Function at 0x14000aaf0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2e8]
sub rsp, 0x3c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x140060040]
xor rax, rsp
mov qword [rbp + 0x240], rax
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
lea rax, [rbp + 0x2e8]
movabs r15, 0xff00ff00ff00ff00
mov qword [rbp + 0x210], r15
mov qword [rbp + 0x218], rax
mov r14, qword [rax]
xor r14, r15
mov qword [rsp + 0x50], r14
mov qword [rbp + 0x208], r14
mov qword [rax], r12
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov qword [rbp + 0x160], r12
mov rcx, qword [0x140061118]
sub rcx, qword [0x140061110]
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14000acd6
movabs rax, 0x1745d1745d1745d
cmp rdx, rax
ja 0x14000cfd4
imul rbx, rdx, 0xb0
cmp rbx, 0x1000
jb 0x14000ac24
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14000cfda
call fcn.140034070
test rax, rax
je 0x14000ac1d
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsp + 0x20], rsi
mov qword [rsi - 8], rax
jmp 0x14000ac43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x14000ac3b
mov rcx, rbx
call fcn.140034070
mov rsi, rax
mov qword [rsp + 0x20], rax
jmp 0x14000ac43
mov rsi, r12
mov qword [rsp + 0x20], r12
mov qword [rbp + 0x150], rsi
mov qword [rbp + 0x158], rsi
lea rax, [rbx + rsi]
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x108], rax
mov rdi, qword [0x140061118]
mov rbx, qword [0x140061110]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], rsi
lea rax, [rbp + 0x150]
mov qword [rbp + 0xe0], rax
cmp rbx, rdi
je 0x14000accd
mov rdx, rbx
mov rcx, rsi
call fcn.14001c270
add rsi, 0xb0
mov qword [rbp + 0xd8], rsi
add rbx, 0xb0
cmp rbx, rdi
jne 0x14000aca3
mov qword [rsp + 0x20], rsi
mov qword [rbp + 0x158], rsi
jmp 0x14000ace2
mov rsi, qword [rbp + 0x158]
mov qword [rsp + 0x20], rsi
mov rbx, qword [rbp + 0x150]
mov qword [rsp + 0x28], rbx
cmp rbx, rsi
je 0x14000cf06
movss xmm9, dword [0x14005a268]
xorps xmm8, xmm8
movsd xmm10, qword [0x14005a040]
movsd xmm11, qword [0x14005a000]
movss xmm12, dword [0x14005a2ac]
mov edi, 0xf
lea r13, [rbp + 0x2e8]
mov rax, qword [rbx]
mov qword [rbp + 0x20], rax
lea rdx, [rbx + 8]
lea rcx, [rbp + 0x28]
call fcn.140026fd0
nop
lea rdx, [rbx + 0x28]
lea rcx, [rbp + 0x48]
call fcn.140026fd0
nop
lea rdx, [rbx + 0x48]
lea rcx, [rbp + 0x68]
call fcn.140026fd0
nop
lea rdx, [rbx + 0x68]
lea rcx, [rbp + 0x88]
call fcn.140026fd0
nop
lea rdx, [rbx + 0x88]
lea rcx, [rbp + 0xa8]
call fcn.140026fd0
movss xmm0, dword [rbx + 0xa8]
movss dword [rbp + 0xc8], xmm0
mov rax, qword [0x1400610f8]
cmp qword [rax + 0x28], 0
je 0x14000ced9
cmp qword [rbp + 0x20], 0
je 0x14000ced9
cmp byte [0x1400611f6], 0
je 0x14000bc13
movdqa xmm0, xmmword [0x14005a470]
movdqu xmmword [rbp + 0xd0], xmm0
mov dword [rbp + 0xe0], 0x1f043e2b
mov word [rbp + 0xe4], pe_nt_image_headers64
mov rcx, r12
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xd0], al
inc rcx
cmp rcx, 0x14
jb 0x14000ade0
mov byte [rbp + 0xe5], 0
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xd0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14000b14c
comiss xmm9, dword [rbp + 0xc8]
jb 0x14000b14c
mov r8, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd8], r15
mov qword [rbp + 0xe0], r13
mov rbx, qword [r13]
xor rbx, r15
mov qword [rbp + 0xd0], rbx
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x110], r15
mov qword [r13], r12
add r8, 0x198
mov edx, dword [0x140060fe0]
call fcn.140027560
nop
mov qword [r13], r12
lea r9, [rax + 0x120]
mov r8d, dword [0x140060fe0]
lea rdx, [rbp + 0x130]
call fcn.1400275f0
nop
xor rbx, r15
mov qword [r13], rbx
movups xmm0, xmmword [rbp + 0x130]
movaps xmmword [rsp + 0x30], xmm0
movsd xmm1, qword [rbp + 0x140]
movsd qword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xe8]
call fcn.140009ff0
movsd xmm7, qword [rbp + 0xe8]
comisd xmm7, xmm8
jbe 0x14000b14c
movd xmm0, dword [0x140061258]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm7
jbe 0x14000b14c
movsd xmm6, qword [rbp + 0xf0]
comisd xmm6, xmm8
jbe 0x14000b14c
movd xmm0, dword [0x14006125c]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x14000b14c
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], 0xb
mov qword [rbp + 0x1a0], rdi
movsd xmm0, qword [str.Hover_Board]
movsd qword [rbp + 0x188], xmm0
movzx eax, word [0x1400549a0]
mov word [rbp + 0x190], ax
