Similarity

140000318
140000318 struct IMAGE_SECTION_HEADER

140000340
140000340 struct IMAGE_SECTION_HEADER

140000368
140000368 struct IMAGE_SECTION_HEADER

140000390
140000390 struct IMAGE_SECTION_HEADER

1400003b8
1400003b8 struct IMAGE_SECTION_HEADER

1400003e0
1400003e0 struct IMAGE_SECTION_HEADER

140000408
140000408 struct IMAGE_SECTION_HEADER

140000430
140000430 struct IMAGE_SECTION_HEADER

140000458
140000458 struct IMAGE_SECTION_HEADER

140001000
140001000__mingw_invalidParameterHandler:
140001000ret
140001000

140001001
140001001 // align 0x10

140001010
140001010pre_c_init:
140001010sub rsp, 40
140001014mov rax, [rip+0x2b435]
14000101bxor ecx, ecx
14000101dmov [rax], 1
140001023mov rax, [rip+0x2b436]
14000102amov [rax], 1
140001030mov rax, [rip+0x2b439]
140001037mov [rax], 1
14000103dmov rax, [rip+0x2b3ac]
140001044cmp [rax], 23117
140001049jne 0x14000105a
14000104bmovsxd rdx, [rax+60]
14000104fadd rax, rdx
140001052cmp [rax], 17744
140001058je 0x1400010c0
14000105a
14000105aloc_14000105a:
14000105amov rax, [rip+0x2b3df]
140001061mov [rip+0x2efa5], ecx
140001067mov eax, [rax]
140001069test eax, eax
14000106bje 0x1400010b0
14000106dmov ecx, 2
140001072call __set_app_type
140001077
140001077loc_140001077:
140001077call __p__fmode
14000107cmov rdx, [rip+0x2b49d]
140001083mov edx, [rdx]
140001085mov [rax], edx
140001087call __p__commode
14000108cmov rdx, [rip+0x2b46d]
140001093mov edx, [rdx]
140001095mov [rax], edx
140001097call _setargv
14000109cmov rax, [rip+0x2b2fd]
1400010a3cmp [rax], 1
1400010a6je 0x1400010f8
1400010a8xor eax, eax
1400010aaadd rsp, 40
1400010aeret
1400010af
1400010af 90 .
1400010b0
1400010b0loc_1400010b0:
1400010b0mov ecx, 1
1400010b5call __set_app_type
1400010bajmp 0x140001077
1400010bc
1400010bc 0f 1f 40 00 ..@.
1400010c0
1400010c0loc_1400010c0:
1400010c0movzx edx, [rax+24]
1400010c4cmp dx, 267
1400010c9je 0x140001110
1400010cbcmp dx, 523
1400010d0jne 0x14000105a
1400010d2cmp [rax+132], 14
1400010d9jbe 0x14000105a
1400010dfmov edx, [rax+248]
1400010e5xor ecx, ecx
1400010e7test edx, edx
1400010e9setne cl
1400010ecjmp 0x14000105a
1400010f1
1400010f1 0f 1f 80 00 00 00 00 .......
1400010f8
1400010f8loc_1400010f8:
1400010f8mov rcx, [rip+0x2b441]
1400010ffcall __mingw_setusermatherr
140001104xor eax, eax
140001106add rsp, 40
14000110aret
14000110b
14000110b 0f 1f 44 00 00 ..D..
140001110
140001110loc_140001110:
140001110cmp [rax+116], 14
140001114jbe 0x14000105a
14000111amov r8l, [rax+232]
140001121xor ecx, ecx
140001123test r8l, r8l
140001126setne cl
140001129jmp 0x14000105a
140001010

14000112e
14000112e // align 0x10

140001130
140001130pre_cpp_init:
140001130sub rsp, 56
140001134mov rax, [rip+0x2b415]
14000113blea r8, [rip+0x2eed6]
140001142lea rdx, [rip+0x2eed7]
140001149lea rcx, [rip+0x2eed8]
140001150mov eax, [rax]
140001152mov [rip+0x2eeac], eax
140001158mov rax, [rip+0x2b3b1]
14000115fmov r9l, [rax]
140001162lea rax, [rip+0x2ee9b]
140001169mov [rsp+32], rax
14000116ecall __getmainargs
140001173nop
140001174add rsp, 56
140001178ret
140001130

140001179
140001179 // align 0x10

140001180
140001180__tmainCRTStartup:
140001180push r12
140001182push rbp
140001183push rdi
140001184push rsi
140001185push rbx
140001186sub rsp, 32
14000118amov rbx, [rip+0x2b2ff]
140001191mov rbp, [rip+0x30090]
140001198xor edi, edi
14000119amov rax, [0x30]
1400011a3mov rsi, [rax+8]
1400011a7jmp 0x1400011c0
1400011a9
1400011a9 0f 1f 80 00 00 00 00 .......
1400011b0
1400011b0loc_1400011b0:
1400011b0cmp rsi, rax
1400011b3je 0x140001320
1400011b9mov ecx, 1000
1400011becall rbp
1400011c0
1400011c0loc_1400011c0:
1400011c0mov rax, rdi
1400011c3lock cmpxchg [rbx], rsi
1400011c8test rax, rax
1400011cbjne 0x1400011b0
1400011cdmov rsi, [rip+0x2b2cc]
1400011d4xor edi, edi
1400011d6mov eax, [rsi]
1400011d8cmp eax, 1
1400011dbje 0x140001337
1400011e1
1400011e1loc_1400011e1:
1400011e1mov eax, [rsi]
1400011e3test eax, eax
1400011e5je 0x1400013a0
1400011ebmov [rip+0x2ee13], 1
1400011f5
1400011f5loc_1400011f5:
1400011f5mov eax, [rsi]
1400011f7cmp eax, 1
1400011faje 0x14000134c
140001200
140001200loc_140001200:
140001200test edi, edi
140001202je 0x14000136d
140001208
140001208loc_140001208:
140001208mov rax, [rip+0x2b1d1]
14000120fmov rax, [rax]
140001212test rax, rax
140001215je 0x140001223
140001217xor r8l, r8l
14000121amov edx, 2
14000121fxor ecx, ecx
140001221call rax
140001223
140001223loc_140001223:
140001223call _pei386_runtime_relocator
140001228mov rcx, [rip+0x2b301]
14000122fcall [rip+0x2ffeb]
140001235mov rdx, [rip+0x2b244]
14000123clea rcx, [rip-579]
140001243mov [rdx], rax
140001246call _set_invalid_parameter_handler
14000124bcall fpreset
140001250mov ebx, [rip+0x2edd2]
140001256lea edi, [rbx+1]
140001259movsxd rdi, edi
14000125cshl rdi, 3
140001260mov rcx, rdi
140001263call malloc
140001268mov r12, [rip+0x2edb1]
14000126fmov rbp, rax
140001272test ebx, ebx
140001274jle 0x1400013c0
14000127asub rdi, 8
14000127exor ebx, ebx
140001280
140001280loc_140001280:
140001280mov rcx, [r12+rbx]
140001284call strlen
140001289lea rsi, [rax+1]
14000128dmov rcx, rsi
140001290call malloc
140001295mov r8, rsi
140001298mov [rbp+rbx], rax
14000129dmov rdx, [r12+rbx]
1400012a1mov rcx, rax
1400012a4add rbx, 8
1400012a8call memcpy
1400012adcmp rdi, rbx
1400012b0jne 0x140001280
1400012b2add rdi, rbp
1400012b5
1400012b5loc_1400012b5:
1400012b5mov [rdi], 0
1400012bcmov [rip+0x2ed5d], rbp
1400012c3call __main
1400012c8mov rax, [rip+0x2b131]
1400012cfmov r8, [rip+0x2ed42]
1400012d6mov ecx, [rip+0x2ed4c]
1400012dcmov rax, [rax]
1400012dfmov [rax], r8
1400012e2mov rdx, [rip+0x2ed37]
1400012e9call main
1400012eemov ecx, [rip+0x2ed18]
1400012f4mov [rip+0x2ed16], eax
1400012fatest ecx, ecx
1400012fcje 0x1400013c8
140001302mov edx, [rip+0x2ed00]
140001308test edx, edx
14000130aje 0x140001380
14000130cadd rsp, 32
140001310pop rbx
140001311pop rsi
140001312pop rdi
140001313pop rbp
140001314pop r12
140001316ret
140001317
140001317 66 0f 1f 84 00 00 00 00 00 f........
140001320
140001320loc_140001320:
140001320mov rsi, [rip+0x2b179]
140001327mov edi, 1
14000132cmov eax, [rsi]
14000132ecmp eax, 1
140001331jne 0x1400011e1
140001337
140001337loc_140001337:
140001337mov ecx, 31
14000133ccall _amsg_exit
140001341mov eax, [rsi]
140001343cmp eax, 1
140001346jne 0x140001200
14000134c
14000134cloc_14000134c:
14000134cmov rdx, [rip+0x2b17d]
140001353mov rcx, [rip+0x2b166]
14000135acall _initterm
14000135fmov [rsi], 2
140001365test edi, edi
140001367jne 0x140001208
14000136d
14000136dloc_14000136d:
14000136dxor eax, eax
14000136fxchg [rbx], rax
140001372jmp 0x140001208
140001377
140001377 66 0f 1f 84 00 00 00 00 00 f........
140001380
140001380loc_140001380:
140001380call _cexit
140001385mov eax, [rip+0x2ec85]
14000138badd rsp, 32
14000138fpop rbx
140001390pop rsi
140001391pop rdi
140001392pop rbp
140001393pop r12
140001395ret
140001396
140001396 66 2e 0f 1f 84 00 00 00 00 00 f.........
1400013a0
1400013a0loc_1400013a0:
1400013a0mov rdx, [rip+0x2b149]
1400013a7mov rcx, [rip+0x2b132]
1400013aemov [rsi], 1
1400013b4call _initterm
1400013b9jmp 0x1400011f5
1400013be
1400013be 66 90 f.
1400013c0
1400013c0loc_1400013c0:
1400013c0mov rdi, rax
1400013c3jmp 0x1400012b5
1400013c8
1400013c8loc_1400013c8:
1400013c8mov ecx, eax
1400013cacall exit
1400013cfnop
140001180

1400013d0
1400013d0WinMainCRTStartup:
1400013d0sub rsp, 40
1400013d4mov rax, [rip+0x2b065]
1400013dbmov [rax], 1
1400013e1call __tmainCRTStartup
1400013e6nop
1400013e7nop
1400013e8add rsp, 40
1400013ecret
1400013d0

1400013ed
1400013ed // align 0x10

1400013f0
1400013f0mainCRTStartup:
1400013f0sub rsp, 40
1400013f4mov rax, [rip+0x2b045]
1400013fbmov [rax], 0
140001401call __tmainCRTStartup
140001406nop
140001407nop
140001408add rsp, 40
14000140cret
1400013f0

14000140d
14000140d // align 0x10

140001410
140001410atexit:
140001410sub rsp, 40
140001414call _onexit
140001419cmp rax, 1
14000141dsbb eax, eax
14000141fadd rsp, 40
140001423ret
140001410

140001424
140001424 // align 0x10

140001430
140001430__gcc_register_frame:
140001430lea rcx, [rip+9]
140001437jmp 0x140001410
140001430

14000143c
14000143c // align 0x10

140001440
140001440__gcc_deregister_frame:
140001440ret
140001440

140001441
140001441 // align 0x10

140001450
140001450Spoof:
140001450pop r11
140001452add rsp, 8
140001456mov rax, [rsp+24]
14000145bmov r10, [rax]
14000145emov [rsp], r10
140001462mov r10, [rax+8]
140001466mov [rax+8], r11
14000146amov [rax+16], rbx
14000146elea rbx, [rip+9]
140001475mov [rax], rbx
140001478mov rbx, rax
14000147bjmp r10
140001450

14000147e
14000147efixup:
14000147esub rsp, 16
140001482mov rcx, rbx
140001485mov rbx, [rcx+16]
140001489jmp [rcx+8]
14000147e

14000148c
14000148c // align 0x10

140001490
140001490SysSetConfig:
140001490mov r11, rcx
140001493ret
140001490

140001494
140001494SysInvoke:
140001494mov r10, rcx
140001497mov eax, [r11+8]
14000149bjmp [r11]
140001494

14000149e
14000149e c3 90 ..

1400014a0
1400014a0__do_global_dtors:
1400014a0sub rsp, 40
1400014a4mov rax, [rip+0x23895]
1400014abmov rax, [rax]
1400014aetest rax, rax
1400014b1je 0x1400014d5
1400014b3nop [rax+rax]
1400014b8
1400014b8loc_1400014b8:
1400014b8call rax
1400014bamov rax, [rip+0x2387f]
1400014c1lea rdx, [rax+8]
1400014c5mov rax, [rax+8]
1400014c9mov [rip+0x23870], rdx
1400014d0test rax, rax
1400014d3jne 0x1400014b8
1400014d5
1400014d5loc_1400014d5:
1400014d5add rsp, 40
1400014d9ret
1400014a0

1400014da
1400014da // align 0x10

1400014e0
1400014e0__do_global_ctors:
1400014e0push rsi
1400014e1push rbx
1400014e2sub rsp, 40
1400014e6mov rdx, [rip+0x2aec3]
1400014edmov rax, [rdx]
1400014f0mov ecx, eax
1400014f2cmp eax, -1
1400014f5je 0x140001530
1400014f7
1400014f7loc_1400014f7:
1400014f7test ecx, ecx
1400014f9je 0x14000151b
1400014fbmov eax, ecx
1400014fdsub ecx, 1
140001500lea rbx, [rdx+8*rax]
140001504sub rax, rcx
140001507lea rsi, [rdx+8*rax-8]
14000150cnop [rax]
140001510
140001510loc_140001510:
140001510call [rbx]
140001512sub rbx, 8
140001516cmp rbx, rsi
140001519jne 0x140001510
14000151b
14000151bloc_14000151b:
14000151blea rcx, [rip-130]
140001522add rsp, 40
140001526pop rbx
140001527pop rsi
140001528jmp 0x140001410
14000152dnop [rax]
140001530
140001530loc_140001530:
140001530xor eax, eax
140001532nop [rax+rax]
140001538
140001538loc_140001538:
140001538lea r8l, [rax+1]
14000153cmov ecx, eax
14000153ecmp [rdx+8*r8], 0
140001543mov rax, r8
140001546jne 0x140001538
140001548jmp 0x1400014f7
1400014e0

14000154a
14000154a // align 0x10

140001550
140001550__main:
140001550mov eax, [rip+0x2eada]
140001556test eax, eax
140001558je 0x140001560
14000155aret
14000155b
14000155b 0f 1f 44 00 00 ..D..
140001560
140001560loc_140001560:
140001560mov [rip+0x2eac6], 1
14000156ajmp 0x1400014e0
140001550

14000156f
14000156f // align 0x10

140001570
140001570_setargv:
140001570xor eax, eax
140001572ret
140001570

140001573
140001573 // align 0x10

140001580
140001580__dyn_tls_dtor:
140001580sub rsp, 40
140001584cmp edx, 3
140001587je 0x1400015a0
140001589test edx, edx
14000158bje 0x1400015a0
14000158dmov eax, 1
140001592add rsp, 40
140001596ret
140001597
140001597 66 0f 1f 84 00 00 00 00 00 f........
1400015a0
1400015a0loc_1400015a0:
1400015a0call __mingw_TLScallback
1400015a5mov eax, 1
1400015aaadd rsp, 40
1400015aeret
140001580

1400015af
1400015af // align 0x10

1400015b0
1400015b0__dyn_tls_init:
1400015b0push rsi
1400015b1push rbx
1400015b2sub rsp, 40
1400015b6mov rax, [rip+0x2add3]
1400015bdcmp [rax], 2
1400015c0je 0x1400015c8
1400015c2mov [rax], 2
1400015c8
1400015c8loc_1400015c8:
1400015c8cmp edx, 2
1400015cbje 0x1400015e0
1400015cdcmp edx, 1
1400015d0je 0x140001620
1400015d2
1400015d2loc_1400015d2:
1400015d2mov eax, 1
1400015d7add rsp, 40
1400015dbpop rbx
1400015dcpop rsi
1400015ddret
1400015de
1400015de 66 90 f.
1400015e0
1400015e0loc_1400015e0:
1400015e0lea rbx, [rip+0x30a71]
1400015e7lea rsi, [rip+0x30a6a]
1400015eecmp rsi, rbx
1400015f1je 0x1400015d2
1400015f3nop [rax+rax]
1400015f8
1400015f8loc_1400015f8:
1400015f8mov rax, [rbx]
1400015fbtest rax, rax
1400015feje 0x140001602
140001600call rax
140001602
140001602loc_140001602:
140001602add rbx, 8
140001606cmp rsi, rbx
140001609jne 0x1400015f8
14000160bmov eax, 1
140001610add rsp, 40
140001614pop rbx
140001615pop rsi
140001616ret
140001617
140001617 66 0f 1f 84 00 00 00 00 00 f........
140001620
140001620loc_140001620:
140001620call __mingw_TLScallback
140001625mov eax, 1
14000162aadd rsp, 40
14000162epop rbx
14000162fpop rsi
140001630ret
1400015b0

140001631
140001631 // align 0x10

140001640
140001640__tlregdtor:
140001640xor eax, eax
140001642ret
140001640

140001643
140001643 // align 0x10

140001650
140001650_matherr:
140001650push rsi
140001651push rbx
140001652sub rsp, 120
140001656movups [rsp+64], x6
14000165bmovups [rsp+80], x7
140001660movups [rsp+96], x8
140001666cmp [rcx], 6
140001669ja 0x14000173c
14000166fmov eax, [rcx]
140001671lea rdx, [rip+0x2a7ac]
140001678movsxd rax, [rdx+4*rax]
14000167cadd rax, rdx
14000167fjmp rax
140001681nop [rax]
140001688lea rbx, [rip+0x2a690]
14000168f
14000168floc_14000168f:
14000168fmovsd_xmm x8, [rcx+32]
140001695movsd_xmm x7, [rcx+24]
14000169amovsd_xmm x6, [rcx+16]
14000169fmov rsi, [rcx+8]
1400016a3mov ecx, 2
1400016a8call __acrt_iob_func
1400016admovsd_xmm [rsp+48], x8
1400016b4mov r8, rbx
1400016b7lea rdx, [rip+0x2a73a]
1400016bemovsd_xmm [rsp+40], x7
1400016c4mov rcx, rax
1400016c7mov r9, rsi
1400016camovsd_xmm [rsp+32], x6
1400016d0call fprintf
1400016d5nop
1400016d6movups x6, [rsp+64]
1400016dbmovups x7, [rsp+80]
1400016e0xor eax, eax
1400016e2movups x8, [rsp+96]
1400016e8add rsp, 120
1400016ecpop rbx
1400016edpop rsi
1400016eeret
1400016efnop
1400016f0lea rbx, [rip+0x2a609]
1400016f7jmp 0x14000168f
1400016f9nop [rax]
140001700lea rbx, [rip+0x2a659]
140001707jmp 0x14000168f
140001709nop [rax]
140001710lea rbx, [rip+0x2a629]
140001717jmp 0x14000168f
14000171cnop [rax]
140001720lea rbx, [rip+0x2a689]
140001727jmp 0x14000168f
14000172cnop [rax]
140001730lea rbx, [rip+0x2a651]
140001737jmp 0x14000168f
14000173c
14000173cloc_14000173c:
14000173clea rbx, [rip+0x2a6a3]
140001743jmp 0x14000168f
140001650

140001748
140001748 // align 0x10

140001750
140001750fpreset:
140001750fninit
140001752ret
140001750

140001753
140001753 // align 0x10

140001760
140001760__report_error:
140001760push rsi
140001761push rbx
140001762sub rsp, 56
140001766mov rbx, rcx
140001769lea rax, [rsp+88]
14000176emov ecx, 2
140001773mov [rsp+88], rdx
140001778mov [rsp+96], r8
14000177dmov [rsp+104], r9
140001782mov [rsp+40], rax
140001787call __acrt_iob_func
14000178cmov r8l, 27
140001792mov edx, 1
140001797lea rcx, [rip+0x2a6a2]
14000179emov r9, rax
1400017a1call fwrite
1400017a6mov rsi, [rsp+40]
1400017abmov ecx, 2
1400017b0call __acrt_iob_func
1400017b5mov rdx, rbx
1400017b8mov rcx, rax
1400017bbmov r8, rsi
1400017becall vfprintf
1400017c3call abort
1400017c8nop
140001760

1400017c9
1400017c9 // align 0x10

1400017d0
1400017d0mark_section_writable:
1400017d0push rdi
1400017d1push rsi
1400017d2push rbx
1400017d3sub rsp, 80
1400017d7movsxd rsi, [rip+0x2e8c6]
1400017demov rbx, rcx
1400017e1test esi, esi
1400017e3jle 0x140001900
1400017e9mov rax, [rip+0x2e8b8]
1400017f0xor r9l, r9l
1400017f3add rax, 24
1400017f7nop [rax+rax]
140001800
140001800loc_140001800:
140001800mov r8, [rax]
140001803cmp rbx, r8
140001806jb 0x14000181b
140001808mov rdx, [rax+8]
14000180cmov edx, [rdx+8]
14000180fadd r8, rdx
140001812cmp rbx, r8
140001815jb 0x1400018a5
14000181b
14000181bloc_14000181b:
14000181badd r9l, 1
14000181fadd rax, 40
140001823cmp r9l, esi
140001826jne 0x140001800
140001828
140001828loc_140001828:
140001828mov rcx, rbx
14000182bcall __mingw_GetSectionForAddress
140001830mov rdi, rax
140001833test rax, rax
140001836je 0x140001922
14000183cmov rax, [rip+0x2e865]
140001843lea rbx, [rsi+4*rsi]
140001847shl rbx, 3
14000184badd rax, rbx
14000184emov [rax+32], rdi
140001852mov [rax], 0
140001858call _GetPEImageBase
14000185dmov edx, [rdi+12]
140001860mov r8l, 48
140001866lea rcx, [rax+rdx]
14000186amov rax, [rip+0x2e837]
140001871lea rdx, [rsp+32]
140001876mov [rax+rbx+24], rcx
14000187bcall [rip+0x2f9bf]
140001881test rax, rax
140001884je 0x140001907
14000188amov eax, [rsp+68]
14000188elea edx, [rax-64]
140001891and edx, -65
140001894je 0x14000189e
140001896lea edx, [rax-4]
140001899and edx, -5
14000189cjne 0x1400018b0
14000189e
14000189eloc_14000189e:
14000189eadd [rip+0x2e7ff], 1
1400018a5
1400018a5loc_1400018a5:
1400018a5add rsp, 80
1400018a9pop rbx
1400018aapop rsi
1400018abpop rdi
1400018acret
1400018ad
1400018ad 0f 1f 00 ...
1400018b0
1400018b0loc_1400018b0:
1400018b0cmp eax, 2
1400018b3mov rcx, [rsp+32]
1400018b8mov rdx, [rsp+56]
1400018bdmov r8l, 64
1400018c3mov eax, 4
1400018c8cmove r8l, eax
1400018ccadd rbx, [rip+0x2e7d5]
1400018d3mov [rbx+8], rcx
1400018d7mov r9, rbx
1400018damov [rbx+16], rdx
1400018decall [rip+0x2f954]
1400018e4test eax, eax
1400018e6jne 0x14000189e
1400018e8call [rip+0x2f902]
1400018eelea rcx, [rip+0x2a5c3]
1400018f5mov edx, eax
1400018f7call __report_error
1400018fcnop [rax]
140001900
140001900loc_140001900:
140001900xor esi, esi
140001902jmp 0x140001828
140001907
140001907loc_140001907:
140001907mov rax, [rip+0x2e79a]
14000190emov edx, [rdi+8]
140001911lea rcx, [rip+0x2a568]
140001918mov r8, [rax+rbx+24]
14000191dcall __report_error
140001922
140001922loc_140001922:
140001922mov rdx, rbx
140001925lea rcx, [rip+0x2a534]
14000192ccall __report_error
140001931nop
1400017d0

140001932
140001932 // align 0x10

140001940
140001940_pei386_runtime_relocator:
140001940push rbp
140001941push r15
140001943push r14
140001945push r13
140001947push r12
140001949push rdi
14000194apush rsi
14000194bpush rbx
14000194csub rsp, 72
140001950lea rbp, [rsp+64]
140001955mov r12l, [rip+0x2e744]
14000195ctest r12l, r12l
14000195fje 0x140001978
140001961
140001961loc_140001961:
140001961lea rsp, [rbp+8]
140001965pop rbx
140001966pop rsi
140001967pop rdi
140001968pop r12
14000196apop r13
14000196cpop r14
14000196epop r15
140001970pop rbp
140001971ret
140001972
140001972 66 0f 1f 44 00 00 f..D..
140001978
140001978loc_140001978:
140001978mov [rip+0x2e71e], 1
140001982call __mingw_GetSectionCount
140001987cdqe
140001989lea rax, [rax+4*rax]
14000198dlea rax, [8*rax+15]
140001995and rax, -16
140001999call ___chkstk_ms
14000199emov r13, [rip+0x2aa1b]
1400019a5mov rbx, [rip+0x2aa24]
1400019acmov [rip+0x2e6ee], 0
1400019b6sub rsp, rax
1400019b9lea rax, [rsp+48]
1400019bemov [rip+0x2e6e3], rax
1400019c5mov rax, r13
1400019c8sub rax, rbx
1400019cbcmp rax, 7
1400019cfjle 0x140001961
1400019d1mov edx, [rbx]
1400019d3cmp rax, 11
1400019d7jg 0x140001b58
1400019dd
1400019ddloc_1400019dd:
1400019ddmov eax, [rbx]
1400019dftest eax, eax
1400019e1jne 0x140001c50
1400019e7mov eax, [rbx+4]
1400019ea
1400019ealoc_1400019ea:
1400019eatest eax, eax
1400019ecjne 0x140001c50
1400019f2mov edx, [rbx+8]
1400019f5cmp edx, 1
1400019f8jne 0x140001c8e
1400019feadd rbx, 12
140001a02cmp rbx, r13
140001a05jae 0x140001961
140001a0bmov r14, [rip+0x2a9de]
140001a12mov r15, 0xffffffff7fffffff
140001a1cjmp 0x140001a72
140001a1e
140001a1e 66 90 f.
140001a20
140001a20loc_140001a20:
140001a20movzx esi, [rdi]
140001a23and ecx, 192
140001a29test sil, sil
140001a2cjns 0x140001c38
140001a32or rsi, -256
140001a39sub rsi, rax
140001a3cadd rsi, r9
140001a3ftest ecx, ecx
140001a41jne 0x140001a5a
140001a43
140001a43loc_140001a43:
140001a43cmp rsi, 255
140001a4ajg 0x140001b9f
140001a50cmp rsi, -128
140001a54jl 0x140001b9f
140001a5a
140001a5aloc_140001a5a:
140001a5amov rcx, rdi
140001a5dcall mark_section_writable
140001a62mov [rdi], sil
140001a65
140001a65loc_140001a65:
140001a65add rbx, 12
140001a69cmp rbx, r13
140001a6cjae 0x140001b00
140001a72
140001a72loc_140001a72:
140001a72mov eax, [rbx]
140001a74mov ecx, [rbx+8]
140001a77mov edi, [rbx+4]
140001a7aadd rax, r14
140001a7dmovzx edx, cl
140001a80mov r9, [rax]
140001a83add rdi, r14
140001a86cmp edx, 32
140001a89je 0x140001bb8
140001a8fja 0x140001b80
140001a95cmp edx, 8
140001a98je 0x140001a20
140001a9acmp edx, 16
140001a9djne 0x140001c82
140001aa3movzx esi, [rdi]
140001aa6and ecx, 192
140001aactest si, si
140001aafjns 0x140001c20
140001ab5or rsi, 0xffffffffffff0000
140001abcsub rsi, rax
140001abfadd rsi, r9
140001ac2test ecx, ecx
140001ac4jne 0x140001ae0
140001ac6
140001ac6loc_140001ac6:
140001ac6cmp rsi, -32768
140001acdjl 0x140001b9f
140001ad3cmp rsi, 65535
140001adajg 0x140001b9f
140001ae0
140001ae0loc_140001ae0:
140001ae0mov rcx, rdi
140001ae3add rbx, 12
140001ae7call mark_section_writable
140001aecmov [rdi], si
140001aefcmp rbx, r13
140001af2jb 0x140001a72
140001af8nop [rax+rax]
140001b00
140001b00loc_140001b00:
140001b00mov edx, [rip+0x2e59e]
140001b06test edx, edx
140001b08jle 0x140001961
140001b0emov rsi, [rip+0x2f723]
140001b15xor ebx, ebx
140001b17lea rdi, [rbp-4]
140001b1bnop [rax+rax]
140001b20
140001b20loc_140001b20:
140001b20mov rax, [rip+0x2e581]
140001b27add rax, rbx
140001b2amov r8l, [rax]
140001b2dtest r8l, r8l
140001b30je 0x140001b3f
140001b32mov rdx, [rax+16]
140001b36mov rcx, [rax+8]
140001b3amov r9, rdi
140001b3dcall rsi
140001b3f
140001b3floc_140001b3f:
140001b3fadd r12l, 1
140001b43add rbx, 40
140001b47cmp r12l, [rip+0x2e556]
140001b4ejl 0x140001b20
140001b50jmp 0x140001961
140001b55
140001b55 0f 1f 00 ...
140001b58
140001b58loc_140001b58:
140001b58test edx, edx
140001b5ajne 0x140001c50
140001b60mov eax, [rbx+4]
140001b63mov edx, eax
140001b65or edx, [rbx+8]
140001b68jne 0x1400019ea
140001b6eadd rbx, 12
140001b72jmp 0x1400019dd
140001b77
140001b77 66 0f 1f 84 00 00 00 00 00 f........
140001b80
140001b80loc_140001b80:
140001b80cmp edx, 64
140001b83jne 0x140001c82
140001b89mov rsi, [rdi]
140001b8csub rsi, rax
140001b8fadd rsi, r9
140001b92and ecx, 192
140001b98jne 0x140001c00
140001b9atest rsi, rsi
140001b9djs 0x140001c00
140001b9f
140001b9floc_140001b9f:
140001b9fmov [rsp+32], rsi
140001ba4mov r8, rdi
140001ba7lea rcx, [rip+0x2a39a]
140001baecall __report_error
140001bb3nop [rax+rax]
140001bb8
140001bb8loc_140001bb8:
140001bb8mov esi, [rdi]
140001bbaand ecx, 192
140001bc0test esi, esi
140001bc2jns 0x140001c10
140001bc4mov r11, 0xffffffff00000000
140001bceor rsi, r11
140001bd1sub rsi, rax
140001bd4add rsi, r9
140001bd7test ecx, ecx
140001bd9jne 0x140001bea
140001bdb
140001bdbloc_140001bdb:
140001bdbcmp rsi, r15
140001bdejle 0x140001b9f
140001be0mov eax, -1
140001be5cmp rsi, rax
140001be8jg 0x140001b9f
140001bea
140001bealoc_140001bea:
140001beamov rcx, rdi
140001bedcall mark_section_writable
140001bf2mov [rdi], esi
140001bf4jmp 0x140001a65
140001bf9
140001bf9 0f 1f 80 00 00 00 00 .......
140001c00
140001c00loc_140001c00:
140001c00mov rcx, rdi
140001c03call mark_section_writable
140001c08mov [rdi], rsi
140001c0bjmp 0x140001a65
140001c10
140001c10loc_140001c10:
140001c10sub rsi, rax
140001c13add rsi, r9
140001c16test ecx, ecx
140001c18je 0x140001bdb
140001c1ajmp 0x140001bea
140001c1c
140001c1c 0f 1f 40 00 ..@.
140001c20
140001c20loc_140001c20:
140001c20sub rsi, rax
140001c23add rsi, r9
140001c26test ecx, ecx
140001c28je 0x140001ac6
140001c2ejmp 0x140001ae0
140001c33
140001c33 0f 1f 44 00 00 ..D..
140001c38
140001c38loc_140001c38:
140001c38sub rsi, rax
140001c3badd rsi, r9
140001c3etest ecx, ecx
140001c40je 0x140001a43
140001c46jmp 0x140001a5a
140001c4b
140001c4b 0f 1f 44 00 00 ..D..
140001c50
140001c50loc_140001c50:
140001c50cmp rbx, r13
140001c53jae 0x140001961
140001c59mov r14, [rip+0x2a790]
140001c60
140001c60loc_140001c60:
140001c60mov esi, [rbx+4]
140001c63mov edi, [rbx]
140001c65add rbx, 8
140001c69add rsi, r14
140001c6cadd edi, [rsi]
140001c6emov rcx, rsi
140001c71call mark_section_writable
140001c76mov [rsi], edi
140001c78cmp rbx, r13
140001c7bjb 0x140001c60
140001c7djmp 0x140001b00
140001c82
140001c82loc_140001c82:
140001c82lea rcx, [rip+0x2a28f]
140001c89call __report_error
140001c8e
140001c8eloc_140001c8e:
140001c8elea rcx, [rip+0x2a24b]
140001c95call __report_error
140001c9anop
140001940

140001c9b
140001c9b // align 0x10

140001ca0
140001ca0__mingw_raise_matherr:
140001ca0sub rsp, 88
140001ca4mov rax, [rip+0x2e405]
140001cabunpcklpd x2, x3
140001caftest rax, rax
140001cb2je 0x140001cd9
140001cb4movsd_xmm x0, [rsp+128]
140001cbdmov [rsp+32], ecx
140001cc1lea rcx, [rsp+32]
140001cc6mov [rsp+40], rdx
140001ccbmovups [rsp+48], x2
140001cd0movsd_xmm [rsp+64], x0
140001cd6call rax
140001cd8nop
140001cd9
140001cd9loc_140001cd9:
140001cd9add rsp, 88
140001cddret
140001ca0

140001cde
140001cde // align 0x10

140001ce0
140001ce0__mingw_setusermatherr:
140001ce0mov [rip+0x2e3c9], rcx
140001ce7jmp 0x140007a00
140001ce0

140001cec
140001cec // align 0x10

140001cf0
140001cf0_gnu_exception_handler:
140001cf0push rbx
140001cf1sub rsp, 32
140001cf5mov rdx, [rcx]
140001cf8mov eax, [rdx]
140001cfamov rbx, rcx
140001cfdmov ecx, eax
140001cffand ecx, 0x20ffffff
140001d05cmp ecx, 0x20474343
140001d0bje 0x140001db0
140001d11
140001d11loc_140001d11:
140001d11cmp eax, 0xffffffffc0000096
140001d16ja 0x140001d8f
140001d18cmp eax, 0xffffffffc000008b
140001d1djbe 0x140001d40
140001d1fadd eax, 0x3fffff73
140001d24cmp eax, 9
140001d27ja 0x140001d7d
140001d29lea rdx, [rip+0x2a270]
140001d30movsxd rax, [rdx+4*rax]
140001d34add rax, rdx
140001d37jmp rax
140001d39nop [rax]
140001d40
140001d40loc_140001d40:
140001d40cmp eax, 0xffffffffc0000005
140001d45je 0x140001e20
140001d4bjbe 0x140001d88
140001d4dcmp eax, 0xffffffffc0000008
140001d52je 0x140001d7d
140001d54cmp eax, 0xffffffffc000001d
140001d59jne 0x140001d8f
140001d5bxor edx, edx
140001d5dmov ecx, 4
140001d62call signal
140001d67cmp rax, 1
140001d6bje 0x140001e47
140001d71test rax, rax
140001d74je 0x140001d8f
140001d76mov ecx, 4
140001d7bcall rax
140001d7d
140001d7dloc_140001d7d:
140001d7dmov eax, -1
140001d82add rsp, 32
140001d86pop rbx
140001d87ret
140001d88
140001d88loc_140001d88:
140001d88cmp eax, 0xffffffff80000002
140001d8dje 0x140001d7d
140001d8f
140001d8floc_140001d8f:
140001d8fmov rax, [rip+0x2e33a]
140001d96test rax, rax
140001d99je 0x140001dc0
140001d9bmov rcx, rbx
140001d9eadd rsp, 32
140001da2pop rbx
140001da3jmp rax
140001da6nop [rax+rax]
140001db0
140001db0loc_140001db0:
140001db0test [rdx+4], 1
140001db4jne 0x140001d11
140001dbajmp 0x140001d7d
140001dbcnop [rax]
140001dc0
140001dc0loc_140001dc0:
140001dc0xor eax, eax
140001dc2add rsp, 32
140001dc6pop rbx
140001dc7ret
140001dc8nop [rax+rax]
140001dd0xor edx, edx
140001dd2mov ecx, 8
140001dd7call signal
140001ddccmp rax, 1
140001de0je 0x140001e6f
140001de6
140001de6loc_140001de6:
140001de6test rax, rax
140001de9je 0x140001d8f
140001debmov ecx, 8
140001df0call rax
140001df2jmp 0x140001d7d
140001df4nop [rax]
140001df8xor edx, edx
140001dfamov ecx, 8
140001dffcall signal
140001e04cmp rax, 1
140001e08jne 0x140001de6
140001e0amov edx, 1
140001e0fmov ecx, 8
140001e14call signal
140001e19jmp 0x140001d7d
140001e1enop
140001e20
140001e20loc_140001e20:
140001e20xor edx, edx
140001e22mov ecx, 11
140001e27call signal
140001e2ccmp rax, 1
140001e30je 0x140001e5b
140001e32test rax, rax
140001e35je 0x140001d8f
140001e3bmov ecx, 11
140001e40call rax
140001e42jmp 0x140001d7d
140001e47
140001e47loc_140001e47:
140001e47mov edx, 1
140001e4cmov ecx, 4
140001e51call signal
140001e56jmp 0x140001d7d
140001e5b
140001e5bloc_140001e5b:
140001e5bmov edx, 1
140001e60mov ecx, 11
140001e65call signal
140001e6ajmp 0x140001d7d
140001e6f
140001e6floc_140001e6f:
140001e6fmov edx, 1
140001e74mov ecx, 8
140001e79call signal
140001e7ecall fpreset
140001e83jmp 0x140001d7d
140001cf0

140001e88
140001e88 // align 0x10

140001e90
140001e90__mingwthr_run_key_dtors.part.0:
140001e90push r12
140001e92push rbp
140001e93push rdi
140001e94push rsi
140001e95push rbx
140001e96sub rsp, 32
140001e9alea r12, [rip+0x2e25f]
140001ea1mov rcx, r12
140001ea4call [rip+0x2f33e]
140001eaamov rbx, [rip+0x2e22f]
140001eb1test rbx, rbx
140001eb4je 0x140001eec
140001eb6mov rbp, [rip+0x2f373]
140001ebdmov rdi, [rip+0x2f32c]
140001ec4nop [rax]
140001ec8
140001ec8loc_140001ec8:
140001ec8mov ecx, [rbx]
140001ecacall rbp
140001eccmov rsi, rax
140001ecfcall rdi
140001ed1test eax, eax
140001ed3jne 0x140001ee3
140001ed5test rsi, rsi
140001ed8je 0x140001ee3
140001edamov rax, [rbx+8]
140001edemov rcx, rsi
140001ee1call rax
140001ee3
140001ee3loc_140001ee3:
140001ee3mov rbx, [rbx+16]
140001ee7test rbx, rbx
140001eeajne 0x140001ec8
140001eec
140001eecloc_140001eec:
140001eecmov rcx, r12
140001eefadd rsp, 32
140001ef3pop rbx
140001ef4pop rsi
140001ef5pop rdi
140001ef6pop rbp
140001ef7pop r12
140001ef9jmp [rip+0x2f310]
140001e90

140001f00
140001f00___w64_mingwthr_add_key_dtor:
140001f00push rdi
140001f01push rsi
140001f02push rbx
140001f03sub rsp, 32
140001f07mov eax, [rip+0x2e1db]
140001f0dmov edi, ecx
140001f0fmov rsi, rdx
140001f12test eax, eax
140001f14jne 0x140001f20
140001f16
140001f16loc_140001f16:
140001f16xor eax, eax
140001f18
140001f18loc_140001f18:
140001f18add rsp, 32
140001f1cpop rbx
140001f1dpop rsi
140001f1epop rdi
140001f1fret
140001f20
140001f20loc_140001f20:
140001f20mov edx, 24
140001f25mov ecx, 1
140001f2acall calloc
140001f2fmov rbx, rax
140001f32test rax, rax
140001f35je 0x140001f6a
140001f37mov [rax+8], rsi
140001f3blea rsi, [rip+0x2e1be]
140001f42mov [rax], edi
140001f44mov rcx, rsi
140001f47call [rip+0x2f29b]
140001f4dmov rax, [rip+0x2e18c]
140001f54mov rcx, rsi
140001f57mov [rip+0x2e182], rbx
140001f5emov [rbx+16], rax
140001f62call [rip+0x2f2a8]
140001f68jmp 0x140001f16
140001f6a
140001f6aloc_140001f6a:
140001f6aor eax, -1
140001f6djmp 0x140001f18
140001f00

140001f6f
140001f6f // align 0x10

140001f70
140001f70___w64_mingwthr_remove_key_dtor:
140001f70push rsi
140001f71push rbx
140001f72sub rsp, 40
140001f76mov eax, [rip+0x2e16c]
140001f7cmov ebx, ecx
140001f7etest eax, eax
140001f80jne 0x140001f90
140001f82xor eax, eax
140001f84add rsp, 40
140001f88pop rbx
140001f89pop rsi
140001f8aret
140001f8b
140001f8b 0f 1f 44 00 00 ..D..
140001f90
140001f90loc_140001f90:
140001f90lea rsi, [rip+0x2e169]
140001f97mov rcx, rsi
140001f9acall [rip+0x2f248]
140001fa0mov rcx, [rip+0x2e139]
140001fa7test rcx, rcx
140001faaje 0x140001fd3
140001facxor edx, edx
140001faejmp 0x140001fbb
140001fb0
140001fb0loc_140001fb0:
140001fb0mov rdx, rcx
140001fb3test rax, rax
140001fb6je 0x140001fd3
140001fb8mov rcx, rax
140001fbb
140001fbbloc_140001fbb:
140001fbbmov eax, [rcx]
140001fbdcmp eax, ebx
140001fbfmov rax, [rcx+16]
140001fc3jne 0x140001fb0
140001fc5test rdx, rdx
140001fc8je 0x140001fe8
140001fcamov [rdx+16], rax
140001fce
140001fceloc_140001fce:
140001fcecall free
140001fd3
140001fd3loc_140001fd3:
140001fd3mov rcx, rsi
140001fd6call [rip+0x2f234]
140001fdcxor eax, eax
140001fdeadd rsp, 40
140001fe2pop rbx
140001fe3pop rsi
140001fe4ret
140001fe5
140001fe5 0f 1f 00 ...
140001fe8
140001fe8loc_140001fe8:
140001fe8mov [rip+0x2e0f1], rax
140001fefjmp 0x140001fce
140001f70

140001ff1
140001ff1 // align 0x10

140002000
140002000__mingw_TLScallback:
140002000push rbx
140002001sub rsp, 32
140002005cmp edx, 2
140002008je 0x1400020c0
14000200eja 0x140002040
140002010test edx, edx
140002012je 0x140002060
140002014mov eax, [rip+0x2e0ce]
14000201atest eax, eax
14000201cje 0x1400020e0
140002022
140002022loc_140002022:
140002022mov [rip+0x2e0bc], 1
14000202c
14000202cloc_14000202c:
14000202cmov eax, 1
140002031add rsp, 32
140002035pop rbx
140002036ret
140002037
140002037 66 0f 1f 84 00 00 00 00 00 f........
140002040
140002040loc_140002040:
140002040cmp edx, 3
140002043jne 0x14000202c
140002045mov eax, [rip+0x2e09d]
14000204btest eax, eax
14000204dje 0x14000202c
14000204fcall __mingwthr_run_key_dtors.part.0
140002054jmp 0x14000202c
140002056
140002056 66 2e 0f 1f 84 00 00 00 00 00 f.........
140002060
140002060loc_140002060:
140002060mov eax, [rip+0x2e082]
140002066test eax, eax
140002068jne 0x1400020d0
14000206a
14000206aloc_14000206a:
14000206amov eax, [rip+0x2e078]
140002070cmp eax, 1
140002073jne 0x14000202c
140002075mov rbx, [rip+0x2e064]
14000207ctest rbx, rbx
14000207fje 0x140002099
140002081nop [rax]
140002088
140002088loc_140002088:
140002088mov rcx, rbx
14000208bmov rbx, [rbx+16]
14000208fcall free
140002094test rbx, rbx
140002097jne 0x140002088
140002099
140002099loc_140002099:
140002099lea rcx, [rip+0x2e060]
1400020a0mov [rip+0x2e035], 0
1400020abmov [rip+0x2e033], 0
1400020b5call [rip+0x2f125]
1400020bbjmp 0x14000202c
1400020c0
1400020c0loc_1400020c0:
1400020c0call fpreset
1400020c5mov eax, 1
1400020caadd rsp, 32
1400020cepop rbx
1400020cfret
1400020d0
1400020d0loc_1400020d0:
1400020d0call __mingwthr_run_key_dtors.part.0
1400020d5jmp 0x14000206a
1400020d7
1400020d7 66 0f 1f 84 00 00 00 00 00 f........
1400020e0
1400020e0loc_1400020e0:
1400020e0lea rcx, [rip+0x2e019]
1400020e7call [rip+0x2f113]
1400020edjmp 0x140002022
140002000

1400020f2
1400020f2 // align 0x10

140002100
140002100_ValidateImageBase:
140002100xor eax, eax
140002102cmp [rcx], 23117
140002107jne 0x140002118
140002109movsxd rdx, [rcx+60]
14000210dadd rcx, rdx
140002110cmp [rcx], 17744
140002116je 0x140002120
140002118
140002118loc_140002118:
140002118ret
140002119
140002119 0f 1f 80 00 00 00 00 .......
140002120
140002120loc_140002120:
140002120xor eax, eax
140002122cmp [rcx+24], 523
140002128sete al
14000212bret
140002100

14000212c
14000212c // align 0x10

140002130
140002130_FindPESection:
140002130movsxd rax, [rcx+60]
140002134add rcx, rax
140002137movzx eax, [rcx+20]
14000213bmovzx r8l, [rcx+6]
140002140lea rax, [rcx+rax+24]
140002145test r8w, r8w
140002149je 0x14000217d
14000214blea ecx, [r8-1]
14000214flea rcx, [rcx+4*rcx]
140002153lea r9, [rax+8*rcx+40]
140002158nop [rax+rax]
140002160
140002160loc_140002160:
140002160mov r8l, [rax+12]
140002164mov rcx, r8
140002167cmp rdx, r8
14000216ajb 0x140002174
14000216cadd ecx, [rax+8]
14000216fcmp rdx, rcx
140002172jb 0x14000217f
140002174
140002174loc_140002174:
140002174add rax, 40
140002178cmp rax, r9
14000217bjne 0x140002160
14000217d
14000217dloc_14000217d:
14000217dxor eax, eax
14000217f
14000217floc_14000217f:
14000217fret
140002130

140002180
140002180_FindPESectionByName:
140002180push rdi
140002181push rsi
140002182push rbx
140002183sub rsp, 32
140002187mov rsi, rcx
14000218acall strlen
14000218fcmp rax, 8
140002193ja 0x140002210
140002195mov rdx, [rip+0x2a254]
14000219cxor ebx, ebx
14000219ecmp [rdx], 23117
1400021a3jne 0x1400021fe
1400021a5movsxd rax, [rdx+60]
1400021a9add rax, rdx
1400021accmp [rax], 17744
1400021b2jne 0x1400021fe
1400021b4cmp [rax+24], 523
1400021bajne 0x1400021fe
1400021bcmovzx edx, [rax+20]
1400021c0lea rbx, [rax+rdx+24]
1400021c5movzx edx, [rax+6]
1400021c9test dx, dx
1400021ccje 0x140002210
1400021celea eax, [rdx-1]
1400021d1lea rax, [rax+4*rax]
1400021d5lea rdi, [rbx+8*rax+40]
1400021dajmp 0x1400021e9
1400021dc
1400021dc 0f 1f 40 00 ..@.
1400021e0
1400021e0loc_1400021e0:
1400021e0add rbx, 40
1400021e4cmp rbx, rdi
1400021e7je 0x140002210
1400021e9
1400021e9loc_1400021e9:
1400021e9mov r8l, 8
1400021efmov rdx, rsi
1400021f2mov rcx, rbx
1400021f5call strncmp
1400021fatest eax, eax
1400021fcjne 0x1400021e0
1400021fe
1400021feloc_1400021fe:
1400021femov rax, rbx
140002201add rsp, 32
140002205pop rbx
140002206pop rsi
140002207pop rdi
140002208ret
140002209
140002209 0f 1f 80 00 00 00 00 .......
140002210
140002210loc_140002210:
140002210xor ebx, ebx
140002212mov rax, rbx
140002215add rsp, 32
140002219pop rbx
14000221apop rsi
14000221bpop rdi
14000221cret
140002180

14000221d
14000221d // align 0x10

140002220
140002220__mingw_GetSectionForAddress:
140002220mov rdx, [rip+0x2a1c9]
140002227xor eax, eax
140002229cmp [rdx], 23117
14000222ejne 0x140002240
140002230movsxd r8, [rdx+60]
140002234add r8, rdx
140002237cmp [r8], 17744
14000223eje 0x140002248
140002240
140002240loc_140002240:
140002240ret
140002241
140002241 0f 1f 80 00 00 00 00 .......
140002248
140002248loc_140002248:
140002248cmp [r8+24], 523
14000224fjne 0x140002240
140002251movzx eax, [r8+20]
140002256sub rcx, rdx
140002259lea rax, [r8+rax+24]
14000225emovzx r8l, [r8+6]
140002263test r8w, r8w
140002267je 0x14000229d
140002269lea edx, [r8-1]
14000226dlea rdx, [rdx+4*rdx]
140002271lea r9, [rax+8*rdx+40]
140002276nop [rax+rax]
140002280
140002280loc_140002280:
140002280mov r8l, [rax+12]
140002284mov rdx, r8
140002287cmp rcx, r8
14000228ajb 0x140002294
14000228cadd edx, [rax+8]
14000228fcmp rcx, rdx
140002292jb 0x140002240
140002294
140002294loc_140002294:
140002294add rax, 40
140002298cmp rax, r9
14000229bjne 0x140002280
14000229d
14000229dloc_14000229d:
14000229dxor eax, eax
14000229fret
140002220

1400022a0
1400022a0__mingw_GetSectionCount:
1400022a0mov rax, [rip+0x2a149]
1400022a7xor ecx, ecx
1400022a9cmp [rax], 23117
1400022aejne 0x1400022bf
1400022b0movsxd rdx, [rax+60]
1400022b4add rax, rdx
1400022b7cmp [rax], 17744
1400022bdje 0x1400022c8
1400022bf
1400022bfloc_1400022bf:
1400022bfmov eax, ecx
1400022c1ret
1400022c2
1400022c2 66 0f 1f 44 00 00 f..D..
1400022c8
1400022c8loc_1400022c8:
1400022c8cmp [rax+24], 523
1400022cejne 0x1400022bf
1400022d0movzx ecx, [rax+6]
1400022d4mov eax, ecx
1400022d6ret
1400022a0

1400022d7
1400022d7 // align 0x10

1400022e0
1400022e0_FindPESectionExec:
1400022e0mov r8, [rip+0x2a109]
1400022e7xor eax, eax
1400022e9cmp [r8], 23117
1400022efjne 0x140002300
1400022f1movsxd rdx, [r8+60]
1400022f5add rdx, r8
1400022f8cmp [rdx], 17744
1400022feje 0x140002308
140002300
140002300loc_140002300:
140002300ret
140002301
140002301 0f 1f 80 00 00 00 00 .......
140002308
140002308loc_140002308:
140002308cmp [rdx+24], 523
14000230ejne 0x140002300
140002310movzx eax, [rdx+20]
140002314movzx r8l, [rdx+6]
140002319lea rax, [rdx+rax+24]
14000231etest r8w, r8w
140002322je 0x140002350
140002324lea edx, [r8-1]
140002328lea rdx, [rdx+4*rdx]
14000232clea rdx, [rax+8*rdx+40]
140002331nop [rax]
140002338
140002338loc_140002338:
140002338test [rax+39], 32
14000233cje 0x140002347
14000233etest rcx, rcx
140002341je 0x140002300
140002343sub rcx, 1
140002347
140002347loc_140002347:
140002347add rax, 40
14000234bcmp rax, rdx
14000234ejne 0x140002338
140002350
140002350loc_140002350:
140002350xor eax, eax
140002352ret
1400022e0