Function at 0x1400015f0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor ebx, ebx
mov al, 0x41
mov byte [rbp - 0x79], al
lea edi, [rbx + 0xf]
mov r8d, 0x5c3a
mov ecx, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
mov qword [rbp - 0x41], rcx
mov qword [rbp - 0x39], rdi
movzx eax, al
mov byte [rbp - 0x51], al
mov byte [rbp - 0x50], 0
mov rax, rdi
sub rax, rcx
cmp rax, 2
jb 0x140001681
lea rax, [rcx + 2]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x51]
cmp rdi, 0xf
cmova rax, qword [rbp - 0x51]
mov word [rax + rcx], r8w
mov byte [rax + rcx + 2], 0
lea rax, [rbp - 0x51]
jmp 0x14000169f
mov qword [rsp + 0x20], 2
lea r9, [0x140003870]
mov edx, 2
lea rcx, [rbp - 0x51]
call fcn.140001b90
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x71], xmm1
movups xmmword [rbp + 7], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp + 0x17], xmm0
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
mov byte [rax], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 0xf
jbe 0x140001704
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400019bc
call fcn.14000211c
movups xmm0, xmmword [rbp - 0x29]
movups xmm1, xmmword [rbp - 0x71]
mov qword [rbp - 0x41], rbx
mov qword [rbp - 0x39], rdi
mov byte [rbp - 0x51], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
movq r14, xmm0
sub rax, r14
cmp rax, 7
jb 0x1400019de
lea r12, [rbp + 7]
movq rsi, xmm1
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x59], rbx
lea r15, [r14 + 7]
mov rbx, rdi
lea rdi, [rbp - 0x71]
cmp r15, 0xf
jbe 0x1400017e4
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140001789
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400017b0
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400017cf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400019d8
mov rcx, rax
call fcn.1400020e0
test rax, rax
je 0x1400019c3
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400017e0
test rcx, rcx
je 0x1400017de
call fcn.1400020e0
mov rdi, rax
jmp 0x1400017e0
xor edi, edi
mov qword [rbp - 0x71], rdi
mov qword [rbp - 0x61], r15
mov qword [rbp - 0x59], rbx
mov rax, qword [str.format]
mov dword [rdi], eax
movzx eax, word [0x140003894]
mov word [rdi + 4], ax
movzx eax, byte [0x140003896]
mov byte [rdi + 6], al
lea rcx, [rdi + 7]
mov r8, r14
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r15], 0
mov rcx, qword [rbp - 0x61]
mov rdx, qword [rbp - 0x59]
mov rax, rdx
sub rax, rcx
cmp rax, 0x12
jb 0x140001869
lea rax, [rcx + 0x12]
mov qword [rbp - 0x61], rax
lea rbx, [rbp - 0x71]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x71]
add rbx, rcx
mov r8d, 0x12
lea rdx, str.__FS:NTFS__Q__X__Y
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x12], 0
lea rax, [rbp - 0x71]
jmp 0x140001887
mov qword [rsp + 0x20], 0x12
lea r9, str.__FS:NTFS__Q__X__Y
mov edx, 0x12
lea rcx, [rbp - 0x71]
call fcn.140001b90
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xor ebx, ebx
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rax + 0x10], rbx
mov edi, 0xf
mov qword [rax + 0x18], rdi
mov byte [rax], bl
mov rdx, qword [rbp - 0x59]
cmp rdx, rdi
jbe 0x1400018f0
inc rdx
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400019c3
call fcn.14000211c
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rcx, qword [rbp - 0x19]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14000193f
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000193a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400019ca
call fcn.14000211c
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rdi
mov byte [rbp - 0x19], 0
cmp r13, 0xf
jbe 0x14000197e
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140001976
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400019d1
mov rcx, rsi
call fcn.14000211c
movzx eax, byte [rbp - 0x79]
inc al
mov byte [rbp - 0x79], al
cmp al, 0x5a
jle 0x14000162c
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400020c0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001100
int3
call fcn.1400011a0
int3