Function at 0x14001ffa4
Capabilities:
Create thread
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
mov rax, qword [0x1401a6080]
xor rax, rsp
mov qword [rbp + 0x250], rax
xor edi, edi
cmp byte [reloc.WS2_32.dll_accept], dil
je 0x140021c80
movdqa xmm0, xmmword [0x14018c8a0]
movdqu xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x14018c910]
movdqu xmmword [rbp + 0x1c0], xmm1
movdqa xmm0, xmmword [0x14018c8c0]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1e0], 0x53
mov ecx, edi
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
inc rcx
cmp rcx, 0x30
jb 0x140020025
mov byte [rbp + 0x1e1], dil
lea rcx, [rbp + 0x1b1]
call fcn.14001d480
mov esi, Ordinal_33
mov r14d, 0x1000
or r13, 0xffffffffffffffff
cmp byte [0x1402a4b58], dil
jne 0x140020a12
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x160], xmm0
mov r15, rdi
mov qword [rbp + 0x170], rdi
lea rbx, [0x140184760]
lea r12, [0x140182360]
sub rbx, r12
je 0x1400200ca
mov rdx, rbx
lea rcx, [rbp + 0x160]
call fcn.140019570
mov r8, rbx
mov rdx, r12
mov rdi, qword [rbp + 0x160]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea r12, [rbx + rdi]
mov qword [rbp + 0x168], r12
mov r15, qword [rbp + 0x170]
jmp 0x1400200d8
mov r12, qword [rbp + 0x168]
mov rdi, qword [rbp + 0x160]
sub r12, rdi
jne 0x140020246
movdqa xmm0, xmmword [0x14018cb10]
movdqu xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x14018c820]
movdqu xmmword [rbp + 0x1c0], xmm1
mov dword [rbp + 0x1d0], 0x554a5943
mov word [rbp + 0x1d4], Ordinal_60
xor ebx, ebx
mov ecx, ebx
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
inc rcx
cmp rcx, 0x24
jb 0x140020118
mov byte [rbp + 0x1d5], bl
lea rcx, [rbp + 0x1b1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], rbx
mov qword [rbp + 0x180], gethostname
lea rdx, [rbp + 0x180]
call fcn.140013094
mov rcx, rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], reloc.WLDAP32.dll_Ordinal_35
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x1c8], rax
movups xmm0, xmmword [str._fsb.cc_____invalid_drv_buffer_size]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x140187ff8]
movups xmmword [rcx + 0x10], xmm1
movzx eax, word [0x140188008]
mov word [rcx + 0x20], ax
mov al, byte [0x14018800a]
mov byte [rcx + 0x22], al
mov byte [rcx + 0x23], bl
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov esi, Ordinal_33
mov r14d, 0x1000
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140020217
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140020211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020211
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
nop
test rdi, rdi
je 0x14002045a
sub r15, rdi
mov rax, rdi
cmp r15, r14
jb 0x14002044f
add r15, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, rsi
jmp 0x140020449
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x180], xmm0
xor eax, eax
mov qword [rbp + 0x190], rax
mov rdx, r12
lea rcx, [rbp + 0x180]
call fcn.140019570
mov r8, r12
mov rdx, rdi
mov rbx, qword [rbp + 0x180]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [r12 + rbx]
mov qword [rbp + 0x188], rax
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x200]
call fcn.1400198e8
nop
call fcn.14001f3ec
xor r12d, r12d
test al, al
jne 0x140020461
movdqa xmm0, xmmword [0x14018cb30]
movdqu xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [str.S_BOXO_nCG_nCXON]
movdqu xmmword [rbp + 0x1c0], xmm1
mov ecx, r12d
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
inc rcx
cmp rcx, 0x1e
jb 0x1400202d0
mov byte [rbp + 0x1cf], r12b
movdqa xmm0, xmmword [0x14018cba0]
movdqu xmmword [rbp + 0x180], xmm0
movdqa xmm1, xmmword [0x14018cb40]
movdqu xmmword [rbp + 0x190], xmm1
mov word [rbp + 0x1a0], 0x6077
mov byte [rbp + 0x1a2], r12b
mov rcx, r12
mov al, byte [rbp + 0x180]
xor byte [rbp + rcx + 0x181], al
inc rcx
cmp rcx, 0x21
jb 0x140020320
mov byte [rbp + 0x1a2], r12b
mov r9d, Ordinal_50
lea r8, [rbp + 0x1b1]
lea rdx, [rbp + 0x181]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], r12
mov qword [rbp + 0x180], rsi
lea rdx, [rbp + 0x180]
call fcn.140013094
mov rcx, rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], reloc.WS2_32.dll_setsockopt
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x1c8], rax
movups xmm0, xmmword [str.Unable_to_load_driver]
movups xmmword [rcx], xmm0
mov eax, dword [0x140188020]
mov dword [rcx + 0x10], eax
mov al, byte [0x140188024]
mov byte [rcx + 0x14], al
mov byte [rcx + 0x15], r12b
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov r14d, 0x1000
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x14002041a
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140020414
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020414
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
nop
lea rcx, [rbp + 0x200]
call fcn.140021cb4
nop
test rdi, rdi
je 0x14002045a
sub r15, rdi
mov r8, rdi
cmp r15, r14
jb 0x14002044f
add r15, 0x27
mov rdi, qword [rdi - 8]
sub r8, rdi
add r8, 0xfffffffffffffff8
cmp r8, rsi
ja 0x140020a06
mov rdx, r15
mov rcx, rdi
call fcn.1401499c4
mov al, 1
jmp 0x140021c82
lea rcx, [rsp + 0x40]
call fcn.14001a670
lea rcx, [rbp + 0x70]
call fcn.140023444
nop
lea rdx, [0x140188044]
lea rcx, [rbp + 0x70]
call fcn.14000abcc
lea rdx, str.NtShutdownSystem
mov rcx, rax
call fcn.14000abcc
mov rcx, rax
lea rdx, str._mapped_physical_page___
call fcn.14000abcc
mov rbx, rax
mov rdx, qword [0x1402a4978]
lea rcx, [rbp + 0x1b0]
call fcn.140001a18
nop
mov r8, qword [rax + 0x10]
mov edi, reloc.WS2_32.dll_ntohs
cmp qword [rax + 0x18], rdi
jbe 0x1400204cc
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14002402c
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, rdi
jbe 0x140020516
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140020511
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020511
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x78]
call fcn.140023720
nop
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, rdi
jbe 0x140020572
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x14002056d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x14002056d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
lea rcx, [rbp - 0x80]
call fcn.140023444
nop
lea rdx, [0x140188044]
lea rcx, [rbp - 0x80]
call fcn.14000abcc
lea rdx, str.NtShutdownSystem
mov rcx, rax
call fcn.14000abcc
mov rcx, rax
lea rdx, str._page_offset___
call fcn.14000abcc
mov rbx, rax
movzx edx, word [0x1402a498c]
lea rcx, [rbp + 0x1b0]
call fcn.14000193c
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], rdi
jbe 0x1400205ce
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14002402c
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, rdi
jbe 0x140020618
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140020613
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020613
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x78]
call fcn.140023720
nop
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, rdi
jbe 0x140020674
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x14002066f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x14002066f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_chaos::roblox::init_void_::_8::_lambda_5___unsigned_long_long_unsigned___int64___char_const____ptr64__char_const____ptr64_.0
mov qword [rbp + 0x1b0], rax
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x1e8], rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x200]
call fcn.140019bd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], r12
mov qword [rbp + 0x180], rsi
lea rdx, [rbp + 0x180]
call fcn.140013094
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], reloc.WS2_32.dll_setsockopt
mov rcx, qword [rbp + 0x180]
mov qword [rbp + 0x1c8], rcx
movups xmm0, xmmword [str.Driver_imports_fixed.]
movups xmmword [rax], xmm0
mov ecx, dword [0x140188078]
mov dword [rax + 0x10], ecx
mov cl, byte [reloc.WLDAP32.dll_Ordinal_46]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], r12b
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, rdi
jbe 0x140020759
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140020754
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020754
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
lea rcx, [rbp + 0x200]
call fcn.1400199ac
mov word [rbp + 0x18e], r12w
mov qword [rbp + 0x190], reloc.WS2_32.dll_ntohl
mov qword [rbp + 0x198], rdi
movsd xmm0, qword [str.Driver_mapped.]
movsd qword [rbp + 0x180], xmm0
mov eax, dword [0x140188088]
mov dword [rbp + 0x188], eax
movzx eax, word [0x14018808c]
mov word [rbp + 0x18c], ax
mov byte [rbp + 0x18e], r12b
lea rdx, [rbp + 0x180]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, rdi
jbe 0x1400207fb
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, r14
jb 0x1400207f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x1400207f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
mov rbx, qword [rbp + 0x238]
mov edx, dword [rbx + 0x50]
call fcn.14001ac78
mov rdi, rax
mov rdx, rax
lea rcx, [rbp + 0x200]
call fcn.140019aac
mov r9d, dword [rbx + 0x50]
mov r8, qword [rbp + 0x218]
mov rdx, rdi
call fcn.14001ad80
mov r15d, dword [rbx + 0x28]
add r15, rdi
mov ebx, dword [rbx + 0x50]
mov rax, qword gs:[0x58]
mov ecx, reloc.WS2_32.dll_recv
mov rax, qword [rax]
mov ecx, dword [rcx + rax]
cmp dword [0x1402a61a8], ecx
jle 0x14002089a
lea rcx, [0x1402a61a8]
call fcn.140149aa0
cmp dword [0x1402a61a8], r13d
jne 0x14002089a
lea rcx, [0x14017ce58]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402a61a0], rax
lea rcx, [0x1402a61a8]
call fcn.140149a34
mov rcx, qword [0x1402a4978]
mov rdx, r15
call fcn.14001a410
mov rax, qword [0x1402a61a0]
mov rdx, rbx
mov rcx, rdi
call rax
mov ebx, eax
mov rcx, qword [0x1402a4978]
call fcn.14001a5f0
movdqa xmm0, xmmword [0x14018c890]
movdqu xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x14018cbb0]
movdqu xmmword [rbp + 0x1c0], xmm1
mov word [rbp + 0x1d0], 0x5822
mov byte [rbp + 0x1d2], r12b
mov rcx, r12
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
inc rcx
cmp rcx, 0x21
jb 0x1400208f9
mov byte [rbp + 0x1d2], r12b
mov edx, ebx
lea rcx, [rbp + 0x1b1]
call fcn.14001d480
mov rax, qword [rbp + 0x238]
mov r8d, dword [rax + 0x54]
mov rdx, rdi
call fcn.14001ae0c
mov byte [0x1402a4b58], 1
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x80], rbx
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rbp - 0x78]
call fcn.140005950
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], rbx
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x78]
call fcn.140005950
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x200]
call fcn.140021cb4
nop
mov rcx, qword [rbp + 0x160]
xor edi, edi
test rcx, rcx
je 0x140020a12
mov rdx, qword [rbp + 0x170]
sub rdx, rcx
mov rax, rcx
cmp rdx, r14
jb 0x140020a0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020a0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
movdqa xmm0, xmmword [0x14018c8b0]
movdqu xmmword [rbp + 0x180], xmm0
mov dword [rbp + 0x190], 0x283d3528
mov dword [rbp + 0x194], 0x563b3235
mov r12b, reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x198], dil
mov rcx, rdi
mov al, byte [rbp + 0x180]
xor byte [rbp + rcx + 0x181], al
inc rcx
cmp rcx, 0x17
jb 0x140020a43
mov byte [rbp + 0x198], dil
lea rcx, [rbp + 0x181]
call fcn.14001d480
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov eax, 3
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, eax
mov edx, 0xc0000000
lea rcx, str..WeirdoEvil
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1402a49b8], rax
test rax, rax
je 0x140021b04
cmp rax, r13
je 0x140021b04
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1c8], rdi
mov r15d, 0x3f
mov qword [rbp + 0x180], r15
lea rdx, [rbp + 0x180]
call fcn.140013094
mov rdx, rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], gethostname
mov rcx, qword [rbp + 0x180]
mov qword [rbp + 0x1c8], rcx
movups xmm0, xmmword [str.Driver_mapping_and_verification_completed_successfully.]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1401880d8]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1401880e8]
movups xmmword [rax + 0x20], xmm0
mov eax, dword [0x1401880f8]
mov dword [rdx + 0x30], eax
movzx eax, word [0x1401880fc]
mov word [rdx + 0x34], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_46]
mov byte [rdx + 0x36], al
mov byte [rdx + 0x37], dil
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140020b90
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140020b8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020b8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
movdqa xmm0, xmmword [0x14018cb20]
movdqu xmmword [rbp + 0x180], xmm0
mov dword [rbp + 0x190], 0x4558135c
mov word [rbp + 0x194], 0x58
mov rcx, rdi
mov al, byte [rbp + 0x180]
xor byte [rbp + rcx + 0x181], al
inc rcx
cmp rcx, 0x14
jb 0x140020bb6
mov byte [rbp + 0x195], dil
lea rcx, [rbp + 0x181]
call fcn.14001e478
mov dword [0x1402a49b0], eax
test eax, eax
jne 0x140020d0f
movdqa xmm0, xmmword [0x14018c850]
movdqu xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x14018c840]
movdqu xmmword [rbp + 0x1c0], xmm1
mov dword [rbp + 0x1d0], 0x13161b
mov dword [rbp + 0x1d4], 0x701e1f
mov rcx, rdi
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
inc rcx
cmp rcx, 0x26
jb 0x140020c24
mov byte [rbp + 0x1d7], dil
lea rcx, [rbp + 0x1b1]
call fcn.14001d480
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1c8], rdi
mov qword [rbp + 0x180], rsi
lea rdx, [rbp + 0x180]
call fcn.140013094
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], Ordinal_27
mov rcx, qword [rbp + 0x180]
mov qword [rbp + 0x1c8], rcx
movups xmm0, xmmword [str.Roblox_is_not_initialized]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140188110]
movsd qword [rax + 0x10], xmm0
mov cl, byte [0x140188118]
mov byte [rax + 0x18], cl
mov byte [rax + 0x19], dil
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140021c80
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140021c7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140021c7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov cl, 0x56
mov dword [rbp + 0x160], 0x34390456
mov dword [rbp + 0x164], 0x2e393a
mov rax, rdi
xor byte [rbp + rax + 0x161], cl
inc rax
cmp rax, 6
jae 0x140020d40
mov cl, byte [rbp + 0x160]
jmp 0x140020d28
mov byte [rbp + 0x167], dil
lea rdx, [rbp + 0x161]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1402a4a70], rax
call fcn.14001fc10
lea rcx, [rax + 0x10]
call fcn.1400239a4
mov rdi, rax
lea rdx, str.Visual_Engine:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000abcc
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
call fcn.1400239c8
lea rdx, [0x14001d4d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
lea rdx, str._Hyperion_4.0__Returned_datamodel_as____0x
call fcn.14000abcc
mov rbx, rax
call fcn.14001fc10
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x14000ad3c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14001fc10
lea rcx, [rax + 0x118]
call fcn.1400239a4
lea rcx, [rax + 0x198]
call fcn.1400239a4
mov rbx, rax
mov qword [rbp + 0x180], rax
lea rdx, [0x14001d4d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rbx, rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x180]
call fcn.1400224e4
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140020e48
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14002402c
lea rdx, [0x14000ad3c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140020ea3
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140020e9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140020e9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
xor edx, edx
test rdi, rdi
jne 0x140021056
mov cl, 0x5c
mov dword [rbp + 0x160], 0x3e2f3a5c
mov dword [rbp + 0x164], 0x3f3f72
mov eax, edx
xor byte [rbp + rax + 0x161], cl
inc rax
cmp rax, 6
jae 0x140020ede
mov cl, byte [rbp + 0x160]
jmp 0x140020ec6
mov byte [rbp + 0x167], dl
movdqa xmm0, xmmword [0x14018c810]
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x14018c830]
movdqa xmmword [rbp + 0x1c0], xmm1
movdqa xmm0, xmmword [0x14018c860]
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [0x14018c870]
movdqa xmmword [rbp + 0x1e0], xmm1
mov dword [rbp + 0x1f0], 0x5f0c110a
mov word [rbp + 0x1f4], reloc.WS2_32.dll_WSACleanup
mov rcx, rdx
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
inc rcx
cmp rcx, 0x44
jb 0x140020f3a
mov byte [rbp + 0x1f5], dl
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x161]
lea rdx, [rbp + 0x1b1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xor ebx, ebx
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], rbx
mov qword [rbp + 0x160], reloc.WLDAP32.dll_Ordinal_79
lea rdx, [rbp + 0x160]
call fcn.140013094
mov rdx, rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], 0x43
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x1c8], rcx
movaps xmm0, xmmword [str.failed_to_get_visual_engine__please_run_the_cheat_as_administrator_]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140188170]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140188180]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140188190]
movups xmmword [rax + 0x30], xmm1
movzx eax, word [0x1401881a0]
mov word [rdx + 0x40], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rdx + 0x42], al
mov byte [rdx + 0x43], bl
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140021054
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x14002104f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x14002104f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
xor edx, edx
mov rbx, qword [rbp + 0x180]
test rbx, rbx
jne 0x14002120a
mov cl, 0x66
mov dword [rbp + 0x160], 0x4150066
mov dword [rbp + 0x164], 0x50548
mov rax, rdx
xor byte [rbp + rax + 0x161], cl
inc rax
cmp rax, 6
jae 0x140021097
mov cl, byte [rbp + 0x160]
jmp 0x14002107f
mov byte [rbp + 0x167], dl
movdqa xmm0, xmmword [0x14018c8d0]
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x14018c8e0]
movdqa xmmword [rbp + 0x1c0], xmm1
movdqa xmm0, xmmword [0x14018c920]
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [0x14018cbe0]
movdqa xmmword [rbp + 0x1e0], xmm1
mov word [rbp + 0x1f0], 0x56
mov rcx, rdx
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
inc rcx
cmp rcx, 0x40
jb 0x1400210e9
mov byte [rbp + 0x1f1], dl
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x161]
lea rdx, [rbp + 0x1b1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xor eax, eax
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x160], r15
lea rdx, [rbp + 0x160]
call fcn.140013094
mov rdx, rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], r15
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x1c8], rcx
movaps xmm0, xmmword [str.failed_to_get_datamodel__please_run_the_cheat_as_administrator_]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1401881c0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1401881d0]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x1401881e0]
movsd qword [rax + 0x30], xmm0
mov eax, dword [0x1401881e8]
mov dword [rdx + 0x38], eax
movzx eax, word [0x1401881ec]
mov word [rdx + 0x3c], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rdx + 0x3e], al
xor eax, eax
mov byte [rdx + 0x3f], al
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140021208
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140021203
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140021203
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
xor edx, edx
mov qword [0x1402a4a58], rbx
mov cl, r15b
mov byte [rbp + 0x160], cl
mov dword [rbp + 0x161], 0x465e536f
mov dword [rbp + 0x165], 0x4c4d5a
mov rax, rdx
xor byte [rbp + rax + 0x161], cl
inc rax
cmp rax, 7
jae 0x140021249
mov cl, byte [rbp + 0x160]
jmp 0x140021231
mov byte [rbp + 0x168], dl
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rdx
mov qword [rbp + 0x1c8], rdx
lea rax, [rbp + 0x161]
inc r13
cmp byte [rax + r13], dl
jne 0x14002126e
mov r8, r13
lea rdx, [rbp + 0x161]
lea rcx, [rbp + 0x1b0]
call fcn.14000bb40
nop
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x180]
call fcn.140022b2c
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x1400212e5
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x1400212e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140021528
call fcn.1401499c4
mov rbx, qword [rbp + 0x160]
xor r13d, r13d
test rbx, rbx
jne 0x140021491
mov dword [rbp + 0x160], 0x50415432
mov dword [rbp + 0x164], 0x51511c
mov eax, r13d
xor byte [rbp + rax + 0x161], r12b
mov r12d, 1
add rax, r12
cmp rax, 6
jae 0x14002132f
mov r12b, byte [rbp + 0x160]
jmp 0x14002130f
mov byte [rbp + 0x167], r13b
movdqa xmm0, xmmword [0x14018cb90]
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x14018cb70]
movdqa xmmword [rbp + 0x1c0], xmm1
movdqa xmm0, xmmword [str.vmwkf_kfbwbpR_t4_011]
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [str.bgnjmjpwqbwlq__t]
movdqa xmmword [rbp + 0x1e0], xmm1
mov rcx, r13
mov al, byte [rbp + 0x1b0]
xor byte [rbp + rcx + 0x1b1], al
add rcx, r12
cmp rcx, 0x3e
jb 0x140021379
mov byte [rbp + 0x1ef], r13b
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x161]
lea rdx, [rbp + 0x1b1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], r13
mov qword [rbp + 0x160], r15
lea rdx, [rbp + 0x160]
call fcn.140013094
mov rdx, rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], 0x3d
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x1c8], rcx
movups xmm0, xmmword [str.failed_to_get_players__please_run_the_cheat_as_administrator_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140188200]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140188210]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x140188220]
movsd qword [rax + 0x30], xmm0
mov eax, dword [0x140188228]
mov dword [rdx + 0x38], eax
mov al, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rdx + 0x3c], al
mov byte [rdx + 0x3d], r13b
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140021497
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x14002148a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x14002148a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
jmp 0x140021497
mov r12d, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], 9
mov qword [rbp + 0x1c8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Workspace]
movsd qword [rbp + 0x1b0], xmm0
mov al, byte [0x140188238]
mov byte [rbp + 0x1b8], al
mov byte [rbp + 0x1b9], r13b
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x180]
call fcn.140022b2c
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140021534
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x14002152f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x14002152f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
mov rax, qword [rbp + 0x160]
mov qword [0x1402a4a48], rax
mov qword [0x1402a4a38], rbx
mov qword [0x1402a4a28], rdi
mov rcx, qword [0x1402a4a58]
add rcx, 0x160
call fcn.1400239a4
mov qword [0x1402a4a08], rax
lea rdi, [rbx + 0x100]
mov qword [rbp + 0x180], r13
mov r15d, 8
mov r8d, r15d
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.14001e340
mov rax, qword [rbp + 0x180]
mov qword [0x1402a4a50], rax
lea rdx, [fcn.14001ccfc]
lea rcx, [rbp + 0x160]
call fcn.140023b2c
mov rbx, rax
cmp dword [rax + 8], r13d
je 0x140021afa
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140021afa
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x168], r13d
je 0x1400215fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x14001c980]
lea rcx, [rbp + 0x160]
call fcn.140023b2c
mov rbx, rax
cmp dword [rax + 8], r13d
je 0x140021af0
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140021af0
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x168], r13d
je 0x14002165a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov eax, r12d
xchg byte [0x1402a49fa], al
lea rdx, [0x14002e678]
lea rcx, [rsp + 0x50]
call fcn.140023b2c
nop
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x70], rax
cmp dword [rsp + 0x58], r13d
je 0x140021ae6
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140021ae6
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [0x14001c728]
lea rcx, [rbp + 0x160]
call fcn.140023b2c
mov rbx, rax
cmp dword [rax + 8], r13d
je 0x140021adc
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140021adc
xorps xmm0, xmm0
movdqu xmmword [rbx], xmm0
cmp dword [rbp + 0x168], r13d
je 0x14002170c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, Ordinal_27
call fcn.140149980
lea rcx, [rsp + 0x70]
mov qword [rax], rcx
lea rcx, [rsp + 0x50]
mov qword [rax + 8], rcx
lea rcx, [0x14002e934]
mov qword [rax + 0x10], rcx
mov qword [rbp + 0x180], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140024418]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140021acb
cmp dword [rsp + 0x68], r13d
je 0x140021ac1
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140021ac1
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, r15
call fcn.140149980
lea rcx, [0x14008a5ec]
mov qword [rax], rcx
mov qword [rbp + 0x180], rax
lea rcx, [rbp + 0x168]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x1400243f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x160], rax
test rax, rax
je 0x140021aae
cmp dword [rbp + 0x168], r13d
je 0x140021aa4
movaps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140021aa4
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], r13
mov qword [rbp + 0x180], rsi
lea rdx, [rbp + 0x180]
call fcn.140013094
mov qword [rbp + 0x1b0], rax
mov qword [rbp + Ordinal_330], 0x1c
mov rcx, qword [rbp + 0x180]
mov qword [rbp + 0x1c8], rcx
movups xmm0, xmmword [str.init_completed_successfully.]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140188250]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140188258]
mov dword [rax + 0x18], ecx
mov byte [rax + 0x1c], r13b
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x1400218e2
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x1400218dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x1400218dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
lea rdx, str._Hyperion_4.0__Returned_players_as____0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000abcc
mov rbx, rax
mov qword [rbp + 0x180], r13
mov r8d, r15d
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.14001e340
mov rdx, qword [rbp + 0x180]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
movdqa xmm0, xmmword [0x14018cbc0]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [0x14018cb60]
movdqa xmmword [rbp + 0x210], xmm1
movdqa xmm0, xmmword [0x14018cb50]
movdqa xmmword [rbp + 0x220], xmm0
movdqa xmm1, xmmword [0x14018cb80]
movdqa xmmword [rbp + 0x230], xmm1
mov dword [rbp + 0x240], 0x5c7b445d
mov dword [rbp + 0x244], 0x23622320
mov word [rbp + 0x248], Ordinal_33
mov rcx, r13
mov al, byte [rbp + 0x200]
xor byte [rbp + rcx + 0x201], al
add rcx, r12
cmp rcx, 0x48
jb 0x140021981
mov byte [rbp + 0x249], r13b
lea rcx, [rbp + 0x201]
call fcn.14001d480
lea rdx, str._fsb.cc_____console_will_be_closed_in_3_seconds.._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000abcc
mov qword [rbp + 0x180], r12
mov ebx, 3
lea rdx, [0x1401882c4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000abcc
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x14017b0dc]
call fcn.14000abcc
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp + 0x180]
call fcn.140023b98
sub ebx, r12d
jns 0x1400219c9
lea rdx, [0x14000ad3c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rbp + 0x180], r12
lea rcx, [rbp + 0x180]
call fcn.14001d198
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x1402a4a70]
sete byte [0x1402a4a35]
mov cl, 0x6a
mov dword [rbp + 0x160], 0x805386a
mov dword [rbp + 0x164], 0x120506
mov rax, r13
xor byte [rbp + rax + 0x161], cl
add rax, r12
cmp rax, 6
jae 0x140021a80
mov cl, byte [rbp + 0x160]
jmp 0x140021a68
mov byte [rbp + 0x167], r13b
lea rdx, [rbp + 0x161]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140021a2f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x168], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x68], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov r15d, 0x3f
mov cl, r15b
mov byte [rbp + 0x160], cl
mov dword [rbp + 0x161], 0x115d4c59
mov word [rbp + 0x165], 0x5c5c
mov byte [rbp + 0x167], dil
mov rax, rdi
xor byte [rbp + rax + 0x161], cl
inc rax
cmp rax, 6
jae 0x140021b48
mov cl, byte [rbp + 0x160]
jmp 0x140021b30
mov byte [rbp + 0x167], dil
movdqa xmm0, xmmword [0x14018cbd0]
movdqu xmmword [rbp + 0x180], xmm0
mov dword [rbp + 0x190], 0x7574717f
mov word [rbp + 0x194], reloc.WS2_32.dll_WSACleanup
mov rcx, rdi
mov al, byte [rbp + 0x180]
xor byte [rbp + rcx + 0x181], al
inc rcx
cmp rcx, 0x14
jb 0x140021b75
mov byte [rbp + 0x195], dil
mov r9d, Ordinal_50
lea r8, [rbp + 0x161]
lea rdx, [rbp + 0x181]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1c8], rdi
mov qword [rbp + 0x180], r15
lea rdx, [rbp + 0x180]
call fcn.140013094
mov rdx, rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], gethostname
mov rcx, qword [rbp + 0x180]
mov qword [rbp + 0x1c8], rcx
movups xmm0, xmmword [str.Post_mapping_verification_failed._Driver_not_found.]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1401880a0]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1401880b0]
movups xmmword [rax + 0x20], xmm0
movzx eax, word [0x1401880c0]
mov word [rdx + 0x30], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_46]
mov byte [rdx + 0x32], al
mov byte [rdx + 0x33], dil
lea rdx, [rbp + 0x1b0]
call fcn.14001f8f4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140021c80
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, r14
jb 0x140021c7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
jbe 0x140021c7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401499c4
xor al, al
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140149960
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret