Function at 0x140001160
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x90
xorps xmm0, xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x80], 0
mov r14, qword [0x140004020]
cmp dword [r14], 0
je 0x1400011b3
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov rax, qword gs:[0x30]
mov rsi, qword [rax + 8]
mov r15, qword [0x140004048]
xor eax, eax
lock cmpxchg qword [r15], rsi
sete bl
je 0x1400011f8
cmp rsi, rax
je 0x1400011f8
mov rdi, qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov ecx, 0x3e8
call rdi
xor eax, eax
lock cmpxchg qword [r15], rsi
sete bl
je 0x1400011f8
cmp rsi, rax
jne 0x1400011e0
mov rsi, qword [0x140004050]
mov eax, dword [rsi]
cmp eax, 1
jne 0x140001212
mov ecx, 0x1f
call dbg._amsg_exit
jmp 0x140001239
cmp dword [rsi], 0
je 0x140001220
mov byte [0x140007108], 1
jmp 0x140001239
mov dword [rsi], 1
mov rcx, qword [0x140004068]
mov rdx, qword [0x140004070]
call sub.api_ms_win_crt_runtime_l1_1_0.dll__initterm
mov eax, dword [rsi]
cmp eax, 1
jne 0x140001259
mov rcx, qword [0x140004058]
mov rdx, qword [0x140004060]
call sub.api_ms_win_crt_runtime_l1_1_0.dll__initterm
mov dword [rsi], 2
test bl, 1
je 0x140001263
xor eax, eax
xchg qword [r15], rax
mov rax, qword [0x140004008]
mov rax, qword [rax]
test rax, rax
je 0x14000127e
xor ecx, ecx
mov edx, 2
xor r8d, r8d
call rax
call dbg._pei386_runtime_relocator
lea rcx, [dbg._gnu_exception_handler]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov rcx, qword [0x140004040]
mov qword [rcx], rax
lea rcx, [dbg.__mingw_invalidParameterHandler]
call sub.api_ms_win_crt_runtime_l1_1_0.dll__set_invalid_parameter_handler
call dbg._fpreset
mov rax, qword [0x140004010]
mov qword [0x1400070d8], rax
call sub.api_ms_win_crt_runtime_l1_1_0.dll___p__acmdln
mov rax, qword [rax]
test rax, rax
je 0x140001317
dec rax
xor ecx, ecx
jmp 0x1400012e0
xor ebx, ebx
test ecx, ecx
sete bl
cmp dl, 0x22
cmove ecx, ebx
inc rax
movzx edx, byte [rax + 1]
cmp dl, 0x20
jg 0x1400012d0
test dl, dl
je 0x140001305
test ecx, ecx
jne 0x1400012d0
jmp 0x140001305
cmp cl, 0x21
jge 0x140001310
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x140001300
mov qword [0x1400070e0], rax
cmp dword [r14], 0
je 0x140001335
test byte [rsp + 0x5c], 1
movzx eax, word [rsp + 0x60]
mov ecx, 0xa
cmovne ecx, eax
mov dword [section..data], ecx
movsxd rsi, dword [0x1400070f0]
lea rcx, [rsi*8 + 8]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r14, rax
test rsi, rsi
jle 0x140001392
mov r15d, esi
mov rsi, qword [0x1400070f8]
xor ebx, ebx
nop dword [rax]
mov rcx, qword [rsi + rbx*8]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rdi, [rax + 1]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [r14 + rbx*8], rax
mov rdx, qword [rsi + rbx*8]
mov rcx, rax
mov r8, rdi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
inc rbx
cmp r15, rbx
jne 0x140001360
jmp 0x140001395
xor r15d, r15d
mov qword [r14 + r15*8], 0
mov qword [0x1400070f8], r14
call dbg.__main
mov rax, qword [0x140007100]
mov rcx, qword [0x140004018]
mov rcx, qword [rcx]
mov qword [rcx], rax
mov ecx, dword [0x1400070f0]
mov rdx, qword [0x1400070f8]
mov r8, qword [0x140007100]
call sym.main
mov dword [0x14000710c], eax
cmp dword [0x1400070e8], 0
je 0x140001408
cmp byte [0x140007108], 0
jne 0x1400013f9
call sub.api_ms_win_crt_runtime_l1_1_0.dll__cexit
mov eax, dword [0x14000710c]
add rsp, 0x90
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov ecx, eax
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3