Function at 0x140026f10
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xb30
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1403d3080]
xor rax, rsp
mov qword [rbp + 0xab8], rax
xor r14d, r14d
lea rax, [0x140415d40]
mov qword [rbp + 0x5b0], rax
mov rdx, qword [0x140415f18]
mov rcx, qword [0x140415820]
test rdx, rdx
jne 0x140026fba
test rcx, rcx
je 0x140026fa3
cmp dword [0x14041578c], r14d
je 0x140026fa3
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 8]
lea r8, [rbp + 0x628]
mov rdx, qword [0x140415dc8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov rdx, qword [rbp + 0x628]
mov qword [0x140415f18], rdx
test rdx, rdx
je 0x140027068
test rcx, rcx
je 0x140026feb
cmp dword [0x14041578c], r14d
je 0x140026feb
add rdx, 8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x5e0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov rax, qword [rbp + 0x5e0]
mov qword [0x140415f20], rax
test rax, rax
je 0x140027068
mov rdx, qword [0x140415f28]
test rdx, rdx
jne 0x14002704f
test rcx, rcx
je 0x14002703c
cmp dword [0x14041578c], r14d
je 0x14002703c
mov qword [rsp + 0x20], r14
lea r9d, [rdx + 8]
lea r8, [rbp + 0x5e8]
mov rdx, qword [0x140415dd0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov rdx, qword [rbp + 0x5e8]
mov qword [0x140415f28], rdx
test rdx, rdx
je 0x140027068
cmp qword [0x140415f30], r14
jne 0x1400270e3
test rdx, rdx
jne 0x14002709f
mov qword [0x140415f30], r14
xor al, al
mov rcx, qword [rbp + 0xab8]
xor rcx, rsp
call fcn.1401617c0
lea r11, [rsp + 0xb30]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test rcx, rcx
je 0x1400270d0
cmp dword [0x14041578c], r14d
je 0x1400270d0
add rdx, 0x18
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x760]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov rax, qword [rbp + 0x760]
mov qword [0x140415f30], rax
test rax, rax
je 0x140027068
cmp qword [0x140415f40], r14
jne 0x140027130
test rcx, rcx
je 0x140027119
cmp dword [0x14041578c], r14d
je 0x140027119
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x4e0]
mov rdx, qword [0x140415de0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x4e0]
mov qword [0x140415f40], rax
test rax, rax
je 0x140027068
lea rcx, [0x140415f50]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14002714d
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x140415f9c]
cmp eax, 0x7fffffff
jne 0x14002716e
dec eax
mov dword [0x140415f9c], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rbx, qword [0x140415ff0]
mov rdi, qword [0x140415ff8]
cmp rbx, rdi
je 0x1400271b0
lea rcx, [rbx + 0x48]
call fcn.140005180
lea rcx, [rbx + 0x18]
call fcn.140003520
add rbx, 0xa0
cmp rbx, rdi
jne 0x140027181
mov rbx, qword [0x140415ff0]
mov rdi, rbx
mov qword [0x140415ff8], rbx
cmp rdi, qword [0x140416000]
je 0x1400271f7
lea rcx, [0x140415ff0]
cmp rbx, rdi
jne 0x1400271cc
call fcn.140003440
jmp 0x1400271f7
sub rdi, rbx
movabs rax, 0x6666666666666667
imul rdi
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x60], rdx
lea rdx, [rbp + 0x60]
call fcn.14002d400
mov r15, r14
mov qword [rbp], r14
movabs r12, 0x100000001b3
mov r13, 0xffffffffffffffff
lea rbx, [0x140000000]
movabs rdi, 0x5cde732d8feec4f4
mov rcx, qword [0x140415820]
xorps xmm6, xmm6
nop word [rax + rax]
mov rdx, qword [0x140415f30]
test rdx, rdx
jne 0x140027241
mov rax, r14
jmp 0x14002727c
test rcx, rcx
je 0x140027275
cmp dword [0x14041578c], 0
je 0x140027275
add rdx, 0x108
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x5f0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov rax, qword [rbp + 0x5f0]
cmp r15, rax
jae 0x140027b01
mov rdx, qword [0x140415f30]
test rdx, rdx
je 0x14002731b
test rcx, rcx
je 0x1400272c9
cmp dword [0x14041578c], 0
je 0x1400272c9
add rdx, 0x100
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x5f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov r8, qword [rbp + 0x5f8]
test r8, r8
je 0x14002731b
test rcx, rcx
je 0x14002730e
cmp dword [0x14041578c], 0
je 0x14002730e
mov eax, r15d
shl eax, 4
movsxd rdx, eax
add rdx, r8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x600]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov rsi, qword [rbp + 0x600]
mov qword [rbp + 0x20], rsi
jmp 0x140027322
mov rsi, r14
mov qword [rbp + 0x20], r14
lea rax, [rsi - 1]
movabs rdx, 0xccccccccccccb
cmp rax, rdx
ja 0x140027aec
mov rcx, rsi
call fcn.1400219c0
test eax, eax
je 0x140027355
and eax, 0x1fc000
cmp eax, 0x6c000
ja 0x140027ae5
lea rcx, [rsi + 0x280]
call fcn.14001d440
comiss xmm6, xmm0
jae 0x140027ae5
lea rcx, [rbp + 0x400]
call fcn.14001aa30
nop
mov qword [rbp + 0x400], rsi
mov dword [rbp + 0x408], r15d
cmp rsi, qword [0x140415f20]
sete byte [rbp + 0x410]
mov rcx, rsi
call fcn.1400219c0
test eax, eax
jne 0x1400273a4
xor r9b, r9b
jmp 0x1400273b2
and eax, 0x1fc000
cmp eax, 0x8000
setne r9b
mov byte [rbp + 0x411], r9b
movzx r8d, sil
movabs rax, 0xcbf29ce484222325
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x21]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x22]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x23]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x24]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x25]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x26]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x27]
xor r8, rax
imul r8, r12
and r8, qword [0x140415db0]
mov rax, r8
add rax, rax
mov r10, qword [0x140415d98]
mov rcx, qword [r10 + rax*8 + 8]
mov rdx, qword [0x140415d88]
cmp rcx, rdx
je 0x140027456
add r8, r8
mov rax, qword [r10 + r8*8]
cmp rsi, qword [rcx + 0x10]
je 0x140027459
cmp rcx, rax
jne 0x140027af8
mov rcx, r14
mov rax, rdx
test rcx, rcx
cmovne rax, rcx
cmp rax, rdx
setne byte [rbp + 0x440]
mov rcx, qword [0x140415820]
test r9b, r9b
jne 0x140027516
test rsi, rsi
je 0x14002750b
mov rdx, qword [0x140415738]
add rdx, rsi
test rcx, rcx
je 0x1400274bd
cmp dword [0x14041578c], 0
je 0x1400274bd
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x608]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov rdx, qword [rbp + 0x608]
test rdx, rdx
je 0x14002750b
add rdx, qword [0x140415720]
test rcx, rcx
je 0x1400274fd
cmp dword [0x14041578c], 0
je 0x1400274fd
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
mov eax, dword [rbp + 0x4d0]
mov dword [rbp + 0x40c], eax
jmp 0x14002751d
mov eax, r14d
mov dword [rbp + 0x40c], eax
jmp 0x14002751d
mov dword [rbp + 0x40c], r13d
mov rdx, qword [0x140415710]
add rdx, rsi
test rcx, rcx
je 0x1400275c4
cmp dword [0x14041578c], 0
je 0x140027558
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x610]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
test rcx, rcx
je 0x1400275c4
cmp dword [0x14041578c], 0
je 0x140027590
mov rdx, qword [rbp + 0x610]
add rdx, 0x68
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x618]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140415820]
test rcx, rcx
je 0x1400275c4
cmp dword [0x14041578c], 0
je 0x1400275c4
mov rdx, qword [rbp + 0x618]
add rdx, 0x178
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x620]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x620]
mov qword [rbp + 0x438], rax
lea rcx, [rbp + 0x510]
call fcn.14001aa30
mov qword [rbp + 0x5a4], 0
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x510], rax
mov eax, dword [rbp + 0x408]
mov dword [rbp + 0x518], eax
mov eax, dword [rbp + 0x40c]
mov dword [rbp + 0x51c], eax
movzx eax, byte [rbp + 0x410]
mov byte [rbp + 0x520], al
movzx eax, byte [rbp + 0x411]
mov byte [rbp + 0x521], al
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x528]
call fcn.14000d700
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x548], rax
movzx eax, byte [rbp + 0x440]
mov byte [rbp + 0x550], al
lea rax, [rbp + 0x558]
mov qword [rbp + 0x150], rax
mov eax, dword [rbp + 0x448]
mov dword [rbp + 0x558], eax
mov rdx, qword [rbp + 0x450]
mov r8, rdx
mov rdx, qword [rdx]
lea rcx, [rbp + 0x560]
call fcn.14002dd50
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x558]
call fcn.14001b020
mov rdx, rax
lea rcx, [rbp + 0x558]
call fcn.14001ae70
mov qword [rbp + 0x150], r14
cmp qword [rbp + 0x538], 0
jne case.0x1400276d7.0
movzx eax, byte [0x140415ec0]
cmp eax, 9
ja case.0x1400276d7.3
mov ecx, dword [rbx + rax*4 + 0x28e50]
add rcx, rbx
jmp rcx
mov rcx, qword [0x140415ec8]
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
jmp 0x1400276f5
mov rax, qword [0x140415ec8]
cmp qword [rax + 8], 0
sete al
test al, al
jne case.0x1400276d7.0
cmp qword [0x140415ee0], 0
je case.0x1400276d7.0
movzx ecx, byte [rbp + 0x51c]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x51d]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x51e]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x51f]
xor rcx, rax
imul rcx, r12
mov rdx, qword [0x140415f00]
and rdx, rcx
mov rax, rdx
add rax, rax
mov r9, qword [0x140415ee8]
mov rcx, qword [r9 + rax*8 + 8]
mov r8, qword [0x140415ed8]
mov eax, dword [rbp + 0x51c]
cmp rcx, r8
je 0x1400277a0
add rdx, rdx
mov r10, qword [r9 + rdx*8]
cmp eax, dword [rcx + 0x10]
je 0x1400277a3
nop word [rax + rax]
cmp rcx, r10
je 0x1400277a0
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x140027790
jmp 0x1400277a3
mov rcx, r14
mov r9, r8
test rcx, rcx
cmovne r9, rcx
cmp r9, r8
je 0x140027821
cmp eax, 0xffffffff
je 0x140027821
add r9, 0x18
lea rax, [rbp + 0x528]
cmp rax, r9
je case.0x1400276d7.0
mov rdi, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x1400277d9
mov r9, qword [r9]
mov rax, qword [rbp + 0x540]
cmp rdi, rax
ja 0x1400278a5
mov rdx, r9
lea rbx, [rbp + 0x528]
cmp rax, 0xf
mov r8, rdi
mov qword [rbp + 0x538], rdi
cmova rbx, qword [rbp + 0x528]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
lea rbx, [0x140000000]
jmp 0x1400278b4
mov qword [rbp + 0x20], rdi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x70], rax
movabs rcx, 0xe8590b1e481379b6
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x78], rax
movabs rax, 0x39b31243fd8bb781
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x780], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x788], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x780]
movdqa xmmword [rbp + 0x70], xmm0
lea rax, [rbp + 0x70]
mov rdi, r13
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027883
mov rax, qword [rbp + 0x540]
cmp rdi, rax
ja 0x1400278a1
lea rdx, [rbp + 0x70]
jmp 0x1400277ec
lea r9, [rbp + 0x70]
mov rdx, rdi
lea rcx, [rbp + 0x528]
call fcn.14000f970
movabs rdi, 0x5cde732d8feec4f4
test rsi, rsi
jne 0x1400278d5
movss dword [rbp + 0x40], xmm6
movaps xmm0, xmm6
unpcklps xmm0, xmm6
movsd qword [rbp + 0x38], xmm0
jmp 0x140027906
mov rcx, qword [0x140415820]
test rcx, rcx
je 0x140027906
cmp dword [0x14041578c], 0
je 0x140027906
lea rdx, [rsi + 0x90]
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp + 0x38]
movsd qword [rbp + 0x598], xmm0
mov eax, dword [rbp + 0x40]
mov dword [rbp + 0x5a0], eax
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x358]
call fcn.14001ab20
movsd xmm0, qword [rbp + 0x598]
movsd qword [rbp + 0x3e0], xmm0
mov eax, dword [rbp + 0x5a0]
mov dword [rbp + 0x3e8], eax
movsd xmm0, qword [rbp + 0x5a4]
movsd qword [rbp + 0x3ec], xmm0
mov r9d, 0x796e
lea r8, [rbp + 0x358]
lea rdx, [rbp + 0x288]
call fcn.1400296e0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x130], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x138], eax
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x230]
call fcn.14002add0
movsd xmm1, qword [rax]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp + 0x5a4], xmm1
ucomiss xmm0, xmm6
jp 0x1400279ba
je 0x140027ab4
cmp byte [rbp + 0x520], 0
je 0x140027a1a
mov qword [0x140416008], rsi
mov dword [0x140416010], r15d
movsd xmm0, qword [rbp + 0x598]
movsd qword [0x14041601c], xmm0
mov eax, dword [rbp + 0x5a0]
mov dword [0x140416024], eax
movsd qword [rbp + 0x140], xmm0
mov dword [rbp + 0x148], eax
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x238]
call fcn.14002add0
movsd xmm0, qword [rax]
movsd qword [0x140416014], xmm0
mov rbx, qword [0x140415ff8]
cmp rbx, qword [0x140416000]
je 0x140027a72
lea rdx, [rbp + 0x510]
mov rcx, rbx
call fcn.14001ab20
movsd xmm0, qword [rbp + 0x598]
movsd qword [rbx + 0x88], xmm0
mov eax, dword [rbp + 0x5a0]
mov dword [rbx + 0x90], eax
movsd xmm0, qword [rbp + 0x5a4]
movsd qword [rbx + 0x94], xmm0
add qword [0x140415ff8], 0xa0
jmp 0x140027a89
lea r8, [rbp + 0x510]
mov rdx, rbx
lea rcx, [0x140415ff0]
call fcn.14002e950
nop
jmp 0x140027aad
lea rbx, [0x140000000]
lea rcx, [rbp + 0x558]
call fcn.140005180
lea rcx, [rbp + 0x528]
call fcn.140003520
nop
lea rcx, [rbp + 0x448]
call fcn.140005180
lea rcx, [rbp + 0x418]
call fcn.140003520
mov rcx, qword [0x140415820]
inc r15
mov qword [rbp], r15
jmp 0x140027230
mov rcx, qword [rcx + 8]
jmp 0x140027447
lea rcx, [0x140415f50]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
cmp byte [0x140415f10], 0
jne 0x140028e36
cmp qword [0x140415e90], 2
jae 0x140028e36
cmp qword [0x140415e50], 0
je 0x140027b41
cmp qword [0x140415e70], 0
jne 0x140028351
mov dword [rbp + 0x4b0], 0x208
movabs rax, 0x39e71205fdc4b7d2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xe81c0b4c485279e1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x503eff0c1a0f8eff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x53fb04f5276babb1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xf34cb97b9afd5143
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xa8a312476a51f253
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rdx, 0x9a8e28a9b31b5347
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rcx, 0x5df50124b3a79fbc
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rdi, 0x39b31243fd8bb781
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
movabs rsi, 0xe8590b1e481379b6
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
movabs r12, 0x504aff651a4c8ea3
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x850], rax
movabs r15, 0x539504902711abd8
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x858], rax
movabs rax, 0xf30ab9279aa55105
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
movabs rax, 0xa8ee12226a27f23a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x870], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x878], rax
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x840]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x860]
vmovdqa ymmword [rbp + 0x1c0], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140027d84
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140027d84
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0xb79caf95
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140027d7f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140027d60
cmp edx, 0xbe079d96
je 0x140027d89
test r9d, r9d
jne 0x140027d40
mov rax, qword [rax]
jmp 0x140027d10
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
lea rcx, [rbp + 0x3f8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x1a0]
mov rcx, 0xffffffff80000001
call rax
test eax, eax
jne 0x140028339
movabs rax, 0x39c71230fdeab7cd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xe8370b6b48417996
