Function at 0x1800b4840
Capabilities:
Terminate process

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xe0
lea rbp, [rsp + 0x40]
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0xe0], rdi
movaps xmmword [rbp + 0x90], xmm6
movaps xmmword [rbp + 0x80], xmm7
mov rax, qword [0x180357660]
xor rax, rbp
mov qword [rbp + 0x70], rax
mov r15d, r8d
mov dword [rbp + 0x18], r8d
mov qword [rbp + 0x40], r9
mov r8, rdx
mov qword [rbp + 0x28], rdx
mov rdi, rcx
lea esi, [r15 - 8]
mov dword [rbp], esi
cmp r15d, esi
jbe case.0x1800b48fa.6
movss xmm6, dword [0x18034e190]
lea r14d, [r15 - 0x80]
movsd xmm7, qword [0x18034d2a0]
lea r10, [0x180000000]
mov r12d, dword [rbp + 0x20]
lea rdx, str.8ckWTL3uQXm6qCHXfprVFw
mov esi, dword [rbp + 0x20]
mov eax, dword [rbp]
mov dword [rbp + 0x1c], r14d
nop dword [rax]
cmp r14d, 0x20
ja case.default.0x1800b48fa
movzx eax, byte [r10 + r14 + 0xb4ed4]
mov ecx, dword [r10 + rax*4 + 0xb4eb0]
add rcx, r10
jmp rcx
test r8, r8
je 0x1800b4970
mov rdx, qword [rbp + 0x60]
test rdx, rdx
je 0x1800b4e0d
mov ecx, dword [rdi + 4]
xor ebx, ebx
imul ecx, dword [rdi]
test ecx, ecx
jle 0x1800b494a
mov rax, r8
sub rdx, r8
movss xmm1, dword [rdx + rax]
movss xmm2, dword [rax]
movaps xmm0, xmm1
subss xmm0, xmm2
andps xmm0, xmm6
cvtps2pd xmm0, xmm0
comisd xmm0, xmm7
ja 0x1800b4dd0
inc ebx
add rax, 4
cmp ebx, ecx
jl 0x1800b4920
lea rdx, str.8ckWTL3uQXm6qCHXfprVFw
mov eax, dword [rbp]
dec r15d
dec r14d
mov dword [rbp + 0x18], r15d
mov dword [rbp + 0x1c], r14d
cmp r15d, eax
jbe case.0x1800b48fa.6
jmp 0x1800b48e0
cmp qword [rbp + 0x60], 0
je case.0x1800b48fa.8
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.CMainWindowFull::OnPowerBroadcast__:__OnlineState__computer_is_exiting_away_mode
call fcn.1800bee00
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [rdi + 8]
mov ecx, dword [r8]
mov qword [rbp + 0x48], rdx
mov r13, qword [rdx + 0x20]
test ecx, ecx
jg 0x1800b4bbb
mov eax, PathMakeUniqueName
mov dword [rbp + 0x38], eax
nop dword [rax]
sub eax, 0x2d
je 0x1800b4b73
sub eax, 1
je 0x1800b4b50
sub eax, 1
je 0x1800b4b2f
sub eax, 1
je 0x1800b4b27
cmp eax, 1
jne 0x1800b4b8e
mov eax, dword [r13 + 4]
xor r15d, r15d
lea ecx, [rax + rax*2]
add dword [rdi + 0x24], ecx
cmp dword [rdx + 4], r15d
jle 0x1800b4b8e
lea eax, [r12 + r12]
xor r14d, r14d
nop dword [rax + rax]
movsxd rcx, dword [rdi + 0x30]
cmp ecx, eax
jle 0x1800b4aed
mov ebx, 0xe9
cmp ebx, 0xe9
je 0x1800b4ad6
cmp ebx, 0x945b
jne 0x1800b4ad9
mov eax, dword [r13 + 4]
mov r8d, 0x3b
movsxd rdx, dword [rdi + 0x30]
cmp esi, eax
mov dword [rbp + 0x10], r12d
cmovle eax, esi
movsxd rsi, eax
mov rax, qword [rdi + 0x10]
sub rdx, rsi
mov dword [rbp + 8], esi
mov rcx, qword [rax + r14]
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x28], rax
