Function at 0x14005ecb0
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x290
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14010f080]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov ebx, 4
mov rax, qword gs:[0x58]
add rbx, qword [rax]
xor edi, edi
mov eax, dword [rbx]
cmp dword [0x1401d551c], eax
jle 0x14005ed45
lea rcx, [0x1401d551c]
call fcn.1400d23c8
cmp dword [0x1401d551c], 0xffffffff
jne 0x14005ed45
mov qword [0x1401d5520], rdi
mov qword [0x1401d5528], 0xffffffffffffffff
lea rcx, [0x1400d7b40]
call fcn.1400d2738
lea rcx, [0x1401d551c]
call fcn.1400d235c
movabs rax, 0x7eb6efd1408adb91
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x3fbd5fffb9140b13
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x17e43555fb63ab79
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rcx, 0x949c1fac55e43b88
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x7eeaefff40d6dbcd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x3ff95faeb95d0b56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x17e43555fb63ab2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqu ymmword [rbp + 0x180], ymm1
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, [rbp + 0x180]
vzeroupper
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401d5528], rax
mov eax, dword [rbx]
cmp dword [0x1401d551c], eax
jle 0x14005ee9a
lea rcx, [0x1401d551c]
call fcn.1400d23c8
cmp dword [0x1401d551c], 0xffffffff
jne 0x14005ee9a
mov qword [0x1401d5520], rdi
mov qword [0x1401d5528], 0xffffffffffffffff
lea rcx, [0x1400d7b40]
call fcn.1400d2738
lea rcx, [0x1401d551c]
call fcn.1400d235c
movabs rsi, 0x59194d8e2b40e046
movabs r12, 0xfce3cf37dd9000d9
movabs r14, 0xfc97b743f3f76f95
movabs r13, 0xaebc52e2d87ffb0a
lea r15, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
cmp qword [0x1401d5528], 0xffffffffffffffff
jne 0x14005f21e
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movdqa xmm0, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x1c0], xmm0
mov r8d, 8
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x60]
call fcn.140061750
nop
cmp qword [rbp + 0xe8], 0
je 0x14005f0b8
movabs rax, 0xbbd9fe0da1b638ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x1a5c07c0621bc01b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x2a717de994916dd3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xa1cab43d27541c0e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x3986e4d74e0bc26c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x635120d9cfb13087
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xdba3d85c4e207560
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x3986e4d74e0bc209
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x200]
vxorps xmm0, xmm0, xmmword [rbp + 0x1a0]
vmovdqa xmmword [rbp + 0x200], xmm0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.140068420
lea rdx, [0x1400685f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x60], r15
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x5c], edx
lea rcx, [rbp + 0x68]
call fcn.140062460
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x108]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
movabs rax, 0xfc97b7378b921bbb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movdqa xmm0, xmmword [rbp + 0x1e0]
xorps xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x1e0], xmm0
movabs rax, 0x95f4df2cc7ce5ca4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x59194d8e58399368
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x1c0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0x198], rdi
lea rax, [rbp + 0x1c0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005f1e1
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x180]
call fcn.140044fa0
mov r9d, 0x2400
lea r8, [0x14010f350]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x180]
call fcn.140054c60
mov eax, dword [rbx]
cmp dword [0x1401d551c], eax
jle 0x14005f267
lea rcx, [0x1401d551c]
call fcn.1400d23c8
cmp dword [0x1401d551c], 0xffffffff
jne 0x14005f267
mov qword [0x1401d5520], rdi
mov qword [0x1401d5528], 0xffffffffffffffff
lea rcx, [0x1400d7b40]
call fcn.1400d2738
lea rcx, [0x1401d551c]
call fcn.1400d235c
movabs rax, 0x7eb6efd1408adb91
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x3fbd5fffb9140b13
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x17e43555fb63ab79
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rcx, 0x949c1fac55e43b88
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x7eeaefff40d6dbcd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x3ff95faeb95d0b56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x17e43555fb63ab2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqu ymmword [rbp + 0x180], ymm1
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, [rbp + 0x180]
vzeroupper
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401d5528], rax
mov eax, dword [rbx]
cmp dword [0x1401d551c], eax
jle 0x14005f3bc
lea rcx, [0x1401d551c]
call fcn.1400d23c8
cmp dword [0x1401d551c], 0xffffffff
jne 0x14005f3bc
mov qword [0x1401d5520], rdi
mov qword [0x1401d5528], 0xffffffffffffffff
lea rcx, [0x1400d7b40]
call fcn.1400d2738
lea rcx, [0x1401d551c]
call fcn.1400d235c
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memset
mov r8d, 8
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x60]
cmp qword [0x1401d5528], 0xffffffffffffffff
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x1e0]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x1e0], xmm0
je 0x14005f5ae
call fcn.140061750
nop
cmp qword [rbp + 0xe8], 0
je 0x14005f58a
movabs rax, 0xbbd9fe0da1b638ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x1a5c07c0621bc01b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x2a717de994916dd3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xa1cab43d27541c0e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x6ad5a1941b58e26c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x635120d9cfb13087
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xdba3d85c4e207560
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x3986e4d74e0bc209
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmm0, xmmword [rbp + 0x40]
vxorps xmm0, xmm0, xmmword [rbp + 0x1a0]
vmovdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.140068420
lea rdx, [0x1400685f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x60], r15
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x5c], edx
jmp 0x14005f718
call fcn.140061750
nop
cmp qword [rbp + 0xe8], 0
je 0x14005f6f9
movabs rax, 0xbbd9fe0da1b638ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x1a5c07c0621bc01b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x2a717de994916dd3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xa1cab43d27541c0e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x39d4ab851c4ee26c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x635120d9cfb13087
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xdba3d85c4e207560
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x3986e4d74e0bc209
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmm0, xmmword [rbp + 0x40]
vxorps xmm0, xmm0, xmmword [rbp + 0x1a0]
vmovdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.140068420
lea rdx, [0x1400685f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x60], r15
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x5c], edx
lea rcx, [rbp + 0x68]
call fcn.140062460
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x108]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1400d2300
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret