Function at 0x180037640
Capabilities:
Accept command line arguments
Resume thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x38]
sub rsp, 0x138
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov rax, qword [0x1800d1eb0]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov qword [rbp - 0x70], r9
mov rbx, r8
mov r13, rdx
mov qword [rsp + 0x70], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp + 0xb8]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp + 0xc8]
mov qword [rbp - 0x78], rax
mov r15, qword [rbp + 0xd0]
mov rax, qword [rbp + 0xd8]
mov qword [rbp - 0x68], rax
mov rax, qword [0x1800d7060]
mov qword [rbp - 0x40], rax
xor edi, edi
mov rax, qword [0x1800d6f10]
test rax, rax
jne 0x1800376fc
mov ecx, 0x2a8
call fcn.18007b11c
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1800376f2
mov rcx, rax
call fcn.180015880
jmp 0x1800376f5
mov rax, rdi
mov qword [0x1800d6f10], rax
mov rcx, rax
call fcn.180018070
test eax, eax
je 0x180037723
lea rdx, str.splwow64.exe
mov rcx, r13
call fcn.18002f130
test rax, rax
je 0x180037723
xor eax, eax
jmp 0x1800380c0
mov esi, dword [rbp + 0xb0]
mov eax, esi
shr eax, 2
and eax, 1
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x64], edi
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x68], edi
mov rax, qword [0x1800d6f10]
test rax, rax
jne 0x180037774
mov ecx, 0x2a8
call fcn.18007b11c
mov qword [rbp - 0x58], rax
test rax, rax
je 0x18003776a
mov rcx, rax
call fcn.180015880
jmp 0x18003776d
mov rax, rdi
mov qword [0x1800d6f10], rax
xor r14d, r14d
mov r12d, r14d
cmp dword [rax + 8], r14d
sete r12b
mov dword [rsp + 0x6c], r12d
lea rcx, [rax + 0x230]
mov r8, qword [rcx + 0x10]
cmp r8, r8
cmp qword [rcx + 0x18], 8
jb 0x18003779f
mov rcx, qword [rcx]
mov edi, socket
cmp r8, rdi
cmovb rdi, r8
lea rdx, str.supermap
or r9, 0xffffffffffffffff
test rdi, rdi
je 0x1800377e5
nop dword [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x1800377d7
add rcx, 2
add rdx, 2
dec rdi
jne 0x1800377c0
jmp 0x1800377e5
mov edi, 1
cmp word [rcx], ax
cmovb edi, r9d
jmp 0x1800377e8
mov edi, r14d
movsxd rax, edi
test edi, edi
jne 0x180037804
cmp r8, 0x14
jae 0x1800377fa
mov eax, r9d
jmp 0x180037804
mov eax, r14d
cmp r8, 0x14
setne al
test eax, eax
sete al
test al, al
je 0x1800378ef
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], r14
mov word [rbp - 0x30], r14w
xor eax, eax
mov rcx, r9
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.180004cc0
nop
cmp qword [rbp - 0x20], 7
jb 0x1800378ce
lea rdx, str.csc.exe
mov rcx, rbx
call fcn.18002f130
test rax, rax
je 0x1800378ce
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], r15
mov rdx, qword [rbp - 0x78]
mov qword [rsp + 0x48], rdx
mov rdx, qword [rbp - 0x60]
mov qword [rsp + 0x40], rdx
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], esi
mov eax, dword [rbp + 0xa8]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x70]
mov r8, rbx
mov rdx, r13
mov rcx, qword [rsp + 0x70]
call qword [0x1800d98a0]
mov edi, eax
cmp qword [rbp - 0x18], 8
jb 0x1800378c7
mov rcx, qword [rbp - 0x30]
call fcn.18007a7a4
mov eax, edi
jmp 0x1800380c0
cmp qword [rbp - 0x18], 8
jb 0x1800378de
mov rcx, qword [rbp - 0x30]
call fcn.18007a7a4
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], r14
mov word [rbp - 0x30], r14w
mov rax, qword [0x1800d7068]
test rax, rax
jne 0x180037920
lea ecx, [rax + 0x28]
call fcn.18007b11c
mov qword [rbp - 0x58], rax
test rax, rax
je 0x180037916
mov rcx, rax
call fcn.180041a50
jmp 0x180037919
mov rax, r14
mov qword [0x1800d7068], rax
mov rcx, rax
call fcn.180041ae0
test eax, eax
je 0x18003793a
mov rcx, r14
mov rdx, r14
mov esi, r12d
jmp 0x180037d31
test r13, r13
je 0x180037aff
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], r14
mov word [rbp - 0x30], r14w
xor eax, eax
or rsi, 0xffffffffffffffff
mov rcx, rsi
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, r13
lea rcx, [rbp - 0x30]
call fcn.180004cc0
nop
mov r8, qword [rbp - 0x20]
add r8, 0xfffffffffffffffc
mov r9, rsi
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x30]
call fcn.18000b940
mov rdi, rax
lea rax, [rbp - 0x30]
cmp rax, rdi
je 0x1800379fd
cmp qword [rbp - 0x18], 8
jb 0x1800379ab
mov rcx, qword [rbp - 0x30]
call fcn.18007a7a4
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], r14
mov word [rbp - 0x30], r14w
cmp qword [rdi + 0x18], 8
jae 0x1800379db
mov r8, qword [rdi + 0x10]
inc r8
add r8, r8
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.18007abc0
jmp 0x1800379e5
mov rax, qword [rdi]
mov qword [rbp - 0x30], rax
mov qword [rdi], r14
mov rax, qword [rdi + 0x10]
mov qword [rbp - 0x20], rax
mov rax, qword [rdi + 0x18]
mov qword [rbp - 0x18], rax
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], r14
cmp qword [rbp + 0x10], 8
jb 0x180037a0d
mov rcx, qword [rbp - 8]
call fcn.18007a7a4
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rcx, qword [rbp - 0x30]
mov edx, 4
mov rdi, qword [rbp - 0x20]
cmp rdi, rdx
cmovb rdx, rdi
lea rsi, str..bat
test rdx, rdx
je 0x180037a62
movzx eax, word [rsi]
cmp word [rcx], ax
jne 0x180037a4e
add rcx, 2
add rsi, 2
dec rdx
jne 0x180037a37
jmp 0x180037a62
mov edx, 1
cmp word [rcx], ax
mov rcx, 0xffffffffffffffff
cmovb edx, ecx
jmp 0x180037a69
mov edx, r14d
or rcx, 0xffffffffffffffff
movsxd rax, edx
test edx, edx
jne 0x180037a84
cmp rdi, 4
jae 0x180037a7a
mov eax, ecx
jmp 0x180037a84
mov eax, r14d
cmp rdi, 4
setne al
test eax, eax
sete al
test al, al
je 0x180037a9c
mov edi, 1
mov dword [rsp + 0x60], r14d
mov esi, r12d
jmp 0x180037afa
mov qword [rbp + 0x10], 7
mov qword [rbp + 8], r14
mov word [rbp - 8], r14w
xor eax, eax
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, r13
lea rcx, [rbp - 8]
call fcn.180004cc0
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x64]
lea rcx, [rbp - 8]
call fcn.180065a60
mov edi, eax
cmp qword [rbp + 0x10], 8
jb 0x180037aee
mov rcx, qword [rbp - 8]
call fcn.18007a7a4
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x60], eax
mov esi, dword [rsp + 0x64]
jmp 0x180037d10
test rbx, rbx
je 0x18003806b
mov dword [rbp - 0x58], r14d
lea rdx, [rbp - 0x58]
mov rcx, rbx
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rdx, qword [rax]
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], r14
mov word [rbp - 0x30], r14w
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rbp - 0x30]
call fcn.180004cc0
nop
mov edx, 0x2e
lea rcx, [rbp - 0x30]
call fcn.180039d70
mov rdi, rax
mov r9d, 4
xor r8d, r8d
lea rsi, str..bat
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.180013cd0
lea r12, str..exe
cmp edi, 0xffffffff
jne 0x180037b97
cmp eax, edi
jne 0x180037b97
lea r8d, [rdi + 5]
mov rdx, r12
lea rcx, [rbp - 0x30]
call fcn.180006db0
mov r8, qword [rbp - 0x20]
add r8, 0xfffffffffffffffc
mov r9d, 4
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x30]
call fcn.18000b940
nop
lea rcx, [rbp - 8]
mov r9, qword [rbp - 8]
mov r8, qword [rbp + 0x10]
cmp r8, 8
cmovae rcx, r9
mov edx, 4
mov rdi, qword [rbp + 8]
cmp rdi, rdx
cmovb rdx, rdi
test rdx, rdx
je 0x180037c0e
nop dword [rax]
movzx eax, word [r12]
cmp word [rcx], ax
jne 0x180037bf9
add rcx, 2
add r12, 2
dec rdx
jne 0x180037be0
jmp 0x180037c0e
mov edx, 1
cmp word [rcx], ax
mov r10, 0xffffffffffffffff
cmovb edx, r10d
jmp 0x180037c15
mov edx, r14d
or r10, 0xffffffffffffffff
movsxd rax, edx
test edx, edx
jne 0x180037c31
cmp rdi, 4
jae 0x180037c27
mov eax, r10d
jmp 0x180037c31
mov eax, r14d
cmp rdi, 4
setne al
test eax, eax
sete al
test al, al
je 0x180037c68
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x64]
lea rcx, [rbp - 0x30]
call fcn.180065a60
mov edi, eax
mov esi, dword [rsp + 0x64]
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x60], eax
mov r8, qword [rbp + 0x10]
mov r9, qword [rbp - 8]
jmp 0x180037cec
lea rcx, [rbp - 8]
cmp r8, 8
cmovae rcx, r9
mov edx, 4
cmp rdi, rdx
cmovb rdx, rdi
test rdx, rdx
je 0x180037caa
movzx eax, word [rsi]
cmp word [rcx], ax
jne 0x180037c9c
add rcx, 2
add rsi, 2
dec rdx
jne 0x180037c85
jmp 0x180037caa
mov edx, 1
cmp word [rcx], ax
cmovb edx, r10d
jmp 0x180037cad
mov edx, r14d
movsxd rax, edx
test edx, edx
jne 0x180037cc9
cmp rdi, 4
jae 0x180037cbf
mov eax, r10d
jmp 0x180037cc9
mov eax, r14d
cmp rdi, 4
setne al
test eax, eax
sete al
test al, al
je 0x180037ce6
mov edi, 1
mov dword [rsp + 0x60], r14d
mov r12d, dword [rsp + 0x6c]
mov esi, r12d
jmp 0x180037cf1
mov edi, r14d
mov esi, r14d
mov r12d, dword [rsp + 0x6c]
cmp r8, 8
jb 0x180037cff
mov rcx, r9
call fcn.18007a7a4
mov qword [rbp + 0x10], 7
mov qword [rbp + 8], r14
mov word [rbp - 8], r14w
cmp qword [rbp - 0x18], 8
jb 0x180037d20
mov rcx, qword [rbp - 0x30]
call fcn.18007a7a4
test edi, edi
je 0x180038065
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x68]
mov eax, dword [rbp + 0xb0]
cmp dword [rsp + 0x78], 0
jne 0x180037d41
or eax, 4
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], r15
mov rdx, qword [rbp - 0x78]
mov qword [rsp + 0x48], rdx
mov rdx, qword [rbp - 0x60]
mov qword [rsp + 0x40], rdx
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0xa8]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x70]
mov r8, rbx
mov rdx, r13
call qword [0x1800d98a0]
mov r14d, eax
mov dword [rbp - 0x80], eax
test eax, eax
je 0x180037e09
mov rdi, qword [0x1800d6f10]
test rdi, rdi
jne 0x180037dcd
mov ecx, 0x2a8
call fcn.18007b11c
mov qword [rsp + 0x70], rax
test rax, rax
je 0x180037dc4
mov rcx, rax
call fcn.180015880
mov rdi, rax
jmp 0x180037dc6
xor edi, edi
mov qword [0x1800d6f10], rdi
mov rcx, rdi
call fcn.180018710
test eax, eax
je 0x180037e10
lea rdx, str.Osgb2Collada.exe
mov rcx, rbx
call fcn.18002f130
test rax, rax
je 0x180037e09
mov rdx, rbx
lea rcx, [rbp - 8]
call fcn.1800048e0
mov rdx, qword [r15]
mov rcx, rax
call fcn.180041930
jmp 0x180037f74
mov rdi, qword [0x1800d6f10]
test rdi, rdi
jne 0x180037e3f
mov ecx, 0x2a8
call fcn.18007b11c
mov qword [rsp + 0x70], rax
test rax, rax
je 0x180037e36
mov rcx, rax
call fcn.180015880
mov rdi, rax
jmp 0x180037e38
xor edi, edi
mov qword [0x1800d6f10], rdi
mov rcx, rdi
call fcn.180017c70
test eax, eax
jne 0x180037f74
test r14d, r14d
je 0x180038044
cmp dword [rsp + 0x60], eax
jne 0x180037ed3
cmp r12d, 1
jne 0x180037e6e
test esi, esi
je 0x180037f74
jmp 0x180037ebe
test r12d, r12d
jne 0x180037ebe
cmp esi, 1
jne 0x180037ebe
test r13, r13
je 0x180037e99
mov rdx, r13
lea rcx, [rbp - 8]
call fcn.1800048e0
mov rdx, qword [r15]
mov rcx, rax
call fcn.180041810
jmp 0x180037f74
test rbx, rbx
je 0x180037f74
mov rdx, rbx
lea rcx, [rbp - 8]
call fcn.1800048e0
mov rdx, qword [r15]
mov rcx, rax
call fcn.180041810
jmp 0x180037f74
test r13, r13
je 0x180037ecb
mov rdx, r13
jmp 0x180037f5d
test rbx, rbx
jmp 0x180037f58
test r13, r13
je 0x180037f19
lea rdx, str.import71.exe
mov rcx, r13
call fcn.18002f130
test rax, rax
jne 0x180037f14
lea rdx, str.TiffDecoder.exe
mov rcx, r13
call fcn.18002f130
test rax, rax
jne 0x180037f14
lea rdx, str.lqgh.exe
mov rcx, r13
call fcn.18002f130
test rax, rax
je 0x180037f19
mov rdx, r13
jmp 0x180037f5d
test rbx, rbx
je 0x180037f74
lea rdx, str.import71.exe
mov rcx, rbx
call fcn.18002f130
test rax, rax
jne 0x180037f5a
lea rdx, str.TiffDecoder.exe
mov rcx, rbx
call fcn.18002f130
test rax, rax
jne 0x180037f5a
lea rdx, str.lqgh.exe
mov rcx, rbx
call fcn.18002f130
test rax, rax
je 0x180037f74
mov rdx, rbx
lea rcx, [rbp - 8]
call fcn.1800048e0
mov r8d, r12d
mov rdx, qword [r15]
mov rcx, rax
call fcn.1800416b0
test r14d, r14d
je 0x180038044
lea r8, str.F08889E5_231D_40AB_8C47_49FF812E49C2
mov edx, 1
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov rdi, rax
test rax, rax
je 0x180038044
mov ecx, 0x2800
call fcn.18007b11c
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov qword [rsp + 0x28], 0x2800
xor r14d, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8d, [r14 + 4]
mov rdx, rdi
call qword [rax + SysAllocStringByteLen]
mov rsi, rax
lea r12d, [r14 + 5]
mov r13d, dword [rsp + 0x6c]
nop dword [rax]
test rbx, rbx
je 0x180038034
mov rdx, rsi
mov rcx, rbx
call fcn.18002f130
test rax, rax
je 0x180038034
mov qword [rbp + 0x10], 7
mov qword [rbp + 8], r14
mov word [rbp - 8], r14w
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [rbp - 8]
call fcn.180004cc0
mov r8d, r13d
mov rdx, qword [r15]
lea rcx, [rbp - 8]
call fcn.1800416b0
add rsi, 0x400
dec r12
jne 0x180037fe0
mov r14d, dword [rbp - 0x80]
cmp dword [rsp + 0x78], 0
jne 0x180038060
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, r14d
jmp 0x1800380c0
mov esi, dword [rbp + 0xb0]
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], r15
mov rdx, qword [rbp - 0x78]
mov qword [rsp + 0x48], rdx
mov rdx, qword [rbp - 0x60]
mov qword [rsp + 0x40], rdx
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], esi
mov eax, dword [rbp + 0xa8]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x70]
mov r8, rbx
mov rdx, r13
mov rcx, qword [rsp + 0x70]
call qword [0x1800d98a0]
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.18007a7c0
add rsp, 0x138
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret