Function at 0x18008e0a0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x1801eef68]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov esi, dword [rbp + 0xb8]
mov r15, rcx
mov rdi, qword [rbp + 0xd0]
mov r12, qword [rbp + 0xc0]
mov ebx, dword [rsp + 0x40]
lea eax, [rsi - 0x11]
mov qword [rbp - 0x60], rdx
mov rdx, qword [rbp + 0xb0]
mov qword [rbp - 0x58], r9
mov qword [rsp + 0x68], r8
mov qword [rbp - 0x48], rdx
mov qword [rbp - 0x50], rdi
mov dword [rsp + 0x58], eax
cmp esi, eax
jbe case.0x18008e14f.134
mov r14, qword [rsp + 0x68]
mov r13d, dword [rsp + 0x40]
xor r10d, r10d
lea eax, [rsi - 0x83]
lea r11, [0x180000000]
cmp eax, 0x35
ja case.0x18008e14f.147
movzx eax, byte [r11 + rax + 0x8e9ac]
mov ecx, dword [r11 + rax*4 + 0x8e968]
add rcx, r11
jmp rcx
cmp byte [r14 + 0x49], 0
mov eax, dword [rbp - 0x80]
mov dword [r14 + 0x4a8], eax
mov eax, dword [rsp + 0x70]
mov dword [r14 + 0x4ac], eax
jne 0x18008e175
movzx eax, byte [r9]
mov byte [r14 + 0x49], al
cmp byte [r14 + 0x4a], 0
jne case.0x18008e14f.147
movzx eax, byte [r9]
mov byte [r14 + 0x4a], al
jmp case.0x18008e14f.147
mov edi, 0xd6
cmp edi, 0xd6
je 0x18008e1df
cmp edi, 0x197
je 0x18008e1d6
cmp edi, 0x258
jne 0x18008e1f7
mov eax, dword [rsp + 0x40]
cmp eax, 4
jle 0x18008e93a
lea r8, [rsp + 0x40]
mov dword [rsp + 0x40], 0x16
mov rdx, r15
mov ecx, 0xc0
call fcn.180017ee0
jmp 0x18008e93a
mov eax, dword [rbp - 0x68]
mov dword [r12], eax
jmp 0x18008e1f7
mov r9d, 0x9e
lea r8, [rbp - 0x68]
mov rdx, r15
xor ecx, ecx
call fcn.1800ca020
mov dword [rsp + 0x40], eax
add edi, 0xc1
cmp edi, 0x319
jb 0x18008e192
mov rax, qword [rbp + 0xc8]
movzx ecx, byte [rax]
mov rax, qword [rbp - 0x60]
mov byte [r14 + 0x43], cl
movzx ecx, byte [rax]
mov byte [r14 + 0x44], cl
jmp case.0x18008e14f.147
mov eax, dword [rdi]
mov ecx, dword [rdx]
mov edi, dword [rsp + 0x50]
mov edx, dword [r14 + 0x4ac]
imul eax, edi
imul ecx, eax
mov dword [rbp - 0x80], eax
mov dword [rsp + 0x70], ecx
cmp ecx, edx
je 0x18008e2d4
mov rcx, qword [r14 + 0x4b0]
test rcx, rcx
je 0x18008e267
mov rax, qword [r15]
call qword [rax + reloc.SHELL32.dll_SHSetInstanceExplorer]
mov qword [r14 + 0x4b0], 0
mov ecx, dword [rsp + 0x70]
test ecx, ecx
je 0x18008e33b
mov rax, qword [r15]
call qword [rax + 0xa8]
mov qword [r14 + 0x4b0], rax
test rax, rax
jne 0x18008e33b
xor eax, eax
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x68]
mov dword [rsp + 0x58], eax
lea rdx, [rsp + 0x58]
mov rax, qword [r15]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x68], rax
mov r9d, 0x75
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.180063bc0
mov eax, 1
jmp 0x18008e93a
test ecx, ecx
je 0x18008e33b
mov rsi, qword [r14 + 0x4b0]
mov eax, ecx
mov rcx, rsi
and eax, 0xfffffffc
jbe 0x18008e30f
dec eax
xor edx, edx
shr eax, 2
inc eax
mov r8d, eax
shl r8, 2
mov edi, eax
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [r14 + 0x4b0]
lea rsi, [rsi + rdi*4]
mov edi, dword [rsp + 0x50]
mov edx, dword [rsp + 0x70]
lea rax, [rcx + rdx]
cmp rsi, rax
jae 0x18008e335
nop dword [rax]
mov byte [rsi], 0
inc rsi
mov rcx, qword [r14 + 0x4b0]
add rcx, rdx
cmp rsi, rcx
jb 0x18008e320
mov esi, dword [rbp + 0xb8]
mov dword [r14 + 0x4a4], edi
jmp case.0x18008e14f.147
movzx eax, byte [r9]
mov byte [r14 + 0x40], al
mov rax, qword [rbp + 0xa8]
movzx eax, byte [rax]
mov byte [r14 + 0x41], al
mov rax, qword [rbp + 0xa0]
movzx eax, byte [rax]
mov byte [r14 + 0x42], al
jmp case.0x18008e14f.147
mov eax, 8
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x78]
mov rax, qword [0x1801f3788]
mov r9d, reloc.SHELL32.dll_PathMakeUniqueName
mov qword [rsp + 0x78], rax
xor r8d, r8d
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
call fcn.18004eaf0
test eax, eax
jne 0x18008e8ee
lea rcx, str.BoundsTransition
call fcn.1800d6920
mov rax, qword [rbp - 0x78]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x78], rax
lea rdx, [rbp - 0x40]
lea rax, [rsp + 0x78]
mov r9d, 0x29
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.1800536f0
mov r13d, eax
jmp case.0x18008e14f.147
cmp dword [rsp + 0x60], 0
je 0x18008e47a
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x78], rax
nop
lea rax, [rsp + 0x78]
mov r9d, 0x29
lea r8, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x40]
xor ecx, ecx
call fcn.1800536f0
mov r13d, eax
cmp eax, 0x7f2bb742
jne 0x18008e46b
mov eax, dword [rsp + 0x60]
lea r9, [rsp + 0x48]
mov dword [rsp + 0x48], eax
xor ecx, ecx
mov rax, qword [0x1801f3960]
xor r8d, r8d
mov dword [rsp + 0x38], 0x118
xor edx, edx
mov qword [rsp + 0x30], rcx
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
call fcn.18006f7a0
jmp 0x18008e473
test eax, eax
jne 0x18008e8ee
cmp dword [rsp + 0x60], 0
jne 0x18008e400
lea rcx, [0x1801e1ef0]
call fcn.1800d6920
mov rax, qword [rbp - 0x78]
lea r8, [rbp - 0x70]
xor r9d, r9d
mov qword [rbp - 0x70], rax
xor ecx, ecx
lea edx, [r9 + 6]
call fcn.1800c9bf0
jmp case.0x18008e14f.147
mov eax, dword [rdi]
mov dword [r14 + 0x38], eax
mov eax, dword [rdx]
mov dword [r14 + 0x3c], eax
jmp case.0x18008e14f.147
mov rax, qword [r12]
mov dword [rsp + 0x50], r10d
mov r14, qword [rax + 0x70]
jmp case.0x18008e14f.147
mov rax, qword [r12]
mov rcx, qword [rdi]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
mov ebx, r10d
jmp case.0x18008e14f.147
xor r9d, r9d
cmp dword [rdi], r9d
je 0x18008e52a
cmp dword [rdx], r9d
je 0x18008e52a
mov rax, qword [r12]
cmp byte [rax + 0x40], r9b
jne 0x18008e52a
mov dword [rax + 0x44], r9d
mov rcx, qword [r12]
mov eax, dword [rdi]
mov dword [rcx + 0x48], eax
mov rax, qword [r12]
mov dword [rax + 0x4c], r9d
mov rcx, qword [r12]
mov eax, dword [rdx]
mov dword [rcx + 0x50], eax
mov rax, qword [r12]
cmp word [rax + 0x30], 0
je 0x18008e5b7
mov ecx, 0x59
nop
cmp ecx, 0x59
je 0x18008e599
cmp ecx, 0x103
je 0x18008e585
cmp ecx, 0x1ad
je 0x18008e568
cmp ecx, 0x257
jne 0x18008e5a9
mov rax, qword [r12]
mov word [rax + 0x60], r9w
jmp 0x18008e5a9
mov rax, qword [r12]
mov word [rax + 0x5a], r9w
mov rax, qword [r12]
mov word [rax + 0x5c], r9w
mov rax, qword [r12]
mov word [rax + 0x5e], r9w
jmp 0x18008e5a9
mov rax, qword [r12]
mov word [rax + 0x56], r9w
mov rax, qword [r12]
mov word [rax + 0x58], r9w
jmp 0x18008e5a9
mov rax, qword [r12]
mov byte [rax + 0x54], 0
mov rax, qword [r12]
mov byte [rax + 0x55], 0
add ecx, 0xaa
cmp ecx, 0x301
jb 0x18008e540
cmp byte [r8], 0
je case.0x18008e14f.147
mov edi, 6
cmp edi, 6
ja case.default.0x18008e5dc
mov eax, edi
mov ecx, dword [r11 + rax*4 + 0x8e9e4]
add rcx, r11
jmp rcx
mov rax, qword [r15]
movzx ecx, byte [rax + 0x1be]
mov byte [r14 + 0x4f], cl
mov rax, qword [r15]
movzx ecx, byte [rax + 0x1bf]
mov byte [r14 + 0x50], cl
mov rax, qword [r15]
movzx ecx, byte [rax + 0x1c0]
mov byte [r14 + 0x51], cl
jmp case.default.0x18008e5dc
mov rax, qword [r15]
cmp byte [rax + 0x1c0], 0
je case.default.0x18008e5dc
movzx eax, word [rax + 0x9e0]
mov word [r14 + 0x49c], ax
mov rax, qword [r15]
movzx ecx, word [rax + 0x9e2]
mov word [r14 + 0x49e], cx
mov rax, qword [r15]
movzx ecx, word [rax + 0x9e4]
mov word [r14 + 0x4a0], cx
jmp case.default.0x18008e5dc
mov rax, qword [r12]
mov dword [rax + 0x68], r9d
mov word [r14 + 0x4b], 0
mov rax, qword [r15]
movzx ecx, byte [rax + 0x1bc]
mov byte [r14 + 0x4d], cl
mov rax, qword [r15]
movzx ecx, byte [rax + 0x1bd]
mov byte [r14 + 0x4e], cl
jmp case.default.0x18008e5dc
mov rax, qword [r15]
cmp byte [rax + 0x1bf], 0
je case.default.0x18008e5dc
mov ecx, dword [rax + 0x9d0]
test ecx, ecx
je 0x18008e6d8
call qword [rax + 0xa8]
mov qword [r14 + 0x490], rax
test rax, rax
je 0x18008e28c
mov rdx, qword [r15]
mov rcx, rax
mov r8d, dword [rdx + 0x9d0]
mov rdx, qword [rdx + 0x9d8]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [r15]
lea r11, [0x180000000]
mov eax, dword [rax + 0x9d0]
mov dword [r14 + 0x48c], eax
jmp case.default.0x18008e5dc
mov rax, qword [r12]
mov dword [rax + 0x64], r9d
jmp case.default.0x18008e5dc
mov rax, qword [r15]
cmp byte [rax + 0x1bd], 0
je 0x18008e7bc
mov edx, 0xe0
nop dword [rax]
mov eax, edx
sub eax, 0xe0
je 0x18008e75b
sub eax, 1
je 0x18008e749
cmp eax, 1
jne 0x18008e7ab
mov rax, qword [r15]
mov ecx, dword [rax + 0x9c4]
mov dword [r14 + 0x480], ecx
mov rax, qword [r15]
mov ecx, dword [rax + 0x9c8]
mov dword [r14 + 0x484], ecx
jmp 0x18008e7ab
mov rax, qword [r15]
mov ecx, dword [rax + 0x9c0]
mov dword [r14 + 0x47c], ecx
jmp 0x18008e7ab
mov rax, qword [r15]
mov ecx, dword [rax + 0x9ac]
mov dword [r14 + 0x468], ecx
mov rax, qword [r15]
mov ecx, dword [rax + 0x9b0]
mov dword [r14 + 0x46c], ecx
mov rax, qword [r15]
mov ecx, dword [rax + 0x9b4]
mov dword [r14 + 0x470], ecx
mov rax, qword [r15]
mov ecx, dword [rax + 0x9b8]
mov dword [r14 + 0x474], ecx
mov rax, qword [r15]
mov ecx, dword [rax + 0x9bc]
mov dword [r14 + 0x478], ecx
inc edx
cmp edx, 0xe3
jb 0x18008e710
mov rax, qword [r15]
cmp byte [rax + 0x1be], 0
je case.default.0x18008e5dc
movzx eax, byte [rax + 0x9cc]
mov byte [r14 + 0x488], al
jmp case.default.0x18008e5dc
mov edx, dword [r14 + 0x48c]
test edx, edx
je 0x18008e80d
mov rcx, qword [r14 + 0x490]
test rcx, rcx
je 0x18008e806
mov rax, qword [r15]
call qword [rax + reloc.SHELL32.dll_SHSetInstanceExplorer]
xor r9d, r9d
lea r11, [0x180000000]
mov qword [r14 + 0x490], r9
mov dword [r14 + 0x48c], r9d
mov rax, qword [r15]
cmp byte [rax + 0x1bc], 0
je case.default.0x18008e5dc
mov eax, dword [rax + 0x9a8]
mov dword [r14 + 0x464], eax
dec edi
mov r9d, 0
lea eax, [rdi + 0xf5]
cmp eax, 0xf4
ja 0x18008e5c6
jmp case.0x18008e14f.147
mov rax, qword [rbp + 0xa8]
mov word [r14 + 0x45], 0
movzx eax, byte [rax]
cmp eax, 0xe
ja case.0x18008e869.1
mov ecx, dword [r11 + rax*4 + 0x8ea00]
add rcx, r11
jmp rcx
cmp byte [r9], 8
mov edi, r10d
mov esi, 0x92
seta dil
inc edi
mov dword [rsp + 0x50], edi
jmp case.0x18008e14f.147
cmp byte [r9], 8
mov eax, 6
mov ecx, 3
mov esi, 0x92
cmovbe eax, ecx
mov dword [rsp + 0x50], eax
jmp case.0x18008e14f.147
mov dword [rsp + 0x50], 1
mov esi, 0x92
jmp case.0x18008e14f.147
cmp byte [r9], 8
mov eax, 4
mov ecx, 2
mov esi, 0x92
cmovbe eax, ecx
mov dword [rsp + 0x50], eax
jmp case.0x18008e14f.147
cmp byte [r9], 8
mov eax, 4
mov ecx, 8
cmova eax, ecx
mov dword [rsp + 0x50], eax
mov esi, 0x92
jmp case.0x18008e14f.147
test r13d, r13d
je case.0x18008e14f.147
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [r15]
mov ecx, 0x60
call qword [rax + 0xa8]
mov qword [rdi], rax
test rax, rax
je 0x18008e28c
dec esi
mov dword [rbp + 0xb8], esi
cmp esi, dword [rsp + 0x58]
jbe case.0x18008e14f.134
mov r9, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x48]
mov r8, qword [rsp + 0x68]
jmp 0x18008e122
mov eax, ebx
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.1800d7250
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret