Function at 0x18001ffb0
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x110
movaps xmmword [rax - 0x48], xmm6
mov r13d, r9d
movaps xmmword [rax - 0x58], xmm7
mov rdi, r8
movaps xmmword [rax - 0x68], xmm8
mov rbx, rcx
movaps xmmword [rax - 0x78], xmm9
mov r12d, r9d
movaps xmmword [rax - 0x88], xmm10
imul eax, r9d, 0x258
mov dword [rsp + 0x50], eax
cmp r9d, eax
ja 0x18002004f
mov rsi, qword [rbp + 0x70]
xor ecx, ecx
mov r14d, dword [rbp + 0x68]
movaps xmm9, xmmword [rbp - 0x70]
mov r15d, dword [rbp + 0x68]
movaps xmm10, xmmword [rbp - 0x70]
mov eax, r12d
sub eax, 0x18
je 0x1800200ca
sub eax, 0x76
je 0x180020086
sub eax, 0x79
je 0x180020248
sub eax, 0xa51
je 0x18002004f
cmp eax, 0x37c6
jne 0x1800201fc
lea r11, [rsp + 0x110]
mov rax, rbx
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, dword [rdi]
lea r9, [rbp + 0x68]
mov qword [rsp + 0x40], rcx
xor edx, edx
mov qword [rsp + 0x38], rcx
xor r8d, r8d
mov qword [rsp + 0x30], rcx
mov dword [rbp + 0x68], eax
mov rax, qword [rsi]
mov qword [rsp + 0x28], rcx
lea ecx, [rdx + 0x6f]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.180047640
mov qword [rbx], rax
jmp 0x1800201fa
movups xmm6, xmmword [rdi]
mov ebx, 0x100
movups xmm7, xmmword [rdi + 0x10]
mov eax, ebx
sub eax, 0xd7
je 0x1800200fd
sub eax, 0x29
je 0x180020161
cmp eax, 0x43de
jne 0x180020117
cmp r14d, 0xb7
jne 0x180020117
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r8, qword [0x180113568]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
add ebx, 0x5100
cmp ebx, 0xf300
jbe 0x1800200d6
movaps xmm6, xmm9
movups xmm7, xmmword [rsi]
mov ebx, 0x100
movups xmm8, xmmword [rsi + 0x10]
mov eax, ebx
sub eax, 0xd7
je 0x180020192
sub eax, 0x29
je 0x180020213
cmp eax, 0x43de
jne 0x1800201ac
cmp r15d, 0xb7
jne 0x1800201ac
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8d, 0x118
movdqa xmmword [rsp + 0x70], xmm7
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.180032880
movaps xmm9, xmmword [rbp - 0x80]
movdqa xmm6, xmm9
jmp 0x180020129
mov r8, qword [0x180113568]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
add ebx, 0x5100
cmp ebx, 0xf300
jbe 0x180020136
movaps xmm0, xmm10
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x60], xmm6
mov r8d, 0xfd
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.1800b5000
mov rbx, qword [rbp + 0x50]
movups xmm0, xmmword [rbp - 0x60]
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
xor ecx, ecx
imul eax, r13d, 0x78
add r12d, eax
cmp r12d, dword [rsp + 0x50]
jbe 0x180020023
jmp 0x18002004f
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm7
mov r8d, 0x118
movdqa xmmword [rsp + 0x60], xmm8
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.180032880
movaps xmm10, xmmword [rbp - 0x70]
movdqa xmm0, xmm10
jmp 0x1800201c2
mov rax, qword [rbp + 0x58]
cmp dword [rax], 0
je 0x1800202b4
mov ecx, 0xef
mov eax, ecx
sub eax, 0xef
je 0x18002027b
cmp eax, 1
jne 0x18002029e
movzx eax, byte [rdi + 5]
mov byte [rbp + 0x52], al
movzx eax, byte [rsi + 4]
mov byte [rbp + 0x51], al
movzx eax, byte [rdi + 4]
mov byte [rbp + 0x50], al
jmp 0x18002029e
movzx eax, byte [rsi + 7]
mov byte [rbp + 0x57], al
movzx eax, byte [rdi + 7]
mov byte [rbp + 0x56], al
movzx eax, byte [rsi + 6]
mov byte [rbp + 0x55], al
movzx eax, byte [rdi + 6]
mov byte [rbp + 0x54], al
movzx eax, byte [rsi + 5]
mov byte [rbp + 0x53], al
inc ecx
cmp ecx, 0xf1
jb 0x180020256
mov rax, qword [rbp + 0x50]
mov qword [rbx], rax
jmp 0x18002004f
mov ecx, 0x64
nop dword [rax]
mov eax, ecx
sub eax, 0x64
je 0x1800202f6
sub eax, 1
je 0x1800202d9
cmp eax, 1
jne 0x18002030b
movzx eax, byte [rdi]
mov byte [rbp + 0x50], al
jmp 0x18002030b
movzx eax, byte [rdi + 2]
mov byte [rbp + 0x54], al
movzx eax, byte [rsi + 1]
mov byte [rbp + 0x53], al
movzx eax, byte [rdi + 1]
mov byte [rbp + 0x52], al
movzx eax, byte [rsi]
mov byte [rbp + 0x51], al
jmp 0x18002030b
movzx eax, byte [rsi + 3]
mov byte [rbp + 0x57], al
movzx eax, byte [rdi + 3]
mov byte [rbp + 0x56], al
movzx eax, byte [rsi + 2]
mov byte [rbp + 0x55], al
inc ecx
cmp ecx, 0x67
jb 0x1800202c0
mov rax, qword [rbp + 0x50]
mov qword [rbx], rax
jmp 0x18002004f