Function at 0x14004be80
Capabilities:
Query environment variable
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x350
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400b8ae0
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_setsockopt]
movdqu xmmword [rbp + 0x38], xmm0
movups xmm0, xmmword [str.C:WindowsCapcom.sys]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400d9238]
mov dword [rax + 0x10], ecx
movzx ecx, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], sil
lea rcx, [rbp + 0x28]
call fcn.14004bd10
test al, al
je 0x14004bf45
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Dumping_Driver_Detected___Please_uninstall_it_first_or_Contact_King_Cheats
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400b8ae0
mov rdx, rax
mov qword [rbp - 0x18], rax
movdqa xmm0, xmmword [0x1400da840]
movdqu xmmword [rbp - 8], xmm0
movups xmm0, xmmword [str.C:WindowsKsDumperDriver.sys]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d92a0]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400d92a8]
mov dword [rax + 0x18], ecx
movzx eax, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], 0
lea rcx, [rbp - 0x18]
call fcn.14004bd10
test al, al
je 0x14004bfcb
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Dumping_Driver_Detected___Please_uninstall_it_first_or_Contact_King_Cheats
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400b8ae0
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_setsockopt]
movdqu xmmword [rbp - 0x28], xmm0
movups xmm0, xmmword [str.C:WindowsCapcom.sys]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400d9238]
mov dword [rax + 0x10], ecx
movzx ecx, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea rcx, [rbp - 0x38]
call fcn.14004bd10
test al, al
je 0x14004c02c
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400b8ae0
mov rdx, rax
mov qword [rbp - 0x58], rax
movdqa xmm0, xmmword [0x1400da840]
movdqu xmmword [rbp - 0x48], xmm0
movups xmm0, xmmword [str.C:WindowsKsDumperDriver.sys]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d92a0]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400d92a8]
mov dword [rax + 0x18], ecx
movzx eax, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], 0
lea rcx, [rbp - 0x58]
call fcn.14004bd10
test al, al
je 0x14004c09d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.username
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004c0d0
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140045a90
nop
lea r8, [rsp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.1400547b0
nop
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.AppDataLocaldnSpy
mov rcx, rax
call fcn.140045ed0
movups xmm12, xmmword [rax]
movups xmmword [rbp + 0x180], xmm12
movups xmm8, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm8
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14004c175
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c170
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c170
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqa xmm6, xmmword [0x1400da820]
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14004c1c8
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c1c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c1c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14004c1f0
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140045a90
nop
lea r8, [rsp + 0x40]
lea rcx, [rbp + 8]
call fcn.1400547b0
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.AppDataRoamingdnSpy
mov rcx, rax
call fcn.140045ed0
movups xmm11, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm11
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm7
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x14004c290
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c28b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c28b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rbp + 0x18], xmm6
mov byte [rbp + 8], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14004c2d9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c2d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c2d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14004c300
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140045a90
nop
lea r8, [rsp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.1400547b0
nop
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.AppDataLocalHex_Rays
mov rcx, rax
call fcn.140045ed0
movups xmm10, xmmword [rax]
movups xmmword [rbp + 0x1c0], xmm10
movups xmm9, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1d0], xmm9
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14004c3a5
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c3a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c3a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14004c3f0
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c3eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c3eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov ecx, Ordinal_50
call fcn.1400b8ae0
mov qword [rbp + 0x70], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_33]
movdqu xmmword [rbp + 0x80], xmm0
movups xmm0, xmmword [str.C:Program_FilesCheat_Engine_7.5]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400d9328]
movups xmmword [rax + 0x10], xmm1
movzx ecx, byte [0x1400d9338]
mov byte [rax + 0x20], cl
mov byte [rax + 0x21], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov ecx, Ordinal_50
call fcn.1400b8ae0
mov r13, rax
mov qword [rbp + 0xc0], rax
movdqa xmm0, xmmword [0x1400da880]
movdqu xmmword [rbp + 0xd0], xmm0
movups xmm0, xmmword [str.C:Program_Files__x86_Cheat_Engine_7.5]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400d9350]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400d9360]
mov dword [rax + 0x20], ecx
movzx eax, word [0x1400d9364]
mov word [r13 + 0x24], ax
movzx eax, byte [0x1400d9366]
mov byte [r13 + 0x26], al
mov byte [r13 + 0x27], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov ecx, Ordinal_50
call fcn.1400b8ae0
mov qword [rbp + 0x98], rax
movdqa xmm0, xmmword [0x1400da860]
movdqu xmmword [rbp + 0xa8], xmm0
movups xmm0, xmmword [str.C:Program_FilesIDA_Freeware8.3]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400d9378]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x1400d9388]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400b8ae0
mov rdx, rax
mov qword [rsp + 0x60], rax
movdqa xmm0, xmmword [0x1400da840]
movdqu xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [str.C:Program_FilesIDA_Pro8.3]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d93a0]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400d93a8]
mov dword [rax + 0x18], ecx
movzx eax, byte [0x1400d93ac]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov ecx, Ordinal_50
call fcn.1400b8ae0
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_33]
movdqu xmmword [rbp + 0x58], xmm0
movups xmm0, xmmword [str.C:Program_FilesCheat_Engine_7.4]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400d93c0]
movups xmmword [rax + 0x10], xmm1
movzx ecx, byte [0x1400d93d0]
mov byte [rax + 0x20], cl
mov byte [rax + 0x21], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov ecx, Ordinal_50
call fcn.1400b8ae0
mov r12, rax
mov qword [rbp + 0xe0], rax
movdqa xmm0, xmmword [0x1400da880]
movdqu xmmword [rbp + 0xf0], xmm0
movups xmm0, xmmword [str.C:Program_Files__x86_Cheat_Engine_7.4]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400d93e8]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400d93f8]
mov dword [rax + 0x20], ecx
movzx eax, word [0x1400d93fc]
mov word [r12 + 0x24], ax
movzx eax, byte [0x1400d93fe]
mov byte [r12 + 0x26], al
mov byte [r12 + 0x27], 0
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400b8ae0
mov rdx, rax
mov qword [rbp + 8], rax
movdqa xmm0, xmmword [0x1400da840]
movdqu xmmword [rbp + 0x18], xmm0
movups xmm0, xmmword [str.C:Program_FilesCheat_Engine]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d9410]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400d9418]
mov dword [rax + 0x18], ecx
movzx eax, byte [0x1400d941c]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov ecx, Ordinal_50
call fcn.1400b8ae0
mov rdx, rax
mov qword [rbp - 0x80], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_35]
movdqu xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [str.C:Program_Files__x86_Cheat_Engine]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400d9430]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x1400d9440]
mov word [rax + 0x20], cx
movzx eax, byte [0x1400d9442]
mov byte [rdx + 0x22], al
mov byte [rdx + 0x23], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov ecx, 0x50
call fcn.1400b8ae0
mov rbx, rax
mov qword [rbp + 0x100], rax
movdqa xmm0, xmmword [0x1400da8a0]
movdqu xmmword [rbp + 0x110], xmm0
movaps xmm0, xmmword [str.C:ProgramDataMicrosoftWindowsStart_MenuProgramsCheat_Engine_7.5]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1400d9460]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400d9470]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400d9480]
movups xmmword [rax + 0x30], xmm1
mov eax, dword [0x1400d9490]
mov dword [rbx + 0x40], eax
movzx eax, byte [0x1400d9494]
mov byte [rbx + 0x44], al
mov byte [rbx + 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov ecx, 0x50
call fcn.1400b8ae0
mov rsi, rax
mov qword [rbp + 0x120], rax
movdqa xmm0, xmmword [0x1400da8a0]
movdqu xmmword [rbp + 0x130], xmm0
movaps xmm0, xmmword [str.C:ProgramDataMicrosoftWindowsStart_MenuProgramsCheat_Engine_7.4]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1400d94b0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400d94c0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400d94d0]
movups xmmword [rax + 0x30], xmm1
mov eax, dword [0x1400d94e0]
mov dword [rsi + 0x40], eax
movzx eax, byte [0x1400d94e4]
mov byte [rsi + 0x44], al
mov byte [rsi + 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov ecx, 0x50
call fcn.1400b8ae0
mov r14, rax
mov qword [rbp + 0x140], rax
movdqa xmm0, xmmword [0x1400da8a0]
movdqu xmmword [rbp + 0x150], xmm0
movaps xmm0, xmmword [str.C:ProgramDataMicrosoftWindowsStart_MenuProgramsCheat_Engine_7.3]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1400d9500]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400d9510]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400d9520]
movups xmmword [rax + 0x30], xmm1
mov eax, dword [0x1400d9530]
mov dword [r14 + 0x40], eax
movzx eax, byte [0x1400d9534]
mov byte [r14 + 0x44], al
mov byte [r14 + 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov ecx, 0x50
call fcn.1400b8ae0
mov r15, rax
mov qword [rbp + 0x160], rax
movdqa xmm0, xmmword [0x1400da890]
movdqu xmmword [rbp + 0x170], xmm0
movaps xmm0, xmmword [str.C:ProgramDataMicrosoftWindowsStart_MenuProgramsCheat_Engine]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1400d9550]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400d9560]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400d9570]
movups xmmword [rax + 0x30], xmm1
movzx eax, byte [0x1400d9580]
mov byte [r15 + 0x40], al
mov byte [r15 + 0x41], 0
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x20], rax
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14004c880
mov qword [rsp + 0x28], rdi
call fcn.1400b8298
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.14004b240
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
call fcn.1400b8754
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x14004cc30
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14004c91b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c915
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c915
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
nop
mov edx, 0x50
mov rcx, r15
call fcn.1400b8e2c
nop
mov edx, 0x50
mov rcx, r14
call fcn.1400b8e2c
nop
mov edx, 0x50
mov rcx, rsi
call fcn.1400b8e2c
nop
mov edx, 0x50
mov rcx, rbx
call fcn.1400b8e2c
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14004c991
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c98c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c98c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, qword [rbp + 8]
call fcn.1400b8e2c
nop
mov edx, Ordinal_50
mov rcx, r12
call fcn.1400b8e2c
nop
mov edx, Ordinal_50
mov rcx, qword [rbp + 0x48]
call fcn.1400b8e2c
nop
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, qword [rsp + 0x60]
call fcn.1400b8e2c
nop
mov edx, Ordinal_50
mov rcx, qword [rbp + 0x98]
call fcn.1400b8e2c
nop
mov edx, Ordinal_50
mov rcx, r13
call fcn.1400b8e2c
nop
mov edx, Ordinal_50
mov rcx, qword [rbp + 0x70]
call fcn.1400b8e2c
nop
psrldq xmm9, 8
movq rdx, xmm9
cmp rdx, 0xf
jbe 0x14004ca4c
inc rdx
movq rcx, xmm10
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ca46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ca46
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
nop
psrldq xmm7, 8
movq rdx, xmm7
cmp rdx, 0xf
jbe 0x14004ca92
inc rdx
movq rcx, xmm11
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ca8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ca8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
nop
psrldq xmm8, 8
movq rdx, xmm8
cmp rdx, 0xf
jbe 0x14004cad9
inc rdx
movq rcx, xmm12
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cad3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cad3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14004cb17
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cb12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cb12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rbp - 0x48], xmm6
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x14004cb5e
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cb59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cb59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rbp - 0x28], xmm6
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14004cba5
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cba0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cba0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
movdqu xmmword [rbp - 8], xmm6
mov byte [rbp - 0x18], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x14004cbec
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cbe7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cbe7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8e2c
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
shr rdx, 0x20
lea r8, [rsp + 0x40]
call fcn.14004bc40
int3