Function at 0x14001132a
Capabilities:
Execute command

Disassembly:
jmp 0x140015ad0
push rbp
push rdi
sub rsp, 0x4a8
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0xb6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140025280]
xor rax, rbp
mov qword [rbp + 0x448], rax
lea rcx, [0x14002a234]
call fcn.14001148d
nop
lea rdx, [rbp + 0x2e8]
lea rcx, [rbp + 0x2c4]
call fcn.140015000
mov rcx, rax
call fcn.140011447
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x140025430], rax
cmp qword [0x140025430], 0
jne 0x140015b4d
mov eax, 0xffffffff
jmp 0x140015db2
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x314]
call fcn.140015070
mov rcx, rax
call fcn.140011091
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x140025440], rax
cmp qword [0x140025440], 0
jne 0x140015b8c
mov eax, 0xffffffff
jmp 0x140015db2
lea rdx, [rbp + 0x398]
lea rcx, [rbp + 0x374]
call fcn.1400150e0
mov rcx, rax
call fcn.140011424
mov qword [rbp + 0x438], rax
mov rax, qword [0x140025430]
mov qword [rbp + 0x440], rax
mov rdx, qword [rbp + 0x438]
mov rcx, qword [rbp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp + 0x3c4]
call fcn.140015150
mov rcx, rax
call fcn.140011276
mov qword [rbp + 0x438], rax
mov rax, qword [0x140025430]
mov qword [rbp + 0x440], rax
mov rdx, qword [rbp + 0x438]
mov rcx, qword [rbp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x48], 0xfffffffffffe7960
cmp qword [rbp + 8], 0
je 0x140015c32
cmp qword [rbp + 0x28], 0
jne 0x140015c3c
mov eax, 0xffffffff
jmp 0x140015db2
call fcn.140011406
mov dword [rbp + 0x64], eax
mov qword [rbp + 0x88], 0
lea rax, [rbp + 0xa8]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov dword [rbp + 0xd8], 0x30
mov qword [rbp + 0xe0], 0
mov dword [rbp + 0xf0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x100], 0
mov eax, dword [rbp + 0x64]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], 0
mov rax, qword [rbp + 8]
mov qword [rbp + 0x438], rax
lea r9, [rbp + 0xa8]
lea r8, [rbp + 0xd8]
mov edx, 0x1fffff
lea rcx, [rbp + 0x88]
call qword [rbp + 0x438]
mov dword [rbp + 0x124], eax
cmp dword [rbp + 0x124], 0
jge 0x140015cfb
mov eax, 0xfffffffe
jmp 0x140015db2
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 1
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8d, 0x2a00
lea rdx, section..data
mov rcx, qword [rbp + 0x88]
call fcn.1400112ad
movzx eax, al
test eax, eax
jne 0x140015d68
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x438], rax
mov rcx, qword [rbp + 0x88]
call qword [rbp + 0x438]
test eax, eax
jge 0x140015d61
mov eax, 0xfffffff8
jmp 0x140015db2
mov eax, 0xfffffff8
jmp 0x140015db2
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x438], rax
mov rcx, qword [rbp + 0x88]
call qword [rbp + 0x438]
test eax, eax
jge 0x140015d8b
mov eax, 0xffffffff
jmp 0x140015db2
lea rdx, [rbp + 0x424]
lea rcx, [rbp + 0x404]
call fcn.1400151b0
mov rcx, rax
call fcn.1400111ef
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_system]
nop
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x50]
lea rdx, [0x14001f440]
call fcn.1400113ed
mov rax, rdi
mov rcx, qword [rbp + 0x448]
xor rcx, rbp
call fcn.140011235
lea rsp, [rbp + 0x458]
pop rdi
pop rbp
ret