Function at 0x1400045b0
Capabilities:
Execute command
Resume thread
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6f0]
sub rsp, 0x7f0
mov rax, qword [0x14005f010]
xor rax, rsp
mov qword [rbp + 0x6e0], rax
mov rdi, rdx
movsxd r14, ecx
xor ebx, ebx
mov dword [rsp + 0x50], ebx
mov dword [0x140060128], 5
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x70], rax
mov rdx, qword [rdx]
mov qword [rsp + 0x60], rdx
mov r15, 0xffffffffffffffff
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140004620
mov qword [rsp + 0x68], rax
call fcn.14001ddf0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x160], xmm0
lea r8, [rbp + 0x160]
mov edx, eax
lea rcx, [rbp + 0xf8]
call fcn.140002a80
mov esi, 0x4000
mov dword [rsp + 0x50], esi
btr esi, 0xe
mov dword [rsp + 0x50], esi
bts esi, 0xd
mov dword [rsp + 0x50], esi
btr esi, 0xd
mov dword [rsp + 0x50], esi
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0xf8]
call fcn.140002fa0
nop
mov rdx, qword [rbp + 0x110]
cmp rdx, 8
jb 0x1400046d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400046ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x108], rbx
mov qword [rbp + 0x110], 7
mov word [rbp + 0xf8], bx
lea rcx, [rbp + 0x440]
cmp qword [rbp + 0x458], 8
cmovae rcx, qword [rbp + 0x440]
call fcn.14001e08c
test eax, eax
jne 0x140006c71
lea r13, [0x14005f090]
lea r12, [0x14005f070]
test r14, r14
jle 0x14000481f
nop word [rax + rax]
mov rcx, qword [rdi + rbx*8]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x140004740
cmp r8, 8
jne 0x140004782
lea rdx, str._account
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140004782
inc rbx
mov rdx, qword [rdi + rbx*8]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140004770
mov rcx, r13
call fcn.140008eb0
mov rcx, qword [rdi + rbx*8]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x140004790
cmp r8, 7
jne 0x1400047d2
lea rdx, str._region
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400047d2
inc rbx
mov rdx, qword [rdi + rbx*8]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400047c0
mov rcx, r12
call fcn.140008eb0
mov rcx, qword [rdi + rbx*8]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x1400047e0
cmp r8, 2
jne 0x140004813
lea rdx, [0x140022c68]
call sub.VCRUNTIME140.dll_memcmp
movzx ecx, byte [0x14005f068]
test eax, eax
mov eax, 1
cmove ecx, eax
mov byte [0x14005f068], cl
inc rbx
cmp rbx, r14
jl 0x140004730
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x460], xmm0
xor r14d, r14d
mov qword [rbp + 0x470], r14
mov qword [rbp + 0x478], r14
xor r8d, r8d
lea rdx, [0x140022a7b]
lea rcx, [rbp + 0x460]
call fcn.14000acd0
nop
lea rcx, [rbp + 0x460]
call fcn.1400043a0
movzx eax, byte [0x1400601b0]
cmp qword [0x140060170], r14
mov ebx, 1
cmove eax, ebx
mov byte [0x1400601b0], al
lea rdx, str.cfg.ini
call fcn.1400093f0
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x38]
call fcn.140006df0
test al, al
jne 0x14000497d
lea rdx, str.Failed_to_open_GenshinImpact_process.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009e80
lea rdx, [0x14000a060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140022ca0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp + 0x478]
cmp rdx, 0x10
jb 0x140004917
inc rdx
mov rcx, qword [rbp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004912
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006bb1
call fcn.14001d170
mov qword [rbp + 0x470], r14
mov qword [rbp + 0x478], 0xf
mov byte [rbp + 0x460], 0
mov rdx, qword [rbp + 0x458]
cmp rdx, 8
jb 0x140004976
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004971
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006c13
call fcn.14001d170
mov eax, ebx
jmp 0x140006c21
lea rcx, [rbp + 0x440]
cmp qword [rbp + 0x458], 8
cmovae rcx, qword [rbp + 0x440]
call fcn.14001e08c
test eax, eax
jne 0x140006c80
lea r9, [0x140022a7b]
lea r8, str.GenshinPath
lea rdx, str.Inject
call fcn.1400095b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a0], xmm0
mov qword [rbp + 0x4b0], r14
mov qword [rbp + 0x4b8], r14
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x1400049d6
mov rdx, rax
lea rcx, [rbp + 0x4a0]
call fcn.14000acd0
nop
lea rax, [rbp + 0x4a0]
cmp qword [rbp + 0x4b8], 0x10
cmovae rax, qword [rbp + 0x4a0]
mov rdx, qword [rbp + 0x4b0]
cmp rdx, 0x11
jb 0x140004a5a
mov rcx, qword [rax + rdx - 0x11]
movabs r8, 0x496e6968736e6547
sub rcx, r8
jne 0x140004a4c
mov rcx, qword [rax + rdx - 9]
movabs r8, 0x78652e746361706d
sub rcx, r8
jne 0x140004a4c
movzx ecx, byte [rax + rdx - 1]
mov eax, 0x65
movzx eax, al
sub rcx, rax
test rcx, rcx
sete al
test al, al
je 0x140004a5a
mov al, 1
jmp 0x140004a5c
xor al, al
