Function at 0x428ba0
Capabilities:
Accept command line arguments
Get system information on windows
Query environment variable

Disassembly:
push r15
mov eax, 0x1268
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.0067cdd0
sub rsp, rax
xor edx, edx
mov qword [0x008d9348], rcx
mov rcx, qword [0x008269a0]
mov ebp, r9d
call fcn.0041d890
mov eax, 0x3436
mov rcx, qword [0x00827c90]
mov r8d, 0x1a
lea rdx, str._nSnappy_Driver_Installer__
mov word [rsp + 0x30], ax
mov byte [rsp + 0x32], 0
call fcn.007cc790
lea rdx, [rsp + 0x30]
mov r8, rdx
mov ecx, dword [r8]
add r8, 4
lea eax, [rcx - 0x1010101]
not ecx
and eax, ecx
and eax, 0x80808080
je 0x428c01
mov ecx, eax
shr ecx, 0x10
test eax, 0x8080
cmove eax, ecx
lea rcx, [r8 + 2]
mov edi, eax
cmove r8, rcx
mov rcx, qword [0x00827c90]
add dil, al
sbb r8, 3
sub r8, rdx
call fcn.007cc790
mov rcx, qword [0x00827c90]
mov r8d, 5
lea rdx, str.bit__n
call fcn.007cc790
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [rsp + 0x60]
mov rax, qword [0x00828d10]
mov dword [rax], edx
call fcn.00403f90
call fcn.00438e00
test al, al
jne 0x429060
mov ecx, 0x10
call fcn.007da0a0
mov rdi, qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rsi, rax
lea rax, [0x00842100]
mov qword [rsi], rax
call rdi
lea rbx, [rsp + 0x70]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, dword [rsp + 0x70]
cmp eax, edx
setne byte [rsi + 8]
je 0x4290c0
mov ecx, 0x13
mov qword [0x008d9378], rsi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x428cf0
mov dword [0x008d92c0], 1
call fcn.0041e620
lea rcx, str.backtrace.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
mov r12, rax
je 0x429160
call fcn.00402580
mov rsi, qword [sym.imp.KERNEL32.dll_GetCommandLineW]
call rsi
lea rcx, [0x008bd200]
mov rdx, rax
call fcn.0043dd30
test al, al
je 0x4290e0
call rsi
lea rcx, [0x008bd200]
mov r8d, 1
mov rdx, rax
call fcn.0043c750
call fcn.004025a0
cmp dword [0x008d9204], 2
je 0x429113
mov rcx, qword [0x008d9378]
test byte [0x008d9202], 0x20
mov rax, qword [rcx]
jne 0x4290d2
call qword [rax + 0x18]
lea rdx, [0x008cd200]
mov r8d, 0x1000
lea rcx, [0x008c1200]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov rcx, qword [0x00826910]
lea rdx, [0x008cd200]
call fcn.0041db90
lea rcx, [0x008bd200]
call fcn.0043d860
lea rcx, [0x008c3200]
call fcn.0043f300
lea rcx, [0x008c9200]
call fcn.0043f300
lea rcx, [0x008c5200]
call fcn.0043f300
mov r8d, 0xcb
mov edx, 0x198
mov rcx, qword [0x00828c60]
call fcn.00443b60
mov r8d, 0xca
mov edx, 0x32c
mov r14, qword [0x00828d70]
mov rcx, qword [0x00828d60]
mov qword [r14], rax
call fcn.00443a40
mov rsi, qword [0x00828d80]
mov rcx, rbx
mov qword [rsi], rax
call fcn.00437a00
lea rcx, [rbx + 0x8f8]
call fcn.00437a00
movsxd rax, dword [0x007e36e8]
lea rcx, [0x008d9380]
imul rax, rax, 0x8f8
mov rdx, qword [rsp + rax + 0x960]
call fcn.00432280
movsxd rax, dword [0x007e36e8]
lea rcx, [0x008d93a8]
imul rax, rax, 0x8f8
mov rdx, qword [rsp + rax + 0x960]
call fcn.00432280
xor ecx, ecx
call fcn.0043e3e0
movsxd rcx, dword [0x007e36e8]
mov qword [0x008d9350], rax
imul rcx, rcx, 0x8f8
add rcx, rbx
call fcn.004377b0
mov rax, qword [0x00828c10]
mov rcx, qword [0x008d9350]
or dword [rax], 0xf
mov rax, qword [rcx]
call qword [rax + 0x20]
call fcn.0043e440
lea rdx, [fcn.00438770]
mov rsi, rax
mov rax, qword [rax]
mov r8, rbx
mov rcx, rsi
call qword [rax + 0x10]
call fcn.004447e0
mov r15, qword [0x008269c0]
lea r8, [0x0041f420]
mov edx, 1
mov dword [0x008d92f0], 1
lea rcx, [0x008c3200]
mov qword [r15], rax
call fcn.0043e470
lea r8, [fcn.004417d0]
xor edx, edx
mov r13, rax
lea rcx, [0x007fe54e]
call fcn.0043e470
xor r8d, r8d
xor edx, edx
mov r12, rax
lea rcx, [0x007fdb40]
call fcn.004417d0
lea rcx, [0x008d9240]
mov edx, ebp
call fcn.00424690
cmp qword [0x008d9290], 0
je 0x428f42
mov dword [0x008d9358], 1
mov rcx, qword [0x008d9350]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 8]
mov rcx, qword [0x008d9350]
test rcx, rcx
je 0x428f73
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [r15]
test rcx, rcx
je 0x428f81
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [0x008bd200]
call fcn.0043d490
mov rcx, qword [r14]
test rcx, rcx
je 0x428f9b
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [0x00828d80]
mov rcx, qword [rax]
test rcx, rcx
je 0x428fb0
mov rax, qword [rcx]
call qword [rax + 8]
test r13, r13
je 0x428fd5
mov rax, qword [r13]
lea rdx, [0x006fcee0]
mov rcx, r13
mov rax, qword [rax + 8]
cmp rax, rdx
jne 0x429141
call fcn.007da050
test r12, r12
je 0x428ffa
mov rax, qword [r12]
lea rdx, [0x006fcee0]
mov rcx, r12
mov rax, qword [rax + 8]
cmp rax, rdx
jne 0x429150
call fcn.007da050
call rdi
mov edx, 4
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x008269a0]
call fcn.0041e0b0
mov rcx, qword [0x00826910]
call fcn.0041daa0
mov rcx, qword [0x008d9378]
test rcx, rcx
je 0x429034
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [0x00828d20]
lea rcx, [rbx + 0x8f8]
mov eax, dword [rax]
mov dword [rsp + 0x2c], eax
call fcn.00437450
mov rcx, rbx
call fcn.00437450
mov eax, dword [rsp + 0x2c]
jmp 0x4290ab
lea rbx, [rsp + 0x70]
mov rcx, rbx
call fcn.00438dc0
mov rcx, rbx
call fcn.0043bcb0
test al, al
je 0x4290a1
xor ecx, ecx
call fcn.0043e3e0
mov rcx, rbx
mov qword [0x008d9350], rax
call fcn.00439610
mov rcx, qword [0x008d9350]
test rcx, rcx
je 0x4290a1
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, rbx
call fcn.00438bb0
xor eax, eax
add rsp, 0x1268
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
call rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x428cd0
call qword [rax + 0x10]
jmp 0x428d76
lea rdx, [0x007fe510]
lea rcx, [0x008bd200]
call fcn.0043dce0
test al, al
jne 0x428d33
lea rdx, str.toolsSDI_settings.cfg
lea rcx, [0x008bd200]
call fcn.0043dce0
jmp 0x428d33
test r12, r12
je 0x429121
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [0x008d9378]
test rcx, rcx
je 0x429133
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [0x00828d20]
mov eax, dword [rax]
jmp 0x4290ab
call rax
jmp 0x428fd5
call rax
jmp 0x428ffa
lea rdx, [0x0041e640]
mov ecx, 0xb
call sub.msvcrt.dll_signal
jmp 0x428d0e
sub rsp, 0x28
call fcn.0067ba20
mov rax, qword [0x00828950]
xor edx, edx
mov r9d, dword [rax]
mov rax, qword [0x00828940]
mov r8, qword [rax]
mov rax, qword [0x00828930]
mov rcx, qword [rax]
add rsp, 0x28
jmp 0x428ba0