Function at 0x180011a10
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x14b0]
mov eax, 0x15b0
call fcn.18007c000
sub rsp, rax
mov rax, qword [0x18036d060]
xor rax, rsp
mov qword [rbp + 0x14a0], rax
mov dword [rbp + 0x28], r8d
mov r15, rdx
mov qword [rsp + 0x50], rdx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x18], rcx
mov qword [rbp + 0x20], rdx
mov r8d, 0x104
lea rsi, [0x18038b700]
mov qword [rbp + 0x410], rsi
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor edx, edx
mov r8d, 0x378
lea rcx, [rbp + 0x90]
call fcn.180211600
lea rcx, [rbp + 0x90]
call fcn.180048cf0
nop
xor r14d, r14d
lea rdi, [r14 - 1]
lea r13d, [r14 + 7]
movabs r12, 0x7fffffffffffffff
mov rdx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x180011ac0
mov rdx, qword [r15]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x180011ad4
lea rcx, [rsp + 0x70]
call fcn.1800052d0
nop
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x4a0]
call fcn.180211600
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae r8, qword [rsp + 0x70]
mov dword [rsp + 0x28], 0x800
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r13
mov word [rbp - 0x70], r14w
lea rax, [rbp + 0x4a0]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180011b50
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp - 0x70]
call fcn.18000dc00
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x90]
call fcn.1800491e0
mov ebx, eax
lea rcx, [rbp - 0x70]
call fcn.18000db90
nop
lea rcx, [rsp + 0x70]
call fcn.180005250
call fcn.1800783d4
cmp ebx, 0xc0000225
mov rbx, rax
jne 0x180011c0c
call fcn.1800783b8
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
movabs rcx, 0x7ffffffffa0a1eff
cmp rax, rcx
jge 0x180011bf8
add rax, 0x5f5e100
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x60]
call fcn.180017080
jmp 0x180011ab3
mov qword [rsp + 0x60], r12
lea rcx, [rsp + 0x60]
call fcn.180017080
jmp 0x180011ab3
call fcn.1800783b8
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffffc46535ff
movabs r15, 0x7fffffffffffffff
cmp rax, rcx
jge 0x180011c52
add rax, 0x3b9aca00
mov qword [rsp + 0x60], rax
jmp 0x180011c57
mov qword [rsp + 0x60], r15
lea rcx, [rsp + 0x60]
call fcn.180017080
mov r12, qword [rbp - 0x10]
mov r14d, dword [rbp + 0x28]
movabs rsi, 0x7ffffffffa0a1eff
nop dword [rax]
nop word [rax + rax]
mov dword [rbp + 0x28], 0
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x180011caf
lea rdx, [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x180011caf
cmp dword [rbp + 0x28], 0x103
sete al
test al, al
jne 0x180011d0a
call fcn.1800783d4
mov rbx, rax
call fcn.1800783b8
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rax, rsi
jge 0x180011cf6
add rax, 0x5f5e100
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x60]
call fcn.180017080
jmp 0x180011c80
mov qword [rsp + 0x60], r15
lea rcx, [rsp + 0x60]
call fcn.180017080
jmp 0x180011c80
call fcn.1800783d4
mov rbx, rax
call fcn.1800783b8
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffffc46535ff
cmp rax, rcx
jge 0x180011d49
add rax, 0x3b9aca00
jmp 0x180011d53
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x60]
call fcn.180017080
xor edx, edx
mov r8d, 0x144
lea rcx, [rbp + 0x4a4]
call fcn.180211600
mov dword [rbp + 0x4a0], 0x1ce8a
lea rcx, [rbp + 0x4a4]
mov eax, 2
mov rsi, qword [rbp + 0x410]
mov r15, qword [rsp + 0x50]
nop dword [rax + rax]
movups xmm0, xmmword [rsi]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rsi + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rsi + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rsi + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rsi, [rsi + 0x80]
sub rax, 1
jne 0x180011da0
mov eax, dword [rsi]
mov dword [rcx], eax
lea rcx, [rbp + 0x68]
call fcn.18000ad20
nop
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [rbp + 0x5a8]
call fcn.180210e90
mov rcx, r12
call fcn.1800b60a0
mov dword [rbp + 0x5e8], eax
mov edx, 0x14c
lea rcx, [rbp + 0x4a0]
call fcn.180007a90
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x40], rax
mov edx, 0x14c
lea rcx, [rbp + 0x30]
call fcn.1800171e0
mov rcx, qword [rbp + 0x30]
lea rdx, [rbp + 0x4a0]
mov eax, 2
nop dword [rax]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub rax, 1
jne 0x180011e70
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
mov rax, qword [rdx + 0x40]
mov qword [rcx + 0x40], rax
mov eax, dword [rdx + 0x48]
mov dword [rcx + 0x48], eax
mov rcx, r12
call fcn.1800b5fb0
mov rbx, rax
mov rcx, r12
call fcn.1800b60a0
mov esi, eax
mov r8, rbx
lea rdx, str.MemoryImage_0x_p
lea rcx, [rbp + 0x420]
call qword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], r13
mov word [rbp - 0x70], ax
lea rax, [rbp + 0x420]
mov r8, rdi
inc r8
cmp word [rax + r8*2], 0
jne 0x180011f32
lea rdx, [rbp + 0x420]
lea rcx, [rbp - 0x70]
call fcn.18000dc00
nop
lea rax, [rbp + 0x30]
mov qword [rsp + 0x48], rax
lea rax, [0x180012380]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x20], rsi
mov r9, rbx
lea r8, [rbp - 0x70]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x350]
call fcn.180040c80
nop
lea rcx, [rbp - 0x70]
call fcn.18000db90
nop
xor esi, esi
mov r14d, esi
mov edx, dword [rbp - 8]
test edx, edx
jns 0x180012215
lea rcx, [rbp + 0x48]
call fcn.18004a5a0
nop
mov dword [0x18037c330], edi
mov r8d, dword [rbp - 8]
lea rdx, [0x180312288]
lea rcx, [rbp + 0x410]
call fcn.180016b20
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], sil
lea rax, [rbp + 0x410]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x180011fe0
lea rdx, [rbp + 0x410]
lea rcx, [rbp - 0x30]
call fcn.1800052d0
nop
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov r8d, 2
lea rdx, [0x18031228c]
lea rcx, [rbp - 0x50]
call fcn.1800052d0
nop
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x50]
movzx edx, byte [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.180016e20
lea rcx, [0x18037c5e0]
call fcn.180005250
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [0x18037c5e0], xmm0
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [0x18037c5f0], xmm1
movdqa xmm0, xmmword [0x180316dd0]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
lea rcx, [rsp + 0x70]
call fcn.180005250
nop
lea rcx, [rbp - 0x50]
call fcn.180005250
nop
lea rcx, [rbp - 0x30]
call fcn.180005250
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], rsi
lea rsi, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae rsi, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x58]
cmp rbx, 8
jae 0x1800120b6
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x70], xmm0
jmp 0x1800120f4
mov r13, rbx
or r13, 7
movabs rax, 0x7ffffffffffffffe
cmp r13, rax
cmova r13, rax
lea rdx, [r13 + 1]
lea rcx, [rsp + 0x70]
call fcn.18000ec80
mov qword [rsp + 0x70], rax
lea r8, [rbx*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.180210e90
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], r13
lea rcx, [rsp + 0x70]
call fcn.180037b70
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], al
lea rax, [rbp + 0x410]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x180012121
lea rdx, [rbp + 0x410]
lea rcx, [rbp - 0x50]
call fcn.1800052d0
nop
mov byte [rsp + 0x50], 0x4f
mov al, 0xa
mov cl, 0x3d
movzx edx, cl
mov r8b, 0x20
movzx r9d, cl
mov r10b, reloc.WS2_32.dll_WSAGetLastError
mov r11b, 0x7f
mov bl, 0x37
xor esi, esi
xor al, 0x4f
mov byte [rsp + 0x51], al
xor cl, 0x4f
mov byte [rsp + 0x52], cl
xor dl, 0x4f
mov byte [rsp + 0x53], dl
xor r8b, 0x4f
mov byte [rsp + 0x54], r8b
xor r9b, 0x4f
mov byte [rsp + 0x55], r9b
xor r10b, 0x4f
mov byte [rsp + 0x56], r10b
xor r11b, 0x4f
mov byte [rsp + 0x57], r11b
xor bl, 0x4f
mov byte [rsp + 0x58], bl
mov byte [rsp + 0x59], sil
lea rax, [rsp + 0x51]
inc rdi
cmp byte [rax + rdi], sil
jne 0x1800121a2
mov r9, rdi
lea r8, [rsp + 0x51]
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.18000a090
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], sil
lea rcx, [rbp - 0x30]
call fcn.180037aa0
nop
lea rcx, [rbp - 0x50]
call fcn.180005250
xor edx, edx
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
lea rcx, [rbp + 0x48]
call fcn.18000db90
jmp 0x1800122b8
mov dword [0x18037c330], 3
mov byte [rsp + 0x50], 0x64
mov al, 0x37
mov cl, select
mov dl, 7
movzx r8d, dl
mov r9b, 1
mov r10b, reloc.WS2_32.dll_socket
movzx r11d, r10b
xor ebx, ebx
xor al, 0x64
mov byte [rsp + 0x51], al
xor cl, 0x64
mov byte [rsp + 0x52], cl
xor dl, 0x64
mov byte [rsp + 0x53], dl
xor r8b, 0x64
mov byte [rsp + 0x54], r8b
xor r9b, 0x64
mov byte [rsp + 0x55], r9b
xor r10b, 0x64
mov byte [rsp + 0x56], r10b
xor r11b, 0x64
mov byte [rsp + 0x57], r11b
mov byte [rsp + 0x58], bl
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], bl
lea rax, [rsp + 0x51]
nop word [rax + rax]
inc rdi
cmp byte [rax + rdi], bl
jne 0x180012290
mov r8, rdi
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x48]
call fcn.1800052d0
lea rcx, [rbp + 0x48]
call fcn.180037aa0
mov r14d, 1
lea rcx, [rbp + 0x90]
call fcn.1800495d0
nop
cmp byte [rbp + 0x10], 0
je 0x1800122d5
lea rcx, [rbp]
call fcn.180016d70
nop
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x180012317
mov rdx, qword [rbp + 0x40]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012306
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001236c
call fcn.18007b164
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rsi
lea rcx, [rbp + 0x68]
call fcn.180005250
nop
lea rcx, [rbp + 0x90]
call fcn.180048fd0
nop
mov rcx, r12
call fcn.1800b5e30
nop
mov rcx, r15
call fcn.180005250
mov eax, r14d
mov rcx, qword [rbp + 0x14a0]
xor rcx, rsp
call fcn.18007b140
mov rbx, qword [rsp + 0x1608]
add rsp, 0x15b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18021e9c0
nop
int3