Function at 0x18001bb70
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], r12
mov qword [rsp + 0x20], r13
push rbp
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x180076010]
xor rax, rsp
mov qword [rbp], rax
movabs rax, 0x5ffd8b96bf758f2
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x60], rax
movabs r12, 0x8485f61f711b8285
mov qword [rbp - 0x48], r12
movabs rax, 0x8aa8f339e4c95a27
mov qword [rbp - 0x58], rax
movabs r14, 0x6c8fb5d628b36bb6
movabs rax, 0x6ca8255872bb6654
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x50], rax
movabs r15, 0xee86c40dbbbb3f4b
movabs r13, 0x6ca8255872bb0a38
mov qword [rbp - 0x78], r15
movdqa xmm0, xmmword [rbp - 0x80]
pxor xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r12
movdqa xmm1, xmmword [rbp - 0x70]
pxor xmm1, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0xeb9bbf58d21bd2
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
movabs rax, 0xee86c40dbbbb3f27
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x78], rax
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0xe6c1a35cc10edf
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x58], r15
movabs rdi, 0xee86c40dd7d75b65
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x78], rdi
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x50], r13
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x48], r12
movabs rax, 0x3fdc5af4dd818db
movdqa xmm1, xmmword [rbp - 0x50]
mov qword [rbp - 0x60], rax
movabs rax, 0x82eaa023cfd85a3f
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r15
movdqa xmm0, xmmword [rbp - 0x80]
pxor xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r12
pxor xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmmword [rbp - 0x50], xmm1
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0x8a1c1a651c108d8
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x58], r15
movabs rbx, 0xee86c40dbbbb5327
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x78], rbx
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0x1ffcc1a651c108d8
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
movabs rax, 0xee86a861df954f27
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x78], rax
pxor xmm0, xmmword [rbp - 0x80]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x78], rdi
lea rcx, [rbp - 0x80]
movabs rax, 0x1fe3dca25dc70ed8
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x78], rbx
lea rcx, [rbp - 0x80]
movabs rax, 0x8a184b85bd21fd8
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0x8e1d4bb4df705f9
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x60], rax
lea rcx, [rbp - 0x60]
movabs rax, 0x9af3ab5fd5d55008
mov qword [rbp - 0x78], r15
movdqa xmm0, xmmword [rbp - 0x80]
mov qword [rbp - 0x58], rax
movabs rax, 0x42da40281ede425d
pxor xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x8485f61f7177eee1
mov qword [rbp - 0x48], rax
movdqa xmm1, xmmword [rbp - 0x50]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r12
pxor xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x78], rdi
lea rcx, [rbp - 0x80]
movabs rax, 0xeadbb849db08c5
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x78], rbx
lea rcx, [rbp - 0x80]
movabs rax, 0x8a1dcba4bc519c5
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x78], rbx
lea rcx, [rbp - 0x80]
movabs rax, 0x8a1dbb945df19c3
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0x42fbd0b841dd02c1
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
movabs rax, 0xee86c40dbbd7532f
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x78], rax
pxor xmm0, xmmword [rbp - 0x80]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x78], rbx
lea rcx, [rbp - 0x80]
movabs rax, 0x8a1dca546dd02c1
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x78], rdi
lea rcx, [rbp - 0x80]