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x5029ff0a1a008e83
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x53fa04f92765abb9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xf30ab9279aa5516b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rcx, 0xa8ee12226a27f23a
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7f8], rax
movabs rax, 0xf30ab9279aa55105
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7e0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x200]
vxorps xmm0, xmm0, xmmword [rbp + 0x800]
vmovdqa xmmword [rbp + 0x200], xmm0
lea rax, [rbp + 0x4b0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x8a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
mov rcx, qword [rbp + 0x3f8]
vzeroupper
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140028288
movabs r15, 0x5ad2711f9cffd6e5
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs r12, 0x802a6a6c2b4f1cde
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x504a86176e29e3cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rcx, 0x539504902711abd8
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
movabs rax, 0x504aff651a4c8ea3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x830], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x838], rax
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x820]
vmovdqa ymmword [rbp + 0x160], ymm1
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x2b8]
vzeroupper
call fcn.14002c4e0
mov rdx, rax
lea rcx, [rbp + 0x2d8]
call fcn.140088af0
nop
lea rcx, [rbp + 0x160]
mov r8, r13
inc r8
cmp byte [rcx + r8], 0
jne 0x140028026
lea rdx, [rbp + 0x160]
mov rcx, rax
call fcn.140003580
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
mov qword [rbp + 0x5d0], r14
mov qword [rbp + 0x5d8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5d0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rbp + 0x2d8]
call fcn.140003520
lea rax, [rbp + 0x5c0]
cmp qword [rbp + 0x5d8], 0xf
cmova rax, qword [rbp + 0x5c0]
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0x5d0]
mov qword [rbp + 0x58], rax
call fcn.140161194
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
lea r8, [rbp + 0xb0]
mov edx, eax
lea rcx, [rbp + 0x248]
call fcn.140021020
nop
lea rcx, [rbp + 0x248]
call fcn.140021850
movzx ebx, al
lea rcx, [rbp + 0x248]
call fcn.14002cc60
test bl, bl
je 0x14002827c
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x2f8]
call fcn.14002c4e0
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.140088af0
mov rdx, rax
lea rcx, [0x140415e40]
call fcn.14002c630
lea rcx, [rbp + 0x318]
call fcn.140003520
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x504a86176e29e3cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rcx, 0x539504902711abd8
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
movabs rax, 0x504aff651a4c8ea3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x890], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x898], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x880]
vmovdqa ymmword [rbp + 0x180], ymm1
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x338]
vzeroupper
call fcn.14002c4e0
mov rdx, rax
lea rcx, [rbp + 0x298]
call fcn.140088af0
nop
lea rcx, [rbp + 0x180]
mov r8, r13
inc r8
cmp byte [rcx + r8], 0
jne 0x140028212
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.140003580
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x268], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x278], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x268]
lea rcx, [0x140415e60]
call fcn.14002c630
lea rcx, [rbp + 0x268]
call fcn.140003520
nop
lea rcx, [rbp + 0x298]
call fcn.140003520
nop
lea rcx, [rbp + 0x5c0]
call fcn.140003520
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140028314
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140028314
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x83b7a710
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14002830f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400282f0
cmp edx, 0xc0986a5d
je 0x140028319
test r9d, r9d
jne 0x1400282d0
mov rax, qword [rax]
jmp 0x1400282a0
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov rcx, qword [rbp + 0x3f8]
call rax
cmp qword [0x140415e70], 0
jne 0x140028351
cmp qword [0x140415e90], 0
jne 0x140028d78
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x650]
call sub.VCRUNTIME140.dll_memset
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140415e60]
lea rcx, [rbp + 0x650]
call fcn.14002c2c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], r14
mov qword [rbp + 0x508], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x4f0], 0
cmp qword [rbp + 0x6e0], 0
je 0x140028d13
xor eax, eax
movups xmmword [rbp + 0x4b8], xmm0
mov qword [rbp + 0x4c8], rax
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
mov rdx, qword [rbp + rcx + 0x698]
test rdx, rdx
sete cl
mov qword [rbp], r14
mov word [rbp + 8], 1
mov eax, dword [rbp + 0xba]
mov dword [rbp + 0xa], eax
movzx eax, word [rbp + 0xbe]
mov word [rbp + 0xe], ax
mov qword [rbp + 0x20], rdx
mov byte [rbp + 0x28], cl
mov byte [rbp + 0x29], 0
mov eax, dword [rbp + 0xba]
mov dword [rbp + 0x2a], eax
movzx eax, word [rbp + 0xbe]
mov word [rbp + 0x2e], ax
movdqu xmmword [rbp + 0x4b8], xmm0
mov qword [rbp + 0x4c8], r14
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0x30], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x50], xmm0
movaps xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm1
movzx esi, byte [rbp + 9]
mov rbx, qword [rbp]
movzx r12d, byte [rbp + 0x58]
mov rdi, qword [rbp + 0x50]
test rdx, rdx
jne 0x140028543
movzx r15d, byte [rbp + 8]
test r12b, r12b
jne 0x14002847f
test rdi, rdi
je 0x140028479
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
jne 0x14002847c
mov rdi, r14
mov r12b, 1
test rbx, rbx
jne 0x1400284d0
test rdi, rdi
jne 0x1400284d5
mov qword [rbp + 0x30], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], r14
mov rdx, qword [rbp + 0x4b8]
cmp rdx, qword [rbp + 0x4c0]
jne 0x14002856c
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
jmp 0x140028582
test rdi, rdi
jne 0x140028489
test r15b, r15b
jne 0x1400284f5
test rbx, rbx
je 0x1400284f2
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x1400284f2
movzx esi, al
jmp 0x1400284f5
mov rbx, r14
mov byte [rbp + 0x10], sil
mov rax, qword [rbp + 0x4c0]
cmp rax, qword [rbp + 0x4c8]
je 0x140028515
mov byte [rax], sil
inc qword [rbp + 0x4c0]
jmp 0x14002852c
lea r8, [rbp + 0x10]
mov rdx, qword [rbp + 0x4c0]
lea rcx, [rbp + 0x4b8]
call fcn.140016980
test rbx, rbx
je 0x140028561
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sbumpc_void____ptr64]
cmp eax, 0xffffffff
je 0x140028561
mov byte [rbp + 8], 0
test rbx, rbx
je 0x140028561
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x140028561
movzx esi, al
mov r15b, 1
jmp 0x140028461
mov rbx, r14
mov r15b, 1
jmp 0x140028461
mov r8, qword [rbp + 0x4c0]
sub r8, rdx
lea rcx, [rbp + 0x90]
call fcn.140004190
mov rdx, qword [rbp + 0x508]
cmp rdx, 0xf
jbe 0x1400285c6
inc rdx
mov rcx, qword [rbp + 0x4f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400285c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400285c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140161a64
movups xmm0, xmmword [rbp + 0x90]
movups xmmword [rbp + 0x4f0], xmm0
movups xmm1, xmmword [rbp + 0xa0]
movups xmmword [rbp + 0x500], xmm1
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
lea rcx, [rbp + 0x90]
call fcn.140003520
cmp qword [rbp + 0x500], 0
