Function at 0x180017730
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov r10, qword [rbp - 0x18]
lea edi, [r8 - 0xb]
mov qword [rbp - 0x20], r10
mov r15, rdx
mov edx, dword [rbp + 0x40]
mov rsi, r9
mov dword [rbp - 0x30], edx
mov r13d, r8d
mov r14, rcx
cmp r8d, edi
jbe 0x18001795c
lea ebx, [r8 - 0x10]
lea r8, [0x180000000]
cmp ebx, 0x37
ja case.0x18001779e.11
movzx eax, byte [r8 + rbx + 0x17f40]
mov ecx, dword [r8 + rax*4 + 0x17f10]
add rcx, r8
jmp rcx
mov edx, dword [rsi]
and edx, 0xffff0000
mov dword [rbp - 0x30], edx
jmp case.0x18001779e.11
xor r9d, r9d
mov dword [rbp + 0x40], 3
mov r8d, 0x112
lea rdx, [rbp + 0x40]
mov rcx, r15
call fcn.1800198a0
mov rcx, qword [r15]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, 0x70
mov rcx, r15
call fcn.180040810
mov r10, qword [rbp - 0x20]
jmp 0x180017945
movsx rax, word [rsi]
movzx eax, word [r8 + rax*2 + 0x74130]
mov word [rsi], ax
movsx rax, word [r14]
movzx eax, word [r8 + rax*2 + 0x74130]
mov word [r14], ax
jmp case.0x18001779e.11
xor r8d, r8d
mov edx, 0xf4
mov rcx, r15
call fcn.18000e590
test eax, eax
je 0x180017eec
mov r10, qword [rbp - 0x20]
jmp 0x180017945
lea rax, [rbp - 0x18]
mov qword [rbp - 0x28], 2
lea r9, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r10
mov ecx, 2
call fcn.18005f180
mov rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x18]
lea r9, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov qword [rbp - 0x28], 3
mov ecx, 3
call fcn.18005f180
mov rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x18]
lea r9, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov qword [rbp - 0x28], 4
mov ecx, 4
call fcn.18005f180
mov r10, qword [rbp - 0x20]
jmp 0x180017945
lea rax, [rbp - 0x18]
mov qword [rbp - 0x28], 1
lea r9, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r10
mov ecx, 1
call fcn.18005f180
mov r10, qword [rbp - 0x20]
jmp 0x180017945
xor r9d, r9d
mov dword [rbp + 0x40], 0
mov r8d, 0x112
lea rdx, [rbp + 0x40]
mov rcx, r15
call fcn.1800198a0
mov r10, qword [rbp - 0x20]
jmp 0x180017945
test edx, 0xff000000
jne case.0x18001779e.11
or edx, dword [r15 + 0x1c]
mov dword [rbp - 0x30], edx
jmp case.0x18001779e.11
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
mov r8d, 0xf1
call fcn.180021380
mov r10, rax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 0
mov edx, dword [rbp - 0x30]
lea r8, [0x180000000]
dec ebx
lea ecx, [rbx + 0x10]
cmp ecx, edi
ja 0x180017781
lea eax, [r13 + 0x483]
mov dword [rbp - 0x28], eax
cmp r13d, eax
jae 0x180017eec
mov ebx, dword [rbp + 0x40]
mov r12, qword [rbp - 0x10]
movzx edi, byte [rbp + 0x40]
nop word [rax + rax]
cmp r13d, 0xf8
ja 0x180017c5b
je 0x180017be0
mov eax, r13d
sub eax, 0x10
je 0x180017b03
sub eax, 0x16
je 0x180017a7d
sub eax, 0x21
je 0x180017a41
sub eax, 0x48
je 0x1800179e4
cmp eax, 0x21
je 0x180017eef
jmp 0x180017da9
mov eax, dword [r15 + 0x24]
jmp 0x180017ef1
mov rax, qword [0x180073a58]
cmp byte [rax + 7], 0
sete byte [rbp + 0x40]
mov eax, dword [rbp + 0x40]
jmp 0x180017ef1
lea rax, [rbp - 0x18]
mov qword [rbp - 0x10], 8
lea r9, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r10
mov ecx, 8
call fcn.18005f180
mov rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x18]
lea r9, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov qword [rbp - 0x10], 9
mov ecx, 9
call fcn.18005f180
mov r10, qword [rbp - 0x20]
mov edx, dword [rbp - 0x30]
jmp 0x180017da9
mov eax, dword [r15 + 0x20]
test edx, 0xff000000
jne 0x180017a65
movzx ebx, word [rsi]
and eax, 0xffff0000
or eax, edx
or ebx, eax
mov dword [rbp - 0x30], eax
mov dword [rsi], ebx
mov edx, eax
jmp 0x180017da9
movzx ebx, word [rsi]
and eax, 0xff0000
or eax, edx
or ebx, eax
mov dword [rbp - 0x30], eax
mov dword [rsi], ebx
mov edx, eax
jmp 0x180017da9
lea rax, [rbp - 0x18]
mov qword [rbp - 0x10], 5
lea r9, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r10
mov ecx, 5
call fcn.18005f180
mov rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x18]
lea r9, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov qword [rbp - 0x10], 6
mov ecx, 6
call fcn.18005f180
mov rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x18]
lea r9, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov qword [rbp - 0x10], 7
mov ecx, 7
call fcn.18005f180
mov r10, qword [rbp - 0x20]
mov edx, dword [rbp - 0x30]
jmp 0x180017da9
xor r8d, r8d
nop word [rax + rax]
mov r9d, 0xa5
nop word [rax + rax]
mov eax, r9d
sub eax, 0xa5
je 0x180017bb0
sub eax, 1
je 0x180017b95
sub eax, 1
je 0x180017b54
cmp eax, 1
jne 0x180017bbb
movsx ecx, word [r15]
mov rax, qword [0x180073940]
shl ecx, 5
add ecx, r8d
mov byte [rcx + rax], dil
jmp 0x180017bbb
test r8b, 1
je 0x180017b69
shr dil, 4
movzx eax, dil
shl dil, 4
or dil, al
movzx eax, dil
mov edx, r8d
or al, 8
movzx ecx, al
and dl, 0x10
movzx eax, dil
cmove ecx, eax
movzx edx, cl
mov ecx, r8d
movzx eax, dl
or al, 0x80
and cl, 8
movzx edi, al
cmove edi, edx
jmp 0x180017bbb
test r8b, 4
je 0x180017ba5
movzx edi, byte [rsi]
shl dil, 4
or dil, byte [r14]
test r8b, 2
je 0x180017bbb
mov dil, 1
jmp 0x180017bbb
movzx edi, byte [r14]
shl dil, 4
or dil, byte [rsi]
inc r9d
cmp r9d, 0xa9
jb 0x180017b20
inc r8d
cmp r8d, 0x20
jb 0x180017b10
mov edx, dword [rbp - 0x30]
jmp 0x180017da9
lea rax, [rbp - 0x18]
mov qword [rbp - 0x10], 0xa
lea r9, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r10
mov ecx, 0xa
call fcn.18005f180
mov r9, qword [rbp - 0x20]
lea r8, [rbp - 0x10]
mov edx, 0xd7
mov qword [rbp - 0x10], 4
lea rcx, [rbp - 0x18]
call fcn.18002fee0
mov r8, qword [rbp - 0x18]
lea rax, [rbp - 0x10]
mov rdx, qword [rbp - 0x20]
xor r9d, r9d
mov ecx, 0x88
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x10], 3
call fcn.180016bb0
mov r10, qword [rbp - 0x20]
mov r12, rax
mov edx, dword [rbp - 0x30]
jmp 0x180017da9
mov eax, r13d
sub eax, 0x161
je 0x180017d81
sub eax, 0x69
je 0x180017d4b
sub eax, 0x69
je 0x180017d06
sub eax, 0x69
je 0x180017cc8
cmp eax, 0x69
jne 0x180017da9
mov rax, qword [r12 + 0x18]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x18]
cmp qword [rax + 8], 0xa
jne 0x180017dbc
mov r9d, 0xba
mov byte [rbp + 0x40], 1
lea r8, [rbp + 0x40]
xor edx, edx
mov rcx, r10
call fcn.1800401b0
mov edx, dword [rbp - 0x30]
mov r10, rax
mov qword [rbp - 0x20], rax
jmp 0x180017da9
mov rcx, qword [r12 + 0x18]
mov rax, qword [rcx + 0x18]
cmp qword [rax + 8], 9
jne 0x180017e2e
mov rdx, qword [rcx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rax + 8], 5
jne 0x180017e08
mov rax, qword [rdx + 0x18]
cmp qword [rax + 8], 7
jne 0x180017de2
mov edx, dword [rbp - 0x30]
jmp 0x180017da9
mov rax, qword [r12 + 0x18]
cmp qword [rax + 8], 8
jne 0x180017e54
mov rax, qword [rax + 0x10]
cmp qword [rax + 8], 6
je 0x180017da9
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._8.2lf___14s__12d___12d___11.2lf
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [r12 + 0x10]
mov rcx, qword [rax + 0x10]
cmp qword [rcx + 8], 1
je 0x180017da9
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.String::NewUndetectable_uint16__
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [r12 + 8], 3
jne 0x180017ec6
cmp qword [r12 + 0x20], 0
jne 0x180017ea0
mov rax, qword [r12 + 0x10]
cmp qword [rax + 8], 2
jne 0x180017e7a
add r13d, 0x69
cmp r13d, dword [rbp - 0x28]
jb 0x180017980
jmp 0x180017eef
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.vim.encryption.CryptoManagerHost
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Lajittele_pienet_kirjaimet_ensin
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.2barsetsRemoved_QList_QBarSet__
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.VMODL_CONVERTER_INFO_SYSTEMSTART
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.WinRTPlatform.VideoSchemeHandler
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.HandleBullseyeCoverage_return_1
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.init_varyings_without_static_use
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._mozilla.org_network_dashboard_1
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ebx, dword [rbp + 0x40]
mov eax, ebx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret