Function at 0x1400032a0
Capabilities:
Parse pe header

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp + 0x2f], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov r9, rcx
mov qword [rbp + 7], rcx
xor r15d, r15d
mov dword [rbp - 0x41], r15d
test rcx, rcx
je 0x140003ee2
mov eax, 0x5a4d
cmp word [rcx], ax
jne 0x140003ee2
movsxd rax, dword [rcx + 0x3c]
cmp eax, 0x400
jg 0x140003ee2
add rax, rcx
cmp dword [rax], 0x4550
jne 0x140003ee2
mov ecx, dword [rax + 0x90]
test ecx, ecx
je 0x140003ee2
mov r14d, dword [rax + 0x94]
mov qword [rbp + 0x1f], r14
mov eax, ecx
xor esi, esi
mov qword [rbp + 0xf], rsi
test r14, r14
je 0x140003ede
add rax, r9
mov qword [rbp + 0x27], rax
movabs r10, 0x8000000080000000
nop dword [rax]
mov edx, dword [rax + rsi]
test edx, edx
jne 0x140003361
cmp dword [rax + rsi + 0x10], edx
je 0x140003ede
mov r8d, dword [rax + rsi + 0xc]
add r8, r9
mov qword [rbp - 1], r8
mov ecx, dword [rax + rsi + 0x10]
xor esi, esi
mov qword [rbp - 0x49], rsi
mov qword [rbp - 9], rsi
lea rdi, [r9 + rcx]
mov qword [rbp - 0x11], rdi
test edx, edx
cmovne rcx, rdx
lea rdx, [rcx + r9]
mov qword [rbp - 0x19], rdx
mov ecx, esi
mov rax, qword [rdx + rcx]
test r10, rax
je 0x1400033d6
movzx ebx, ax
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov edx, ebx
call section..text
mov rcx, qword [rbp - 0x49]
mov qword [rdi + rcx], rax
mov rcx, qword [rbp - 9]
mov r8, qword [rbp - 1]
mov r9, qword [rbp + 7]
mov rdx, qword [rbp - 0x19]
movabs r10, 0x8000000080000000
jmp 0x1400033de
mov rax, qword [rbp - 0x49]
mov rax, qword [rdi + rax]
test rax, rax
je 0x140003ec3
mov rcx, qword [rdx + rcx]
cmp rax, rcx
jne 0x140003e94
lea r12, [rcx + 2]
add r12, r9
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x17], rax
cmp dword [0x140028d88], 0
je 0x140003559
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
mov r8d, 0xf
lea rdx, str.AeniLdnammoCteG
lea rcx, [rbp - 0x39]
call fcn.1400029e0
nop
or r15d, 1
mov dword [rbp - 0x41], r15d
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], rsi
lea rsi, [rbp - 0x39]
mov r14, qword [rbp - 0x39]
mov r13, qword [rbp - 0x21]
cmp r13, 0x10
cmovae rsi, r14
mov rdi, qword [rbp - 0x29]
cmp rdi, 0x10
jae 0x140003495
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x51], 0xf
lea rdx, [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
jmp 0x14000352b
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x1400034ea
lea rcx, [rax + 0x27]
cmp rcx, rax
mov rax, 0xffffffffffffffff
cmovbe rcx, rax
call fcn.140007694
mov rcx, rax
test rax, rax
je 0x140003f0b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400034f7
test rax, rax
je 0x1400034f7
mov rcx, rax
call fcn.140007694
mov qword [rbp - 0x69], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14000adf0
mov qword [rbp - 0x51], rbx
lea rdx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rdx, qword [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rcx, qword [rbp - 0x69]
mov qword [rbp - 0x59], rdi
call fcn.140007580
or r15d, 0x402
lea rdx, [rbp - 0x69]
cmp qword [rbp - 0x51], 0x10
cmovae rdx, qword [rbp - 0x69]
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003561
mov bl, 1
jmp 0x140003563
mov r13, qword [rbp - 0x21]
mov r14, qword [rbp - 0x39]
xor bl, bl
test r15b, 2
je 0x1400035bc
and r15d, 0xfffffffd
mov rdx, qword [rbp - 0x51]
cmp rdx, 0x10
jb 0x1400035a8
inc rdx
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f11
call fcn.1400076d0
xor esi, esi
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], 0xf
mov byte [rbp - 0x69], sil
jmp 0x1400035be
xor esi, esi
test r15b, 1
je 0x1400035ff
and r15d, 0xfffffffe
cmp r13, 0x10
jb 0x1400035ff
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400035f7
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f17
mov rcx, r14
call fcn.1400076d0
test bl, bl
je 0x14000361f
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003210]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x140003764
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
mov r8d, 0xf
lea rdx, str.WeniLdnammoCteG
lea rcx, [rbp - 0x39]
call fcn.1400029e0
nop
or r15d, 4
mov dword [rbp - 0x41], r15d
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], rsi
lea rsi, [rbp - 0x39]
mov r14, qword [rbp - 0x39]
mov r13, qword [rbp - 0x21]
cmp r13, 0x10
cmovae rsi, r14
mov rdi, qword [rbp - 0x29]
cmp rdi, 0x10
jae 0x1400036a0
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x51], 0xf
lea rdx, [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
jmp 0x140003736
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x1400036f5
lea rcx, [rax + 0x27]
cmp rcx, rax
mov rax, 0xffffffffffffffff
cmovbe rcx, rax
call fcn.140007694
mov rcx, rax
test rax, rax
je 0x140003f1d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003702
test rax, rax
je 0x140003702
mov rcx, rax
call fcn.140007694
mov qword [rbp - 0x69], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14000adf0
mov qword [rbp - 0x51], rbx
lea rdx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rdx, qword [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rcx, qword [rbp - 0x69]
mov qword [rbp - 0x59], rdi
call fcn.140007580
or r15d, 0x808
lea rdx, [rbp - 0x69]
cmp qword [rbp - 0x51], 0x10
cmovae rdx, qword [rbp - 0x69]
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x14000376c
mov bl, 1
jmp 0x14000376e
mov r13, qword [rbp - 0x21]
mov r14, qword [rbp - 0x39]
xor bl, bl
test r15b, 8
je 0x1400037c7
and r15d, 0xfffffff7
mov rdx, qword [rbp - 0x51]
cmp rdx, 0x10
jb 0x1400037b3
inc rdx
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f23
call fcn.1400076d0
xor esi, esi
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], 0xf
mov byte [rbp - 0x69], sil
jmp 0x1400037c9
xor esi, esi
test r15b, 4
je 0x14000380a
and r15d, 0xfffffffb
cmp r13, 0x10
jb 0x14000380a
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003802
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f29
mov rcx, r14
call fcn.1400076d0
test bl, bl
je 0x14000382a
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003200]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x14000396f
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
mov r8d, 0xe
lea rdx, str.sgraniamtegw__
lea rcx, [rbp - 0x39]
call fcn.1400029e0
nop
or r15d, 0x10
mov dword [rbp - 0x41], r15d
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], rsi
lea rsi, [rbp - 0x39]
mov r14, qword [rbp - 0x39]
mov r13, qword [rbp - 0x21]
cmp r13, 0x10
cmovae rsi, r14
mov rdi, qword [rbp - 0x29]
cmp rdi, 0x10
jae 0x1400038ab
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x51], 0xf
lea rdx, [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
jmp 0x140003941
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x140003900
lea rcx, [rax + 0x27]
cmp rcx, rax
mov rax, 0xffffffffffffffff
cmovbe rcx, rax
call fcn.140007694
mov rcx, rax
test rax, rax
je 0x140003f2f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000390d
test rax, rax
je 0x14000390d
mov rcx, rax
call fcn.140007694
mov qword [rbp - 0x69], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14000adf0
mov qword [rbp - 0x51], rbx
lea rdx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rdx, qword [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rcx, qword [rbp - 0x69]
mov qword [rbp - 0x59], rdi
call fcn.140007580
or r15d, 0x1020
lea rdx, [rbp - 0x69]
cmp qword [rbp - 0x51], 0x10
cmovae rdx, qword [rbp - 0x69]
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003977
mov bl, 1
jmp 0x140003979
mov r13, qword [rbp - 0x21]
mov r14, qword [rbp - 0x39]
xor bl, bl
test r15b, 0x20
je 0x1400039d2
and r15d, 0xffffffdf
mov rdx, qword [rbp - 0x51]
cmp rdx, 0x10
jb 0x1400039be
inc rdx
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f35
call fcn.1400076d0
xor esi, esi
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], 0xf
mov byte [rbp - 0x69], sil
jmp 0x1400039d4
xor esi, esi
test r15b, 0x10
je 0x140003a15
and r15d, 0xffffffef
cmp r13, 0x10
jb 0x140003a15
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003a0d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f3b
mov rcx, r14
call fcn.1400076d0
test bl, bl
je 0x140003a35
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003250]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x140003b7a
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
mov r8d, 0xd
lea rdx, str.sgraniamteg__
lea rcx, [rbp - 0x39]
call fcn.1400029e0
nop
or r15d, 0x40
mov dword [rbp - 0x41], r15d
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], rsi
lea rsi, [rbp - 0x39]
mov r14, qword [rbp - 0x39]
mov r13, qword [rbp - 0x21]
cmp r13, 0x10
cmovae rsi, r14
mov rdi, qword [rbp - 0x29]
cmp rdi, 0x10
jae 0x140003ab6
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x51], 0xf
lea rdx, [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
jmp 0x140003b4c
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x140003b0b
lea rcx, [rax + 0x27]
cmp rcx, rax
mov rax, 0xffffffffffffffff
cmovbe rcx, rax
call fcn.140007694
mov rcx, rax
test rax, rax
je 0x140003f41
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003b18
test rax, rax
je 0x140003b18
mov rcx, rax
call fcn.140007694
mov qword [rbp - 0x69], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14000adf0
mov qword [rbp - 0x51], rbx
lea rdx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rdx, qword [rbp - 0x69]
add rdx, rdi
lea rcx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rcx, qword [rbp - 0x69]
mov qword [rbp - 0x59], rdi
call fcn.140007580
or r15d, 0x2080
lea rdx, [rbp - 0x69]
cmp qword [rbp - 0x51], 0x10
cmovae rdx, qword [rbp - 0x69]
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003b82
mov bl, 1
jmp 0x140003b84
mov r13, qword [rbp - 0x21]
mov r14, qword [rbp - 0x39]
xor bl, bl
test r15b, r15b
jns 0x140003bdd
btr r15d, 7
mov rdx, qword [rbp - 0x51]
cmp rdx, 0x10
jb 0x140003bc9
inc rdx
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003bc4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f47
call fcn.1400076d0
xor esi, esi
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], 0xf
mov byte [rbp - 0x69], sil
jmp 0x140003bdf
xor esi, esi
test r15b, 0x40
je 0x140003c20
and r15d, 0xffffffbf
cmp r13, 0x10
jb 0x140003c20
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003c18
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f4d
mov rcx, r14
call fcn.1400076d0
test bl, bl
je 0x140003c40
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003270]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x140003dd1
lea rdx, str.__p___argv
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003c7c
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003220]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x140003dd1
lea rdx, str.__p___wargv
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003cb8
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003230]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x140003dd1
lea rdx, str.__p___argc
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003cf4
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003240]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x140003dd1
lea rdx, str.exit
mov rcx, r12
call fcn.14000dafc
test eax, eax
je 0x140003d4d
lea rdx, str._Exit
mov rcx, r12
call fcn.14000dafc
test eax, eax
je 0x140003d4d
lea rdx, str._exit
mov rcx, r12
call fcn.14000dafc
test eax, eax
je 0x140003d4d
lea rdx, str.quick_exit
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003d69
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
lea rax, [0x140003290]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
cmp dword [0x140028d88], 0
je 0x140003dd1
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
mov r8d, 0xb
lea rdx, str.ssecorPtixE
lea rcx, [rbp - 0x39]
call fcn.1400029e0
nop
bts r15d, 8
mov dword [rbp - 0x41], r15d
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x69]
call fcn.140006a20
bts r15d, 9
cmp qword [rax + 0x18], 0x10
jb 0x140003dbe
mov rax, qword [rax]
mov rdx, rax
mov rcx, r12
call fcn.14000dafc
test eax, eax
jne 0x140003dd1
mov bl, 1
jmp 0x140003dd3
xor bl, bl
bt r15d, 9
jae 0x140003e2a
btr r15d, 9
mov rdx, qword [rbp - 0x51]
cmp rdx, 0x10
jb 0x140003e1a
inc rdx
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f53
call fcn.1400076d0
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], 0xf
mov byte [rbp - 0x69], 0
bt r15d, 8
jae 0x140003e71
btr r15d, 8
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x140003e71
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f05
call fcn.1400076d0
test bl, bl
mov rax, qword [rbp + 0x17]
lea rcx, [0x140003290]
cmovne rax, rcx
mov rcx, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x11]
mov qword [rdi + rcx], rax
mov rdx, qword [rbp - 0x19]
jmp 0x140003e98
mov rcx, qword [rbp - 0x49]
add rcx, 8
mov qword [rbp - 0x49], rcx
mov rcx, qword [rbp - 9]
add rcx, 8
mov qword [rbp - 9], rcx
mov r8, qword [rbp - 1]
mov r9, qword [rbp + 7]
movabs r10, 0x8000000080000000
jmp 0x140003393
mov rsi, qword [rbp + 0xf]
add rsi, 0x14
mov qword [rbp + 0xf], rsi
cmp rsi, qword [rbp + 0x1f]
jae 0x140003ede
mov rax, qword [rbp + 0x27]
jmp 0x140003350
mov al, 1
jmp 0x140003ee4
xor al, al
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
int3
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
int3
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
int3
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
int3
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov qword [rbp + 0x17], 0xfffffffffffffffe
mov qword [rsp + 0x118], rbx
mov qword [rbp + 0xf], r8
mov r12, rcx
xor edi, edi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r13, 0xffffffffffffffff
mov r9d, r13d
mov r8, qword [0x140027a48]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
mov ecx, eax
add ecx, 1
cmovb rcx, r13
lea edx, [rdi + 2]
call fcn.14000dab4
mov qword [0x140027a40], rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, r13d
mov r8, qword [0x140027a48]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rdx, [0x140028d8c]
mov rcx, qword [0x140027a40]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [0x140028d90], rax
mov ecx, dword [0x140028d8c]
lea ebx, [rcx*8]
mov r14d, edi
test ecx, ecx
jle 0x140004072
mov esi, edi
nop dword [rax]
nop word [rax + rax]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, r13d
mov r8, qword [rsi + rax]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add ebx, eax
inc r14d
lea rsi, [rsi + 8]
cmp r14d, dword [0x140028d8c]
jge 0x140004072
mov rax, qword [0x140028d90]
jmp 0x140004030
movsxd rdx, ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [0x140028d80], rax
movsxd rdx, dword [0x140028d8c]
lea ecx, [rdx*8]
sub ebx, ecx
lea r14, [rax + rdx*8]
mov r15d, edi
test edx, edx
jle 0x1400040f3
mov rsi, rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r14
mov r9d, r13d
mov r8, qword [0x140028d90]
mov r8, qword [rsi + r8]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [0x140028d80]
mov qword [rsi + rcx], r14
movsxd rcx, eax
add r14, rcx
sub ebx, eax
inc r15d
lea rsi, [rsi + 8]
cmp r15d, dword [0x140028d8c]
jl 0x1400040a2
mov dword [0x140028d88], 1
test r12, r12
je 0x14000458e
mov eax, 0x5a4d
cmp word [r12], ax
jne 0x14000458e
movsxd rax, dword [r12 + 0x3c]
cmp eax, 0x400
jg 0x14000458e
mov r13, rax
mov ecx, dword [r12 + rax]
cmp ecx, 0x4550
jne 0x14000458e
cmp eax, 0x400
jg 0x140004158
cmp ecx, ecx
jne 0x140004158
lea r15, [r12 + 0xb0]
add r15, rax
cmp dword [r15], edi
cmove r15, rdi
jmp 0x14000415b
mov r15, rdi
mov rax, qword [r12 + rax + 0x30]
mov qword [rbp + 7], rax
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], 0xf
mov byte [rbp - 0x69], dil
mov r8d, 9
lea rdx, str.lld.lldtn
lea rcx, [rbp - 0x69]
call fcn.1400029e0
nop
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], rdi
lea rax, [rbp - 0x69]
mov rsi, qword [rbp - 0x69]
cmp qword [rbp - 0x51], 0x10
cmovae rax, rsi
mov qword [rbp - 0x29], rax
movabs rcx, 0x7fffffffffffffff
mov r14, qword [rbp - 0x59]
cmp r14, 0x10
jae 0x1400041d5
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x49], xmm0
mov ebx, 0xf
lea rax, [rbp - 0x49]
mov r8, qword [rbp - 0x49]
jmp 0x140004256
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
cmova rbx, rcx
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x140004220
lea rcx, [rax + 0x27]
cmp rcx, rax
mov rax, 0xffffffffffffffff
cmovbe rcx, rax
call fcn.140007694
mov rcx, rax
test rax, rax
je 0x140004596
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140004232
test rax, rax
je 0x14000422f
mov rcx, rax
call fcn.140007694
jmp 0x140004232
mov rax, rdi
mov qword [rbp - 0x49], rax
lea r8, [r14 + 1]
mov rdx, qword [rbp - 0x29]
mov rcx, rax
call fcn.14000adf0
lea rax, [rbp - 0x49]
mov r8, qword [rbp - 0x49]
cmp rbx, 0x10
cmovae rax, r8
mov qword [rbp - 0x31], rbx
mov qword [rbp - 0x39], r14
lea rdx, [r14 + rax]
lea rcx, [rbp - 0x49]
cmp rbx, 0x10
cmovae rcx, r8
call fcn.140007580
lea rcx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0x10
cmovae rcx, qword [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp - 1], rax
mov rdx, qword [rbp - 0x31]
cmp rdx, 0x10
jb 0x1400042c6
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000459c
call fcn.1400076d0
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], 0xf
mov byte [rbp - 0x49], 0
mov rax, qword [rbp - 0x51]
cmp rax, 0x10
jb 0x140004311
lea rdx, [rax + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140004309
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400045a2
mov rcx, rsi
call fcn.1400076d0
mov qword [rbp - 0x11], rdi
mov qword [rbp - 9], 0xf
mov byte [rbp - 0x21], 0
mov r8d, 0x14
lea rdx, str.noitceSfOweiVpamnUtN
lea rcx, [rbp - 0x21]
call fcn.1400029e0
nop
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], rdi
lea rax, [rbp - 0x21]
mov rsi, qword [rbp - 0x21]
cmp qword [rbp - 9], 0x10
cmovae rax, rsi
mov qword [rbp - 0x29], rax
mov r14, qword [rbp - 0x11]
cmp r14, 0x10
jae 0x140004378
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x69], xmm0
mov ebx, 0xf
lea rax, [rbp - 0x69]
mov r8, qword [rbp - 0x69]
jmp 0x140004403
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x1400043cd
lea rcx, [rax + 0x27]
cmp rcx, rax
mov rax, 0xffffffffffffffff
cmovbe rcx, rax
call fcn.140007694
mov rcx, rax
test rax, rax
je 0x1400045a8
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400043df
test rax, rax
je 0x1400043dc
mov rcx, rax
call fcn.140007694
jmp 0x1400043df
mov rax, rdi
mov qword [rbp - 0x69], rax
lea r8, [r14 + 1]
mov rdx, qword [rbp - 0x29]
mov rcx, rax
call fcn.14000adf0
lea rax, [rbp - 0x69]
mov r8, qword [rbp - 0x69]
cmp rbx, 0x10
cmovae rax, r8
mov qword [rbp - 0x51], rbx
mov qword [rbp - 0x59], r14
lea rdx, [rax + r14]
lea rcx, [rbp - 0x69]
cmp rbx, 0x10
cmovae rcx, r8
call fcn.140007580
nop
lea rdx, [rbp - 0x69]
cmp qword [rbp - 0x51], 0x10
cmovae rdx, qword [rbp - 0x69]
mov rcx, qword [rbp - 1]
call section..text
mov rdx, qword [r12 + r13 + 0x30]
mov rcx, 0xffffffffffffffff
call rax
nop
mov rdx, qword [rbp - 0x51]
cmp rdx, 0x10
jb 0x140004482
inc rdx
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000447d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400045ae
call fcn.1400076d0
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], 0xf
mov byte [rbp - 0x69], 0
mov rax, qword [rbp - 9]
cmp rax, 0x10
jb 0x1400044cd
lea rdx, [rax + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400044c5
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400045b4
mov rcx, rsi
call fcn.1400076d0
mov edx, dword [r12 + r13 + 0x50]
mov r9d, 0x40
mov r8d, 0x3000
mov rcx, qword [rbp + 7]
mov rbx, qword [rbp + 0xf]
call rbx
mov rsi, rax
test rax, rax
jne 0x140004514
test r15, r15
je 0x1400045ba
mov edx, dword [r12 + r13 + 0x50]
xor ecx, ecx
lea r9d, [rax + 0x40]
mov r8d, 0x3000
call rbx
mov rsi, rax
test rax, rax
je 0x140004586
mov qword [r12 + r13 + 0x30], rsi
mov r8d, dword [r12 + r13 + 0x54]
mov rdx, r12
mov rcx, rsi
call fcn.14000adf0
cmp di, word [r12 + r13 + 6]
jae 0x140004564
lea rbx, [r12 + 0x11c]
add rbx, r13
nop dword [rax]
mov r8d, dword [rbx - 4]
mov edx, dword [rbx]
add rdx, r12
mov ecx, dword [rbx - 8]
add rcx, rsi
call fcn.14000adf0
inc edi
lea rbx, [rbx + 0x28]
movzx eax, word [r12 + r13 + 6]
cmp edi, eax
jl 0x140004540
mov rcx, rsi
mov rbx, qword [rsp + 0x118]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp 0x1400032a0
xor ecx, ecx
call fcn.14000b4f4
int3
xor ecx, ecx
call fcn.14000b4f4
nop
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.14000da34
int3
call fcn.14000da34
nop
call fcn.14000da34
int3
xor ecx, ecx
call fcn.14000b4f4
int3