Function at 0x180028cc0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x590
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180309080]
xor rax, rsp
mov qword [rbp + 0x510], rax
xor r13d, r13d
mov rdx, qword [0x18030ba60]
mov rcx, qword [0x18030b418]
test rdx, rdx
jne 0x180028d62
test rcx, rcx
je 0x180028d4b
cmp dword [0x18030b384], r13d
je 0x180028d4b
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x110]
mov rdx, qword [0x18030b918]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
mov rdx, qword [rbp + 0x110]
mov qword [0x18030ba60], rdx
test rdx, rdx
je 0x180028e12
test rcx, rcx
je 0x180028d93
cmp dword [0x18030b384], r13d
je 0x180028d93
add rdx, 8
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
mov rax, qword [rbp + 0xe0]
mov qword [0x18030ba68], rax
test rax, rax
je 0x180028e12
mov rdx, qword [0x18030ba70]
test rdx, rdx
jne 0x180028df9
test rcx, rcx
je 0x180028de6
cmp dword [0x18030b384], r13d
je 0x180028de6
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x118]
mov rdx, qword [0x18030b920]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
mov rdx, qword [rbp + 0x118]
mov qword [0x18030ba70], rdx
test rdx, rdx
je 0x180028e12
cmp qword [0x18030ba78], r13
jne 0x180028e92
test rdx, rdx
jne 0x180028e4e
mov qword [0x18030ba78], r13
xor al, al
mov rcx, qword [rbp + 0x510]
xor rcx, rsp
call fcn.1800e7c90
lea r11, [rsp + 0x590]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test rcx, rcx
je 0x180028e7f
cmp dword [0x18030b384], r13d
je 0x180028e7f
add rdx, 0x18
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x160]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
mov rax, qword [rbp + 0x160]
mov qword [0x18030ba78], rax
test rax, rax
je 0x180028e12
cmp qword [0x18030ba88], r13
jne 0x180028edf
test rcx, rcx
je 0x180028ec8
cmp dword [0x18030b384], r13d
je 0x180028ec8
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x158]
mov rdx, qword [0x18030b930]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x158]
mov qword [0x18030ba88], rax
test rax, rax
je 0x180028e12
lea rcx, [0x18030ba98]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x180028efc
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x18030bae4]
cmp eax, 0x7fffffff
jne 0x180028f1d
dec eax
mov dword [0x18030bae4], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rbx, qword [0x18030bb38]
mov rdi, qword [0x18030bb40]
cmp rbx, rdi
je 0x180028f55
mov rcx, rbx
call fcn.1800058c0
add rbx, 0xa0
cmp rbx, rdi
jne 0x180028f30
mov rbx, qword [0x18030bb38]
mov rdi, rbx
mov qword [0x18030bb40], rbx
cmp rdi, qword [0x18030bb48]
je 0x180028fa2
lea rcx, [0x18030bb38]
cmp rbx, rdi
jne 0x180028f71
call fcn.180003970
jmp 0x180028fa2
sub rdi, rbx
movabs rax, 0x6666666666666667
imul rdi
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x110], rdx
lea rdx, [rbp + 0x110]
call fcn.18002ef60
mov rdi, r13
movabs rsi, 0x100000001b3
movabs r15, 0xccccccccccccb
mov r12, 0xffffffffffffffff
lea r14, [0x180000000]
xorps xmm6, xmm6
movss xmm7, dword [0x1802f40b8]
mov rcx, qword [0x18030b418]
nop dword [rax]
mov rdx, qword [0x18030ba78]
test rdx, rdx
je 0x18002993e
test rcx, rcx
je 0x180029024
cmp dword [0x18030b384], 0
je 0x180029024
add rdx, 0x108
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
cmp rdi, qword [rbp + 0x168]
jae 0x18002993e
mov rdx, qword [0x18030ba78]
test rdx, rdx
je 0x1800290c2
test rcx, rcx
je 0x180029075
cmp dword [0x18030b384], 0
je 0x180029075
add rdx, 0x100
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
mov r8, qword [rbp + 0x170]
test r8, r8
je 0x1800290c2
test rcx, rcx
je 0x1800290b9
cmp dword [0x18030b384], 0
je 0x1800290b9
mov eax, edi
shl eax, 4
movsxd rdx, eax
add rdx, r8
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x178]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
mov rbx, qword [rbp + 0x178]
jmp 0x1800290c5
mov rbx, r13
mov qword [rbp + 0xe0], rbx
lea rax, [rbx - 1]
cmp rax, r15
ja 0x18002992f
mov rcx, rbx
call fcn.18001d7c0
test eax, eax
je 0x1800290f5
and eax, 0x1fc000
cmp eax, 0x6c000
ja 0x180029928
mov rcx, qword [0x18030b418]
test rcx, rcx
je 0x180029130
cmp dword [0x18030b384], 0
je 0x180029130
lea rdx, [rbx + 0x280]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
comiss xmm6, dword [rbp + 0x150]
jae 0x18002992f
test rcx, rcx
je 0x180029171
cmp dword [0x18030b384], 0
je 0x180029171
lea rdx, [rbx + 0x280]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x158]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
comiss xmm7, dword [rbp + 0x158]
jae 0x18002992f
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x58], 0
mov byte [rbp + 0x80], 0
lea rax, [rbp + 0x88]
mov qword [rbp], rax
mov dword [rbp + 0x160], 0
mov eax, dword [rbp + 0x160]
mov dword [rbp + 0x88], eax
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], r13
mov ecx, Ordinal_26
call fcn.1800e7cb0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x90], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], 7
mov qword [rbp + 0xc0], 8
mov dword [rbp + 0x88], 0x3f800000
mov r8, rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0xa0]
call fcn.180003c30
nop
mov qword [rbp + 0x40], rbx
mov dword [rbp + 0x48], edi
cmp rbx, qword [0x18030ba68]
sete byte [rbp + 0x50]
mov rcx, rbx
call fcn.18001d840
movzx r10d, al
mov byte [rbp + 0x51], al
movzx edx, bl
movabs rax, 0xcbf29ce484222325
xor rdx, rax
imul rdx, rsi
movzx ecx, byte [rbp + 0xe1]
xor rdx, rcx
imul rdx, rsi
movzx ecx, byte [rbp + 0xe2]
xor rdx, rcx
imul rdx, rsi
movzx eax, byte [rbp + 0xe3]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0xe4]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0xe5]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0xe6]
xor rdx, rax
imul rdx, rsi
movzx eax, byte [rbp + 0xe7]
xor rdx, rax
imul rdx, rsi
and rdx, qword [0x18030b900]
mov rax, rdx
add rax, rax
mov r8, qword [0x18030b8e8]
mov rcx, qword [r8 + rax*8 + 8]
mov r9, qword [0x18030b8d8]
cmp rcx, r9
je 0x180029304
add rdx, rdx
mov rax, qword [r8 + rdx*8]
cmp rbx, qword [rcx + 0x10]
je 0x180029307
cmp rcx, rax
je 0x180029304
mov rcx, qword [rcx + 8]
cmp rbx, qword [rcx + 0x10]
jne 0x1800292f3
jmp 0x180029307
mov rcx, r13
mov rax, r9
test rcx, rcx
cmovne rax, rcx
cmp rax, r9
setne byte [rbp + 0x80]
test r10b, r10b
mov r10, qword [0x18030b418]
jne 0x1800293c0
mov rdx, qword [0x18030b338]
add rdx, rbx
test r10, r10
je 0x180029365
cmp dword [0x18030b384], 0
je 0x180029365
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x110]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x18030b418]
cmp qword [rbp + 0x110], 0
jne 0x180029377
mov eax, r13d
mov dword [rbp + 0x4c], eax
jmp 0x1800293c4
mov rdx, qword [rbp + 0x110]
add rdx, qword [0x18030b328]
test r10, r10
je 0x1800293b5
cmp dword [0x18030b384], 0
je 0x1800293b5
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x118]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x18030b418]
mov eax, dword [rbp + 0x118]
mov dword [rbp + 0x4c], eax
jmp 0x1800293c4
mov dword [rbp + 0x4c], r12d
mov rdx, qword [0x18030b320]
add rdx, rbx
test r10, r10
je 0x180029474
cmp dword [0x18030b384], 0
je 0x180029402
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x180]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x18030b418]
test r10, r10
je 0x180029474
cmp dword [0x18030b384], 0
je 0x18002943d
mov rdx, qword [rbp + 0x180]
add rdx, 0x68
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x188]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x18030b418]
test r10, r10
je 0x180029474
cmp dword [0x18030b384], 0
je 0x180029474
mov rdx, qword [rbp + 0x188]
add rdx, 0x178
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0xd0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x190]
call fcn.18001c710
mov qword [rbp + 0x228], 0
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x190], rax
mov eax, dword [rbp + 0x48]
mov dword [rbp + 0x198], eax
mov eax, dword [rbp + 0x4c]
mov dword [rbp + 0x19c], eax
movzx eax, byte [rbp + 0x50]
mov byte [rbp + 0x1a0], al
movzx eax, byte [rbp + 0x51]
mov byte [rbp + 0x1a1], al
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x1a8]
call fcn.18000ead0
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0x1c8], rax
movzx eax, byte [rbp + 0x80]
mov byte [rbp + 0x1d0], al
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0xe0], rax
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x1d8], eax
mov rdx, qword [rbp + 0x90]
mov r8, rdx
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1e0]
call fcn.18002f6d0
mov rdx, qword [rbp + 0x1e8]
lea rcx, [rbp + 0x1d8]
call fcn.18001ccf0
mov rdx, rax
lea rcx, [rbp + 0x1d8]
call fcn.18001cb40
mov qword [rbp + 0xe0], r13
cmp qword [rbp + 0x1b8], 0
jne case.0x18002957e.0
movzx eax, byte [0x18030ba08]
cmp eax, 9
ja case.0x18002957e.3
mov ecx, dword [r14 + rax*4 + 0x2b2dc]
add rcx, r14
jmp rcx
mov rcx, qword [0x18030ba10]
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
jmp 0x18002959c
mov rax, qword [0x18030ba10]
cmp qword [rax + 8], 0
sete al
test al, al
jne case.0x18002957e.0
cmp qword [0x18030ba28], 0
je case.0x18002957e.0
movzx ecx, byte [rbp + 0x19c]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
imul rcx, rsi
movzx eax, byte [rbp + 0x19d]
xor rcx, rax
imul rcx, rsi
movzx eax, byte [rbp + 0x19e]
xor rcx, rax
imul rcx, rsi
movzx eax, byte [rbp + 0x19f]
xor rcx, rax
imul rcx, rsi
mov rdx, qword [0x18030ba48]
and rdx, rcx
mov rax, rdx
add rax, rax
mov r8, qword [0x18030ba30]
mov rcx, qword [r8 + rax*8 + 8]
mov r9, qword [0x18030ba20]
mov eax, dword [rbp + 0x19c]
cmp rcx, r9
je 0x180029641
add rdx, rdx
mov r8, qword [r8 + rdx*8]
cmp eax, dword [rcx + 0x10]
je 0x180029644
cmp rcx, r8
je 0x180029641
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x180029631
jmp 0x180029644
mov rcx, r13
mov rdx, r9
test rcx, rcx
cmovne rdx, rcx
cmp rdx, r9
je 0x180029683
cmp eax, 0xffffffff
je 0x180029683
add rdx, 0x18
lea rax, [rbp + 0x1a8]
cmp rax, rdx
je case.0x18002957e.0
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x180029727
mov rdx, qword [rdx]
jmp 0x180029727
movabs rax, 0xff2f27e2a7479b9a
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x260], rax
movabs rcx, 0xe89e31bdb50afd04
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x268], rax
movabs rax, 0x9a42468cd522e8ef
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x240], rax
mov qword [rbp + 0xe0], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x260], xmm0
lea rax, [rbp + 0x260]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x180029716
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x1a8]
call fcn.18000ead0
mov rcx, qword [0x18030b418]
test rcx, rcx
je 0x180029764
cmp dword [0x18030b384], 0
je 0x180029764
lea rdx, [rbx + 0x90]
mov qword [rsp + 0x20], r13
mov r9d, recvfrom
lea r8, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp + 8]
movsd qword [rbp + 0x218], xmm0
mov eax, dword [rbp + 0x10]
mov dword [rbp + 0x220], eax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x300]
call fcn.18001c7c0
mov r9d, 0x796e
mov r8, rax
lea rdx, [rbp + 0xf0]
call fcn.18002bb50
movsd xmm0, qword [rax]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x28], eax
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x30]
call fcn.18002cdd0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x228], xmm0
mov rdx, qword [0x18030b368]
add rdx, rbx
mov rcx, qword [0x18030b418]
test rcx, rcx
je 0x180029801
cmp dword [0x18030b384], 0
je 0x180029801
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp + 0xd8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0xd8]
test al, 0xdb
jne 0x180029814
cmp al, 0x20
je 0x180029814
xor al, al
jmp 0x180029816
mov al, 1
mov byte [rbp + 0x224], al
cmp byte [rbp + 0x1a0], 0
je 0x180029885
mov qword [0x18030bb50], rbx
movzx eax, byte [rbp + 0x51]
mov byte [0x18030ba58], al
mov dword [0x18030bb58], edi
movsd xmm0, qword [rbp + 0x218]
movsd qword [0x18030bb64], xmm0
mov eax, dword [rbp + 0x220]
mov dword [0x18030bb6c], eax
movsd qword [rbp + 0x130], xmm0
mov dword [rbp + 0x138], eax
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x120]
call fcn.18002cdd0
movsd xmm0, qword [rax]
movsd qword [0x18030bb5c], xmm0
mov rax, qword [0x18030bb40]
cmp rax, qword [0x18030bb48]
je 0x1800298b1
lea rdx, [rbp + 0x190]
mov rcx, rax
call fcn.18001c7c0
add qword [0x18030bb40], 0xa0
jmp 0x1800298c8
lea r8, [rbp + 0x190]
mov rdx, rax
lea rcx, [0x18030bb38]
call fcn.18002ffc0
nop
lea rcx, [rbp + 0x190]
call fcn.1800058c0
nop
lea rcx, [rbp + 0x88]
call fcn.180005930
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x180029918
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029913
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180029937
call fcn.1800e8064
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x58], 0
mov rcx, qword [0x18030b418]
inc rdi
jmp 0x180028fe0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [0x18030ba98]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
cmp byte [0x18030ba58], 0
jne 0x18002b2b4
cmp qword [0x18030b9d8], 2
jae 0x18002b2b4
cmp qword [0x18030b998], 0
je 0x18002997e
cmp qword [0x18030b9b8], 0
jne 0x18002a623
mov dword [rbp + 0x118], 0x208
movabs rax, 0x9a1646cad56de8bc
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2c0], rax
movabs rax, 0xe8db31efb54bfd53
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xa5877c3c5bdbeed
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x77ade88e04197c17
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x8baf72ac75fe7435
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x1027d9748f7d1c51
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2e8], rax
movabs rdx, 0x2171ff9e0bbc0675
mov qword [rbp + 0xd0], rdx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2f0], rax
movabs rcx, 0x81d3baaf4c64dd92
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x280], rax
movabs rax, 0xe89e31bdb50afd04
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x288], rax
movabs r14, 0xa2c77aac5febeb1
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x290], rax
movabs r15, 0x77c3e8eb04637c7e
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x298], rax
movabs rsi, 0x8be972f075a67473
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2a0], rax
movabs rdi, 0x106ad9118f0b1c38
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2a8], rax
mov qword [rbp + 0xd0], rdx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2b8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x2c0], xmm0
movdqa xmm1, xmmword [rbp + 0x290]
xorps xmm1, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp + 0x2d0], xmm1
movdqa xmm0, xmmword [rbp + 0x2a0]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x2e0], xmm0
movdqa xmm1, xmmword [rbp + 0x2b0]
xorps xmm1, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x2f0], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x180029c54
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x180029c54
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x5ade2b0e
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180029c4f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x180029c30
cmp edx, 0xf4d27d83
je 0x180029c59
test r9d, r9d
jne 0x180029c10
mov rax, qword [rax]
jmp 0x180029be0
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
lea rcx, [rbp + 0x110]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x2c0]
mov rcx, 0xffffffff80000001
call rax
test eax, eax
jne 0x18002a60b
movabs rax, 0x9a3646ffd543e8a3
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x280], rax
movabs rax, 0xe8f031c8b558fd24
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x288], rax
movabs rax, 0xa4f77c5c5b2be91
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x290], rax
movabs rax, 0x77ace88204177c1f
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x298], rax
movabs rax, 0x8be972f075a6741d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2c0], rax
movabs rbx, 0xe89e31bdb50afd04
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2d0], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2d8], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x2e8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x280], xmm0
movdqa xmm1, xmmword [rbp + 0x2d0]
xorps xmm1, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x290], xmm1
movdqa xmm0, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2a0], xmm0
lea rax, [rbp + 0x118]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x280]
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x18002a559
movabs rdi, 0xf92325d0b456898b
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
movabs rsi, 0x80ed50cfd656986c
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x248], rax
movabs r14, 0xa2c0ed8b19bd3de
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x250], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x258], rax
movabs rax, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x288], rax
movabs rax, 0xa2c77aac5febeb1
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmm1, xmmword [rbp + 0x290]
xorps xmm1, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r13
mov qword [rbp + 0x148], r13
lea rax, [rbp + 0x300]
mov r8, r12
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180029f90
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x130]
call fcn.18002f4d0
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x2c0]
call fcn.180088a10
nop
lea rcx, [rbp + 0x240]
mov r8, r12
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x180029fd0
lea rdx, [rbp + 0x240]
mov rcx, rax
call fcn.180003a50
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], r13
mov qword [rbp + 0x298], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x280], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x290], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 0xf
jbe 0x18002a069
inc rdx
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a064
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
mov qword [rbp + 0x2d0], r13
mov qword [rbp + 0x2d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2c0], 0
lea rax, [rbp + 0x280]
cmp qword [rbp + 0x298], 0xf
cmova rax, qword [rbp + 0x280]
mov qword [rbp + 0x240], rax
mov rax, qword [rbp + 0x290]
mov qword [rbp + 0x248], rax
call fcn.1800e7478
movaps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x240], xmm0
lea r8, [rbp + 0x240]
mov edx, eax
lea rcx, [rbp + 0xf0]
call fcn.180021f30
nop
mov qword [rbp + 0x260], r13
lea rax, [0x180309108]
mov qword [rbp + 0x268], rax
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xf0]
call fcn.1800228e0
movzx ebx, al
cmp dword [rbp + 0x260], 0
jne 0x18002b2c1
mov rdx, qword [rbp + 0x108]
cmp rdx, 7
jbe 0x18002a159
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a154
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a154
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x108], 7
mov word [rbp + 0xf0], r13w
test bl, bl
je 0x18002a4fc
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], r13
lea rax, [rbp + 0x300]
mov r8, r12
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18002a1a0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x240]
call fcn.18002f4d0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x260]
call fcn.180088a10
mov rbx, rax
lea rax, [0x18030b988]
cmp rax, rbx
je 0x18002a25a
mov rdx, qword [0x18030b9a0]
cmp rdx, 0xf
jbe 0x18002a21d
mov rcx, qword [0x18030b988]
inc rdx
cmp rdx, 0x1000
jb 0x18002a218
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002a292
mov rcx, r8
call fcn.1800e8064
mov qword [0x18030b998], r13
mov qword [0x18030b9a0], 0xf
mov byte [0x18030b988], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x18030b988], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x18030b998], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x18002a29e
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a299
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a299
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
mov qword [rbp + 0x270], r13
mov qword [rbp + 0x278], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x260], 0
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x248], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x250], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x258], rax
movabs rax, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x260], rax
movabs rax, 0xe89e31bdb50afd04
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x268], rax
movabs rax, 0xa2c77aac5febeb1
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x270], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x278], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmm1, xmmword [rbp + 0x270]
xorps xmm1, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r13
mov qword [rbp + 0x278], r13
lea rax, [rbp + 0x300]
mov r8, r12
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18002a3d0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x260]
call fcn.18002f4d0
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xf0]
call fcn.180088a10
nop
lea rcx, [rbp + 0x240]
mov r8, r12
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x18002a410
lea rdx, [rbp + 0x240]
mov rcx, rax
call fcn.180003a50
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0x2c0], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2d0], xmm7
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [0x18030b9c0]
cmp rdx, 0xf
jbe 0x18002a48a
mov rcx, qword [0x18030b9a8]
inc rdx
cmp rdx, 0x1000
jb 0x18002a485
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002a4d7
mov rcx, r8
call fcn.1800e8064
movups xmmword [0x18030b9a8], xmm6
movups xmmword [0x18030b9b8], xmm7
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x18002a4e3
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a4de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a4de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1800e8064
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x18002a540
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a53b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a53b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
mov qword [rbp + 0x290], r13
mov qword [rbp + 0x298], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x280], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x18002a5e4
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x18002a5e4
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
add r8, r10
mov edx, 0xb5a380f0
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x18002a5df
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x18002a5c0
cmp edx, 0xb62c2afd
je 0x18002a5e9
test r9d, r9d
jne 0x18002a5a0
mov rax, qword [rax]
jmp 0x18002a570
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov rcx, qword [rbp + 0x110]
call rax
cmp qword [0x18030b9b8], 0
jne 0x18002a623
cmp qword [0x18030b9d8], 0
jne 0x18002b1f6
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
lea rdx, [0x18030b9a8]
cmp qword [0x18030b9c0], 0xf
cmova rdx, qword [0x18030b9a8]
lea rcx, [rbp + 0x300]
call fcn.18002e920
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x300], rbx
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2fc], edx
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], r13
mov qword [rbp + 0x298], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x280], 0
cmp qword [rbp + 0x390], 0
je 0x18002b147
xor eax, eax
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x260], r13
mov word [rbp + 0x268], 1
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x348]
mov qword [rbp + 0xf0], rax
test rax, rax
sete byte [rbp + 0xf8]
mov byte [rbp + 0xf9], 0
movdqu xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r13
lea rcx, [rbp + 0x130]
mov qword [rbp + 0xd0], rcx
movaps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x260], xmm0
movaps xmm1, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0xf0], xmm1
movzx esi, byte [rbp + 0xf9]
mov rbx, qword [rbp + 0xf0]
movzx r15d, byte [rbp + 0x268]
mov rdi, qword [rbp + 0x260]
test rax, rax
jne 0x18002a76f
movzx r14d, byte [rbp + 0xf8]
jmp 0x18002a790
test rbx, rbx
je 0x18002a787
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x18002a787
movzx esi, al
jmp 0x18002a78a
mov rbx, r13
mov r14b, 1
nop dword [rax]
test r15b, r15b
jne 0x18002a7ae
test rdi, rdi
je 0x18002a7a8
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
jne 0x18002a7ab
mov rdi, r13
mov r15b, 1
test rbx, rbx
jne 0x18002a802
test rdi, rdi
jne 0x18002a807
mov qword [rbp + 0xd0], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], r13
mov rdx, qword [rbp + 0x130]
cmp rdx, qword [rbp + 0x138]
jne 0x18002a88b
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], 0
jmp 0x18002a8a1
test rdi, rdi
jne 0x18002a7b8
test r14b, r14b
jne 0x18002a827
test rbx, rbx
je 0x18002a824
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x18002a824
movzx esi, al
jmp 0x18002a827
mov rbx, r13
mov byte [rbp + 0xd8], sil
mov rax, qword [rbp + 0x138]
cmp rax, qword [rbp + 0x140]
je 0x18002a84a
mov byte [rax], sil
inc qword [rbp + 0x138]
jmp 0x18002a864
lea r8, [rbp + 0xd8]
mov rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x130]
call fcn.180017380
test rbx, rbx
je 0x18002a787
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sbumpc_void____ptr64]
cmp eax, 0xffffffff
je 0x18002a787
mov byte [rbp + 0xf8], 0
jmp 0x18002a76f
mov r8, qword [rbp + 0x138]
sub r8, rdx
lea rcx, [rbp + 0x240]
call fcn.1800046d0
mov rax, qword [rbp + 0x298]
cmp rax, 0xf
jbe 0x18002a8e6
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a8e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a8e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
movups xmm0, xmmword [rbp + 0x240]
movups xmmword [rbp + 0x280], xmm0
movups xmm1, xmmword [rbp + 0x250]
movups xmmword [rbp + 0x290], xmm1
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], 0
movq rax, xmm1
test rax, rax
je 0x18002b0c8
movabs r14, 0xe82735d3a1518983
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x260], rax
movabs r15, 0xe8f243c8ea789872
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x268], rax
movabs rax, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
movabs rax, 0xe89e31bdb50afd04
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x260]
mov rax, r12
inc rax
cmp byte [rcx + rax], 0
jne 0x18002a9c6
lea rcx, [rbp + 0x280]
mov rdi, qword [rbp + 0x280]
mov rsi, qword [rbp + 0x298]
cmp rsi, 0xf
cmova rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x260]
xor r8d, r8d
mov rbx, qword [rbp + 0x290]
mov rdx, rbx
call fcn.18002f600
cmp rax, 0xffffffffffffffff
je 0x18002b0c8
lea rcx, [rax + 0xf]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x108], r13
cmp rbx, rcx
jb 0x18002b2d5
sub rbx, rcx
mov r8, r12
cmp rbx, r12
cmovb r8, rbx
lea rdx, [rbp + 0x280]
cmp rsi, 0xf
cmova rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0xf0]
call fcn.1800046d0
nop
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x260], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x268], rax
movabs rdi, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
movabs rbx, 0xe89e31bdb50afd04
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x260]
mov rax, r12
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x18002aaf0
lea rcx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rcx, qword [rbp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x260]
xor r8d, r8d
mov rdx, qword [rbp + 0x100]
call fcn.18002f600
test rax, rax
je 0x18002acc4
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x260], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x268], rax
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x260]
mov rax, r12
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x18002abb0
lea rcx, [rbp + 0xf0]
mov rdi, qword [rbp + 0xf0]
mov rsi, qword [rbp + 0x108]
cmp rsi, 0xf
cmova rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x260]
xor r8d, r8d
mov rbx, qword [rbp + 0x100]
mov rdx, rbx
call fcn.18002f600
lea rcx, [rax + 0xf]
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], r13
cmp rbx, rcx
jb 0x18002b2bb
sub rbx, rcx
mov r8, r12
cmp rbx, r12
cmovb r8, rbx
lea rdx, [rbp + 0xf0]
cmp rsi, 0xf
cmova rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0x240]
call fcn.1800046d0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x18002ac85
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ac80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b0bc
call fcn.1800e8064
movups xmm0, xmmword [rbp + 0x240]
movups xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rbp + 0x250]
movups xmmword [rbp + 0x100], xmm1
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], 0
movabs rdi, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x260], rax
movabs rax, 0xe89e31bdb5789872
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x268], rax
mov qword [rbp + 0xd0], rdi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
movabs r14, 0xe89e31bdb50afd04
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x260]
mov rax, r12
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x18002ad50
lea rcx, [rbp + 0xf0]
mov rdi, qword [rbp + 0xf0]
mov rsi, qword [rbp + 0x108]
cmp rsi, 0xf
cmova rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x260]
xor r8d, r8d
mov rbx, qword [rbp + 0x100]
mov rdx, rbx
call fcn.18002f600
lea rcx, [rax + 0xb]
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], r13
cmp rbx, rcx
jb 0x18002b2bb
sub rbx, rcx
mov r8, r12
cmp rbx, r12
cmovb r8, rbx
lea rdx, [rbp + 0xf0]
cmp rsi, 0xf
cmova rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0x240]
call fcn.1800046d0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x18002ae25
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ae20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b0bc
call fcn.1800e8064
movups xmm0, xmmword [rbp + 0x240]
movups xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rbp + 0x250]
movups xmmword [rbp + 0x100], xmm1
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], 0
movabs rax, 0x9a42468cd522e8d5
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x260], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x268], rax
movabs rax, 0x9a42468cd522e8ef
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x260], xmm0
lea rax, [rbp + 0x260]
inc r12
cmp byte [rax + r12], 0
jne 0x18002aee0
lea rcx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rcx, qword [rbp + 0xf0]
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x260]
xor r8d, r8d
mov rbx, qword [rbp + 0x100]
mov rdx, rbx
call fcn.18002f600
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], r13
mov qword [rbp + 0x2d8], r13
mov r8, rax
cmp rbx, rax
cmovb r8, rbx
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x2c0]
call fcn.1800046d0
mov rdx, qword [0x18030b9e0]
cmp rdx, 0xf
jbe 0x18002afa8
mov rcx, qword [0x18030b9c8]
inc rdx
cmp rdx, 0x1000
jb 0x18002afa3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002b0bc
mov rcx, r8
call fcn.1800e8064
movups xmm0, xmmword [rbp + 0x2c0]
movups xmmword [0x18030b9c8], xmm0
movups xmm1, xmmword [rbp + 0x2d0]
movups xmmword [0x18030b9d8], xmm1
lea rcx, [r14 + 1]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], r13
mov qword [rbp + 0x2d8], r13
mov rax, qword [rbp + 0x100]
cmp rax, rcx
jb 0x18002b2bb
lea r8, [r14 + 5]
sub rax, rcx
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rdx, qword [rbp + 0xf0]
add rdx, rcx
lea rcx, [rbp + 0x2c0]
call fcn.1800046d0
mov rdx, qword [0x18030ba00]
cmp rdx, 0xf
jbe 0x18002b061
mov rcx, qword [0x18030b9e8]
inc rdx
cmp rdx, 0x1000
jb 0x18002b05c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002b0bc
mov rcx, r8
call fcn.1800e8064
movups xmm0, xmmword [rbp + 0x2c0]
movups xmmword [0x18030b9e8], xmm0
movups xmm1, xmmword [rbp + 0x2d0]
movups xmmword [0x18030b9f8], xmm1
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x18002b0c8
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b0c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002b0c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1800e8064
lea rcx, [rbp + 0x310]
call fcn.18002e860
test rax, rax
jne 0x18002b0fd
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x300]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rcx, qword [rbp + 0x130]
test rcx, rcx
je 0x18002b140
mov rdx, qword [rbp + 0x140]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b13b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002b13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
lea rbx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov rax, qword [rbp + 0x298]
cmp rax, 0xf
jbe 0x18002b18c
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b187
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002b187
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
mov qword [rbp + 0x290], r13
mov qword [rbp + 0x298], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x280], 0
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x300], rbx
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2fc], edx
lea rcx, [rbp + 0x310]
call fcn.18002e3c0
lea rcx, [rbp + 0x318]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
cmp qword [0x18030b9d8], 5
jb 0x18002b2ad
cmp qword [0x18030b9f8], 2
jb 0x18002b2ad
mov ecx, 8
call fcn.1800e7cb0
lea rcx, [0x18030b890]
mov qword [rax], rcx
mov qword [rbp + 0x120], rax
lea rcx, [rbp + 0x268]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x180030140]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x260], rax
test rax, rax
je 0x18002b29a
cmp dword [rbp + 0x268], 0
je 0x18002b28e
movaps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18002b28e
mov al, 1
jmp 0x180028e14
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x268], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov byte [0x18030ba58], 1
mov al, 1
jmp 0x180028e14
call fcn.18000f0a0
nop
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x260]
call fcn.180022880
nop
call fcn.18000f0a0
int3