Function at 0x140013d10
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xa70
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400bb010]
xor rax, rsp
mov qword [rbp + 0x9d0], rax
xor r15d, r15d
mov rdx, qword [0x14022f920]
mov rcx, qword [0x14022e9a8]
test rdx, rdx
jne 0x140013dc5
test rcx, rcx
je 0x140013dab
cmp dword [0x14022e9a0], r15d
je 0x140013dab
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x540]
mov rdx, qword [0x14022f7b0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14022e9a8]
test eax, eax
je 0x140013dab
mov rdx, qword [rbp + 0x540]
jmp 0x140013db5
mov rdx, r15
mov qword [rbp + 0x540], rdx
mov qword [0x14022f920], rdx
test rdx, rdx
je 0x1400162e8
test rcx, rcx
je 0x140013e03
cmp dword [0x14022e9a0], r15d
je 0x140013e03
add rdx, 8
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x538]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14022e9a8]
test eax, eax
je 0x140013e03
mov rax, qword [rbp + 0x538]
jmp 0x140013e0d
mov rax, r15
mov qword [rbp + 0x538], rax
mov qword [0x14022f928], rax
test rax, rax
je 0x1400162e8
mov rdx, qword [0x14022f930]
test rdx, rdx
jne 0x140013e82
test rcx, rcx
je 0x140013e68
cmp dword [0x14022e9a0], r15d
je 0x140013e68
mov qword [rsp + 0x20], r15
lea r9d, [rdx + 8]
lea r8, [rbp + 0x6b0]
mov rdx, qword [0x14022f7b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14022e9a8]
test eax, eax
je 0x140013e68
mov rdx, qword [rbp + 0x6b0]
jmp 0x140013e72
mov rdx, r15
mov qword [rbp + 0x6b0], rdx
mov qword [0x14022f930], rdx
test rdx, rdx
je 0x1400162e8
cmp qword [0x14022f938], r15
jne 0x140013ef4
test rdx, rdx
jne 0x140013e9c
mov qword [0x14022f938], r15
jmp 0x1400162e8
test rcx, rcx
je 0x140013eda
cmp dword [0x14022e9a0], r15d
je 0x140013eda
add rdx, 0x18
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x4e0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14022e9a8]
test eax, eax
je 0x140013eda
mov rax, qword [rbp + 0x4e0]
jmp 0x140013ee4
mov rax, r15
mov qword [rbp + 0x4e0], rax
mov qword [0x14022f938], rax
test rax, rax
je 0x1400162e8
cmp qword [0x14022f940], r15
jne 0x140013f51
test rcx, rcx
je 0x140013f37
cmp dword [0x14022e9a0], r15d
je 0x140013f37
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x490]
mov rdx, qword [0x14022f7c8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140013f37
mov rax, qword [rbp + 0x490]
jmp 0x140013f41
mov rax, r15
mov qword [rbp + 0x490], rax
mov qword [0x14022f940], rax
test rax, rax
je 0x1400162e8
lea rcx, [0x14022f950]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x140013f6b
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov rbx, qword [0x14022f9a0]
mov rdi, qword [0x14022f9a8]
cmp rbx, rdi
je 0x140013fa5
nop
mov rcx, rbx
call fcn.14000b8b0
add rbx, 0x88
cmp rbx, rdi
jne 0x140013f80
mov rbx, qword [0x14022f9a0]
mov rdi, rbx
mov qword [0x14022f9a8], rbx
cmp rdi, qword [0x14022f9b0]
je 0x140013fe4
lea rcx, [0x14022f9a0]
cmp rbx, rdi
jne 0x140013fc1
call fcn.140009900
jmp 0x140013fe4
sub rdi, rbx
movabs rax, 0x7878787878787879
imul rdi
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
call fcn.14001cbc0
mov rdi, r15
movabs rsi, 0x100000001b3
movabs r13, 0xcbf29ce484222325
lea r12, [0x140000000]
movabs r14, 0x7fffffffffffffff
xorps xmm6, xmm6
movss xmm8, dword [0x1400aa324]
movss xmm7, dword [0x1400aa3f4]
mov rcx, qword [0x14022f938]
test rcx, rcx
jne 0x140014031
mov rax, r15
jmp 0x14001403d
add rcx, 0x110
call fcn.14001da40
cmp rdi, rax
jae 0x140014ebc
mov rcx, qword [0x14022f938]
test rcx, rcx
je 0x140014e7c
add rcx, 0x100
call fcn.14001da40
test rax, rax
je 0x140014e7c
mov r10, qword [0x14022e9a8]
test r10, r10
je 0x1400140ba
cmp dword [0x14022e9a0], 0
je 0x1400140ba
mov ecx, edi
shl ecx, 4
movsxd rdx, ecx
add rdx, rax
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x14022e9a8]
test eax, eax
je 0x1400140ba
mov rdx, qword [rbp + 0x530]
jmp 0x1400140c4
mov rdx, r15
mov qword [rbp + 0x530], rdx
mov qword [rbp + 0x350], rdx
test rdx, rdx
je 0x140014e83
test r10, r10
je 0x140014116
cmp dword [0x14022e9a0], 0
je 0x140014116
add rdx, 0x280
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x528]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x350]
mov r10, qword [0x14022e9a8]
test eax, eax
jne 0x14001411d
mov qword [rbp + 0x528], r15
comiss xmm6, dword [rbp + 0x528]
jae 0x140014e83
test rdx, rdx
jne 0x140014143
movaps xmm1, xmm6
movss dword [rbp + 0x4a8], xmm6
mov qword [rbp + 0x4ac], rdx
jmp 0x14001418d
test r10, r10
je 0x140014181
cmp dword [0x14022e9a0], 0
je 0x140014181
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x4a8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140014181
movss xmm1, dword [rbp + 0x4a8]
