Function at 0x140033370
Capabilities:
Terminate process

Disassembly:
push rbx
push rbp
push r13
sub rsp, 0x30
mov r13d, edx
mov rbp, rcx
mov edx, 0x320
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rbx, rax
test rax, rax
jne 0x1400333b6
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.____out_of_memory__aborting_n
call fcn.140001010
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov qword [rsp + 0x50], rsi
xor ecx, ecx
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
mov qword [rax], rbp
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
or dword [rbx + 0x230], 1
lea r14, [rbp + 0xe2c]
mov qword [rbx + 0x228], rax
xor edi, edi
mov eax, dword [rbp + 0xf38]
mov dword [rbx + 0x248], eax
mov eax, dword [rbp + 0xf3c]
mov dword [rbx + 0x24c], eax
mov rax, qword [rbp + 0xf40]
mov qword [rbx + 0x250], rax
mov eax, dword [rbp + 0x1640]
mov dword [rbx + 0x2f0], eax
movups xmm0, xmmword [rbp + 0x1620]
movups xmmword [rbx + 0x2d8], xmm0
movsd xmm1, qword [rbp + 0x1630]
movsd qword [rbx + 0x2e8], xmm1
mov rax, qword [rbp + 0x1638]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rbx + 0x270]
mov ecx, dword [rbp + 0xce4]
shr ecx, 2
xor ecx, eax
and ecx, 1
xor ecx, eax
mov dword [rbx + 0x270], ecx
mov eax, dword [rbp + 0xce4]
shr eax, 2
xor eax, ecx
and eax, 2
xor eax, ecx
mov dword [rbx + 0x270], eax
mov ecx, dword [rbp + 0xce4]
shr ecx, 4
xor ecx, eax
and ecx, 4
xor ecx, eax
mov dword [rbx + 0x270], ecx
mov eax, dword [rbp + 0xf34]
shr eax, 1
xor eax, ecx
and eax, 8
xor eax, ecx
mov dword [rbx + 0x270], eax
mov ecx, dword [rbp + 0xf34]
shl ecx, 4
xor ecx, eax
and ecx, 0x10
xor ecx, eax
mov dword [rbx + 0x270], ecx
mov eax, dword [rbp + 0xf34]
shl eax, 4
xor eax, ecx
and eax, 0x20
xor eax, ecx
mov dword [rbx + 0x270], eax
mov ecx, dword [rbp + 0xf34]
shl ecx, 4
xor ecx, eax
and ecx, 0x40
xor ecx, eax
mov dword [rbx + 0x270], ecx
mov eax, dword [rbp + 0xf2c]
shl eax, 7
xor eax, ecx
and eax, 0x80
xor eax, ecx
mov dword [rbx + 0x270], eax
test r14, r14
jne 0x14003350f
mov esi, edi
jmp 0x14003351f
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [r14 + rsi], dil
jne 0x140033516
lea r12, [rsi + 1]
mov ecx, 1
test r12, r12
cmovne rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
test rax, rax
jne 0x14003355c
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.____out_of_memory__aborting_n
call fcn.140001010
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
test r14, r14
je 0x14003356f
mov r8, r12
mov rdx, r14
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
lea r14, [rbp + 0xf48]
mov byte [r15 + rsi], dil
mov qword [rbx + 0x318], r15
test r14, r14
jne 0x14003358b
mov rsi, rdi
jmp 0x14003359b
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [r14 + rsi], dil
jne 0x140033592
lea r12, [rsi + 1]
mov ecx, 1
test r12, r12
cmovne rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
test rax, rax
jne 0x1400335d8
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.____out_of_memory__aborting_n
call fcn.140001010
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
test r14, r14
je 0x1400335eb
mov r8, r12
mov rdx, r14
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rsi], dil
lea rsi, [rbp + 0xd2c]
mov qword [rbx + 0x268], r15
cmp dword [rbp + 0xba0], 1
ja 0x140033672
test rsi, rsi
je 0x14003361b
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rsi + rdi], 0
jne 0x140033612
lea r15, [rdi + 1]
mov ecx, 1
test r15, r15
cmovne rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
test rax, rax
jne 0x140033658
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.____out_of_memory__aborting_n
call fcn.140001010
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
test rsi, rsi
je 0x14003366b
mov r8, r15
mov rdx, rsi
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
jmp 0x140033680
mov edx, r13d
mov rcx, rsi
call fcn.140033250
mov r14, rax
mov qword [rbx + 8], r14
lea rcx, str.null
movups xmm0, xmmword [rbp + 0x128]
movups xmmword [rbx + 0x10], xmm0
movups xmm1, xmmword [rbp + 0x138]
movups xmmword [rbx + 0x20], xmm1
movups xmm0, xmmword [rbp + 0x148]
movups xmmword [rbx + 0x30], xmm0
movups xmm1, xmmword [rbp + 0x158]
movups xmmword [rbx + 0x40], xmm1
movups xmm0, xmmword [rbp + 0x298]
movups xmmword [rbx + 0x50], xmm0
movups xmm1, xmmword [rbp + 0x2a8]
movups xmmword [rbx + 0x60], xmm1
movups xmm0, xmmword [rbp + 0x2b8]
movups xmmword [rbx + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x2c8]
movups xmmword [rbx + 0x80], xmm1
movups xmm0, xmmword [rbp + 0x408]
movups xmmword [rbx + 0x90], xmm0
movups xmm1, xmmword [rbp + 0x418]
movups xmmword [rbx + 0xa0], xmm1
movups xmm0, xmmword [rbp + 0x428]
movups xmmword [rbx + 0xb0], xmm0
movups xmm1, xmmword [rbp + 0x438]
movups xmmword [rbx + 0xc0], xmm1
movups xmm0, xmmword [rbp + 0x578]
movups xmmword [rbx + 0xd0], xmm0
movups xmm1, xmmword [rbp + 0x588]
movups xmmword [rbx + 0xe0], xmm1
movups xmm0, xmmword [rbp + 0x598]
movups xmmword [rbx + 0xf0], xmm0
movups xmm1, xmmword [rbp + 0x5a8]
movups xmmword [rbx + 0x100], xmm1
movups xmm0, xmmword [rbp + 0x6e8]
movups xmmword [rbx + 0x110], xmm0
movups xmm1, xmmword [rbp + 0x6f8]
movups xmmword [rbx + 0x120], xmm1
movups xmm0, xmmword [rbp + 0x708]
movups xmmword [rbx + 0x130], xmm0
movups xmm1, xmmword [rbp + 0x718]
movups xmmword [rbx + 0x140], xmm1
movups xmm0, xmmword [rbp + 0x858]
movups xmmword [rbx + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x868]
movups xmmword [rbx + 0x160], xmm1
movups xmm0, xmmword [rbp + 0x878]
movups xmmword [rbx + 0x170], xmm0
movups xmm1, xmmword [rbp + 0x888]
movups xmmword [rbx + 0x180], xmm1
movups xmm0, xmmword [rbp + 0x9c8]
movups xmmword [rbx + 0x190], xmm0
movups xmm1, xmmword [rbp + 0x9d8]
movups xmmword [rbx + 0x1a0], xmm1
movups xmm0, xmmword [rbp + 0x9e8]
movups xmmword [rbx + 0x1b0], xmm0
movups xmm1, xmmword [rbp + 0x9f8]
movups xmmword [rbx + 0x1c0], xmm1
movups xmm0, xmmword [rbp + 0xb38]
movups xmmword [rbx + 0x1d0], xmm0
movups xmm1, xmmword [rbp + 0xb48]
movups xmmword [rbx + 0x1e0], xmm1
movups xmm0, xmmword [rbp + 0xb58]
movups xmmword [rbx + 0x1f0], xmm0
movups xmm1, xmmword [rbp + 0xb68]
movups xmmword [rbx + 0x200], xmm1
mov eax, dword [rbp + 0xd28]
mov dword [rbx + 0x220], eax
cmp eax, 0x80
ja 0x14003389a
je 0x140033891
sub eax, 2
je 0x140033888
sub eax, 2
je 0x14003387f
sub eax, 4
je 0x140033876
sub eax, 8
je 0x14003386d
cmp eax, 1
jne 0x1400338bd
lea rax, str.ndjson
jmp 0x1400338e4
lea rax, str.json
jmp 0x1400338e4
lea rax, [0x140050bb0]
jmp 0x1400338e4
lea rax, str.scan
jmp 0x1400338e4
lea rax, [0x140050b50]
jmp 0x1400338e4
lea rax, str.grepable
jmp 0x1400338e4
cmp eax, 0x100
je 0x1400338dd
cmp eax, 0x200
je 0x1400338d4
cmp eax, 0x400
je 0x1400338bd
cmp eax, 0x800
je 0x1400338cb
cmp eax, 0x1000
je 0x1400338c2
mov rax, rcx
jmp 0x1400338e4
lea rax, str.hostonly
jmp 0x1400338e4
lea rax, str.cert
jmp 0x1400338e4
lea rax, [0x140050b80]
jmp 0x1400338e4
lea rax, str.redis
mov qword [rbx + 0x218], rax
cmp byte [rsi], 0
je 0x140033930
cmp rax, rcx
je 0x140033930
mov rdx, rsi
mov rcx, rbx
call fcn.140033050
test rax, rax
jne 0x14003391a
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
mov qword [rbx + 0x210], rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbx + 0x240], rax
cmp dword [rbp + 0xf38], 0
jne 0x140033941
mov r8d, 0x7fffffff
jmp 0x140033983
mov r10d, dword [rbx + 0x24c]
mov r8, qword [rbx + 0x240]
mov r9d, dword [rbx + 0x248]
mov rax, r8
cmp r10d, 1
jbe 0x14003396f
sub rax, r9
cqo
idiv r9
sub r8, rdx
add r8, r10
jmp 0x140033983
cqo
mov rcx, r8
idiv r9
mov r8, r9
sub r8, rdx
add r8, r10
add r8, rcx
mov qword [rbx + 0x238], r8
mov rax, rbx
mov r14, qword [rsp + 0x28]
mov r12, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x20]
add rsp, 0x30
pop r13
pop rbp
pop rbx
ret