Function at 0x1400274f0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xba0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140315080]
xor rax, rsp
mov qword [rbp + 0xb18], rax
xor esi, esi
lea rax, [0x140333880]
mov qword [rbp + 0x5f0], rax
mov rax, qword [0x140333a48]
test rax, rax
jne 0x140027569
mov rcx, qword [0x140333908]
call fcn.14001d730
mov qword [0x140333a48], rax
test rax, rax
je 0x14002762f
cmp byte [0x140333476], sil
je 0x1400275e3
mov qword [rbp + 0x478], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x480], xmm0
mov qword [rbp + 0x4a8], rsi
mov dword [rbp + 0x4b0], esi
mov dword [rbp + 0x470], 0x2dead0f
mov dword [rbp + 0x474], 5
add rax, 8
mov qword [rbp + 0x490], rax
mov qword [rbp + 0x498], 8
lea rax, [rbp + 0x5b0]
mov qword [rbp + 0x4a0], rax
lea rdi, [rbp + 0x470]
xor eax, eax
xor ecx, ecx
rep stosb byte [rdi], al
lea rcx, [rbp + 0x470]
call qword [0x140333508]
mov rax, qword [rbp + 0x5b0]
mov qword [0x140333a50], rax
test rax, rax
je 0x14002762f
mov rax, qword [0x140333a58]
test rax, rax
jne 0x14002761a
mov rcx, qword [0x140333910]
call fcn.14001d730
mov qword [0x140333a58], rax
test rax, rax
je 0x14002762f
cmp qword [0x140333a60], rsi
jne 0x140027680
test rax, rax
jne 0x14002766b
mov qword [0x140333a60], rsi
xor al, al
mov rcx, qword [rbp + 0xb18]
xor rcx, rsp
call fcn.1400e9e20
lea r11, [rsp + 0xba0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rax + 0x18]
call fcn.14001d730
mov qword [0x140333a60], rax
test rax, rax
je 0x14002762f
cmp qword [0x140333a70], rsi
jne 0x1400276a1
mov rcx, qword [0x140333920]
call fcn.14001d730
mov qword [0x140333a70], rax
test rax, rax
je 0x14002762f
lea rcx, [0x140333a80]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x1400276be
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x140333acc]
cmp eax, 0x7fffffff
jne 0x1400276df
dec eax
mov dword [0x140333acc], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rdi, qword [0x140333b20]
mov rbx, qword [0x140333b28]
cmp rdi, rbx
je 0x140027717
mov rcx, rdi
call fcn.1400054d0
add rdi, 0xa0
cmp rdi, rbx
jne 0x1400276f2
mov rdi, qword [0x140333b20]
mov rbx, rdi
mov qword [0x140333b28], rbx
cmp rbx, qword [0x140333b30]
je 0x14002775e
lea rcx, [0x140333b20]
cmp rdi, rbx
jne 0x140027733
call fcn.140003530
jmp 0x14002775e
sub rbx, rdi
movabs rax, 0x6666666666666667
imul rbx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x20], rdx
lea rdx, [rbp + 0x20]
call fcn.14002d6c0
mov r15, rsi
mov qword [rbp], rsi
movabs r12, 0x100000001b3
lea r13, [0x140000000]
movabs rbx, 0x9fe73282d038a706
xorps xmm6, xmm6
movabs rdi, 0xcbf29ce484222325
mov rcx, qword [0x140333a60]
test rcx, rcx
jne 0x14002779e
mov rax, rsi
jmp 0x1400277aa
add rcx, 0x108
call fcn.14001d730
cmp r15, rax
jae 0x1400280fd
mov rcx, qword [0x140333a60]
test rcx, rcx
je 0x140027878
add rcx, 0x100
call fcn.14001d730
mov rdx, rax
test rax, rax
je 0x140027878
cmp byte [0x140333476], 0
je 0x14002786b
mov qword [rbp + 0x4c8], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x4d0], xmm0
mov qword [rbp + 0x4f8], rsi
mov dword [rbp + 0x500], esi
mov dword [rbp + 0x4c0], 0x2dead0f
mov dword [rbp + 0x4c4], 5
mov eax, r15d
shl eax, 4
movsxd rcx, eax
add rcx, rdx
mov qword [rbp + 0x4e0], rcx
mov qword [rbp + 0x4e8], 8
lea rax, [rbp + 0x6a0]
mov qword [rbp + 0x4f0], rax
lea rdi, [rbp + 0x4c0]
xor eax, eax
xor ecx, ecx
rep stosb byte [rdi], al
lea rcx, [rbp + 0x4c0]
call qword [0x140333508]
movabs rdi, 0xcbf29ce484222325
mov r14, qword [rbp + 0x6a0]
mov qword [rbp + 8], r14
jmp 0x14002787f
mov r14, rsi
mov qword [rbp + 8], rsi
lea rax, [r14 - 1]
movabs rcx, 0xccccccccccccb
cmp rax, rcx
ja 0x140027f8f
mov rcx, r14
call fcn.140022220
test eax, eax
je 0x1400278b2
and eax, 0x1fc000
cmp eax, 0x6c000
ja 0x140027f8f
lea rcx, [r14 + 0x280]
call fcn.14001d7d0
comiss xmm6, xmm0
jae 0x140027f8f
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f8], xmm0
mov qword [rbp + 0x408], rsi
mov qword [rbp + 0x410], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3f8], 0
mov byte [rbp + 0x420], 0
lea rax, [rbp + 0x428]
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x18], 0
mov eax, dword [rbp + 0x18]
mov dword [rbp + 0x428], eax
mov qword [rbp + 0x430], rsi
mov qword [rbp + 0x438], rsi
mov ecx, Ordinal_27
call fcn.1400e9e40
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x430], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x440], xmm0
mov qword [rbp + 0x450], rsi
mov qword [rbp + 0x458], 7
mov qword [rbp + 0x460], 8
mov dword [rbp + 0x428], 0x3f800000
mov r8, rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x440]
call fcn.1400037f0
nop
mov qword [rbp + 0x3e0], r14
mov dword [rbp + 0x3e8], r15d
cmp r14, qword [0x140333a50]
sete byte [rbp + 0x3f0]
mov rcx, r14
call fcn.140022220
test eax, eax
jne 0x1400279a6
xor r8b, r8b
jmp 0x1400279b4
and eax, 0x1fc000
cmp eax, 0x8000
setne r8b
mov byte [rbp + 0x3f1], r8b
movzx edx, r14b
xor rdx, rdi
imul rdx, r12
movzx eax, byte [rbp + 9]
xor rdx, rax
imul rdx, r12
movzx eax, byte [rbp + 0xa]
xor rdx, rax
imul rdx, r12
movzx eax, byte [rbp + 0xb]
xor rdx, rax
imul rdx, r12
movzx eax, byte [rbp + 0xc]
xor rdx, rax
imul rdx, r12
movzx eax, byte [rbp + 0xd]
xor rdx, rax
imul rdx, r12
movzx eax, byte [rbp + 0xe]
xor rdx, rax
imul rdx, r12
movzx eax, byte [rbp + 0xf]
xor rdx, rax
imul rdx, r12
and rdx, qword [0x1403338f0]
mov rax, rdx
add rax, rax
mov r9, qword [0x1403338d8]
mov rcx, qword [r9 + rax*8 + 8]
mov rdi, qword [0x1403338c8]
cmp rcx, rdi
je 0x140027a4f
add rdx, rdx
mov rax, qword [r9 + rdx*8]
nop
cmp r14, qword [rcx + 0x10]
je 0x140027a52
cmp rcx, rax
jne 0x1400280f4
mov rcx, rsi
mov rax, rdi
test rcx, rcx
cmovne rax, rcx
cmp rax, rdi
setne byte [rbp + 0x420]
test r8b, r8b
jne 0x140027b28
test r14, r14
je 0x140027b1e
mov rcx, qword [0x1403334c8]
add rcx, r14
call fcn.14001d730
test rax, rax
je 0x140027b1e
mov rdx, qword [0x1403334a8]
add rdx, rax
cmp byte [0x140333476], 0
je 0x140027b10
mov qword [rbp + 0x518], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x520], xmm0
mov qword [rbp + 0x548], rsi
mov dword [rbp + 0x550], esi
mov dword [rbp + 0x510], 0x2dead0f
mov dword [rbp + 0x514], 5
mov qword [rbp + 0x530], rdx
mov qword [rbp + 0x538], 4
lea rax, [rbp + 0x5a8]
mov qword [rbp + 0x540], rax
lea rdi, [rbp + 0x510]
xor eax, eax
xor ecx, ecx
rep stosb byte [rdi], al
lea rcx, [rbp + 0x510]
call qword [0x140333508]
mov eax, dword [rbp + 0x5a8]
mov dword [rbp + 0x3ec], eax
jmp 0x140027b32
mov eax, esi
mov dword [rbp + 0x3ec], eax
jmp 0x140027b32
mov dword [rbp + 0x3ec], 0xffffffff
mov rcx, qword [0x140333490]
add rcx, r14
call fcn.14001d730
lea rcx, [rax + 0x68]
call fcn.14001d730
lea rcx, [rax + 0x178]
call fcn.14001d730
mov qword [rbp + 0x418], rax
lea rcx, [rbp + 0x600]
call fcn.14001b950
mov qword [rbp + 0x694], 0
mov rax, qword [rbp + 0x3e0]
mov qword [rbp + 0x600], rax
mov eax, dword [rbp + 0x3e8]
mov dword [rbp + 0x608], eax
mov eax, dword [rbp + 0x3ec]
mov dword [rbp + 0x60c], eax
movzx eax, byte [rbp + 0x3f0]
mov byte [rbp + 0x610], al
movzx eax, byte [rbp + 0x3f1]
mov byte [rbp + 0x611], al
lea rdx, [rbp + 0x3f8]
lea rcx, [rbp + 0x618]
call fcn.14000dfc0
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x638], rax
movzx eax, byte [rbp + 0x420]
mov byte [rbp + 0x640], al
lea rax, [rbp + 0x648]
mov qword [rbp + 0x10], rax
mov eax, dword [rbp + 0x428]
mov dword [rbp + 0x648], eax
mov rdx, qword [rbp + 0x430]
mov r8, rdx
mov rdx, qword [rdx]
lea rcx, [rbp + 0x650]
call fcn.14002df50
mov rdx, qword [rbp + 0x658]
lea rcx, [rbp + 0x648]
call fcn.14001bef0
mov rdx, rax
lea rcx, [rbp + 0x648]
call fcn.14001bd40
mov qword [rbp + 0x10], rsi
cmp qword [rbp + 0x628], 0
jne case.0x140027c5d.0
movzx eax, byte [0x1403339f0]
cmp eax, 9
ja case.0x140027c5d.3
mov ecx, dword [r13 + rax*4 + 0x29840]
add rcx, r13
jmp rcx
mov rcx, qword [0x1403339f8]
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
jmp 0x140027c7b
mov rax, qword [0x1403339f8]
cmp qword [rax + 8], 0
sete al
test al, al
jne case.0x140027c5d.0
cmp qword [0x140333a10], 0
je case.0x140027c5d.0
movzx ecx, byte [rbp + 0x60c]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x60d]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x60e]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x60f]
xor rcx, rax
imul rcx, r12
and rcx, qword [0x140333a30]
mov rax, rcx
add rax, rax
mov r8, qword [0x140333a18]
mov rdx, qword [r8 + rax*8 + 8]
mov rdi, qword [0x140333a08]
mov eax, dword [rbp + 0x60c]
cmp rdx, rdi
je 0x140027d20
add rcx, rcx
mov r9, qword [r8 + rcx*8]
cmp eax, dword [rdx + 0x10]
je 0x140027d23
nop dword [rax]
cmp rdx, r9
je 0x140027d20
mov rdx, qword [rdx + 8]
cmp eax, dword [rdx + 0x10]
jne 0x140027d10
jmp 0x140027d23
mov rdx, rsi
mov r9, rdi
test rdx, rdx
cmovne r9, rdx
cmp r9, rdi
je 0x140027d9a
cmp eax, 0xffffffff
je 0x140027d9a
add r9, 0x18
lea rax, [rbp + 0x618]
cmp rax, r9
je case.0x140027c5d.0
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x140027d59
mov r9, qword [r9]
mov rax, qword [rbp + 0x630]
cmp rbx, rax
ja 0x140027e48
lea rdi, [rbp + 0x618]
cmp rax, 0xf
cmova rdi, qword [rbp + 0x618]
mov qword [rbp + 0x628], rbx
mov r8, rbx
mov rdx, r9
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x140027e57
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x60], rax
movabs rcx, 0x31060e191493e350
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x68], rax
movabs rax, 0xfa8a53eca25dd473
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x830], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x838], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x830]
movdqa xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x60]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140027e00
mov rax, qword [rbp + 0x630]
cmp rbx, rax
ja 0x140027e44
lea rdi, [rbp + 0x618]
cmp rax, 0xf
cmova rdi, qword [rbp + 0x618]
mov qword [rbp + 0x628], rbx
mov r8, rbx
lea rdx, [rbp + 0x60]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
jmp 0x140027e57
lea r9, [rbp + 0x60]
mov rdx, rbx
lea rcx, [rbp + 0x618]
call fcn.140010390
movabs rbx, 0x9fe73282d038a706
test r14, r14
jne 0x140027e70
mov qword [rbp + 0x30], r14
mov dword [rbp + 0x38], r14d
jmp 0x140027e85
lea rcx, [r14 + 0x90]
lea r8, [rbp + 0x30]
mov edx, ntohl
call fcn.140077340
movsd xmm0, qword [rbp + 0x30]
movsd qword [rbp + 0x688], xmm0
mov eax, dword [rbp + 0x38]
mov dword [rbp + 0x690], eax
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0x330]
call fcn.14001b9f0
movsd xmm0, qword [rbp + 0x688]
movsd qword [rbp + 0x3b8], xmm0
mov eax, dword [rbp + 0x690]
mov dword [rbp + 0x3c0], eax
movsd xmm0, qword [rbp + 0x694]
movsd qword [rbp + 0x3c4], xmm0
mov r9d, 0x796e
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x2c0]
call fcn.140029f10
movsd xmm0, qword [rax]
movsd qword [rbp + 0x140], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x148], eax
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x2b0]
call fcn.14002aee0
movsd xmm1, qword [rax]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp + 0x694], xmm1
ucomiss xmm0, xmm6
jp 0x140027f9b
jne 0x140027f9b
lea rcx, [rbp + 0x600]
call fcn.1400054d0
nop
lea rcx, [rbp + 0x428]
call fcn.140005540
mov rdx, qword [rbp + 0x410]
cmp rdx, 0xf
jbe 0x140027f8f
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027f8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400280ed
call fcn.1400ea0c4
inc r15
mov qword [rbp], r15
jmp 0x140027783
cmp byte [rbp + 0x610], 0
je 0x140027ffb
mov qword [0x140333b38], r14
mov dword [0x140333b40], r15d
movsd xmm0, qword [rbp + 0x688]
movsd qword [0x140333b4c], xmm0
mov eax, dword [rbp + 0x690]
mov dword [0x140333b54], eax
movsd qword [rbp + 0x150], xmm0
mov dword [rbp + 0x158], eax
lea r8, [rbp + 0x150]
lea rdx, [rbp + 0x2b8]
call fcn.14002aee0
movsd xmm0, qword [rax]
movsd qword [0x140333b44], xmm0
mov rdi, qword [0x140333b28]
cmp rdi, qword [0x140333b30]
je 0x140028053
lea rdx, [rbp + 0x600]
mov rcx, rdi
call fcn.14001b9f0
movsd xmm0, qword [rbp + 0x688]
movsd qword [rdi + 0x88], xmm0
mov eax, dword [rbp + 0x690]
mov dword [rdi + 0x90], eax
movsd xmm0, qword [rbp + 0x694]
movsd qword [rdi + 0x94], xmm0
add qword [0x140333b28], 0xa0
jmp 0x14002806a
lea r8, [rbp + 0x600]
mov rdx, rdi
lea rcx, [0x140333b20]
call fcn.14002ec60
nop
jmp 0x140028090
lea rcx, [rbp + 0x600]
call fcn.1400054d0
nop
lea rcx, [rbp + 0x428]
call fcn.140005540
mov rdx, qword [rbp + 0x410]
cmp rdx, 0xf
jbe 0x140027f8f
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027f8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140027f8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rcx + 8]
