Function at 0x1400049d0
Capabilities:
Run powershell expression

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x7c8
movaps xmmword [rsp + 0x7b0], xmm6
mov rcx, qword [rcx]
mov rax, qword [rcx]
and qword [rcx], 0
test rax, rax
je 0x14000708b
mov rax, qword [rax]
mov qword [rsp + 0x518], rax
mov ecx, 0x1ae4
xor edx, edx
call fcn.140045e00
mov r14, rax
mov rdi, rdx
lea rdx, str._nReg_Hunter_n____Author:_Brian_Kellogg_n____License:_MIT_n____Many_thanks:__Hexacorn_and__SBousseaden_n____Disclaimer:__n________This_tool_comes_with_no_warranty_or_support.__n________If_anyone_chooses_to_use_it__you_accept_all_responsibility_and_liability._n_nUsage:_n____reg_hunter___help_n____reg_hunter__options__n____reg_hunter___explicit__f__n____ip__ip____port__port___n____reg_hunter___all___bcefimnorsuwyz_____ip__ip____port__port______limit__n____reg_hunter___all___bcefimnorsuwyz_____outfile__file______limit__n____reg_hunter__a___regex__regex____path___name___value_n____reg_hunter__a__y____start__start_time____end__end_time___n_nOptions:_n____Registry_context__one_required_:_n_________a____all___________________Examine_all_the_registry__HKLM_and_HKU_n_________x____explicit______________Examine_only_more_often_forensically_interesting_keys_and_values_n________________________________________This_option_will_always_report_out_all__n________________________________________value_names_and_values_unless_values_are_empty_null_n_________k____key__path_____________Only_examine_a_specified_reg_path.__default:_NONE__n________________________________________All_sub_keys_will_be_examined_as_well._n________________________________________Searches_both_HKLM_and_HKU_hives_n________________________________________format:_SOFTWAREMicrosoftWindowsCurrentVersion_n_n____Hunts:_n_________b____binary________________Find_possible_MZ_headers_in_REG_BINARY_values_n________________________________________and_possible_Base64_encoded_MZ_headers___e.g._TVq_n________________________________________Tag:_MzHeader_n_________c____shell_________________Find_command_shells__cmd.exe__powershell.exe__...__n________________________________________Tag:_Shell_n_________e____encoding______________Find_possibly_encoded_values_n________________________________________Tag:_Encoding_n_________f____file__________________Find_files_referenced_in_registry_values__n________________________________________and_collect_lnk_file_metadata._If_a_lnk_file_is_found___n________________________________________metadata_on_both_the_lnk_and_file_it_points_to_will_be__n________________________________________reported._n________________________________________Tag:_File_n_________g____link__________________Hunt_for_registry_symbolic_links_n________________________________________WORK_IN_PROGRESS_n_________i____ip____________________Search_for_IPv4_addresses_n________________________________________Tag:_IPv4_n_________l____rightleft_____________Hunt_for_RightToLeft_override_n________________________________________Tag:_RightToLeft_n_________m____email_________________Find_email_addresses_n________________________________________Tag:_Email_n_________n____null__________________Hunt_for_null_prefixed_value_names_n________________________________________Tag:_NullPrefixedName_n_________o____obfuscation___________Find_possibly_obfuscated_values_n________________________________________Tag:_Obfuscation_n_________r____script________________Find_script_files_n________________________________________Tag:_Script_n_________s____shellcode_____________Find_possible_shellcode_n________________________________________Tag:_Shellcode_n_________u____unc___________________Find_UNC_paths_n________________________________________Tag:_UNC_n_________w____url___________________Find_URLs_n________________________________________Tag:_URL_n_________y____suspicious____________Find_various_suspicious_substrings_n________________________________________e.g._iex__invoke_expression__etc._n________________________________________Tag:_Suspicious_n_________z____everything____________Run_ALL_the_hunts_n_n____Time_window:_n________This_option_will_compare_the_specified_date_window_to_the_registry_keys__n________last_write_time_and_only_output_logs_where_the_last_write_time_falls__n________within_that_window._Window_start_is_inclusive__window_end_is_exclusive.__n________NOTE:_key_last_write_time_can_be_timestomped._n__________start__UTC_start_time_________Start_of_time_window:__default:_0000_01_01T00:00:00__n
mov r8d, 0x1ae4
mov rcx, rdi
call fcn.1400a1fa0
lea rbx, [fcn.1400968a0]
mov rcx, rbx
call fcn.140096ba3
mov rbp, rax
mov rsi, rdx
xorps xmm6, xmm6
movaps xmmword [rsp + 0x3b0], xmm6
and qword [rsp + 0x3c0], 0
mov rcx, rbx
call fcn.140096ba3
and qword [rsp + 0x3f0], 0
movaps xmmword [rsp + 0x3e0], xmm6
lea rcx, [0x14012b280]
mov qword [rsp + 0x3c8], rcx
mov qword [rsp + 0x3d0], rbp
mov qword [rsp + 0x3d8], rsi
mov qword [rsp + 0x3f8], rcx
mov qword [rsp + 0x400], rax
mov qword [rsp + 0x408], rdx
and qword [rsp + 0x430], 0
mov eax, 1
mov qword [rsp + 0x438], rax
and qword [rsp + 0x440], 0
mov qword [rsp + 0x448], r14
mov qword [rsp + 0x450], rdi
mov qword [rsp + 0x458], 0x1ae4
and qword [rsp + 0x460], 0
mov qword [rsp + 0x468], rax
movaps xmmword [rsp + 0x470], xmm6
mov qword [rsp + 0x480], 8
and qword [rsp + 0x488], 0
mov dword [rsp + 0x410], 4
lea rax, [0x14014aea8]
mov qword [rsp + 0x160], rax
mov rax, qword [0x14014aeb8]
cmp rax, 3
jne 0x140006e8c
mov rdx, qword [rsp + 0x160]
lea r14, str._nReg_Hunter_n____Author:_Brian_Kellogg_n____License:_MIT_n____Many_thanks:__Hexacorn_and__SBousseaden_n____Disclaimer:__n________This_tool_comes_with_no_warranty_or_support.__n________If_anyone_chooses_to_use_it__you_accept_all_responsibility_and_liability._n_nUsage:_n____reg_hunter___help_n____reg_hunter__options__n____reg_hunter___explicit__f__n____ip__ip____port__port___n____reg_hunter___all___bcefimnorsuwyz_____ip__ip____port__port______limit__n____reg_hunter___all___bcefimnorsuwyz_____outfile__file______limit__n____reg_hunter__a___regex__regex____path___name___value_n____reg_hunter__a__y____start__start_time____end__end_time___n_nOptions:_n____Registry_context__one_required_:_n_________a____all___________________Examine_all_the_registry__HKLM_and_HKU_n_________x____explicit______________Examine_only_more_often_forensically_interesting_keys_and_values_n________________________________________This_option_will_always_report_out_all__n________________________________________value_names_and_values_unless_values_are_empty_null_n_________k____key__path_____________Only_examine_a_specified_reg_path.__default:_NONE__n________________________________________All_sub_keys_will_be_examined_as_well._n________________________________________Searches_both_HKLM_and_HKU_hives_n________________________________________format:_SOFTWAREMicrosoftWindowsCurrentVersion_n_n____Hunts:_n_________b____binary________________Find_possible_MZ_headers_in_REG_BINARY_values_n________________________________________and_possible_Base64_encoded_MZ_headers___e.g._TVq_n________________________________________Tag:_MzHeader_n_________c____shell_________________Find_command_shells__cmd.exe__powershell.exe__...__n________________________________________Tag:_Shell_n_________e____encoding______________Find_possibly_encoded_values_n________________________________________Tag:_Encoding_n_________f____file__________________Find_files_referenced_in_registry_values__n________________________________________and_collect_lnk_file_metadata._If_a_lnk_file_is_found___n________________________________________metadata_on_both_the_lnk_and_file_it_points_to_will_be__n________________________________________reported._n________________________________________Tag:_File_n_________g____link__________________Hunt_for_registry_symbolic_links_n________________________________________WORK_IN_PROGRESS_n_________i____ip____________________Search_for_IPv4_addresses_n________________________________________Tag:_IPv4_n_________l____rightleft_____________Hunt_for_RightToLeft_override_n________________________________________Tag:_RightToLeft_n_________m____email_________________Find_email_addresses_n________________________________________Tag:_Email_n_________n____null__________________Hunt_for_null_prefixed_value_names_n________________________________________Tag:_NullPrefixedName_n_________o____obfuscation___________Find_possibly_obfuscated_values_n________________________________________Tag:_Obfuscation_n_________r____script________________Find_script_files_n________________________________________Tag:_Script_n_________s____shellcode_____________Find_possible_shellcode_n________________________________________Tag:_Shellcode_n_________u____unc___________________Find_UNC_paths_n________________________________________Tag:_UNC_n_________w____url___________________Find_URLs_n________________________________________Tag:_URL_n_________y____suspicious____________Find_various_suspicious_substrings_n________________________________________e.g._iex__invoke_expression__etc._n________________________________________Tag:_Suspicious_n_________z____everything____________Run_ALL_the_hunts_n_n____Time_window:_n________This_option_will_compare_the_specified_date_window_to_the_registry_keys__n________last_write_time_and_only_output_logs_where_the_last_write_time_falls__n________within_that_window._Window_start_is_inclusive__window_end_is_exclusive.__n________NOTE:_key_last_write_time_can_be_timestomped._n__________start__UTC_start_time_________Start_of_time_window:__default:_0000_01_01T00:00:00__n
lea rdi, [rsp + 0x620]
mov r9d, 0x1ae4
mov rcx, rdi
mov r8, r14
call fcn.140068db0
cmp qword [rdi], 0
je 0x140004ce4
movups xmm0, xmmword [rsp + 0x620]
movups xmm1, xmmword [rsp + 0x630]
movups xmm2, xmmword [rsp + 0x640]
lea rcx, [rsp + 0x5b0]
movaps xmmword [rcx + 0x20], xmm2
movaps xmmword [rcx + 0x10], xmm1
movaps xmmword [rcx], xmm0
lea rdx, [0x1400c986a]
mov r8d, 4
call fcn.14003634c
test rdx, rdx
je 0x140004d25
lea rdx, [0x1400c986a]
lea r15, [rsp + 0x5b0]
mov r8d, 4
mov rcx, r15
call fcn.14003634c
mov rbx, rax
mov rbp, rdx
mov rcx, rdx
xor edx, edx
call fcn.140045e00
mov rsi, rax
mov rdi, rdx
mov rcx, rdx
mov rdx, rbx
mov r8, rbp
call fcn.1400a1fa0
lea rcx, [rsp + 0x430]
call fcn.140034ed1
mov qword [rsp + 0x430], rsi
mov qword [rsp + 0x438], rdi
mov qword [rsp + 0x440], rbp
mov rcx, r15
xor edx, edx
call fcn.14006bb18
mov rsi, rax
mov rdi, rdx
mov rcx, rdx
xor edx, edx
call fcn.140045e00
mov rbx, rax
mov rbp, rdx
mov rcx, rdx
mov rdx, rsi
mov r8, rdi
call fcn.1400a1fa0
lea rcx, [rsp + 0x460]
call fcn.140034ed1
mov qword [rsp + 0x460], rbx
mov qword [rsp + 0x468], rbp
mov qword [rsp + 0x470], rdi
lea rsi, [rsp + 0x520]
mov rcx, rsi
mov rdx, r15
xor r8d, r8d
call fcn.14006b980
cmp qword [rsi], 0
je 0x1400071a1
mov rdi, qword [rsp + 0x530]
mov rcx, qword [rsp + 0x538]
test rdi, rdi
je 0x140004d6c
cmp rdi, 0x1ae4
jae 0x140004d66
cmp byte [rdi + r14], 0xbf
jg 0x140004d6c
lea rax, [0x1400c98c0]
mov qword [rsp + 0x20], rax
lea rcx, str._nReg_Hunter_n____Author:_Brian_Kellogg_n____License:_MIT_n____Many_thanks:__Hexacorn_and__SBousseaden_n____Disclaimer:__n________This_tool_comes_with_no_warranty_or_support.__n________If_anyone_chooses_to_use_it__you_accept_all_responsibility_and_liability._n_nUsage:_n____reg_hunter___help_n____reg_hunter__options__n____reg_hunter___explicit__f__n____ip__ip____port__port___n____reg_hunter___all___bcefimnorsuwyz_____ip__ip____port__port______limit__n____reg_hunter___all___bcefimnorsuwyz_____outfile__file______limit__n____reg_hunter__a___regex__regex____path___name___value_n____reg_hunter__a__y____start__start_time____end__end_time___n_nOptions:_n____Registry_context__one_required_:_n_________a____all___________________Examine_all_the_registry__HKLM_and_HKU_n_________x____explicit______________Examine_only_more_often_forensically_interesting_keys_and_values_n________________________________________This_option_will_always_report_out_all__n________________________________________value_names_and_values_unless_values_are_empty_null_n_________k____key__path_____________Only_examine_a_specified_reg_path.__default:_NONE__n________________________________________All_sub_keys_will_be_examined_as_well._n________________________________________Searches_both_HKLM_and_HKU_hives_n________________________________________format:_SOFTWAREMicrosoftWindowsCurrentVersion_n_n____Hunts:_n_________b____binary________________Find_possible_MZ_headers_in_REG_BINARY_values_n________________________________________and_possible_Base64_encoded_MZ_headers___e.g._TVq_n________________________________________Tag:_MzHeader_n_________c____shell_________________Find_command_shells__cmd.exe__powershell.exe__...__n________________________________________Tag:_Shell_n_________e____encoding______________Find_possibly_encoded_values_n________________________________________Tag:_Encoding_n_________f____file__________________Find_files_referenced_in_registry_values__n________________________________________and_collect_lnk_file_metadata._If_a_lnk_file_is_found___n________________________________________metadata_on_both_the_lnk_and_file_it_points_to_will_be__n________________________________________reported._n________________________________________Tag:_File_n_________g____link__________________Hunt_for_registry_symbolic_links_n________________________________________WORK_IN_PROGRESS_n_________i____ip____________________Search_for_IPv4_addresses_n________________________________________Tag:_IPv4_n_________l____rightleft_____________Hunt_for_RightToLeft_override_n________________________________________Tag:_RightToLeft_n_________m____email_________________Find_email_addresses_n________________________________________Tag:_Email_n_________n____null__________________Hunt_for_null_prefixed_value_names_n________________________________________Tag:_NullPrefixedName_n_________o____obfuscation___________Find_possibly_obfuscated_values_n________________________________________Tag:_Obfuscation_n_________r____script________________Find_script_files_n________________________________________Tag:_Script_n_________s____shellcode_____________Find_possible_shellcode_n________________________________________Tag:_Shellcode_n_________u____unc___________________Find_UNC_paths_n________________________________________Tag:_UNC_n_________w____url___________________Find_URLs_n________________________________________Tag:_URL_n_________y____suspicious____________Find_various_suspicious_substrings_n________________________________________e.g._iex__invoke_expression__etc._n________________________________________Tag:_Suspicious_n_________z____everything____________Run_ALL_the_hunts_n_n____Time_window:_n________This_option_will_compare_the_specified_date_window_to_the_registry_keys__n________last_write_time_and_only_output_logs_where_the_last_write_time_falls__n________within_that_window._Window_start_is_inclusive__window_end_is_exclusive.__n________NOTE:_key_last_write_time_can_be_timestomped._n__________start__UTC_start_time_________Start_of_time_window:__default:_0000_01_01T00:00:00__n
mov edx, 0x1ae4
xor r8d, r8d
mov r9, rdi
call fcn.1400b06d0
ud2
lea rax, [0x1400c9970]
lea rdx, [rsp + 0x520]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 1
and qword [rdx], 0
lea rax, str.ntdll.dll
mov qword [rdx + 0x20], rax
and qword [rdx + 0x28], 0
lea rcx, [rsp + 0x200]
call fcn.14003db5e
jmp 0x14000602c
lea rax, [0x1400c9898]
lea rdx, [rsp + 0x520]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 1
and qword [rdx], 0
lea rax, str.ntdll.dll
mov qword [rdx + 0x20], rax
and qword [rdx + 0x28], 0
lea rcx, [rsp + 0x200]
call fcn.14003db5e
jmp 0x14000601f
jne 0x140004cbf