movabs rax, 0x5ebcdca649c01fc1
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call fcn.18005ef80
test eax, eax
jne 0x18001c450
lea rcx, [rbp - 0x60]
call fcn.180015790
lea rdi, [0x1800762d0]
mov rbx, rax
cmp rdi, rax
je 0x18001c03e
mov rdx, qword [0x1800762e8]
cmp rdx, 0x10
jb 0x18001bff9
mov rcx, qword [0x1800762d0]
inc rdx
cmp rdx, 0x1000
jb 0x18001bff4
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001c070
mov rcx, r8
call fcn.18005ff68
mov qword [0x1800762e0], 0
mov qword [0x1800762e8], 0xf
mov byte [0x1800762d0], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x1800762d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x1800762e0], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x18001c07c
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001c077
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001c077
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005ff68
cmp qword [0x180076318], 0x10
lea rdx, [0x180076300]
mov r8, qword [0x1800762e0]
cmovae rdx, qword [0x180076300]
cmp qword [0x1800762e8], 0x10
cmovae rdi, qword [0x1800762d0]
cmp r8, qword [0x180076310]
jne 0x18001c0bf
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18001c0c6
mov byte [0x180076062], 0
call fcn.180022820
mov qword [rbp - 0x50], r13
movabs rax, 0x29a64425ecf5f9a
mov qword [rbp - 0x40], rax
movabs rcx, 0xc61e5a97da43a62d
mov qword [rbp - 0x48], r12
movabs rax, 0xe0b5fe29c33b92cf
mov qword [rbp - 0x38], rax
movabs r12, 0x192221d42dca0dfc
movabs rax, 0x7d9f2ecececa221e
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x20], rax
movabs r13, 0xc1fed83b0f0c0229
movabs rax, 0x8afc85656217ad53
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x18], rax
movabs rax, 0x54ab65d070810820
mov qword [rbp - 0x10], rax
movabs rax, 0x2fb995ef10935382
mov qword [rsp + 0x20], rax
movabs rax, 0xdaa6fc3c9b8f0d6b
mov qword [rsp + 0x28], rax
movabs rax, 0x4c9c12784b832a00
pxor xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], rax
movabs rax, 0xb5b1d62f433bb6b7
mov qword [rsp + 0x38], rax
movabs rax, 0x3aba5c767ef96aba
movups xmm1, xmmword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movabs rax, 0xc085cc09807eb2fc
mov qword [rsp + 0x48], rax
movabs rax, 0x2167019615ea3cc8
pxor xmm1, xmmword [rbp - 0x50]
movups xmm2, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0xf5deea7d2f4e3a09
mov qword [rsp + 0x58], rax
movabs rax, 0x5dae68ee8cf2025d
movups xmm3, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], rax
movabs rax, 0xbabfa55324379c67
pxor xmm2, xmmword [rbp - 0x40]
mov qword [rsp + 0x68], rax
movabs rax, 0x54ab65d070b03800
movups xmm4, xmmword [rsp + 0x60]
mov qword [rsp + 0x70], rax
movabs rax, 0x6ca8255872bb0a38
mov qword [rbp - 0x50], rax
movabs rax, 0x8485f61f711b8285
pxor xmm4, xmmword [rbp - 0x20]
mov qword [rbp - 0x48], rax
movabs rax, 0x1eeac3994dde0af1
mov qword [rbp - 0x80], rax
movabs rax, 0x8be2aa68e9c25e27
mov qword [rbp - 0x78], rax
movabs rax, 0xcc0b6c44c96f4a
mov qword [rsp + 0x78], rcx
movups xmm5, xmmword [rsp + 0x70]
mov qword [rbp - 0x70], rax
movabs rax, 0x8485f61f711b82e9
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x30], xmm1
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
mov qword [rbp - 0x68], rax
movdqa xmm1, xmmword [rbp - 0x70]
pxor xmm1, xmmword [rbp - 0x50]
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r13
pxor xmm3, xmmword [rbp - 0x30]
mov qword [rbp - 8], rcx
pxor xmm5, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x40], xmm2
movdqa xmmword [rsp + 0x50], xmm3
movdqa xmmword [rsp + 0x60], xmm4
movdqa xmmword [rsp + 0x70], xmm5
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x70], xmm1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
lea r8, [rsp + 0x20]
mov rdi, rax
lea rdx, [rbp - 0x60]
movsxd rcx, dword [rax + 0x3c]
mov ebx, dword [rcx + rax + 0x50]
xor eax, eax
mov qword [rbp - 0x50], rax
movups xmmword [rbp - 0x60], xmm0
call fcn.180014930
mov r11, qword [rbp - 0x58]
xor r10d, r10d
mov r9, qword [rbp - 0x60]
sub r11, r9
sar r11, 2
sub rbx, r11
je 0x18001c48c
nop dword [rax + rax]
xor eax, eax
test r11, r11
je 0x18001c354
xor ecx, ecx
nop dword [rax]
mov r8d, dword [r9 + rcx*4]
lea ecx, [rax + r10]
movzx ecx, byte [rcx + rdi]
cmp ecx, r8d
je 0x18001c34b
cmp r8d, 0xffffffff
jne 0x18001c47d
inc eax
mov ecx, eax
cmp rcx, r11
jb 0x18001c330
mov ebx, r10d
add rbx, rdi
test r9, r9
je 0x18001c397
mov rdx, qword [rbp - 0x50]
mov rax, r9
sub rdx, r9
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x18001c38f
mov r9, qword [r9 - 8]
add rdx, 0x27
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c4bd
mov rcx, r9
call fcn.18005ff68
mov qword [0x180076fc8], rbx
test rbx, rbx
je 0x18001c4d7
lea r8, [0x180077020]
mov rcx, rbx
lea rdx, [0x180019d20]
call fcn.18005f020
test eax, eax
jne 0x18001c3cc
lea edx, [rax + 1]
mov rcx, rbx
call fcn.18005f2f0
mov rbx, qword [0x1800770f0]
lea r8, [0x180077078]
mov rcx, rbx
lea rdx, [0x18001b750]
call fcn.18005f020
test eax, eax
jne 0x18001c3f8
lea edx, [rax + 1]
mov rcx, rbx
call fcn.18005f2f0
mov rbx, qword [0x1800770d0]
lea r8, [0x180077058]
mov rcx, rbx
lea rdx, [0x18001bac0]
call fcn.18005f020
test eax, eax
jne 0x18001c424
lea edx, [rax + 1]
mov rcx, rbx
call fcn.18005f2f0
mov rbx, qword [0x180077130]
lea r8, [0x180076fd8]
mov rcx, rbx
lea rdx, [0x18001bb30]
call fcn.18005f020
test eax, eax
jne 0x18001c450
lea edx, [rax + 1]
mov rcx, rbx
call fcn.18005f2f0
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.18005f8f0
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov r12, qword [r11 + 0x30]
mov r13, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
inc r10d
mov eax, r10d
cmp rax, rbx
jb 0x18001c320
test r9, r9
je 0x18001c4cc
mov rdx, qword [rbp - 0x50]
mov rax, r9
sub rdx, r9
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x18001c4c4
mov r9, qword [r9 - 8]
add rdx, 0x27
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001c4c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r9
call fcn.18005ff68
mov qword [0x180076fc8], 0
mov qword [rbp - 0x60], r14
lea r8, [rsp + 0x20]
mov qword [rbp - 0x58], r15
lea rdx, [rbp - 0x80]
movdqa xmm0, xmmword [rbp - 0x60]
movabs rax, 0x6ca8255872bb0a38
mov qword [rbp - 0x50], rax
mov r9d, 0x1010
mov qword [rsp + 0x50], r12
movabs rax, 0x8485f61f711b8285
mov qword [rbp - 0x48], rax
xor ecx, ecx
mov qword [rsp + 0x58], r13
movabs rax, 0x29a64425ecf5f9a
mov qword [rbp - 0x40], rax
movabs rax, 0xe0b5fe29c33b92cf
mov qword [rbp - 0x38], rax
movabs rax, 0x3e263a5328856b8f
mov qword [rsp + 0x20], rax
movabs rax, 0xb9dd4fb7d9b45173
mov qword [rsp + 0x28], rax
movabs rax, 0x6cdf252f72cc0a18
pxor xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], rax
movabs rax, 0x84e3f629712282ab
mov qword [rsp + 0x38], rax
movabs rax, 0x2ef642a5eb55fef
movdqa xmm1, xmmword [rsp + 0x30]
pxor xmm1, xmmword [rbp - 0x50]
mov qword [rsp + 0x40], rax
movabs rax, 0xe0d8fe46c35892e1
mov qword [rsp + 0x48], rax
movabs rax, 0x35bee6c0717839ab
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x40]
pxor xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x80], rax
movabs rax, 0xee86c40d44bab26e
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmm1, xmmword [rsp + 0x50]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r15
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x80]
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r13
pxor xmm1, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmmword [rsp + 0x50], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3