Function at 0x14000c570
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
mov rax, qword [0x1400b6040]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
xor r13d, r13d
call fcn.14000b5f0
lea rcx, [rbp + 0x280]
call fcn.14000b400
nop
movdqa xmm0, xmmword [0x1400a4ac0]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4b20]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400a45e0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4b00]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4aa0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4af0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4c70]
movdqa xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x7c5c1c57
mov dword [rbp - 0x4c], 0x4e4c7a4e
mov word [rbp - 0x48], 0x6f4a
mov byte [rbp - 0x46], r13b
mov ecx, r13d
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
add rcx, 0xb
cmp rcx, 0x79
jb 0x14000c640
mov byte [rbp - 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], r13
mov qword [rbp + 0x1b0], r13
lea rax, [rsp + 0x41]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c6e0
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x198]
call fcn.140004a30
nop
movdqa xmm0, xmmword [0x1400a4b70]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4b40]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400a45d0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4b80]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4d30]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4bb0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4b30]
movdqa xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x6d52500a
mov dword [rbp - 0x4c], 0x51125774
mov word [rbp - 0x48], 0x796d
mov byte [rbp - 0x46], 0
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
add rcx, 0xb
cmp rcx, 0x79
jb 0x14000c780
mov byte [rbp - 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r13
mov qword [rbp + 0x278], r13
lea rax, [rsp + 0x41]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000c811
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x260]
call fcn.140004a30
nop
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
mov qword [rbp + 0x130], r13
lea rdi, str.bad_cast
lea r14, [0x1400987d0]
sub rdi, r14
je 0x14000c881
mov rdx, rdi
lea rcx, [rbp + 0x120]
call fcn.140012580
mov rbx, qword [rbp + 0x120]
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0x128]
cmp qword [rbp + 0x120], rax
jne 0x14000ca7a
movdqa xmm0, xmmword [0x1400a4690]
movdqa xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x1400a4660]
movdqa xmmword [rbp + 0x200], xmm1
movdqa xmm0, xmmword [0x1400a4740]
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmm1, xmmword [0x1400a46a0]
movdqa xmmword [rbp + 0x220], xmm1
mov dword [rbp + 0x230], 0x3b21376e
mov dword [rbp + 0x234], 0x71e6e3c
mov word [rbp + 0x238], 0x600a
mov byte [rbp + 0x23a], 0
mov rcx, r13
nop dword [rax]
movzx eax, byte [rbp + 0x1f0]
xor byte [rbp + rcx + 0x1f1], al
inc rcx
cmp rcx, 0x49
jb 0x14000c900
mov byte [rbp + 0x23a], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
lea rax, [rbp + 0x1f1]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000c940
lea rdx, [rbp + 0x1f1]
lea rcx, [rbp + 0xb8]
call fcn.140004a30
nop
lea rcx, [rbp + 0xb8]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x14000c9af
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c9aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c9aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4be0]
movdqu xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x1400a4640]
movdqu xmmword [rbp + 0x200], xmm1
mov dword [rbp + 0x210], 0x657a6973
mov word [rbp + 0x214], 0x2e
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], r13
mov qword [rbp + 0x1d8], r13
lea rax, [rbp + 0x1f1]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000ca04
lea rdx, [rbp + 0x1f1]
lea rcx, [rbp + 0x1c0]
call fcn.140004a30
nop
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x198]
call fcn.14000b970
nop
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0xf
jbe 0x14000ca7a
inc rdx
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ca75
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rax
movdqu xmmword [rbp + 0x1c0], xmm0
mov rax, r13
mov qword [rbp + 0x1d0], rax
mov rdx, qword [rbp + 0x128]
sub rdx, qword [rbp + 0x120]
je 0x14000cb05
lea rcx, [rbp + 0x1c0]
call fcn.140012580
mov rdi, qword [rbp + 0x1c0]
mov rbx, qword [rbp + 0x120]
mov r14, qword [rbp + 0x128]
mov r8, r14
sub r8, rbx
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sub r14, rbx
add r14, rdi
mov rax, qword [rbp + 0x1d0]
jmp 0x14000cb0c
mov r14, qword [rbp + 0x1c8]
mov qword [rbp + 0x1d0], r13
mov qword [rbp + 0x1c8], r13
mov rcx, qword [rbp + 0x1c0]