mov byte [0x140060123], al
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x4a0]
cmp qword [rbp + 0x4b8], 0x10
cmovae rax, qword [rbp + 0x4a0]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x4b0]
mov qword [rsp + 0x68], rax
call fcn.14001ddf0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x170], xmm0
lea r8, [rbp + 0x170]
mov edx, eax
lea rcx, [rbp + 0x5b0]
call fcn.140002a80
or esi, 0x40
mov dword [rsp + 0x50], esi
and esi, 0xffffffbf
mov dword [rsp + 0x50], esi
or esi, 0x20
mov dword [rsp + 0x50], esi
and esi, 0xffffffdf
mov dword [rsp + 0x50], esi
call fcn.140009500
lea r9, str.load
lea r8, str.Method
lea rdx, str.Inject
call fcn.1400095b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4e0], xmm0
mov qword [rbp + 0x4f0], r14
mov qword [rbp + 0x4f8], r14
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140004b13
mov rdx, rax
lea rcx, [rbp + 0x4e0]
call fcn.14000acd0
nop
lea r9, [rbp + 0x4e0]
cmp qword [rbp + 0x4f8], 0x10
cmovae r9, qword [rbp + 0x4e0]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r14
lea r8, str.Method
lea rdx, str.Inject
call fcn.1400098b0
call fcn.140009500
lea rcx, [0x140060170]
call fcn.140009320
xorps xmm0, xmm0
movups xmmword [rbp + 0x540], xmm0
mov qword [rbp + 0x550], r14
mov qword [rbp + 0x558], r14
mov r8d, 0x11
lea rdx, str.com_antivirus.dll
lea rcx, [rbp + 0x540]
call fcn.14000acd0
nop
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x540]
cmp qword [rbp + 0x558], 0x10
cmovae rax, qword [rbp + 0x540]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x550]
mov qword [rsp + 0x68], rax
call fcn.14001ddf0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x180], xmm0
lea r8, [rbp + 0x180]
mov edx, eax
lea rcx, [rbp + 0xd8]
call fcn.140002a80
bts esi, 8
mov dword [rsp + 0x50], esi
btr esi, 8
mov dword [rsp + 0x50], esi
bts esi, 7
mov dword [rsp + 0x50], esi
btr esi, 7
mov dword [rsp + 0x50], esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], r14w
bts esi, 9
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x10]
call fcn.140003ab0
test eax, eax
jne 0x140006c8f
lea r8, [rbp + 0xd8]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x578]
call fcn.1400030b0
nop
btr esi, 9
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140004cbb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004cb6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], r14w
mov rdx, qword [rbp + 0xf0]
cmp rdx, 8
jb 0x140004d15
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0xe8], r14
mov qword [rbp + 0xf0], 7
mov word [rbp + 0xd8], r14w
cmp qword [rbp + 0x4f0], 0
jne 0x140004d52
mov r8d, 4
lea rdx, str.load
lea rcx, [rbp + 0x4e0]
call fcn.140008eb0
mov r12, qword [rbp - 0x38]
cmp byte [0x140060120], 0
je 0x14000522e
cmp byte [0x140060121], 0
je 0x140005007
cmp qword [0x14005f0c0], 0
je 0x140005007
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x2e0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x2e0]
call fcn.1400075d0
nop
mov rax, qword [rbp + 0x2e0]
movsxd rcx, dword [rax + 4]
cmp dword [rbp + rcx + 0x2f0], 0
jne 0x140004e97
xorps xmm0, xmm0
movups xmmword [rbp + 0x500], xmm0
mov qword [rbp + 0x510], r14
mov qword [rbp + 0x518], r14
mov qword [rbp + 0x510], r14
mov qword [rbp + 0x518], 0xf
mov byte [rbp + 0x500], 0
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x2e0]
call fcn.14000c4a0
mov rax, qword [0x140060238]
cmp rax, qword [0x140060240]
je 0x140004e25
lea rdx, [rbp + 0x500]
mov rcx, rax
call fcn.140008860
add qword [0x140060238], 0x20
jmp 0x140004e35
lea r8, [rbp + 0x500]
mov rdx, rax
call fcn.14000c8f0
nop
mov rdx, qword [rbp + 0x518]
cmp rdx, 0x10
jb 0x140004e72
inc rdx
mov rcx, qword [rbp + 0x500]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e90
call fcn.14001d170
mov qword [rbp + 0x510], r14
mov qword [rbp + 0x518], 0xf
mov byte [rbp + 0x500], 0
jmp 0x140004d9f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edi, r14d
mov rax, qword [0x140060238]
sub rax, qword [0x140060230]
sar rax, 5
test rax, rax
je 0x140004fa2
mov rbx, r14
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0xd0], r14
mov r8d, 4
lea rdx, str.load
lea rcx, [rbp + 0xb8]
call fcn.14000acd0
nop
mov rax, qword [0x140060238]
mov rcx, qword [0x140060230]
sub rax, rcx
sar rax, 5
cmp rax, rbx
jbe 0x140006c97
shl rbx, 5
lea rdx, [rcx + rbx]
lea r8, [rbp + 0xb8]
mov rcx, r12
call fcn.1400015f0
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x140004f69
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005074
call fcn.14001d170
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], 0
inc edi
movsxd rbx, edi
mov rax, qword [0x140060238]
sub rax, qword [0x140060230]
sar rax, 5
cmp rbx, rax
jb 0x140004ec0
lea rax, [rbp + 0x378]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x2e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x2e0], rax
mov rax, qword [rbp + 0x2e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x2dc], edx
lea rcx, [rbp + 0x2f8]
call fcn.140008340
nop
lea rcx, [rbp + 0x300]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x378]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov r14, qword [rbp - 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ResumeThread]
lea rcx, [rbp + 0x30]
call fcn.140002930
nop
mov r8, rax
lea rcx, [rbp + 0x50]
call fcn.14000a0a0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x22
jb 0x14000507b
lea rax, [rcx + 0x22]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x140005055
mov rax, qword [rdi]
lea rbx, [rax + rcx]
mov r8d, 0x22
lea rdx, str.ms_before_injecting_the_Korepi_dll
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x22], 0
jmp 0x14000509b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x20], 0x22
lea r9, str.ms_before_injecting_the_Korepi_dll
mov edx, 0x22
mov rcx, rdi
call fcn.14000b480
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x420], xmm0
xor ebx, ebx
mov qword [rbp + 0x430], rbx
mov qword [rbp + 0x438], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x420], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x430], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bl
bts esi, 0xb
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x14000511e
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005119
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005119
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14000516c
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005167
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005167
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
lea rax, [rbp + 0x420]
cmp qword [rbp + 0x438], 0x10
cmovae rax, qword [rbp + 0x420]
mov qword [rsp + 0x20], rax
lea r9, [0x140022d18]
mov r8d, 0x1a4
lea rdx, str.F:ProjectsGenshin_Impact_ProjectAkebiKorepiinjector_srcmain.cpp
mov ecx, 5
call fcn.14001bab0
mov ecx, dword [0x140060124]
call qword [sym.imp.KERNEL32.dll_Sleep]
btr esi, 0xb
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x438]
cmp rdx, 0x10
jb 0x14000520e
inc rdx
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005209
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005209
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x430], rbx
mov qword [rbp + 0x438], 0xf
mov byte [rbp + 0x420], 0
mov ebx, 1
jmp 0x140005232
mov r14, qword [rbp - 0x30]
lea rdi, [rbp + 0x460]
cmp qword [rbp + 0x478], 0x10
cmovae rdi, qword [rbp + 0x460]
lea rax, [rbp + 0x578]
cmp qword [rbp + 0x590], 8
cmovae rax, qword [rbp + 0x578]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x588]
mov qword [rsp + 0x68], rax
call fcn.14001ddf0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x190], xmm0
lea r8, [rbp + 0x190]
mov edx, eax
lea rcx, [rbp + 0x118]
call fcn.14000e840
or esi, 0x10
mov dword [rsp + 0x50], esi
and esi, 0xffffffef
mov dword [rsp + 0x50], esi
or esi, 8
mov dword [rsp + 0x50], esi
and esi, 0xfffffff7
mov dword [rsp + 0x50], esi
or esi, 4
mov dword [rsp + 0x50], esi
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x5d0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x1b]
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x5d0]
call fcn.14001a050
nop
lea rcx, [rbp + 0x5d0]
call fcn.140019f90
test al, al
jne 0x1400053a7
lea rdx, [0x140018150]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x140023178]
call fcn.140009e80
lea rdx, [0x1400180f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, str.ERROR
call fcn.140009e80
lea rdx, [0x140018150]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x1400239a8]
call fcn.140009e80
mov rcx, rax
lea rdx, str.Error_while_reading_DLL_file_
call fcn.140009e80
lea rdx, [0x14000a060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x680]
call fcn.140019fc0
lea rcx, [rbp + 0x680]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
xor dil, dil
jmp 0x14000544e
lea rdx, [rbp + 0x598]
lea rcx, [rbp + 0x5d0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____cdecl_std::basic_istream_char__struct_std::char_traits_char__::tellg_void____ptr64]
mov rcx, qword [rbp + 0x598]
add rcx, qword [rbp + 0x5a0]
call fcn.14001d40c
mov rbx, rax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x5d0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int____ptr64]
mov r8, qword [rbp + 0x5a0]
add r8, qword [rbp + 0x598]
mov rdx, rbx
lea rcx, [rbp + 0x5d0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x5d0]
call fcn.140019f30
mov r8, qword [rbp + 0x5a0]
add r8, qword [rbp + 0x598]
mov r9, rdi
mov rdx, rbx
mov rcx, r12
call fcn.14001c6b0
movzx edi, al
mov rcx, rbx
call fcn.14001d170
nop
lea rcx, [rbp + 0x680]
call fcn.140019fc0
lea rcx, [rbp + 0x680]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
and esi, 0xfffffffb
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x140005499
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005494
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005494
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
xor ebx, ebx
mov qword [rbp + 0x128], rbx
mov qword [rbp + 0x130], 0xf
mov byte [rbp + 0x118], bl
test dil, dil
jne 0x1400054bc
xor ecx, ecx
int 0x29
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x140060120], bl
jne 0x14000577e
cmp byte [0x140060121], bl
je 0x14000576a
cmp qword [0x14005f0c0], rbx
je 0x14000576a
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x1e0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x1e0]
call fcn.1400075d0
nop
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
cmp dword [rbp + rcx + 0x1f0], 0
jne 0x140005605
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
mov qword [rbp + 0x530], rbx
mov qword [rbp + 0x538], rbx
mov qword [rbp + 0x530], rbx
mov qword [rbp + 0x538], 0xf
mov byte [rbp + 0x520], 0
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0x1e0]
call fcn.14000c4a0
mov rax, qword [0x140060238]
cmp rax, qword [0x140060240]
je 0x140005593
lea rdx, [rbp + 0x520]
mov rcx, rax
call fcn.140008860
add qword [0x140060238], 0x20
jmp 0x1400055a3
lea r8, [rbp + 0x520]
mov rdx, rax
call fcn.14000c8f0
nop
mov rdx, qword [rbp + 0x538]
cmp rdx, 0x10
jb 0x1400055e0
inc rdx
mov rcx, qword [rbp + 0x520]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400055fe
call fcn.14001d170
mov qword [rbp + 0x530], rbx
mov qword [rbp + 0x538], 0xf
mov byte [rbp + 0x520], 0
jmp 0x14000550d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edi, ebx
mov rax, qword [0x140060238]
sub rax, qword [0x140060230]
sar rax, 5
test rax, rax
je 0x140005705
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xor eax, eax
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], rax
lea r8d, [rax + 4]
lea rdx, str.load
lea rcx, [rbp + 0x98]
call fcn.14000acd0
nop
mov rax, qword [0x140060238]
mov rcx, qword [0x140060230]
sub rax, rcx
sar rax, 5
cmp rax, rbx
jbe 0x140006cc6
shl rbx, 5
lea rdx, [rcx + rbx]
lea r8, [rbp + 0x98]
mov rcx, r12
call fcn.1400015f0
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x1400056cb
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059fc
call fcn.14001d170
xor eax, eax
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], al
inc edi
movsxd rbx, edi
mov rax, qword [0x140060238]
sub rax, qword [0x140060230]
sar rax, 5
cmp rbx, rax
jb 0x140005622
lea rax, [rbp + 0x278]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1dc], edx
lea rcx, [rbp + 0x1f8]
call fcn.140008340
nop
lea rcx, [rbp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x278]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ResumeThread]
lea rax, str.SoftwaremiHoYoGenshin_Impact
lea rdx, str.SoftwaremiHoYo_
cmp byte [0x140060123], 0
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x480], xmm0
xor r14d, r14d
mov qword [rbp + 0x490], r14
mov qword [rbp + 0x498], r14
mov r8, r15
inc r8
cmp word [rdx + r8*2], r14w
jne 0x1400057b5
lea rcx, [rbp + 0x480]
call fcn.14000aa40
nop
cmp qword [0x14005f0a0], 0
je 0x140005b96
movzx eax, byte [0x1400601b0]
cmp qword [0x140060170], 0
mov ecx, 1
cmove eax, ecx
mov byte [0x1400601b0], al
lea rdx, str.accounts.ini
call fcn.1400093f0
mov r8, r13
cmp qword [0x14005f0a8], 0x10
cmovae r8, qword [0x14005f090]
xor r9d, r9d
lea rdx, str.Accounts
call fcn.1400095b0
mov r8, r13
lea rdx, str.Accounts
test rax, rax
je 0x140005b31
cmp qword [0x14005f0a8], 0x10
cmovae r8, qword [0x14005f090]
xor r9d, r9d
call fcn.1400095b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], r14
mov qword [rbp + 0x418], r14
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005870
mov rdx, rax
lea rcx, [rbp + 0x400]
call fcn.14000acd0
nop
mov qword [rsp + 0x78], r14
mov qword [rbp + 0x1d0], r14
lea rdx, [rbp + 0x480]
cmp qword [rbp + 0x498], 8
cmovae rdx, qword [rbp + 0x480]
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x2011f
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x140006c9d
mov rbx, qword [rbp + 0x1d0]
mov qword [rsp + 0x78], rbx
lea rdx, [rbp + 0x400]
cmp qword [rbp + 0x418], 0x10
cmovae rdx, qword [rbp + 0x400]
mov r8, qword [rbp + 0x410]
add r8, rdx
lea rdx, [rbp + 0x400]
cmp qword [rbp + 0x418], 0x10
cmovae rdx, qword [rbp + 0x400]
lea rcx, [rbp - 8]
call fcn.14000a1d0
mov rdi, rax
lea rax, str.MIHOYOSDK_ADL_PROD_OVERSEA_h1158948810
lea rdx, str.MIHOYOSDK_ADL_PROD_CN_h3123967166
cmp byte [0x140060123], 0
cmovne rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov r8, r15
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140005970
lea rcx, [rbp - 0x80]
call fcn.14000aa40
nop
mov ecx, dword [rdi + 8]
sub ecx, dword [rdi]
mov rax, qword [rdi]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140006ccc
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140005a08
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14001d170
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140005a62
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r14
test rbx, rbx
je 0x140005a9e
mov eax, 0x80000000
add rax, rbx
cmp rax, 5
jbe 0x140005a99
cmp rbx, 0xffffffff80000007
je 0x140005a99
cmp rbx, 0xffffffff80000060
je 0x140005a99
cmp rbx, 0xffffffff80000050
je 0x140005a99
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x78], r14
cmp qword [0x14005f0a8], 0x10
cmovae r13, qword [0x14005f090]
mov qword [rsp + 0x20], r13
lea r9, str.Switched_account_to__s
mov r8d, 0x1ef
lea rdx, str.F:ProjectsGenshin_Impact_ProjectAkebiKorepiinjector_srcmain.cpp
mov ecx, 5
call fcn.14001bab0
nop
mov rdx, qword [rbp + 0x418]
cmp rdx, 0x10
jb 0x140005b16
inc rdx
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005b11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x410], r14
mov qword [rbp + 0x418], 0xf
mov byte [rbp + 0x400], 0
jmp 0x140005b8a
cmp qword [0x14005f0a8], 0x10
cmovae r8, qword [0x14005f090]
xor r9d, r9d
call fcn.1400095b0
test rax, rax
jne 0x140005b8a
cmp qword [0x14005f0a8], 0x10
cmovae r13, qword [0x14005f090]
mov qword [rsp + 0x20], r13
lea r9, str._s_does_not_exist
mov r8d, 0x1f3
lea rdx, str.F:ProjectsGenshin_Impact_ProjectAkebiKorepiinjector_srcmain.cpp
lea ecx, [rax + 3]
call fcn.14001bab0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140060170]
call fcn.140009320
cmp qword [0x14005f080], 0
je 0x1400064d9
xorps xmm0, xmm0
movups xmmword [rbp + 0x4c0], xmm0
mov qword [rbp + 0x4d0], r14
mov qword [rbp + 0x4d8], r14
mov qword [rbp + 0x4d0], r14
mov qword [rbp + 0x4d8], 0xf
mov byte [rbp + 0x4c0], 0
lea r13, [0x14005f070]
mov rcx, r13
mov rdi, qword [0x14005f070]
mov r14, qword [0x14005f088]
cmp r14, 0x10
cmovae rcx, rdi
mov rbx, qword [0x14005f080]
cmp rbx, 3
jne 0x140005c21
mov r8, rbx
lea rdx, [0x140022e74]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140005c21
lea rdx, str.os_usa
jmp 0x140005cb6
mov rcx, r13
cmp r14, 0x10
cmovae rcx, rdi
cmp rbx, 2
jne 0x140005c52
mov r8, rbx
lea rdx, [0x140022e80]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140005c52
lea rdx, str.os_euro
lea r8d, [rbx + 5]
jmp 0x140005cbc
mov rcx, r13
cmp r14, 0x10
cmovae rcx, rdi
cmp rbx, 4
jne 0x140005c83
mov r8, rbx
lea rdx, str.asia
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140005c83
lea rdx, str.os_asia
lea r8d, [rbx + 3]
jmp 0x140005cbc
mov rcx, r13
cmp r14, 0x10
cmovae rcx, rdi
cmp rbx, 3
jne 0x140006442
mov r8, rbx
lea rdx, [0x140022ea0]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140006442
lea rdx, str.os_cht
mov r8d, 6
lea rcx, [rbp + 0x4c0]
call fcn.140008eb0
cmp qword [rbp + 0x4d0], 0
je 0x140006434
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x560], xmm0
mov qword [rbp + 0x570], rax
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp + 0x1c8], rdi
lea rdx, [rbp + 0x480]
cmp qword [rbp + 0x498], 8
cmovae rdx, qword [rbp + 0x480]
mov qword [rsp + 0x40], rdi
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2011f
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x140006cf5
mov rax, qword [rbp + 0x1c8]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], rdi
lea r8d, [rdi + 0x18]
lea rdx, str.GENERAL_DATA_h2389025596
lea rcx, [rbp - 0x58]
call fcn.14000aa40
nop
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0x560]
lea rcx, [rbp - 0x60]
call fcn.140003e50
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x140005dd1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005dcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005dcc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], di
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140005e1d
mov eax, 0x80000000
add rax, rcx
cmp rax, 5
jbe 0x140005e19
cmp rcx, 0xffffffff80000007
je 0x140005e19
cmp rcx, 0xffffffff80000060
je 0x140005e19
cmp rcx, 0xffffffff80000050
je 0x140005e19
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x60], rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
mov qword [rbp + 0x3f0], rdi
mov qword [rbp + 0x3f8], rdi
mov r14, qword [rbp + 0x568]
mov rbx, qword [rbp + 0x560]
mov qword [rbp + 0x3f8], 0xf
cmp rbx, r14
jne 0x140005e69
xor r14d, r14d
mov qword [rbp + 0x3f0], r14
mov byte [rbp + 0x3e0], r14b
jmp 0x140005f6e
mov rax, r14
sub rax, rbx
mov qword [rbp + 0x3f0], rdi
movabs rdi, 0x7fffffffffffffff
cmp rax, rdi
ja 0x140006d1e
cmp rax, 0x10
jb 0x140005f06
or rax, 0xf
cmp rax, rdi
ja 0x140005ea7
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
cmovb rcx, r15
cmp rcx, 0x1000
jb 0x140005eea
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006d24
mov rcx, rax
call fcn.14001d178
mov rcx, rax
test rax, rax
je 0x1400063b4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140005ef8
test rcx, rcx
je 0x140005ef6
call fcn.14001d178
jmp 0x140005ef8
xor eax, eax
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0x3f8], rdi
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x70], rax
mov rdx, qword [rbp + 0x3f0]
cmp rbx, r14
je 0x140005f4b
nop
lea rcx, [rbp + 0x3e0]
call fcn.1400086a0
movzx ecx, byte [rbx]
mov byte [rdx + rax], cl
mov rdx, qword [rbp + 0x3f0]
inc rdx
mov qword [rbp + 0x3f0], rdx
inc rbx
cmp rbx, r14
jne 0x140005f20
lea rax, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0x10
cmovae rax, qword [rbp + 0x3e0]
mov byte [rdx + rax], 0
xor r14d, r14d
mov qword [rsp + 0x70], r14
mov qword [rbp + 0x70], r14
lea rax, [rbp + 0x78]
mov qword [rsp + 0x60], rax
mov cl, 1
call qword [sym.imp.MSVCP140.dll_private:_static_class_std::locale::_Locimp____ptr64___cdecl_std::locale::_Init_bool_]
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x88]
call fcn.14000b610
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x88]
call fcn.140009010
mov qword [rbp + 0x80], rax
lea r8, [0x140022efe]
lea rcx, [rbp + 0x70]
call fcn.14000a520
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
bts esi, 0xc
mov dword [rsp + 0x50], esi
lea r9, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0x10
cmovae r9, qword [rbp + 0x3e0]
add r9, qword [rbp + 0x3f0]
lea r8, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0x10
cmovae r8, qword [rbp + 0x3e0]
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x60]
call fcn.14000ed00
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 0x10
jb 0x140006081
inc rdx
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000607c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000607c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x3f0], r14
mov qword [rbp + 0x3f8], 0xf
mov byte [rbp + 0x3e0], 0
movups xmm0, xmmword [rbp - 0x28]
movups xmmword [rbp + 0x3e0], xmm0
movups xmm1, xmmword [rbp - 0x18]
movups xmmword [rbp + 0x3f0], xmm1
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
btr esi, 0xc
mov dword [rsp + 0x50], esi
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rax, qword [rbp + 0x70]
test rax, rax
je 0x14000612b
lock xadd dword [rax + 0x2c], r15d
cmp r15d, 1
jne 0x140006123
mov rbx, qword [rbp + 0x70]
test rbx, rbx
je 0x140006123
mov edi, r15d
nop dword [rax]
mov rcx, rbx
lea rax, [rbx + 0x10]
mov rbx, qword [rax]
mov qword [rax], r14
mov rax, qword [rcx]
mov edx, edi
call qword [rax]
test rbx, rbx
jne 0x140006100
mov r12, qword [rbp - 0x38]
mov esi, dword [rsp + 0x50]
jmp 0x140006130
mov r12, qword [rbp - 0x38]
mov esi, dword [rsp + 0x50]
mov edi, 1
mov qword [rbp + 0x70], r14
lea rax, [rbp + 0x78]
mov qword [rsp + 0x60], rax
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x140006162
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140006162
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, edi
mov rcx, rax
call r8
mov qword [rsp + 0x78], r14
mov qword [rbp + 0x1c8], r14
lea rdx, [rbp + 0x480]
cmp qword [rbp + 0x498], 8
cmovae rdx, qword [rbp + 0x480]
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x2011f
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x140006d2a
mov rbx, qword [rbp + 0x1c8]
mov qword [rsp + 0x78], rbx
lea r8, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0x10
cmovae r8, qword [rbp + 0x3e0]
add r8, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0x10
cmovae rdx, qword [rbp + 0x3e0]
lea rcx, [rbp - 8]
call fcn.14000a1d0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov r8d, 0x18
lea rdx, str.GENERAL_DATA_h2389025596
lea rcx, [rbp - 0x80]
call fcn.14000aa40
nop
mov ecx, dword [rdi + 8]
sub ecx, dword [rdi]
mov rax, qword [rdi]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140006d53
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400062b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400062ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x14000630c
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400062fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r14
test rbx, rbx
je 0x140006348
mov eax, 0x80000000
add rax, rbx
cmp rax, 5
jbe 0x140006343
cmp rbx, 0xffffffff80000007
je 0x140006343
cmp rbx, 0xffffffff80000060
je 0x140006343
cmp rbx, 0xffffffff80000050
je 0x140006343
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x78], r14
cmp qword [0x14005f088], 0x10
cmovae r13, qword [0x14005f070]
mov qword [rsp + 0x20], r13
lea r9, str.Switched_region_to__s
mov r8d, 0x20e
lea rdx, str.F:ProjectsGenshin_Impact_ProjectAkebiKorepiinjector_srcmain.cpp
mov ecx, 5
call fcn.14001bab0
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 0x10
jb 0x1400063c0
inc rdx
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x3f0], r14
mov qword [rbp + 0x3f8], 0xf
mov byte [rbp + 0x3e0], 0
mov rcx, qword [rbp + 0x560]
test rcx, rcx
je 0x140006470
mov rdx, qword [rbp + 0x570]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000641b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000641b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x560], xmm0
mov qword [rbp + 0x570], r14
jmp 0x140006470
mov r14, qword [0x14005f088]
mov rdi, qword [0x14005f070]
cmp r14, 0x10
cmovae r13, rdi
mov qword [rsp + 0x20], r13
lea r9, str._s_is_not_a_valid_region
mov r8d, 0x211
lea rdx, str.F:ProjectsGenshin_Impact_ProjectAkebiKorepiinjector_srcmain.cpp
mov ecx, 3
call fcn.14001bab0
xor r14d, r14d
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x4d8]
cmp rdx, 0x10
jb 0x1400064c0
inc rdx
mov rcx, qword [rbp + 0x4c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400064bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400064bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x4d0], r14
mov qword [rbp + 0x4d8], 0xf
mov byte [rbp + 0x4c0], 0
cmp byte [0x140060120], 0
je 0x14000692f
cmp byte [0x140060121], 0
je 0x140006769
cmp qword [0x14005f0c0], 0
je 0x140006769
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x1e0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x1e0]
call fcn.1400075d0
nop
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
cmp dword [rbp + rcx + 0x1f0], 0
jne 0x14000661a
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], r14
mov qword [rbp + 0x418], r14
mov qword [rbp + 0x410], r14
mov qword [rbp + 0x418], 0xf
mov byte [rbp + 0x400], 0
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x1e0]
call fcn.14000c4a0
mov rax, qword [0x140060238]
cmp rax, qword [0x140060240]
je 0x1400065a8
lea rdx, [rbp + 0x400]
mov rcx, rax
call fcn.140008860
add qword [0x140060238], 0x20
jmp 0x1400065b8
lea r8, [rbp + 0x400]
mov rdx, rax
call fcn.14000c8f0
nop
mov rdx, qword [rbp + 0x418]
cmp rdx, 0x10
jb 0x1400065f5
inc rdx
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006613
call fcn.14001d170
mov qword [rbp + 0x410], r14
mov qword [rbp + 0x418], 0xf
mov byte [rbp + 0x400], 0
jmp 0x140006522
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edi, r14d
mov rax, qword [0x140060238]
sub rax, qword [0x140060230]
sar rax, 5
test rax, rax
je 0x140006704
mov rbx, r14
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov r8d, 4
lea rdx, str.load
lea rcx, [rbp - 0x58]
call fcn.14000acd0
nop
mov rax, qword [0x140060238]
mov rcx, qword [0x140060230]
sub rax, rcx
sar rax, 5
cmp rax, rbx
jbe 0x140006c6b
shl rbx, 5
lea rdx, [rcx + rbx]
lea r8, [rbp - 0x58]
mov rcx, r12
call fcn.1400015f0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400066d4
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400066cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000681b
call fcn.14001d170
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
inc edi
movsxd rbx, edi
mov rax, qword [0x140060238]
sub rax, qword [0x140060230]
sar rax, 5
cmp rbx, rax
jb 0x140006640
lea rax, [rbp + 0x278]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1dc], edx
lea rcx, [rbp + 0x1f8]
call fcn.140008340
nop
lea rcx, [rbp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x278]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
lea rcx, [rbp + 0x50]
call fcn.140002930
nop
mov r8, rax
lea rcx, [rbp + 0x30]
call fcn.14000a0a0
nop
mov r8d, 0x22
lea rdx, str.ms_before_injecting_the_Korepi_dll
mov rcx, rax
call fcn.140008c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x430], r14
mov qword [rbp + 0x438], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x420], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x430], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or esi, 1
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x140006827
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006822
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006822
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14001d170
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140006875
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006870
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006870
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
lea rax, [rbp + 0x420]
cmp qword [rbp + 0x438], 0x10
cmovae rax, qword [rbp + 0x420]
mov qword [rsp + 0x20], rax
lea r9, [0x140022d18]
mov r8d, 0x227
lea rdx, str.F:ProjectsGenshin_Impact_ProjectAkebiKorepiinjector_srcmain.cpp
mov ecx, 5
call fcn.14001bab0
mov ecx, dword [0x140060124]
call qword [sym.imp.KERNEL32.dll_Sleep]
and esi, 0xfffffffe
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x438]
cmp rdx, 0x10
jb 0x140006916
inc rdx
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006911
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006911
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x430], r14
mov qword [rbp + 0x438], 0xf
mov byte [rbp + 0x420], 0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x498]
cmp rdx, 8
jb 0x140006982
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000697d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000697d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x490], r14
mov qword [rbp + 0x498], 7
mov word [rbp + 0x480], r14w
mov rdx, qword [rbp + 0x590]
cmp rdx, 8
jb 0x1400069e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x578]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400069e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x588], r14
mov qword [rbp + 0x590], 7
mov word [rbp + 0x578], r14w
mov rdx, qword [rbp + 0x558]
cmp rdx, 0x10
jb 0x140006a43
inc rdx
mov rcx, qword [rbp + 0x540]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x550], r14
mov qword [rbp + 0x558], 0xf
mov byte [rbp + 0x540], 0
mov rdx, qword [rbp + 0x4f8]
cmp rdx, 0x10
jb 0x140006aa0
inc rdx
mov rcx, qword [rbp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a9b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x4f0], r14
mov qword [rbp + 0x4f8], 0xf
mov byte [rbp + 0x4e0], 0
mov rdx, qword [rbp + 0x5c8]
cmp rdx, 8
jb 0x140006b02
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006afd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006afd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x5c0], r14
mov qword [rbp + 0x5c8], 7
mov word [rbp + 0x5b0], r14w
mov rdx, qword [rbp + 0x4b8]
cmp rdx, 0x10
jb 0x140006b60
inc rdx
mov rcx, qword [rbp + 0x4a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b5b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x4b0], r14
mov qword [rbp + 0x4b8], 0xf
mov byte [rbp + 0x4a0], 0
mov rdx, qword [rbp + 0x478]
cmp rdx, 0x10
jb 0x140006bbd
inc rdx
mov rcx, qword [rbp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006bb8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
mov qword [rbp + 0x470], r14
mov qword [rbp + 0x478], 0xf
mov byte [rbp + 0x460], 0
mov rdx, qword [rbp + 0x458]
cmp rdx, 8
jb 0x140006c1f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006c1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001d170
xor eax, eax
mov word [rbp + 0x440], r14w
mov qword [rbp + 0x458], 7
mov qword [rbp + 0x450], r14
mov rcx, qword [rbp + 0x6e0]
xor rcx, rsp
call fcn.14001d150
lea r11, [rsp + 0x7f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140008bf0
nop
lea r8, [rbp + 0x440]
mov edx, eax
call fcn.140003a40
nop
lea r8, [rbp + 0x440]
mov edx, eax
call fcn.140003a40
nop
mov edx, eax
call fcn.140003940
nop
call fcn.140008bf0
nop
lea r8, str.RegCreateKeyExW_failed.
mov edx, eax
lea rcx, [rbp + 0x138]
call fcn.140004030
lea rdx, [0x14005b9c0]
lea rcx, [rbp + 0x138]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140008bf0
nop
lea r8, str.Cannot_write_binary_data_value:_RegSetValueExW_failed.
mov edx, eax
lea rcx, [rbp + 0x138]
call fcn.140004030
lea rdx, [0x14005b9c0]
lea rcx, [rbp + 0x138]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea r8, str.RegCreateKeyExW_failed.
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.140004030
lea rdx, [0x14005b9c0]
lea rcx, [rbp + 0x1a0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001b20
int3
call fcn.140001a60
nop
lea r8, str.RegCreateKeyExW_failed.
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.140004030
lea rdx, [0x14005b9c0]
lea rcx, [rbp + 0x1a0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea r8, str.Cannot_write_binary_data_value:_RegSetValueExW_failed.
mov edx, eax
lea rcx, [rbp + 0x138]
call fcn.140004030
lea rdx, [0x14005b9c0]
lea rcx, [rbp + 0x138]
call sub.VCRUNTIME140.dll__CxxThrowException
int3