Function at 0x18001af80
Capabilities:
Terminate process

Disassembly:
push rdi
sub rsp, 0x80
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x98], rbx
mov rbx, rcx
cmp dword [rcx + 0x58], 0
je 0x18001b337
xor edi, edi
lea rcx, [rsp + 0x40]
call fcn.1800108f0
nop
lea rdx, str.dis_monitor_agent2
lea rcx, [rsp + 0x90]
call fcn.180021640
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180010ca0
cmp dword [rsp + 0x78], 0xf0000001
jne 0x18001afee
lea rcx, [rsp + 0x40]
call fcn.180010c60
mov edi, eax
lea rcx, [rsp + 0x40]
call fcn.1800107f0
cmp dword [0x1801161a0], 0
je 0x18001b024
mov dword [rsp + 0x20], edi
lea r9, str.CMonitorThread::MonitorAgent_1___lu_
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
test edi, edi
jne 0x18001b337
mov rcx, rbx
call fcn.180018460
test eax, eax
je 0x18001b307
cmp dword [0x1801161a0], edi
je 0x18001b061
lea r9, str.CMonitorThread::MonitorAgent_2
lea r8, str.WatchDog
lea edx, [rdi + 0xf]
lea rcx, [0x1801160e8]
call fcn.180011c50
call fcn.1800190f0
cmp dword [0x1801161a0], 0
je 0x18001b08e
lea r9, str.CMonitorThread::MonitorAgent_3
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
mov ebx, 0x2001f
call fcn.18002c290
mov ecx, 0x2021f
test eax, eax
cmovne ebx, ecx
lea rcx, [rsp + 0x40]
call fcn.180007d40
nop
mov r9d, ebx
lea r8, str.softwareTECOcular.3Agent
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x40]
call fcn.180007c40
test rax, rax
je 0x18001b2eb
cmp dword [0x1801161a0], 0
je 0x18001b0f9
lea r9, str.CMonitorThread::MonitorAgent_4
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
xor r8d, r8d
lea rdx, str.CrashTickCount
lea rcx, [rsp + 0x40]
call fcn.180007c80
mov ebx, eax
test eax, eax
je 0x18001b2e0
cmp dword [0x1801161a0], 0
je 0x18001b13f
lea r9, str.CMonitorThread::MonitorAgent_5
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, ebx
jbe 0x18001b2e0
sub eax, ebx
cmp eax, 0x3a980
jbe 0x18001b2e0
cmp dword [0x1801161a0], 0
je 0x18001b182
lea r9, str.CMonitorThread::MonitorAgent_6
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
xor r8d, r8d
lea rdx, str.AgentProcID
lea rcx, [rsp + 0x40]
call fcn.180007c80
mov ebx, eax
test eax, eax
je 0x18001b2a7
cmp dword [0x1801161a0], 0
je 0x18001b1c8
lea r9, str.CMonitorThread::MonitorAgent_7
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
mov r8d, ebx
xor edx, edx
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18001b2a7
cmp dword [0x1801161a0], 0
je 0x18001b20a
lea r9, str.CMonitorThread::MonitorAgent_8
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
lea rdx, str.CrashTickCount
lea rcx, [rsp + 0x40]
call fcn.180007d10
cmp dword [0x1801161a0], 0
je 0x18001b243
lea r9, str.CMonitorThread::MonitorAgent_9
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [0x1801161a0], 0
je 0x18001b276
lea r9, str.CMonitorThread::MonitorAgent_10
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1801161a0], 0
je 0x18001b2a7
lea r9, str.CMonitorThread::MonitorAgent_11
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
lea rdx, str.AgentProcID
lea rcx, [rsp + 0x40]
call fcn.180007d10
cmp dword [0x1801161a0], 0
je 0x18001b2e0
lea r9, str.CMonitorThread::MonitorAgent_12
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
lea rcx, [rsp + 0x40]
call fcn.180007c60
nop
lea rcx, [rsp + 0x40]
call fcn.180007bd0
cmp dword [0x1801161a0], 0
je 0x18001b337
lea r9, str.CMonitorThread::MonitorAgent_13
jmp 0x18001b31f
mov rcx, rbx
call fcn.180017a20
cmp dword [0x1801161a0], 0
je 0x18001b337
lea r9, str.CMonitorThread::MonitorAgent_14
lea r8, str.WatchDog
mov edx, 0xf
lea rcx, [0x1801160e8]
call fcn.180011c50
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rdi
ret