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x140], rcx
mov qword [rbp + 0x148], r14
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x178], r13
mov qword [rbp + 0x180], r13
mov qword [rbp + 0x170], rcx
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp + 0x178], rcx
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp + 0x180], rcx
call fcn.14000b1d0
test al, al
jne 0x14000cd8c
movdqa xmm0, xmmword [0x1400a46f0]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400a46e0]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4830]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4d40]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4bf0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4c80]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [str.cu0s]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4c20]
movdqa xmmword [rbp - 0x50], xmm1
mov dword [rbp - 0x40], 0x3062657f
mov dword [rbp - 0x3c], 0x3e545940
mov word [rbp - 0x38], 0x3e
mov rcx, r13
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
add rcx, 2
cmp rcx, 0x88
jb 0x14000cc20
mov byte [rbp - 0x37], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
lea rax, [rsp + 0x41]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000cc63
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0xb8]
call fcn.140004a30
nop
lea rcx, [rbp + 0xb8]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x14000ccd0
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cccb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cccb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4c90]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0x6f6c206f
mov dword [rbp + 0xcc], 0x2e6461
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], r13
lea rax, [rbp + 0xb9]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000cd16
lea rdx, [rbp + 0xb9]
lea rcx, [rbp + 0x100]
call fcn.140004a30
nop
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x198]
call fcn.14000b970
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000cd8c
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cd87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cd87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
lea rcx, [rbp + 0x190]
call fcn.140005ed0
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_horizon::roblox::init_void_::_2::_lambda_7___unsigned_long_long_unsigned___int64___char_const____ptr64__char_const____ptr64_.0
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x50]
mov qword [rbp + 0x88], rax
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x140]
call fcn.140005200
mov r9, qword [rbp + 0x158]
mov rdi, qword [rbp + 0x160]
cmp r9, rdi
je 0x14000cddb
mov rdi, r9
mov qword [rbp + 0x160], r9
mov r8, qword [rbp + 0x178]
mov ebx, dword [r8 + 0x50]
mov rcx, rdi
sub rcx, r9
cmp rbx, rcx
jae 0x14000cdf7
lea rax, [rbx + r9]
jmp 0x14000ce49
jbe 0x14000ce50
mov rax, qword [rbp + 0x168]
sub rax, r9
cmp rbx, rax
jbe 0x14000ce27
mov rdx, rbx
lea rcx, [rbp + 0x158]
call fcn.1400053f0
mov r8, qword [rbp + 0x178]
mov r9, qword [rbp + 0x158]
jmp 0x14000ce50
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
lea rax, [rbx + rdi]
mov r8, qword [rbp + 0x178]
mov r9, qword [rbp + 0x158]
mov qword [rbp + 0x160], rax
mov eax, dword [r8 + 0x54]
test eax, eax
je 0x14000ce78
mov r8d, eax
mov rdx, qword [rbp + 0x140]
mov rcx, r9
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rbp + 0x178]
mov r9, qword [rbp + 0x158]
mov rbx, r13
cmp r13w, word [r8 + 6]
jae 0x14000ceda
mov rdi, r13
nop word [rax + rax]
mov rdx, qword [rbp + 0x180]
mov ecx, dword [rdx + rdi + 0xc]
add rcx, r9
mov r10d, dword [rdx + rdi + 0x10]
mov edx, dword [rdx + rdi + 0x14]
add rdx, qword [rbp + 0x140]
test r10d, r10d
je 0x14000cec9
mov r8d, r10d
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rbp + 0x178]
mov r9, qword [rbp + 0x158]
inc rbx
add rdi, 0x28
movzx eax, word [r8 + 6]
cmp rbx, rax
jb 0x14000ce90
mov r14d, dword [r8 + 0x50]
mov r15d, 0x10
mov ebx, r15d
mov rax, qword gs:[0x58]
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x1400b90d0], eax
jle 0x14000cf34
lea rcx, [0x1400b90d0]
call fcn.14008cae0
cmp dword [0x1400b90d0], 0xffffffff
jne 0x14000cf34
xor r8d, r8d
lea rdx, [0x140093610]
call fcn.140005590
mov qword [0x1400b9098], rax
lea rcx, [0x1400b90d0]
call fcn.14008ca74
mov rdi, qword [0x1400b9098]
mov eax, dword [rbx]
cmp dword [0x1400b90b8], eax
jle 0x14000cf8a
lea rcx, [0x1400b90b8]
call fcn.14008cae0
cmp dword [0x1400b90b8], 0xffffffff
jne 0x14000cf8a
lea rcx, [0x1400935e8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b90a8], rax
lea rcx, [0x1400b90b8]
call fcn.14008ca74
mov rcx, qword [0x1400b7528]
mov rdx, rdi
call fcn.140005bd0