lea r9, [rcx + rdx*4]
mov qword [rsp + 0x20], 0
lea rdx, [rbp + 8]
xor ecx, ecx
call fcn.1800159b0
movsxd rcx, dword [rdi + 0x30]
mov eax, dword [rdi + 0x24]
mov r8, rcx
sub eax, ecx
mov dword [rbp + 8], r12d
mov dword [rbp + 0x10], eax
mov rax, qword [rdi + 0x10]
mov rdx, qword [r14 + rax]
movsxd rax, r12d
sub rcx, rax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
lea r9, [rdx + rcx*4]
lea rcx, [rdx + r8*4]
mov edx, 7
lea r8, [rbp + 0x10]
call fcn.1800469a0
jmp 0x1800b4ad9
mov esi, dword [rdi + 0x30]
add ebx, 0x9372
cmp ebx, 0x126e4
jbe 0x1800b4a21
jmp 0x1800b4b0c
mov eax, dword [rdi + 0x24]
xor edx, edx
sub eax, ecx
movsxd r8, eax
mov rax, qword [rdi + 0x10]
shl r8, 2
mov rax, qword [rax + r14]
lea rcx, [rax + rcx*4]
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [rbp + 0x48]
lea eax, [r12 + r12]
inc r15d
add r14, 8
cmp r15d, dword [rdx + 4]
jl 0x1800b4a10
jmp 0x1800b4b8e
mov eax, dword [rdi + 0x24]
mov dword [rdi + 0x30], eax
jmp 0x1800b4b8e
mov eax, dword [r13 + 4]
mov r8, rdi
mov edx, 0x38
lea ecx, [rax + rax*2]
mov dword [rbp + 8], ecx
lea rcx, [rbp + 8]
call fcn.1800b4670
mov rdx, qword [rbp + 0x48]
jmp 0x1800b4b8e
cmp dword [rdi + 0x2c], 0
jne 0x1800b4b8e
mov r9d, 0x93
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18008eb30
mov rdx, qword [rbp + 0x48]
jmp 0x1800b4b8e
mov eax, dword [rsp]
mov r12d, 0x20
sub rsp, 0x80
lea rax, [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov eax, dword [rax]
mov eax, dword [rbp + 0x38]
inc eax
mov dword [rbp + 0x38], eax
cmp eax, 0x32
jb 0x1800b49c0
mov r15d, dword [rbp + 0x18]
mov r14d, dword [rbp + 0x1c]
lea r10, [0x180000000]
mov r8, qword [rbp + 0x28]
mov r9, qword [rbp + 0x40]
jmp 0x1800b494a
add ecx, dword [rdi + 0x24]
cmp ecx, dword [rdi + 0x20]
jg 0x1800b4e33
cmp dword [rdi + 0x2c], 0
mov dword [rdi + 0x24], ecx
jne 0x1800b494a
sub ecx, dword [rdi + 0x40]
cmp ecx, dword [r13 + 4]
jle 0x1800b494a
mov r9d, 0x93
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18008eb30
mov r8, qword [rbp + 0x28]
lea r10, [0x180000000]
mov r9, qword [rbp + 0x40]
jmp 0x1800b494a
xor r14d, r14d
cmp dword [rdi + 0x64], 1
jl 0x1800b4e4b
cmp dword [r9], r14d
je 0x1800b4d09
mov ebx, 0xc
nop word [rax + rax]
mov eax, ebx
sub eax, 0xc
je 0x1800b4ce5
sub eax, 0x63
je 0x1800b4cdf
sub eax, 0x63
je 0x1800b4cab
sub eax, 0x63
je 0x1800b4c73
cmp eax, 0xc6
jne 0x1800b4cf6
mov rdx, qword [rbp + 0x58]
mov ecx, 0x22
call fcn.1800b73a0
lea rdx, str.8ckWTL3uQXm6qCHXfprVFw
jmp 0x1800b4cf6
mov r15, qword [rbp + 0x58]
test r15, r15
je 0x1800b4e3c
movsxd rax, dword [rdi + 0x64]
mov rdx, r15
mov rcx, qword [rdi + 0x68]
mov r9, qword [rdi + 0x10]
lea r8, [rax + rax*2]
mov rcx, qword [rcx + r8*8 - 0x18]
call qword [r9 + reloc.SHELL32.dll_SHSetFolderPathW]
mov r14, rax
lea rdx, str.8ckWTL3uQXm6qCHXfprVFw
jmp 0x1800b4cf6
mov rcx, qword [rdi + 0x68]
lea r9, [rbp + 0x68]
movsxd rax, dword [rdi + 0x64]
mov r10, qword [rdi + 0x10]
mov r8, qword [rdi + 0x50]
lea rdx, [rax + rax*2]
mov rdx, qword [rcx + rdx*8 - 0x18]
mov rcx, qword [rcx]
call qword [r10 + ILAppendID]
mov qword [rbp + 0x58], rax
lea rdx, str.8ckWTL3uQXm6qCHXfprVFw
jmp 0x1800b4cf6
mov qword [rbp + 0x68], rdx
jmp 0x1800b4cf6
mov rax, qword [rdi + 0x10]
cmp dword [rax + 0x90], 0
je 0x1800b4e42
add ebx, 0x63
cmp ebx, 0x25e
jb 0x1800b4c30
mov r15d, dword [rbp + 0x18]
mov rcx, qword [rdi + 0x68]
mov rax, qword [rdi + 0x10]
mov rcx, qword [rcx]
call qword [rax + 0x80]
mov rcx, qword [rdi + 0x78]
mov rbx, rax
mov rax, qword [rdi + 0x10]
call qword [rax + 0x40]
mov rdx, qword [rbp + 0x28]
mov r8, r14
mov rcx, qword [rdi + 0x10]
mov r9, rax
mov dword [rsp + 0x28], 0x20
mov qword [rsp + 0x20], rbx
call fcn.18004aca0
mov qword [rbp + 0x30], 0
jmp 0x1800b4ba3
mov eax, dword [rdi + 4]
lea rdx, [rbp + 0x20]
mov r9, rdi
mov dword [rbp + 0x20], eax
mov r8d, 0xc1
xor ecx, ecx
call fcn.180020690
mov r8, qword [rbp + 0x28]
lea r10, [0x180000000]
mov r9, qword [rbp + 0x40]
mov qword [rbp + 0x60], rax
jmp 0x1800b494a
mov eax, 8
sub eax, dword [rdi + 4]
cmp eax, 8
jge case.0x1800b48fa.8
lea r9, [rbp + 8]
mov dword [rbp + 0x10], eax
mov r8, rdi
mov dword [rbp + 8], 0
xor edx, edx
mov dword [rsp + 0x20], 8
lea rcx, [rbp + 0x10]
call fcn.180055050
mov r8, qword [rbp + 0x28]
lea r10, [0x180000000]
mov r9, qword [rbp + 0x40]
jmp 0x1800b494a
mov ecx, 2
cvtps2pd xmm6, xmm2
cvtps2pd xmm7, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movaps xmm3, xmm7
movsd qword [rsp + 0x20], xmm6
mov rcx, rax
lea rdx, str.com_yourkit_probes_triggers_actions_StartCPUCallCountingAction.classPK
movq r9, xmm7
mov r8d, ebx
call fcn.1800bee00
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.mismatch_in_verbatim_region__0x_08x_0x_08x_
call fcn.1800bee00
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp + 0x30], 0xffffff7d
jmp case.0x1800b48fa.6
mov rax, qword [rbp + 0x68]
jmp 0x1800b4e6d
lea rax, str._s___d_:_Error__setting_does_not_have_a_value.
jmp 0x1800b4e6d
lea rax, str.N8PsiMedia10RtpSessionE
jmp 0x1800b4e6d
mov eax, dword [rdi]
sub eax, 0x20
cmp eax, 0x5e
setbe byte [rbp + 0x30]
jmp case.0x1800b48fa.6
mov dword [rbp + 0x30], 0
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x70]
xor rcx, rbp
call fcn.1800bfa40
mov rbx, qword [rbp + 0xd0]
mov rsi, qword [rbp + 0xd8]
mov rdi, qword [rbp + 0xe0]
movaps xmm6, xmmword [rbp + 0x90]
movaps xmm7, xmmword [rbp + 0x80]
lea rsp, [rbp + 0xa0]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret