Function at 0x140001d90
Capabilities:
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x3b0]
sub rsp, 0x4b0
mov rax, qword [0x14001a008]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
call fcn.140001260
test eax, eax
je 0x140001dc4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movdqa xmm0, xmmword [0x140018e60]
lea rcx, [rsp + 0x69]
xor eax, eax
mov qword [rsp + 0x4c8], rdi
movdqu xmmword [rsp + 0x68], xmm0
xor r10d, r10d
mov dword [rsp + 0x38], 0x400
mov byte [rsp + 0x78], 0
lea rdi, [0x140000000]
nop dword [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 7
cmovne r8d, eax
test dl, dl
je 0x140001e1c
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140001e3f
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140001e62
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140001e86
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140001eaa
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140001ece
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140001ef2
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140001f16
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 6], dl
movzx edx, byte [rcx + 7]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140001f3a
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 7], dl
movzx edx, byte [rcx + 8]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140001f5e
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 8], dl
movzx edx, byte [rcx + 9]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140001f82
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 9], dl
movzx edx, byte [rcx + 0xa]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140001fa6
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 0xa], dl
movzx edx, byte [rcx + 0xb]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140001fca
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 0xb], dl
movzx edx, byte [rcx + 0xc]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140001fee
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 0xc], dl
movzx edx, byte [rcx + 0xd]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140002012
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 0xd], dl
movzx edx, byte [rcx + 0xe]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140002036
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 0xe], dl
movzx edx, byte [rcx + 0xf]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x14000205a
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
mov byte [rcx + 0xf], dl
lea eax, [r8 + 1]
add rcx, 0x11
add r10d, 0x11
cmp r10d, 0x11
jb 0x140001e00
xor eax, eax
mov dword [rsp + 0x40], 0x720573f
xor r10d, r10d
mov byte [rsp + 0x44], 0
lea rcx, [rsp + 0x41]
nop word [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 7
cmovne r8d, eax
test dl, dl
je 0x1400020ac
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x1400020cf
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x1400020f2
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140002116
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a090]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x14000213a
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a090]
mov byte [rcx + 3], dl
lea eax, [r8 + 1]
add rcx, 5
add r10d, 5
cmp r10d, 5
jb 0x140002090
xor r9d, r9d
mov dword [rsp + 0x58], 0x1c323607
xor r10d, r10d
mov dword [rsp + 0x5c], 0x183b3625
mov dword [rsp + 0x60], 0x2b102a30
lea rcx, [rsp + 0x59]
mov word [rsp + 0x64], 0x14
nop dword [rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp r9d, 2
cmovne r8d, r9d
test dl, dl
je 0x14000219d
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x1400021c0
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x1400021e3
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002207
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000222b
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x14000224f
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002273
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002297
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 6], dl
movzx edx, byte [rcx + 7]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x1400022bb
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 7], dl
movzx edx, byte [rcx + 8]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x1400022df
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 8], dl
movzx edx, byte [rcx + 9]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002303
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 9], dl
movzx edx, byte [rcx + 0xa]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002327
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0xa], dl
movzx edx, byte [rcx + 0xb]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000234b
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 0xb], dl
movzx edx, byte [rcx + 0xc]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x14000236f
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
mov byte [rcx + 0xc], dl
inc r9d
add rcx, 0xe
add r10d, 0xe
cmp r10d, 0xe
jb 0x140002180
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rsp + 0x30]
mov r9d, 0x20019
lea rdx, [rsp + 0x68]
mov qword [0x14001a6a8], rax
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000001
call rax
test eax, eax
jne 0x140002903
movdqa xmm0, xmmword [0x140018e70]
lea rcx, [rbp - 0x7f]
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x4c0], rbx
xor r10d, r10d
mov byte [rbp - 0x70], al
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 2
cmovne r8d, eax
test dl, dl
je 0x14000241c
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x14000243f
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002462
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002486
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x1400024aa
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x1400024ce
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x1400024f2
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002516
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 6], dl
movzx edx, byte [rcx + 7]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000253a
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 7], dl
movzx edx, byte [rcx + 8]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x14000255e
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 8], dl
movzx edx, byte [rcx + 9]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002582
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 9], dl
movzx edx, byte [rcx + 0xa]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x1400025a6
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0xa], dl
movzx edx, byte [rcx + 0xb]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x1400025ca
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 0xb], dl
movzx edx, byte [rcx + 0xc]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x1400025ee
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0xc], dl
movzx edx, byte [rcx + 0xd]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002612
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 0xd], dl
movzx edx, byte [rcx + 0xe]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002636
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0xe], dl
movzx edx, byte [rcx + 0xf]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000265a
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
mov byte [rcx + 0xf], dl
lea eax, [r8 + 1]
add rcx, 0x11
add r10d, 0x11
cmp r10d, 0x11
jb 0x140002400
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rsp + 0x38]
xor r8d, r8d
lea r9, [rsp + 0x3c]
mov qword [0x14001a6b0], rax
mov qword [rsp + 0x28], rcx
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x30]
call rax
xor r9d, r9d
mov dword [rsp + 0x48], 0x10323607
xor r10d, r10d
mov dword [rsp + 0x4c], 0x36263c39
mov ebx, eax
mov dword [rsp + 0x50], 0x2c361e
lea rcx, [rsp + 0x49]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp r9d, 2
cmovne r8d, r9d
test dl, dl
je 0x1400026fd
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002720
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002743
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002767
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000278b
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x1400027af
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x1400027d3
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x1400027f7
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 6], dl
movzx edx, byte [rcx + 7]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000281b
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 7], dl
movzx edx, byte [rcx + 8]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x14000283f
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
xor r8d, r8d
mov byte [rcx + 8], dl
movzx edx, byte [rcx + 9]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002863
movsxd rax, r8d
xor dl, byte [rax + rdi + 0x1a060]
xor r9d, r9d
mov byte [rcx + 9], dl
movzx edx, byte [rcx + 0xa]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002887
movsxd rax, r9d
xor dl, byte [rax + rdi + 0x1a060]
mov byte [rcx + 0xa], dl
inc r9d
add rcx, 0xc
add r10d, 0xc
cmp r10d, 0xc
jb 0x1400026e0
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test ebx, ebx
mov rbx, qword [rsp + 0x4c0]
mov qword [0x14001a6a0], rax
jne 0x1400028fc
cmp dword [rsp + 0x3c], 1
jne 0x1400028fc
mov rcx, qword [rsp + 0x30]
call rax
lea rdx, str.public
lea rcx, [rbp - 0x60]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140002903
lea rcx, [rbp - 0x60]
call fcn.140001650
jmp 0x140002903
mov rcx, qword [rsp + 0x30]
call rax
mov rdi, qword [rsp + 0x4c8]
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.140003690
add rsp, 0x4b0
pop rbp
ret