jmp 0x14001418d
mov qword [rbp + 0x4a8], r15
movd xmm1, r15d
movss xmm2, dword [rbp + 0x4b0]
addss xmm2, xmm8
movss xmm0, dword [rbp + 0x4ac]
unpcklps xmm1, xmm0
movsd qword [rbp + 0x160], xmm1
movss dword [rbp + 0x168], xmm2
lea r8, [rbp + 0x160]
lea rdx, [rbp + 0x20]
lea rcx, [0x14022f710]
call fcn.140016480
mov r8, qword [rbp + 0x350]
movzx edx, r8b
xor rdx, r13
imul rdx, rsi
movzx eax, byte [rbp + 0x351]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x352]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x353]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x354]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x355]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x356]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x357]
xor rdx, rax
imul rdx, rsi
and rdx, qword [0x14022f9e8]
mov rax, rdx
add rax, rax
mov r9, qword [0x14022f9d0]
mov rcx, qword [r9 + rax*8 + 8]
mov r10, qword [0x14022f9c0]
cmp rcx, r10
je 0x140014283
add rdx, rdx
mov rax, qword [r9 + rdx*8]
cmp r8, qword [rcx + 0x10]
je 0x140014286
cmp rcx, rax
je 0x140014283
mov rcx, qword [rcx + 8]
cmp r8, qword [rcx + 0x10]
jne 0x140014272
jmp 0x140014286
mov rcx, r15
mov rax, r10
test rcx, rcx
cmovne rax, rcx
cmp rax, r10
jne 0x140014531
xorps xmm0, xmm0
movups xmmword [rbp + 0x378], xmm0
mov qword [rbp + 0x388], r15
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
lea rax, [rbp + 0x398]
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x34], 0
mov eax, dword [rbp + 0x34]
mov dword [rbp + 0x398], eax
mov qword [rbp + 0x3a0], r15
mov qword [rbp + 0x3a8], r15
mov ecx, 0x18
call fcn.1400998c0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x3a0], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3b0], xmm0
mov qword [rbp + 0x3c0], r15
mov qword [rbp + 0x3c8], 7
mov qword [rbp + 0x3d0], 8
mov dword [rbp + 0x398], 0x3f800000
mov r8, rax
mov edx, 0x10
lea rcx, [rbp + 0x3b0]
call fcn.140009ae0
nop
mov r8, qword [rbp + 0x350]
mov qword [rbp + 0x360], r8
mov dword [rbp + 0x368], edi
cmp r8, qword [0x14022f928]
sete byte [rbp + 0x370]
mov rcx, qword [0x14022e9a8]
test r8, r8
je 0x140014711
mov rdx, qword [0x14022e7c0]
add rdx, r8
test rcx, rcx
je 0x1400143c1
cmp dword [0x14022e9a0], 0
je 0x1400143c1
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x520]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x350]
mov rcx, qword [0x14022e9a8]
test eax, eax
je 0x1400143c1
mov rax, qword [rbp + 0x520]
jmp 0x1400143cb
mov rax, r15
mov qword [rbp + 0x520], rax
test eax, eax
je 0x140014711
shr eax, 0xe
and eax, 0x7f
cmp eax, 2
je 0x140014711
mov byte [rbp + 0x371], 1
mov dword [rbp + 0x36c], 0xffffffff
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x330]
lea rcx, [0x14022f9b8]
call fcn.14001df20
mov rbx, qword [rax]
mov rax, qword [rbp + 0x360]
mov qword [rbx + 0x18], rax
mov eax, dword [rbp + 0x368]
mov dword [rbx + 0x20], eax
mov eax, dword [rbp + 0x36c]
mov dword [rbx + 0x24], eax
movzx eax, byte [rbp + 0x370]
mov byte [rbx + 0x28], al
movzx eax, byte [rbp + 0x371]
mov byte [rbx + 0x29], al
lea rcx, [rbx + 0x30]
lea rax, [rbp + 0x378]
cmp rcx, rax
je 0x140014474
lea rdx, [rbp + 0x378]
cmp qword [rbp + 0x390], 0x10
cmovae rdx, qword [rbp + 0x378]
mov r8, qword [rbp + 0x388]
call fcn.14001cd10
add rbx, 0x50
lea rax, [rbp + 0x398]
cmp rbx, rax
je 0x1400144cb
mov qword [rbp + 0x70], rbx
mov eax, dword [rbp + 0x398]
mov dword [rbx], eax
lea rcx, [rbx + 8]
mov rdx, qword [rbp + 0x3a0]
mov r8, rdx
mov rdx, qword [rdx]
call fcn.14001e860
mov rdx, qword [rbx + 0x10]
mov rcx, rbx
call fcn.14001d480
mov rdx, rax
mov rcx, rbx
call fcn.14001d2d0
mov qword [rbp + 0x70], r15
lea rcx, [rbp + 0x70]
call fcn.14001ceb0
nop
lea rcx, [rbp + 0x398]
call fcn.14000b920
mov rdx, qword [rbp + 0x390]
cmp rdx, 0x10
jb 0x140014518
inc rdx
mov rcx, qword [rbp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014513
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014e8b
call fcn.140099710
mov qword [rbp + 0x388], r15
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
lea rcx, [rbp + 0x3e0]
call fcn.140016370
nop
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x340]
lea rcx, [0x14022f9b8]
call fcn.14001df20
mov rbx, qword [rax]
mov rax, qword [rbx + 0x18]
mov qword [rbp + 0x3e0], rax
mov eax, dword [rbx + 0x20]
mov dword [rbp + 0x3e8], eax
mov r8d, dword [rbx + 0x24]
mov dword [rbp + 0x3ec], r8d
movzx eax, byte [rbx + 0x28]
mov byte [rbp + 0x3f0], al
movzx eax, byte [rbx + 0x29]
mov byte [rbp + 0x3f1], al
lea rdx, [rbx + 0x30]
lea rax, [rbp + 0x3f8]
cmp rax, rdx
je 0x1400145bf
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400145ac
mov rdx, qword [rdx]
lea rcx, [rbp + 0x3f8]
call fcn.14001cd10
mov r8d, dword [rbp + 0x3ec]
lea rdx, [rbx + 0x50]
lea rax, [rbp + 0x418]
cmp rax, rdx
je 0x14001462e
lea rax, [rbp + 0x418]
mov qword [rbp + 0x78], rax
mov eax, dword [rdx]
mov dword [rbp + 0x418], eax
mov rdx, qword [rdx + 8]
mov r8, rdx
mov rdx, qword [rdx]
lea rcx, [rbp + 0x420]
call fcn.14001e860
mov rdx, qword [rbp + 0x428]
lea rcx, [rbp + 0x418]
call fcn.14001d480
mov rdx, rax
lea rcx, [rbp + 0x418]
call fcn.14001d2d0
mov qword [rbp + 0x78], r15
lea rcx, [rbp + 0x78]
call fcn.14001ceb0
mov r8d, dword [rbp + 0x3ec]
cmp qword [rbp + 0x408], 0
jne case.0x14001470f.0
movabs rbx, 0x4328578a10c32d56
cmp byte [rbp + 0x3f1], 0
je 0x1400146f4
movabs rax, 0xfee577ebf22fbe93
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x88], rax
movabs rax, 0xfee577ebf26ceedd
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6e0], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6e8], rax
movdqa xmm0, xmmword [rbp + 0x80]
pxor xmm0, xmmword [rbp + 0x6e0]
movdqa xmmword [rbp + 0x80], xmm0
lea rax, [rbp + 0x80]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400146d0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x3f8]
call fcn.14001cd10
mov r8d, dword [rbp + 0x3ec]
movzx eax, byte [0x14022f8c8]
cmp eax, 9
ja case.0x14001470f.3
mov ecx, dword [r12 + rax*4 + 0x16348]
add rcx, r12
jmp rcx
mov byte [rbp + 0x371], 0
cmp byte [0x14022f918], 0
jne 0x1400143e9
test r8, r8
je 0x1400147d9
mov rdx, qword [0x14022e7b0]
add rdx, r8
test rcx, rcx
je 0x140014772
cmp dword [0x14022e9a0], 0
je 0x140014772
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x518]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14022e9a8]
test eax, eax
je 0x140014772
mov rdx, qword [rbp + 0x518]
jmp 0x14001477c
mov rdx, r15
mov qword [rbp + 0x518], rdx
test rdx, rdx
je 0x1400147d9
add rdx, qword [0x14022e7c8]
test rcx, rcx
je 0x1400147c4
cmp dword [0x14022e9a0], 0
je 0x1400147c4
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x510]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400147c4
mov rax, qword [rbp + 0x510]
mov dword [rbp + 0x36c], eax
jmp 0x1400143f3
mov rax, r15
mov qword [rbp + 0x510], rax
mov dword [rbp + 0x36c], eax
jmp 0x1400143f3
mov eax, r15d
mov dword [rbp + 0x36c], eax
jmp 0x1400143f3
mov rcx, qword [0x14022f8d0]
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
jmp 0x140014803
mov rax, qword [0x14022f8d0]
cmp qword [rax + 8], 0
sete al
test al, al
jne case.0x14001470f.0
cmp qword [0x14022f8e8], 0
je case.0x14001470f.0
movzx edx, r8b
xor rdx, r13
imul rdx, rsi
movzx eax, byte [rbp + 0x3ed]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x3ee]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0x3ef]
xor rdx, rax
imul rdx, rsi
and rdx, qword [0x14022f908]
mov rax, rdx
add rax, rax
mov r9, qword [0x14022f8f0]
mov rcx, qword [r9 + rax*8 + 8]
mov r10, qword [0x14022f8e0]
cmp rcx, r10
je 0x140014894
add rdx, rdx
mov rax, qword [r9 + rdx*8]
cmp r8d, dword [rcx + 0x10]
je 0x140014897
cmp rcx, rax
je 0x140014894
mov rcx, qword [rcx + 8]
cmp r8d, dword [rcx + 0x10]
jne 0x140014883
jmp 0x140014897
mov rcx, r15
mov rdx, r10
test rcx, rcx
cmovne rdx, rcx
cmp rdx, r10
je 0x1400148d7
cmp r8d, 0xffffffff
je 0x1400148d7
add rdx, 0x18
lea rax, [rbp + 0x3f8]
cmp rax, rdx
je 0x140014960
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140014954
mov rdx, qword [rdx]
jmp 0x140014954
movabs rcx, 0xfee577ebf26ceedd
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6f0], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6f8], rax
movdqa xmm0, xmmword [rbp + 0x90]
pxor xmm0, xmmword [rbp + 0x6f0]
movdqa xmmword [rbp + 0x90], xmm0
lea rax, [rbp + 0x90]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140014943
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x3f8]
call fcn.14001cd10
mov rax, r14
mov rcx, qword [rbp + 0x408]
sub rax, rcx
cmp rax, 0xe
jb 0x140016333
lea rax, [rbp + 0x3f8]
cmp qword [rbp + 0x410], 0x10
cmovae rax, qword [rbp + 0x3f8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xe
lea r9, str.__playername:
lea rcx, [rbp + 0x568]
call fcn.14000b160
nop
mov edx, dword [rbp + 0x3ec]
lea rcx, [rbp + 0x280]
call fcn.140005050
mov rbx, rax
mov rcx, r14
mov rdx, qword [rbp + 0x578]
sub rcx, rdx
cmp rcx, 0x17
jb 0x14001632d
lea r9, [rbp + 0x568]
cmp qword [rbp + 0x580], 0x10
cmovae r9, qword [rbp + 0x568]
mov qword [rsp + 0x30], 0x17
lea rax, str.____Player_server_id:
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x180]
call fcn.14000b160
nop
mov r9, rbx
lea r8, [rbp + 0x180]
lea rcx, [rbp + 0x1a0]
call fcn.14001f670
nop
mov r8d, 2
lea rdx, [0x1400a1838]
lea rcx, [rbp + 0x1a0]
call fcn.1400099e0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x548], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x558], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x140014ab4
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014aaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014e92
call fcn.140099710
mov qword [rbp + 0x1b0], r15
mov qword [rbp + 0x1b8], 0xf
mov byte [rbp + 0x1a0], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140014b0e
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014b09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014e99
call fcn.140099710
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0x10
jb 0x140014b68
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014b63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014ea0
call fcn.140099710
mov qword [rbp + 0x290], r15
mov qword [rbp + 0x298], 0xf
mov byte [rbp + 0x280], 0
cmp dword [rbp + 0x3ec], 0xffffffff
je 0x140014cac
mov rax, qword [0x14022e7e8]
mov dword [rbp + 0xc0], 0x3f800000
mov dword [rbp + 0xc4], 0x3f800000
mov dword [rbp + 0xc8], 0x3f800000
movss xmm0, dword [rax + 0x38e8]
movss dword [rbp + 0xcc], xmm0
lea rcx, [rbp + 0xc0]
call fcn.140031c70
mov ebx, eax
lea rdx, [rbp + 0x548]
cmp qword [rbp + 0x560], 0x10
cmovae rdx, qword [rbp + 0x548]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], r15
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140014c10
lea rcx, [rbp + 0xa0]
call fcn.140004d70
nop
mov rax, qword [0x14022e7e8]
mov byte [rsp + 0x28], 1
mov dword [rsp + 0x20], ebx
movaps xmm3, xmm7
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xa0]
mov rcx, qword [rax + 0x3d58]
call fcn.14000da10
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140014c93
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014c8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014ea7
call fcn.140099710
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0x560]
cmp rdx, 0x10
jb 0x140014ced
inc rdx
mov rcx, qword [rbp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014ce8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014eae
call fcn.140099710
mov qword [rbp + 0x558], r15
mov qword [rbp + 0x560], 0xf
mov byte [rbp + 0x548], 0
mov rdx, qword [rbp + 0x580]
cmp rdx, 0x10
jb 0x140014d47
inc rdx
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014d42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014eb5
call fcn.140099710
mov qword [rbp + 0x578], r15
mov qword [rbp + 0x580], 0xf
mov byte [rbp + 0x568], 0
mov rax, qword [rbp + 0x350]
test rax, rax
jne 0x140014d77
mov qword [rbp + 0x28], rax
movss dword [rbp + 0x30], xmm6
jmp 0x140014db7
mov rcx, qword [0x14022e9a8]
test rcx, rcx
je 0x140014db3
cmp dword [0x14022e9a0], 0
je 0x140014db3
lea rdx, [rax + 0x90]
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov rax, qword [rbp + 0x350]
jne 0x140014db7
mov qword [rbp + 0x28], r15
movsd xmm0, qword [rbp + 0x28]
movsd qword [rbp + 0x458], xmm0
mov ecx, dword [rbp + 0x30]
mov dword [rbp + 0x460], ecx
cmp byte [rbp + 0x3f0], 0
je 0x140014e25
mov qword [0x14022f9f8], rax
mov dword [0x14022fa00], edi
movsd qword [0x14022fa0c], xmm0
mov dword [0x14022fa14], ecx
movsd qword [rbp + 0x170], xmm0
mov dword [rbp + 0x178], ecx
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x328]
lea rcx, [0x14022f710]
call fcn.140016480
movsd xmm0, qword [rax]
movsd qword [0x14022fa04], xmm0
mov rax, qword [0x14022f9a8]
cmp rax, qword [0x14022f9b0]
je 0x140014e51
lea rdx, [rbp + 0x3e0]
mov rcx, rax
call fcn.140028d30
add qword [0x14022f9a8], 0x88
jmp 0x140014e68
lea r8, [rbp + 0x3e0]
mov rdx, rax
lea rcx, [0x14022f9a0]
call fcn.1400227c0
nop
lea rcx, [rbp + 0x3e0]
call fcn.14000b8b0
inc rdi
jmp 0x140014020
mov qword [rbp + 0x350], r15
inc rdi
jmp 0x140014020
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [0x14022f950]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
cmp qword [0x14022f898], 0
jne 0x1400162e8
cmp byte [0x14022f918], 0
jne 0x1400162e8
lea rsi, [0x14022f868]
cmp qword [0x14022f858], 0
je 0x140014f03
cmp qword [0x14022f878], 0
jne 0x140015823
mov dword [rbp + 0x4a0], 0x208
movabs rax, 0xfeb177adf223ee8e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x436d57d810822d01
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x2485bad896a73b83
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xde2e76f5f489b1e1
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x1c1b9fb36f71a97
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x161cdc7388b2d013
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1e8], rax
movabs rdx, 0x5b656fd1f198cf3
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1f0], rax
movabs rcx, 0x8e7c0b4c1e30fbcc
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xfee577ebf26ceedd
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x780], rax
movabs rax, 0x4328578a10c32d56
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x788], rax
movabs r12, 0x24f1bab196e43bdf
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x790], rax
movabs r14, 0xde407690f4f3b188
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x798], rax
movabs rax, 0x187b9a736af1ad1
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x7a0], rax
movabs r13, 0x1651dc1688c4d07a
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x7a8], rax
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x7b0], rax
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x7b8], rax
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x780]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7a0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140015146
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140015146
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x8b4091b8
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140015141
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140015120
cmp r8d, 0x65b2fce1
je 0x14001514b
test r9d, r9d
jne 0x140015100
mov rax, qword [rax]
jmp 0x1400150d0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea rax, [rbp + 0x358]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
mov rcx, 0xffffffff80000001
call r10
test eax, eax
jne 0x14001580b
movabs rax, 0xfe917798f20dee91
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x434657ff10912d76
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x2492bade96a83bff
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xde2f76f9f487b1e9
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x187b9a736af1abf
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e8], rax
movabs rdi, 0xfee577ebf26ceedd
mov qword [rbp + 0x10], rdi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x720], rax
movabs rbx, 0x4328578a10c32d56
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x728], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x730], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x738], rax
movabs rax, 0x187b9a736af1ad1
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x740], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x748], rax
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x720]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x2e0]
vpxor xmm0, xmm0, xmmword [rbp + 0x740]
vmovdqa xmmword [rbp + 0x2e0], xmm0
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x7c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2c0]
mov rcx, qword [rbp + 0x358]
vzeroupper
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14001575b
movabs rax, 0x9d8414b793188fb9
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x140], rax
movabs rax, 0x2b5b36f8739f483e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x148], rax
movabs rax, 0x24f1c3c3e28156b0
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x10], rdi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x760], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x768], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x770], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x778], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x760]
vmovdqa ymmword [rbp + 0x140], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r15
mov qword [rbp + 0x278], r15
lea rax, [rbp + 0x7c0]
mov r8, 0xffffffffffffffff
vzeroupper
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400153e0
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp + 0x260]
call fcn.14001e720
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x240]
call fcn.140094110
nop
lea rcx, [rbp + 0x140]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x140015420
lea rdx, [rbp + 0x140]
mov rcx, rax
call fcn.1400099e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4b8], xmm0
mov qword [rbp + 0x4c8], r15
mov qword [rbp + 0x4d0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x4b8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x4c8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x1400154b9
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400154b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400154b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140099710
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], 0xf
mov byte [rbp + 0x240], 0
lea rax, [rbp + 0x4b8]
cmp qword [rbp + 0x4d0], 0x10
cmovae rax, qword [rbp + 0x4b8]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x4c8]
mov qword [rbp + 0x18], rax
call fcn.140098bfc
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x310], xmm0
lea r8, [rbp + 0x310]
mov edx, eax
lea rcx, [rbp + 0x110]
call fcn.14000c600
nop
lea rcx, [rbp + 0x110]
call fcn.14000d0d0
movzx ebx, al
mov rdx, qword [rbp + 0x128]
cmp rdx, 8
jb 0x140015577
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015572
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015572
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140099710
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], 7
mov word [rbp + 0x110], r15w
test bl, bl
je 0x1400156fe
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r15
mov qword [rbp + 0x238], r15
lea rax, [rbp + 0x7c0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400155c0
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp + 0x220]
call fcn.14001e720
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x200]
call fcn.140094110
mov rbx, rax
lea rax, [0x14022f848]
cmp rax, rbx
je 0x14001567a
mov rdx, qword [0x14022f860]
cmp rdx, 0x10
jb 0x14001563d
mov rcx, qword [0x14022f848]
inc rdx
cmp rdx, 0x1000
jb 0x140015638
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400156b2
mov rcx, r8
call fcn.140099710
mov qword [0x14022f858], r15
mov qword [0x14022f860], 0xf
mov byte [0x14022f848], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x14022f848], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x14022f858], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x218]
cmp rdx, 0x10
jb 0x1400156be
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400156b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400156b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140099710
mov qword [rbp + 0x210], r15
mov qword [rbp + 0x218], 0xf
mov byte [rbp + 0x200], 0
lea rdx, [rbp + 0x4b8]
cmp qword [rbp + 0x4d0], 0x10
cmovae rdx, qword [rbp + 0x4b8]
mov r8, qword [rbp + 0x4c8]
mov rcx, rsi
call fcn.14001cd10
nop
mov rdx, qword [rbp + 0x4d0]
cmp rdx, 0x10
jb 0x140015742
inc rdx
mov rcx, qword [rbp + 0x4b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001573d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001573d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140099710
mov qword [rbp + 0x4c8], r15
mov qword [rbp + 0x4d0], 0xf
mov byte [rbp + 0x4b8], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400157e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400157e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x35741964
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400157e1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400157c0
cmp r8d, 0x9dc3de89
je 0x1400157eb
test r9d, r9d
jne 0x1400157a0
mov rax, qword [rax]
jmp 0x140015770
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [rbp + 0x358]
call rdx
cmp qword [0x14022f878], 0
jne 0x140015823
cmp qword [0x14022f898], 0
jne 0x140016234
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x5a0]
call sub.VCRUNTIME140.dll_memset
cmp qword [0x14022f880], 0x10
cmovae rsi, qword [0x14022f868]
mov r8d, 1
mov rdx, rsi
lea rcx, [rbp + 0x5a0]
call fcn.14001cab0
mov rax, qword [rbp + 0x5a0]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x5a0], rbx
mov rax, qword [rbp + 0x5a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x59c], edx
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], r15
mov eax, 0xf
mov qword [rbp + 0x508], rax
mov byte [rbp + 0x4f0], 0
cmp qword [rbp + 0x630], 0
je 0x140015a6b
mov rax, qword [rbp + 0x5a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x5a0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x4f0]
lea rcx, [rbp + 0x5a0]
call fcn.140022460
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x140015a31
movabs r12, 0x8c8004b4861f8fb1
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x40], rax
movabs rax, 0x434425ff4fb14820
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x48], rax
movabs rax, 0xfee577ebf26ceedd
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x700], rax
movabs rax, 0x4328578a10c32d56
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x708], rax
movdqa xmm0, xmmword [rbp + 0x700]
pxor xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm0
lea rax, [rbp + 0x40]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x140015981
lea r14, [rbp + 0x4f0]
cmp qword [rbp + 0x508], 0x10
setae cl
mov byte [rbp], cl
mov r13, qword [rbp + 0x4f0]
cmovae r14, r13
mov rsi, qword [rbp + 0x500]
cmp rdi, rsi
ja 0x140015a31
test rdi, rdi
jne 0x1400159c3
mov rbx, r15
jmp 0x140015ace
mov r15, r14
sub r15, rdi
movsx r12d, byte [rbp + 0x40]
lea r8, [rsi + 1]
add r8, r15
sub r8, r14
mov edx, r12d
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140015a27
nop dword [rax + rax]
mov r8, rdi
lea rdx, [rbp + 0x40]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140015ab0
inc rbx
lea r8, [rsi + 1]
add r8, r15
sub r8, rbx
mov edx, r12d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400159f0
xor r15d, r15d
lea rbx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
lea rcx, [rbp + 0x5b0]
call fcn.14001ca00
test rax, rax
jne 0x140015a64
mov rax, qword [rbp + 0x5a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x5a0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rax, qword [rbp + 0x508]
cmp rax, 0x10
jb 0x1400161bc
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x4f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400161b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400161b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rbx, r14
xor r15d, r15d
cmp rbx, 0xffffffffffffffff
je 0x140015a2a
movzx ecx, byte [rbp]
movabs r12, 0x8c8004b4861f8fb1
add rbx, 0xf
xorps xmm0, xmm0
movups xmmword [rbp + 0x470], xmm0
mov qword [rbp + 0x480], r15
mov qword [rbp + 0x488], r15
cmp rsi, rbx
jb 0x140016339
mov qword [rbp + 0x598], 0xffffffffffffffff
sub rsi, rbx
mov qword [rbp + 0x320], rsi
mov r8, 0xffffffffffffffff
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp + 0x4f0]
test cl, cl
cmovne rdx, r13
add rdx, rbx
lea rcx, [rbp + 0x470]
call fcn.140004d70
nop
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x50], rax
movabs rax, 0x4328578a10b14820
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x58], rax
movabs r12, 0xfee577ebf26ceedd
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6c0], rax
movabs rax, 0x4328578a10c32d56
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6c8], rax
movdqa xmm0, xmmword [rbp + 0x50]
pxor xmm0, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x50], xmm0
lea rax, [rbp + 0x50]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x140015ba4
lea r14, [rbp + 0x470]
cmp qword [rbp + 0x488], 0x10
setae cl
mov byte [rbp], cl
mov r13, qword [rbp + 0x470]
cmovae r14, r13
mov rsi, qword [rbp + 0x480]
cmp rdi, rsi
ja 0x140015c58
test rdi, rdi
jne 0x140015be3
mov rbx, r15
jmp 0x140015c5f
mov r15, r14
sub r15, rdi
movsx r12d, byte [rbp + 0x50]
lea r8, [rsi + 1]
add r8, r15
sub r8, r14
mov edx, r12d
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140015c47
nop dword [rax + rax]
mov r8, rdi
lea rdx, [rbp + 0x50]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140015de4
inc rbx
lea r8, [rsi + 1]
add r8, r15
sub r8, rbx
mov edx, r12d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140015c10
movzx ecx, byte [rbp]
xor r15d, r15d
movabs r12, 0xfee577ebf26ceedd
mov rbx, 0xffffffffffffffff
add rbx, 0xb
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], r15
cmp rsi, rbx
jb 0x14001633f
mov qword [rbp + 0x590], 0xffffffffffffffff
sub rsi, rbx
mov qword [rbp + 0x300], rsi
mov r8, 0xffffffffffffffff
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp + 0x470]
test cl, cl
cmovne rdx, r13
add rdx, rbx
lea rcx, [rbp + 0xf0]
call fcn.140004d70
mov rdx, qword [rbp + 0x488]
cmp rdx, 0x10
jb 0x140015d04
inc rdx
mov rcx, qword [rbp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015cff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016013
call fcn.140099710
movups xmm0, xmmword [rbp + 0xf0]
movups xmmword [rbp + 0x470], xmm0
movups xmm1, xmmword [rbp + 0x100]
movups xmmword [rbp + 0x480], xmm1
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
movabs rax, 0xfee577ebf26ceee7
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x60], rax
movabs r14, 0x4328578a10c32d56
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6d0], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x6d8], rax
movdqa xmm0, xmmword [rbp + 0x60]
pxor xmm0, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x60]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140015da0
lea rsi, [rbp + 0x470]
cmp qword [rbp + 0x488], 0x10
setae byte [rbp]
mov r13, qword [rbp + 0x470]
cmovae rsi, r13
mov r12, qword [rbp + 0x480]
cmp rbx, r12
ja 0x140015e75
test rbx, rbx
jne 0x140015dfd
mov rdi, r15
jmp 0x140015e7c
sub rbx, r14
movzx ecx, byte [rbp]
xor r15d, r15d
movabs r12, 0xfee577ebf26ceedd
jmp 0x140015c5f
mov r14, rsi
sub r14, rbx
movsx r15d, byte [rbp + 0x60]
lea r8, [r12 + 1]
add r8, r14
sub r8, rsi
mov edx, r15d
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140015e68
nop word [rax + rax]
mov r8, rbx
lea rdx, [rbp + 0x60]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140015ffe
inc rdi
lea r8, [r12 + 1]
add r8, r14
sub r8, rdi
mov edx, r15d
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140015e30
xor r15d, r15d
movabs r14, 0x4328578a10c32d56
