Function at 0x140026f20
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xb30
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1403d3080]
xor rax, rsp
mov qword [rbp + 0xab8], rax
xor r14d, r14d
lea rax, [0x140424450]
mov qword [rbp + 0x5b0], rax
mov rdx, qword [0x140424628]
mov rcx, qword [0x140423f30]
test rdx, rdx
jne 0x140026fca
test rcx, rcx
je 0x140026fb3
cmp dword [0x140423e9c], r14d
je 0x140026fb3
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 8]
lea r8, [rbp + 0x628]
mov rdx, qword [0x1404244d8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov rdx, qword [rbp + 0x628]
mov qword [0x140424628], rdx
test rdx, rdx
je 0x140027078
test rcx, rcx
je 0x140026ffb
cmp dword [0x140423e9c], r14d
je 0x140026ffb
add rdx, 8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x5e0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov rax, qword [rbp + 0x5e0]
mov qword [0x140424630], rax
test rax, rax
je 0x140027078
mov rdx, qword [0x140424638]
test rdx, rdx
jne 0x14002705f
test rcx, rcx
je 0x14002704c
cmp dword [0x140423e9c], r14d
je 0x14002704c
mov qword [rsp + 0x20], r14
lea r9d, [rdx + 8]
lea r8, [rbp + 0x5e8]
mov rdx, qword [0x1404244e0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov rdx, qword [rbp + 0x5e8]
mov qword [0x140424638], rdx
test rdx, rdx
je 0x140027078
cmp qword [0x140424640], r14
jne 0x1400270f3
test rdx, rdx
jne 0x1400270af
mov qword [0x140424640], r14
xor al, al
mov rcx, qword [rbp + 0xab8]
xor rcx, rsp
call fcn.140161860
lea r11, [rsp + 0xb30]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test rcx, rcx
je 0x1400270e0
cmp dword [0x140423e9c], r14d
je 0x1400270e0
add rdx, 0x18
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x760]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov rax, qword [rbp + 0x760]
mov qword [0x140424640], rax
test rax, rax
je 0x140027078
cmp qword [0x140424650], r14
jne 0x140027140
test rcx, rcx
je 0x140027129
cmp dword [0x140423e9c], r14d
je 0x140027129
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x4e0]
mov rdx, qword [0x1404244f0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x4e0]
mov qword [0x140424650], rax
test rax, rax
je 0x140027078
lea rcx, [0x140424660]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14002715d
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x1404246ac]
cmp eax, 0x7fffffff
jne 0x14002717e
dec eax
mov dword [0x1404246ac], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rbx, qword [0x140424700]
mov rdi, qword [0x140424708]
cmp rbx, rdi
je 0x1400271c0
lea rcx, [rbx + 0x48]
call fcn.140005190
lea rcx, [rbx + 0x18]
call fcn.140003530
add rbx, 0xa0
cmp rbx, rdi
jne 0x140027191
mov rbx, qword [0x140424700]
mov rdi, rbx
mov qword [0x140424708], rbx
cmp rdi, qword [0x140424710]
je 0x140027207
lea rcx, [0x140424700]
cmp rbx, rdi
jne 0x1400271dc
call fcn.140003450
jmp 0x140027207
sub rdi, rbx
movabs rax, 0x6666666666666667
imul rdi
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x60], rdx
lea rdx, [rbp + 0x60]
call fcn.14002d410
mov r15, r14
mov qword [rbp], r14
movabs r12, 0x100000001b3
mov r13, 0xffffffffffffffff
lea rbx, [0x140000000]
movabs rdi, 0xef387c60ec99fb52
mov rcx, qword [0x140423f30]
xorps xmm6, xmm6
nop word [rax + rax]
mov rdx, qword [0x140424640]
test rdx, rdx
jne 0x140027251
mov rax, r14
jmp 0x14002728c
test rcx, rcx
je 0x140027285
cmp dword [0x140423e9c], 0
je 0x140027285
add rdx, 0x108
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x5f0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov rax, qword [rbp + 0x5f0]
cmp r15, rax
jae 0x140027b11
mov rdx, qword [0x140424640]
test rdx, rdx
je 0x14002732b
test rcx, rcx
je 0x1400272d9
cmp dword [0x140423e9c], 0
je 0x1400272d9
add rdx, 0x100
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x5f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov r8, qword [rbp + 0x5f8]
test r8, r8
je 0x14002732b
test rcx, rcx
je 0x14002731e
cmp dword [0x140423e9c], 0
je 0x14002731e
mov eax, r15d
shl eax, 4
movsxd rdx, eax
add rdx, r8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x600]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov rsi, qword [rbp + 0x600]
mov qword [rbp + 0x20], rsi
jmp 0x140027332
mov rsi, r14
mov qword [rbp + 0x20], r14
lea rax, [rsi - 1]
movabs rdx, 0xccccccccccccb
cmp rax, rdx
ja 0x140027afc
mov rcx, rsi
call fcn.1400219d0
test eax, eax
je 0x140027365
and eax, 0x1fc000
cmp eax, 0x6c000
ja 0x140027af5
lea rcx, [rsi + 0x280]
call fcn.14001d450
comiss xmm6, xmm0
jae 0x140027af5
lea rcx, [rbp + 0x400]
call fcn.14001aa40
nop
mov qword [rbp + 0x400], rsi
mov dword [rbp + 0x408], r15d
cmp rsi, qword [0x140424630]
sete byte [rbp + 0x410]
mov rcx, rsi
call fcn.1400219d0
test eax, eax
jne 0x1400273b4
xor r9b, r9b
jmp 0x1400273c2
and eax, 0x1fc000
cmp eax, 0x8000
setne r9b
mov byte [rbp + 0x411], r9b
movzx r8d, sil
movabs rax, 0xcbf29ce484222325
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x21]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x22]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x23]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x24]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x25]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x26]
xor r8, rax
imul r8, r12
movzx eax, byte [rbp + 0x27]
xor r8, rax
imul r8, r12
and r8, qword [0x1404244c0]
mov rax, r8
add rax, rax
mov r10, qword [0x1404244a8]
mov rcx, qword [r10 + rax*8 + 8]
mov rdx, qword [0x140424498]
cmp rcx, rdx
je 0x140027466
add r8, r8
mov rax, qword [r10 + r8*8]
cmp rsi, qword [rcx + 0x10]
je 0x140027469
cmp rcx, rax
jne 0x140027b08
mov rcx, r14
mov rax, rdx
test rcx, rcx
cmovne rax, rcx
cmp rax, rdx
setne byte [rbp + 0x440]
mov rcx, qword [0x140423f30]
test r9b, r9b
jne 0x140027526
test rsi, rsi
je 0x14002751b
mov rdx, qword [0x140423e48]
add rdx, rsi
test rcx, rcx
je 0x1400274cd
cmp dword [0x140423e9c], 0
je 0x1400274cd
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x608]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov rdx, qword [rbp + 0x608]
test rdx, rdx
je 0x14002751b
add rdx, qword [0x140423e30]
test rcx, rcx
je 0x14002750d
cmp dword [0x140423e9c], 0
je 0x14002750d
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
mov eax, dword [rbp + 0x4d0]
mov dword [rbp + 0x40c], eax
jmp 0x14002752d
mov eax, r14d
mov dword [rbp + 0x40c], eax
jmp 0x14002752d
mov dword [rbp + 0x40c], r13d
mov rdx, qword [0x140423e20]
add rdx, rsi
test rcx, rcx
je 0x1400275d4
cmp dword [0x140423e9c], 0
je 0x140027568
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x610]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
test rcx, rcx
je 0x1400275d4
cmp dword [0x140423e9c], 0
je 0x1400275a0
mov rdx, qword [rbp + 0x610]
add rdx, 0x68
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x618]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140423f30]
test rcx, rcx
je 0x1400275d4
cmp dword [0x140423e9c], 0
je 0x1400275d4
mov rdx, qword [rbp + 0x618]
add rdx, 0x178
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x620]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x620]
mov qword [rbp + 0x438], rax
lea rcx, [rbp + 0x510]
call fcn.14001aa40
mov qword [rbp + 0x5a4], 0
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x510], rax
mov eax, dword [rbp + 0x408]
mov dword [rbp + 0x518], eax
mov eax, dword [rbp + 0x40c]
mov dword [rbp + 0x51c], eax
movzx eax, byte [rbp + 0x410]
mov byte [rbp + 0x520], al
movzx eax, byte [rbp + 0x411]
mov byte [rbp + 0x521], al
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x528]
call fcn.14000d710
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x548], rax
movzx eax, byte [rbp + 0x440]
mov byte [rbp + 0x550], al
lea rax, [rbp + 0x558]
mov qword [rbp + 0x150], rax
mov eax, dword [rbp + 0x448]
mov dword [rbp + 0x558], eax
mov rdx, qword [rbp + 0x450]
mov r8, rdx
mov rdx, qword [rdx]
lea rcx, [rbp + 0x560]
call fcn.14002dd60
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x558]
call fcn.14001b030
mov rdx, rax
lea rcx, [rbp + 0x558]
call fcn.14001ae80
mov qword [rbp + 0x150], r14
cmp qword [rbp + 0x538], 0
jne case.0x1400276e7.0
movzx eax, byte [0x1404245d0]
cmp eax, 9
ja case.0x1400276e7.3
mov ecx, dword [rbx + rax*4 + 0x28e60]
add rcx, rbx
jmp rcx
mov rcx, qword [0x1404245d8]
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
jmp 0x140027705
mov rax, qword [0x1404245d8]
cmp qword [rax + 8], 0
sete al
test al, al
jne case.0x1400276e7.0
cmp qword [0x1404245f0], 0
je case.0x1400276e7.0
movzx ecx, byte [rbp + 0x51c]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x51d]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x51e]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbp + 0x51f]
xor rcx, rax
imul rcx, r12
mov rdx, qword [0x140424610]
and rdx, rcx
mov rax, rdx
add rax, rax
mov r9, qword [0x1404245f8]
mov rcx, qword [r9 + rax*8 + 8]
mov r8, qword [0x1404245e8]
mov eax, dword [rbp + 0x51c]
cmp rcx, r8
je 0x1400277b0
add rdx, rdx
mov r10, qword [r9 + rdx*8]
cmp eax, dword [rcx + 0x10]
je 0x1400277b3
nop word [rax + rax]
cmp rcx, r10
je 0x1400277b0
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x1400277a0
jmp 0x1400277b3
mov rcx, r14
mov r9, r8
test rcx, rcx
cmovne r9, rcx
cmp r9, r8
je 0x140027831
cmp eax, 0xffffffff
je 0x140027831
add r9, 0x18
lea rax, [rbp + 0x528]
cmp rax, r9
je case.0x1400276e7.0
mov rdi, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x1400277e9
mov r9, qword [r9]
mov rax, qword [rbp + 0x540]
cmp rdi, rax
ja 0x1400278b5
mov rdx, r9
lea rbx, [rbp + 0x528]
cmp rax, 0xf
mov r8, rdi
mov qword [rbp + 0x538], rdi
cmova rbx, qword [rbp + 0x528]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
lea rbx, [0x140000000]
jmp 0x1400278c4
mov qword [rbp + 0x20], rdi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x70], rax
movabs rcx, 0x563cacefd6e0056c
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x78], rax
movabs rax, 0x8a551d0e9efc8827
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x780], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x788], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x780]
movdqa xmmword [rbp + 0x70], xmm0
lea rax, [rbp + 0x70]
mov rdi, r13
inc rdi
cmp byte [rax + rdi], 0
jne 0x140027893
mov rax, qword [rbp + 0x540]
cmp rdi, rax
ja 0x1400278b1
lea rdx, [rbp + 0x70]
jmp 0x1400277fc
lea r9, [rbp + 0x70]
mov rdx, rdi
lea rcx, [rbp + 0x528]
call fcn.14000f980
movabs rdi, 0xef387c60ec99fb52
test rsi, rsi
jne 0x1400278e5
movss dword [rbp + 0x40], xmm6
movaps xmm0, xmm6
unpcklps xmm0, xmm6
movsd qword [rbp + 0x38], xmm0
jmp 0x140027916
mov rcx, qword [0x140423f30]
test rcx, rcx
je 0x140027916
cmp dword [0x140423e9c], 0
je 0x140027916
lea rdx, [rsi + 0x90]
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp + 0x38]
movsd qword [rbp + 0x598], xmm0
mov eax, dword [rbp + 0x40]
mov dword [rbp + 0x5a0], eax
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x358]
call fcn.14001ab30
movsd xmm0, qword [rbp + 0x598]
movsd qword [rbp + 0x3e0], xmm0
mov eax, dword [rbp + 0x5a0]
mov dword [rbp + 0x3e8], eax
movsd xmm0, qword [rbp + 0x5a4]
movsd qword [rbp + 0x3ec], xmm0
mov r9d, 0x796e
lea r8, [rbp + 0x358]
lea rdx, [rbp + 0x288]
call fcn.1400296f0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x130], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x138], eax
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x230]
call fcn.14002ade0
movsd xmm1, qword [rax]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp + 0x5a4], xmm1
ucomiss xmm0, xmm6
jp 0x1400279ca
je 0x140027ac4
cmp byte [rbp + 0x520], 0
je 0x140027a2a
mov qword [0x140424718], rsi
mov dword [0x140424720], r15d
movsd xmm0, qword [rbp + 0x598]
movsd qword [0x14042472c], xmm0
mov eax, dword [rbp + 0x5a0]
mov dword [0x140424734], eax
movsd qword [rbp + 0x140], xmm0
mov dword [rbp + 0x148], eax
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x238]
call fcn.14002ade0
movsd xmm0, qword [rax]
movsd qword [0x140424724], xmm0
mov rbx, qword [0x140424708]
cmp rbx, qword [0x140424710]
je 0x140027a82
lea rdx, [rbp + 0x510]
mov rcx, rbx
call fcn.14001ab30
movsd xmm0, qword [rbp + 0x598]
movsd qword [rbx + 0x88], xmm0
mov eax, dword [rbp + 0x5a0]
mov dword [rbx + 0x90], eax
movsd xmm0, qword [rbp + 0x5a4]
movsd qword [rbx + 0x94], xmm0
add qword [0x140424708], 0xa0
jmp 0x140027a99
lea r8, [rbp + 0x510]
mov rdx, rbx
lea rcx, [0x140424700]
call fcn.14002e960
nop
jmp 0x140027abd
lea rbx, [0x140000000]
lea rcx, [rbp + 0x558]
call fcn.140005190
lea rcx, [rbp + 0x528]
call fcn.140003530
nop
lea rcx, [rbp + 0x448]
call fcn.140005190
lea rcx, [rbp + 0x418]
call fcn.140003530
mov rcx, qword [0x140423f30]
inc r15
mov qword [rbp], r15
jmp 0x140027240
mov rcx, qword [rcx + 8]
jmp 0x140027457
lea rcx, [0x140424660]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
cmp byte [0x140424620], 0
jne 0x140028e46
cmp qword [0x1404245a0], 2
jae 0x140028e46
cmp qword [0x140424560], 0
je 0x140027b51
cmp qword [0x140424580], 0
jne 0x140028361
mov dword [rbp + 0x4b0], 0x208
movabs rax, 0x8a011d489eb38874
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x5679acbdd6a1053b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x77df16fdc511c115
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x333b45a8b209680f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xacd4c5fe82d603dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x3e9246f6d0428d59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rdx, 0x25d3fad8f2fa107d
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rcx, 0x2757c251ec4e6cda
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rdi, 0x8a551d0e9efc8827
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
movabs rsi, 0x563cacefd6e0056c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
movabs r12, 0x77ab1694c552c149
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x850], rax
movabs r15, 0x335545cdb2736866
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x858], rax
movabs rax, 0xac92c5a2828e039b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
movabs rax, 0x3edf4693d0348d30
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x870], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x878], rax
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x840]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x860]
vmovdqa ymmword [rbp + 0x1c0], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140027d94
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140027d94
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x2fbeddd1
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140027d8f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140027d70
cmp edx, 0x1ffd212a
je 0x140027d99
test r9d, r9d
jne 0x140027d50
mov rax, qword [rax]
jmp 0x140027d20
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
lea rcx, [rbp + 0x3f8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x1a0]
mov rcx, 0xffffffff80000001
call rax
test eax, eax
jne 0x140028349
movabs rax, 0x8a211d7d9e9d886b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x5652ac9ad6b2054c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x77c816fbc51ec169
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x333a45a4b2076807
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xac92c5a2828e03f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rcx, 0x3edf4693d0348d30
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7f8], rax
movabs rax, 0xac92c5a2828e039b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7e0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x200]
vxorps xmm0, xmm0, xmmword [rbp + 0x800]
vmovdqa xmmword [rbp + 0x200], xmm0
lea rax, [rbp + 0x4b0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x8a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
mov rcx, qword [rbp + 0x3f8]
vzeroupper
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140028298
movabs r15, 0xe9347e52ff88e943
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs r12, 0x3e4fcd9db5bc6004
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x77ab6fe6b137ac26
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rcx, 0x335545cdb2736866
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
movabs rax, 0x77ab1694c552c149
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x830], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x838], rax
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x820]
vmovdqa ymmword [rbp + 0x160], ymm1
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x2b8]
vzeroupper
call fcn.14002c4f0
mov rdx, rax
lea rcx, [rbp + 0x2d8]
call fcn.140088b90
nop
lea rcx, [rbp + 0x160]
mov r8, r13
inc r8
cmp byte [rcx + r8], 0
jne 0x140028036
lea rdx, [rbp + 0x160]
mov rcx, rax
call fcn.140003590
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
mov qword [rbp + 0x5d0], r14
mov qword [rbp + 0x5d8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5d0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rbp + 0x2d8]
call fcn.140003530
lea rax, [rbp + 0x5c0]
cmp qword [rbp + 0x5d8], 0xf
cmova rax, qword [rbp + 0x5c0]
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0x5d0]
mov qword [rbp + 0x58], rax
call fcn.140161234
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
lea r8, [rbp + 0xb0]
mov edx, eax
lea rcx, [rbp + 0x248]
call fcn.140021030
nop
lea rcx, [rbp + 0x248]
call fcn.140021860
movzx ebx, al
lea rcx, [rbp + 0x248]
call fcn.14002cc70
test bl, bl
je 0x14002828c
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x2f8]
call fcn.14002c4f0
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.140088b90
mov rdx, rax
lea rcx, [0x140424550]
call fcn.14002c640
lea rcx, [rbp + 0x318]
call fcn.140003530
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x77ab6fe6b137ac26
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rcx, 0x335545cdb2736866
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
movabs rax, 0x77ab1694c552c149
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x890], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x898], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x880]
vmovdqa ymmword [rbp + 0x180], ymm1
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x338]
vzeroupper
call fcn.14002c4f0
mov rdx, rax
lea rcx, [rbp + 0x298]
call fcn.140088b90
nop
lea rcx, [rbp + 0x180]
mov r8, r13
inc r8
cmp byte [rcx + r8], 0
jne 0x140028222
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.140003590
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x268], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x278], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x268]
lea rcx, [0x140424570]
call fcn.14002c640
lea rcx, [rbp + 0x268]
call fcn.140003530
nop
lea rcx, [rbp + 0x298]
call fcn.140003530
nop
lea rcx, [rbp + 0x5c0]
call fcn.140003530
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140028324
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140028324
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0xfbd9d54c
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14002831f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140028300
cmp edx, 0xa8b03501
je 0x140028329
test r9d, r9d
jne 0x1400282e0
mov rax, qword [rax]
jmp 0x1400282b0
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov rcx, qword [rbp + 0x3f8]
call rax
cmp qword [0x140424580], 0
jne 0x140028361
cmp qword [0x1404245a0], 0
jne 0x140028d88
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x650]
call sub.VCRUNTIME140.dll_memset
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140424570]
lea rcx, [rbp + 0x650]
call fcn.14002c2d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], r14
mov qword [rbp + 0x508], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x4f0], 0
cmp qword [rbp + 0x6e0], 0
je 0x140028d23
xor eax, eax
movups xmmword [rbp + 0x4b8], xmm0
mov qword [rbp + 0x4c8], rax
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
mov rdx, qword [rbp + rcx + 0x698]
test rdx, rdx
sete cl
mov qword [rbp], r14
mov word [rbp + 8], 1
mov eax, dword [rbp + 0xba]
mov dword [rbp + 0xa], eax
movzx eax, word [rbp + 0xbe]
mov word [rbp + 0xe], ax
mov qword [rbp + 0x20], rdx
mov byte [rbp + 0x28], cl
mov byte [rbp + 0x29], 0
mov eax, dword [rbp + 0xba]
mov dword [rbp + 0x2a], eax
movzx eax, word [rbp + 0xbe]
mov word [rbp + 0x2e], ax
movdqu xmmword [rbp + 0x4b8], xmm0
mov qword [rbp + 0x4c8], r14
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0x30], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x50], xmm0
movaps xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm1
movzx esi, byte [rbp + 9]
mov rbx, qword [rbp]
movzx r12d, byte [rbp + 0x58]
mov rdi, qword [rbp + 0x50]
test rdx, rdx
jne 0x140028553
movzx r15d, byte [rbp + 8]
test r12b, r12b
jne 0x14002848f
test rdi, rdi
je 0x140028489
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
jne 0x14002848c
mov rdi, r14
mov r12b, 1
test rbx, rbx
jne 0x1400284e0
test rdi, rdi
jne 0x1400284e5
mov qword [rbp + 0x30], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], r14
mov rdx, qword [rbp + 0x4b8]
cmp rdx, qword [rbp + 0x4c0]
jne 0x14002857c
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
jmp 0x140028592
test rdi, rdi
jne 0x140028499
test r15b, r15b
jne 0x140028505
test rbx, rbx
je 0x140028502
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x140028502
movzx esi, al
jmp 0x140028505
mov rbx, r14
mov byte [rbp + 0x10], sil
mov rax, qword [rbp + 0x4c0]
cmp rax, qword [rbp + 0x4c8]
je 0x140028525
mov byte [rax], sil
inc qword [rbp + 0x4c0]
jmp 0x14002853c
lea r8, [rbp + 0x10]
mov rdx, qword [rbp + 0x4c0]
lea rcx, [rbp + 0x4b8]
call fcn.140016990
test rbx, rbx
je 0x140028571
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sbumpc_void____ptr64]
cmp eax, 0xffffffff
je 0x140028571
mov byte [rbp + 8], 0
test rbx, rbx
je 0x140028571
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x140028571
movzx esi, al
mov r15b, 1
jmp 0x140028471
mov rbx, r14
mov r15b, 1
jmp 0x140028471
mov r8, qword [rbp + 0x4c0]
sub r8, rdx
lea rcx, [rbp + 0x90]
call fcn.1400041a0
mov rdx, qword [rbp + 0x508]
cmp rdx, 0xf
jbe 0x1400285d6
inc rdx
mov rcx, qword [rbp + 0x4f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400285d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400285d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140161b04
movups xmm0, xmmword [rbp + 0x90]
movups xmmword [rbp + 0x4f0], xmm0
movups xmm1, xmmword [rbp + 0xa0]
movups xmmword [rbp + 0x500], xmm1
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
lea rcx, [rbp + 0x90]
call fcn.140003530
cmp qword [rbp + 0x500], 0
jbe 0x140028cab
movabs rax, 0xf8306e51ea8fe94b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x5650de9a8992601a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs r12, 0x8a551d0e9efc8827
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
movabs r15, 0x563cacefd6e0056c
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x790]
movdqa xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0xe0]
mov rdx, r13
nop word [rax + rax]
inc rdx
cmp byte [rax + rdx], 0
jne 0x1400286b0
lea rcx, [rbp + 0x4f0]
cmp qword [rbp + 0x508], 0xf
seta sil
mov rdi, qword [rbp + 0x4f0]
cmova rcx, rdi
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xe0]
mov rbx, qword [rbp + 0x500]
mov rdx, rbx
call fcn.14002dca0
cmp rax, 0xffffffffffffffff
je 0x140028cab
lea rcx, [rax + 0xf]
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], r14
mov qword [rbp + 0x4a8], r14
cmp rbx, rcx
jb 0x140028e4d
mov qword [rbp + 0x640], r13
sub rbx, rcx
mov qword [rbp + 0x228], rbx
mov r8, r13
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rbp + 0x4f0]
test sil, sil
cmovne rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0x490]
call fcn.1400041a0
nop
movabs rbx, 0xf8306e51ea8fe94b
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rdi, 0x5650de9a8992601a
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x7a0]
movdqa xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
mov rax, r13
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400287d0
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
cmova rcx, qword [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x80]
mov rdx, qword [rbp + 0x4a0]
call fcn.14002dca0
test rax, rax
je 0x14002899c
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7b8], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x7b0]
movdqa xmmword [rbp + 0xc0], xmm0
lea rax, [rbp + 0xc0]
mov rdx, r13
nop
inc rdx
cmp byte [rax + rdx], 0
jne 0x140028870
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
seta sil
mov rdi, qword [rbp + 0x490]
cmova rcx, rdi
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xc0]
mov rbx, qword [rbp + 0x4a0]
mov rdx, rbx
call fcn.14002dca0
lea rcx, [rax + 0xf]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], r14
cmp rbx, rcx
jb 0x140028e53
mov qword [rbp + 0x638], r13
sub rbx, rcx
mov qword [rbp + 0x240], rbx
mov r8, r13
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rbp + 0x490]
test sil, sil
cmovne rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0x110]
call fcn.1400041a0
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0xf
jbe 0x140028951
inc rdx
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002894c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028adb
call fcn.140161b04
movups xmm0, xmmword [rbp + 0x110]
movups xmmword [rbp + 0x490], xmm0
movups xmm1, xmmword [rbp + 0x120]
movups xmmword [rbp + 0x4a0], xmm1
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x110], 0
lea rcx, [rbp + 0x110]
call fcn.140003530
movabs rbx, 0xf8306e51ea8fe94b
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x563cacefd692601a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x7c0]
movdqa xmmword [rbp + 0xd0], xmm0
lea rax, [rbp + 0xd0]
mov rdx, r13
inc rdx
cmp byte [rax + rdx], 0
jne 0x140028a03
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
seta sil
mov rdi, qword [rbp + 0x490]
cmova rcx, rdi
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xd0]
mov rbx, qword [rbp + 0x4a0]
mov rdx, rbx
call fcn.14002dca0
lea rcx, [rax + 0xb]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], r14
cmp rbx, rcx
jb 0x140028e59
mov qword [rbp + 0x630], r13
sub rbx, rcx
mov qword [rbp + 0x220], rbx
mov r8, r13
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rbp + 0x490]
test sil, sil
cmovne rdx, rdi
add rdx, rcx
lea rcx, [rbp + 0xf0]
call fcn.1400041a0
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0xf
jbe 0x140028ae7
inc rdx
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028ae2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028ae2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140161b04
movups xmm0, xmmword [rbp + 0xf0]
movups xmmword [rbp + 0x490], xmm0
movups xmm1, xmmword [rbp + 0x100]
movups xmmword [rbp + 0x4a0], xmm1
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
lea rcx, [rbp + 0xf0]
call fcn.140003530
movabs rax, 0x8a551d0e9efc881d
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x30], r12
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x760], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x768], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x760]
movdqa xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x60]
nop dword [rax]
inc r13
cmp byte [rax + r13], 0
jne 0x140028b80
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
seta sil
cmova rcx, qword [rbp + 0x490]
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x60]
mov rbx, qword [rbp + 0x4a0]
mov rdx, rbx
call fcn.14002dca0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x760], xmm0
mov qword [rbp + 0x770], r14
mov qword [rbp + 0x778], r14
mov r8, rax
cmp rbx, rax
cmovb r8, rbx
lea rdx, [rbp + 0x490]
test sil, sil
cmovne rdx, qword [rbp + 0x490]
lea rcx, [rbp + 0x760]
call fcn.1400041a0
lea rdx, [rbp + 0x760]
lea rcx, [0x140424590]
call fcn.14002c640
lea rcx, [rbp + 0x760]
call fcn.140003530
lea rcx, [r15 + 1]
xorps xmm0, xmm0
movups xmmword [rbp + 0x760], xmm0
mov qword [rbp + 0x770], r14
mov qword [rbp + 0x778], r14
mov rax, qword [rbp + 0x4a0]
cmp rax, rcx
jb 0x140028e59
lea r8, [r15 + 5]
sub rax, rcx
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 0xf
cmova rdx, qword [rbp + 0x490]
add rdx, rcx
lea rcx, [rbp + 0x760]
call fcn.1400041a0
lea rdx, [rbp + 0x760]
lea rcx, [0x1404245b0]
call fcn.14002c640
lea rcx, [rbp + 0x760]
call fcn.140003530
nop
lea rcx, [rbp + 0x490]
call fcn.140003530
lea rcx, [rbp + 0x660]
call fcn.14002c920
test rax, rax
jne 0x140028cdf
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x650]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rcx, qword [rbp + 0x4b8]
test rcx, rcx
je 0x140028d23
mov rdx, qword [rbp + 0x4c8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028d1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028d1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140161b04
nop
lea rcx, [rbp + 0x4f0]
call fcn.140003530
nop
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x650], rax
mov rax, qword [rbp + 0x650]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x64c], edx
lea rcx, [rbp + 0x660]
call fcn.14002c260
lea rcx, [rbp + 0x668]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x700]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
cmp qword [0x1404245a0], 5
jb 0x140028e3f
cmp qword [0x1404245c0], 2
jb 0x140028e3f
mov ecx, 8
call fcn.140161880
mov rcx, qword [rbp + 0x5b0]
mov qword [rax], rcx
mov qword [rbp + 0x5b0], rax
lea rcx, [rbp + 0x4e8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14002ecb0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x4e0], rax
test rax, rax
je 0x140028e2c
cmp dword [rbp + 0x4e8], 0
je 0x140028e20
movaps xmm0, xmmword [rbp + 0x4e0]
movdqa xmmword [rbp + 0x5b0], xmm0
lea rcx, [rbp + 0x5b0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140028e20
mov al, 1
jmp 0x14002707a
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x4e8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov byte [0x140424620], 1
mov al, 1
jmp 0x14002707a
call fcn.14000ec10
nop
call fcn.14000ec10
int3
call fcn.14000ec10
int3