FilesBlogsAbout
Register
File bqtlock_618070d597dd73c43ba5d4bde2baa93a4f6038e3279de3bafe688caa5c409a58.exe
Function:
    140000000
    140000000 struct IMAGE_DOS_HEADER
    140000040
    140000040 struct IMAGE_DOS_STUB
    140000079
    140000079 00 00 00 00 00 00 00 .......
    140000080
    140000080 struct IMAGE_NT_HEADERS
    140000188
    140000188 struct IMAGE_SECTION_HEADER
    1400001b0
    1400001b0 struct IMAGE_SECTION_HEADER
    1400001d8
    1400001d8 struct IMAGE_SECTION_HEADER
    140000200
    140000200 struct IMAGE_SECTION_HEADER
    140000228
    140000228 struct IMAGE_SECTION_HEADER
    140000250
    140000250 struct IMAGE_SECTION_HEADER
    140000278
    140000278 struct IMAGE_SECTION_HEADER
    1400002a0
    1400002a0 struct IMAGE_SECTION_HEADER
    1400002c8
    1400002c8 struct IMAGE_SECTION_HEADER
    1400002f0
    1400002f0 struct IMAGE_SECTION_HEADER
    140000318
    140000318 struct IMAGE_SECTION_HEADER
    140000340
    140000340 struct IMAGE_SECTION_HEADER
    140000368
    140000368 struct IMAGE_SECTION_HEADER
    140000390
    140000390 struct IMAGE_SECTION_HEADER
    1400003b8
    1400003b8 struct IMAGE_SECTION_HEADER
    1400003e0
    1400003e0 struct IMAGE_SECTION_HEADER
    140000408
    140000408 struct IMAGE_SECTION_HEADER
    140000430
    140000430 struct IMAGE_SECTION_HEADER
    140000458
    140000458 struct IMAGE_SECTION_HEADER
    140001000
    140001000__mingw_invalidParameterHandler:
    140001000ret
    140001000
    140001001
    140001001 // align 0x10
    140001010
    140001010__tmainCRTStartup:
    140001010push r15
    140001012push r14
    140001014push r13
    140001016push r12
    140001018push rbp
    140001019push rdi
    14000101apush rsi
    14000101bpush rbx
    14000101csub rsp, 88
    140001020mov eax, 48
    140001025mov rax, [eax]
    14000102amov rsi, [rax+8]
    14000102emov rbx, [rip+0x19663b]
    140001035mov rdi, [rip+0x1c8d1c]
    14000103cjmp 0x140001050
    14000103e
    14000103e 66 90 f.
    140001040
    140001040loc_140001040:
    140001040cmp rsi, rax
    140001043je 0x140001100
    140001049mov ecx, 1000
    14000104ecall rdi
    140001050
    140001050loc_140001050:
    140001050xor eax, eax
    140001052lock cmpxchg [rbx], rsi
    140001057jne 0x140001040
    140001059xor r14l, r14l
    14000105c
    14000105cloc_14000105c:
    14000105cmov rbp, [rip+0x19661d]
    140001063mov eax, [rbp]
    140001066cmp eax, 1
    140001069je 0x1400013c8
    14000106fmov eax, [rbp]
    140001072test eax, eax
    140001074je 0x140001110
    14000107amov [rip+0x1c6f80], 1
    140001084
    140001084loc_140001084:
    140001084test r14l, r14l
    140001087je 0x140001328
    14000108d
    14000108dloc_14000108d:
    14000108dmov rax, [rip+0x19651c]
    140001094mov rax, [rax]
    140001097test rax, rax
    14000109aje 0x1400010a8
    14000109cxor r8l, r8l
    14000109fmov edx, 2
    1400010a4xor ecx, ecx
    1400010a6call rax
    1400010a8
    1400010a8loc_1400010a8:
    1400010a8call __p___initenv
    1400010admov r8, [rip+0x1c6f5c]
    1400010b4mov ecx, [rip+0x1c6f66]
    1400010bamov [rax], r8
    1400010bdmov rdx, [rip+0x1c6f54]
    1400010c4call main
    1400010c9mov ecx, [rip+0x1c6f39]
    1400010cftest ecx, ecx
    1400010d1je 0x1400013d2
    1400010d7mov edx, [rip+0x1c6f27]
    1400010ddtest edx, edx
    1400010dfje 0x140001310
    1400010e5
    1400010e5loc_1400010e5:
    1400010e5add rsp, 88
    1400010e9pop rbx
    1400010eapop rsi
    1400010ebpop rdi
    1400010ecpop rbp
    1400010edpop r12
    1400010efpop r13
    1400010f1pop r14
    1400010f3pop r15
    1400010f5ret
    1400010f6
    1400010f6 66 2e 0f 1f 84 00 00 00 00 00 f.........
    140001100
    140001100loc_140001100:
    140001100mov r14l, 1
    140001106jmp 0x14000105c
    14000110b
    14000110b 0f 1f 44 00 00 ..D..
    140001110
    140001110loc_140001110:
    140001110mov [rbp], 1
    140001117call _pei386_runtime_relocator
    14000111clea rcx, [rip+0x195bd]
    140001123call [rip+0x1c8c27]
    140001129mov rdx, [rip+0x196530]
    140001130lea rcx, [rip-311]
    140001137mov [rdx], rax
    14000113acall _set_invalid_parameter_handler
    14000113fcall fpreset
    140001144mov rax, [rip+0x1964e5]
    14000114bxor ecx, ecx
    14000114dmov [rax], 1
    140001153mov rax, [rip+0x1964e6]
    14000115amov [rax], 1
    140001160mov rax, [rip+0x1964e9]
    140001167mov [rax], 1
    14000116dmov rax, [rip+0x1963fc]
    140001174cmp [rax], 23117
    140001179jne 0x1400011c0
    14000117bmovsxd rdx, [rax+60]
    14000117fadd rax, rdx
    140001182cmp [rax], 17744
    140001188jne 0x1400011c0
    14000118amovzx edx, [rax+24]
    14000118ecmp dx, 267
    140001193je 0x1400013aa
    140001199cmp dx, 523
    14000119ejne 0x1400011c0
    1400011a0cmp [rax+132], 14
    1400011a7jbe 0x1400011c0
    1400011a9mov r9l, [rax+248]
    1400011b0xor ecx, ecx
    1400011b2test r9l, r9l
    1400011b5setne cl
    1400011b8nop [rax+rax]
    1400011c0
    1400011c0loc_1400011c0:
    1400011c0mov rax, [rip+0x196459]
    1400011c7mov [rip+0x1c6e3b], ecx
    1400011cdmov r8l, [rax]
    1400011d0test r8l, r8l
    1400011d3jne 0x140001338
    1400011d9mov ecx, 1
    1400011decall __set_app_type
    1400011e3
    1400011e3loc_1400011e3:
    1400011e3call __p__fmode
    1400011e8mov rdx, [rip+0x196531]
    1400011efmov edx, [rdx]
    1400011f1mov [rax], edx
    1400011f3call __p__commode
    1400011f8mov rdx, [rip+0x196501]
    1400011ffmov edx, [rdx]
    140001201mov [rax], edx
    140001203call _setargv
    140001208test eax, eax
    14000120ajs 0x140001301
    140001210mov rax, [rip+0x195949]
    140001217cmp [rax], 1
    14000121aje 0x140001399
    140001220
    140001220loc_140001220:
    140001220mov rax, [rip+0x196399]
    140001227cmp [rax], -1
    14000122aje 0x14000138a
    140001230
    140001230loc_140001230:
    140001230mov rdx, [rip+0x1964b9]
    140001237mov rcx, [rip+0x1964a2]
    14000123ecall _initterm_e
    140001243test eax, eax
    140001245jne 0x140001380
    14000124bmov rax, [rip+0x1964fe]
    140001252lea r8, [rip+0x1c6db7]
    140001259lea rdx, [rip+0x1c6db8]
    140001260lea rcx, [rip+0x1c6db9]
    140001267mov eax, [rax]
    140001269mov [rsp+76], eax
    14000126dmov rax, [rip+0x19649c]
    140001274mov r9l, [rax]
    140001277lea rax, [rsp+76]
    14000127cmov [rsp+32], rax
    140001281call __getmainargs
    140001286test eax, eax
    140001288js 0x140001301
    14000128amovsxd r12, [rip+0x1c6d8f]
    140001291lea ecx, [r12+1]
    140001296movsxd rcx, ecx
    140001299shl rcx, 3
    14000129dcall malloc
    1400012a2mov r13, rax
    1400012a5test rax, rax
    1400012a8je 0x140001301
    1400012aatest r12l, r12l
    1400012adjle 0x14000134c
    1400012b3mov r15, [rip+0x1c6d5e]
    1400012bamov esi, 1
    1400012bfjmp 0x1400012e1
    1400012c1
    1400012c1 0f 1f 80 00 00 00 00 .......
    1400012c8
    1400012c8loc_1400012c8:
    1400012c8mov rdx, [r15+8*rsi-8]
    1400012cdmov r8, rdi
    1400012d0mov rcx, rax
    1400012d3call memcpy
    1400012d8cmp r12, rsi
    1400012dbje 0x140001347
    1400012ddadd rsi, 1
    1400012e1
    1400012e1loc_1400012e1:
    1400012e1mov rcx, [r15+8*rsi-8]
    1400012e6call strlen
    1400012eblea rdi, [rax+1]
    1400012efmov rcx, rdi
    1400012f2call malloc
    1400012f7mov [r13+8*rsi-8], rax
    1400012fctest rax, rax
    1400012ffjne 0x1400012c8
    140001301
    140001301loc_140001301:
    140001301mov ecx, 8
    140001306call _amsg_exit
    14000130bnop [rax+rax]
    140001310
    140001310loc_140001310:
    140001310mov [rsp+60], eax
    140001314call _cexit
    140001319mov eax, [rsp+60]
    14000131djmp 0x1400010e5
    140001322
    140001322 66 0f 1f 44 00 00 f..D..
    140001328
    140001328loc_140001328:
    140001328xor eax, eax
    14000132axchg [rbx], rax
    14000132djmp 0x14000108d
    140001332
    140001332 66 0f 1f 44 00 00 f..D..
    140001338
    140001338loc_140001338:
    140001338mov ecx, 2
    14000133dcall __set_app_type
    140001342jmp 0x1400011e3
    140001347
    140001347loc_140001347:
    140001347lea rax, [r13+8*r12]
    14000134c
    14000134cloc_14000134c:
    14000134cmov [rax], 0
    140001353mov rdx, [rip+0x196376]
    14000135amov rcx, [rip+0x19635f]
    140001361mov [rip+0x1c6cb0], r13
    140001368call _initterm
    14000136dcall __main
    140001372mov [rbp], 2
    140001379jmp 0x140001084
    14000137e
    14000137e 66 90 f.
    140001380
    140001380loc_140001380:
    140001380mov eax, 255
    140001385jmp 0x1400010e5
    14000138a
    14000138aloc_14000138a:
    14000138amov ecx, -1
    14000138fcall _configthreadlocale
    140001394jmp 0x140001230
    140001399
    140001399loc_140001399:
    140001399lea rcx, [rip+0x18c90]
    1400013a0call __mingw_setusermatherr
    1400013a5jmp 0x140001220
    1400013aa
    1400013aaloc_1400013aa:
    1400013aacmp [rax+116], 14
    1400013aejbe 0x1400011c0
    1400013b4mov r10l, [rax+232]
    1400013bbxor ecx, ecx
    1400013bdtest r10l, r10l
    1400013c0setne cl
    1400013c3jmp 0x1400011c0
    1400013c8
    1400013c8loc_1400013c8:
    1400013c8mov ecx, 31
    1400013cdcall _amsg_exit
    1400013d2
    1400013d2loc_1400013d2:
    1400013d2mov ecx, eax
    1400013d4call exit
    1400013d9nop
    140001010