Function at 0x18005cb10
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov rax, qword [0x180087e88]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov eax, r8d
mov dword [rsp + 0x20], eax
mov rsi, rdx
mov r14, rcx
xor r8d, r8d
mov dword [rsp + 0x24], r8d
mov qword [rbp - 0x49], r8
mov qword [rbp - 0x41], ILRemoveLastID
mov byte [rbp - 0x59], r8b
mov r13d, eax
imul ecx, eax, 0xa5
mov dword [rsp + 0x28], ecx
cmp eax, ecx
ja 0x18005d023
lea edx, [r8 + 0x77]
lea r9d, [r8 + 0x32]
mov r12, qword [rbp - 0x69]
mov rdi, qword [rbp - 0x69]
mov r15d, dword [rsp + 0x28]
nop dword [rax]
cmp r13d, 0xb24
ja 0x18005cf3d
je 0x18005ccb3
cmp r13d, 0x420
ja 0x18005cc51
je 0x18005cc45
mov eax, r13d
sub eax, 0x58
je 0x18005cc3c
sub eax, 0x24
je 0x18005cc31
cmp eax, 0x22
jne 0x18005d00e
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x61], rax
cmp rax, 0
jne 0x18005d002
mov ebx, 0x109
cmp ebx, 0x109
je 0x18005cc04
cmp ebx, 0xbf81
jne 0x18005cc1e
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.UsePermissionManagerForMediaRequests
call fcn.180079020
add ebx, 0xbe78
cmp ebx, 0x17cf0
jbe 0x18005cbe8
jmp 0x18005d002
mov r12d, 8
jmp 0x18005d00e
mov word [rbp + 7], dx
jmp 0x18005d00e
mov dword [rbp + 9], 0x320073
jmp 0x18005d012
cmp r13d, 0x5d0
je 0x18005ccab
cmp r13d, 0x768
je 0x18005cc7c
cmp r13d, 0x7e8
jne 0x18005d012
mov dword [rbp + 0xd], 0x33005f
jmp 0x18005d012
mov ecx, 0xf2
mov eax, ecx
sub eax, 0xf2
je 0x18005cc95
cmp eax, 1
je 0x18005ce1c
jmp 0x18005cc9d
mov rax, qword [rbp - 0x61]
mov qword [rbp - 0x71], rax
inc ecx
cmp ecx, 0xf4
jb 0x18005cc81
mov eax, dword [rsp + 0x20]
mov rdi, r8
jmp 0x18005d012
mov rax, qword [rsi + 0x10]
sub rax, rdi
cmp rax, r12
jb 0x18005d00e
nop dword [rax]
nop word [rax + rax]
mov qword [rbp - 0x29], r8
mov qword [rbp - 0x21], ILRemoveLastID
mov byte [rbp - 0x39], 0
mov ebx, 0x57
mov eax, ebx
sub eax, 0x53
je 0x18005ce9c
sub eax, 1
je 0x18005ce83
sub eax, 1
je 0x18005cdd2
sub eax, 1
je 0x18005cdad
cmp eax, 1
jne 0x18005cedb
mov qword [rbp - 9], r8
mov qword [rbp - 1], ILRemoveLastID
mov byte [rbp - 0x19], 0
mov rax, qword [rsi + 0x10]
cmp rax, rdi
jb 0x18005d077
sub rax, rdi
mov r8, r12
cmp rax, r12
cmovb r8, rax
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x18005cd4b
mov rax, qword [rsi]
lea rdx, [rax + rdi]
lea rcx, [rbp - 0x19]
call fcn.180063650
or dword [rsp + 0x24], 1
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x18005cd98
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005cd93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005d069
call fcn.180079234
movups xmm0, xmmword [rbp - 0x19]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [rbp - 9]
movups xmmword [rbp - 0x49], xmm1
jmp 0x18005ced8
add rdi, r12
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rcx, qword [rbp - 0x59]
xor edx, edx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov r15d, eax
jmp 0x18005ced8
test r15d, r15d
jne 0x18005cedb
mov byte [rbp - 0x71], r15b
mov rax, qword [rbp - 0x21]
cmp rax, 0x10
jb 0x18005ce1c
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005ce16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005d070
call fcn.180079234
nop
mov rax, qword [rbp - 0x41]
cmp rax, 0x10
jb 0x18005ce58
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005ce53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005d062
call fcn.180079234
mov rax, qword [rbp - 0x71]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.180079740
mov rbx, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp - 0x79], r15d
mov r8d, 0xd0
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x39]
call fcn.1800534e0
jmp 0x18005ced8
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18005cecc
movups xmm0, xmmword [rbp - 0x39]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x29]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x29], r8
mov qword [rbp - 0x21], ILRemoveLastID
mov byte [rbp - 0x39], 0
add qword [r14 + 8], 0x20
jmp 0x18005cedb
lea r8, [rbp - 0x39]
mov rcx, r14
call fcn.1800442d0
xor r8d, r8d
dec ebx
cmp ebx, 0x52
ja 0x18005cce5
mov rax, qword [rbp - 0x21]
cmp rax, 0x10
jb 0x18005cf22
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005cf1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005d070
call fcn.180079234
mov rax, qword [rsi + 0x10]
sub rax, rdi
cmp rax, r12
mov r8d, 0
jae 0x18005ccd0
jmp 0x18005d005
cmp r13d, 0x1340
ja 0x18005cf93
je 0x18005cf8a
cmp r13d, 0xbb0
je 0x18005cf80
cmp r13d, 0xf78
je 0x18005cf74
cmp r13d, 0x1078
jne 0x18005d012
cmp rdi, qword [rsi + 0x10]
sete byte [rbp - 0x71]
jmp 0x18005ce1c
mov dword [rbp + 0x13], 0x64002e
jmp 0x18005d012
mov word [rbp + 0x11], r9w
jmp 0x18005d012
mov dword [rbp + 0x17], 0x6c006c
jmp 0x18005d012
cmp r13d, 0x1708
je 0x18005cfe5
cmp r13d, 0x1ad0
je 0x18005cfbb
cmp r13d, 0x1e98
jne 0x18005d012
mov edx, 2
mov rcx, qword [rsi]
call qword [rbp - 0x69]
jmp 0x18005d002
xor edx, edx
mov r8d, 0x80
mov rcx, rsi
call fcn.18005d0a0
test al, al
jne 0x18005d002
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x18005ce58
inc rdx
jmp 0x18005ce2a
mov word [rbp + 0x1b], r8w
mov edx, 0x16
mov r8d, SHSetFolderPathW
lea rcx, [rbp + 7]
call fcn.18004bdc0
mov qword [rbp - 0x69], rax
xor r8d, r8d
mov edx, 0x77
lea r9d, [rdx - 0x45]
mov eax, dword [rsp + 0x20]
imul ecx, eax, 0xb
add r13d, ecx
cmp r13d, dword [rsp + 0x28]
jbe 0x18005cb90
mov rax, qword [rbp - 0x41]
cmp rax, 0x10
jb 0x18005ce58
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005ce53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005ce53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180060f50
int3