Function at 0x14000a410
Capabilities:
Enumerate processes
Execute command
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x14001d040]
xor rax, rsp
mov qword [rbp + 0x270], rax
lea rcx, [rbp - 0x30]
call fcn.1400034d0
cmp qword [rax + 0x18], 0xf
jbe 0x14000a45b
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14000a4a2
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a49d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a49d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
call fcn.140004710
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140003400
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140001a60
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400142f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140003400
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
lea rdx, str._n____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 0x5c
lea rdx, str.Would_you_like_to_download_the_correct_version_of_Roblox_for_Spectra_in_case_Roblox_updates_
lea rcx, [rbp - 0x80]
call fcn.14000e670
mov dword [rbp - 0x60], 0x19
lea rbx, [rbp - 0x80]
mov rdi, qword [rbp - 0x80]
mov r15, qword [rbp - 0x68]
cmp r15, 0xf
cmova rbx, rdi
lea rsi, [rbp - 0x80]
cmova rsi, rdi
add rsi, qword [rbp - 0x70]
cmp rbx, rsi
je 0x14000a5ee
mov qword [rsp + 0x20], 0x19
movzx edx, byte [rbx]
mov rcx, r14
call fcn.14000d2e0
lea rdx, [0x14000d770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x20]
call fcn.14000d790
inc rbx
cmp rbx, rsi
jne 0x14000a5c1
cmp r15, 0xf
jbe 0x14000a628
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000a620
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a620
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140010a98
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_n____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140015fb0]
movdqu xmmword [rbp + 0x20], xmm1
mov byte [rbp + 0x10], 0
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov r8d, 0x12
lea rdx, str.Your_Choice_Y_N_:
lea rcx, [rbp - 0x58]
call fcn.14000e670
mov dword [rbp - 0x38], 0x19
lea rbx, [rbp - 0x58]
mov rdi, qword [rbp - 0x58]
mov r15, qword [rbp - 0x40]
cmp r15, 0xf
cmova rbx, rdi
lea rsi, [rbp - 0x58]
cmova rsi, rdi
add rsi, qword [rbp - 0x48]
cmp rbx, rsi
je 0x14000a710
mov qword [rsp + 0x20], 0x19
movzx edx, byte [rbx]
mov rcx, r14
call fcn.14000d2e0
lea rdx, [0x14000d770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x20]
call fcn.14000d790
inc rbx
cmp rbx, rsi
jne 0x14000a6e3
cmp r15, 0xf
jbe 0x14000a747
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000a73f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000addc
mov rcx, rdi
call fcn.140010a98
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14000dd80
lea rcx, [rbp - 0x30]
mov rdi, qword [rbp - 0x30]
mov rsi, qword [rbp - 0x18]
cmp rsi, 0xf
cmova rcx, rdi
mov rbx, qword [rbp - 0x20]
cmp rbx, 1
jne 0x14000a788
mov r8, rbx
lea rdx, [0x140015c44]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000a7ad
lea rcx, [rbp - 0x30]
cmp rsi, 0xf
cmova rcx, rdi
cmp rbx, 1
jne 0x14000a7b7
mov r8, rbx
lea rdx, [0x140015c48]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000a7b7
call fcn.140005ef0
jmp 0x14000adfe
lea rcx, [0x1400142f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140003400
lea rdx, str._n____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0x1f
lea rdx, str.Waiting_for_Roblox_webclient...
lea rcx, [rsp + 0x30]
call fcn.14000e670
mov dword [rsp + 0x50], 0x19
lea rsi, [rsp + 0x30]
mov r15, qword [rsp + 0x30]
mov r13, qword [rsp + 0x48]
cmp r13, 0xf
cmova rsi, r15
lea r14, [rsp + 0x30]
cmova r14, r15
add r14, qword [rsp + 0x40]
mov qword [rsp + 0x28], r14
movabs rdi, 0x7ffffffffe8287bf
movabs rbx, 0x7fffffffffffffff
cmp rsi, r14
je 0x14000a9ed
movabs r13, 0x4e94914f0000
movabs r15, 0xb2f4fc0794908cf3
movzx edx, byte [rsi]
mov rcx, r12
call fcn.14000d2e0
lea rdx, [0x14000d770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x20]
call fcn.140001c90
mov rax, qword [rsp + 0x20]
cmp rax, rdi
lea rdi, [rax + 0x17d7840]
jl 0x14000a8d9
mov rdi, rbx
movabs r14, 0x431bde82d7b634db
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rbx, 0x989680
jne 0x14000a904
imul rax, rcx, 0x64
jmp 0x14000a973
cmp rbx, 0x16e3600
jne 0x14000a958
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14000a973
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x14000a9c1
mov rcx, rdi
sub rcx, rax
cmp rcx, r13
jl 0x14000a992
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a8e3
mov rax, r14
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a9b5
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a8e3
inc rsi
cmp rsi, qword [rsp + 0x28]
movabs rbx, 0x7fffffffffffffff
movabs rdi, 0x7ffffffffe8287bf
jne 0x14000a8a0
mov r15, qword [rsp + 0x30]
mov r13, qword [rsp + 0x48]
cmp r13, 0xf
jbe 0x14000aa24
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000aa1c
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000addc
mov rcx, r15
call fcn.140010a98
lea rsi, str.RobloxPlayerBeta.exe
nop dword [rax + rax]
xor dil, dil
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14000aac3
mov dword [rbp + 0x30], 0x238
lea rdx, [rbp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14000aab1
lea rdx, [rbp + 0x5c]
lea rcx, [rbp - 0x10]
call fcn.14000c440
lea r8, [rbp - 0x10]
mov r9, qword [rbp - 0x10]
mov r10, qword [rbp + 8]
cmp r10, 7
cmova r8, r9
cmp qword [rbp], 0x14
jne 0x14000aade
mov edx, 0x14
mov rax, rsi
sub r8, rsi
movzx ecx, word [rax + r8]
cmp cx, word [rax]
jne 0x14000aade
add rax, 2
sub rdx, 1
jne 0x14000aa94
mov dil, 1
cmp r10, 7
ja 0x14000ab30
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test dil, dil
jne 0x14000ab6e
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x3e7
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000aa30
cmp r10, 7
jbe 0x14000ab19
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000ab11
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000acd5
mov rcx, r9
call fcn.140010a98
lea rdx, [rbp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x14000aa61
jmp 0x14000aab1
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000ab5d
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000acd5
mov rcx, r9
call fcn.140010a98
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x1400142f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140003400
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, 0x4b
lea rdx, str.Roblox_was_found_waiting_a_few_seconds_to_make_sure_the_DataModel_is_loaded
lea rcx, [rsp + 0x58]
call fcn.14000e670
mov dword [rsp + 0x78], 0x19
lea rsi, [rsp + 0x58]
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0x70]
cmp r13, 0xf
cmova rsi, r14
lea r15, [rsp + 0x58]
cmova r15, r14
add r15, qword [rsp + 0x68]
mov qword [rsp + 0x20], r15
cmp rsi, r15
je 0x14000adb1
movabs r13, 0x4e94914f0000
movabs r14, 0xb2f4fc0794908cf3
nop dword [rax]
movzx edx, byte [rsi]
mov rcx, r12
call fcn.14000d2e0
lea rdx, [0x14000d770]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x28]
call fcn.140001c90
mov rax, qword [rsp + 0x28]
movabs rcx, 0x7ffffffffe8287bf
cmp rax, rcx
lea rdi, [rax + 0x17d7840]
jl 0x14000acaa
movabs rdi, 0x7fffffffffffffff
movabs r15, 0x431bde82d7b634db
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rbx, 0x989680
jne 0x14000acdc
imul rax, rcx, 0x64
jmp 0x14000ad4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp rbx, 0x16e3600
jne 0x14000ad30
mov rax, r14
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r14
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14000ad4b
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x14000ad99
mov rcx, rdi
sub rcx, rax
cmp rcx, r13
jl 0x14000ad6a
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000acb4
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000ad8d
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000acb4
inc rsi
cmp rsi, qword [rsp + 0x20]
jne 0x14000ac60
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0x70]
cmp r13, 0xf
jbe 0x14000adeb
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000ade3
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ade3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140010a98
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [rbp - 0x30]
mov rsi, qword [rbp - 0x18]
call fcn.140009000
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
cmp rsi, 0xf
jbe 0x14000ae49
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000ae41
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ae41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140010a98
xor eax, eax
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.140010290
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret