Function at 0x180002880
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x458]
sub rsp, 0x550
xor edx, edx
lea rcx, [rbp + 0x30]
mov r8d, 0x208
call sub.ntdll.dll_memset
movabs rax, 0xc935ac473cdbee1
movabs rdx, 0xa0fbcd262ad227bf
mov qword [rsp + 0x50], rax
movabs rcx, 0x80b4ef17f42d5db4
movabs rax, 0x9ead7275034fe1de
mov qword [rbp - 0x80], rdx
mov qword [rsp + 0x58], rax
movabs r14, 0xb1f5694e331e1997
movabs rax, 0x9c0d6af2d1d2f7fb
mov qword [rbp - 0x78], rcx
mov qword [rsp + 0x60], rax
movabs rsi, 0x6bc1629f3926102c
movabs rax, 0x551360233190ca10
mov qword [rbp + 0x20], rdx
mov qword [rsp + 0x68], rax
lea rdx, [rbp - 0x20]
movabs rax, 0x2f101be87ee0f955
mov qword [rbp + 0x28], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rbp - 0x70]
movabs rax, 0x10ca7c39225047c2
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x78], rax
mov r8d, 0x50
movabs rax, 0xb1a56912332419d4
mov qword [rsp + 0x48], rsi
mov qword [rbp - 0x20], rax
movabs rax, 0x6bb362f83949105e
mov qword [rbp - 0x18], rax
movabs rax, 0xcf25a8073a0be80
mov qword [rbp - 0x10], rax
movabs rax, 0x9ef87229032ee1aa
mov qword [rbp - 8], rax
movabs rax, 0x9c656aa1d19df7a8
mov qword [rbp], rax
movabs rax, 0x5577604631e2ca71
mov qword [rbp + 8], rax
movabs rax, 0x2f771b877e8cf909
mov qword [rbp + 0x10], rax
movabs rax, 0x10af7c41223547ec
mov qword [rbp + 0x18], rax
call sub.ntdll.dll_memcpy
movdqa xmm0, xmmword [rbp - 0x70]
lea rdx, [rbp - 0x70]
pxor xmm0, xmmword [rsp + 0x40]
lea rcx, [rbp + 0x30]
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x40], xmm1
call qword [sym.imp.KERNEL32.DLL_lstrcatW]
mov qword [rsp + 0x20], r14
lea r8, [rsp + 0x20]
mov qword [rsp + 0x28], rsi
lea rdx, [rbp + 0x30]
movdqa xmm1, xmmword [rsp + 0x20]
lea rcx, [0x1800350dc]
movabs rdi, 0xb1f56912332419d4
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
movups xmm0, xmmword [rsp + 0x30]
pxor xmm1, xmm0
movdqa xmmword [rsp + 0x20], xmm1
call fcn.18000bdf8
lea rcx, [rbp + 0x30]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x28], rsi
lea rdx, [rsp + 0x20]
movabs rbx, 0xb1f5694e331e19cb
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], rbx
movups xmm0, xmmword [rsp + 0x20]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
call qword [sym.imp.KERNEL32.DLL_lstrcatW]
lea rdx, [0x180035140]
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.DLL_lstrcatW]
mov qword [rsp + 0x20], rdi
lea r8, [rsp + 0x20]
mov qword [rsp + 0x28], rsi
lea rdx, [rbp + 0x30]
movups xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], r14
lea rcx, [0x180035140]
mov qword [rsp + 0x38], rsi
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.18000bdf8
lea rcx, [rbp + 0x30]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x28], rsi
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rsi
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
call qword [sym.imp.KERNEL32.DLL_lstrcatW]
lea rdx, [0x1800351a4]
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.DLL_lstrcatW]
mov qword [rsp + 0x20], rdi
lea r8, [rsp + 0x20]
mov qword [rsp + 0x28], rsi
lea rdx, [rbp + 0x30]
movups xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], r14
lea rcx, [0x1800351a4]
mov qword [rsp + 0x38], rsi
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.18000bdf8
xor edx, edx
lea rcx, [rbp + 0x240]
mov r8d, 0x208
call sub.ntdll.dll_memset
movabs rax, 0xb1d06912332419d4
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x20], rax
lea r8, [0x1800350dc]
movabs rax, 0x6bc1629f3926105f
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x20]
movups xmm0, xmmword [rsp + 0x20]
lea rcx, [rbp + 0x240]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x240]
call fcn.18001783c
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_ExitProcess]