Function at 0x140007920
Capabilities:
Check os version

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x158
movdqa xmmword [rsp + 0x140], xmm6
mov rsi, rcx
lea rdi, [rdx + 0xb0]
cmp byte [rdx + 0xd0], 2
jne 0x1400079e0
mov rbx, rdx
mov rax, qword [rdx + 0xd8]
mov qword [rsp + 0xf8], 0
lea rcx, [0x14004b660]
lea rdx, [0x14004b670]
lea r8, [rsp + 0xf8]
call rax
mov dword [rsp + 0xa8], eax
test eax, eax
js 0x1400079f6
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
jne 0x140007a75
movzx eax, byte [0x14005dbd0]
mov edi, 0x1f
mov ecx, 0x1f
call fcn.14001ee70
test rax, rax
je 0x140008c0a
mov rcx, rax
movups xmm0, xmmword [0x14004b68f]
movups xmmword [rax + 0xf], xmm0
movdqu xmm0, xmmword [str.Could_not_retrieve_ICLRMetaHostCould_not_find_any_runtimes]
movdqu xmmword [rax], xmm0
mov eax, 0x1f
jmp 0x140007b92
mov qword [rsi + 8], rdi
movabs rax, 0x8000000000000000
mov qword [rsi], rax
jmp 0x140008b7a
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xc0], rax
lea rax, [0x140025000]
mov qword [rsp + 0xc8], rax
lea rax, [0x140051ff0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
movabs rdx, 0x8000000000000000
cmp rax, rdx
jne 0x140007b8d
mov qword [rsp + 0x128], rdi
movabs rdi, 0x8000000000000000
mov qword [rsp + 0x130], rbx
movzx r15d, byte [rbx + 0xe0]
mov qword [rsp + 0x110], 0
mov rax, qword [rcx]
lea rdx, [rsp + 0x110]
mov qword [rsp + 0x118], rcx
call qword [rax + 0x28]
mov dword [rsp + 0x120], eax
test eax, eax
mov qword [rsp + 0x58], rsi
js 0x140007b20
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x140007ba2
mov eax, dword [0x14005dbd4]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
cmp byte [rax + 0x10], 0
je 0x140007c12
mov eax, dword [0x14005dbd4]
mov rdx, qword gs:[0x58]
mov rdx, qword [rdx + rax*8]
mov rax, qword [rdx + 0x18]
mov rdx, qword [rdx + 0x20]
jmp 0x140007c5d
lea rax, [rsp + 0x120]
mov qword [rsp + 0x60], rax
lea rax, [0x140025000]
mov qword [rsp + 0x68], rax
lea rax, str.Could_not_enumerate_installed_runtimes:_0
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0xc8]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
mov qword [rsp + 0xc0], 0
jmp 0x1400082a7
mov rdi, qword [rsp + 0x70]
mov qword [rsi], rax
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rdi
jmp 0x140008b7a
movzx eax, byte [0x14005dbd0]
mov ecx, 0x27
call fcn.14001ee70
test rax, rax
je 0x140008c19
movups xmm0, xmmword [0x14004b6dc]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [str.Could_not_enumerate_installed_runtimes.]
movdqu xmmword [rax], xmm0
movabs rcx, 0x2e73656d69746e75
mov qword [rax + 0x1f], rcx
mov qword [rsp + 0xc8], 0x27
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 0x27
mov qword [rsp + 0xc0], 0
jmp 0x1400082a7
xorps xmm0, xmm0
movaps xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x20]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
mov rax, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
mov ecx, dword [0x14005dbd4]
mov r8, qword gs:[0x58]
mov rcx, qword [r8 + rcx*8]
mov byte [rcx + 0x10], 1
mov qword [rcx + 0x20], rdx
mov rcx, qword [rsp + 0x110]
lea r8, [rax + 1]
mov r9d, dword [0x14005dbd4]
mov r10, qword gs:[0x58]
mov r9, qword [r10 + r9*8]
mov qword [r9 + 0x18], r8
movups xmm0, xmmword [0x14004b710]
movaps xmmword [rsp + 0x60], xmm0
movdqu xmm0, xmmword [0x14004b720]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x98], 0
mov dword [rsp + 0xb8], 0
mov rax, qword [rcx]
lea r8, [rsp + 0x98]
lea r9, [rsp + 0xb8]
mov edx, 1
call qword [rax + 0x18]
test eax, eax
js 0x140008277
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x140008277
pcmpeqd xmm6, xmm6
nop word cs:[rax + rax]
mov qword [rsp + 0xa0], 0
mov rax, qword [rcx]
lea rdx, [0x14004b6bc]
lea r8, [rsp + 0xa0]
call qword [rax]
test eax, eax
js 0x140008277
mov rbp, qword [rsp + 0xa0]
test rbp, rbp
je 0x140008277
mov dword [rsp + 0xbc], 0
mov rbx, qword [rbp]
mov rcx, rbp
xor edx, edx
lea r8, [rsp + 0xbc]
call qword [rbx + 0x18]
mov r12d, dword [rsp + 0xbc]
test r12, r12
je 0x140007d90
lea r14, [r12 + r12]
movzx eax, byte [0x14005dbd0]
mov rcx, r14
call fcn.14001ee70
test rax, rax
je 0x140008bfd
mov r13, rax
jmp 0x140007d96
mov r13d, 2
mov rcx, rbp
mov rdx, r13
lea r8, [rsp + 0xbc]
call qword [rbx + 0x18]
mov dword [rsp + 0x124], eax
test eax, eax
js 0x140007de0
mov rcx, r13
call fcn.14002a4d0
lea rcx, [rsp + 0x20]
mov rdx, r13
mov r8, rax
call fcn.1400074f0
mov rax, qword [rsp + 0x20]
cmp rax, rdi
jne 0x140007e53
mov bpl, 3
jmp 0x140007f10
lea rax, [rsp + 0x124]
mov qword [rsp + 0xa8], rax
lea rax, [0x140025000]
mov qword [rsp + 0xb0], rax
lea rax, str.Failed_while_running__GetVersionString_:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0xf8]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
test r12, r12
jne 0x140007f25
jmp 0x140007f37
mov r8, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp rcx, 4
je 0x140007eea
mov bpl, 3
cmp rcx, 0xa
jne 0x140007efc
mov rcx, qword [r8]
movabs rdx, 0x3730352e302e3276
xor rcx, rdx
movzx edx, word [r8 + 8]
xor rdx, 0x3732
or rdx, rcx
je 0x140008211
mov rcx, qword [r8]
bswap rcx
movabs r9, 0x76342e302e333033
mov rdx, r9
cmp rcx, r9
jne 0x140007ecc
movzx ecx, word [r8 + 8]
rol cx, 8
movzx ecx, cx
xor edx, edx
cmp ecx, 0x3139
je 0x140007ed9
mov edx, 0x3139
cmp rcx, rdx
mov edx, 0
sbb edx, edx
or edx, 1
test edx, edx
sete bpl
xor bpl, 3
test rax, rax
jne 0x140007f01
jmp 0x140007f10
cmp dword [r8], 0x302e3376
setne bpl
add bpl, bpl
or bpl, 1
test rax, rax
je 0x140007f10
mov rcx, qword [0x14005db60]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov byte [rsp + 0x100], bpl
mov qword [rsp + 0xf8], rdi
test r12, r12
je 0x140007f37
mov rcx, qword [0x14005db60]
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0xf8]
movzx r14d, byte [rsp + 0x100]
cmp rax, rdi
jne 0x1400087da
mov r12, rdi
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x138], rax
mov rbp, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
cmp qword [rsp + 0x70], 0
je 0x1400081fc
movzx edx, r14b
mov rax, rbp
movabs rcx, 0x6c7967656e657261
xor rax, rcx
mov rcx, r13
movabs r8, 0x646f72616e646f6d
xor rcx, r8
movabs r8, 0x736f6d6570736575
xor rbp, r8
movabs r8, 0x7465646279746573
xor r13, r8
xor r13, rdx
add rax, r13
rol r13, 0x10
xor r13, rax
add rbp, rcx
mov r8, rbp
rol r8, 0x20
add r8, r13
rol r13, 0x15
rol rcx, 0xd
xor rcx, rbp
add rax, rcx
rol rcx, 0x11
xor rcx, rax
rol rax, 0x20
xor rdx, r8
add rdx, rcx
rol rcx, 0xd
movabs r9, 0x800000000000000
xor r8, r9
xor rcx, rdx
rol rdx, 0x20
xor r8, r13
add rax, r8
rol r8, 0x10
xor r8, rax
add rdx, r8
rol r8, 0x15
add rax, rcx
rol rcx, 0x11
xor r8, rdx
xor rcx, rax
rol rax, 0x20
xor rdx, r9
add rdx, rcx
rol rcx, 0xd
xor rcx, rdx
rol rdx, 0x20
xor rax, 0xff
add rax, r8
rol r8, 0x10
xor r8, rax
add rdx, r8
rol r8, 0x15
add rax, rcx
rol rcx, 0x11
xor rcx, rax
rol rax, 0x20
xor r8, rdx
add rdx, rcx
rol rcx, 0xd
xor rcx, rdx
rol rdx, 0x20
add rax, r8
rol r8, 0x10
xor r8, rax
add rdx, r8
rol r8, 0x15
add rax, rcx
rol rcx, 0x11
xor rcx, rax
rol rax, 0x20
xor r8, rdx
add rdx, rcx
rol rcx, 0xd
add rax, r8
rol r8, 0x10
xor rcx, rdx
xor r8, rax
rol r8, 0x15
add rax, rcx
rol rcx, 0x11
xor rcx, r8
mov r9, rax
rol r9, 0x20
xor r9, rax
xor r9, rcx
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rcx, r9
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rdi, [rax - 0x10]
xor r11d, r11d
xor r13d, r13d
and r9, rdx
movdqu xmm1, xmmword [rax + r9]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb ebp, xmm2
nop
test bp, bp
je 0x140008140
tzcnt ebx, ebp
lea esi, [rbp - 1]
and esi, ebp
add rbx, r9
and rbx, rdx
mov rbp, rbx
shl rbp, 4
mov r10, rdi
sub r10, rbp
mov ebp, esi
cmp byte [r10], r14b
jne 0x140008110
jmp 0x140008190
cmp r13, 1
mov r13d, 1
je 0x140008166
pmovmskb r8d, xmm1
xor r13d, r13d
test r8d, r8d
setne r13b
tzcnt r8d, r8d
add r8, r9
and r8, rdx
pcmpeqb xmm1, xmm6
pmovmskb r10d, xmm1
test r10d, r10d
jne 0x140008221
add r9, r11
add r9, 0x10
add r11, 0x10
jmp 0x1400080f9
neg rbx
mov rdi, r12
shl rbx, 4
mov rcx, qword [rsp + 0x138]
mov qword [rax + rbx - 8], rcx
mov qword [rsp + 0x98], 0
mov dword [rsp + 0xb8], 0
mov rcx, qword [rsp + 0x110]
mov rax, qword [rcx]
mov edx, 1
lea r8, [rsp + 0x98]
lea r9, [rsp + 0xb8]
call qword [rax + 0x18]
test eax, eax
js 0x140008277
mov rcx, qword [rsp + 0x98]
test rcx, rcx
jne 0x140007d00
jmp 0x140008277
lea rcx, [rsp + 0x60]
mov rdx, rbp
mov r8, r13
call fcn.140035a40
jmp 0x140007f80
xor ebp, ebp
test rax, rax
jne 0x140007f01
jmp 0x140007f10
movzx r9d, byte [rax + r8]
test r9b, r9b
js 0x14000823e
movdqa xmm0, xmmword [rax]
pmovmskb r8d, xmm0
tzcnt r8d, r8d
movzx r9d, byte [rax + r8]
and r9b, 1
movzx r9d, r9b
sub qword [rsp + 0x70], r9
lea r9, [r8 - 0x10]
and r9, rdx
mov byte [rax + r8], cl
mov byte [rax + r9 + 0x10], cl
inc qword [rsp + 0x78]
mov rbx, r8
neg rbx
shl r8, 4
neg r8
mov byte [rax + r8 - 0x10], r14b
jmp 0x140008193
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
movdqa xmm2, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0xc0], xmm0
movdqa xmmword [rsp + 0xd0], xmm1
movdqa xmmword [rsp + 0xe0], xmm2
mov r14, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xc8]
test r14, r14
je 0x1400084e8
cmp qword [rsp + 0xd8], 0
je 0x140008507
mov rdx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
movabs rax, 0x6c7967656e657261
xor rax, rdx
movabs rcx, 0x646f72616e646f6d
xor rcx, r8
movabs r10, 0x736f6d6570736575
xor r8, r15
movabs r9, 0x7465646279746573
xor r9, r8
add rax, r9
rol r9, 0x10
xor r10, rdx
add r10, rcx
rol rcx, 0xd
xor rcx, r10
mov rdx, r10
rol rdx, 0x20
xor r9, rax
add rdx, r9
rol r9, 0x15
mov r8, rdx
add rax, rcx
rol rcx, 0x11
xor r8, r15
xor rcx, rax
rol rax, 0x20
movabs r10, 0x800000000000000
add r8, rcx
rol rcx, 0xd
xor rdx, r10
xor rcx, r8
rol r8, 0x20
xor rdx, r9
add rax, rdx
rol rdx, 0x10
xor rdx, rax
add r8, rdx
rol rdx, 0x15
add rax, rcx
rol rcx, 0x11
xor rdx, r8
xor rcx, rax
rol rax, 0x20
xor r8, r10
add r8, rcx
rol rcx, 0xd
xor rcx, r8
rol r8, 0x20
xor rax, 0xff
add rax, rdx
rol rdx, 0x10
xor rdx, rax
add r8, rdx
rol rdx, 0x15
add rax, rcx
rol rcx, 0x11
xor rcx, rax
rol rax, 0x20
xor rdx, r8
add r8, rcx
rol rcx, 0xd
xor rcx, r8
rol r8, 0x20
add rax, rdx
rol rdx, 0x10
xor rdx, rax
add r8, rdx
rol rdx, 0x15
add rax, rcx
rol rcx, 0x11
xor rcx, rax
rol rax, 0x20
xor rdx, r8
add r8, rcx
rol rcx, 0xd
add rax, rdx
rol rdx, 0x10
xor rdx, rax
rol rdx, 0x15
xor rcx, r8
add rax, rcx
rol rcx, 0x11
mov r8, rax
rol r8, 0x20
xor rcx, rdx
xor r8, rax
xor r8, rcx
mov rax, r8
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rax, [r14 - 0x10]
xor ecx, ecx
pcmpeqd xmm1, xmm1
and r8, r12
movdqu xmm2, xmmword [r14 + r8]
movdqa xmm3, xmm2
pcmpeqb xmm3, xmm0
pmovmskb r9d, xmm3
nop dword [rax]
test r9w, r9w
je 0x14000848f
tzcnt edx, r9d
lea r10d, [r9 - 1]
and r10d, r9d
add rdx, r8
and rdx, r12
mov r9, rdx
shl r9, 4
mov r11, rax
sub r11, r9
mov r9d, r10d
cmp byte [r11], r15b
jne 0x140008460
jmp 0x1400084ac
pcmpeqb xmm2, xmm1
pmovmskb edx, xmm2
test edx, edx
jne 0x140008ba7
add r8, rcx
add r8, 0x10
add rcx, 0x10
jmp 0x140008447
neg rdx
shl rdx, 4
lea rax, [r14 + rdx]
add rax, 0xfffffffffffffff8
mov r15, qword [rax]
test r12, r12
je 0x140008594
mov rax, r12
shl rax, 4
add r12, rax
cmp r12, 0xffffffffffffffdf
je 0x140008594
movq xmm6, r15
mov r13, rdi
jmp 0x14000856e
movdqa xmm6, xmmword [rsp + 0xd0]
mov r13, r12
movq r15, xmm6
cmp r12, rdi
je 0x140008594
jmp 0x1400085ed
movzx eax, byte [0x14005dbd0]
mov r13d, 0x1b
mov ecx, 0x1b
call fcn.14001ee70
test rax, rax
je 0x140008c28
mov r15, rax
movups xmm0, xmmword [0x14004b6aa]
movups xmmword [rax + 0xb], xmm0
movdqu xmm0, xmmword [0x14004b69f]
movdqu xmmword [rax], xmm0
movq xmm6, rax
shufpd xmm6, xmmword [0x1400384e0], 2
test r12, r12
je 0x1400085ed
mov rax, r12
shl rax, 4
add r12, rax
mov r13d, 0x1b
cmp r12, 0xffffffffffffffdf
je 0x1400085ed
sub r14, rax
add r14, 0xfffffffffffffff0
mov rcx, qword [0x14005db60]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
mov r12, r13
movq r15, xmm6
cmp r12, rdi
jne 0x1400085ed
mov qword [rsp + 0xf8], 0
mov rax, qword [r15]
lea rdx, [0x14004b808]
lea r8, [0x14004b818]
lea r12, [rsp + 0xf8]
mov rcx, r15
mov r9, r12
call qword [rax + 0x48]
mov dword [rsp + 0xa8], eax
test eax, eax
js 0x140008608
mov r14, qword [rsp + 0xf8]
test r14, r14
je 0x1400086b4
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x60], rdi
jmp 0x14000867d
pshufd xmm0, xmm6, 0xee
mov rax, qword [rsp + 0x58]
mov qword [rax], r13
mov qword [rax + 8], r15
movq qword [rax + 0x10], xmm0
jmp 0x140008b7a
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xc0], rax
lea rax, [0x140025000]
mov qword [rsp + 0xc8], rax
lea rax, [0x14004b870]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
mov rax, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
cmp rax, rdi
jne 0x1400087c0
mov dword [rsp + 0xa8], 0
mov rax, qword [r15]
lea rdx, [rsp + 0xa8]
mov rcx, r15
call qword [rax + 0x50]
mov dword [rsp + 0xf8], eax
test eax, eax
js 0x1400086fd
cmp dword [rsp + 0xa8], 0
setg al
jmp 0x14000876a
movzx eax, byte [0x14005dbd0]
mov edi, 0x22
mov ecx, 0x22
call fcn.14001ee70
test rax, rax
je 0x140008c37
mov r14, rax
movups xmm0, xmmword [0x14004b838]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [0x14004b828]
movdqu xmmword [rax], xmm0
mov word [rax + 0x20], 0x7473
mov eax, 0x22
jmp 0x1400087c5
mov qword [rsp + 0xc0], r12
lea rax, [0x140025000]
mov qword [rsp + 0xc8], rax
lea rax, str.Failed_while_running__IsLoadable_:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rsp + 0x68]
cmp rcx, rdi
jne 0x140008970
test al, al
je 0x1400088e1
mov dword [rsp + 0xa0], 0
mov dword [rsp + 0xa8], 0
mov rax, qword [r15]
lea rdx, [rsp + 0xa8]
lea r8, [rsp + 0xa0]
mov rcx, r15
call qword [rax + 0x70]
mov dword [rsp + 0xf8], eax
test eax, eax
js 0x140008858
cmp dword [rsp + 0xa8], 0
setg al
jmp 0x1400088c5
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x58]
mov qword [rcx], rax
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], rdi
jmp 0x140008b7a
mov rcx, qword [rsp + 0x101]
mov rdx, qword [rsp + 0x108]
mov qword [rsp + 0xd8], rdx
mov qword [rsp + 0xd1], rcx
mov qword [rsp + 0xc8], rax
mov byte [rsp + 0xd0], r14b
mov qword [rsp + 0xc0], 0
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400082a7
mov rax, rcx
shl rax, 4
add rcx, rax
cmp rcx, 0xffffffffffffffdf
je 0x1400082a7
mov r8, qword [rsp + 0x60]
sub r8, rax
add r8, 0xfffffffffffffff0
mov rcx, qword [0x14005db60]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400082a7
mov qword [rsp + 0xc0], r12
lea rax, [0x140025000]
mov qword [rsp + 0xc8], rax
lea rax, str.Failed_while_running__IsStarted_:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rsp + 0x68]
cmp rcx, rdi
jne 0x140008970
test al, al
jne 0x1400088e1
lea rcx, [rsp + 0x20]
mov rdx, r14
call fcn.140009130
cmp qword [rsp + 0x20], rdi
jne 0x140008ab6
mov qword [rsp + 0xa8], 0
mov rax, qword [r14]
lea rdx, [rsp + 0xa8]
mov rcx, r14
call qword [rax + 0x68]
mov dword [rsp + 0x98], eax
test eax, eax
js 0x140008993
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x1400089ff
mov qword [rsp + 0xf8], 0
mov rax, qword [rcx]
lea rdx, [0x14004b7c0]
lea r8, [rsp + 0xf8]
call qword [rax]
mov dword [rsp + 0xa0], eax
test eax, eax
mov rsi, qword [rsp + 0x58]
js 0x140008a52
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x140008ad3
mov rdx, qword [rsp + 0x118]
jmp 0x140008b40
mov rdx, qword [rsp + 0x69]
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x58]
mov qword [r9 + 0x10], r8
mov qword [r9 + 9], rdx
mov qword [r9], rcx
mov byte [r9 + 8], al
jmp 0x140008b7a
lea rax, [rsp + 0x98]
mov qword [rsp + 0xc0], rax
lea rax, [0x140025000]
mov qword [rsp + 0xc8], rax
lea rax, str.Could_not_retrieve_default_app_domain:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
mov rsi, qword [rsp + 0x58]
jmp 0x140008b29
movzx eax, byte [0x14005dbd0]
mov edi, 0x25
mov ecx, 0x25
call fcn.14001ee70
test rax, rax
mov rsi, qword [rsp + 0x58]
je 0x140008c46
movups xmm0, xmmword [0x14004b7a8]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [str.Could_not_retrieve_default_app_domain]
movdqu xmmword [rax], xmm0
movabs rcx, 0x6e69616d6f642070
mov qword [rax + 0x1d], rcx
mov ecx, 0x25
jmp 0x140008b9b
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xc0], rax
lea rax, [0x140025000]
mov qword [rsp + 0xc8], rax
lea rax, str.Could_not_retrieve_default_app_domain:
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x20]
call fcn.1400070d0
jmp 0x140008b29
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x58]
mov qword [rcx + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x20]
movdqu xmmword [rcx], xmm0
jmp 0x140008b7a
movzx eax, byte [0x14005dbd0]
mov ecx, 0x25
call fcn.14001ee70
test rax, rax
je 0x140008c46
movups xmm0, xmmword [0x14004b7a8]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [str.Could_not_retrieve_default_app_domain]
movdqu xmmword [rax], xmm0
movabs rcx, 0x6e69616d6f642070
mov qword [rax + 0x1d], rcx
mov qword [rsp + 0x60], 0x25
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0x25
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
cmp rcx, rdi
jne 0x140008b96
mov rcx, qword [rsp + 0x130]
mov qword [rcx + 0xb0], rdx
mov qword [rcx + 0xb8], r15
mov qword [rcx + 0xc0], r14
mov qword [rcx + 0xc8], rax
mov byte [rcx + 0xd0], 1
mov rax, qword [rsp + 0x128]
mov qword [rsi + 8], rax
mov qword [rsi], rdi
movaps xmm6, xmmword [rsp + 0x140]
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdi, qword [rsp + 0x70]
mov qword [rsi], rcx
mov qword [rsi + 8], rax
jmp 0x140007b99
movdqa xmm0, xmmword [r14]
pmovmskb ecx, xmm0
mov rax, r14
cmp ecx, 0xffff
jne 0x140008bdc
lea rdx, [r14 + 0x10]
mov rax, r14
movdqa xmm0, xmmword [rdx]
pmovmskb ecx, xmm0
add rax, 0xffffffffffffff00
add rdx, 0x10
cmp ecx, 0xffff
je 0x140008bc2
not ecx
tzcnt ecx, ecx
shl ecx, 4
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r15, qword [rax]
test r12, r12
jne 0x1400084c7
jmp 0x140008594
mov ecx, 2
mov rdx, r14
call fcn.140035a20
mov ecx, 1
mov edx, 0x1f
call fcn.140035a20
mov ecx, 1
mov edx, 0x27
call fcn.140035a20
mov ecx, 1
mov edx, 0x1b
call fcn.140035a20
mov ecx, 1
mov edx, 0x22
call fcn.140035a20
mov ecx, 1
mov edx, 0x25
call fcn.140035a20
int3