Function at 0x140256900
Capabilities:
Hook routines via microsoft detours

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x38]
mov rcx, qword [rsp + 0x60]
call fcn.140256e60
mov qword [rsp + 0x30], 0
cmp qword [0x140476768], 0
jne 0x140256948
cmp qword [0x140476760], 0
je 0x140256948
mov rax, qword [0x140476760]
mov qword [0x140476768], rax
cmp qword [0x140476768], 0
je 0x1402569ee
mov rax, qword [0x140476768]
cmp qword [rax + 0x10], 0
je 0x1402569ee
mov rax, qword [0x140476768]
mov rcx, qword [rsp + 0x38]
cmp qword [rax + 0x10], rcx
jb 0x1402569ee
mov rax, qword [0x140476768]
mov rcx, qword [rsp + 0x40]
cmp qword [rax + 0x10], rcx
ja 0x1402569ee
mov rax, qword [0x140476768]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x38]
cmp qword [rsp + 0x30], rax
jb 0x1402569b4
mov rax, qword [rsp + 0x40]
cmp qword [rsp + 0x30], rax
jbe 0x1402569bb
xor eax, eax
jmp 0x140256c5d
mov rax, qword [0x140476768]
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0x48]
mov qword [rax + 0x10], rcx
mov r8d, 0x60
mov edx, 0xcc
mov rcx, qword [rsp + 0x30]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x30]
jmp 0x140256c5d
mov rax, qword [0x140476760]
mov qword [0x140476768], rax
jmp 0x140256a10
mov rax, qword [0x140476768]
mov rax, qword [rax + 8]
mov qword [0x140476768], rax
cmp qword [0x140476768], 0
je 0x140256a5d
cmp qword [0x140476768], 0
je 0x140256a5b
mov rax, qword [0x140476768]
cmp qword [rax + 0x10], 0
je 0x140256a5b
mov rax, qword [0x140476768]
mov rcx, qword [rsp + 0x38]
cmp qword [rax + 0x10], rcx
jb 0x140256a5b
mov rax, qword [0x140476768]
mov rcx, qword [rsp + 0x40]
cmp qword [rax + 0x10], rcx
ja 0x140256a5b
jmp 0x14025698c
jmp 0x1402569fe
mov rcx, qword [rsp + 0x60]
call fcn.1402589b0
and eax, 0xffff
mov eax, eax
mov rcx, qword [rsp + 0x60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x28], 0
cmp qword [rsp + 0x28], 0
jne 0x140256ab7
cmp qword [rsp + 0x60], 0x40000000
jbe 0x140256ab7
mov rax, qword [rsp + 0x60]
sub rax, 0x40000000
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.140256650
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x140256aed
movabs rax, 0xffffffff40000000
cmp qword [rsp + 0x60], rax
jae 0x140256aed
mov rax, qword [rsp + 0x60]
add rax, 0x40000000
mov rdx, qword [rsp + 0x40]
mov rcx, rax
call fcn.140256760
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x140256b1d
cmp qword [rsp + 0x60], 0x40000000
jbe 0x140256b1d
mov rax, qword [rsp + 0x60]
sub rax, 0x40000000
mov rdx, qword [rsp + 0x60]
mov rcx, rax
call fcn.140256760
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x140256b53
movabs rax, 0xffffffff40000000
cmp qword [rsp + 0x60], rax
jae 0x140256b53
mov rax, qword [rsp + 0x60]
add rax, 0x40000000
mov rdx, rax
mov rcx, qword [rsp + 0x60]
call fcn.140256650
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x140256b6f
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
call fcn.140256650
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x140256b8b
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x60]
call fcn.140256760
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
je 0x140256c5b
mov rax, qword [rsp + 0x28]
mov qword [0x140476768], rax
mov rax, qword [0x140476768]
mov dword [rax], 0x52727464
mov rax, qword [0x140476768]
mov qword [rax + 0x10], 0
mov rax, qword [0x140476768]
mov rcx, qword [0x140476760]
mov qword [rax + 8], rcx
mov rax, qword [0x140476768]
mov qword [0x140476760], rax
mov qword [rsp + 0x48], 0
mov rax, qword [0x140476768]
add rax, 0x60
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x20], 0x2a8
jmp 0x140256c0c
mov eax, dword [rsp + 0x20]
dec eax
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 1
jle 0x140256c46
movsxd rax, dword [rsp + 0x20]
imul rax, rax, 0x60
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x48]
mov qword [rcx + rax + 0x48], rdx
movsxd rax, dword [rsp + 0x20]
imul rax, rax, 0x60
mov rcx, qword [rsp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x48], rax
jmp 0x140256c02
mov rax, qword [0x140476768]
mov rcx, qword [rsp + 0x48]
mov qword [rax + 0x10], rcx
jmp 0x14025698c
xor eax, eax
add rsp, 0x58
ret