdabf41bff
cmp rax, rdx
je 0x14008d5e5
mov ecx, esi
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14008d5e5
movabs rcx, 0x2540be400
add rcx, rax
mov qword [rbp + 0xd0], rcx
jmp 0x14008d5ec
mov qword [rbp + 0xd0], r14
lea rcx, [rbp + 0xd0]
call fcn.140092610
mov rdx, qword [r15]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
mov r14, 0xffffffffffffffff
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14008d620
lea rcx, [rsp + 0x48]
call fcn.1400034d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], rbx
mov rax, qword [rsp + 0x58]
cmp rax, 6
jb 0x14008e0c5
add rax, 0xfffffffffffffffa
cmp rax, 0xffffffffffffffff
cmovb r14, rax
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rcx, qword [rsp + 0x48]
lea rdx, [rcx + 6]
mov r8, r14
cmp r14, 0xf
jbe 0x14008d6ca
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x58], r14
lea rax, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rax, qword [rsp + 0x48]
mov byte [rax + r14], 0
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rbp + 0xf0], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
jmp 0x14008d6db
lea rcx, [rbp + 0xe0]
call fcn.1400034d0
mov rdx, qword [rsp + 0x60]
bts r12d, 7
cmp rdx, 0xf
jbe 0x14008d718
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d713
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008df84
call fcn.140139a10
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x138]
call fcn.140088a40
nop
cmp qword [rbp + 0x148], 0
jne 0x14008d82d
lea rcx, [rbp - 0x18]
call fcn.140086a70
mov rax, qword [rbp - 0x18]
mov qword [rbp + 0xd0], rax
mov r14d, 0xff
cmp rax, r13
je 0x14008d76b
mov ecx, esi
cmovl ecx, r14d
test cl, cl
jns 0x14008d76b
add rax, 0x3b9aca00
jmp 0x14008d775
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 0xd0]
call fcn.140092610
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x14008d7ca
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d7c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008df84
call fcn.140139a10
mov qword [rbp + 0x148], rbx
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14008d4b6
inc rdx
mov rcx, qword [rbp + 0xe0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14008d823
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008df8b
call fcn.140139a10
jmp 0x14008d4b6
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
test rax, rax
jne 0x14008d8fe
lea rcx, [rbp - 0x10]
call fcn.140086a70
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0xd0], rax
mov r14d, 0xff
cmp rax, r13
je 0x14008d87a
mov ecx, esi
cmovl ecx, r14d
test cl, cl
jns 0x14008d87a
add rax, 0x3b9aca00
jmp 0x14008d884
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 0xd0]
call fcn.140092610
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x14008d8d9
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d8d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008df84
call fcn.140139a10
mov qword [rbp + 0x148], rbx
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x138], 0
mov r15, qword [rbp + 0xc8]
jmp 0x14008d7e3
mov ecx, edi
call fcn.140089500
test rax, rax
jne 0x14008d92b
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0xd0], rsi
lea rcx, [rbp + 0xd0]
call fcn.140091420
jmp 0x14008df5f
mov dword [rsp + 0x68], edi
mov byte [rsp + 0x6c], 1
mov rdx, qword [rsp + 0x68]
mov rcx, qword [0x140191970]
call fcn.140096c70
mov ecx, edi
call fcn.140088a20
mov r13, rax
call fcn.140094ed0
lea rdx, [rax + 0x118]
mov rcx, qword [0x140191970]
call fcn.140091010
lea rdx, [rax + 0x1a8]
mov rcx, qword [0x140191970]
call fcn.140091010
mov qword [0x140191980], rax
lea rdx, str.CorePackages
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp + 0x78]
lea rcx, [0x140191980]
call fcn.140093800
lea rdx, str.CoreGui
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x48]
lea rcx, [0x140191980]
call fcn.140093800
lea rdx, str.RobloxGui
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x48]
call fcn.140093800
lea rdx, str.Modules
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x40]
call fcn.140093800
lea rdx, str.CorePackages
lea rcx, [rbp - 0x70]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp + 0x80]
lea rcx, [0x140191980]
call fcn.140093800
mov rdi, rax
lea rdx, str.Workspace
lea rcx, [rbp + 0x90]
call fcn.140002d90
mov r8, rax
lea rdx, [rbp + 0x88]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
mov r8d, 8
lea rdx, str.Packages
lea rcx, [rsp + 0x48]
call fcn.1400034d0
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x58]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], rbx
mov r8d, 0xa
lea rdx, str._Workspace
lea rcx, [rbp - 8]
call fcn.1400034d0
lea r8, [rbp - 8]
lea rdx, [rbp + 0x70]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], rbx
mov r8d, recv
lea rdx, str.SMSProtocol
lea rcx, [rbp + 0x18]
call fcn.1400034d0
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x68]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x50], rbx
mov r8d, 3
lea rdx, [0x140172dd4]
lea rcx, [rbp + 0x38]
call fcn.1400034d0
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x60]
mov rcx, rdi
call fcn.140093800
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov r8d, recv
lea rdx, str.JestGlobals
lea rcx, [rsp + 0x70]
call fcn.1400034d0
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x120]
mov rcx, rdi
call fcn.140093800
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x100], xmm1
mov qword [rbp + 0x110], rbx
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x120]
call fcn.140093560
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov r8d, 0xa
lea rdx, str.PlayerList
lea rcx, [rsp + 0x70]
call fcn.1400034d0
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x38]
call fcn.140093800
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.PlayerListManager
lea rcx, [rsp + 0x70]
call fcn.1400034d0
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x128]
lea rcx, [rbp - 0x30]
call fcn.140093800
mov rdx, qword [rbp + 0x128]
add rdx, 8
lea r8, [rbp + 0x120]
mov rcx, qword [0x140191970]
call fcn.1400911f0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x178], xmm0
mov qword [rbp + 0x188], rax
cmp dword [reloc.WS2_32.dll_accept], 2
jne 0x14008dc5c
cmp dword [reloc.WS2_32.dll_accept], 2
je 0x14008dc70
mov dword [reloc.WS2_32.dll_accept], 2
mov dword [reloc.WS2_32.dll_accept], 2
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140191978], eax
jle 0x14008dcb9
lea rcx, [0x140191978]
call fcn.1401396f8
cmp dword [0x140191978], 0xffffffff
jne 0x14008dcb9
lea rcx, [0x14013efb0]
call fcn.140139d10
lea rcx, [0x140191978]
call fcn.14013968c
mov word [rbp + 0xd8], 0
movdqu xmmword [rbp + 0x90], xmm6
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
mov qword [rbp + 0xc0], rbx
lea r9, [rbp + 0xd8]
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x138]
lea rcx, [rsp + 0x70]
call fcn.14001db30
bts r12d, 0xb
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x178]
call fcn.1400885e0
nop
lea rcx, [rsp + 0x70]
call fcn.140002ca0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov rdi, qword [rbp + 0x180]
sub rdi, qword [rbp + 0x178]
je 0x14008ddd5
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x14008e0f5
cmp rdi, 0x1000
jb 0x14008dd92
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14008e0ef
call fcn.140139d28
test rax, rax
je 0x14008df92
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14008dd9d
mov rcx, rdi
call fcn.140139d28
mov r14, rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rax, [r14 + rdi]
mov qword [rsp + 0x58], rax
mov rdi, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x178]
sub rdi, rdx
mov r8, rdi
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + rdi]
mov qword [rsp + 0x50], rax
mov r8d, dword [rbp - 0x28]
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x120]
call fcn.1400933e0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, reloc.WS2_32.dll_recv
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp + 0x100]
lea rcx, [rsp + 0x48]
call fcn.14008f8a0
mov r8d, dword [rbp + 0x130]
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.1400933e0
mov rdx, qword [rbp + 0x128]
add rdx, 8
lea r8, [rbp + 0x128]
mov rcx, qword [0x140191970]
call fcn.1400911f0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs r13, 0x7fffffffc46535ff
nop dword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rsp + 0x48]
call fcn.140091ca0
nop
lea rcx, [rsp + 0x48]
call fcn.140088450
mov edi, eax
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14008ded8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ded3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008df99
call fcn.140139a10
test edi, edi
je 0x14008df45
lea rcx, [rsp + 0x40]
call fcn.140086a70
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd0], rax
cmp rax, r13
je 0x14008df23
mov ecx, esi
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14008df23
add rax, 0x3b9aca00
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 0xd0]
call fcn.140092610
jmp 0x14008de60
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 0xd0]
call fcn.140092610
jmp 0x14008de60
lea rcx, [rbp + 0x178]
call fcn.140003f20
nop
lea rcx, [rbp + 0x100]
call fcn.140003f20
nop
lea rcx, [rbp + 0x138]
call fcn.140002ca0
nop
lea rcx, [rbp + 0xe0]
call fcn.140002ca0
mov r15, qword [rbp + 0xc8]
jmp 0x14008d4b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, r14
call fcn.140139a10
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x14008dfed
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dfe8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008dfe8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
movdqa xmm0, xmmword [0x1401740d0]
movdqu xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
mov rax, qword [rbp + 0x170]
cmp rax, 0xf
jbe 0x14008e04a
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e044
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008e044
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x14008e08e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e089
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008e089
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139a10
mov eax, ebx
mov rcx, qword [rbp + 0x3f0]
xor rcx, rsp
call fcn.140139630
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000c8d0
nop
call fcn.140002980
nop
call fcn.14000c8d0
nop
call fcn.140002a20
nop
call fcn.140002a20
nop
call fcn.14000c8d0
nop
call fcn.14000c8d0
nop
call fcn.140002980
int3
call fcn.140002ef0
int3