movzx eax, byte [0x1400549a2]
mov byte [rbp + 0x192], al
mov byte [rbp + 0x193], 0
lea rdx, [rbp + 0x188]
cmp rdi, 0xf
cmova rdx, qword [rbp + 0x188]
lea rcx, [rbp + 0xe8]
call fcn.140002920
subsd xmm6, xmm10
cvtpd2ps xmm1, xmm6
subsd xmm7, xmm11
cvtpd2ps xmm0, xmm7
mov r15, qword [rbp + 0xf8]
mov dword [rbp + 0xd0], r15d
movss dword [rbp + 0xd4], xmm0
movss dword [rbp + 0xd8], xmm1
mov dword [rbp + 0xdc], 0xffffffff
mov dword [rbp + 0xe0], 0x41400000
mov word [rbp + 0xe4], 0
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
inc rax
cmp rax, 0xf4240
jbe 0x14000b00b
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 5
inc dword [rdi + 0x18]
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
add rax, 0x18
cmp rax, 0xf4240
jbe 0x14000b03f
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rdi + 0x18], 0x18
mov rbx, qword [0x140061228]
lea r14, [rbp + 0xe8]
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rbp + 0xe8]
cmova r14, rdi
mov eax, dword [rbx + 0x18]
add rax, r15
cmp rax, 0xf4240
jbe 0x14000b0ac
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rbx + 0x18], 0
mov ecx, dword [rbx + 0x18]
add rcx, qword [rbx + 0x10]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x18], r15d
test r12b, r12b
je 0x14000b0f9
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000b0f0
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf73
mov rcx, rdi
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14000b13a
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b135
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
call fcn.1400342f4
movabs r15, 0xff00ff00ff00ff00
mov edi, 0xf
xor r12d, r12d
cmp byte [0x1400611f6], 0
je 0x14000bc13
movdqa xmm0, xmmword [0x14005a420]
movdqu xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xf8], 0x3f32323c
mov dword [rbp + 0xfc], 0x23003b31
mov word [rbp + pe_nt_image_headers64], 0x100
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xe8], al
inc rcx
cmp rcx, 0x18
jb 0x14000b190
mov byte [rbp + 0x101], 0
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xe8]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14000b4ea
comiss xmm9, dword [rbp + 0xc8]
jb 0x14000b4ea
mov r8, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x120], r13
mov rbx, qword [r13]
xor rbx, r15
mov qword [rbp + 0x110], rbx
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd8], r15
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xd0], r15
mov qword [r13], r12
add r8, 0x198
mov edx, dword [0x140060fe0]
call fcn.140027560
nop
mov qword [r13], r12
lea r9, [rax + 0x120]
mov r8d, dword [0x140060fe0]
lea rdx, [rbp + 0xe8]
call fcn.1400275f0
nop
xor rbx, r15
mov qword [r13], rbx
movups xmm0, xmmword [rbp + 0xe8]
movaps xmmword [rsp + 0x30], xmm0
movsd xmm1, qword [rbp + 0xf8]
movsd qword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x130]
call fcn.140009ff0
movsd xmm7, qword [rbp + 0x130]
comisd xmm7, xmm8
jbe 0x14000b4ea
movd xmm0, dword [0x140061258]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm7
jbe 0x14000b4ea
movsd xmm6, qword [rbp + 0x138]
comisd xmm6, xmm8
jbe 0x14000b4ea
movd xmm0, dword [0x14006125c]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x14000b4ea
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], 7
mov qword [rbp + 0x1c0], rdi
mov rax, qword [str.SUV_CAR]
mov dword [rbp + 0x1a8], eax
movzx eax, word [0x1400549ac]
mov word [rbp + 0x1ac], ax
movzx eax, byte [0x1400549ae]
mov byte [rbp + 0x1ae], al
mov byte [rbp + 0x1af], 0
lea rdx, [rbp + 0x1a8]
cmp rdi, 0xf
cmova rdx, qword [rbp + 0x1a8]
lea rcx, [rbp + 0xe8]
call fcn.140002920
subsd xmm6, xmm10
cvtpd2ps xmm1, xmm6
subsd xmm7, xmm11
cvtpd2ps xmm0, xmm7
mov r15, qword [rbp + 0xf8]
mov dword [rbp + 0xd0], r15d
movss dword [rbp + 0xd4], xmm0
movss dword [rbp + 0xd8], xmm1
mov dword [rbp + 0xdc], 0xffffffff
mov dword [rbp + 0xe0], 0x41400000
mov word [rbp + 0xe4], 0
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
inc rax
cmp rax, 0xf4240
jbe 0x14000b3b8
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 5
inc dword [rdi + 0x18]
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
add rax, 0x18
cmp rax, 0xf4240
jbe 0x14000b3ec
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rdi + 0x18], 0x18
mov rbx, qword [0x140061228]
lea r14, [rbp + 0xe8]
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rbp + 0xe8]
cmova r14, rdi
mov eax, dword [rbx + 0x18]
add rax, r15
cmp rax, 0xf4240
jbe 0x14000b459
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rbx + 0x18], 0
mov ecx, dword [rbx + 0x18]
add rcx, qword [rbx + 0x10]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x18], r15d
test r12b, r12b
je 0x14000b4a6
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000b49d
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf7a
mov rcx, rdi
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x14000b4e7
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b4e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
call fcn.1400342f4
xor r12d, r12d
cmp byte [0x1400611f6], 0
je 0x14000bc13
movdqa xmm0, xmmword [0x14005a410]
movdqu xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xf8], 0x35333f0f
mov dword [rbp + 0xfc], 0x3f3a323e
mov word [rbp + 0x100], 0x22
mov byte [rbp + 0x102], 1
mov rcx, r12
nop
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xe8], al
inc rcx
cmp rcx, 0x19
jb 0x14000b530
mov byte [rbp + 0x102], 0
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xe8]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
movabs rdi, 0xff00ff00ff00ff00
test rax, rax
je 0x14000b88c
comiss xmm9, dword [rbp + 0xc8]
jb 0x14000b88c
mov r8, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x118], rdi
mov qword [rbp + 0x120], r13
mov rbx, qword [r13]
xor rbx, rdi
mov qword [rbp + 0x110], rbx
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xd0], rdi
mov qword [r13], r12
add r8, 0x198
mov edx, dword [0x140060fe0]
call fcn.140027560
nop
mov qword [r13], r12
lea r9, [rax + 0x120]
mov r8d, dword [0x140060fe0]
lea rdx, [rbp + 0xe8]
call fcn.1400275f0
nop
xor rbx, rdi
mov qword [r13], rbx
movups xmm0, xmmword [rbp + 0xe8]
movaps xmmword [rsp + 0x30], xmm0
movsd xmm1, qword [rbp + 0xf8]
movsd qword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x130]
call fcn.140009ff0
movsd xmm7, qword [rbp + 0x130]
comisd xmm7, xmm8
jbe 0x14000b88c
movd xmm0, dword [0x140061258]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm7
jbe 0x14000b88c
movsd xmm6, qword [rbp + 0x138]
comisd xmm6, xmm8
jbe 0x14000b88c
movd xmm0, dword [0x14006125c]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x14000b88c
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], 9
mov ecx, 0xf
mov qword [rbp + 0x1e0], rcx
movsd xmm0, qword [str.LAMBO_CAR]
movsd qword [rbp + 0x1c8], xmm0
movzx eax, byte [0x1400549b8]
mov byte [rbp + 0x1d0], al
mov byte [rbp + 0x1d1], 0
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0xe8]
call fcn.140002920
subsd xmm6, xmm10
cvtpd2ps xmm1, xmm6
subsd xmm7, xmm11
cvtpd2ps xmm0, xmm7
mov r15, qword [rbp + 0xf8]
mov dword [rbp + 0xd0], r15d
movss dword [rbp + 0xd4], xmm0
movss dword [rbp + 0xd8], xmm1
mov dword [rbp + 0xdc], 0xffffffff
mov dword [rbp + 0xe0], 0x41400000
mov word [rbp + 0xe4], 0
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
inc rax
cmp rax, 0xf4240
jbe 0x14000b750
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 5
inc dword [rdi + 0x18]
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
add rax, 0x18
cmp rax, 0xf4240
jbe 0x14000b784
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rdi + 0x18], 0x18
mov rbx, qword [0x140061228]
lea r14, [rbp + 0xe8]
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rbp + 0xe8]
cmova r14, rdi
mov eax, dword [rbx + 0x18]
add rax, r15
cmp rax, 0xf4240
jbe 0x14000b7f1
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rbx + 0x18], 0
mov ecx, dword [rbx + 0x18]
add rcx, qword [rbx + 0x10]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x18], r15d
test r12b, r12b
je 0x14000b83e
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000b835
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf81
mov rcx, rdi
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x14000b87f
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b87a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
call fcn.1400342f4
xor r12d, r12d
movabs rdi, 0xff00ff00ff00ff00
cmp byte [0x1400611f6], 0
je 0x14000bc13
movdqa xmm0, xmmword [0x14005a430]
movdqu xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xf8], 0x33e3130
mov dword [rbp + 0xfc], 0x9373b0b
mov dword [rbp + 0x100], 0x3b060e02
mov word [rbp + 0x104], 0x26
mov byte [rbp + 0x106], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xe8], al
