Function at 0x140033810
Capabilities:
Terminate process

Disassembly:
push rbx
push rsi
sub rsp, 0x468
mov rsi, rdx
mov rax, qword [0x140050bc0]
pxor xmm0, xmm0
xor rax, rsp
mov qword [rsp + 0x460], rax
movsxd rbx, ecx
movdqu xmmword [rsp + 0x50], xmm0
cmp qword [0x1400565e8], 0
je 0x140033cbd
cmp rbx, 2
jge 0x140033b25
lea rax, [0x140000000]
mov rdx, rsi
mov rax, qword [rax + rbx*8 + 0x565e8]
and rdx, rax
cmp rdx, rsi
jne 0x14003389b
mov rcx, qword [rsp + 0x460]
mov qword [rsp + 0x460], 0
xor rcx, rsp
cmp rcx, qword [0x140050bc0]
jne 0x140033b6d
add rsp, 0x468
pop rsi
pop rbx
ret
not rax
mov ecx, 0x39
and rax, rsi
xor esi, esi
xor edx, edx
mov qword [rsp + rbx*8 + 0x50], rax
call fcn.140035c60
nop
mov ebx, 1
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov r12, rsi
mov qword [rsp + 0x38], r13
mov r13, rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov r15, rsi
mov qword [rsp + 0x20], rbp
mov eax, ebx
call fcn.140034260
test eax, eax
jl 0x140033a0f
mov edx, ebx
lea rcx, [rsp + 0x50]
call fcn.1400344a0
test eax, eax
je 0x140033a0f
mov edx, ebx
lea rcx, [rsp + 0x50]
call fcn.1400344a0
test eax, eax
jl 0x140033c51
mov ecx, ebx
call fcn.140034220
mov r14, rax
test r14, r14
je 0x140033be6
cmp byte [r14], 0
je 0x140033be6
cmp byte [rsp + 0x60], 0
je 0x1400339e8
test r15, r15
je 0x1400339e3
mov rcx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
lea rcx, [0x140040f50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbp, rax
mov rcx, r13
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add rsi, r12
add rsi, rbp
add rsi, rdi
add rsi, rax
cmp rsi, 0x400
jae 0x140033b73
neg r12
lea rcx, [rsp + 0x60]
add r12, 0x3ff
lea rdx, [0x140040f50]
mov r8, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x60]
neg r8
mov rdx, r15
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r12, eax
mov r15, r14
jmp 0x140033a0f
neg r12
lea rcx, [rsp + 0x60]
add r12, 0x3ff
mov rdx, r14
mov r8, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r12, eax
inc ebx
cmp ebx, 0x47
jl 0x1400338e6
mov rsi, r15
mov r8, r12
mov rdi, qword [rsp + 0x48]
mov rax, r13
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
test rsi, rsi
je 0x140033a81
neg r8
lea rcx, [rsp + 0x60]
add r8, 0x3ff
mov rdx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x60]
neg r8
mov rdx, rsi
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
cmp byte [rsp + 0x60], 0
jne 0x140033ada
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.140035e90
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x140050bc0]
jne 0x140033b6d
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov ecx, 1
mov edx, 0x38
mov r8d, ecx
lea r9, [rsp + 0x60]
call fcn.140035e90
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x140050bc0]
jne 0x140033b6d
jmp 0x140033ad0
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.140035e90
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x140050bc0]
je 0x140033ad0
call fcn.140039fc0
nop
mov r8, r12
mov rax, r13
neg r8
lea rcx, [rsp + 0x60]
add r8, 0x3ff
mov rdx, rax
mov rdi, qword [rsp + 0x48]
mov rsi, r15
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
nop
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x60]
neg r8
mov rdx, rsi
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
nop
jmp 0x140033a81
mov rdi, qword [rsp + 0x48]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.140035e90
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x140050bc0]
jne 0x140033b6d
jmp 0x140033ad0
xor edx, edx
mov ecx, 1
xor r8d, r8d
mov rdi, qword [rsp + 0x48]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
call fcn.140035e90
nop
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.140035e90
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x140050bc0]
jne 0x140033b6d
jmp 0x140033ad0
call fcn.140035030
test eax, eax
jne 0x140033cd4
cmp qword [0x1400565e8], 0
jne 0x140033849
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov ecx, 1
mov edx, 0x3b
xor r8d, r8d
call fcn.140035e90
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.140035e90
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x140050bc0]
jne 0x140033b6d
jmp 0x140033ad0