Function at 0x14000c530
Capabilities:
Create thread
Execute command
Schedule task via at

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x14009c040]
xor rax, rsp
mov qword [rbp + 0x320], rax
call fcn.140079ba0
call fcn.140079b40
lea r8, str.XNX_Userexe
mov edx, 0xadd8e6
lea rcx, [rbp + 0x120]
call fcn.14001bb20
lea rcx, [rbp - 0x50]
call fcn.14000b7b0
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.14000e920
lea rcx, [rbp - 0x50]
call fcn.140002050
lea rdx, str.LeagueClient.exe
lea rcx, [rbp + 0x1f0]
call fcn.140002a40
lea rcx, [rbp + 0x1f0]
call fcn.1400040f0
mov r14d, eax
mov dword [rbp - 0x60], eax
lea rcx, [rbp + 0x1f0]
call fcn.140002050
mov r9d, r14d
lea r8, str.LeagueClientPid:__d
mov edx, 0x9acd32
lea rcx, [rbp + 0x120]
call fcn.14001bb20
test r14d, r14d
jne 0x14000c62d
lea r8, str.Could_not_find_LeagueClient
mov edx, 0xff0000
lea rcx, [rbp + 0x120]
call fcn.14001bb20
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r15, 0xffffffffffffffff
jmp 0x14000deb1
lea rcx, [rbp + 0x260]
call fcn.140004480
mov edx, r14d
lea rcx, [rbp + 0x260]
call fcn.1400041d0
mov r12, qword [rbp + 0x260]
mov rbx, r12
xor esi, esi
mov r13, qword [rbp + 0x268]
cmp r12, r13
je 0x14000c925
lea rdi, str.client.dll
nop dword [rax + rax]
mov rax, qword [rbx + 0x10]
mov r10, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14000c681
mov r10, qword [rbx]
cmp rax, 0xa
jb 0x14000c6f3
add rax, 0xfffffffffffffff7
lea r11, [r10 + rax*2]
mov rax, r10
mov rcx, r11
sub rcx, rax
sar rcx, 1
mov rdx, rsi
je 0x14000c6bc
cmp word [rax], 0x63
je 0x14000c6b9
cmp rcx, 1
je 0x14000c6bc
dec rcx
add rax, 2
cmp word [rax], 0x63
jne 0x14000c6a6
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14000c6f3
mov r8d, 0xa
mov rdx, rdi
mov r9, rax
sub r9, rdi
movzx ecx, word [r9 + rdx]
cmp cx, word [rdx]
jne 0x14000c705
add rdx, 2
sub r8, 1
jne 0x14000c6d3
sub rax, r10
sar rax, 1
cmp rax, 0xffffffffffffffff
jne 0x14000c70b
add rbx, 0x28
cmp rbx, r13
jne 0x14000c670
jmp 0x14000c925
add rax, 2
jmp 0x14000c692
mov r9, qword [rbx + 0x20]
lea r8, str.Trying_to_unload_0x_llx
mov edx, 0xffff00
lea rcx, [rbp + 0x120]
call fcn.14001bb20
mov qword [rbp - 0x78], 1
lea rcx, [rbp - 0x78]
call fcn.14000e4f0
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x20], rax
mov r9d, r14d
lea r8, str.LeagueClientPid:__d__mod__p
mov edx, 0xadd8e6
lea rcx, [rbp + 0x120]
call fcn.14001bb20
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], rsi
movups xmmword [rbp + 0x278], xmm0
mov qword [rbp + 0x288], rsi
mov qword [rbp + 0x290], rsi
mov r8d, Ordinal_30
lea rdx, str.http:__127.0.0.1:56321_unload
lea rcx, [rbp + 0x278]
call fcn.140003ff0
lea r9, [rbp + 0x1c0]
mov r8b, 1
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x1f0]
call fcn.140004940
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x14000c7fd
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001acf4
mov rsi, qword [rbx + 0x20]
mov r8d, r14d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x14000c82a
lea rcx, str.___OpenProcess_error_n
call fcn.140002bc0
jmp 0x14000c8ce
lea rcx, str.Kernel32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [0x14008daf0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
lea r8, str.FreeDll:_CreateRemoteThread
mov edx, 0x800080
lea rcx, [rbp + 0x120]
call fcn.14001bb20
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov r9, rbx
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
jne 0x14000c89f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.___CreateRemoteThread_error_n
call fcn.140002bc0
jmp 0x14000c8ce
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea r8, str.FreeDll:_freed
mov edx, 0x800080
lea rcx, [rbp + 0x120]
call fcn.14001bb20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14000b8e0
lea rdx, str.XNX_Loader
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x14000c923
nop word [rax + rax]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, rbx
call qword [sym.imp.USER32.dll_CloseWindow]
lea rdx, str.XNX_Loader
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
jne 0x14000c8f0
xor esi, esi
lea rcx, [rbp + 0x1f0]
call fcn.14000b7b0
mov r9, rax
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x14000c942
mov r9, qword [rax]
mov r15, 0xffffffffffffffff
cmp rcx, 0x18
jb 0x14000c9c3
lea r10, [rcx - 0x17]
lea r10, [r9 + r10*2]
mov rbx, r9
lea r11, str.D:XNXLoaderx64Release
mov rax, r10
sub rax, rbx
sar rax, 1
mov rcx, rsi
je 0x14000c98b
cmp word [rbx], 0x44
je 0x14000c988
cmp rax, 1
je 0x14000c98b
dec rax
add rbx, 2
cmp word [rbx], 0x44
jne 0x14000c975
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x14000c9c3
mov edx, Ordinal_26
mov rcx, r11
mov r8, rbx
sub r8, r11
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14000c9bd
add rcx, 2
sub rdx, 1
jne 0x14000c9a1
sub rbx, r9
sar rbx, 1
jmp 0x14000c9c6
add rbx, 2
jmp 0x14000c961
mov rbx, r15
mov rdx, qword [rbp + 0x208]
cmp rdx, 7
jbe 0x14000ca0f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ca0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001acf4
cmp rbx, r15
je 0x14000ca31
lea r8, str.Dev_Load_detected__skipping_autoupdate_of_client.dll
mov edx, 0xff0000
lea rcx, [rbp + 0x120]
call fcn.14001bb20
jmp 0x14000dd6f
lea rcx, [rbp + 0x1f0]
call fcn.14000b7b0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
mov r8d, reloc.WLDAP32.dll_Ordinal_22
cmp rax, 0xb
jb 0x14000ca86
lea rsi, [rcx + 0xb]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 7
jbe 0x14000ca6e
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
lea rdx, str._client.dll
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [rdi + rsi*2], ax
jmp 0x14000caae
mov qword [rsp + 0x20], recv
lea r9, str._client.dll
movzx r8d, byte [rbp + 0x120]
mov edx, listen
mov rcx, rbx
call fcn.14000f030
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x278], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x288], xmm1
xor edi, edi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rbp + 0x208]
cmp rdx, 7
jbe 0x14000cb1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cb18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cb18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001acf4
lea rdx, [rbp + 0x278]
lea rcx, [rbp - 0x50]
call fcn.140002cf0
mov rbx, rax
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.140002cf0
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.140003ce0
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x2a0]
call fcn.140003ed0
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.140003b10
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14000cbb1
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cbac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ccb2
call fcn.14001acf4
mov rdx, qword [rbx + 0x18]
cmp rdx, 7
jbe 0x14000cbf0
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000cbeb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000ccb2
mov rcx, r8
call fcn.14001acf4
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov byte [rbp + 0x138], 0
xor edx, edx
lea rcx, [rbp + 0x140]
call fcn.140008f50
nop
mov byte [rbp + 0x128], 0
xor edx, edx
lea rcx, [rbp + 0x130]
call fcn.140008f50
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.1400089a0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14001acb0
mov r14, rax
lea rdx, [rbp + 0x1f0]
mov rcx, rax
call fcn.140003ed0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov r8d, 4
lea rdx, str.hash
lea rcx, [rsp + 0x60]
call fcn.140003ff0
movzx ebx, byte [rbp + 0x128]
test bl, bl
jne 0x14000ccb9
mov bl, 1
mov byte [rbp + 0x128], bl
call fcn.140009d90
mov rdi, rax
mov qword [rbp + 0x130], rax
jmp 0x14000ccc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdi, qword [rbp + 0x130]
cmp bl, 1
jne 0x14000e008
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x78]
mov rcx, rdi
call fcn.14000ad70
mov rsi, qword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000cd1b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cd16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
call fcn.14001acf4
movzx edx, byte [rsi + 0x40]
mov byte [rsi + 0x40], 3
mov byte [rsp + 0x40], dl
mov rax, qword [rsi + 0x48]
mov qword [rsi + 0x48], r14
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
call fcn.1400089a0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.1400089a0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14001acb0
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r14
lea r8d, [r14 + 0x11]
lea rdx, str.client_client.dll
mov rcx, rax
call fcn.140003ff0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
lea r8d, [r14 + 4]
lea rdx, str.path
lea rcx, [rsp + 0x60]
call fcn.140003ff0
test bl, bl
jne 0x14000cdd0
mov bl, 1
mov byte [rbp + 0x128], bl
call fcn.140009d90
mov rdi, rax
mov qword [rbp + 0x130], rax
cmp bl, 1
jne 0x14000df3f
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x78]
mov rcx, rdi
call fcn.14000ad70
mov rbx, qword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000ce2b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ce26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
call fcn.14001acf4
movzx edx, byte [rbx + 0x40]
mov byte [rbx + 0x40], 3
mov byte [rsp + 0x40], dl
mov rax, qword [rbx + 0x48]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
call fcn.1400089a0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov r8d, recv
lea rdx, str.filesToCheck
lea rcx, [rsp + 0x60]
call fcn.140003ff0
movzx ecx, byte [rbp + 0x138]
test cl, cl
jne 0x14000ce9f
mov byte [rbp + 0x138], 1
call fcn.140009d90
mov qword [rbp + 0x140], rax
movzx ecx, byte [rbp + 0x138]
jmp 0x14000cea6
mov rax, qword [rbp + 0x140]
cmp cl, 1
jne 0x14000e1dd
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14000ad70
mov rbx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000cf03
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cefe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
call fcn.14001acf4
movzx eax, byte [rbx + 0x40]
test al, al
je 0x14000cf15
cmp al, 2
jne 0x14000df86
jmp 0x14000cf2c
mov byte [rbx + 0x40], 2
mov dl, 2
lea rcx, [rbp - 0x78]
call fcn.140008f50
mov rax, qword [rbp - 0x78]
mov qword [rbx + 0x48], rax
mov rbx, qword [rbx + 0x48]
mov rax, qword [rbx + 8]
cmp rax, qword [rbx + 0x10]
je 0x14000cf50
lea rdx, [rbp + 0x128]
mov rcx, rax
call fcn.140015b00
add qword [rbx + 8], 0x10
jmp 0x14000cf62
lea r8, [rbp + 0x128]
mov rdx, rax
mov rcx, rbx
call fcn.140012e40
mov r8d, 4
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x138]
call fcn.140007380
cmp qword [rax + 0x18], 0xf
jbe 0x14000cf85
mov rax, qword [rax]
mov r9, rax
lea r8, [0x14008dd60]
mov edx, 0xff1493
lea rcx, [rbp + 0x120]
call fcn.14001bb20
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14000cfe4
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cfdf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cfdf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001acf4
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], r14
mov qword [rbp + 0x2b8], r14
mov r8d, recv
lea rdx, str.Content_Type
lea rcx, [rbp + 0x2a0]
call fcn.140003ff0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], r14
mov qword [rbp + 0x2d8], r14
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.application_json
lea rcx, [rbp + 0x2c0]
call fcn.140003ff0
mov ecx, 0x40
call fcn.14001acb0
mov rbx, rax
mov qword [rsp + 0x40], rax
lea rdi, [rax + 0x40]
mov qword [rsp + 0x50], rdi
lea rdx, [rbp + 0x2a0]
mov rcx, rax
call fcn.140003ed0
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x2c0]
call fcn.140003ed0
mov qword [rsp + 0x48], rdi
mov r8d, r15d
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x138]
call fcn.140007380
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r14
mov r8d, Ordinal_26
lea rdx, str.https:__cdn.xnx.gg_check
lea rcx, [rbp + 0x188]
call fcn.140003ff0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x168]
call fcn.140004e30
lea r9, [fcn.1400057e0]
mov edx, 0x40
lea r8d, [rdx - 0x3f]
lea rcx, [rbp + 0x2a0]
call fcn.14001b20c
mov qword [rbp - 0x18], r14
lea rcx, [rbp + 0x168]
mov rax, qword [rbp + 0x178]
cmp qword [rbp + 0x180], 0xf
jbe 0x14000d130
mov rcx, qword [rbp + 0x168]
add rax, rcx
jmp 0x14000d13a
add rax, rcx
lea rcx, [rbp + 0x168]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
xor r9d, r9d
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x30]
call fcn.140012b50
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.140013020
movzx ebx, al
lea rcx, [rbp + 0x78]
call fcn.14000f250
mov r9, qword [rbp + 0x68]
test r9, r9
je 0x14000d19f
mov rcx, qword [r9]
mov r8, qword [rcx + 0x20]
lea rax, [rbp + 0x30]
cmp r9, rax
setne dl
mov rcx, r9
call r8
test bl, bl
jne 0x14000d20b
lea rcx, [rbp + 0x168]
call fcn.140002a20
mov r9, rax
lea r8, str.Failed_to_parse_remoteData:__s
mov edx, 0xff0000
lea rcx, [rbp + 0x120]
call fcn.14001bb20
lea rcx, [rbp + 0x168]
call fcn.1400020c0
lea rcx, [rbp + 0x128]
call fcn.140007670
lea rcx, [rbp + 0x138]
call fcn.140007670
lea rcx, [rbp + 0x1f0]
call fcn.1400020c0
lea rcx, [rbp + 0x278]
call fcn.140002050
jmp 0x14000de4a
xor r12d, r12d
mov qword [rbp - 0x18], r12
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x168]
lea rcx, [rbp + 0x1c0]
call fcn.14000eb10
lea r8d, [r12 + 4]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1c0]
call fcn.140007380
mov rcx, rax
call fcn.140002a20
mov r9, rax
lea r8, str.remoteData:__s
mov edx, 0xffff00
lea rcx, [rbp + 0x120]
call fcn.14001bb20
lea rcx, [rbp - 0x50]
call fcn.1400020c0
lea rcx, [rbp + 0x300]
call fcn.14000e2a0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x1c0]
call fcn.14000e340
lea rcx, [rbp + 0x2a0]
call fcn.14000e2a0
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x1c0]
call fcn.14000e2b0
mov r8, qword [rbp + 0x300]
cmp r8, qword [rbp + 0x2a0]
jne 0x14000dfcf
lea r11, [0x140000000]
movzx ebx, byte [rbp + 0x120]
mov r9, qword [rbp + 0x318]
mov qword [rbp - 0x58], r9
mov r10, qword [rbp + 0x310]
mov qword [rbp - 0x78], r10
mov rsi, qword [rbp + 0x308]
movzx edx, byte [r8]
cmp edx, 9
ja case.0x14000d2fe.0
movsxd rax, edx
mov ecx, dword [r11 + rax*4 + 0xe224]
add rcx, r11
jmp rcx
cmp rsi, qword [rbp + 0x2a8]
jmp 0x14000d319
cmp r10, qword [rbp + 0x2b0]
jmp 0x14000d319
cmp r9, qword [rbp + 0x2b8]
setne al
test al, al
je 0x14000dc41
cmp edx, 9
ja case.0x14000d334.3
mov ecx, dword [r11 + rdx*4 + 0xe24c]
add rcx, r11
jmp rcx
lea rdi, [rsi + 0x40]
jmp 0x14000d34d
mov rdi, r10
jmp 0x14000d34d
test r9, r9
jne 0x14000e1a4
mov rdi, r8
mov qword [rbp - 0x68], rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x160], r12
mov r8d, recv
lea rdx, str.hashMatches
lea rcx, [rbp + 0x148]
