Function at 0x180053050
Capabilities:
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
lea ebp, [rdx + 0x4ec]
mov edi, edx
mov r15, rcx
cmp edx, ebp
jae 0x180053473
mov r14d, dword [rsp + 0x78]
xor r12d, r12d
mov rsi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x80]
nop word [rax + rax]
cmp edi, 0x21e
ja 0x1800532e2
je 0x1800532a7
cmp edi, 0xb6
ja 0x180053184
je 0x18005314b
cmp edi, 0x1f
je 0x180053100
cmp edi, 0x5c
je 0x1800530d9
cmp edi, 0x79
jne 0x180053468
mov eax, r14d
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
mov r8d, 0xf1
call fcn.180021380
mov rsi, rax
mov qword [rsp + 0x88], r12
jmp 0x180053468
mov eax, dword [r15]
lea r8, [rsp + 0x80]
mov dword [rsp + 0x80], eax
xor r9d, r9d
mov rax, qword [0x180073a58]
mov ecx, 0xb8
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
mov rdx, qword [rax + 0x38]
call fcn.18003d5d0
xor r8d, r8d
mov edx, 0x99
xor ecx, ecx
mov r14d, eax
call fcn.18001b070
jmp 0x180053468
lea rax, [rsp + 0x88]
mov qword [rsp + 0x80], 2
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, rsi
mov ecx, 2
call fcn.18005f180
jmp 0x180053468
mov eax, edi
sub eax, 0x110
je 0x18005326e
sub eax, 0x5a
je 0x1800531d8
cmp eax, 0x5a
jne 0x180053468
mov r8, qword [rsp + 0x88]
lea rax, [rsp + 0x80]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rsp + 0x80], 2
mov ecx, 0x88
call fcn.180016bb0
mov rbx, rax
jmp 0x180053468
lea rax, [rsp + 0x88]
mov qword [rsp + 0x80], 4
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, rsi
mov ecx, 4
call fcn.18005f180
lea rax, [rsp + 0x88]
mov qword [rsp + 0x80], 3
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, rsi
mov ecx, 3
call fcn.18005f180
mov r9, rsi
mov qword [rsp + 0x80], 1
lea r8, [rsp + 0x80]
mov edx, 0xd7
lea rcx, [rsp + 0x88]
call fcn.18002fee0
jmp 0x180053468
lea rax, [rsp + 0x88]
mov qword [rsp + 0x80], 1
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, rsi
mov ecx, 1
call fcn.18005f180
jmp 0x180053468
cmp qword [rbx + 8], 2
jne 0x180053486
cmp qword [rbx + 0x10], r12
je 0x180053468
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.TextPenaltyModuleHasBeenDisposed
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp edi, 0x386
ja 0x18005341b
je 0x1800533e0
mov eax, edi
sub eax, 0x278
je 0x18005339c
sub eax, 0x5a
je 0x180053357
cmp eax, 0x5a
jne 0x180053468
mov rax, qword [rbx + 0x18]
test rax, rax
je 0x1800534ac
cmp qword [rax + 8], 4
jne 0x1800534ac
cmp qword [rbx + 0x20], r12
je 0x180053468
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__builtin_ia32_cvtuqq2ps128_mask
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rbx + 8], 3
jne 0x1800534d2
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x180053376
cmp qword [rax + 8], 2
je 0x180053468
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.GMCH_AB0_REQUESTS.WR_PARTIAL_ANY
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rbx + 0x18], r12
jne 0x1800534f8
mov rbx, qword [rbx + 0x20]
test rbx, rbx
je 0x1800533ba
cmp qword [rbx + 8], 3
je 0x180053468
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.MILPropertyItemIdJPEGInterFormat
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [rbx + 0x18]
cmp qword [rbx + 8], 4
jne 0x18005351e
cmp qword [rbx + 0x10], r12
je 0x180053468
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Runtime::Uint16x8FromInt16x8Bits
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, edi
sub eax, 0x3e0
je 0x180053446
cmp eax, 0x5a
jne 0x180053468
lea r9d, [rax + 0x60]
mov byte [rsp + 0x78], 1
lea r8, [rsp + 0x78]
xor edx, edx
mov rcx, rsi
call fcn.1800401b0
mov rsi, rax
jmp 0x180053468
cmp qword [rbx + 0x18], r12
jne 0x18005356a
mov rax, qword [rbx + 0x20]
test rax, rax
je 0x180053544
cmp qword [rax + 8], 3
jne 0x180053544
add edi, 0x5a
cmp edi, ebp
jb 0x180053090
mov eax, dword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._s:__s:__s:_already_in_this_mode
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Z23convert_double4_sat_rteDv4_m
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.gst_aiff_parse_parse_file_header
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.WinStationGetRestrictedLogonInfo
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.com_yourkit_runtime_Quoter.class
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.actionSendFiles_Jid_QStringList_
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.WebDatabaseHost_RequestValidator
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3