inc rcx
cmp rcx, 0x1d
jb 0x14000b8e0
mov byte [rbp + 0x106], 0
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xe8]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14000bc13
comiss xmm9, dword [rbp + 0xc8]
jb 0x14000bc13
mov r8, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x118], rdi
mov qword [rbp + 0x120], r13
mov rbx, qword [r13]
xor rbx, rdi
mov qword [rbp + 0x110], rbx
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xd0], rdi
mov qword [r13], r12
add r8, 0x198
mov edx, dword [0x140060fe0]
call fcn.140027560
nop
mov qword [r13], r12
lea r9, [rax + 0x120]
mov r8d, dword [0x140060fe0]
lea rdx, [rbp + 0xe8]
call fcn.1400275f0
nop
xor rbx, rdi
mov qword [r13], rbx
movups xmm0, xmmword [rbp + 0xe8]
movaps xmmword [rsp + 0x30], xmm0
movsd xmm1, qword [rbp + 0xf8]
movsd qword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x130]
call fcn.140009ff0
movsd xmm7, qword [rbp + 0x130]
comisd xmm7, xmm8
jbe 0x14000bc13
movd xmm0, dword [0x140061258]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm7
jbe 0x14000bc13
movsd xmm6, qword [rbp + 0x138]
comisd xmm6, xmm8
jbe 0x14000bc13
movd xmm0, dword [0x14006125c]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x14000bc13
mov qword [rbp + 0x228], r12
mov qword [rbp + 0x230], 8
mov ecx, 0xf
mov qword [rbp + 0x238], rcx
mov rax, qword [str.Dirtbike]
mov qword [rbp + 0x220], rax
mov byte [rbp + 0x228], 0
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0xe8]
call fcn.140002920
subsd xmm6, xmm10
cvtpd2ps xmm1, xmm6
subsd xmm7, xmm11
cvtpd2ps xmm0, xmm7
mov r15, qword [rbp + 0xf8]
mov dword [rbp + 0xd0], r15d
movss dword [rbp + 0xd4], xmm0
movss dword [rbp + 0xd8], xmm1
mov dword [rbp + 0xdc], 0xffffffff
mov dword [rbp + 0xe0], 0x41400000
mov word [rbp + 0xe4], 0
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
inc rax
cmp rax, 0xf4240
jbe 0x14000bae4
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 5
inc dword [rdi + 0x18]
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
add rax, 0x18
cmp rax, 0xf4240
jbe 0x14000bb18
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rdi + 0x18], 0x18
mov rbx, qword [0x140061228]
lea r14, [rbp + 0xe8]
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rbp + 0xe8]
cmova r14, rdi
mov eax, dword [rbx + 0x18]
add rax, r15
cmp rax, 0xf4240
jbe 0x14000bb85
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rbx + 0x18], 0
mov ecx, dword [rbx + 0x18]
add rcx, qword [rbx + 0x10]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x18], r15d
test r12b, r12b
je 0x14000bbd2
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000bbc9
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf88
mov rcx, rdi
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x14000bc13
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bc0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
call fcn.1400342f4
xor r12d, r12d
cmp byte [0x1400611cc], r12b
je 0x14000bfa1
movdqa xmm0, xmmword [str._b___]
movdqu xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xf8], 0x3d371606
mov dword [rbp + 0xfc], 0x23003f30
mov word [rbp + pe_nt_image_headers64], 0x100
mov ecx, r12d
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xe8], al
inc rcx
cmp rcx, 0x18
jb 0x14000bc53
mov byte [rbp + 0x101], r12b
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xe8]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
movabs rsi, 0xff00ff00ff00ff00
test rax, rax
je 0x14000bfab
comiss xmm9, dword [rbp + 0xc8]
jb 0x14000bfab
mov r8, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], r13
mov rbx, qword [r13]
xor rbx, rsi
mov qword [rbp + 0x110], rbx
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xd0], rsi
mov qword [r13], r12
add r8, 0x198
mov edx, dword [0x140060fe0]
call fcn.140027560
nop
mov qword [r13], r12
lea r9, [rax + 0x120]
mov r8d, dword [0x140060fe0]
lea rdx, [rbp + 0xe8]
call fcn.1400275f0
nop
xor rbx, rsi
mov qword [r13], rbx
movups xmm0, xmmword [rbp + 0xe8]
movaps xmmword [rsp + 0x30], xmm0
movsd xmm1, qword [rbp + 0xf8]
movsd qword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x130]
call fcn.140009ff0
movsd xmm7, qword [rbp + 0x130]
comisd xmm7, xmm8
jbe 0x14000bfab
movd xmm0, dword [0x140061258]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm7
jbe 0x14000bfab
movsd xmm6, qword [rbp + 0x138]
comisd xmm6, xmm8
jbe 0x14000bfab
movd xmm0, dword [0x14006125c]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x14000bfab
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], 5
mov ecx, 0xf
mov qword [rbp + 0x200], rcx
mov eax, dword [str.llama]
mov dword [rbp + 0x1e8], eax
movzx eax, byte [0x1400549d0]
mov byte [rbp + 0x1ec], al
mov byte [rbp + 0x1ed], 0
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0xe8]
call fcn.140002920
subsd xmm6, xmm10
cvtpd2ps xmm1, xmm6
subsd xmm7, xmm11
cvtpd2ps xmm0, xmm7
mov r15, qword [rbp + 0xf8]
mov dword [rbp + 0xd0], r15d
movss dword [rbp + 0xd4], xmm0
movss dword [rbp + 0xd8], xmm1
mov dword [rbp + 0xdc], 0xffffffff
mov dword [rbp + 0xe0], 0x41400000
mov word [rbp + 0xe4], 0
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
inc rax
cmp rax, 0xf4240
jbe 0x14000be6f
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 5
inc dword [rdi + 0x18]
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
add rax, 0x18
cmp rax, 0xf4240
jbe 0x14000bea3
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rdi + 0x18], 0x18
mov rbx, qword [0x140061228]
lea r14, [rbp + 0xe8]
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rbp + 0xe8]
cmova r14, rdi
mov eax, dword [rbx + 0x18]
add rax, r15
cmp rax, 0xf4240
jbe 0x14000bf10
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rbx + 0x18], 0
mov ecx, dword [rbx + 0x18]
add rcx, qword [rbx + 0x10]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x18], r15d
test r12b, r12b
je 0x14000bf5d
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000bf54
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf8f
mov rcx, rdi
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x14000bf9e
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bf99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
call fcn.1400342f4
xor r12d, r12d
movabs rsi, 0xff00ff00ff00ff00
cmp byte [0x1400611fe], 0
je 0x14000c00a
movdqa xmm0, xmmword [0x14005a480]
movdqu xmmword [rbp + 0xd0], xmm0
mov word [rbp + 0xe0], pe_nt_image_headers64
mov rcx, r12
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xd0], al
inc rcx
cmp rcx, 0x10
jb 0x14000bfd0
mov byte [rbp + 0xe1], 0
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xd0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14000c06f
movdqa xmm0, xmmword [0x14005a460]
movdqu xmmword [rbp + 0xd0], xmm0
mov dword [rbp + 0xe0], 0x392d332d
mov dword [rbp + 0xe4], 0x1001d02
mov rcx, r12
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xd0], al
inc rcx
cmp rcx, 0x16
jb 0x14000c031
mov byte [rbp + 0xe7], 0
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xd0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14000caff
comiss xmm12, dword [rbp + 0xc8]
jb 0x14000caff
mov rbx, qword [rbp + 0x20]
add rbx, 0x368
je 0x14000caff
mov qword [rbp + 0x108], r12
mov dword [rbp + 0x10], r12d
mov eax, dword [0x140060fe0]
mov qword [rbp - 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x10], rbx
lea rax, [rbp + 0x108]
mov qword [rbp - 0x18], rax
mov qword [rbp - 8], 8
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [0x140061288]
mov rdi, qword [rbp + 0x108]
lea rax, [rdi - 0x400001]
movabs r14, 0x7fffffffffbffffe
cmp rax, r14
ja 0x14000caff
lea r8, [rdi + 0x12b]
call fcn.140027920
mov r8, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], r13
mov rbx, qword [r13]
xor rbx, rsi
mov qword [rbp + 0x110], rbx
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xd0], rsi
mov qword [r13], r12
add r8, 0x198
mov edx, dword [0x140060fe0]
call fcn.140027560
nop
mov qword [r13], r12
lea r9, [rax + 0x120]
mov r8d, dword [0x140060fe0]
lea rdx, [rsp + 0x58]
call fcn.1400275f0
nop
xor rbx, rsi
mov qword [r13], rbx
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rsp + 0x68]
movsd qword [rbp - 0x80], xmm1
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x70]
call fcn.140009ff0
add rdi, 0x30
je 0x14000caff
mov qword [rbp + 0x108], r12
mov dword [rbp + 0x10], r12d
mov eax, dword [0x140060fe0]
mov qword [rbp - 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x10], rdi
lea rax, [rbp + 0x108]
mov qword [rbp - 0x18], rax
mov qword [rbp - 8], 8
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [0x140061288]
mov rbx, qword [rbp + 0x108]
lea rax, [rbx - 0x400001]
cmp rax, r14
ja 0x14000caff
lea rdi, [rbx + 0x28]
test rdi, rdi
je 0x14000c25e
mov qword [rbp + 0x108], r12
mov dword [rbp + 0x10], r12d
mov eax, dword [0x140060fe0]
mov qword [rbp - 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x10], rdi
lea rax, [rbp + 0x108]
mov qword [rbp - 0x18], rax
mov qword [rbp - 8], 8
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [0x140061288]
mov rsi, qword [rbp + 0x108]
jmp 0x14000c261
mov rsi, r12
lea r8, [rbx + 0x30]
call fcn.1400276c0
movsxd rbx, eax
test eax, eax
jle 0x14000caff
cmp ebx, 0x32
jge 0x14000caff
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140034328
mov rdi, rax
mov dword [rbp + 0x10], r12d
mov ecx, dword [0x140060fe0]
mov qword [rbp - 0x50], rcx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x10], rsi
mov qword [rbp - 0x18], rdi
lea edx, [rbx + rbx]
mov qword [rbp - 8], rdx
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [0x140061288]
mov rcx, rdi
call fcn.1400342f4
mov ecx, r12d
cmp byte [rdi], 0
je 0x14000c2ef
mov rax, rdi
inc ecx
lea rax, [rax + 2]
cmp byte [rax], 0
jne 0x14000c2e4
lea esi, [rcx + 1]
movsxd rbx, esi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, rax
mov rdx, r12
test esi, esi
jle 0x14000c322
nop dword [rax + rax]
movzx ecx, byte [rdi + rdx*2]
mov byte [r8], cl
inc r8
inc rdx
cmp rdx, rbx
jl 0x14000c310
movsxd rax, esi
sub r8, rax
mov rdx, r8
lea rcx, [rbp + 0x168]
call fcn.140002920
nop
mov r15, qword [rbp + 0x178]
mov r13, qword [rbp + 0x168]
mov rsi, qword [rbp + 0x180]
cmp byte [0x1400611f3], 0
jne 0x14000c3e2
lea rbx, [rbp + 0x168]
cmp rsi, 0xf
cmova rbx, r13
cmp r15, 4
jb 0x14000c3e2
lea rdi, [r15 + rbx]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x41
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000c3e2
nop dword [rax]
mov rdx, r12
lea r8, str.Ammo
nop word [rax + rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x14000c3b9
cmp rdx, 4
jne 0x14000c3a0
mov ecx, r12d
jmp 0x14000c3be
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14000c459
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov edx, 0x41
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000c390
cmp byte [0x1400611fc], 0
jne 0x14000c60d
lea rbx, [rbp + 0x168]
cmp rsi, 0xf
cmova rbx, r13
cmp r15, 4
jb 0x14000c4dd
lea rdi, [r15 + rbx]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x57
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000c4dd
nop dword [rax]
mov rdx, r12
lea r8, str.Wood
nop word [rax + rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x14000c4a9
cmp rdx, 4
jne 0x14000c440
mov ecx, r12d
jmp 0x14000c4ae
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x14000c3e2
cmp rsi, 0xf
jbe 0x14000c49a
lea rdx, [rsi + 1]
cmp rdx, 0x1000
mov rax, r13
jb 0x14000c491
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
mov rcx, r13
call fcn.1400342f4
nop
mov rsi, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
jmp 0x14000ced9
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14000c4d4
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov edx, 0x57
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000c430
jmp 0x14000c4dd
sub rax, rbx
cmp rax, 0xffffffffffffffff
jne 0x14000c462
lea rbx, [rbp + 0x168]
cmp rsi, 0xf
cmova rbx, r13
cmp r15, 5
jb 0x14000c57d
lea rdi, [r15 + rbx]
lea r8, [rdi - 4]
sub r8, rbx
mov edx, 0x53
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000c57d
nop dword [rax]
nop word [rax + rax]
mov rdx, r12
lea r8, str.Stone
nop word [rax + rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x14000c549
cmp rdx, 5
jne 0x14000c530
mov ecx, r12d
jmp 0x14000c54e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14000c570
inc rax
lea r8, [rdi - 4]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000c520
jmp 0x14000c57d
sub rax, rbx
cmp rax, 0xffffffffffffffff
jne 0x14000c462
lea rbx, [rbp + 0x168]
cmp rsi, 0xf
cmova rbx, r13
cmp r15, 5
jb 0x14000c60d
lea rdi, [r15 + rbx]
lea r8, [rdi - 4]
sub r8, rbx
mov edx, 0x4d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000c60d
nop
mov rdx, r12
lea r8, str.Metal
nop word [rax + rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x14000c5d9
cmp rdx, 5
jne 0x14000c5c0
mov ecx, r12d
jmp 0x14000c5de
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14000c600
inc rax
lea r8, [rdi - 4]
sub r8, rax
mov edx, 0x4d
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000c5b0
jmp 0x14000c60d
sub rax, rbx
cmp rax, 0xffffffffffffffff
jne 0x14000c462
cmp byte [0x1400611e8], 0
jne 0x14000c6ad
lea rbx, [rbp + 0x168]
cmp rsi, 0xf
cmova rbx, r13
cmp r15, 4
jb 0x14000c6ad
lea rdi, [r15 + rbx]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x42
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000c6ad
mov rdx, r12
lea r8, str.Bars
nop word [rax + rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x14000c679
cmp rdx, 4
jne 0x14000c660
mov ecx, r12d
jmp 0x14000c67e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14000c6a0
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov edx, 0x42
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000c650
jmp 0x14000c6ad
sub rax, rbx
cmp rax, 0xffffffffffffffff
jne 0x14000c462
cvttss2si edx, dword [rbp + 0xc8]
lea rcx, [rbp + 0x110]
call fcn.140027380
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 2
jb 0x14000cfce
lea r14, [rbp + 0x168]
cmp rsi, 0xf
cmova r14, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], r12
lea rsi, [r15 + 2]
mov edi, 0xf
lea rbx, [rbp + 0xe8]
cmp rsi, rdi
jbe 0x14000c796
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x14000c737
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000c75e
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000c77d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000cfe0
mov rcx, rax
call fcn.140034070
test rax, rax
je 0x14000cf96
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000c78f
test rcx, rcx
je 0x14000c78c
call fcn.140034070
mov rbx, rax
jmp 0x14000c78f
mov rbx, r12
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xf8], rsi
mov qword [rbp + 0x100], rdi
mov r8, r15
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movzx eax, word [0x140054a00]
mov word [r15 + rbx], ax
mov byte [rbx + rsi], 0
lea r9, [rbp + 0x110]
lea r8, [rbp + 0xe8]
lea rcx, [rsp + 0x30]
call fcn.140029ff0
nop
mov r8d, 2
lea rdx, [0x1400549fc]
lea rcx, [rsp + 0x30]
call fcn.140002a50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000c853
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c84e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf9d
call fcn.1400342f4
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x14000c8a8
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c8a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfa4
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x14000c8e9
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c8e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfab
call fcn.1400342f4
lea rdx, [rbp + 0x130]
cmp qword [rbp + 0x148], 0xf
cmova rdx, qword [rbp + 0x130]
lea rcx, [rbp + 0xe8]
call fcn.140002920
movsd xmm0, qword [rbp - 0x68]
subsd xmm0, xmm10
cvtpd2ps xmm2, xmm0
movsd xmm1, qword [rbp - 0x70]
subsd xmm1, xmm11
cvtpd2ps xmm0, xmm1
mov r15, qword [rbp + 0xf8]
mov dword [rbp + 0xd0], r15d
movss dword [rbp + 0xd4], xmm0
movss dword [rbp + 0xd8], xmm2
mov dword [rbp + 0xdc], 0xffffffff
mov dword [rbp + 0xe0], 0x41400000
mov word [rbp + 0xe4], 0
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
inc rax
cmp rax, 0xf4240
jbe 0x14000c988
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 5
inc dword [rdi + 0x18]
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
add rax, 0x18
cmp rax, 0xf4240
jbe 0x14000c9bc
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rdi + 0x18], 0x18
mov rbx, qword [0x140061228]
lea r14, [rbp + 0xe8]
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rbp + 0xe8]
cmova r14, rdi
mov eax, dword [rbx + 0x18]
add rax, r15
cmp rax, 0xf4240
jbe 0x14000ca29
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rbx + 0x18], 0
mov ecx, dword [rbx + 0x18]
add rcx, qword [rbx + 0x10]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x18], r15d
test r12b, r12b
je 0x14000ca76
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000ca6d
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfb2
mov rcx, rdi
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x14000cab8
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cab2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfb9
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x14000caf5
inc rdx
mov rax, r13
cmp rdx, 0x1000
jb 0x14000caed
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
mov rcx, r13
call fcn.1400342f4
lea r13, [rbp + 0x2e8]
xor r12d, r12d
cmp byte [0x1400611f0], 0
je 0x14000cecf
movdqa xmm0, xmmword [0x14005a490]