jbe 0x140028c9b
movabs rax, 0x4bd6611c89f8d6ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0xe835796b17611cc0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs r12, 0x39b31243fd8bb781
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
movabs r15, 0xe8590b1e481379b6
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x790]
movdqa xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0xe0]
mov rdx, r13
nop word [rax + rax]
inc rdx
cmp byte [rax + rdx], 0
jne 0x1400286a0
lea rcx, [rbp + 0x4f0]
cmp qword [rbp + 0x508], 0xf
seta sil
mov rdi, qword [rbp + 0x4f0]
cmova rcx, rdi
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xe0]
mov rbx, qword [rbp + 0x500]
mov rdx, rbx
call fcn.14002dc90
cmp rax, 0xffffffffffffffff
je 0x140028c9b
lea rcx, [rax + 0xf]
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], r14
mov qword [rbp + 0x4a8], r14
cmp rbx, rcx
jb 0x140028e3d
mov qword [rbp + 0x640], r13
sub rbx, rcx
mov qword [rbp + 0x228], rbx
mov r8, r13
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rbp + 0x4f0]
test sil, sil
cmovne rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0x490]
call fcn.140004190
nop
movabs rbx, 0x4bd6611c89f8d6ed
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rdi, 0xe835796b17611cc0
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x7a0]
movdqa xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
mov rax, r13
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400287c0
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
cmova rcx, qword [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x80]
mov rdx, qword [rbp + 0x4a0]
call fcn.14002dc90
test rax, rax
je 0x14002898c
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7b8], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x7b0]
movdqa xmmword [rbp + 0xc0], xmm0
lea rax, [rbp + 0xc0]
mov rdx, r13
nop
inc rdx
cmp byte [rax + rdx], 0
jne 0x140028860
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
seta sil
mov rdi, qword [rbp + 0x490]
cmova rcx, rdi
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xc0]
mov rbx, qword [rbp + 0x4a0]
mov rdx, rbx
call fcn.14002dc90
lea rcx, [rax + 0xf]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
cmp rbx, rcx
jb 0x140028e43
mov qword [rbp + 0x638], r13
sub rbx, rcx
mov qword [rbp + 0x240], rbx
mov r8, r13
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rbp + 0x490]
test sil, sil
cmovne rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0x110]
call fcn.140004190
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0xf
jbe 0x140028941
inc rdx
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002893c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028acb
call fcn.140161a64
movups xmm0, xmmword [rbp + 0x110]
movups xmmword [rbp + 0x490], xmm0
movups xmm1, xmmword [rbp + 0x120]
movups xmmword [rbp + 0x4a0], xmm1
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x110], 0
lea rcx, [rbp + 0x110]
call fcn.140003520
movabs rbx, 0x4bd6611c89f8d6ed
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xe8590b1e48611cc0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x7c0]
movdqa xmmword [rbp + 0xd0], xmm0
lea rax, [rbp + 0xd0]
mov rdx, r13
inc rdx
cmp byte [rax + rdx], 0
jne 0x1400289f3
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
seta sil
mov rdi, qword [rbp + 0x490]
cmova rcx, rdi
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xd0]
mov rbx, qword [rbp + 0x4a0]
mov rdx, rbx
call fcn.14002dc90
lea rcx, [rax + 0xb]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], r14
cmp rbx, rcx
jb 0x140028e49
mov qword [rbp + 0x630], r13
sub rbx, rcx
mov qword [rbp + 0x220], rbx
mov r8, r13
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rbp + 0x490]
test sil, sil
cmovne rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0xf0]
call fcn.140004190
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0xf
jbe 0x140028ad7
inc rdx
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028ad2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028ad2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140161a64
movups xmm0, xmmword [rbp + 0xf0]
movups xmmword [rbp + 0x490], xmm0
movups xmm1, xmmword [rbp + 0x100]
movups xmmword [rbp + 0x4a0], xmm1
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
lea rcx, [rbp + 0xf0]
call fcn.140003520
movabs rax, 0x39b31243fd8bb7bb
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x30], r12
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x760], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x768], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x760]
movdqa xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x60]
nop dword [rax]
inc r13
cmp byte [rax + r13], 0
jne 0x140028b70
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
seta sil
cmova rcx, qword [rbp + 0x490]
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x60]
mov rbx, qword [rbp + 0x4a0]
mov rdx, rbx
call fcn.14002dc90
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x760], xmm0
mov qword [rbp + 0x770], r14
mov qword [rbp + 0x778], r14
mov r8, rax
cmp rbx, rax
cmovb r8, rbx
lea rdx, [rbp + 0x490]
test sil, sil
cmovne rdx, qword [rbp + 0x490]
lea rcx, [rbp + 0x760]
call fcn.140004190
lea rdx, [rbp + 0x760]
lea rcx, [0x140415e80]
call fcn.14002c630
lea rcx, [rbp + 0x760]
call fcn.140003520
lea rcx, [r15 + 1]
xorps xmm0, xmm0
movups xmmword [rbp + 0x760], xmm0
mov qword [rbp + 0x770], r14
mov qword [rbp + 0x778], r14
mov rax, qword [rbp + 0x4a0]
cmp rax, rcx
jb 0x140028e49
lea r8, [r15 + 5]
sub rax, rcx
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
cmova rdx, qword [rbp + 0x490]
add rdx, rcx
lea rcx, [rbp + 0x760]
call fcn.140004190
lea rdx, [rbp + 0x760]
lea rcx, [0x140415ea0]
call fcn.14002c630
lea rcx, [rbp + 0x760]
call fcn.140003520
nop
lea rcx, [rbp + 0x490]
call fcn.140003520
lea rcx, [rbp + 0x660]
call fcn.14002c910
test rax, rax
jne 0x140028ccf
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x650]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rcx, qword [rbp + 0x4b8]
test rcx, rcx
je 0x140028d13
mov rdx, qword [rbp + 0x4c8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028d0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028d0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140161a64
nop
lea rcx, [rbp + 0x4f0]
call fcn.140003520
nop
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
lea rax, [0x1401bb538]
mov qword [rbp + rcx + 0x650], rax
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x64c], edx
lea rcx, [rbp + 0x660]
call fcn.14002c250
lea rcx, [rbp + 0x668]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x700]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
cmp qword [0x140415e90], 5
jb 0x140028e2f
cmp qword [0x140415eb0], 2
jb 0x140028e2f
mov ecx, 8
call fcn.1401617e0
mov rcx, qword [rbp + 0x5b0]
mov qword [rax], rcx
mov qword [rbp + 0x5b0], rax
lea rcx, [rbp + 0x4e8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14002eca0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x4e0], rax
test rax, rax
je 0x140028e1c
cmp dword [rbp + 0x4e8], 0
je 0x140028e10
movaps xmm0, xmmword [rbp + 0x4e0]
movdqa xmmword [rbp + 0x5b0], xmm0
lea rcx, [rbp + 0x5b0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140028e10
mov al, 1
jmp 0x14002706a
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x4e8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov byte [0x140415f10], 1
mov al, 1
jmp 0x14002706a
call fcn.14000ec00
nop
call fcn.14000ec00
int3
call fcn.14000ec00
int3