Function at 0x1400093c4
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x178
lea rbx, [0x140005e04]
mov ecx, 2
mov rdx, rbx
call sub.api_ms_win_crt_runtime_l1_1_0.dll_signal
mov rdx, rbx
mov ecx, 0xb
call sub.api_ms_win_crt_runtime_l1_1_0.dll_signal
mov rdx, rbx
mov ecx, 0x16
call sub.api_ms_win_crt_runtime_l1_1_0.dll_signal
mov rdx, rbx
mov ecx, 8
call sub.api_ms_win_crt_runtime_l1_1_0.dll_signal
mov rdx, rbx
mov ecx, 4
call sub.api_ms_win_crt_runtime_l1_1_0.dll_signal
lea rcx, [0x1401035e0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x1400033d4]
call fcn.140001410
call fcn.140007457
lea rcx, [0x140018298]
mov rbx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rbx
mov qword [0x140103040], rax
mov rcx, rax
test rax, rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
jne 0x14000947d
movaps xmm0, xmmword [0x140019660]
mov rcx, rax
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1400094bc
lea rdx, str.WinExec
call fcn.140003504
lea rcx, [0x1400182c8]
mov qword [0x140103070], rax
call rbx
mov qword [0x140103048], rax
mov rcx, rax
test rax, rax
jne 0x1400094c1
movaps xmm1, xmmword [0x140019670]
movaps xmmword [rsp + 0x90], xmm1
mov rcx, qword [rsp + 0x30]
call fcn.1400033e2
lea rdx, str.ShellExecuteW
call fcn.140003504
lea rcx, [0x1400182f8]
mov qword [0x140103068], rax
call rbx
mov qword [0x140103050], rax
mov rcx, rax
test rax, rax
jne 0x1400094fd
movaps xmm2, xmmword [0x140019680]
movaps xmmword [rsp + 0x90], xmm2
jmp 0x1400094b7
lea rsi, str.MultiByteToWideChar
mov rdx, rsi
call fcn.140003504
lea rcx, [0x140018338]
mov qword [0x1401035d8], rax
call rbx
mov qword [0x140103058], rax
mov rcx, rax
test rax, rax
jne 0x14000953f
movaps xmm3, xmmword [0x140019690]
movaps xmmword [rsp + 0x90], xmm3
jmp 0x1400094b7
lea rdx, str.FormatMessageW
call fcn.140003504
mov rcx, qword [0x140103058]
lea rdx, str.LocalFree
mov qword [0x1401035d0], rax
call fcn.140003504
mov rcx, qword [0x140103058]
lea rdx, str.GetLastError
mov qword [0x1401035c8], rax
call fcn.140003504
lea rcx, [0x140018378]
mov qword [0x1401035b8], rax
call rbx
mov qword [0x140103060], rax
mov rcx, rax
test rax, rax
jne 0x1400095b2
movaps xmm4, xmmword [0x1400196a0]
movaps xmmword [rsp + 0x90], xmm4
jmp 0x1400094b7
mov rdx, rsi
call fcn.140003504
mov rcx, qword [0x140103060]
lea rdx, str.WideCharToMultiByte
mov qword [0x1401035b0], rax
call fcn.140003504
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor ecx, ecx
mov qword [0x1401035c0], rax
call rbp
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov rcx, rax
call rdi
mov rsi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
mov edx, 0x8000
mov ecx, eax
call rsi
mov ecx, 1
call rbp
mov rcx, rax
call rdi
mov edx, 0x8000
mov ecx, eax
call rsi
mov ecx, 2
call rbp
mov rcx, rax
call rdi
mov edx, 0x8000
mov ecx, eax
call rsi
call fcn.140007457
lea rcx, [0x140018398]
call rbx
lea rcx, [0x1400171e0]
mov rsi, rax
call fcn.140010e10
cmp byte [rax], 0
mov rbx, rax
jne 0x140009666
test rsi, rsi
je 0x140009666
lea rdx, str.inet_ntop
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call fcn.140007457
lea rax, [0x14001f4a0]
mov rcx, qword [rsp + 0x30]
mov qword [0x1401035a0], 0xde2ac
mov qword [0x1401035a8], rax
lea rax, [rsp + 0x80]
movaps xmm5, xmmword [0x1401035a0]
mov rdx, rax
mov qword [rsp + 0x40], rax
movaps xmmword [rsp + 0x80], xmm5
call fcn.1400074b8
cmp byte [rbx], 0
mov rdi, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x98]
jne 0x14000a343
xor esi, esi
test rbp, rbp
je 0x1400096d1
lea rsi, [rbp + 8]
xor r13d, r13d
lea rcx, [rsp + 0xd8]
mov rdx, rdi
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], r13
call fcn.140005fde
mov rcx, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0xe0]
xor eax, eax
cmp rax, rdi
jl 0x140009715
cmp byte [rbx], 0
je 0x140009723
jmp 0x14000a343
mov r8b, byte [rsi + rax]
mov byte [rdx + rax + 8], r8b
inc rax
jmp 0x140009706
mov qword [0x140103590], rcx
movaps xmm0, xmmword [0x140019800]
lea rax, [0x140019820]
mov qword [0x140103598], rdx
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
mov qword [0x140103588], rax
mov qword [0x140103580], 0x5c74
movaps xmmword [rsp + 0x80], xmm0
call fcn.1400074b8
cmp byte [rbx], 0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
jne 0x14000a343
xor edi, edi
mov qword [0x140103570], rdx
mov edx, 0xa6a00
lea rcx, [rsp + 0xf8]
mov qword [0x140103578], rax
xor r12d, r12d
lea rax, [0x1400197e0]
mov qword [0x140103568], rax
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0x100], rdi
mov qword [0x140103560], 0x13
call fcn.140005fde
mov rax, qword [rsp + 0xf8]
lea rcx, [rsp + 0xe8]
mov edx, 0xa6a00
mov qword [rsp + 0xe8], r12
mov qword [0x140103550], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xf0], r12
mov qword [0x140103558], rax
call fcn.140005fde
mov rax, qword [rsp + 0xe8]
mov r14, qword [0x140103558]
mov r12, qword [rsp + 0xf0]
mov r13, qword [0x140103568]
mov qword [0x140103540], rax
lea rax, [r14 + 8]
mov rcx, qword [0x140103590]
mov qword [rsp + 0x48], rax
mov rax, qword [0x140103598]
mov rdi, qword [rsp + 0x48]
mov qword [0x140103548], r12
lea rsi, [rax + 8]
mov r15, qword [0x140103560]
rep movsb byte [rdi], byte [rsi]
test r13, r13
je 0x14000986d
add r13, 8
mov edx, 0x20
lea rcx, [0x140103520]
xor esi, esi
xor r9d, r9d
call fcn.140001bc4
lea rax, [rsp + 0x108]
mov edx, 0x68
mov rcx, rax
mov qword [rsp + 0x38], rax
call fcn.140001bc4
mov qword [rsp + 0x108], rsi
xor esi, esi
movabs rax, 0xbb67ae856a09e667
mov qword [rsp + 0x110], rax
cmp byte [rbx], 0
movabs rax, 0xa54ff53a3c6ef372
mov qword [rsp + 0x118], rax
movabs rax, 0x9b05688c510e527f
mov qword [rsp + 0x120], rax
movabs rax, 0x5be0cd191f83d9ab
mov qword [rsp + 0x128], rax
jne 0x140009aaf
lea rax, [rsp + 0x130]
mov qword [rsp + 0x50], rax
mov edx, esi
and edx, 0x3f
mov r10d, edx
test r15, r15
jle 0x140009979
mov eax, 0x40
mov rdi, qword [rsp + 0x38]
lea rsi, [r13 + r9]
sub rax, r10
cmp rax, r15
cmovg rax, r15
add edx, 0x28
add rdx, rdi
mov ecx, eax
mov rdi, rdx
add r9, rax
sub r15, rax
rep movsb byte [rdi], byte [rsi]
add eax, dword [rsp + 0x108]
mov dword [rsp + 0x108], eax
mov esi, eax
jae 0x140009957
inc dword [rsp + 0x10c]
test al, 0x3f
jne 0x140009905
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x58], r9
call fcn.14000363d
mov r9, qword [rsp + 0x58]
jmp 0x140009905
mov edx, 0x20
lea rcx, [0x140103520]
lea rdi, [rsp + 0x130]
call fcn.140001bc4
lea r15, [rsp + 0x110]
lea rax, [r10 + 1]
mov byte [rsp + r10 + 0x130], pe_nt_image_headers64
cmp rax, 0x38
jne 0x1400099f6
mov edx, dword [rsp + 0x10c]
mov eax, esi
lea rcx, [rsp + 0x110]
shl esi, 3
shr eax, 0x1d
mov dword [rsp + 0x108], esi
bswap esi
lea eax, [rax + rdx*8]
lea rdx, [rsp + 0x130]
mov dword [rsp + 0x16c], esi
mov dword [rsp + 0x10c], eax
bswap eax
mov dword [rsp + 0x168], eax
call fcn.14000363d
jmp 0x140009a1b
cmp rax, 0x40
jne 0x140009a0e
mov rdx, rdi
mov rcx, r15
call fcn.14000363d
cmp byte [rbx], 0
jne 0x140009a1b
xor eax, eax
mov byte [rsp + rax + 0x130], 0
inc rax
jmp 0x1400099a7
cmp byte [rbx], 0
jne 0x140009a98
mov eax, dword [rsp + 0x110]
bswap eax
mov dword [0x140103520], eax
mov eax, dword [rsp + 0x114]
bswap eax
mov dword [0x140103524], eax
mov eax, dword [rsp + 0x118]
bswap eax
mov dword [0x140103528], eax
mov eax, dword [rsp + 0x11c]
bswap eax
mov dword [0x14010352c], eax
mov eax, dword [rsp + 0x120]
bswap eax
mov dword [0x140103530], eax
mov eax, dword [rsp + 0x124]
bswap eax
mov dword [0x140103534], eax
mov eax, dword [rsp + 0x128]
bswap eax
mov dword [0x140103538], eax
mov eax, dword [rsp + 0x12c]
bswap eax
mov dword [0x14010353c], eax
cmp byte [rbx], 0
jne 0x140009aaf
lea rcx, [rsp + 0x108]
mov edx, 0x68
call fcn.140001bd4
cmp byte [rbx], 0
jne 0x14000a343
movaps xmm1, xmmword [0x140103520]
movaps xmm2, xmmword [0x140103530]
mov rax, qword [0x140103578]
movaps xmmword [0x140103500], xmm1
movaps xmmword [0x140103510], xmm2
movups xmm3, xmmword [rax + 8]
movaps xmmword [0x1401034f0], xmm3
call fcn.140002502
cmp byte [rbx], 0
jne 0x14000a343
movaps xmm4, xmmword [0x1401034f0]
movups xmmword [0x1401034a8], xmm4
cmp byte [rbx], 0
jne 0x14000a343
test r12, r12
je 0x140009b14
add r12, 8
mov rdx, qword [0x140103550]
test r14, r14
jne 0x140009b28
xor r11d, r11d
mov qword [rsp + 0x48], r11
mov rcx, qword [rsp + 0x48]
mov r8, r12
call fcn.140001e90
cmp byte [rbx], 0
jne 0x14000a343
mov edx, 0x410
lea rcx, [0x1401030e0]
call fcn.140001bd4
cmp byte [rbx], 0
jne 0x14000a343
movaps xmm5, xmmword [0x140103580]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
movaps xmmword [rsp + 0x80], xmm5
call fcn.1400074b8
cmp byte [rbx], 0
mov r13, qword [rsp + 0x90]
mov r12, qword [rsp + 0x98]
jne 0x14000a343
lea rax, [0x1400197c0]
mov rdx, qword [rsp + 0x30]
xor r10d, r10d
mov qword [0x1401030a0], 0x34
mov qword [0x1401030b8], rax
lea rax, [0x140019780]
mov r14, qword [0x1401030a0]
mov qword [0x1401030a8], rax
lea rax, [rsp + 0xc8]
mov r15, qword [0x1401030a8]
mov rcx, rax
mov qword [rsp + 0x48], rax
mov qword [0x1401030c0], r13
mov qword [0x1401030c8], r12
mov qword [0x1401030b0], 9
mov qword [rsp + 0xc8], r10
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], r15
call fcn.14000544e
cmp byte [rbx], 0
jne 0x140009d7b
test al, al
jne 0x140009ccd
mov ecx, 0x50
lea r12, str.IOError
lea rdi, [0x1400171a0]
call fcn.140003113
mov rcx, qword [rsp + 0x38]
mov edx, 0x41
mov qword [rax + 0x10], rdi
lea rsi, [rax + 0x10]
mov qword [rax + 0x20], r12
call fcn.140003356
movaps xmm0, xmmword [0x1400196c0]
mov rdx, qword [rsp + 0x30]
xor r9d, r9d
mov rcx, qword [rsp + 0x38]
movaps xmmword [rsp + 0x90], xmm0
call fcn.140001b94
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], r15
call fcn.140001b94
movups xmm1, xmmword [rsp + 0x108]
mov qword [rsi + 8], r9
mov rdx, r12
lea r9, str.syncio.nim
lea r8, str.writeFile
mov rcx, rsi
movups xmmword [rsi + 0x18], xmm1
mov qword [rsp + 0x20], 0x364
call fcn.140006054
jmp 0x140009d7b
mov rsi, qword [rsp + 0xc8]
lea r8, section..rdata
test r13, r13
je 0x140009ce6
lea r8, [r12 + 8]
lea r14, [0x140018067]
mov rcx, rsi
mov rdx, r14
call fcn.1400050af
movsxd r15, eax
cmp r13, r15
jle 0x140009d60
cmp byte [r12 + r15 + 8], 0
je 0x140009d23
lea r8, [r15 + r12 + 8]
mov rdx, r14
mov rcx, rsi
call fcn.1400050af
test eax, eax
jle 0x140009d47
cdqe
add r15, rax
jmp 0x140009cfb
xor ecx, ecx
mov rdx, rsi
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
test eax, eax
jne 0x140009d36
inc r15
jmp 0x140009cfb
movaps xmm2, xmmword [0x1400196b0]
movaps xmmword [rsp + 0x90], xmm2
jmp 0x140009d56
movaps xmm3, xmmword [0x1400196b0]
movaps xmmword [rsp + 0x90], xmm3
mov rcx, qword [rsp + 0x30]
call fcn.140006145
mov r12b, byte [rbx]
mov byte [rbx], 0
test rsi, rsi
je 0x140009d73
mov rcx, rsi
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
cmp byte [rbx], 0
jne 0x140009d7b
mov byte [rbx], r12b
cmp byte [rbx], 0
jne 0x14000a343
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x70]
movaps xmm4, xmmword [0x1401030b0]
movaps xmm5, xmmword [0x140019770]
mov qword [rsp + 0x58], r9
movaps xmm0, xmmword [0x140019760]
mov qword [rsp + 0x50], r8
movaps xmmword [rsp + 0x80], xmm4
movaps xmmword [rsp + 0x70], xmm5
movaps xmmword [rsp + 0x60], xmm0
call fcn.140008b95
cmp byte [rbx], 0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
jne 0x14000a343
mov qword [0x140103090], rdx
movaps xmm1, xmmword [0x1401030a0]
movaps xmm2, xmmword [0x140019770]
movaps xmm3, xmmword [0x140019760]
mov qword [0x140103098], rax
mov rdx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x58]
movaps xmmword [rsp + 0x80], xmm1
mov r8, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x30]
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm3
call fcn.140008b95
cmp byte [rbx], 0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
jne 0x14000a343
lea rsi, [rsp + 0xa8]
mov qword [0x140103080], rdx
add rdx, 0xd
mov rcx, rsi
mov qword [0x140103088], rax
call fcn.140003356
movaps xmm4, xmmword [0x140019750]
mov rdx, qword [rsp + 0x30]
mov rcx, rsi
movaps xmmword [rsp + 0x90], xmm4
call fcn.140001b94
movaps xmm5, xmmword [0x140103080]
mov rdx, qword [rsp + 0x30]
mov rcx, rsi
movaps xmmword [rsp + 0x90], xmm5
call fcn.140001b94
movups xmm0, xmmword [rsp + 0xa8]
mov rcx, qword [rsp + 0x30]
mov r15, qword [rsp + 0xb0]
movaps xmmword [rsp + 0x90], xmm0
call fcn.140001dfe
cmp byte [rbx], 0
mov rcx, rax
jne 0x14000a32f
xor edx, edx
lea rsi, [rsp + 0xb8]
call qword [0x140103070]
mov rax, qword [0x140103090]
mov rcx, rsi
lea rdx, [rax + 0x13]
call fcn.140003356
movaps xmm1, xmmword [0x140019740]
mov rdx, qword [rsp + 0x30]
mov rcx, rsi
movaps xmmword [rsp + 0x90], xmm1
call fcn.140001b94
movaps xmm2, xmmword [0x140103090]
mov rdx, qword [rsp + 0x30]
mov rcx, rsi
movaps xmmword [rsp + 0x90], xmm2
call fcn.140001b94
mov rdi, qword [0x140103548]
mov rsi, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xb8]
mov r8, qword [0x140103540]
test rdi, rdi
je 0x140009f58
add rdi, 8
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], r8
xor r8d, r8d
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], rsi
call fcn.14000544e
cmp byte [rbx], 0
jne 0x14000a1f7
test al, al
mov r8, qword [rsp + 0x40]
jne 0x14000a04c
mov ecx, 0x50
call fcn.140003113
lea rdx, [0x1400171a0]
mov rcx, qword [rsp + 0x38]
lea rdi, [rax + 0x10]
mov qword [rax + 0x10], rdx
lea rax, str.IOError
mov qword [rdi + 0x10], rax
lea rdx, [r14 + 0xd]
call fcn.140003356
mov rdx, qword [rsp + 0x30]
movaps xmm3, xmmword [0x1400196c0]
lea r9, str.syncio.nim
mov rcx, qword [rsp + 0x38]
movaps xmmword [rsp + 0x90], xmm3
call fcn.140001b94
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], rsi
call fcn.140001b94
movups xmm4, xmmword [rsp + 0x108]
xor ecx, ecx
lea rax, str.IOError
mov qword [rdi + 8], rcx
lea r8, str.writeFile
mov rdx, rax
mov rcx, rdi
movups xmmword [rdi + 0x18], xmm4
mov qword [rsp + 0x20], 0x371
call fcn.140006054
jmp 0x14000a1f7
mov rax, qword [rsp + 0xc8]
mov rcx, rdi
mov edx, 1
mov r9, rax
mov qword [rsp + 0x40], rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov rcx, qword [rsp + 0x40]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_ferror
test eax, eax
je 0x14000a1df
mov rdi, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
call rdi
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rax]
call fcn.140006fb0
cmp byte [rbx], 0
mov r14, qword [rsp + 0x90]
mov r13, qword [rsp + 0x98]
jne 0x14000a1cb
call rdi
mov ecx, dword [rax]
call sub.api_ms_win_crt_runtime_l1_1_0.dll_strerror
mov rcx, qword [rsp + 0x30]
mov rdx, rax
call fcn.14000309d
mov rdi, qword [rsp + 0x90]
lea rax, [rsp + 0x108]
mov r12, qword [rsp + 0x98]
mov rcx, rax
mov qword [rsp + 0x38], rax
lea rdx, [r14 + rdi + 0xa]
call fcn.140003356
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
movaps xmm5, xmmword [0x1400196f0]
movaps xmmword [rsp + 0x90], xmm5
call fcn.140001b94
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], r13
call fcn.140001b94
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
movaps xmm0, xmmword [0x1400196e0]
movaps xmmword [rsp + 0x90], xmm0
call fcn.140001b94
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], r12
call fcn.140001b94
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
movaps xmm1, xmmword [0x1400196d0]
movaps xmmword [rsp + 0x90], xmm1
call fcn.140001b94
mov rcx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x108]
mov r14, qword [rsp + 0x110]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_clearerr
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], r14
call fcn.140006145
test r12, r12
je 0x14000a1cb
test byte [r12 + 7], 0x40
jne 0x14000a1cb
mov rcx, r12
call fcn.140005277
test r13, r13
je 0x14000a1df
test byte [r13 + 7], 0x40
jne 0x14000a1df
mov rcx, r13
call fcn.140005277
mov dil, byte [rbx]
mov rcx, qword [rsp + 0x40]
mov byte [rbx], 0
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
cmp byte [rbx], 0
jne 0x14000a1f7
mov byte [rbx], dil
cmp byte [rbx], 0
jne 0x14000a31c
mov rax, qword [0x140103090]
lea r12, [rsp + 0xc8]
lea rdi, [rsp + 0x90]
mov rcx, r12
lea rdx, [rax + 0x17]
call fcn.140003356
movaps xmm2, xmmword [0x140019730]
mov rcx, r12
mov rdx, rdi
movaps xmmword [rsp + 0x90], xmm2
call fcn.140001b94
movaps xmm3, xmmword [0x140103090]
mov rcx, r12
mov rdx, rdi
movaps xmmword [rsp + 0x90], xmm3
call fcn.140001b94
movups xmm4, xmmword [rsp + 0xc8]
mov rcx, rdi
mov r12, qword [rsp + 0xd0]
movaps xmmword [rsp + 0x90], xmm4
call fcn.140001dfe
cmp byte [rbx], 0
mov rcx, rax
jne 0x14000a307
xor edx, edx
call qword [0x140103070]
movaps xmm5, xmmword [0x140019720]
mov rcx, rdi
movaps xmmword [rsp + 0x90], xmm5
call fcn.14000659a
cmp byte [rbx], 0
mov r13, rax
jne 0x14000a307
movaps xmm0, xmmword [0x140019710]
mov rcx, rdi
movaps xmmword [rsp + 0x90], xmm0
call fcn.14000659a
cmp byte [rbx], 0
mov qword [rsp + 0x30], rax
jne 0x14000a307
movaps xmm1, xmmword [0x140019700]
mov rcx, rdi
movaps xmmword [rsp + 0x90], xmm1
call fcn.14000659a
cmp byte [rbx], 0
mov r9, rax
jne 0x14000a307
xor edx, edx
xor eax, eax
mov r8, qword [rsp + 0x30]
xor ecx, ecx
mov qword [rsp + 0x20], rdx
mov rdx, r13
mov dword [rsp + 0x28], eax
call qword [0x140103068]
test r12, r12
je 0x14000a31c
test byte [r12 + 7], 0x40
jne 0x14000a31c
mov rcx, r12
call fcn.140005277
test rsi, rsi
je 0x14000a32f
test byte [rsi + 7], 0x40
jne 0x14000a32f
mov rcx, rsi
call fcn.140005277
test r15, r15
je 0x14000a343
test byte [r15 + 7], 0x40
jne 0x14000a343
mov rcx, r15
call fcn.140005277
test rbp, rbp
je 0x14000a356
test byte [rbp + 7], 0x40
jne 0x14000a356
mov rcx, rbp
call fcn.140005277
cmp byte [rbx], 0
jne 0x14000a452
mov rcx, qword [0x140103088]
test rcx, rcx
je 0x14000a376
test byte [rcx + 7], 0x40
jne 0x14000a376
call fcn.140005277
mov rcx, qword [0x140103098]
test rcx, rcx
je 0x14000a38d
test byte [rcx + 7], 0x40
jne 0x14000a38d
call fcn.140005277
mov rcx, qword [0x1401030a8]
test rcx, rcx
je 0x14000a3a4
test byte [rcx + 7], 0x40
jne 0x14000a3a4
call fcn.140005277
mov rcx, qword [0x1401030b8]
test rcx, rcx
je 0x14000a3bb
test byte [rcx + 7], 0x40
jne 0x14000a3bb
call fcn.140005277
mov rcx, qword [0x1401030c8]
test rcx, rcx
je 0x14000a3d2
test byte [rcx + 7], 0x40
jne 0x14000a3d2
call fcn.140005277
mov rcx, qword [0x140103548]
call fcn.14000551c
mov rcx, qword [0x140103558]
call fcn.14000551c
mov rcx, qword [0x140103568]
test rcx, rcx
je 0x14000a401
test byte [rcx + 7], 0x40
jne 0x14000a401
call fcn.140005277
mov rcx, qword [0x140103578]
test rcx, rcx
je 0x14000a418
test byte [rcx + 7], 0x40
jne 0x14000a418
call fcn.140005277
mov rcx, qword [0x140103588]
test rcx, rcx
je 0x14000a42f
test byte [rcx + 7], 0x40
jne 0x14000a42f
call fcn.140005277
mov rcx, qword [0x140103598]
call fcn.14000551c
mov rcx, qword [0x1401035a8]
test rcx, rcx
je 0x14000a452
test byte [rcx + 7], 0x40
jne 0x14000a452
call fcn.140005277
call fcn.140007457
xor eax, eax
add rsp, 0x178
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
push rdi
push rsi
push rbx
sub rsp, 0x90
xor esi, esi
call fcn.14000a520
call sub.api_ms_win_crt_runtime_l1_1_0.dll___p__acmdln
mov rbx, qword [rax]
test rbx, rbx
jne 0x14001692b
jmp 0x1400169a1
test cl, cl
je 0x140016958
and esi, 1
je 0x140016940
mov esi, 1
call sub.api_ms_win_crt_multibyte_l1_1_0.dll__ismbblead
test eax, eax
je 0x140016927
cmp byte [rbx + 1], 1
sbb rbx, 0xffffffffffffffff
add rbx, 1
movsx ecx, byte [rbx]
cmp cl, 0x20
jle 0x140016908
mov eax, esi
xor eax, 1
cmp cl, 0x22
cmove esi, eax
jmp 0x140016916
test cl, cl
je 0x140016958
nop dword [rax]
movzx eax, byte [rbx + 1]
add rbx, 1
test al, al
je 0x140016958
cmp al, 0x20
jle 0x140016948
lea rdx, [rsp + 0x20]
xor eax, eax
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov r9d, 0xa
test byte [rsp + 0x5c], 1
je 0x140016986
movzx r9d, word [rsp + 0x60]
mov rcx, qword [0x1400ff460]
mov r8, rbx
xor edx, edx
add rsp, 0x90
pop rbx
pop rsi
pop rdi
jmp 0x1400093c4
lea rbx, [0x1400feb20]
jmp 0x140016958