Function at 0x14001334d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x14001be00
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x858
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x17e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x878]
mov rax, qword [0x1404015c0]
xor rax, rbp
mov qword [rbp + 0x820], rax
lea rcx, [0x14040c108]
call fcn.140013faf
nop
mov rax, qword [rbp + 0x858]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rbp + 0x858]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax + 0x50]
mov dword [rbp + 0x44], eax
mov edx, 0x10
lea rcx, [rbp + 0x68]
call fcn.140013235
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov r9d, 4
mov r8d, dword [rbp + 0x44]
lea rdx, [rbp + 0x68]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013d66
nop
lea rcx, [rbp + 0x68]
call fcn.140013ec4
mov r9, rax
mov r8, qword [rbp + 0x860]
mov rdx, qword [rbp + 0x858]
mov rcx, qword [rbp + 0x850]
call fcn.140014063
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax + 0x54]
mov dword [rbp + 0x800], eax
lea rcx, [rbp + 0x68]
call fcn.140013ec4
mov qword [rbp + 0x808], rax
mov r9d, dword [rbp + 0x800]
mov r8, qword [rbp + 0x858]
mov rdx, qword [rbp + 0x808]
mov rcx, qword [rbp + 0x7f8]
call fcn.140014086
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax + 0x54]
mov qword [rbp + 0x800], rax
lea rcx, [rbp + 0x68]
call fcn.140013ec4
mov qword [rbp + 0x808], rax
mov r9d, 2
mov r8, qword [rbp + 0x800]
mov rdx, qword [rbp + 0x808]
mov rcx, qword [rbp + 0x7f8]
call fcn.14001410d
nop
mov rdx, qword [rbp + 0x28]
lea rcx, [rbp + 0xb8]
call fcn.140013fb9
nop
lea rax, [rbp + 0xb8]
mov qword [rbp + 0x98], rax
mov rcx, qword [rbp + 0x98]
call fcn.140013c1c
mov qword [rbp + 0xf8], rax
mov rcx, qword [rbp + 0x98]
call fcn.1400132df
mov qword [rbp + 0x118], rax
jmp 0x14001bfdc
mov rax, qword [rbp + 0xf8]
add rax, 8
mov qword [rbp + 0xf8], rax
mov rax, qword [rbp + 0x118]
cmp qword [rbp + 0xf8], rax
je 0x14001c189
mov rax, qword [rbp + 0xf8]
mov rax, qword [rax]
mov qword [rbp + 0x138], rax
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov rax, qword [rbp + 0x138]
mov eax, dword [rax + 0x10]
mov dword [rbp + 0x800], eax
mov rax, qword [rbp + 0x138]
mov eax, dword [rax + 0x14]
mov rcx, qword [rbp + 0x858]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x808], rax
mov rax, qword [rbp + 0x138]
mov eax, dword [rax + 0xc]
mov qword [rbp + 0x810], rax
lea rcx, [rbp + 0x68]
call fcn.140013ec4
mov rcx, qword [rbp + 0x810]
add rax, rcx
mov qword [rbp + 0x818], rax
mov r9d, dword [rbp + 0x800]
mov r8, qword [rbp + 0x808]
mov rdx, qword [rbp + 0x818]
mov rcx, qword [rbp + 0x7f8]
call fcn.140014086
nop
mov rax, qword [rbp + 0x138]
mov rcx, qword [rbp + 0x138]
mov ecx, dword [rcx + 0x10]
cmp dword [rax + 8], ecx
jbe 0x14001c184
mov rax, qword [rbp + 0x138]
mov rcx, qword [rbp + 0x138]
mov ecx, dword [rcx + 0x10]
mov eax, dword [rax + 8]
sub eax, ecx
mov dword [rbp + 0x154], eax
mov edx, 8
lea rcx, [rbp + 0x178]
call fcn.140013816
movsxd rax, dword [rbp + 0x154]
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.1400134ce
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rcx, [rbp + 0x178]
call fcn.140013f73
mov qword [rbp + 0x800], rax
mov rax, qword [rbp + 0x138]
mov eax, dword [rax + 0x10]
mov qword [rbp + 0x808], rax
mov rcx, qword [rbp + 0x138]
mov ecx, dword [rcx + 0xc]
mov qword [rbp + 0x810], rcx
lea rcx, [rbp + 0x68]
call fcn.140013ec4
mov rcx, qword [rbp + 0x810]
add rax, rcx
mov rcx, qword [rbp + 0x808]
add rax, rcx
mov qword [rbp + 0x818], rax
mov r9d, dword [rbp + 0x154]
mov r8, qword [rbp + 0x800]
mov rdx, qword [rbp + 0x818]
mov rcx, qword [rbp + 0x7f8]
call fcn.140014086
nop
lea rcx, [rbp + 0x178]
call fcn.140013690
nop
jmp 0x14001bfca
lea rcx, [rbp + 0xb8]
call fcn.140013b6d
nop
mov rcx, qword [rbp + 0x850]
call fcn.140013613
mov qword [rbp + 0x198], rax
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013c26
mov qword [rbp + 0x1b8], rax
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rdx, [0x140040b18]
lea rcx, [rbp + 0x5e8]
call fcn.14001371c
nop
lea rdx, str.Kernel32.dll
lea rcx, [rbp + 0x628]
call fcn.14001371c
nop
lea r8, [rbp + 0x5e8]
lea rdx, [rbp + 0x628]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013307
mov qword [rbp + 0x1d8], rax
lea rcx, [rbp + 0x628]
call fcn.1400132e4
nop
lea rcx, [rbp + 0x5e8]
call fcn.1400132e4
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rdx, [0x140040b38]
lea rcx, [rbp + 0x668]
call fcn.14001371c
nop
lea rdx, str.Kernel32.dll
lea rcx, [rbp + 0x6a8]
call fcn.14001371c
nop
lea r8, [rbp + 0x668]
lea rdx, [rbp + 0x6a8]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013307
mov qword [rbp + 0x1f8], rax
lea rcx, [rbp + 0x6a8]
call fcn.1400132e4
nop
lea rcx, [rbp + 0x668]
call fcn.1400132e4
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rdx, [0x140040b50]
lea rcx, [rbp + 0x6e8]
call fcn.14001371c
nop
lea rdx, str.Kernel32.dll
lea rcx, [rbp + 0x728]
call fcn.14001371c
nop
lea r8, [rbp + 0x6e8]
lea rdx, [rbp + 0x728]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013307
mov qword [rbp + 0x218], rax
lea rcx, [rbp + 0x728]
call fcn.1400132e4
nop
lea rcx, [rbp + 0x6e8]
call fcn.1400132e4
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rdx, str.RtlAddFunctionTable
lea rcx, [rbp + 0x768]
call fcn.14001371c
nop
lea rdx, str.Kernel32.dll
lea rcx, [rbp + 0x7a8]
call fcn.14001371c
nop
lea r8, [rbp + 0x768]
lea rdx, [rbp + 0x7a8]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013307
mov qword [rbp + 0x238], rax
lea rcx, [rbp + 0x7a8]
call fcn.1400132e4
nop
lea rcx, [rbp + 0x768]
call fcn.1400132e4
nop
mov byte [rbp + 0x258], 0x48
mov byte [rbp + 0x259], 0x8b
mov byte [rbp + 0x25a], 5
mov byte [rbp + 0x25b], 0x35
mov byte [rbp + 0x25c], 0
mov byte [rbp + 0x25d], 0
mov byte [rbp + 0x25e], 0
mov byte [rbp + 0x25f], 0x4c
mov byte [rbp + 0x260], 0x8b
mov byte [rbp + 0x261], 0xd
mov byte [rbp + 0x262], 0x26
mov byte [rbp + 0x263], 0
mov byte [rbp + 0x264], 0
mov byte [rbp + 0x265], 0
mov byte [rbp + 0x266], 0x4c
mov byte [rbp + 0x267], 0x89
mov byte [rbp + 0x268], 8
mov byte [rbp + 0x269], 0x51
mov byte [rbp + 0x26a], 0x52
mov byte [rbp + 0x26b], 0x41
mov byte [rbp + 0x26c], 0x50
mov byte [rbp + 0x26d], 0x48
mov byte [rbp + 0x26e], 0x83
mov byte [rbp + 0x26f], 0xec
mov byte [rbp + 0x270], 0x20
mov byte [rbp + 0x271], 0x48
mov byte [rbp + 0x272], 0x8d
mov byte [rbp + 0x273], 0xd
mov byte [rbp + 0x274], 0x14
mov byte [rbp + 0x275], 0
mov byte [rbp + 0x276], 0
mov byte [rbp + 0x277], 0
mov byte [rbp + 0x278], 0xff
mov byte [rbp + 0x279], 0x15
mov byte [rbp + 0x27a], 0x3e
mov byte [rbp + 0x27b], 0
mov byte [rbp + 0x27c], 0
mov byte [rbp + 0x27d], 0
mov byte [rbp + 0x27e], 0x48
mov byte [rbp + 0x27f], 0x83
mov byte [rbp + 0x280], 0xc4
mov byte [rbp + 0x281], 0x20
mov byte [rbp + 0x282], 0x41
mov byte [rbp + 0x283], 0x58
mov byte [rbp + 0x284], 0x5a
mov byte [rbp + 0x285], 0x59
mov byte [rbp + 0x286], 0xff
mov byte [rbp + 0x287], 0x25
mov byte [rbp + 0x288], 0
mov byte [rbp + 0x289], 0
mov byte [rbp + 0x28a], 0
mov byte [rbp + 0x28b], 0
mov edx, 0x10
lea rcx, [rbp + 0x2a8]
call fcn.140013235
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov r9d, 0x20
mov r8d, 0x200
lea rdx, [rbp + 0x2a8]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013d66
nop
mov r8d, 0x200
lea rdx, [0x140013721]
lea rcx, [rbp + 0x2a8]
call fcn.1400134d8
nop
mov edx, 0x10
lea rcx, [rbp + 0x2d8]
call fcn.140013cdf
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov r8d, 4
lea rdx, [rbp + 0x2d8]
mov rcx, qword [rbp + 0x7f8]
call fcn.140014054
nop
mov rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x310], rax
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x318], rax
lea rcx, [rbp + 0x68]
call fcn.140013ec4
mov qword [rbp + 0x320], rax
mov rax, qword [rbp + 0x1d8]
mov qword [rbp + 0x328], rax
mov rax, qword [rbp + 0x1f8]
mov qword [rbp + 0x330], rax
mov rax, qword [rbp + 0x218]
mov qword [rbp + 0x338], rax
lea rcx, [rbp + 0x2a8]
call fcn.140013ec4
mov qword [rbp + 0x340], rax
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0x348], rax
lea rcx, [rbp + 0x2d8]
call fcn.140013a23
mov qword [rbp + 0x350], rax
mov edx, 0x10
lea rcx, [rbp + 0x378]
call fcn.140013235
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov r9d, 0x20
mov r8d, 0x7c
lea rdx, [rbp + 0x378]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013d66
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rcx, [rbp + 0x378]
call fcn.140013ec4
mov qword [rbp + 0x800], rax
mov r9d, 0x34
lea r8, [rbp + 0x258]
mov rdx, qword [rbp + 0x800]
mov rcx, qword [rbp + 0x7f8]
call fcn.140014086
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rcx, [rbp + 0x378]
call fcn.140013ec4
add rax, 0x34
mov qword [rbp + 0x800], rax
lea r8, [rbp + 0x310]
mov rdx, qword [rbp + 0x800]
mov rcx, qword [rbp + 0x7f8]
call fcn.140013b0e
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
mov r9d, 4
mov r8d, 8
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x7f8]
call fcn.14001410d
nop
mov rax, qword [rbp + 0x850]
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
lea rcx, [rbp + 0x378]
call fcn.140013ec4
mov qword [rbp + 0x7e8], rax
lea r8, [rbp + 0x7e8]
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x7f8]
call fcn.1400136d1
nop
lea rdx, str.If_the_dll_isnt_injected_yet__return_to_the_games_window_nPress_enter_to_deallocate_injected_dll__make_sure_the_dll_has_done_executing_first___n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400131c7
nop
call fcn.140013460
mov dword [rbp + 0x7f4], eax
mov r8d, dword [rbp + 0x7f4]
mov edx, 1
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
nop
lea rcx, [rbp + 0x378]
call fcn.14001354b
nop
lea rcx, [rbp + 0x2d8]
call fcn.140013e1a
nop
lea rcx, [rbp + 0x2a8]
call fcn.14001354b
nop
lea rcx, [rbp + 0x68]
call fcn.14001354b
nop
lea rcx, [rbp - 0x20]
lea rdx, [0x140040240]
call fcn.140013d11
mov rcx, qword [rbp + 0x820]
xor rcx, rbp
call fcn.1400137b2
lea rsp, [rbp + 0x838]
pop rdi
pop rbp
ret