movdqu xmmword [rbp + 0xd0], xmm0
mov dword [rbp + 0xe0], 0x1f043b37
mov word [rbp + 0xe4], pe_nt_image_headers64
mov rcx, r12
lea eax, [rcx + 0x49]
xor byte [rbp + rcx + 0xd0], al
inc rcx
cmp rcx, 0x14
jb 0x14000cb32
mov byte [rbp + 0xe5], 0
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rcx, qword [rbp + 0x28]
lea rdx, [rbp + 0xd0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14000cecf
comiss xmm9, dword [rbp + 0xc8]
jb 0x14000cecf
mov r8, qword [rbp + 0x20]
lea rbx, [r8 + 0xd92]
test rbx, rbx
je 0x14000cbdf
mov qword [rbp + 0x108], r12
mov dword [rbp + 0x10], r12d
mov eax, dword [0x140060fe0]
mov qword [rbp - 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x10], rbx
lea rax, [rbp + 0x108]
mov qword [rbp - 0x18], rax
mov qword [rbp - 8], 8
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [0x140061288]
mov rdi, qword [rbp + 0x108]
mov r8, qword [rbp + 0x20]
jmp 0x14000cbe2
mov rdi, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
movabs rsi, 0xff00ff00ff00ff00
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], r13
mov rbx, qword [r13]
xor rbx, rsi
mov qword [rbp + 0x110], rbx
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xd0], rsi
mov qword [r13], r12
add r8, 0x198
mov edx, dword [0x140060fe0]
call fcn.140027560
nop
mov qword [r13], r12
lea r9, [rax + 0x120]
mov r8d, dword [0x140060fe0]
lea rdx, [rbp + 0xe8]
call fcn.1400275f0
nop
xor rbx, rsi
mov qword [r13], rbx
movups xmm0, xmmword [rbp + 0xe8]
movaps xmmword [rsp + 0x30], xmm0
movsd xmm1, qword [rbp + 0xf8]
movsd qword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x130]
call fcn.140009ff0
movsd xmm7, qword [rbp + 0x130]
comisd xmm7, xmm8
jbe 0x14000cecf
movd xmm0, dword [0x140061258]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm7
jbe 0x14000cecf
movsd xmm6, qword [rbp + 0x138]
comisd xmm6, xmm8
jbe 0x14000cecf
movd xmm0, dword [0x14006125c]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x14000cecf
test rdi, rdi
jne 0x14000cecf
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], 8
mov ecx, 0xf
mov qword [rbp + 0x100], rcx
mov rax, qword [str.Ammo_Box]
mov qword [rbp + 0xe8], rax
mov byte [rbp + 0xf0], dil
lea rdx, [rbp + 0xe8]
lea rcx, [rsp + 0x30]
call fcn.140002920
subsd xmm6, xmm10
cvtpd2ps xmm1, xmm6
subsd xmm7, xmm11
cvtpd2ps xmm0, xmm7
mov r15, qword [rsp + 0x40]
mov dword [rbp + 0xd0], r15d
movss dword [rbp + 0xd4], xmm0
movss dword [rbp + 0xd8], xmm1
mov dword [rbp + 0xdc], 0xffffffff
mov dword [rbp + 0xe0], 0x41400000
mov word [rbp + 0xe4], di
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
inc rax
cmp rax, 0xf4240
jbe 0x14000cda3
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 5
inc dword [rdi + 0x18]
mov rdi, qword [0x140061228]
mov eax, dword [rdi + 0x18]
add rax, 0x18
cmp rax, 0xf4240
jbe 0x14000cdd7
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rdi + 0x18], r12d
mov ecx, dword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rdi + 0x18], 0x18
mov rbx, qword [0x140061228]
lea r14, [rsp + 0x30]
mov rsi, qword [rsp + 0x48]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rsp + 0x30]
cmova r14, rdi
mov eax, dword [rbx + 0x18]
add rax, r15
cmp rax, 0xf4240
jbe 0x14000ce3e
lea rcx, str.__buffer_____overflow._n
call fcn.140001f10
mov dword [rbx + 0x18], 0
mov ecx, dword [rbx + 0x18]
add rcx, qword [rbx + 0x10]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x18], r15d
test r12b, r12b
je 0x14000ce8b
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000ce82
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc0
mov rcx, rdi
call fcn.1400342f4
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x14000cecc
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cec7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cfc7
call fcn.1400342f4
xor r12d, r12d
mov rbx, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x20]
lea rcx, [rbp + 0x20]
call fcn.14001c0c0
add rbx, 0xb0
mov qword [rsp + 0x28], rbx
movabs r15, 0xff00ff00ff00ff00
cmp rbx, rsi
jne 0x14000ad1f
mov r14, qword [rsp + 0x50]
lea rcx, [rbp + 0x150]
call fcn.1400272a0
nop
xor r14, r15
lea rax, [rbp + 0x2e8]
mov qword [rax], r14
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.140034050
lea r11, [rsp + 0x3c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001590
nop
call fcn.14002a1e0
int3
call fcn.1400014f0
nop
call fcn.1400014f0
int3