Function at 0x14004ddb0
Capabilities:
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xd8
mov rax, qword [0x140131c10]
xor rax, rsp
mov qword [rbp - 1], rax
mov r13, qword [rbp + 0x7f]
xorps xmm0, xmm0
mov r15, rdx
xor eax, eax
movups xmmword [rcx], xmm0
mov rdx, r8
mov qword [rcx + 0x10], rax
mov r12d, r9d
mov rdi, r8
mov rbx, rcx
call fcn.14004dbd4
xor esi, esi
test eax, eax
jne 0x14004de9e
movzx eax, word [r15 + 8]
lea edx, [rsi + 0x1a]
cmp ax, dx
jne 0x14004de31
mov rax, qword [r15]
movzx ecx, word [rax + 8]
cmp cx, 0x10
je 0x14004de27
mov eax, edx
cmp cx, 0xc
jne 0x14004de31
mov eax, 0x1e
mov word [r15 + 8], ax
mov ecx, 3
lea edx, [rcx - 1]
lea r14d, [rcx + 5]
cmp ax, 0xd
ja 0x14004df22
je 0x14004deda
cmp ax, dx
je 0x14004e029
cmp ax, cx
je 0x14004df56
jbe 0x14004de81
cmp ax, r14w
jbe 0x14004df67
cmp ax, 9
je 0x14004deda
cmp ax, 0xa
je 0x14004debf
cmp ax, 0xb
je 0x14004e029
mov rdx, rdi
mov rcx, rbx
call fcn.14004dbd4
test eax, eax
jne 0x14004de9e
mov r8d, r12d
mov rdx, rdi
mov rcx, rbx
call fcn.14004dcb0
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.1400caef0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov word [rbx], cx
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
mov dword [rbx + 8], eax
jmp 0x14004de9e
mov word [rbx], cx
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
test rax, rax
je 0x14004df19
xor edx, edx
mov r9, r13
xor ecx, ecx
mov r8d, 0x87f
call fcn.1400c9744
mov ecx, 0x7e4
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
mov qword [rbx + 8], rsi
jmp 0x14004de9e
cmp ax, 0x15
ja 0x14004e059
cmp ax, 0x14
jae 0x14004df67
cmp ax, 0xe
je 0x14004df67
cmp ax, 0xf
jbe 0x14004de81
cmp ax, 0x12
jbe 0x14004e029
cmp ax, 0x13
jne 0x14004de81
mov rax, qword [0x140134380]
test byte [rax + 0x26], 0x10
jne 0x14004debf
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
mov rcx, qword [rdi]
mov rsi, rax
mov rax, qword [rcx + 0x78]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x14004e186
mov edx, 0x100
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_IsBadStringPtrA]
nop dword [rax + rax]
test eax, eax
jne 0x14004e186
mov rax, qword [0x140134380]
test byte [rax + 0x26], r14b
jne 0x14004dfc6
mov rcx, rsi
call fcn.14002e31c
mov rcx, rsi
call fcn.14004e2ec
mov rcx, rax
mov rdi, rax
call fcn.140044780
mov qword [rsp + 0x38], rax
mov word [rsp + 0x30], r14w
test rdi, rdi
je 0x14004dff8
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
movzx eax, word [r15 + 8]
lea rdx, [rsp + 0x30]
mov r8d, r12d
mov word [rsp + 0x20], ax
mov rcx, rbx
call fcn.140044860
test eax, eax
js 0x14004e1b6
mov rcx, qword [rsp + 0x38]
call fcn.1400447f0
jmp 0x14004de9e
mov rax, qword [0x140134380]
test byte [rax + 0x26], 0x10
je 0x14004df67
mov word [rbx], dx
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
mov word [rbx + 8], ax
jmp 0x14004de9e
cmp ax, 0x17
jbe 0x14004df56
cmp ax, 0x1d
jbe 0x14004de81
cmp ax, 0x1f
ja 0x14004de81
mov word [rbx], r14w
mov rcx, rdi
mov qword [rbx + 8], rsi
mov rax, qword [rdi]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
mov rcx, qword [rdi]
mov rsi, rax
mov rax, qword [rcx + 0x78]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
xor r14d, r14d
test eax, eax
je 0x14004e100
mov edx, 0x100
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_IsBadStringPtrA]
nop dword [rax + rax]
test eax, eax
jne 0x14004e100
mov rcx, rsi
call fcn.14002e31c
mov rcx, rsi
call fcn.14004e2ec
mov rcx, rax
mov rdi, rax
call fcn.140044780
mov qword [rbx + 8], rax
test rdi, rdi
je 0x14004de9e
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
jmp 0x14004de9e
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
test rax, rax
je 0x14004de9e
mov edi, 0x28
lea r8, str._I64i
mov edx, edi
lea rcx, [rbp - 0x79]
mov r9, rsi
call fcn.140001318
lea rcx, [rbp - 0x79]
mov word [rbp - 0x51], r14w
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r14b
jne 0x14004e143
lea rcx, [rbp - 0x51]
mov dword [rsp + 0x28], edi
mov edx, 1
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x79]
xor ecx, ecx
lea r9d, [rdx + rax]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop dword [rax + rax]
lea rcx, [rbp - 0x51]
call fcn.140044780
mov qword [rbx + 8], rax
jmp 0x14004de9e
mov eax, 3
mov dword [rsp + 0x38], esi
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x30]
movzx eax, word [r15 + 8]
mov r8d, r12d
mov rcx, rbx
mov word [rsp + 0x20], ax
call fcn.140044860
test eax, eax
jns 0x14004de9e
xor edx, edx
mov r9, r13
xor ecx, ecx
mov r8d, 0x91f
call fcn.1400c9744
mov ecx, 0x7e4
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3