Function at 0x140002a70
Capabilities:
Check mutex on windows
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6a0
mov rax, qword [0x14000c040]
xor rax, rsp
mov qword [rsp + 0x690], rax
mov rsi, rdx
xor edi, edi
mov dword [rsp + 0xe8], edi
cmp ecx, 3
jge 0x140002b02
lea rdx, str.Usage:_ModDataHelper__gameName___gameDir_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov eax, 1
mov rcx, qword [rsp + 0x690]
xor rcx, rsp
call fcn.140005f90
lea r11, [rsp + 0x6a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rdx, qword [rdx + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x430], xmm0
mov qword [rsp + 0x440], rdi
mov qword [rsp + 0x448], rdi
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], di
jne 0x140002b30
lea rcx, [rsp + 0x430]
call fcn.140002940
nop
mov rdx, qword [rsi + 0x10]
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d0], xmm0
mov qword [rsp + 0x3e0], rdi
mov qword [rsp + 0x3e8], rdi
nop word [rax + rax]
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x140002b70
mov r8, rbx
lea rcx, [rsp + 0x3d0]
call fcn.140002940
nop
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
mov r15, qword [rsp + 0x440]
sub rax, r15
cmp rax, 1
jb 0x140004244
lea r13, [rsp + 0x430]
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x150], rax
mov rcx, qword [rsp + 0x448]
mov qword [rsp + 0x158], rcx
cmp rcx, 7
cmova r13, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
lea r14, [r15 + 1]
mov ebx, 7
lea rsi, [rsp + 0x68]
mov r12d, 0xa
cmp r14, rbx
jbe 0x140002c8b
mov rbx, r14
or rbx, 7
movabs rax, 0x7fffffffffffffff
cmp rbx, rdx
jbe 0x140002c59
mov rbx, rdx
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x140002c7e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000424a
mov rcx, rax
call fcn.140005fb0
test rax, rax
je 0x140002c77
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140002c86
cmp rbx, r12
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, rax
ja 0x14000424a
add rcx, rcx
jne 0x140002c28
mov rsi, rdi
jmp 0x140002c86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005fb0
mov rsi, rax
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], rbx
lea rbx, [r15 + r15]
mov r8, rbx
mov rdx, r13
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + rsi], 0x5f
mov word [rsi + r14*2], di
mov rsi, qword [rsp + 0x3e0]
lea r9, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 7
cmova r9, qword [rsp + 0x3d0]
mov r14, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x140002d26
lea rax, [r14 + rsi]
mov qword [rsp + 0x78], rax
lea rbx, [rsp + 0x68]
cmp rcx, 7
cmova rbx, qword [rsp + 0x68]
lea rcx, [rbx + r14*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r14]
mov word [rbx + rax*2], di
lea rax, [rsp + 0x68]
jmp 0x140002d38
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.140005010
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x400], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x3f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x400], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
mov rdx, qword [rsp + 0x80]
cmp rdx, 7
jbe 0x140002dbd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002db8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002db8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
movdqa xmm0, xmmword [0x140008c80]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], di
lea rdx, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 7
cmova rdx, qword [rsp + 0x3f0]
mov r8, qword [rsp + 0x400]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140005a50
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rax, [rsp + 0x3f0]
mov rdx, qword [rsp + 0x3f0]
mov r8, qword [rsp + 0x408]
cmp r8, 7
cmova rax, rdx
mov r14, qword [rsp + 0x400]
lea rcx, [rax + r14*2]
lea rax, [rsp + 0x3f0]
cmova rax, rdx
cmp rax, rcx
je 0x140002e7c
nop dword [rax + rax]
cmp word [rax], 0x5c
jne 0x140002e5b
mov word [rax], 0x2e
add rax, 2
cmp rax, rcx
jne 0x140002e50
mov r8, qword [rsp + 0x408]
mov r14, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f0]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r14
cmp rax, 0x15
jb 0x140004250
lea r13, [rsp + 0x3f0]
cmp r8, 7
cmova r13, rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x410], xmm0
mov qword [rsp + 0x420], rdi
mov qword [rsp + 0x428], rdi
lea r15, [r14 + 0x15]
mov ebx, 7
lea rsi, [rsp + 0x410]
cmp r15, rbx
jbe 0x140002f78
mov rbx, r15
or rbx, 7
cmp rbx, rcx
jbe 0x140002f35
mov rbx, rcx
movabs r12, 0x7fffffffffffffff
lea rcx, [r12 + r12]
cmp rcx, 0x1000
jb 0x140002f66
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004256
mov rcx, rax
call fcn.140005fb0
test rax, rax
je 0x1400040eb
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov qword [rsp + 0x410], rsi
jmp 0x140002f82
cmp rbx, 0xa
cmovb rbx, r12
lea rcx, [rbx + 1]
movabs r12, 0x7fffffffffffffff
cmp rcx, r12
ja 0x140004256
add rcx, rcx
jne 0x140002ef8
mov rsi, rdi
mov qword [rsp + 0x410], rdi
jmp 0x140002f82
call fcn.140005fb0
mov rsi, rax
mov qword [rsp + 0x410], rax
jmp 0x140002f82
movabs r12, 0x7fffffffffffffff
mov qword [rsp + 0x420], r15
mov qword [rsp + 0x428], rbx
movups xmm0, xmmword [str.GlobalModDataHelper_]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1400086d8]
movups xmmword [rsi + 0x10], xmm1
movsd xmm0, qword [0x1400086e8]
movsd qword [rsi + 0x20], xmm0
movzx eax, word [0x1400086f0]
mov word [rsi + 0x28], ax
lea rcx, [rsi + 0x2a]
lea r8, [r14 + r14]
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov word [rsi + r15*2], di
lea rdx, [rsp + 0x410]
cmp qword [rsp + 0x428], 7
cmova rdx, qword [rsp + 0x410]
mov r8, qword [rsp + 0x420]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140005a50
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea r8, [rsp + 0x410]
cmp qword [rsp + 0x428], 7
cmova r8, qword [rsp + 0x410]
mov r14d, 1
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rbx, rax
mov qword [rsp + 0x160], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
cmp eax, 0xb7
jne 0x140003202
lea rdx, str.An_instance_with_the_same_arguments_is_already_running.
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x428]
cmp rdx, 7
jbe 0x1400030ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400040eb
call fcn.140006304
mov qword [rsp + 0x420], rdi
mov qword [rsp + 0x428], 7
mov word [rsp + 0x410], di
mov rdx, qword [rsp + 0x408]
cmp rdx, 7
jbe 0x140003132
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000312d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004152
call fcn.140006304
movdqa xmm0, xmmword [0x140008c80]
movdqu xmmword [rsp + 0x400], xmm0
mov word [rsp + 0x3f0], di
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 7
jbe 0x140003193
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000318e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400041b6
call fcn.140006304
mov qword [rsp + 0x3e0], rdi
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], di
mov r13, qword [rsp + 0x158]
cmp r13, 7
jbe 0x1400031fa
lea rdx, [r13*2 + 2]
mov r15, qword [rsp + 0x150]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400031f2
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000420d
mov rcx, r15
call fcn.140006304
mov eax, r14d
jmp 0x140002ad5
lea rdx, str.No_other_instance_found.
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov r15, qword [rsp + 0x150]
mov r13, qword [rsp + 0x158]
mov esi, 0xff
mov dword [rsp + 0x198], 0x238
lea rcx, [rsp + 0x450]
lea rax, [rsp + 0x198]
mov edx, 4
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, r14
jne 0x140003260
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14000331a
lea rdx, str.Failed_to_create_process_snapshot
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x60]
call fcn.140001930
mov rax, qword [rsp + 0x60]
jmp 0x1400034d6
lea rdx, [rsp + 0x450]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, r14d
jne 0x14000337e
lea rax, [rsp + 0x430]
cmp r13, 7
cmova rax, r15
lea r8, [rsp + 0x47c]
sub r8, rax
nop dword [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140003364
add rax, 2
test ecx, ecx
jne 0x140003350
mov rcx, rbx
test edx, edx
je 0x14000339b
lea rdx, [rsp + 0x450]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, r14d
je 0x140003330
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x60]
call fcn.140001930
mov rax, qword [rsp + 0x60]
jmp 0x1400034d6
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rsp + 0x458]
test esi, esi
jne 0x1400033c0
lea rcx, [rsp + 0x60]
call fcn.140001930
mov rax, qword [rsp + 0x60]
jmp 0x1400034cc
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rbx, 0x989680
jne 0x1400033e1
imul rbx, rcx, 0x64
jmp 0x14000345b
cmp rbx, 0x16e3600
jne 0x14000343f
movabs r9, 0xb2f4fc0794908cf3
mov rax, r9
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r9
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
add rbx, r8
jmp 0x14000345b
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
lea rdx, str.Process_found__waiting_for_it_to_exit.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov r8d, esi
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x14000351d
lea rdx, str.Failed_to_open_process_for_synchronization.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140001930
mov rax, qword [rsp + 0x30]
mov esi, 0xff
mov qword [rsp + 0x58], rax
movabs rbx, 0x7fffffffc46535ff
cmp rax, rbx
je 0x140003509
mov ecx, r14d
cmovl ecx, esi
test cl, cl
jns 0x140003509
add rax, 0x3b9aca00
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x58]
call fcn.140005c20
jmp 0x140003233
mov qword [rsp + 0x58], r12
lea rcx, [rsp + 0x58]
call fcn.140005c20
jmp 0x140003233
mov edx, 0xffffffff
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rsi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rsi, 0x989680
jne 0x140003555
imul rax, rcx, 0x64
jmp 0x1400035ce
cmp rsi, 0x16e3600
jne 0x1400035b3
movabs r9, 0xb2f4fc0794908cf3
mov rax, r9
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r9
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x1400035ce
cqo
idiv rsi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rsi
add rax, rcx
sub rax, rbx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
cmp rax, 0x11e1a300
jl 0x140004223
lea rdx, str.Main_process_found.
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.Process_exited__performing_file_operations...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140001930
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rcx, 0x7fffffffe2329aff
cmp rax, rcx
je 0x140003661
mov ecx, 0xff
cmovl r14d, ecx
test r14b, r14b
jns 0x140003661
add rax, 0x1dcd6500
mov qword [rsp + 0x58], rax
jmp 0x140003666
mov qword [rsp + 0x58], r12
lea rcx, [rsp + 0x58]
call fcn.140005c20
nop
lea rsi, str.Data
mov rbx, rsi
lea r13, vtable.type_info.0
cmp rbx, r13
je 0x140003b40
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140003698
mov rdx, qword [rbx]
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x108], rdi
mov r8, qword [rbx + 0x10]
lea rcx, [rsp + 0xf0]
call fcn.140002940
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rdi
mov r8d, 0xb
lea rdx, str.FIFAModData
lea rcx, [rsp + 0xa8]
call fcn.140002940
nop
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 7
cmova rdx, qword [rsp + 0x3d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0xa0], rdi
mov r8, qword [rsp + 0x3e0]
lea rcx, [rsp + 0x88]
call fcn.140002940
nop
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x110]
call fcn.140001e30
nop
lea r8, [rsp + 0xf0]
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140001e30
mov r15, rax
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14000378c
mov rdx, qword [rbx]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x80], rdi
mov r8, qword [rbx + 0x10]
lea rcx, [rsp + 0x68]
call fcn.140002940
nop
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 7
cmova rdx, qword [rsp + 0x3d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rdi
mov r8, qword [rsp + 0x3e0]
lea rcx, [rsp + 0x38]
call fcn.140002940
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0xc8]
call fcn.140001e30
mov r14, rax
mov rdx, r15
cmp qword [r15 + 0x18], 7
jbe 0x140003816
mov rdx, qword [r15]
mov rcx, r14
cmp qword [rax + 0x18], 7
jbe 0x140003823
mov rcx, qword [rax]
call fcn.140005f14
test eax, eax
jne 0x14000425c
mov rdx, qword [rsp + 0xe0]
cmp rdx, 7
jbe 0x14000387b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003876
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003876
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], 7
mov word [rsp + 0xc8], di
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x1400038dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], di
mov rdx, qword [rsp + 0x80]
cmp rdx, 7
jbe 0x140003937
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003932
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003932
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x80], 7
mov word [rsp + 0x68], di
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x140003998
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003993
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003993
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], di
mov rdx, qword [rsp + 0x128]
cmp rdx, 7
jbe 0x1400039ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], 7
mov word [rsp + 0x110], di
mov rdx, qword [rsp + 0xa0]
cmp rdx, 7
jbe 0x140003a66
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0xa0], 7
mov word [rsp + 0x88], di
mov rdx, qword [rsp + 0xc0]
cmp rdx, 7
jbe 0x140003acd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ac8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ac8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], di
mov rdx, qword [rsp + 0x108]
cmp rdx, 7
jbe 0x140003b34
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
add rbx, 0x20
jmp 0x140003682
cmp rsi, r13
je 0x14000401a
mov rdx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x140003b56
mov rdx, qword [rsi]
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], rdi
mov r8, qword [rsi + 0x10]
lea rcx, [rsp + 0xc8]
call fcn.140002940
nop
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 7
cmova rdx, qword [rsp + 0x3d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0xa0], rdi
mov r8, qword [rsp + 0x3e0]
lea rcx, [rsp + 0x88]
call fcn.140002940
nop
lea r8, [rsp + 0xc8]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x130]
call fcn.140001e30
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rdi
mov r8d, 9
lea rdx, str.original_
lea rcx, [rsp + 0x38]
call fcn.140002940
nop
mov r14, qword [rsi + 0x10]
mov r9, rsi
cmp qword [rsi + 0x18], 7
jbe 0x140003c29
mov r9, qword [rsi]
mov r12, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
sub rax, r12
cmp r14, rax
ja 0x140003c75
lea rax, [r12 + r14]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 7
cmova rbx, qword [rsp + 0x38]
lea rcx, [rbx + r12*2]
lea r8, [r14 + r14]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r12 + r14]
mov word [rbx + rax*2], di
lea rax, [rsp + 0x38]
jmp 0x140003c87
mov qword [rsp + 0x20], r14
mov rdx, r14
lea rcx, [rsp + 0x38]
call fcn.140005010
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x168], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x178], xmm0
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
movups xmmword [rsp + 0xf0], xmm1
movups xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], 7
mov word [rsp + 0x168], di
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 7
cmova rdx, qword [rsp + 0x3d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rdi
mov r8, qword [rsp + 0x3e0]
lea rcx, [rsp + 0xa8]
call fcn.140002940
nop
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x110]
call fcn.140001e30
mov rbx, rax
mov rdx, r15
cmp qword [r15 + 0x18], 7
jbe 0x140003d51
mov rdx, qword [r15]
mov rcx, rbx
cmp qword [rax + 0x18], 7
jbe 0x140003d5e
mov rcx, qword [rax]
call fcn.140005f14
test eax, eax
jne 0x14000426a
mov rdx, qword [rsp + 0x128]
cmp rdx, 7
jbe 0x140003db6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003db1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003db1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], 7
mov word [rsp + 0x110], di
mov rdx, qword [rsp + 0xc0]
cmp rdx, 7
jbe 0x140003e1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003e18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], di
mov rdx, qword [rsp + 0x108]
cmp rdx, 7
jbe 0x140003e84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003e7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], di
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x140003ee5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ee0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ee0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], di
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x140003f43
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], di
mov rdx, qword [rsp + 0xa0]
cmp rdx, 7
jbe 0x140003faa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fa5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003fa5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0xa0], 7
mov word [rsp + 0x88], di
mov rdx, qword [rsp + 0xe0]
cmp rdx, 7
jbe 0x140004011
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000400c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000400c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
add rsi, 0x20
jmp 0x140003b40
mov rbx, qword [rsp + 0x150]
mov rsi, qword [rsp + 0x158]
jmp 0x14000407a
lea rdx, str.File_operations_completed_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x428]
cmp rdx, 7
jbe 0x1400040f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400040f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x420], rdi
mov qword [rsp + 0x428], 7
mov word [rsp + 0x410], di
mov rdx, qword [rsp + 0x408]
cmp rdx, 7
jbe 0x14000415e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004159
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004159
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
movdqa xmm0, xmmword [0x140008c80]
movdqu xmmword [rsp + 0x400], xmm0
mov word [rsp + 0x3f0], di
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 7
jbe 0x1400041c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400041bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400041bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006304
mov qword [rsp + 0x3e0], rdi
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], di
cmp rsi, 7
jbe 0x14000421c
lea rdx, [rsi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140004214
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004214
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140006304
xor eax, eax
jmp 0x140002ad5
lea rdx, str.Initial_process_found_and_closed__waiting_for_true_process.
call fcn.1400046f0
lea rdx, [0x1400048d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14000322e
call fcn.1400011c0
int3
call fcn.140001120
nop
call fcn.1400011c0
int3
call fcn.140001120
nop
mov r9, r15
mov r8, r14
mov edx, eax
call fcn.140002870
nop
mov r9, r15
mov r8, rbx
mov edx, eax
call fcn.140002870
int3