jmp 0x140027a40
lea rcx, [0x140333a80]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
cmp qword [0x1403339c0], 2
jae 0x140029811
cmp qword [0x140333980], 0
je 0x140028307
cmp qword [0x1403339a0], 0
je 0x140028307
movabs r12, 0x31060e191493e350
movabs r13, 0xfa8a53eca25dd473
lea rbx, [0x140333990]
cmp qword [0x1403339a0], 0
jne 0x140028167
cmp qword [0x1403339c0], 0
jne 0x140029764
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x6e0]
call sub.VCRUNTIME140.dll_memset
cmp qword [0x1403339a8], 0xf
cmova rbx, qword [0x140333990]
mov rdx, rbx
lea rcx, [rbp + 0x6e0]
call fcn.14002cbb0
mov rax, qword [rbp + 0x6e0]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x6e0], rdi
mov rax, qword [rbp + 0x6e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x6dc], edx
xorps xmm0, xmm0
movups xmmword [rbp + 0x588], xmm0
mov qword [rbp + 0x598], rsi
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x5a0], rax
mov byte [rbp + 0x588], 0
cmp qword [rbp + 0x770], 0
je 0x1400296bc
mov rax, qword [rbp + 0x6e0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x6e0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x6e0]
call fcn.14002e840
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x140029682
movabs rax, 0x88ef20b3d62eb51f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x316a7c6c4be18626
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x820]
movdqa xmmword [rbp + 0x90], xmm0
lea rax, [rbp + 0x90]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400282c0
lea r15, [rbp + 0x588]
mov rcx, qword [rbp + 0x588]
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 0xf
cmova r15, rcx
mov r14, qword [rbp + 0x598]
cmp rbx, r14
ja 0x140028f38
test rbx, rbx
jne 0x140028eaf
mov rdi, rsi
jmp 0x140028f3f
mov dword [rbp + 0x580], 0x208
movabs rax, 0xfade53aaa212d420
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x31430e4b14d2e307
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x4ea0fa3a6395331
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xbf06b37abb1aa01b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x32c446bcd29d3821
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xad561d087c02198d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rdx, 0x4ff9115e19f508a1
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rcx, 0xba200a932e561ab6
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs r13, 0xfa8a53eca25dd473
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x8a0], rax
movabs r12, 0x31060e191493e350
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x8a8], rax
movabs rax, 0x49e0fcaa67a536d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8b0], rax
movabs r14, 0xbf68b31fbb60a072
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x8b8], rax
movabs r15, 0x328246e0d2c53867
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
movabs rbx, 0xad1b1d6d7c7419e4
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x8d0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x8d8], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x8a0]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x8c0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x140028553
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x140028553
mov r10d, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rdx, [r10 + r8*4]
mov edx, dword [rdx + r9]
add rdx, r9
mov edi, 0x72b9132d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002854e
nop dword [rax]
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028530
cmp edi, 0x797e034e
je 0x140028558
test r8d, r8d
jne 0x140028510
mov rax, qword [rax]
jmp 0x1400284e0
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r8*2]
mov eax, dword [rdx + rcx*4]
add rax, r9
lea rcx, [rbp + 0x3d0]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x180]
mov rcx, 0xffffffff80000001
call rax
test eax, eax
jne 0x140028148
movabs rax, 0xfafe539fa23cd43f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x31680e6c14c1e370
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x4fd0fa5a636534d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0xbf07b376bb14a013
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x328246e0d2c53809
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
movabs rdi, 0x49e0fcaa67a536d
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x850], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x858], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x840]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqa xmm0, xmmword [rbp + 0x260]
vxorps xmm0, xmm0, xmmword [rbp + 0x860]
vmovdqa xmmword [rbp + 0x260], xmm0
lea rax, [rbp + 0x580]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x900]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x240]
mov rcx, qword [rbp + 0x3d0]
vzeroupper
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140028deb
movabs r15, 0x99eb30b0c329b517
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x59756f6b77cf8638
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x49e76b8d21f3e02
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x890], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x898], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x880]
vmovdqa ymmword [rbp + 0x120], ymm1
lea rdx, [rbp + 0x900]
lea rcx, [rbp + 0x2d0]
vzeroupper
call fcn.14002c600
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.140088920
nop
lea rcx, [rbp + 0x120]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x1400287e0
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.140003610
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
mov qword [rbp + 0x5d0], rsi
mov qword [rbp + 0x5d8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5d0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140028879
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028874
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028874
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
mov qword [rbp + 0x220], rsi
mov qword [rbp + 0x228], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x210], 0
lea rax, [rbp + 0x5c0]
cmp qword [rbp + 0x5d8], 0xf
cmova rax, qword [rbp + 0x5c0]
mov qword [rbp + 0x5e0], rax
mov rax, qword [rbp + 0x5d0]
mov qword [rbp + 0x5e8], rax
call fcn.1400e98d0
movaps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x2a0], xmm0
lea r8, [rbp + 0x2a0]
mov edx, eax
lea rcx, [rbp + 0xc0]
call fcn.1400217a0
nop
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova rcx, qword [rbp + 0xc0]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x6c0]
call fcn.1400e9a0c
mov edx, eax
test eax, eax
jne 0x140028959
mov ecx, dword [rbp + 0x6d0]
bt ecx, 0xa
jae 0x14002894b
mov eax, dword [rbp + 0x6d4]
cmp eax, 0xa000000c
jne 0x14002893c
lea r14d, [rdx + 4]
jmp 0x140028977
cmp eax, 0xa0000003
jne 0x14002894b
mov r14d, 0xa
jmp 0x140028977
and ecx, 0x10
or ecx, 0x20
shr ecx, 4
mov r14d, ecx
jmp 0x140028977
sub eax, 2
je 0x140028971
sub eax, 1
je 0x140028971
sub eax, 0x32
je 0x140028971
cmp eax, 0x46
je 0x140028971
xor al, al
jmp 0x140028973
mov al, 1
movzx r14d, al
mov dword [rbp + 0x1c0], edx
lea rax, [0x140315108]
mov qword [rbp + 0x1c8], rax
movaps xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x5e0], xmm0
test r14d, r14d
je 0x1400289f8
mov dword [rbp + 0x5e0], esi
mov qword [rbp + 0x5e8], rax
cmp r14d, 1
setne dil
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x140028a0a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028a05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028a05
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor dil, dil
test edx, edx
jne 0x140029818
jmp 0x1400289b4
call fcn.1400ea0c4
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], si
test dil, dil
je 0x140028d85
lea rdx, [rbp + 0x900]
lea rcx, [rbp + 0x2f0]
call fcn.14002c600
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.140088920
mov rdi, rax
lea rbx, [0x140333970]
cmp rbx, rax
je 0x140028ace
mov rdx, qword [0x140333988]
cmp rdx, 0xf
jbe 0x140028a9a
mov rcx, qword [0x140333970]
inc rdx
cmp rdx, 0x1000
jb 0x140028a95
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140028b06
mov rcx, r8
call fcn.1400ea0c4
movdqa xmm0, xmmword [0x1402ff530]
movdqu xmmword [0x140333980], xmm0
mov byte [0x140333970], 0
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x140028b12
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028b0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028b0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
mov qword [rbp + 0x200], rsi
mov qword [rbp + 0x208], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1f0], 0
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x59756f6b77cf8638
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x49e76b8d21f3e02
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rcx, 0xbf68b31fbb60a072
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x8e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x8e8], rax
movabs rax, 0x49e0fcaa67a536d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x8f8], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x8e0]
vmovdqa ymmword [rbp + 0x100], ymm1
lea rdx, [rbp + 0x900]
lea rcx, [rbp + 0x310]
vzeroupper
call fcn.14002c600
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.140088920
nop
lea rcx, [rbp + 0x100]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x140028c20
lea rdx, [rbp + 0x100]
mov rcx, rax
call fcn.140003610
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0x160], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x170], xmm7
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rbx, [0x140333990]
lea rax, [rbp + 0x160]
cmp rbx, rax
je 0x140028ce0
mov rdx, qword [0x1403339a8]
cmp rdx, 0xf
jbe 0x140028cad
mov rcx, qword [0x140333990]
inc rdx
cmp rdx, 0x1000
jb 0x140028ca8
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140028d19
mov rcx, rdi
call fcn.1400ea0c4
movdqa xmm0, xmmword [0x1402ff530]
movdqu xmmword [0x1403339a0], xmm0
mov byte [0x140333990], 0
movups xmmword [rbx], xmm6
movups xmmword [rbx + 0x10], xmm7
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x178], rax
mov byte [rbp + 0x160], 0
jmp 0x140028ce7
mov rax, qword [rbp + 0x178]
cmp rax, 0xf
jbe 0x140028d26
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028d20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028d20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x140028d6a
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028d65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028d65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
mov qword [rbp + 0x1e0], rsi
mov qword [rbp + 0x1e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d0], 0
jmp 0x140028d8c
lea rbx, [0x140333990]
mov rdx, qword [rbp + 0x5d8]
cmp rdx, 0xf
jbe 0x140028dd0
inc rdx
mov rcx, qword [rbp + 0x5c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028dcb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028dcb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
mov qword [rbp + 0x5d0], rsi
mov qword [rbp + 0x5d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5c0], 0
jmp 0x140028df2
lea rbx, [0x140333990]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x140028e83
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x140028e83
mov r10d, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rdx, [r10 + r8*4]
mov edx, dword [rdx + r9]
add rdx, r9
mov edi, 0xbfe96638
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140028e7e
nop dword [rax]
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028e60
cmp edi, 0x994209d5
je 0x140028e88
test r8d, r8d
jne 0x140028e40
mov rax, qword [rax]
jmp 0x140028e10
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r8*2]
mov eax, dword [rdx + rcx*4]
add rax, r9
mov rcx, qword [rbp + 0x3d0]
call rax
jmp 0x14002814f
mov r12, r15
sub r12, rbx
movq rax, xmm0
movsx r13d, al
lea r8, [r14 + 1]
add r8, r12
sub r8, r15
mov edx, r13d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140028f16
nop dword [rax + rax]
mov r8, rbx
lea rdx, [rbp + 0x90]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140028f70
inc rdi
lea r8, [r14 + 1]
add r8, r12
sub r8, rdi
mov edx, r13d
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140028ee0
mov rcx, qword [rbp + 0x588]
mov rdx, qword [rbp + 0x5a0]
movabs r12, 0x31060e191493e350
movabs r13, 0xfa8a53eca25dd473
mov rdi, 0xffffffffffffffff
cmp rdi, 0xffffffffffffffff
je 0x14002967b
add rdi, 0xf
xorps xmm0, xmm0
movups xmmword [rbp + 0x560], xmm0
mov qword [rbp + 0x570], rsi
mov qword [rbp + 0x578], rsi
cmp r14, rdi
jb 0x14002982c
jmp 0x140028f97
sub rdi, r15
mov rcx, qword [rbp + 0x588]
mov rdx, qword [rbp + 0x5a0]
movabs r12, 0x31060e191493e350
movabs r13, 0xfa8a53eca25dd473
jmp 0x140028f3f
mov qword [rbp + 0x6b8], 0xffffffffffffffff
sub r14, rdi
mov qword [rbp + 0x280], r14
mov r8, 0xffffffffffffffff
cmp r14, r8
cmovb r8, r14
lea rax, [rbp + 0x588]
cmp rdx, 0xf
cmova rax, rcx
lea rdx, [rax + rdi]
lea rcx, [rbp + 0x560]
call fcn.140004260
nop
movabs rax, 0x88ef20b3d62eb51f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x31060e1914e18626
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x810]
movdqa xmmword [rbp + 0x70], xmm0
lea rax, [rbp + 0x70]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140029040
lea r15, [rbp + 0x560]
mov rcx, qword [rbp + 0x560]
mov rdx, qword [rbp + 0x578]
cmp rdx, 0xf
cmova r15, rcx
mov r14, qword [rbp + 0x570]
cmp rbx, r14
ja 0x140029105
test rbx, rbx
jne 0x140029083
mov rdi, rsi
jmp 0x14002910c
mov r12, r15
sub r12, rbx
movq rax, xmm0
movsx r13d, al
lea r8, [r14 + 1]
add r8, r12
sub r8, r15
mov edx, r13d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x1400290e3
nop
mov r8, rbx
lea rdx, [rbp + 0x70]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140029133
inc rdi
lea r8, [r14 + 1]
add r8, r12
sub r8, rdi
mov edx, r13d
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400290b0
mov rcx, qword [rbp + 0x560]
mov rdx, qword [rbp + 0x578]
movabs r12, 0x31060e191493e350
movabs r13, 0xfa8a53eca25dd473
mov rdi, 0xffffffffffffffff
add rdi, 0xb
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], rsi
cmp r14, rdi
jb 0x140029832
jmp 0x14002915a
sub rdi, r15
mov rcx, qword [rbp + 0x560]
mov rdx, qword [rbp + 0x578]
movabs r12, 0x31060e191493e350
movabs r13, 0xfa8a53eca25dd473
jmp 0x14002910c
mov qword [rbp + 0x6b0], 0xffffffffffffffff
sub r14, rdi
mov qword [rbp + 0x290], r14
mov r8, 0xffffffffffffffff
cmp r14, r8
cmovb r8, r14
lea rax, [rbp + 0x560]
cmp rdx, 0xf
cmova rax, rcx
lea rdx, [rax + rdi]
lea rcx, [rbp + 0xe0]
call fcn.140004260
mov rdx, qword [rbp + 0x578]
cmp rdx, 0xf
jbe 0x1400291dd
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400291d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002962a
call fcn.1400ea0c4
movups xmm0, xmmword [rbp + 0xe0]
movups xmmword [rbp + 0x560], xmm0
movups xmm1, xmmword [rbp + 0xf0]
movups xmmword [rbp + 0x570], xmm1
mov qword [rbp + 0xf0], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov byte [rbp + 0xe0], 0
movabs rax, 0xfa8a53eca25dd449
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x800]
movdqa xmmword [rbp + 0x80], xmm0
lea rax, [rbp + 0x80]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140029280
lea r14, [rbp + 0x560]
mov rax, qword [rbp + 0x560]
cmp qword [rbp + 0x578], 0xf
cmova r14, rax
mov r13, qword [rbp + 0x570]
cmp rbx, r13
ja 0x14002933b
test rbx, rbx
jne 0x1400292c0
mov rdi, rsi
jmp 0x140029342
mov r15, r14
sub r15, rbx
movq rax, xmm0
movsx r12d, al
lea r8, [r13 + 1]
add r8, r15
sub r8, r14
mov edx, r12d
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x14002932a
nop dword [rax]
mov r8, rbx
lea rdx, [rbp + 0x80]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14002938f
inc rdi
lea r8, [r13 + 1]
add r8, r15
sub r8, rdi
mov edx, r12d
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400292f0
mov rax, qword [rbp + 0x560]
movabs r12, 0x31060e191493e350
mov rdi, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x6a8], rdi
mov qword [rbp + 0x288], r13
mov r8, rdi
cmp r13, rdi
cmovb r8, r13
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x578], 0xf
jbe 0x1400293a5
mov rdx, rax
call fcn.140004260
lea rbx, [0x1403339b0]
jmp 0x1400293ba
sub rdi, r14
mov rax, qword [rbp + 0x560]
movabs r12, 0x31060e191493e350
jmp 0x140029342
call fcn.140004260
lea rbx, [0x1403339b0]
lea rax, [rbp + 0x40]
cmp rbx, rax
je 0x14002942c
mov rdx, qword [0x1403339c8]
cmp rdx, 0xf
jbe 0x1400293fb
mov rcx, qword [0x1403339b0]
inc rdx
cmp rdx, 0x1000
jb 0x1400293f6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002962a
mov rcx, r8
call fcn.1400ea0c4
movdqa xmm0, xmmword [0x1402ff530]
movdqu xmmword [0x1403339c0], xmm0
mov byte [0x1403339b0], 0
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp + 0x50]
movups xmmword [rbx + 0x10], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
jmp 0x140029430
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140029467
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029462
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002962a
call fcn.1400ea0c4
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
movabs rax, 0xfa8a53eca25dd478
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x5b0], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x5b8], rax
movabs rax, 0xfa8a53eca25dd473
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x7f0], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x7f8], rax
movdqa xmm0, xmmword [rbp + 0x5b0]
xorps xmm0, xmmword [rbp + 0x7f0]
movdqa xmmword [rbp + 0x5b0], xmm0
lea rdx, [rbp + 0x5b0]
lea rcx, [rbp + 0x560]
call fcn.14002c750
mov r8, rax
sub r8, rdi
dec r8
inc rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], rsi
mov rax, qword [rbp + 0x570]
cmp rax, rdi
jb 0x140029838
sub rax, rdi
cmp rax, r8
cmovb r8, rax
lea rax, [rbp + 0x560]
lea rcx, [rbp + 0xa0]
cmp qword [rbp + 0x578], 0xf
jbe 0x14002955f
mov rdx, qword [rbp + 0x560]
add rdx, rdi
call fcn.140004260
lea rdi, [0x1403339d0]
jmp 0x14002957b
lea rdx, [rax + rdi]
call fcn.140004260
lea rdi, [0x1403339d0]
lea rax, [rbp + 0xa0]
cmp rdi, rax
je 0x1400295f2
mov rdx, qword [0x1403339e8]
cmp rdx, 0xf
jbe 0x1400295b8
mov rcx, qword [0x1403339d0]
inc rdx
cmp rdx, 0x1000
jb 0x1400295b3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002962a
mov rcx, r8
call fcn.1400ea0c4
movdqa xmm0, xmmword [0x1402ff530]
movdqu xmmword [0x1403339e0], xmm0
mov byte [0x1403339d0], 0
movups xmm0, xmmword [rbp + 0xa0]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0xb0]
movups xmmword [rdi + 0x10], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa0], 0
jmp 0x1400295f9
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140029637
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029631
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140029631
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
nop
mov rdx, qword [rbp + 0x578]
cmp rdx, 0xf
jbe 0x14002967b
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029676
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140029676
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
lea rdi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
lea rcx, [rbp + 0x6f0]
call fcn.14002caf0
test rax, rax
jne 0x1400296b5
mov rax, qword [rbp + 0x6e0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x6e0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rax, qword [rbp + 0x5a0]
cmp rax, 0xf
jbe 0x1400296fa
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400296f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400296f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ea0c4
mov qword [rbp + 0x598], rsi
mov qword [rbp + 0x5a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x588], 0
mov rax, qword [rbp + 0x6e0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x6e0], rdi
mov rax, qword [rbp + 0x6e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x6dc], edx
lea rcx, [rbp + 0x6f0]
call fcn.14002c4c0
lea rcx, [rbp + 0x6f8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x790]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
cmp qword [0x1403339c0], 5
jb 0x14002980a
cmp qword [0x1403339e0], 2
jb 0x14002980a
mov ecx, 8
call fcn.1400e9e40
mov rcx, qword [rbp + 0x5f0]
mov qword [rax], rcx
mov qword [rbp + 0x5f0], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x14002ee40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1400297fb
cmp dword [rbp + 0x28], 0
je 0x1400297ef
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x7f0], xmm0
lea rcx, [rbp + 0x7f0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400297ef
mov al, 1
jmp 0x140027631
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x28], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov byte [0x140333a40], 1
mov al, 1
jmp 0x140027631
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0x5e0]
call fcn.1400221c0
nop
call fcn.14000f430
nop
call fcn.14000f430
int3
call fcn.14000f430
int3