lea r14, str._nReg_Hunter_n____Author:_Brian_Kellogg_n____License:_MIT_n____Many_thanks:__Hexacorn_and__SBousseaden_n____Disclaimer:__n________This_tool_comes_with_no_warranty_or_support.__n________If_anyone_chooses_to_use_it__you_accept_all_responsibility_and_liability._n_nUsage:_n____reg_hunter___help_n____reg_hunter__options__n____reg_hunter___explicit__f__n____ip__ip____port__port___n____reg_hunter___all___bcefimnorsuwyz_____ip__ip____port__port______limit__n____reg_hunter___all___bcefimnorsuwyz_____outfile__file______limit__n____reg_hunter__a___regex__regex____path___name___value_n____reg_hunter__a__y____start__start_time____end__end_time___n_nOptions:_n____Registry_context__one_required_:_n_________a____all___________________Examine_all_the_registry__HKLM_and_HKU_n_________x____explicit______________Examine_only_more_often_forensically_interesting_keys_and_values_n________________________________________This_option_will_always_report_out_all__n________________________________________value_names_and_values_unless_values_are_empty_null_n_________k____key__path_____________Only_examine_a_specified_reg_path.__default:_NONE__n________________________________________All_sub_keys_will_be_examined_as_well._n________________________________________Searches_both_HKLM_and_HKU_hives_n________________________________________format:_SOFTWAREMicrosoftWindowsCurrentVersion_n_n____Hunts:_n_________b____binary________________Find_possible_MZ_headers_in_REG_BINARY_values_n________________________________________and_possible_Base64_encoded_MZ_headers___e.g._TVq_n________________________________________Tag:_MzHeader_n_________c____shell_________________Find_command_shells__cmd.exe__powershell.exe__...__n________________________________________Tag:_Shell_n_________e____encoding______________Find_possibly_encoded_values_n________________________________________Tag:_Encoding_n_________f____file__________________Find_files_referenced_in_registry_values__n________________________________________and_collect_lnk_file_metadata._If_a_lnk_file_is_found___n________________________________________metadata_on_both_the_lnk_and_file_it_points_to_will_be__n________________________________________reported._n________________________________________Tag:_File_n_________g____link__________________Hunt_for_registry_symbolic_links_n________________________________________WORK_IN_PROGRESS_n_________i____ip____________________Search_for_IPv4_addresses_n________________________________________Tag:_IPv4_n_________l____rightleft_____________Hunt_for_RightToLeft_override_n________________________________________Tag:_RightToLeft_n_________m____email_________________Find_email_addresses_n________________________________________Tag:_Email_n_________n____null__________________Hunt_for_null_prefixed_value_names_n________________________________________Tag:_NullPrefixedName_n_________o____obfuscation___________Find_possibly_obfuscated_values_n________________________________________Tag:_Obfuscation_n_________r____script________________Find_script_files_n________________________________________Tag:_Script_n_________s____shellcode_____________Find_possible_shellcode_n________________________________________Tag:_Shellcode_n_________u____unc___________________Find_UNC_paths_n________________________________________Tag:_UNC_n_________w____url___________________Find_URLs_n________________________________________Tag:_URL_n_________y____suspicious____________Find_various_suspicious_substrings_n________________________________________e.g._iex__invoke_expression__etc._n________________________________________Tag:_Suspicious_n_________z____everything____________Run_ALL_the_hunts_n_n____Time_window:_n________This_option_will_compare_the_specified_date_window_to_the_registry_keys__n________last_write_time_and_only_output_logs_where_the_last_write_time_falls__n________within_that_window._Window_start_is_inclusive__window_end_is_exclusive.__n________NOTE:_key_last_write_time_can_be_timestomped._n__________start__UTC_start_time_________Start_of_time_window:__default:_0000_01_01T00:00:00__n
lea r9, [0x1400c98d8]
mov r8d, 0x1ae4
mov rdx, r14
call fcn.140036399
mov rbx, rax
mov rbp, rdx
lea rsi, [rsp + 0x520]
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call fcn.14003f066
lea rcx, [rsp + 0x568]
mov rdx, rbx
mov r8, rbp
call fcn.14003f066
lea rdi, [rsp + 0x620]
mov r8d, 0x90
mov rcx, rdi
mov rdx, rsi
call fcn.1400a1fa0
lea rcx, [rsp + 0x520]
mov r8d, 0x90
mov rdx, rdi
call fcn.1400a1fa0
lea r12, [rsp + 0x50]
lea rbx, [rsp + 0x1a0]
lea r15, [rsp + 0x140]
cmp dword [rsp + 0x54c], 0x110000
je 0x140004e25
lea rcx, [rsp + 0x520]
call fcn.14003f09b
test rax, rax
jne 0x140004e4c
mov dword [rsp + 0x54c], 0x110000
cmp dword [rsp + 0x594], 0x110000
je 0x140005be4
lea rcx, [rsp + 0x568]
call fcn.14003f09b
test rax, rax
je 0x140005be4
mov rbp, rax
mov rdi, rdx
lea rax, [0x14014aec0]
mov qword [rsp + 0xf0], rax
mov rax, qword [0x14014aed0]
cmp rax, 3
jne 0x1400055cd
mov rsi, qword [rsp + 0xf0]
mov qword [rsp + 0xb8], rbp
mov rcx, rbp
mov qword [rsp + 0x40], rdi
mov rdx, rdi
call fcn.140036600
mov r9, rdx
lea rcx, str.ntdll.dll
mov qword [rsp + 0x20], rcx
and qword [rsp + 0x28], 0
lea rcx, [rsp + 0x330]
mov rdx, rsi
mov r8, rax
call fcn.1400375f3
cmp qword [rsp + 0x330], 0
mov rsi, qword [rsp + 0x340]
mov rbp, qword [rsp + 0x338]
cmovne rbp, rsi
cmovne rsi, qword [rsp + 0x348]
lea rax, [0x14014aed8]
mov qword [rsp + 0xf0], rax
mov rax, qword [0x14014aee8]
cmp rax, 3
jne 0x140005613
mov rcx, qword [rsp + 0xf0]
mov rdx, rbp
mov r8, rsi
call fcn.140067614
test al, al
je 0x140005348
lea rax, [0x14014aef0]
mov qword [rsp + 0xf0], rax
mov rax, qword [0x14014af00]
cmp rax, 3
jne 0x140005882
mov rdx, qword [rsp + 0xf0]
lea rax, str.ntdll.dll
mov qword [rsp + 0x20], rax
and qword [rsp + 0x28], 0
lea rcx, [rsp + 0x350]
mov r8, rbp
mov r9, rsi
call fcn.1400375f3
lea rax, [0x14014af08]
mov qword [rsp + 0xf0], rax
mov rax, qword [0x14014af18]
cmp rax, 3
jne 0x1400058c8
cmp qword [rsp + 0x350], 0
mov r9, qword [rsp + 0x360]
mov r8, qword [rsp + 0x358]
cmovne r8, r9
mov rdx, qword [rsp + 0xf0]
cmovne r9, qword [rsp + 0x368]
lea rax, str._1__
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 4
lea rcx, [rsp + 0x240]
call fcn.1400375f3
cmp qword [rsp + 0x240], 0
mov rdx, qword [rsp + 0x250]
mov rcx, qword [rsp + 0x248]
cmovne rcx, rdx
cmovne rdx, qword [rsp + 0x258]
call fcn.140036600
mov rbp, rax
mov rdi, rdx
and qword [rsp + 0x1d0], 0
mov eax, 1
mov qword [rsp + 0x1d8], rax
and qword [rsp + 0x1e0], 0
mov qword [rsp + 0x5e0], rbp
and qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f0], rax
and qword [rsp + 0x1f8], 0
mov qword [rsp + 0x5e8], rdx
lea rax, [0x14014af20]
mov qword [rsp + 0x1a0], rax
mov rax, qword [0x14014af30]
cmp rax, 3
jne 0x14000590e
mov rdx, qword [rsp + 0x1a0]
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x220], rbp
mov r8, rbp
mov qword [rsp + 0xb0], rdi
mov r9, rdi
call fcn.140068f0e
movups xmm0, xmmword [rsp + 0x160]
movups xmm1, xmmword [rsp + 0x170]
movups xmm2, xmmword [rsp + 0x180]
movups xmm3, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
xor ebp, ebp
xor eax, eax
mov qword [rsp + 0x138], rax
xor eax, eax
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0xc0]
mov rdx, r12
call fcn.14006bbb3
cmp qword [rsp + 0xc0], 0
je 0x14000539a
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movups xmm2, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1c0], xmm2
movaps xmmword [rsp + 0x1b0], xmm1
movaps xmmword [rsp + 0x1a0], xmm0
lea rdi, [rsp + 0xf0]
mov rcx, rdi
mov rdx, rbx
xor r8d, r8d
call fcn.14006b980
mov rsi, r15
mov rcx, r15
mov rdx, rdi
lea r8, [0x1400c9988]
call fcn.1400374fe
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x138], rax
mov r8d, 8
mov rcx, rbx
lea rdx, str.repeatedshortlongOnly_one_short_flag_is_allowed_in_an_option_description__but_found__and_
call fcn.14003634c
test rdx, rdx
movzx ebp, bpl
mov eax, 1
cmovne ebp, eax
mov qword [rsp + 0x38], rbp
mov r8d, 5
mov rcx, rbx
lea rdx, [0x1400c99a8]
call fcn.14003634c
mov r15, rax
mov r14, rdx
mov r8d, 4
mov rcx, rbx
lea rdx, [0x1400c99ad]
call fcn.14003634c
mov r13, rax
mov rbp, rdx
mov qword [rsp + 0x5f0], r15
mov qword [rsp + 0x5f8], r14
mov qword [rsp + 0x600], rax
mov qword [rsp + 0x608], rdx
test r14, r14
je 0x14000524d
cmp qword [rsp + 0x1e0], 0
jne 0x140005470
mov rcx, r14
xor edx, edx
call fcn.140045e00
mov rdi, r12
mov r12, rax
mov rbx, rdx
mov rcx, rdx
mov rdx, r15
mov r8, r14
call fcn.1400a1fa0
lea rcx, [rsp + 0x1d0]
call fcn.140034ed1
mov qword [rsp + 0x1d0], r12
mov r12, rdi
mov qword [rsp + 0x1d8], rbx
mov qword [rsp + 0x1e0], r14
test rbp, rbp
mov r15, rsi
je 0x1400052a7
cmp qword [rsp + 0x1f8], 0
jne 0x1400054df
mov rcx, rbp
xor edx, edx
call fcn.140045e00
mov rbx, rax
mov rdi, rdx
mov rcx, rdx
mov rdx, r13
mov r8, rbp
call fcn.1400a1fa0
lea rcx, [rsp + 0x1e8]
call fcn.140034ed1
mov qword [rsp + 0x1e8], rbx
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rbp
mov r9d, 3
mov rcx, r15
lea rbx, [rsp + 0x1a0]
mov rdx, rbx
lea r8, str.argArgument__is_not_of_the_form_ARG_or__arg_.
call fcn.14006b9e5
cmp qword [rsp + 0x140], 0
je 0x140005336
movups xmm0, xmmword [rsp + 0x140]
movups xmm1, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
lea rcx, [rsp + 0xf0]
call fcn.1400363e3
test rax, rax
mov rbp, qword [rsp + 0x38]
je 0x14000533b
mov qword [rsp + 0x610], rax
mov qword [rsp + 0x618], rdx
test rdx, rdx
je 0x14000533b
mov rcx, rax
call fcn.14003df07
mov cl, 1
mov qword [rsp + 0x48], rcx
test al, al
jne 0x14000533b
jmp 0x140005659
mov rbp, qword [rsp + 0x38]
mov rcx, rbx
call fcn.14000923c
jmp 0x1400050e7
mov rcx, r12
lea rdx, [rsp + 0x3b0]
mov r8, qword [rsp + 0xb8]
mov r9, qword [rsp + 0x40]
call fcn.14003f1f6
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x140005462
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x228], rcx
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rdx
jmp 0x140005b67
mov rcx, r12
call fcn.140035a5e
mov r8, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x138]
cmp rcx, r8
ja 0x140007073
mov rdx, qword [rsp + 0x220]
jae 0x140005587
lea r9, [0x1400c9b98]
call fcn.140036399
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rdx
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x160], rax
lea rax, [fcn.140096f89]
mov qword [rsp + 0x168], rax
lea rcx, str.Extraneous_text__in_option_description_
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], 3
and qword [rsp + 0x50], 0
lea rcx, [rsp + 0x5e0]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x228]
mov rdx, r12
call fcn.14003db5e
jmp 0x140005b33
and qword [rsp + 0x230], 0
jmp 0x140005b67
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x140], rax
lea rax, [0x14000a73f]
mov qword [rsp + 0x148], rax
lea rax, [0x1400c9a00]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 3
and qword [rsp + 0xf0], 0
lea rax, [rsp + 0x5f0]
mov qword [rsp + 0x150], rax
lea rax, [fcn.140096f89]
mov qword [rsp + 0x158], rax
mov r15, rsi
mov qword [rsp + 0x110], rsi
jmp 0x140005549
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x140], rax
lea rax, [0x14000a73f]
mov qword [rsp + 0x148], rax
lea rax, str.Only_one_long_flag_is_allowed_in_an_option_description__but_found_
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 3
and qword [rsp + 0xf0], 0
lea rax, [rsp + 0x600]
mov qword [rsp + 0x150], rax
lea rax, [fcn.140096f89]
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x110], r15
mov qword [rsp + 0x118], 2
lea rcx, [rsp + 0x228]
lea rdx, [rsp + 0xf0]
call fcn.14003db5e
lea rbx, [rsp + 0x1a0]
mov rcx, rbx
call fcn.14000923c
mov rcx, r12
call fcn.140035a5e
jmp 0x140005b33
mov rsi, rbp
mov r13, qword [rsp + 0x1d8]
mov rbp, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x1f0]
mov rdi, qword [rsp + 0x1f8]
test rbp, rbp
je 0x1400056ca
mov rcx, r13
mov rdx, rbp
cmp rbp, 0x20
jae 0x1400056d4
call fcn.140031ef0
jmp 0x1400056d9
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x50], rax
lea rax, [0x14012a2e0]
mov qword [rsp + 0x20], rax
lea rcx, [0x14014aed0]
xor edx, edx
mov r8, r12
lea r9, [0x1400c9220]
call fcn.1400b1bd0
jmp 0x140004e72
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x50], rax
lea rax, [0x14012a2e0]
mov qword [rsp + 0x20], rax
lea rcx, [0x14014aee8]
xor edx, edx
mov r8, r12
lea r9, [0x1400c91a8]
call fcn.1400b1bd0
jmp 0x140004f00
lea rax, [0x1400c9ad8]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 2
and qword [rsp + 0xf0], 0
lea rax, [rsp + 0x610]
mov qword [rsp + 0x140], rax
lea rax, [fcn.140096f89]
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x110], r15
mov qword [rsp + 0x118], 1
lea rcx, [rsp + 0x228]
lea rdx, [rsp + 0xf0]
call fcn.14003db5e
jmp 0x140005572
test rdi, rdi
jne 0x1400056e3
jmp 0x1400071cd
call fcn.14002d240
cmp rax, 2
jne 0x140005b11
mov rax, qword [rsp + 0x48]
and al, 1
and sil, 1
and qword [rsp + 0x170], 0
movzx eax, al
mov byte [rsp + 0x180], sil
mov qword [rsp + 0x160], rax
mov byte [rsp + 0x181], 1
test rbp, rbp
je 0x14000594c
test rdi, rdi
je 0x14000597b
mov rcx, r12
mov rdx, r13
mov r8, rbp
call fcn.14003dcac
lea rsi, [rsp + 0x70]
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call fcn.14003dcac
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x150], xmm1
movaps xmmword [rsp + 0x140], xmm0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm1
lea rdi, [rsp + 0xf0]
mov rcx, rdi
lea rsi, [rsp + 0xc0]
mov rdx, rsi
call fcn.140037634
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [rsp + 0x160]
movups xmm1, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
lea rbx, [rsp + 0x3b0]
mov rcx, rbx
mov rdx, rdi
mov r8, r12
call fcn.14003f50a
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov rdx, rsi
call fcn.140037634
mov rcx, rbx
mov rdx, rdi
call fcn.140037ca7
test al, al
je 0x1400071e2
movups xmm0, xmmword [rsp + 0x1a0]
movups xmm1, xmmword [rsp + 0x1b0]
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
mov rcx, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x408]
mov r8, r15
call fcn.140035460
mov rsi, rax
lea rcx, [rsp + 0x3e0]
mov rdx, rax
mov r8, r15
call fcn.140036533
test rax, rax
je 0x140005a03
movups xmm0, xmmword [rax - 0x20]
movups xmm1, xmmword [rax - 0x10]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmm1, xmmword [rsp + 0x100]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
mov rcx, r15
call fcn.140034e94
jmp 0x140005ae2
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x50], rax
lea rax, [0x14012a2e0]
mov qword [rsp + 0x20], rax
lea rcx, [0x14014af00]
xor edx, edx
mov r8, r12
lea r9, [0x1400c9180]
call fcn.1400b1bd0
jmp 0x140004f3b
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x50], rax
lea rax, [0x14012a2e0]
mov qword [rsp + 0x20], rax
lea rcx, [0x14014af18]
xor edx, edx
mov r8, r12
lea r9, [0x1400c91d0]
call fcn.1400b1bd0
jmp 0x140004f88
mov qword [rsp + 0xf0], rbx
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x50], rax
lea rax, [0x14012a2e0]
mov qword [rsp + 0x20], rax
lea rcx, [0x14014af30]
xor edx, edx
mov r8, r12
lea r9, [0x1400c9248]
call fcn.1400b1bd0
jmp 0x140005072
test rdi, rdi
je 0x140005b92
lea rbx, [rsp + 0x1a0]
mov rcx, rbx
mov rdx, r14
mov r8, rdi
call fcn.14003dcac
lea rsi, [rsp + 0xf0]
mov rcx, rsi
mov rdx, rbx
jmp 0x14000599f
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov rdx, r13
mov r8, rbp
call fcn.14003dcac
lea rsi, [rsp + 0xf0]
mov rcx, rsi
mov rdx, rdi
call fcn.140037634
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [rsp + 0x160]
movups xmm1, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x3b0]
mov rdx, rsi
mov r8, r12
call fcn.14003f50a
lea rsi, [rsp + 0x410]
mov rcx, rsi
call fcn.14003d312
movups xmm0, xmmword [rsp + 0x1a0]
movups xmm1, xmmword [rsp + 0x1b0]
jmp 0x140005b0a
movaps xmm0, xmmword [rsp + 0x140]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmm1, xmmword [rsp + 0x100]
lea rax, [rsp + 0x70]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov r14, qword [rsp + 0x3e0]
mov rbp, qword [rsp + 0x3f8]
mov rcx, r14
mov rdx, rbp
mov r8, rsi
call fcn.14004865d
movzx edi, byte [rbp + rax]
mov rbx, qword [rsp + 0x3e8]
and edi, 1
test rbx, rbx
jne 0x140005a75
test dil, dil
jne 0x140005ba4
sub rbx, rdi
mov qword [rsp + 0x3e8], rbx
shr rsi, 0x39
lea rcx, [rax - 0x10]
and rcx, r14
mov byte [rbp + rax], sil
mov byte [rcx + rbp + 0x10], sil
inc qword [rsp + 0x3f0]
mov rcx, qword [rsp + 0x3f8]
shl rax, 6
mov rdx, rcx
sub rdx, rax
neg rax
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movups xmmword [rcx + rax - 0x10], xmm3
movups xmmword [rdx - 0x20], xmm2
movups xmmword [rdx - 0x30], xmm1
movups xmmword [rdx - 0x40], xmm0
mov dword [rsp + 0x50], 4
mov rcx, r12
call fcn.14003d312
lea rsi, [rsp + 0x410]
mov rcx, rsi
call fcn.14003d312
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmm1, xmmword [rsp + 0xd0]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
lea rcx, [rsp + 0x228]
lea rdx, [rsp + 0x3b0]
mov r8, qword [rsp + 0xb8]
mov r9, qword [rsp + 0x40]
call fcn.14003f1f6
lea rcx, [rsp + 0x1e8]
call fcn.140034ed1
lea rcx, [rsp + 0x1d0]
call fcn.140034ed1
lea rcx, [rsp + 0x240]
call fcn.14003752e
lea rcx, [rsp + 0x350]
call fcn.14003752e
lea rcx, [rsp + 0x330]
call fcn.14003752e
mov rax, qword [rsp + 0x230]
test rax, rax
jne 0x140005f0b
lea rbx, [rsp + 0x1a0]
jmp 0x140004dfb
lea rcx, [rsp + 0x160]
call fcn.140035d70
jmp 0x140005b11
lea rcx, [rsp + 0x3e0]
lea rdx, [rsp + 0x400]
call fcn.1400b080a
mov r14, qword [rsp + 0x3e0]
mov rbx, qword [rsp + 0x3e8]
mov rbp, qword [rsp + 0x3f8]
mov rcx, r14
mov rdx, rbp
mov r8, rsi
call fcn.14004865d
jmp 0x140005a75
lea rdx, [0x1400c986a]
lea rcx, [rsp + 0x5b0]
mov r8d, 4
call fcn.14003634c
mov rbx, rax
mov rbp, rdx
lea rsi, [rsp + 0x620]
and qword [rsi], 0
mov qword [rsi + 8], 1
and qword [rsi + 0x10], 0
mov rcx, rsi
call fcn.14006c3fa
add rbp, rbx
lea rdi, [rsp + 0x520]
mov qword [rdi], rbp
mov qword [rdi + 8], rbx
mov rcx, rdi
call fcn.14002c881
cmp eax, 0x110000
je 0x140005c6c
mov ebx, eax
mov ecx, eax
call fcn.140077044
test al, al
je 0x140005c60
mov rcx, rsi
mov edx, 0x5c
call fcn.14006e3f2
mov rcx, rsi
mov edx, ebx
call fcn.14006e3f2
jmp 0x140005c37
lea rax, str.__:___s_.___s_
lea rdx, [rsp + 0x520]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 2
and qword [rdx], 0
mov qword [rsp + 0x50], rsi
lea rax, [0x14000a73f]
mov qword [rsp + 0x58], rax
mov qword [rdx + 0x20], r12
mov qword [rdx + 0x28], 1
lea rdi, [rsp + 0x350]
mov rcx, rdi
call fcn.14003db5e
mov rcx, rsi
call fcn.140034ed1
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
lea rsi, [rsp + 0x520]
mov rcx, rsi
call fcn.1400674cd
lea rdx, [0x1400c9928]
mov rcx, rsi
call fcn.14003ce5b
mov qword [rsp + 0x330], rax
mov qword [rsp + 0x338], rdx
lea rdx, str.patsCould_not_find_usage_patterns_in_doc_string.D
lea rcx, [rsp + 0x5b0]
mov r8d, 4
call fcn.14003634c
test rdx, rdx
je 0x140005f8e
lea rdx, str.patsCould_not_find_usage_patterns_in_doc_string.D
lea rcx, [rsp + 0x5b0]
mov r8d, 4
call fcn.14003634c
mov r8, rdx
lea rsi, [rsp + 0x620]
mov rcx, rsi
mov rdx, rax
call fcn.14003f066
lea rax, [rsp + 0x520]
mov ecx, 9
mov rdi, rax
rep movsq qword [rdi], qword [rsi]
lea r12, [rsp + 0x144]
lea r15, [rsp + 0x6f4]
lea r13, [rsp + 0xc0]
lea rsi, [rsp + 0x160]
lea rdi, [rsp + 0x1a0]
lea rbx, [rsp + 0x50]
lea rbp, [rsp + 0x3b0]
lea r14, [rsp + 0x140]
mov rcx, rax
call fcn.14003f09b
test rax, rax
je 0x140006f20
mov rcx, rax
call fcn.140036600
mov r9, rdx
lea rcx, [rsp + 0xf0]
lea rdx, [rsp + 0x330]
mov r8, rax
call fcn.140068f0e
movups xmm0, xmmword [rsp + 0xf0]
movups xmm1, xmmword [rsp + 0x100]
movups xmm2, xmmword [rsp + 0x110]
movups xmm3, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x190], xmm3
movaps xmmword [rsp + 0x180], xmm2
movaps xmmword [rsp + 0x170], xmm1
movaps xmmword [rsp + 0x160], xmm0
mov rcx, r13
mov rdx, rsi
call fcn.14006bbb3
cmp qword [rsp + 0xc0], 0
je 0x140005ef6
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movups xmm2, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1c0], xmm2
movaps xmmword [rsp + 0x1b0], xmm1
movaps xmmword [rsp + 0x1a0], xmm0
mov edx, 1
mov rcx, rdi
call fcn.14006bb18
mov r9, rdx
mov rcx, rbx
mov rdx, rbp
mov r8, rax
call fcn.14003f6e5
mov rcx, r14
mov rdx, rbx
call fcn.14003f98d
mov eax, dword [rsp + 0x140]
cmp eax, 8
je 0x140005f38
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0xc]
movups xmmword [rsp + 0x24c], xmm1
movaps xmmword [rsp + 0x240], xmm0
mov dword [rsp + 0x6f0], eax
movups xmm0, xmmword [rsp + 0x24c]
movups xmmword [r15 + 0xc], xmm0
movaps xmm0, xmmword [rsp + 0x240]
movups xmmword [r15], xmm0
mov rcx, rbx
call fcn.14003fb41
lea rcx, [rsp + 0x478]
lea rdx, [rsp + 0x6f0]
call fcn.14003fb7a
mov rcx, rdi
call fcn.14000923c
jmp 0x140005e0e
mov rcx, rsi
call fcn.140035a5e
lea rax, [rsp + 0x520]
jmp 0x140005d9a
mov rcx, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x238]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], rdx
jmp 0x14000601f
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x254], rax
movups xmm0, xmmword [rsp + 0x148]
movups xmmword [rsp + 0x244], xmm0
movaps xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], rax
lea rcx, [rsp + 0x50]
call fcn.14003fb41
lea rcx, [rsp + 0x1a0]
call fcn.14000923c
lea rcx, [rsp + 0x160]
call fcn.140035a5e
jmp 0x140006005
lea r8, str.ntdll.dll
lea rsi, [rsp + 0x520]
lea rdx, [rsp + 0x3b0]
mov rcx, rsi
xor r9d, r9d
call fcn.14003f6e5
lea rdi, [rsp + 0x620]
mov rcx, rdi
mov rdx, rsi
call fcn.14003f98d
mov eax, dword [rdi]
cmp eax, 8
jne 0x140006ecd
mov rax, qword [rsp + 0x638]
mov qword [rsp + 0x64], rax
movups xmm0, xmmword [rsp + 0x628]
movups xmmword [rsp + 0x54], xmm0
movaps xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], rax
lea rcx, [rsp + 0x520]
call fcn.14003fb41
lea rcx, [rsp + 0x330]
call fcn.14003ced6
lea rcx, [rsp + 0x350]
call fcn.140034ed1
lea rcx, [rsp + 0x5b0]
call fcn.14000923c
mov rbp, qword [rsp + 0x208]
test rbp, rbp
jne 0x1400070b0
lea rax, [rsp + 0x3d8]
mov r14, qword [rax - 0x28]
mov rbx, qword [rax - 0x20]
mov r13, qword [rax - 0x18]
mov r9, qword [rax - 0x10]
mov r8, qword [rax - 8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x370], xmm0
movaps xmmword [rsp + 0x380], xmm1
movaps xmmword [rsp + 0x390], xmm2
mov rcx, qword [rax + 0x30]
mov qword [rsp + 0x3a0], rcx
mov r11d, dword [rax + 0x38]
lea rsi, [rsp + 0x414]
lea rdi, [rsp + 0x260]
mov ecx, 0x1f
rep movsd dword [rdi], dword [rsi]
cmp r11d, 5
je 0x14000709e
mov rbp, rbx
shr rbp, 0x10
mov rax, rbx
shr rax, 0x20
mov rcx, qword [rsp + 0x3a0]
mov qword [rsp + 0x6e0], rcx
movaps xmm0, xmmword [rsp + 0x370]
movaps xmm1, xmmword [rsp + 0x380]
movaps xmm2, xmmword [rsp + 0x390]
movaps xmmword [rsp + 0x6d0], xmm2
movaps xmmword [rsp + 0x6c0], xmm1
movaps xmmword [rsp + 0x6b0], xmm0
lea r10, [rsp + 0x734]
lea rsi, [rsp + 0x260]
mov ecx, 0x1f
mov rdi, r10
rep movsd dword [rdi], dword [rsi]
lea rdx, [rsp + 0x414]
mov qword [rdx - 0x64], r14
mov word [rdx - 0x5c], bx
mov word [rdx - 0x5a], bp
mov dword [rdx - 0x58], eax
mov qword [rdx - 0x54], r13
mov qword [rdx - 0x4c], r9
mov qword [rdx - 0x44], r8
movaps xmm0, xmmword [rsp + 0x6b0]
movaps xmm1, xmmword [rsp + 0x6c0]
movaps xmm2, xmmword [rsp + 0x6d0]
movups xmmword [rdx - 0x3c], xmm0
movups xmmword [rdx - 0x2c], xmm1
movups xmmword [rdx - 0x1c], xmm2
mov rax, qword [rsp + 0x6e0]
mov qword [rdx - 0xc], rax
mov dword [rdx - 4], r11d
mov ecx, 0x1f
mov rdi, rdx
mov rsi, r10
rep movsd dword [rdi], dword [rsi]
and qword [rdx + 0x84], 0
and qword [rdx + 0x9c], 0
mov word [rdx + 0xac], pe_nt_image_headers64
lea rsi, [rsp + 0x620]
lea rdx, [rsp + 0x3b0]
mov rcx, rsi
call fcn.14003844e
xor eax, eax
cmp qword [rsi + 0x18], rax
je 0x1400069af
lea rax, [rsp + 0x520]
lea rsi, [rsp + 0x620]
mov ecx, 0xc
mov rdi, rax
rep movsq qword [rdi], qword [rsi]
and qword [rax + 0x60], 0
mov qword [rax + 0x68], 8
and qword [rax + 0x70], 0
lea rdx, [rsp + 0xc0]
mov qword [rdx + 0x10], rax
lea rax, str.flag_allflag_explicitflag_keyflag_binaryflag_encodingflag_emailflag_everythingflag_fileflag_ipflag_linkflag_nullflag_obfuscationflag_rightleftflag_scriptflag_shellcodeflag_shellflag_suspiciousflag_uncflag_urlflag_startflag_endflag_regexflag_pathflag_nameflag_valueflag_hexflag_destinationflag_portflag_limitflag_printflag_outfileflag_debug
mov qword [rdx], rax
mov qword [rdx + 8], 0x20
lea rsi, [rsp + 0x50]
mov rcx, rsi
call fcn.14000a670
mov rbx, qword [rsi]
cmp rbx, 7
jne 0x1400068fc
mov r14b, byte [rsp + 0x58]
cmp r14b, 2
je 0x140006f4c
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rbx, qword [rsi]
cmp rbx, 7
jne 0x1400068fc
mov r15b, byte [rsp + 0x58]
cmp r15b, 2
je 0x140006f5b
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a55e
mov rbx, qword [rsi]
cmp rbx, 7
jne 0x1400068fc
mov r13, qword [rsp + 0x60]
test r13, r13
je 0x140006f6a
lea rsi, [rsp + 0x50]
mov rbx, qword [rsi + 8]
mov rbp, qword [rsi + 0x18]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
cmp al, 2
je 0x140006fad
mov byte [rsp + 0xaf], al
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
cmp al, 2
je 0x140006fbf
mov byte [rsp + 0xae], al
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
cmp al, 2
je 0x140006fd1
mov byte [rsp + 0xad], al
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
cmp al, 2
je 0x140006fe3
mov byte [rsp + 0xac], al
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov r12b, byte [rsp + 0x58]
cmp r12b, 2
je 0x140006ff5
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xab], al
cmp al, 2
je 0x140007007
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov byte [rsp + 0xaa], r12b
mov r12b, byte [rsp + 0x58]
cmp r12b, 2
je 0x140007019
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov byte [rsp + 0xa9], r12b
mov r12b, byte [rsp + 0x58]
cmp r12b, 2
je 0x14000702b
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov byte [rsp + 0xa7], r12b
mov byte [rsp + 0xa8], r15b
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xa6], al
cmp al, 2
je 0x14000703d
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xa5], al
cmp al, 2
je 0x14000704f
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xa4], al
cmp al, 2
je 0x140007061
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xa3], al
cmp al, 2
je 0x14000718f
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xa2], al
cmp al, 2
je 0x1400071bb
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xa1], al
cmp al, 2
je 0x1400071f7
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0xa0], al
cmp al, 2
je 0x14000723a
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x9f], al
cmp al, 2
je 0x1400072e6
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a55e
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140006e42
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x1400072f5
mov r15, rax
lea rsi, [rsp + 0x50]
mov r12, qword [rsi + 8]
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x4f8], rax
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a55e
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x140007209
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x328], rax
test rax, rax
je 0x140007338
lea rsi, [rsp + 0x50]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x320], rax
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x4f0], rax
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a55e
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000724c
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x318], rax
test rax, rax
je 0x14000737b
lea rsi, [rsp + 0x50]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x310], rax
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x4e8], rax
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000727a
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x9e], al
cmp al, 2
je 0x1400073be
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000727a
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x9d], al
cmp al, 2
je 0x140007401
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000727a
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x9c], al
cmp al, 2
je 0x140007558
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a55e
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000727a
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x300], rax
test rax, rax
je 0x1400075c6
lea rsi, [rsp + 0x50]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x308], rax
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x4e0], rax
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a55e
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x1400073d0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x2f8], rax
test rax, rax
je 0x14000779b
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x2f0], rax
mov rdi, qword [rsp + 0xc8]
test rdi, rdi
je 0x1400077de
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x4d8], rax
mov rsi, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x38], rcx
mov rdx, qword [rsi]
mov r8, qword [rsi + 8]
call fcn.14003e547
add rsi, 0x10
dec rdi
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rdi
lea rax, [0x140126f72]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 3
lea rsi, [rsp + 0x260]
mov rcx, rsi
mov rdx, qword [rsp + 0x38]
call fcn.14003ed9e
cmp qword [rsi], 0
je 0x140007413
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x180], rax
movups xmm0, xmmword [rsp + 0x268]
movups xmm1, xmmword [rsp + 0x278]
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0x100], xmm1
mov qword [rsp + 0x110], rax
mov rdi, qword [rsp + 0xf0]
cmp rdi, 7
jne 0x1400078ab
movzx eax, word [rsp + 0xf8]
mov dword [rsp + 0xb0], eax
jmp 0x140007651
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x60]
mov r12, qword [rsp + 0x68]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xb8], rax
mov r14b, 2
mov dword [rsp + 0xb0], eax
lea rcx, [rsp + 0x520]
call fcn.140037760
lea rdi, [rsp + 0x550]
mov rcx, rdi
call fcn.1400985c1
mov rsi, qword [rdi + 0x38]
imul rdi, qword [rdi + 0x40], 0x48
test rdi, rdi
je 0x140006989
mov rcx, qword [rsi + 0x30]
mov rdx, qword [rsi + 0x38]
call fcn.1400a0d76
cmp byte [rsi], 4
je 0x14000697f
mov rcx, rsi
call fcn.140009101
add rsi, 0x48
add rdi, 0xffffffffffffffb8
jmp 0x140006960
mov rax, qword [rsp + 0x580]
test rax, rax
je 0x140006a07
imul rdx, rax, 0x48
mov rcx, qword [rsp + 0x588]
mov r8d, 8
call fcn.14000a752
jmp 0x140006a07
mov rbx, qword [rsp + 0x640]
movzx eax, word [rsp + 0x648]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x64a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x64c]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x650]
mov r12, qword [rsp + 0x658]
mov r14b, 2
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0xb0], eax
lea rsi, [rsp + 0x3b0]
mov rcx, qword [rsi + 0x80]
mov rdx, qword [rsi + 0x88]
call fcn.1400a0d76
mov rcx, qword [rsi + 0x98]
mov rdx, qword [rsi + 0xa0]
call fcn.1400a0d76
mov rcx, qword [rsi + 0xb0]
mov rdx, qword [rsi + 0xb8]
call fcn.1400a0d76
mov rcx, rsi
call fcn.1400376c0
lea rcx, [rsp + 0x3e0]
call fcn.14003781d
lea rsi, [rsp + 0x478]
mov rcx, rsi
call fcn.140034ec1
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.14004dbc6
test byte [rsi - 0x68], 3
je 0x140006a94
mov rcx, qword [rsp + 0x418]
mov rdx, qword [rsp + 0x420]
call fcn.1400a0d76
cmp qword [rsp + 0x498], 0
je 0x140006aac
lea rcx, [rsp + 0x490]
call fcn.140009292
mov qword [rsp + 0x138], r12
lea rcx, [rsp + 0x4a8]
call fcn.140009310
cmp r14b, 2
je 0x140007147
mov r8d, r14d
movzx eax, word [rsp + 0x3b4]
mov word [rsp + 0x524], ax
mov eax, dword [rsp + 0x3b0]
mov dword [rsp + 0x520], eax
mov rdi, qword [rsp + 0x518]
mov rcx, qword [rdi]
mov rdx, qword [rdi + 8]
mov r13, qword [rdi + 0x18]
mov r12, qword [rdi + 0x20]
mov r14, qword [rdi + 0x30]
mov r15, qword [rdi + 0x38]
mov rax, qword [rdi + 0x48]
mov qword [rsp + 0x508], rax
mov rax, qword [rdi + 0x50]
mov qword [rsp + 0x500], rax
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x220], rax
mov rax, qword [rdi + 0x68]
mov qword [rsp + 0x510], rax
mov r10, qword [rdi + 0x78]
mov r11, qword [rdi + 0x80]
mov r9, qword [rdi + 0x90]
mov rsi, qword [rdi + 0x98]
mov al, byte [rdi + 0xaa]
mov qword [rdi], rbx
mov rbx, qword [rsp + 0x38]
mov word [rdi + 8], bx
mov rbx, qword [rsp + 0x48]
mov word [rdi + 0xa], bx
mov rbx, qword [rsp + 0x40]
mov dword [rdi + 0xc], ebx
mov qword [rdi + 0x10], rbp
mov rbp, qword [rsp + 0x138]
mov qword [rdi + 0x18], rbp
mov rbp, qword [rsp + 0xb8]
mov qword [rdi + 0x20], rbp
mov rbp, qword [rsp + 0x4f8]
mov qword [rdi + 0x28], rbp
mov rbp, qword [rsp + 0x320]
mov qword [rdi + 0x30], rbp
mov rbp, qword [rsp + 0x328]
mov qword [rdi + 0x38], rbp
mov rbp, qword [rsp + 0x4f0]
mov qword [rdi + 0x40], rbp
mov rbp, qword [rsp + 0x310]
mov qword [rdi + 0x48], rbp
mov rbp, qword [rsp + 0x318]
mov qword [rdi + 0x50], rbp
mov rbp, qword [rsp + 0x4e8]
mov qword [rdi + 0x58], rbp
mov rbp, qword [rsp + 0x308]
mov qword [rdi + 0x60], rbp
mov rbp, qword [rsp + 0x300]
mov qword [rdi + 0x68], rbp
mov rbp, qword [rsp + 0x4e0]
mov qword [rdi + 0x70], rbp
mov rbp, qword [rsp + 0x2f0]
mov qword [rdi + 0x78], rbp
mov rbp, qword [rsp + 0x2f8]
mov qword [rdi + 0x80], rbp
mov rbp, qword [rsp + 0x4d8]
mov qword [rdi + 0x88], rbp
mov rbp, qword [rsp + 0x2e0]
mov qword [rdi + 0x90], rbp
mov rbp, qword [rsp + 0x2e8]
mov qword [rdi + 0x98], rbp
mov rbp, qword [rsp + 0x4d0]
mov qword [rdi + 0xa0], rbp
mov ebp, dword [rsp + 0xb0]
mov word [rdi + 0xa8], bp
mov byte [rdi + 0xaa], r8b
mov bl, byte [rsp + 0xa8]
mov byte [rdi + 0xab], bl
mov bl, byte [rsp + 0xaf]
mov byte [rdi + 0xac], bl
mov bl, byte [rsp + 0xae]
mov byte [rdi + 0xad], bl
mov bl, byte [rsp + 0xad]
mov byte [rdi + 0xae], bl
mov bl, byte [rsp + 0xac]
mov byte [rdi + 0xaf], bl
mov bl, byte [rsp + 0xaa]
mov byte [rdi + 0xb0], bl
mov bl, byte [rsp + 0xab]
mov byte [rdi + 0xb1], bl
mov bl, byte [rsp + 0xa9]
mov byte [rdi + 0xb2], bl
mov bl, byte [rsp + 0xa7]
mov byte [rdi + 0xb3], bl
mov bl, byte [rsp + 0xa6]
mov byte [rdi + 0xb4], bl
mov bl, byte [rsp + 0xa5]
mov byte [rdi + 0xb5], bl
mov bl, byte [rsp + 0xa4]
mov byte [rdi + 0xb6], bl
mov bl, byte [rsp + 0xa3]
mov byte [rdi + 0xb7], bl
mov bl, byte [rsp + 0xa2]
mov byte [rdi + 0xb8], bl
mov bl, byte [rsp + 0xa1]
mov byte [rdi + 0xb9], bl
mov bl, byte [rsp + 0xa0]
mov byte [rdi + 0xba], bl
mov bl, byte [rsp + 0x9f]
mov byte [rdi + 0xbb], bl
mov bl, byte [rsp + 0x9e]
mov byte [rdi + 0xbc], bl
mov bl, byte [rsp + 0x9d]
mov byte [rdi + 0xbd], bl
mov bl, byte [rsp + 0x9c]
mov byte [rdi + 0xbe], bl
mov bl, byte [rsp + 0x9b]
mov byte [rdi + 0xbf], bl
mov bl, byte [rsp + 0x9a]
mov byte [rdi + 0xc0], bl
mov bl, byte [rsp + 0x99]
mov byte [rdi + 0xc1], bl
movzx ebx, word [rsp + 0x524]
mov word [rdi + 0xc6], bx
mov ebx, dword [rsp + 0x520]
mov dword [rdi + 0xc2], ebx
cmp al, 2
je 0x140006e26
mov rdi, r9
mov rbx, r10
mov rbp, r11
call fcn.1400a0d76
mov rcx, r13
mov rdx, r12
call fcn.1400a0d76
mov rcx, r14
mov rdx, r15
call fcn.1400a0d76
mov rcx, qword [rsp + 0x508]
mov rdx, qword [rsp + 0x500]
call fcn.1400a0d76
mov rcx, qword [rsp + 0x220]
mov rdx, qword [rsp + 0x510]
call fcn.1400a0d76
mov rcx, rbx
mov rdx, rbp
call fcn.1400a0d76
mov rcx, rdi
mov rdx, rsi
call fcn.1400a0d76
movaps xmm6, xmmword [rsp + 0x7b0]
add rsp, 0x7c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x60]
mov r12, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov qword [rsp + 0xb8], rsi
mov rcx, rbx
mov rdx, r13
call fcn.1400a0d76
mov r14b, 2
mov rbx, rdi
jmp 0x140006933
lea rax, [rsp + 0x160]
lea rcx, [rsp + 0x50]
mov qword [rcx], rax
lea r8, [rsp + 0x520]
mov qword [r8], rcx
lea rax, [0x14012a2e0]
mov qword [rsp + 0x20], rax
lea rcx, [0x14014aeb8]
lea r9, [0x1400c9478]
xor edx, edx
call fcn.1400b1bd0
jmp 0x140004b3d
movups xmm0, xmmword [rsp + 0x624]
movups xmm1, xmmword [rsp + 0x630]
movups xmmword [rsp + 0x5c], xmm1
movaps xmmword [rsp + 0x50], xmm0
lea rsi, [rsp + 0x710]
mov dword [rsi], eax
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi + 4], xmm0
movups xmm0, xmmword [rsp + 0x5c]
movups xmmword [rsi + 0x10], xmm0
lea rcx, [rsp + 0x520]
call fcn.14003fb41
lea rcx, [rsp + 0x478]
mov rdx, rsi
call fcn.14003fb7a
lea rcx, [rsp + 0x330]
call fcn.14003ced6
lea rcx, [rsp + 0x350]
call fcn.140034ed1
lea rcx, [rsp + 0x5b0]
call fcn.14000923c
jmp 0x14000603d
lea rsi, [rsp + 0x260]
mov rcx, rsi
xor edx, edx
jmp 0x140006f7a
lea rsi, [rsp + 0x260]
mov edx, 1
jmp 0x140006f77
lea rsi, [rsp + 0x260]
mov edx, 2
mov rcx, rsi
call fcn.1400afae4
mov rbx, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsi + 0x10]
mov r12, qword [rsi + 0x18]
mov rax, qword [rsi + 0x20]
jmp 0x140006928
lea rsi, [rsp + 0x260]
mov edx, 3
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 4
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 5
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 6
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 7
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 8
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 9
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 0xa
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 0xb
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 0xc
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, 0xd
jmp 0x140007302
lea rcx, str.assertion_failed:_last_end___desc.len__
lea r8, [0x1400c9b20]
mov edx, 0x28
jmp 0x1400071b4
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_84c898d65adf2f39a5a98507f1fe0ce10a2b8dbclibrary_std_src_synconce.rs
lea r8, [0x14012ab78]
jmp 0x1400071af
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x138], r13
mov rbp, rbx
jmp 0x14000712b
lea rsi, [rsp + 0x448]
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x138], rax
lea rcx, [rsp + 0x430]
call fcn.140034ed1
mov rcx, rsi
call fcn.140034ed1
lea rcx, [rsp + 0x460]
call fcn.140034ed1
lea rcx, [rsp + 0x3b0]
call fcn.1400376c0
lea rcx, [rsp + 0x3e0]
call fcn.14003781d
lea rcx, [rsp + 0x478]
call fcn.140034ea3
lea rcx, [rsp + 0x410]
call fcn.14003d312
mov rax, qword [rsp + 0x38]
mov rcx, rax
shr rcx, 0x10
mov qword [rsp + 0x48], rcx
shr rax, 0x20
mov qword [rsp + 0x40], rax
xor ebx, ebx
lea rcx, [rsp + 0x3b0]
mov qword [rcx], rbx
mov rax, qword [rsp + 0x38]
mov word [rcx + 8], ax
mov rax, qword [rsp + 0x48]
mov word [rcx + 0xa], ax
mov rax, qword [rsp + 0x40]
mov dword [rcx + 0xc], eax
mov qword [rcx + 0x10], rbp
mov rax, qword [rsp + 0x138]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0xb8]
mov qword [rcx + 0x20], rax
call fcn.1400382c7
ud2
lea rsi, [rsp + 0x260]
mov edx, 0xe
jmp 0x140007302
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_84c898d65adf2f39a5a98507f1fe0ce10a2b8dbclibrary_std_src_synconce.rs
lea r8, [0x1400c98a8]
mov edx, 0x2b
call fcn.1400b02b0
ud2
lea rsi, [rsp + 0x260]
mov edx, send
jmp 0x140007302
lea rcx, str.assertion_failed:__short.is_empty_____long.is_empty__
lea r8, [0x1400c9db8]
mov edx, 0x37
jmp 0x1400071b4
lea rcx, [0x1400ca56c]
lea r8, [0x1400ca5f8]
mov edx, 0x2d
jmp 0x1400071b4
lea rsi, [rsp + 0x260]
mov edx, send
jmp 0x140007302
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
jmp 0x1400072d0
lea rsi, [rsp + 0x260]
mov edx, send
jmp 0x140007302
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
jmp 0x1400072bb
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x310]
mov rdx, qword [rsp + 0x318]
call fcn.1400a0d76
mov rcx, qword [rsp + 0x320]
mov rdx, qword [rsp + 0x328]
call fcn.1400a0d76
mov rcx, r12
mov rdx, r15
call fcn.1400a0d76
mov r12, rbp
mov rbp, r14
jmp 0x140006e6e
lea rsi, [rsp + 0x260]
mov edx, send
jmp 0x140007302
lea rsi, [rsp + 0x260]
mov edx, reloc.WS2_32.dll_send
mov rcx, rsi
call fcn.1400afae4
mov rdi, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsi + 0x10]
mov r12, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
jmp 0x140006e6e
lea rsi, [rsp + 0x260]
mov edx, 0x14
mov rcx, rsi
call fcn.1400afae4
mov rdi, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov r14, qword [rsi + 0x10]
mov rbp, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
jmp 0x1400072d0
lea rsi, [rsp + 0x260]
mov edx, 0x15
mov rcx, rsi
call fcn.1400afae4
mov rdi, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov r14, qword [rsi + 0x10]
mov rbp, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
jmp 0x1400072bb
lea rsi, [rsp + 0x260]
mov edx, 0x16
jmp 0x1400075d3
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
jmp 0x1400079a2
lea rsi, [rsp + 0x260]
mov edx, 0x17
jmp 0x1400075d3
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x190], rax
movups xmm0, xmmword [rsp + 0x268]
movups xmm1, xmmword [rsp + 0x278]
movups xmm2, xmmword [rsp + 0x288]
movaps xmmword [rsp + 0x180], xmm2
movaps xmmword [rsp + 0x170], xmm1
movaps xmmword [rsp + 0x160], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x70], xmm2
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x1b0], rax
movaps xmmword [rsp + 0x1a0], xmm0
movups xmm0, xmmword [rsp + 0x68]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x388], rax
movaps xmmword [rsp + 0x370], xmm0
mov al, byte [rsp + 0x370]
cmp al, 1
jne 0x140007567
lea rsi, [rsp + 0x160]
and qword [rsi], 0
mov qword [rsi + 8], 1
and qword [rsi + 0x10], 0
mov rax, qword [rsp + 0x378]
movabs rcx, 0x2000000000
lea rdx, [rsp + 0x260]
mov qword [rdx + 0x30], rcx
mov byte [rdx + 0x38], 3
and qword [rdx + 0x10], 0
lea rcx, [rsp + 0x5b0]
and qword [rdx + 0x20], 0
mov qword [rcx], rax
mov qword [rdx], rsi
lea rax, [0x1400b4e08]
mov qword [rdx + 8], rax
call fcn.14002cce0
mov ecx, eax
call fcn.140009d1d
mov rcx, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
call fcn.140033970
lea rdx, str.C:Users_thefl.cargo_registry_srcgithub.com_1ecc6299db9ec823docopt_1.1.1_srcdopt.rs
mov ecx, eax
call fcn.140009e1b
mov dword [rsp + 0xb0], eax
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.1400a0d76
jmp 0x14000762f
lea rsi, [rsp + 0x260]
mov edx, 0x18
jmp 0x1400075d3
cmp al, 2
setne al
mov rcx, qword [rsp + 0x380]
test rcx, rcx
sete dl
xor esi, esi
or dl, al
cmove rsi, qword [rsp + 0x388]
lea rdi, str.ntdll.dll
cmove rdi, rcx
mov rcx, rdi
mov rdx, rsi
call fcn.140036600
test rdx, rdx
je 0x140007609
mov rcx, rdi
mov rdx, rsi
call fcn.140033970
mov dword [rsp + 0xb0], eax
test al, 1
jne 0x1400077f0
shr dword [rsp + 0xb0], 0x10
jmp 0x14000762f
lea rsi, [rsp + 0x260]
mov edx, 0x19
mov rcx, rsi
call fcn.1400afae4
mov rdi, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov r14, qword [rsi + 0x10]
mov rbp, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
jmp 0x1400072a6
lea rcx, [0x140126e2a]
mov edx, 1
call fcn.140033970
lea rdx, str.C:Users_thefl.cargo_registry_srcgithub.com_1ecc6299db9ec823docopt_1.1.1_srcdopt.rs
mov ecx, eax
call fcn.140009e1b
mov dword [rsp + 0xb0], eax
lea rcx, [rsp + 0x370]
call fcn.140009101
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
call fcn.1400a0d76
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000776a
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x9b], al
cmp al, 2
je 0x140007931
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000776a
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x9a], al
cmp al, 2
je 0x140007940
lea rsi, [rsp + 0x50]
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a55e
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x14000776a
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x2e8], rax
test rax, rax
je 0x14000794f
lea rsi, [rsp + 0x50]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x4d0], rax
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14000a670
mov rdi, qword [rsi]
cmp rdi, 7
jne 0x1400078ee
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x99], al
cmp al, 2
je 0x1400079bc
mov rax, r13
shr rax, 0x10
mov qword [rsp + 0x48], rax
mov rax, r13
shr rax, 0x20
mov qword [rsp + 0x40], rax
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0x38], r13
jmp 0x14000693a
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
jmp 0x14000798d
lea rsi, [rsp + 0x260]
mov edx, 0x1a
mov rcx, rsi
call fcn.1400afae4
mov rdi, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov r14, qword [rsi + 0x10]
mov rbp, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
jmp 0x1400079a2
lea rsi, [rsp + 0x260]
mov edx, 0x1b
jmp 0x14000795c
lea rax, [rsp + 0x5b0]
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x260], rax
lea rax, [fcn.140096f89]
mov qword [rsp + 0x268], rax
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], rax
lea rsi, [rsp + 0x1a0]
mov qword [rsp + 0x280], rsi
lea rax, str._bP_v_
lea rdx, [rsp + 0x160]
mov qword [rdx + 0x10], rax
lea rax, [0x14000a73f]
mov qword [rdx + 0x18], 4
and qword [rdx], 0
mov qword [rsp + 0x288], rax
lea rax, [rsp + 0x260]
mov qword [rdx + 0x20], rax
mov qword [rdx + 0x28], 3
lea rcx, [rsp + 0xf8]
call fcn.14000a31f
lea rcx, [rsp + 0x370]
call fcn.140009101
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call fcn.1400a0d76
mov edi, 3
movzx eax, word [rsp + 0xf8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0xfa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0xfc]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x100]
mov rbp, qword [rsp + 0x108]
mov rsi, qword [rsp + 0x110]
jmp 0x14000798d
movzx eax, word [rsp + 0x58]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x5a]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x2e0]
mov rdx, qword [rsp + 0x2e8]
call fcn.1400a0d76
jmp 0x14000798d
lea rsi, [rsp + 0x260]
mov edx, 0x1c
jmp 0x14000795c
lea rsi, [rsp + 0x260]
mov edx, 0x1d
jmp 0x14000795c
lea rsi, [rsp + 0x260]
mov edx, 0x1e
mov rcx, rsi
call fcn.1400afae4
mov rdi, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov r14, qword [rsi + 0x10]
mov rbp, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
mov rcx, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x2f8]
call fcn.1400a0d76
mov rcx, qword [rsp + 0x308]
mov rdx, qword [rsp + 0x300]
call fcn.1400a0d76
jmp 0x1400072a6
lea rsi, [rsp + 0x260]
mov edx, 0x1f
mov rcx, rsi
call fcn.1400afae4
mov rdi, qword [rsi]
movzx eax, word [rsi + 8]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + 0xa]
mov qword [rsp + 0x48], rax
mov eax, dword [rsi + 0xc]
mov qword [rsp + 0x40], rax
mov r14, qword [rsi + 0x10]
mov rbp, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
jmp 0x14000791a