mov rax, qword [0x1400b90a8]
mov rdx, r14
xor ecx, ecx
call rax
mov r12, rax
mov rcx, qword [0x1400b7528]
call fcn.140005dd0
test r12, r12
jne 0x14000d2ac
movdqa xmm0, xmmword [0x1400a4c10]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4670]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4c00]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a46b0]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4730]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4710]
movdqa xmmword [rbp - 0x70], xmm1
mov dword [rbp - 0x60], 0x19693b
mov dword [rbp - 0x5c], 0x67670d
mov rcx, r13
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x60], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x61], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x62], al
add rcx, 0x22
cmp rcx, 0x66
jb 0x14000d022
mov byte [rbp - 0x59], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], r13
lea rax, [rsp + 0x41]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000d180
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x50]
call fcn.140004a30
nop
lea rcx, [rbp + 0x50]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14000d1e1
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d1dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d1dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4ca0]
movdqu xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x1400a46d0]
movdqu xmmword [rbp + 0x60], xmm1
mov byte [rbp + 0x70], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
lea rax, [rbp + 0x51]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000d220
lea rdx, [rbp + 0x51]
lea rcx, [rbp + 0xb8]
call fcn.140004a30
nop
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x198]
call fcn.14000b970
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x14000d293
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d28e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d28e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], 0
mov rax, qword [rbp + 0x178]
test byte [rax + 0x16], 1
jne 0x14000d3bb
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov r15, rax
mov r8d, 5
lea r9, [rbp + 0x138]
mov dl, 1
mov rcx, rax
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov rbx, rax
mov rdi, r12
sub rdi, qword [r15 + 0x30]
je case.0x14000d368.5
mov eax, dword [rbp + 0x138]
test eax, eax
je case.0x14000d368.5
lea r14, [rbx + rax]
cmp rbx, r14
jae case.0x14000d368.5
xor r9d, r9d
mov r8d, dword [rbx]
mov rdx, qword [rbp + 0x158]
mov rcx, r15
call qword [sym.imp.dbghelp.dll_ImageRvaToVa]
mov r9, rax
mov r8d, dword [rbx + 4]
sub r8d, 8
shr r8d, 1
lea rbx, [rbx + 8]
mov r10d, r13d
je 0x14000d3a5
lea r11, [0x140000000]
nop dword [rax]
nop dword [rax + rax]
movzx edx, word [rbx]
mov ecx, edx
shr ecx, 0xc
cmp ecx, 0xa
ja case.0x14000d368.5
mov ecx, dword [r11 + rcx*4 + 0xf2b4]
add rcx, r11
jmp rcx
and edx, 0xfff
add rdx, r9
mov rax, rdi
shr rax, 0x10
add word [rdx], ax
jmp case.0x14000d368.0
and edx, 0xfff
add rdx, r9
add word [rdx], di
jmp case.0x14000d368.0
and edx, 0xfff
add rdx, r9
add qword [rdx], rdi
inc r10d
add rbx, 2
cmp r10d, r8d
jb 0x14000d350
cmp rbx, r14
jb 0x14000d310
mov rax, qword [rbp + 0x178]
mov r15d, 0x10
mov edi, dword [rax + 0x50]
mov r14, qword [rbp + 0x158]
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, r15d
mov ecx, dword [rax + rbx]
cmp dword [0x1400b90bc], ecx
jle 0x14000d416
lea rcx, [0x1400b90bc]
call fcn.14008cae0
cmp dword [0x1400b90bc], 0xffffffff
jne 0x14000d416
xor r8d, r8d
lea rdx, str.RtlCopyMemory
call fcn.140005590
mov qword [0x1400b90c8], rax
lea rcx, [0x1400b90bc]
call fcn.14008ca74
mov qword [rsp + 0x20], rdi
mov r9, r14
mov r8, r12
call fcn.140007020
mov rax, qword [rbp + 0x178]
mov edi, dword [rax + 0x28]
add rdi, r12
mov r14d, dword [rax + 0x50]
mov eax, r15d
mov ecx, dword [rax + rbx]
cmp dword [0x1400b918c], ecx
jle 0x14000d48a
lea rcx, [0x1400b918c]
call fcn.14008cae0
cmp dword [0x1400b918c], 0xffffffff
jne 0x14000d48a
lea rcx, [0x1400935e8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b9150], rax
lea rcx, [0x1400b918c]
call fcn.14008ca74
mov rcx, qword [0x1400b7528]
mov rdx, rdi
call fcn.140005bd0
mov rdx, r14
mov rcx, r12
call qword [0x1400b9150]
mov rcx, qword [0x1400b7528]
call fcn.140005dd0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x178]
mov r14d, dword [rax + 0x54]
mov eax, r15d
mov ecx, dword [rax + rbx]
cmp dword [0x1400b90a0], ecx
jle 0x14000d517
lea rcx, [0x1400b90a0]
call fcn.14008cae0
cmp dword [0x1400b90a0], 0xffffffff
jne 0x14000d517
xor r8d, r8d
lea rdx, str.RtlZeroMemory
call fcn.140005590
mov qword [0x1400b9088], rax
lea rcx, [0x1400b90a0]
call fcn.14008ca74
mov rdi, qword [0x1400b9088]
mov eax, r15d
mov r8d, dword [rax + rbx]
cmp dword [0x1400b9130], r8d
jle 0x14000d573
lea rcx, [0x1400b9130]
call fcn.14008cae0
cmp dword [0x1400b9130], 0xffffffff
jne 0x14000d573
lea rcx, [0x1400935e8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b9090], rax
lea rcx, [0x1400b9130]
call fcn.14008ca74
mov rcx, qword [0x1400b7528]
mov rdx, rdi
call fcn.140005bd0
mov rdx, r14
mov rcx, r12
call qword [0x1400b9090]
mov rcx, qword [0x1400b7528]
call fcn.140005dd0
mov rcx, qword [0x1400b7530]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x14000d5b8
call fcn.14000ad60
test al, al
je 0x14000d5b8
mov al, 1
jmp 0x14000d5ba
xor al, al
test al, al
jne 0x14000d763
movdqa xmm0, xmmword [0x1400a4ae0]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400a45f0]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400a45a0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a45b0]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4610]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4600]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a45c0]
movdqa xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x34441611
mov dword [rbp - 0x4c], 0x6e4a202d
mov byte [rbp - 0x48], al
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x51], al
add rcx, 0x11
cmp rcx, 0x77
jb 0x14000d640
mov byte [rbp - 0x48], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], r13
lea rax, [rsp + 0x41]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d702
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x50]
call fcn.140004a30
nop
lea rcx, [rbp + 0x50]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14000d763
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d75e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d75e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..IoControl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1400b7540], rax
test rax, rax
je 0x14000d7af
cmp rax, 0xffffffffffffffff
jne 0x14000d908
lea rdx, [rbp + 0x2a0]
call fcn.14000f2e0
mov rdx, r13
nop
movzx ecx, byte [rax + rdx + 1]
xor cl, byte [rax]
mov byte [rax + rdx + 1], cl
inc rdx
cmp rdx, 0x9d
jb 0x14000d7c0
mov byte [rax + 0x9e], 0
lea rdx, [rax + 1]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r13
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x14000d7f4
lea rcx, [rbp + 0x10]
call fcn.140004a30
nop
lea rcx, [rbp + 0x10]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14000d850
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d84b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d84b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4c40]
movdqu xmmword [rbp + 0xb8], xmm0
mov word [rbp + 0xc8], 0x2e64
mov byte [rbp + 0xca], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
lea rax, [rbp + 0xb9]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d892
lea rdx, [rbp + 0xb9]
lea rcx, [rbp + 0xd8]
call fcn.140004a30
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x198]
call fcn.14000b970
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x14000d908
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d903
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d903
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4cd0]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0x78652e61
mov word [rbp + 0xcc], 0x65
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0x2a0], 0x130
lea rdx, [rbp + 0x2a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000d990
nop word [rax + rax]
lea rdx, [rbp + 0xb9]
lea rcx, [rbp + 0x2cc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x14000daab
lea rdx, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14000d960
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r13d
mov dword [0x1400b7548], eax
test eax, eax
jne 0x14000dd79
movdqa xmm0, xmmword [0x1400a4c50]
movdqu xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [str.Ydigds_gjrnyIn]
movdqu xmmword [rbp + 0x200], xmm1
movdqa xmm0, xmmword [0x1400a4bd0]
movdqu xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x220], 0x2b656e7b
mov dword [rbp + 0x224], 0x67696479
mov dword [rbp + 0x228], 0x1257364
mov byte [rbp + 0x22c], al
mov rcx, r13
movzx eax, byte [rbp + 0x1f0]
xor byte [rbp + rcx + 0x1f1], al
inc rcx
cmp rcx, 0x3b
jb 0x14000da01
mov byte [rbp + 0x22c], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
lea rax, [rbp + 0x1f1]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000da41
lea rdx, [rbp + 0x1f1]
lea rcx, [rbp + 0xd8]
call fcn.140004a30
nop
lea rcx, [rbp + 0xd8]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x14000dac1
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dabc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dabc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x2a8]
jmp 0x14000d99c
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4c60]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0x786f6c62
mov word [rbp + 0xcc], 0x2e
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], r13
lea rax, [rbp + 0xb9]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000db03
mov r8, rsi
lea rdx, [rbp + 0xb9]
lea rcx, [rbp + 0x100]
call fcn.140004a30
nop
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x198]
call fcn.14000b970
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000db7b
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000db76
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x14000dbe2
mov rdx, qword [rbp + 0x168]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dbcb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dc19
call fcn.14008ca04
mov qword [rbp + 0x158], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x14000dc37
mov rdx, qword [rbp + 0x150]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dc20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r13
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14000dc8c
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dc75
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r13
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x14000dcd1
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dccb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dccb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x14000dd15
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dd10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x1a8], r13
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x14000ec13
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ec0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ec0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14000c130
lea rcx, [rax + 0x10]
call fcn.140011f90
mov rbx, rax
mov qword [rbp + 0x138], r13
mov dword [rbp + 0xa8], 0x85b3e12
mov eax, dword [0x1400b7548]
mov dword [rbp + 0xac], eax
lea rax, [rbp + 0x138]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 0x10
lea r8, [rbp + 0xa8]
mov edx, 0x2201c8
mov rcx, qword [0x1400b7540]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x138]
mov qword [0x1400b7550], rax
call fcn.14000c130
lea rcx, [rax + 0xd8]
call fcn.140011f90
call fcn.14000c130
lea rcx, [rax + 0x10]
call fcn.140011f90
lea rcx, [rax + 0x7d0]
call fcn.140011f90
lea rcx, [rax + 0x60]
call fcn.140011f90
mov qword [rbp + 0x138], rax
mov qword [0x1400b7568], rax
mov dword [rbp], 0x616c506c
mov dword [rbp + 4], 0x73726579
mov byte [rbp + 8], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
lea rax, [rbp + 1]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000de70
lea rdx, [rbp + 1]
lea rcx, [rbp + 0xd8]
call fcn.140004a30
lea r8, [rbp + 0xd8]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x138]
call fcn.14000f700
mov rcx, qword [rbp + 0x90]
test rcx, rcx
jne 0x14000e32d
movdqa xmm0, xmmword [0x1400a4b50]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4d20]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4b60]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4b10]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4ba0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4b90]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4ab0]
movdqa xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x7e0e5c5b
mov dword [rbp - 0x4c], 0x24006a67
mov byte [rbp - 0x48], cl
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x51], al
add rcx, 0x11
cmp rcx, 0x77
jb 0x14000df30
mov byte [rbp - 0x48], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
lea rax, [rsp + 0x41]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000e000
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0xd8]
call fcn.140004a30
nop
lea rcx, [rbp + 0xd8]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x14000e06d
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e068
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e068
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4620]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0x79616c70
mov dword [rbp + 0xcc], 0x2e737265
mov byte [rbp + 0xd0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], r13
lea rax, [rbp + 0xb9]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000e0b7
mov r8, rsi
lea rdx, [rbp + 0xb9]
lea rcx, [rbp + 0x100]
call fcn.140004a30
nop
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x198]
call fcn.14000b970
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000e12f
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e12a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e12a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x14000e196
mov rdx, qword [rbp + 0x168]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e17f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1cd
call fcn.14008ca04
mov qword [rbp + 0x158], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x14000e1eb
mov rdx, qword [rbp + 0x150]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e1d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e1d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r13
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14000e240
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e229
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e229
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r13
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x14000e285
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e27f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e27f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x14000e2c9
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e2c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e2c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x1a8], r13
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x14000ec13
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ec0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ec0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [0x1400b75a0], rcx
test rbx, rbx
jne 0x14000e849
movdqa xmm0, xmmword [0x1400a4700]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400a4650]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400a4cc0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400a4cb0]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4cf0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400a4680]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400a4720]
movdqa xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x2d743130
mov dword [rbp - 0x4c], 0x7426213b
mov dword [rbp - 0x48], 0x7a101d04
mov word [rbp - 0x44], 0x5e
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5f], al
add rcx, 0x1f
cmp rcx, 0x7c
jb 0x14000e3c0
mov byte [rbp - 0x43], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
lea rax, [rsp + 0x41]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000e510
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0xd8]
call fcn.140004a30
nop
lea rcx, [rbp + 0xd8]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x14000e57d
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e578
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e578
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movdqa xmm0, xmmword [0x1400a4630]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0x75736976
mov dword [rbp + 0xcc], 0x6e656c61
mov dword [rbp + 0xd0], 0x656e6967
mov word [rbp + 0xd4], 0x2e
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], r13
lea rax, [rbp + 0xb9]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000e5d3
mov r8, rsi
lea rdx, [rbp + 0xb9]
lea rcx, [rbp + 0x100]
call fcn.140004a30
nop
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x198]
call fcn.14000b970
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000e64b
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e646
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e646
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x14000e6b2
mov rdx, qword [rbp + 0x168]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e69b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e6e9
call fcn.14008ca04
mov qword [rbp + 0x158], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x14000e707
mov rdx, qword [rbp + 0x150]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e6f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r13
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14000e75c
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e745
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e745
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r13
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x14000e7a1
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e79b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e79b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x14000e7e5
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e7e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e7e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x1a8], r13
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x14000ec13
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ec0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ec0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [0x1400b75b0], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], 0xf
mov byte [rbp + 0x240], 0
add rcx, 0x100
call fcn.140011f90
lea rcx, [rax + 0x200]
call fcn.140011f90
test rax, rax
je 0x14000e95c
lea rcx, [rax + 0x48]
call fcn.140011f90
test rax, rax
je 0x14000e8b3
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.14000f530
jmp 0x14000e8fa
mov dword [rbp - 0x30], 0x3f3f3f10
mov byte [rbp - 0x2c], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
lea rax, [rbp - 0x2f]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000e8e0
lea rdx, [rbp - 0x2f]
lea rcx, [rbp + 0xd8]
call fcn.140004a30
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x14000e93e
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e939
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e939
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
movups xmm0, xmmword [rbp + 0xd8]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rbp + 0xe8]
movups xmmword [rbp + 0x250], xmm1
jmp 0x14000e9c7
mov dword [rbp - 0x30], 0x6e6f6e79
mov word [rbp - 0x2c], 0x65
lea rax, [rbp - 0x2f]
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e970
mov rax, qword [rbp + 0x258]
cmp rdi, rax
ja 0x14000e9b4
lea rbx, [rbp + 0x240]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x240]
mov qword [rbp + 0x250], rdi
mov r8, rdi
lea rdx, [rbp - 0x2f]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x14000e9c7
lea r9, [rbp - 0x2f]
mov rdx, rdi
lea rcx, [rbp + 0x240]
call fcn.140012390
call fcn.140029a90
mov rdi, rax
test rax, rax
jne 0x14000ec45
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x14000ea1c
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ea17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], 0xf
mov byte [rbp + 0x240], 0
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x14000ea83
mov rdx, qword [rbp + 0x168]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000eaba
call fcn.14008ca04
mov qword [rbp + 0x158], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x14000ead8
mov rdx, qword [rbp + 0x150]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000eac1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r13
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14000eb2d
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eb16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000eb16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r13
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x14000eb72
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eb6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000eb6c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x14000ebb6
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ebb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ebb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov qword [rbp + 0x1a8], r13
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x14000ec13
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ec0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ec0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
xor al, al
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.14008c9a0
lea r11, [rsp + 0x4e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
mov r8d, 9
lea rdx, str.Workspace
lea rcx, [rbp + 0xd8]
call fcn.140004a30
lea r8, [rbp + 0xd8]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x138]
call fcn.14000f700
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r13
mov r8d, 6
lea rdx, str.Camera
lea rcx, [rbp + 0x10]
call fcn.140004a30
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x98]
mov rcx, rbx
call fcn.14000f700
mov rax, qword [rbp + 0x98]
mov qword [0x1400b7590], rax
mov ecx, 8
call fcn.14008c9c0
lea rcx, [0x140008e40]
mov qword [rax], rcx
mov qword [rbp + 0x1e0], rax
lea rcx, [rbp + 0x1c8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140013030]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1c0], rax
test rax, rax
je 0x14000f29f
cmp dword [rbp + 0x1c8], 0
je 0x14000f293
movaps xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000f293
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1c0], xmm0
lea ecx, [rax + 8]
call fcn.14008c9c0
lea rcx, [0x140086930]
mov qword [rax], rcx
mov qword [rbp + 0x1e0], rax
lea rcx, [rbp + 0x108]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140013030]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x100], rax
test rax, rax
je 0x14000f280
cmp dword [rbp + 0x108], 0
je 0x14000f274
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000f274
movabs rax, 0x249a5775c
cmp rdi, rax
jne 0x14000ee54
lea rdx, str.Workspace
lea rcx, [rbp + 0xd8]
call fcn.1400039c0
mov r8, rax
lea rdx, [rbp - 0x10]
lea rcx, [0x1400b7568]
call fcn.14000f9c0
mov rbx, rax
lea rdx, str.Players
lea rcx, [rbp + 0x10]
call fcn.1400039c0
mov r8, rax
lea rdx, [rbp - 0x20]
mov rcx, rbx
call fcn.14000f9c0
mov rbx, rax
lea rdx, str.InBox
lea rcx, [rbp + 0x50]
call fcn.1400039c0
lea rdx, [rbp - 0x28]
mov rcx, rbx
jmp 0x14000ef8e
mov eax, 0xa6310100
cmp rdi, rax
jne 0x14000eea3
lea rdx, str.Workspace
lea rcx, [rbp + 0xd8]
call fcn.1400039c0
mov r8, rax
lea rdx, [rbp - 0x20]
lea rcx, [0x1400b7568]
call fcn.14000f9c0
lea rdx, str.Players
mov rbx, rax
lea rcx, [rbp + 0x10]
call fcn.1400039c0
lea rdx, [rbp - 0x10]
mov rcx, rbx
jmp 0x14000ef8e
movabs rax, 0x3c097f862
cmp rdi, rax
je 0x14000ee5e
movabs rax, 0x3892b0eb2
cmp rdi, rax
je 0x14000ef70
movabs rax, 0x40d50c16e
cmp rdi, rax
je 0x14000ef70
movabs rax, 0x3efd9f682
cmp rdi, rax
je 0x14000ee5e
movabs rax, 0x2e2c9baa7
cmp rdi, rax
je 0x14000ee5e
movabs rax, 0x10b3af953
cmp rdi, rax
je 0x14000ef70
mov eax, 0xc0c14df7
cmp rdi, rax
jne 0x14000ef49
lea rdx, str.Workspace
lea rcx, [rbp + 0xd8]
call fcn.1400039c0
mov r8, rax
lea rdx, [rbp - 0x20]
lea rcx, [0x1400b7568]
call fcn.14000f9c0
lea rdx, str.Characters
jmp 0x14000ee8b
movabs rax, 0x261a4f850
cmp rdi, rax
je 0x14000ef70
movabs rax, 0x14de894e2
cmp rdi, rax
je 0x14000ef17
cmp rdi, 0x110d64bd
jne 0x14000efa0
lea rdx, str.Workspace
lea rcx, [rbp + 0xd8]
call fcn.1400039c0
lea rdx, [rbp - 0x20]
lea rcx, [0x1400b7568]
mov r8, rax
call fcn.14000f9c0
mov rcx, qword [rax]
mov qword [0x1400b7588], rcx
lea rcx, [rbp + 0x1f0]
call fcn.140032670
nop
lea rdx, [rbp + 0x10]
call fcn.14000f420
mov r8, rax
lea rdx, [rax + 2]
mov r9, 0xfffffffffffffffe
sub r9, rax
nop word [rax + rax]
movzx ecx, byte [r8]
xor byte [rdx - 1], cl
movzx ecx, byte [r8]
xor byte [rdx], cl
movzx eax, byte [r8]
xor byte [rdx + 1], al
movzx eax, byte [r8]
xor byte [rdx + 2], al
movzx eax, byte [r8]
xor byte [rdx + 3], al
movzx eax, byte [r8]
xor byte [rdx + 4], al
movzx eax, byte [r8]
xor byte [rdx + 5], al
movzx eax, byte [r8]
xor byte [rdx + 6], al
movzx eax, byte [r8]
xor byte [rdx + 7], al
movzx eax, byte [r8]
xor byte [rdx + 8], al
movzx eax, byte [r8]
xor byte [rdx + 9], al
movzx eax, byte [r8]
xor byte [rdx + 0xa], al
movzx eax, byte [r8]
xor byte [rdx + 0xb], al
movzx eax, byte [r8]
xor byte [rdx + 0xc], al
movzx eax, byte [r8]
xor byte [rdx + 0xd], al
movzx eax, byte [r8]
xor byte [rdx + 0xe], al
movzx eax, byte [r8]
xor byte [rdx + 0xf], al
movzx eax, byte [r8]
xor byte [rdx + 0x10], al
movzx eax, byte [r8]
xor byte [rdx + 0x11], al
movzx eax, byte [r8]
xor byte [rdx + 0x12], al
movzx eax, byte [r8]
xor byte [rdx + 0x13], al
movzx eax, byte [r8]
xor byte [rdx + 0x14], al
movzx eax, byte [r8]
xor byte [rdx + 0x15], al
lea rcx, [r9 + rdx]
movzx eax, byte [r8]
xor byte [rcx + r8 + 0x18], al
lea rdx, [rdx + 0x18]
lea rax, [r9 + rdx]
cmp rax, 0x30
jb 0x14000efd0
mov byte [r8 + 0x31], 0
lea rdx, [r8 + 1]
lea rcx, [rbp + 0xd8]
call fcn.1400039c0
nop
lea rcx, [rbp + 0xd8]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x14000f0f6
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f0f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f0f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400a46c0]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0x6a6e4520
mov dword [rbp + 0xcc], 0xa796f
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf0], r13
lea rax, [rbp + 0xb9]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000f144
mov r8, rsi
lea rdx, [rbp + 0xb9]
lea rcx, [rbp + 0xd8]
call fcn.140004a30
nop
lea rcx, [rbp + 0xd8]
call fcn.14000bca0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x14000f1b5
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f1b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f1b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008ca04
lea rcx, [rbp + 0xa0]
call fcn.140007c20
movabs rcx, 0x7fffffff4d2fa1ff
movabs rdi, 0x7fffffffffffffff
mov rax, qword [rbp + 0xa0]
cmp rax, rcx
je 0x14000f1f6
setl cl
test cl, cl
je 0x14000f1f6
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rbp - 0x30], rcx
jmp 0x14000f1fa
mov qword [rbp - 0x30], rdi
lea rcx, [rbp - 0x30]
call fcn.1400093e0
movabs rbx, 0x7ffffffdabf41bff
movabs rsi, 0x2540be400
lea rcx, [rbp + 0x48]
call fcn.140007c20
mov rax, qword [rbp + 0x48]
cmp rax, rbx
je 0x14000f23a
setl cl
test cl, cl
je 0x14000f23a
lea rcx, [rax + rsi]
mov qword [rbp - 0x30], rcx
jmp 0x14000f23e
mov qword [rbp - 0x30], rdi
lea rcx, [rbp - 0x30]
call fcn.1400093e0
mov dword [rbp - 0x18], 0x626f5258
mov dword [rbp - 0x14], 0x786f6c
lea rdx, [rbp - 0x17]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000f217
call fcn.14000b3c0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x108], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1c8], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3