Function at 0x14000d100
Capabilities:
Terminate process

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x460
mov rsi, rdx
mov rax, qword [0x14001b4b8]
mov ebx, ecx
mov rdi, qword [0x14001ba20]
xor rax, rsp
mov qword [rsp + 0x450], rax
test rdi, rdi
je 0x14000d4d5
mov rax, rdi
and rax, rsi
cmp rsi, rax
je 0x14000d356
test rsi, 1
jne 0x14000d49f
not rdi
mov ecx, 0x39
and rdi, rsi
xor esi, esi
xor edx, edx
call fcn.14000e120
mov rdx, rax
xor eax, eax
inc eax
xor ebx, ebx
mov byte [rsp + 0x50], 0
mov r9d, 1
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r15
mov r15, rdi
mov qword [rsp + 0x28], rbp
mov edi, eax
mov ebp, 1
lea ecx, [rdi + 0x3f]
shl rbp, cl
test rbp, r15
je 0x14000d2b1
cmp edi, 0x29
jae 0x14000d319
movsxd rdi, edi
lea rbp, [0x140000000]
mov r14, qword [rbp + rdi*8 + 0x156e0]
test r14, r14
je 0x14000d319
cmp byte [r14], 0
je 0x14000d319
cmp byte [rsp + 0x50], 0
je 0x14000d28a
test rsi, rsi
je 0x14000d285
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r12, rax
lea rcx, [0x140015988]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbp, rax
mov rcx, qword [rsp + 0x20]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r13, rax
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add r12, rbx
add r12, rbp
add r12, r13
add r12, rax
cmp r12, 0x400
jae 0x14000d37e
neg rbx
lea rcx, [rsp + 0x50]
add rbx, 0x3ff
lea rdx, [0x140015988]
mov r8, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x50]
neg r8
mov rdx, rsi
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd rbx, eax
mov rsi, r14
jmp 0x14000d2b1
neg rbx
lea rcx, [rsp + 0x50]
add rbx, 0x3ff
mov rdx, r14
mov r8, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd rbx, eax
inc edi
cmp edi, 0x28
jg 0x14000d43b
test edi, edi
jg 0x14000d198
xor edx, edx
mov ecx, 1
xor r8d, r8d
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x40]
mov r14, qword [rsp + 0x38]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
call fcn.14000e350
nop
mov ecx, 1
mov edx, 0x3b
xor r8d, r8d
call fcn.14000e350
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14000e350
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
nop
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x40]
mov r14, qword [rsp + 0x38]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14000e350
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.14000e350
nop
jmp 0x14000d2ff
test rdi, 0x20
jne 0x14000d4c6
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.14000f8a0
add rsp, 0x460
pop rdi
pop rsi
pop rbx
ret
neg rbx
lea rcx, [rsp + 0x50]
add rbx, 0x3ff
mov r8, rbx
mov rdx, qword [rcx - 0x30]
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x40]
mov r14, qword [rsp + 0x38]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
nop
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x50]
neg r8
mov rdx, rsi
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp byte [rsp + 0x50], 0
jne 0x14000d40f
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14000e350
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.14000e350
nop
jmp 0x14000d2ff
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14000e350
mov ecx, 1
mov edx, 0x38
mov r8d, ecx
lea r9, [rsp + 0x50]
call fcn.14000e350
nop
jmp 0x14000d2ff
mov rdx, qword [rsp + 0x20]
test rsi, rsi
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x40]
mov r14, qword [rsp + 0x38]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
je 0x14000d3e1
neg rbx
lea rcx, [rsp + 0x50]
add rbx, 0x3ff
mov r8, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x50]
neg r8
mov rdx, rsi
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
nop
jmp 0x14000d3e1
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14000e350
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.14000e350
nop
jmp 0x14000d2ff
xor ecx, ecx
mov edx, ebx
call fcn.14000e640
nop
jmp 0x14000d363
call fcn.14000dc90
mov rdi, qword [0x14001ba20]
test rdi, rdi
jne 0x14000d131
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14000e350
nop
jmp 0x14000d2ed