call fcn.140003ff0
cmp byte [rdi], 1
jne 0x14000e161
mov rax, qword [rdi + 8]
mov qword [rsp + 0x40], rax
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.14000b2c0
mov r13, qword [rbp + 0x160]
mov r14, qword [rbp + 0x148]
mov rdi, qword [rbp + 0x20]
cmp byte [rdi + 0x19], 0
jne 0x14000d403
lea rdx, [rdi + 0x20]
mov r15, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x14000d3d1
mov rdx, qword [rdx]
lea rcx, [rbp + 0x148]
cmp r13, 0xf
cmova rcx, r14
mov r12, qword [rbp + 0x158]
mov r8, r12
cmp r15, r12
cmovb r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000d3fe
jns 0x14000d40b
jmp 0x14000d403
cmp r12, r15
jae 0x14000d40b
mov rdi, qword [rsp + 0x40]
mov rdi, qword [rdi]
cmp r13, 0xf
jbe 0x14000d442
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d43a
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
mov rcx, r14
call fcn.14001acf4
cmp byte [rdi + 0x40], 4
jne 0x14000e11d
cmp byte [rdi + 0x48], 1
je 0x14000d94b
lea r8, str.Hash_does_not_match__should_redownload
mov edx, 0xff0000
lea rcx, [rbp + 0x120]
call fcn.14001bb20
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
xor eax, eax
mov qword [rbp + 0x20], rax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
lea r8d, [rax + 4]
lea rdx, str.path
lea rcx, [rsp + 0x60]
call fcn.140003ff0
mov rcx, qword [rbp - 0x68]
cmp byte [rcx], 1
jne 0x14000e0da
mov rax, qword [rcx + 8]
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.14000b2c0
mov r13, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rbp]
cmp byte [rdi + 0x19], 0
jne 0x14000d51b
lea rdx, [rdi + 0x20]
mov r15, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x14000d4ed
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
cmp r13, 0xf
cmova rcx, r14
mov r12, qword [rsp + 0x70]
mov r8, r12
cmp r15, r12
cmovb r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000d516
jns 0x14000d523
jmp 0x14000d51b
cmp r12, r15
jae 0x14000d523
mov rdi, qword [rsp + 0x40]
mov rdi, qword [rdi]
cmp r13, 0xf
jbe 0x14000d55a
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d552
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dc25
mov rcx, r14
call fcn.14001acf4
lea rdx, [rbp - 0x50]
lea rcx, [rdi + 0x40]
call fcn.14000ec40
mov rdi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x13
jb 0x14000d605
lea rax, [r8 + 0x13]
mov qword [rdi + 0x10], rax
mov r14, rdi
cmp rcx, 0xf
jbe 0x14000d596
mov r14, qword [rdi]
lea rax, [0x14008de2b]
lea r12, str.https:__cdn.xnx.gg_
cmp rax, r14
jbe 0x14000d5c6
lea rax, [r14 + r8]
cmp r12, rax
ja 0x14000d5c6
cmp r14, r12
ja 0x14000d5be
xor eax, eax
mov r15d, eax
jmp 0x14000d5cc
mov r15, r14
sub r15, r12
jmp 0x14000d5cc
mov r15d, reloc.WS2_32.dll_send
inc r8
lea rcx, [r14 + 0x13]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov r8d, reloc.WS2_32.dll_send
sub r8, r15
lea rdx, [r12 + 0x13]
add rdx, r15
lea rcx, [r14 + r15]
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14000d62a
mov qword [rsp + 0x28], reloc.WS2_32.dll_send
lea rax, str.https:__cdn.xnx.gg_
mov qword [rsp + 0x20], rax
mov edx, reloc.WS2_32.dll_send
mov rcx, rdi
call fcn.14000aa40
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xor r14d, r14d
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r14
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x198], xmm1
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r14b
lea r9, [rbp + 0x10]
xor r8d, r8d
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x148]
call fcn.140004940
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14000d6be
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d6b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dc25
call fcn.14001acf4
lea rdx, [rbp + 0x148]
lea rcx, [rbp - 0x50]
call fcn.140003ed0
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.140003b10
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov r8d, 4
lea rdx, str.hash
lea rcx, [rsp + 0x60]
call fcn.140003ff0
mov rax, qword [rbp - 0x68]
cmp byte [rax], 1
jne 0x14000e094
mov rax, qword [rax + 8]
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.14000b2c0
mov r13, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rbp]
cmp byte [rdi + 0x19], 0
jne 0x14000d781
lea rdx, [rdi + 0x20]
mov r15, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x14000d753
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
cmp r13, 0xf
cmova rcx, r14
mov r12, qword [rsp + 0x70]
mov r8, r12
cmp r15, r12
cmovb r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000d77c
jns 0x14000d789
jmp 0x14000d781
cmp r12, r15
jae 0x14000d789
mov rdi, qword [rsp + 0x40]
mov rdi, qword [rdi]
cmp r13, 0xf
jbe 0x14000d7c0
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d7b8
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dc2c
mov rcx, r14
call fcn.14001acf4
lea rdx, [rbp - 0x50]
lea rcx, [rdi + 0x40]
call fcn.14000ec40
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14000d7db
mov rax, qword [rax]
lea rcx, [rbp + 0x2e0]
mov r14, qword [rbp + 0x2e0]
mov r15, qword [rbp + 0x2f8]
cmp r15, 0xf
cmova rcx, r14
mov r8, qword [rbp + 0x2f0]
cmp r8, rdx
jne 0x14000d815
mov rdx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000d815
xor dil, dil
jmp 0x14000d818
mov dil, 1
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14000d853
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d84e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dc2c
call fcn.14001acf4
test dil, dil
je 0x14000d976
lea rdx, str.path
mov rcx, qword [rbp - 0x68]
call fcn.14000e9f0
lea rdx, [rbp - 0x50]
mov rcx, rax
call fcn.14000ec40
mov rcx, rax
call fcn.140002a20
mov r9, rax
lea r8, str.Failed_to_Update__s
mov edx, 0xff0000
lea rcx, [rbp - 0x80]
call fcn.14001bb20
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14000d8d3
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dc33
call fcn.14001acf4
cmp r15, 0xf
jbe 0x14000d90a
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d902
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
mov rcx, r14
call fcn.14001acf4
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x14000d94b
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d946
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
call fcn.14001acf4
xor r12d, r12d
mov r8, qword [rbp + 0x300]
movzx eax, byte [r8]
lea r11, [0x140000000]
cmp eax, 9
ja case.0x14000d974.0
mov ecx, dword [r11 + rax*4 + 0xe274]
add rcx, r11
jmp rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xor r12d, r12d
mov qword [rbp], r12
mov qword [rbp + 8], r12
lea r15, [rbp + 0x148]
cmp qword [rbp + 0x160], 0xf
cmova r15, qword [rbp + 0x148]
mov r14, qword [rbp + 0x158]
movabs r13, 0x7fffffffffffffff
cmp r14, r13
ja 0x14000e08e
cmp r14, 0xf
ja 0x14000d9d8
mov qword [rbp], r14
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x10], xmm0
jmp 0x14000da6a
mov rdi, r14
or rdi, 0xf
cmp rdi, r13
jbe 0x14000d9f7
mov rdi, r13
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000da1e
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000da40
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e088
mov rcx, rax
call fcn.14001acb0
mov rcx, rax
test rax, rax
je 0x14000dc3a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000da4f
test rcx, rcx
je 0x14000da4c
call fcn.14001acb0
jmp 0x14000da4f
mov rax, r12
mov qword [rbp - 0x10], rax
mov qword [rbp], r14
mov qword [rbp + 8], rdi
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp - 0x50]
call fcn.14000b7b0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xb
jb 0x14000dabb
lea r15, [rcx + 0xb]
mov qword [rdi + 0x10], r15
mov r14, rdi
cmp rdx, 7
jbe 0x14000da9e
mov r14, qword [rdi]
lea rcx, [r14 + rcx*2]
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str._client.dll
call sub.VCRUNTIME140.dll_memmove
mov word [r14 + r15*2], r12w
jmp 0x14000dadf
mov qword [rsp + 0x20], recv
lea r9, str._client.dll
movzx r8d, bl
mov edx, listen
mov rcx, rdi
call fcn.14000f030
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r12
mov qword [rbp + 0x1a0], r12
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x198], xmm1
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 7
mov word [rdi], r12w
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x188]
call fcn.14000c0f0
movzx edi, al
lea rcx, [rbp - 0x50]
call fcn.140002050
test dil, dil
jne 0x14000db82
lea rdx, str.path
mov rcx, qword [rbp - 0x68]
call fcn.14000e9f0
lea rdx, [rbp - 0x50]
mov rcx, rax
call fcn.14000ec40
mov rcx, rax
call fcn.140002a20
mov r9, rax
lea r8, str.Failed_to_Update__s
mov edx, 0xff0000
lea rcx, [rbp - 0x7f]
call fcn.14001bb20
lea rcx, [rbp - 0x50]
call fcn.1400020c0
lea rcx, [rbp + 0x2e0]
call fcn.1400020c0
lea rcx, [rbp + 0x148]
call fcn.1400020c0
jmp 0x14000d94e
mov rax, rsi
mov rsi, qword [rsi + 0x10]
cmp byte [rsi + 0x19], 0
je 0x14000dbcf
mov rsi, qword [rax + 8]
cmp byte [rsi + 0x19], 0
jne 0x14000dbec
cmp rax, qword [rsi + 0x10]
jne 0x14000dbec
mov rax, rsi
mov rsi, qword [rsi + 8]
cmp byte [rsi + 0x19], 0
je 0x14000dbb6
mov r9, qword [rbp - 0x58]
jmp 0x14000dc0f
mov rax, qword [rsi]
cmp byte [rax + 0x19], 0
jne 0x14000dbec
nop dword [rax + rax]
mov rsi, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14000dbe0
mov r9, qword [rbp - 0x58]
jmp 0x14000dc0f
mov r10, qword [rbp - 0x78]
add r10, 0x10
mov qword [rbp - 0x78], r10
mov r9, qword [rbp - 0x58]
jmp 0x14000dc13
mov r9, qword [rbp - 0x58]
inc r9
mov qword [rbp - 0x58], r9
mov r10, qword [rbp - 0x78]
cmp r8, qword [rbp + 0x2a0]
jne 0x14000dfcf
jmp 0x14000d2e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movzx edx, byte [rbp + 0x1c0]
lea rcx, [rbp + 0x1c8]
call fcn.1400089a0
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x14000dc96
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
call fcn.14001acf4
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], 0
movzx edx, byte [rbp + 0x128]
lea rcx, [rbp + 0x130]
call fcn.1400089a0
nop
movzx edx, byte [rbp + 0x138]
lea rcx, [rbp + 0x140]
call fcn.1400089a0
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x14000dd14
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dd51
call fcn.14001acf4
mov rdx, qword [rbp + 0x290]
cmp rdx, 7
jbe 0x14000dd5d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dd58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001acf4
mov r14d, dword [rbp - 0x60]
mov r13, qword [rbp + 0x268]
mov r12, qword [rbp + 0x260]
mov ecx, 1
call fcn.14001acb0
lea rcx, [rbp + 0x1e8]
mov qword [rsp + 0x28], rcx
xor edi, edi
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140015fa0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1e0], rax
test rax, rax
je 0x14000df2d
lea rdx, [rbp + 0x228]
lea rcx, [rbp - 0x50]
call fcn.140002cf0
mov rbx, rax
mov r8d, r14d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdx, rbx
mov rcx, rax
call fcn.14000bc20
call fcn.14000b8e0
cmp dword [rbp + 0x1e8], edi
jne 0x14000ddf4
lea ecx, [rdi + 1]
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x1e8], eax
jne 0x14000de0e
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x1c0], xmm0
xor edx, edx
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x14000de3c
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov r15d, edi
test r12, r12
je 0x14000deb1
mov rdx, r13
mov rcx, r12
call fcn.140004520
mov rcx, qword [rbp + 0x270]
sub rcx, r12
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, r12
cmp rdx, 0x1000
jb 0x14000dea9
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000deee
mov rcx, r12
call fcn.14001acf4
mov rdx, qword [rbp + 0x240]
cmp rdx, 7
jbe 0x14000defa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000def5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000def5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001acf4
mov eax, r15d
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.14001ac90
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp + 0x1e8], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
lea rcx, [rbp + 0x128]
call fcn.14000a310
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.14000a750
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x228]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbx + 0x40]
call fcn.14000a310
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x78]
lea rdx, str.cannot_use_push_back___with
lea rcx, [rbp - 0x50]
call fcn.14000ef50
mov r8, rax
mov edx, 0x134
lea rcx, [rbp + 0x228]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.cannot_compare_iterators_of_different_containers
lea rcx, [rbp - 0x50]
call fcn.140003e90
lea r8, [rbp - 0x50]
mov edx, 0xd4
lea rcx, [rbp + 0x228]
call fcn.14000ed20
lea rdx, [0x1400982b8]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbp + 0x128]
call fcn.14000a310
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.14000a750
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x188]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x188]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.cannot_get_value
lea rcx, [rbp - 0x50]
call fcn.140003e90
lea r8, [rbp - 0x50]
mov edx, Ordinal_217
lea rcx, [rbp + 0x228]
call fcn.14000ed20
lea rdx, [0x1400982b8]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
call fcn.1400011a0
int3
call fcn.140001240
int3
mov rcx, rax
call fcn.14000a310
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rbp + 0x228]
call fcn.14000a750
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x1f0]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x1f0]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
call fcn.14000a310
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rbp + 0x228]
call fcn.14000a750
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x1f0]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x1f0]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rdi + 0x40]
call fcn.14000a310
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.14001aa50
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x228]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
mov rcx, rdi
call fcn.14000a310
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.14000a750
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x228]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.cannot_get_value
lea rcx, [rbp - 0x50]
call fcn.140003e90
lea r8, [rbp - 0x50]
mov edx, Ordinal_217
lea rcx, [rbp + 0x228]
call fcn.14000ed20
lea rdx, [0x1400982b8]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rbp + 0x138]
call fcn.14000a310
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.14000a750
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x228]
call fcn.14000a810
lea rdx, [0x140098180]
lea rcx, [rbp + 0x228]
call sub.VCRUNTIME140.dll__CxxThrowException
int3