Function at 0x4249d5
Capabilities:
Accept command line arguments
Set current directory
Terminate process

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x920
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 8]
mov qword [rbp - 0x28], rax
push 0xe5e2a0
push 1
call fcn.00425894
cmp eax, 0
je 0x424a1b
mov ecx, 0x5265c00
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_Sleep]
add rsp, 0x20
push rax
lea rax, [rbp - 0x158]
push rax
call fcn.00401d25
pop rcx
push 0x124
lea rax, [rbp - 0x288]
push rax
push 0x104
lea rax, [rbp - 0x158]
push rax
call fcn.0040aecf
push rax
push 0x124
lea rax, [rbp - 0x288]
push rax
push 0x5c
call fcn.00489bc6
pop rcx
mov dword [rbp - 8], eax
mov eax, dword [rbp - 8]
inc eax
cmp eax, 0x124
jae 0x42574e
mov byte [rbp + rax - 0x288], 0
push 0x124
lea rax, [rbp - 0x288]
push rax
push 0x10
push str.CRASH_REPORT.TXTcrash_date___:__02d__02d__04d__02d:_02d:_02d_r_napplication__:
call fcn.0040adb1
test byte [0x009d6408], 0xff
je 0x424aef
push rax
push 0x124
lea rax, [rbp - 0x288]
push rax
push 3
push 0
push 0
call fcn.0040aa33
pop rcx
mov dword [rbp - 0x14], eax
cmp dword [rbp - 0x14], 0
jle 0x424ad0
push rax
push qword [rbp - 0x14]
push 0
push 2
call fcn.0040dc90
pop rcx
jmp 0x424aed
push rax
push 0x124
lea rax, [rbp - 0x288]
push rax
push 2
push 0
push 0
call fcn.0040dc4c
pop rcx
mov dword [rbp - 0x14], eax
jmp 0x424af6
mov dword [rbp - 0x14], 0xffffffff
push rax
lea rax, [rbp - 0x858]
push rax
call fcn.00415d11
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
push 0x3d
push 0x6fd4b0
mov dword [rbp - 0x8b0], 1
lea rax, [rbp - 0x855]
mov qword [rbp - 0x8b8], rax
mov dword [rbp - 0x8a0], 1
lea rax, [rbp - 0x856]
mov qword [rbp - 0x8a8], rax
mov dword [rbp - 0x890], 2
lea rax, [rbp - 0x858]
mov qword [rbp - 0x898], rax
mov dword [rbp - 0x880], 1
lea rax, [rbp - 0x854]
mov qword [rbp - 0x888], rax
mov dword [rbp - 0x870], 1
lea rax, [rbp - 0x853]
mov qword [rbp - 0x878], rax
mov dword [rbp - 0x860], 1
lea rax, [rbp - 0x852]
mov qword [rbp - 0x868], rax
push 6
lea rax, [rbp - 0x8b8]
push rax
call fcn.00402463
push rax
push qword [rbp - 0x14]
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
call fcn.00401d50
mov dword [rbp - 0x85c], eax
mov eax, pe_nt_image_headers64
sub eax, dword [rbp - 0x85c]
jb 0x425750
push qword [rbp - 0x85c]
lea rax, [rbp - 0x308]
push rax
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
push 0x104
lea rax, [rbp - 0x158]
push rax
call fcn.00401d50
mov dword [rbp - 0x85c], eax
mov eax, 0x104
sub eax, dword [rbp - 0x85c]
jb 0x425752
push qword [rbp - 0x85c]
lea rax, [rbp - 0x158]
push rax
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
push 0x11
push str._r_ncommand_line_:
call fcn.004257eb
pop rcx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_GetCommandLineA]
add rsp, 0x20
mov qword [rbp - 0x48], rax
push rax
push qword [rbp - 0x14]
push 0x104
push qword [rbp - 0x48]
call fcn.00401d50
push rax
push qword [rbp - 0x48]
call fcn.004257eb
pop rcx
mov qword [rbp - 0x38], 0x400088
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov eax, dword [rax]
mov dword [rbp - 0x10], eax
mov byte [rbp - 0x855], 1
mov byte [rbp - 0x856], 1
mov word [rbp - 0x858], 0x7b2
lea rax, [rbp - 0x858]
push rax
mov eax, dword [rbp - 0x10]
mov ebx, 0x15180
xor edx, edx
div ebx
push rax
call fcn.00489c1c
mov eax, dword [rbp - 0x10]
mov ebx, 0x15180
xor edx, edx
div ebx
mov dword [rbp - 0x10], edx
mov eax, dword [rbp - 0x10]
mov ebx, 0xe10
xor edx, edx
div ebx
mov byte [rbp - 0x854], al
movsx eax, byte [rbp - 0x854]
mov edx, 0xe10
mul edx
sub dword [rbp - 0x10], eax
mov eax, dword [rbp - 0x10]
mov ebx, 0x3c
xor edx, edx
div ebx
mov byte [rbp - 0x853], al
movsx eax, byte [rbp - 0x853]
mov edx, 0x3c
mul edx
sub dword [rbp - 0x10], eax
mov al, byte [rbp - 0x10]
mov byte [rbp - 0x852], al
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
push 0x32
push str._r_ncompile_date_:__02d__02d__04d__02d:_02d:_02d_r_n_r_n
mov dword [rbp - 0x8b0], 1
lea rax, [rbp - 0x855]
mov qword [rbp - 0x8b8], rax
mov dword [rbp - 0x8a0], 1
lea rax, [rbp - 0x856]
mov qword [rbp - 0x8a8], rax
mov dword [rbp - 0x890], 2
lea rax, [rbp - 0x858]
mov qword [rbp - 0x898], rax
mov dword [rbp - 0x880], 1
lea rax, [rbp - 0x854]
mov qword [rbp - 0x888], rax
mov dword [rbp - 0x870], 1
lea rax, [rbp - 0x853]
mov qword [rbp - 0x878], rax
mov dword [rbp - 0x860], 1
lea rax, [rbp - 0x852]
mov qword [rbp - 0x868], rax
push 6
lea rax, [rbp - 0x8b8]
push rax
call fcn.00402463
push rax
push qword [rbp - 0x14]
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
call fcn.00401d50
mov dword [rbp - 0x85c], eax
mov eax, pe_nt_image_headers64
sub eax, dword [rbp - 0x85c]
jb 0x425754
push qword [rbp - 0x85c]
lea rax, [rbp - 0x308]
push rax
call fcn.004257eb
pop rcx
mov dword [rbp - 8], 0
jmp 0x424e3d
mov eax, dword [rbp - 8]
cmp eax, 8
jae 0x425756
imul eax, eax, 0x18
mov rbx, qword [rbp - 0x20]
mov eax, dword [rax + 0x6f9c40]
cmp eax, dword [rbx]
je 0x424e43
inc dword [rbp - 8]
cmp dword [rbp - 8], 8
jl 0x424e1d
cmp dword [rbp - 8], 8
jge 0x424e97
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
push 2
push 0x6eabd7
mov eax, dword [rbp - 8]
cmp eax, 8
jae 0x425758
imul eax, eax, 0x18
mov ebx, dword [rax + 0x6f9c50]
mov dword [rbp - 0x860], ebx
mov rax, qword [rax + 0x6f9c48]
mov qword [rbp - 0x868], rax
push 1
lea rax, [rbp - 0x868]
push rax
call fcn.00402463
jmp 0x424ecf
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
push 7
push str.Ex__08x
mov dword [rbp - 0x860], 4
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x868], rax
push 1
lea rax, [rbp - 0x868]
push rax
call fcn.00402463
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
push 4
push 0x6f9106
call fcn.0040adb1
push pe_nt_image_headers64
lea rax, [rbp - 0x388]
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
call fcn.0040aecf
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x308]
push rax
call fcn.0040aecf
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 4
push str.RIP
call fcn.0040adb1
push rax
mov rax, qword [rbp - 0x20]
push qword [rax + 0x10]
lea rax, [rbp - 0x880]
push rax
lea rax, [rbp - 0x85c]
push rax
call fcn.00489dbd
pop rcx
mov rax, qword [rbp - 0x20]
push qword [rax + 0x10]
lea rax, [rbp - 0x880]
push rax
push qword [rbp - 0x85c]
lea rax, [rbp - 0x8c8]
push rax
call fcn.00489dfa
mov rax, qword [rbp - 0x20]
push qword [rax + 0x10]
lea rax, [rbp - 0x880]
push rax
push qword [rbp - 0x85c]
lea rax, [rbp - 0x918]
push rax
call fcn.00489ec8
movzx eax, byte [rbp - 0x880]
cmp eax, 0
setne al
test al, al
je 0x424fbc
cmp dword [rbp - 0x85c], 0
sete al
mov byte [rbp - 2], al
push pe_nt_image_headers64
lea rax, [rbp - 0x388]
push rax
push 0x40
lea rax, [rbp - 0x8c8]
push rax
call fcn.0040adb1
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 0x50
lea rax, [rbp - 0x918]
push rax
call fcn.0040adb1
push rax
push qword [rbp - 0x14]
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
call fcn.00401d50
mov dword [rbp - 0x85c], eax
mov eax, pe_nt_image_headers64
sub eax, dword [rbp - 0x85c]
jb 0x42575a
push qword [rbp - 0x85c]
lea rax, [rbp - 0x408]
push rax
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
mov rax, qword [rbp - 0x20]
cmp dword [rax], 0xc0000005
jne 0x425177
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 0xc
push str.__attempted
push 0
push rbp
call fcn.00402463
mov rax, qword [rbp - 0x20]
mov eax, dword [rax + 0x20]
cmp eax, 1
jge 0x42509a
cmp eax, 0
jne 0x4250df
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 4
push 0x6fabff
call fcn.0040adb1
jmp 0x4250fa
cmp eax, 8
jge 0x4250bf
cmp eax, 1
jne 0x4250df
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 5
push str.WRITE
call fcn.0040adb1
jmp 0x4250fa
cmp eax, 8
jne 0x4250df
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 7
push str.EXECUTE
call fcn.0040adb1
jmp 0x4250fa
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 6
push str.ACCESS_VIOLATIONOUT_OF_HEAP_MEMORY
call fcn.0040adb1
jmp 0x4250fa
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
push 0x10
push str._at_address__x_r_nCall_stack:_r_n
mov rax, qword [rbp - 0x20]
mov dword [rbp - 0x860], 8
lea rax, [rax + 0x28]
mov qword [rbp - 0x868], rax
push 1
lea rax, [rbp - 0x868]
push rax
call fcn.00489fc6
push rax
push qword [rbp - 0x14]
push pe_nt_image_headers64
lea rax, [rbp - 0x408]
push rax
call fcn.00401d50
mov dword [rbp - 0x85c], eax
mov eax, pe_nt_image_headers64
sub eax, dword [rbp - 0x85c]
jb 0x42575c
push qword [rbp - 0x85c]
lea rax, [rbp - 0x408]
push rax
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0xd
push 0x6fd590
call fcn.004257eb
pop rcx
push rax
push 0x30
lea rax, [rbp - 0x848]
push rax
mov rax, qword [rbp - 0x28]
push qword [rax + 0x98]
mov rcx, qword [rsp]
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 0x10]
call qword [sym.imp.KERNEL32.DLL_VirtualQuery]
add rsp, 0x20
mov byte [rbp - 1], 0
lea rcx, [rbp - 0x818]
mov edx, 0x410
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rbp - 0x30], rax
mov dword [rbp - 0xc], 0
test byte [rbp - 2], 0xff
je 0x42532d
mov rax, qword [rbp - 0x28]
mov rax, qword [rax + 0x98]
mov qword [rbp - 0x860], rax
mov rax, qword [rbp - 0x30]
cmp rax, qword [rbp - 0x848]
jl 0x425230
mov rax, qword [rbp - 0x848]
add rax, qword [rbp - 0x830]
cmp rax, qword [rbp - 0x30]
jg 0x425246
mov rax, qword [rbp - 0x848]
add rax, qword [rbp - 0x830]
sub rax, 0x10
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x860]
sub rax, 8
and rax, 0xfffffffffffffff0
or rax, 8
mov qword [rbp - 0x860], rax
push rax
push qword [rbp - 0x14]
push 0x1d
push str.________begin_guessed_ips____
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
jmp 0x425305
mov rax, qword [rbp - 0x860]
add rax, 8
mov rbx, qword [rbp - 0x848]
add rbx, qword [rbp - 0x830]
cmp rax, rbx
jg 0x425312
mov rax, qword [rbp - 0x860]
cmp rax, qword [rbp - 0x30]
jge 0x425312
mov rax, qword [rbp - 0x860]
mov qword [rbp - 0x868], rax
mov rax, qword [rbp - 0x868]
mov rax, qword [rax]
sub rax, 2
mov qword [rbp - 0x870], rax
push rax
push qword [rbp - 0x870]
call fcn.0048a038
pop rcx
test al, al
je 0x4252fa
push qword [rbp - 0x870]
push qword [rbp - 0x14]
lea rax, [rbp - 0xc]
push rax
lea rax, [rbp - 0x818]
push rax
call fcn.0048a071
add qword [rbp - 0x860], 0x10
inc dword [rbp - 0xc]
cmp dword [rbp - 0xc], 0x400
jl 0x425280
push rax
push qword [rbp - 0x14]
push 0x1b
push str.________end_guessed_ips____
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
jmp 0x425459
mov rax, qword [rbp - 0x30]
cmp rax, qword [rbp - 0x848]
jl 0x425466
mov rax, qword [rbp - 0x30]
add rax, 0x10
mov rbx, qword [rbp - 0x848]
add rbx, qword [rbp - 0x830]
cmp rax, rbx
jg 0x425466
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x860], rax
mov rax, qword [rbp - 0x860]
mov rax, qword [rax]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x860]
mov rax, qword [rax + 8]
sub rax, 2
mov qword [rbp - 0x38], rax
test byte [rbp - 1], 0xff
jne 0x42543e
push rax
push qword [rbp - 0x38]
lea rax, [rbp - 0x888]
push rax
lea rax, [rbp - 0x864]
push rax
call fcn.00489dbd
pop rcx
push qword [rbp - 0x38]
lea rax, [rbp - 0x888]
push rax
push qword [rbp - 0x864]
lea rax, [rbp - 0x8c8]
push rax
call fcn.00489dfa
push pe_nt_image_headers64
lea rax, [rbp - 0x388]
push rax
call fcn.00401d50
add eax, 3
push 0x40
lea rbx, [rbp - 0x8c8]
push rbx
mov dword [rsp + 0x10], eax
call fcn.00401d50
add eax, dword [rsp]
cmp eax, 0x80
jge 0x42543a
push pe_nt_image_headers64
lea rax, [rbp - 0x388]
push rax
push 2
push 0x6f281d
call fcn.0040adb1
push pe_nt_image_headers64
lea rax, [rbp - 0x388]
push rax
push 0x40
lea rax, [rbp - 0x8c8]
push rax
call fcn.0040adb1
jmp 0x42543e
mov byte [rbp - 1], 1
push qword [rbp - 0x38]
push qword [rbp - 0x14]
lea rax, [rbp - 0xc]
push rax
lea rax, [rbp - 0x818]
push rax
call fcn.0048a071
inc dword [rbp - 0xc]
cmp dword [rbp - 0xc], 0x400
jl 0x425332
push qword [rbp - 0x14]
lea rax, [rbp - 0x818]
push rax
call fcn.0048a29d
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0xc
push str.Registers:_r_nRAX
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd5ec
mov rax, qword [rbp - 0x28]
push qword [rax + 0x78]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd5f0
mov rax, qword [rbp - 0x28]
push qword [rax + 0xb8]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd5f4
mov rax, qword [rbp - 0x28]
push qword [rax + 0x90]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd5f8
mov rax, qword [rbp - 0x28]
push qword [rax + 0xc0]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd5fc
mov rax, qword [rbp - 0x28]
push qword [rax + 0x80]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd600
mov rax, qword [rbp - 0x28]
push qword [rax + 0xc8]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd604
mov rax, qword [rbp - 0x28]
push qword [rax + 0x88]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd608
mov rax, qword [rbp - 0x28]
push qword [rax + 0xd0]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd636
mov rax, qword [rbp - 0x28]
push qword [rax + 0xa8]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd63c
mov rax, qword [rbp - 0x28]
push qword [rax + 0xd8]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd640
mov rax, qword [rbp - 0x28]
push qword [rax + 0xb0]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd644
mov rax, qword [rbp - 0x28]
push qword [rax + 0xe0]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd648
mov rax, qword [rbp - 0x28]
push qword [rax + 0xa0]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd64c
mov rax, qword [rbp - 0x28]
push qword [rax + 0xe8]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd650
mov rax, qword [rbp - 0x28]
push qword [rax + 0x98]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
push 0x6fd654
mov rax, qword [rbp - 0x28]
push qword [rax + 0xf0]
call fcn.0048a44c
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.00489fad
pop rcx
test byte [0x009d6408], 0xff
je 0x42568b
push rax
push qword [rbp - 0x14]
call fcn.0048a549
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.0048a578
pop rcx
lea rcx, [rbp - 0x308]
mov edx, pe_nt_image_headers64
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov dword [rbp - 8], 0x64
mov eax, dword [rbp - 8]
mov dword [rbp - 0x85c], eax
mov eax, pe_nt_image_headers64
sub eax, dword [rbp - 0x85c]
jb 0x42575e
mov eax, dword [rbp - 0x85c]
mov bl, byte [0x006e26e0]
jmp 0x4256db
mov byte [rbp + rax - 0x308], bl
dec eax
jns 0x4256d4
push rax
push qword [rbp - 0x14]
push 0x64
lea rax, [rbp - 0x308]
push rax
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
push 2
push 0x6f3eef
call fcn.004257eb
pop rcx
push rax
push qword [rbp - 0x14]
call fcn.0040ab09
pop rcx
test byte [0x009d6409], 0xff
je 0x425737
push rax
push rax
lea rax, [rbp - 0x388]
push rax
push 0
mov ecx, dword [rsp]
mov rdx, qword [rsp + 8]
call qword [sym.imp.KERNEL32.DLL_FatalAppExitA]
add rsp, 0x20
jmp 0x42574a
sub rsp, 0x18
push 0xffffffffffffffff
mov ecx, dword [rsp]
call qword [sym.imp.KERNEL32.DLL_ExitProcess]
leave
ret 8
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5