mov rdi, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0x588], rdi
mov qword [rbp + 0x308], r12
mov r8, rdi
cmp r12, rdi
cmovb r8, r12
lea rdx, [rbp + 0x470]
cmp byte [rbp], 0
cmovne rdx, r13
lea rcx, [rbp + 0xd0]
call fcn.140004d70
mov rdx, qword [0x14022f8a0]
cmp rdx, 0x10
jb 0x140015f08
mov rcx, qword [0x14022f888]
inc rdx
cmp rdx, 0x1000
jb 0x140015f03
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140016013
mov rcx, r8
call fcn.140099710
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [0x14022f888], xmm0
movups xmm1, xmmword [rbp + 0xe0]
movups xmmword [0x14022f898], xmm1
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
movabs rax, 0xfee577ebf26ceed6
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x490], rax
mov qword [rbp + 0x20], r14
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x498], rax
movabs rax, 0xfee577ebf26ceedd
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x6b0], rax
mov qword [rbp + 0x20], r14
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x6b8], rax
movdqa xmm0, xmmword [rbp + 0x490]
pxor xmm0, xmmword [rbp + 0x6b0]
movdqa xmmword [rbp + 0x490], xmm0
lea rax, [rbp + 0x490]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x140015fb3
lea r15, [rbp + 0x470]
cmp qword [rbp + 0x488], 0x10
setae r8b
mov byte [rbp], r8b
mov rdx, qword [rbp + 0x470]
cmovae r15, rdx
mov r14, qword [rbp + 0x480]
cmp rsi, r14
ja 0x140016096
test rsi, rsi
jne 0x14001601a
xor r15d, r15d
mov ebx, r15d
jmp 0x1400160a0
sub rdi, rsi
xor r15d, r15d
movabs r14, 0x4328578a10c32d56
jmp 0x140015e7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r12, r15
sub r12, rsi
movsx r13d, byte [rbp + 0x490]
lea r8, [r14 + 1]
add r8, r12
sub r8, r15
mov edx, r13d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14001608a
nop word [rax + rax]
mov r8, rsi
lea rdx, [rbp + 0x490]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140016192
inc rbx
lea r8, [r14 + 1]
add r8, r12
sub r8, rbx
mov edx, r13d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140016050
mov rdx, qword [rbp + 0x470]
movzx r8d, byte [rbp]
mov rbx, 0xffffffffffffffff
xor r15d, r15d
lea rcx, [rdi + 1]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], r15
mov qword [rbp + 0x2b8], r15
cmp r14, rcx
jb 0x140016327
sub rbx, rdi
dec rbx
sub r14, rcx
cmp r14, rbx
cmovb rbx, r14
lea rax, [rbp + 0x470]
test r8b, r8b
cmovne rax, rdx
lea rdx, [rcx + rax]
mov r8, rbx
lea rcx, [rbp + 0x2a0]
call fcn.140004d70
mov rdx, qword [0x14022f8c0]
cmp rdx, 0x10
jb 0x140016133
mov rcx, qword [0x14022f8a8]
inc rdx
cmp rdx, 0x1000
jb 0x14001612e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161a6
mov rcx, r8
call fcn.140099710
movups xmm0, xmmword [rbp + 0x2a0]
movups xmmword [0x14022f8a8], xmm0
movups xmm1, xmmword [rbp + 0x2b0]
movups xmmword [0x14022f8b8], xmm1
mov rdx, qword [rbp + 0x488]
cmp rdx, 0x10
jb 0x140015a2a
inc rdx
mov rcx, qword [rbp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400161ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400161ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rbx, r15
mov rdx, qword [rbp + 0x470]
movzx r8d, byte [rbp]
jmp 0x14001609d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140099710
jmp 0x140015a2a
call fcn.140099710
mov qword [rbp + 0x500], r15
mov qword [rbp + 0x508], 0xf
mov byte [rbp + 0x4f0], 0
mov rax, qword [rbp + 0x5a0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x5a0], rbx
mov rax, qword [rbp + 0x5a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x59c], edx
lea rcx, [rbp + 0x5b0]
call fcn.14001bec0
lea rcx, [rbp + 0x5b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x650]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
cmp qword [0x14022f898], 0
je 0x1400162e1
cmp qword [0x14022f8b8], 0
je 0x1400162e1
mov ecx, 8
call fcn.1400998c0
lea rcx, [0x14022f710]
mov qword [rax], rcx
mov qword [rbp + 0x490], rax
lea rcx, [rbp + 0x4e8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140026240]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x4e0], rax
test rax, rax
je 0x1400162ce
cmp dword [rbp + 0x4e8], 0
jne 0x1400162a3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x4e0]
movdqa xmmword [rbp + 0x490], xmm0
lea rcx, [rbp + 0x490]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x1400162cc
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
jmp 0x1400162e8
mov dword [rbp + 0x4e8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov byte [0x14022f918], 1
mov rcx, qword [rbp + 0x9d0]
xor rcx, rsp
call fcn.1400996f0
lea r11, [rsp + 0xa70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14001d520
nop
call fcn.140004d10
nop
call fcn.140004d10
nop
call fcn.14001d520
nop
call fcn.14001d520
int3