Function at 0x1801050c0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b0]
sub rsp, 0x3b0
mov rax, qword [0x18017d2b8]
xor rax, rsp
mov qword [rbp + 0x268], rax
mov r10, qword [rbp + 0x320]
mov r14, r8
mov r11, qword [rbp + 0x330]
mov r13, r9
mov r9, qword [rbp + 0x310]
mov r8, rdx
mov eax, dword [rsp + 0x70]
mov r12d, ecx
mov r15, qword [rbp + 0x318]
mov edi, ecx
mov ebx, dword [rsp + 0x70]
imul esi, ecx, 0x155
mov qword [rbp - 0x78], rdx
mov rdx, qword [rbp + 0x328]
mov qword [rbp - 0x58], r9
mov qword [rbp - 0x50], r10
cmp ecx, esi
mov qword [rbp - 0x70], rdx
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x7c], ecx
mov qword [rbp - 0x48], r11
mov dword [rsp + 0x78], eax
ja 0x180105411
mov r9d, 0x57
mov r10d, 0x636f
lea r11d, [r9 - 4]
nop word [rax + rax]
cmp edi, 0x91b
ja 0x18010525a
je 0x180105243
mov eax, edi
sub eax, 0x25
je 0x180105222
sub eax, 0x88
je 0x180105203
sub eax, 0x27
je 0x1801051c9
sub eax, 0x3e
je 0x1801051b6
cmp eax, 0x38e
jne 0x1801053f7
mov word [rbp + 0x244], r10w
jmp 0x1801053f7
test r15, r15
jne 0x1801053f7
mov eax, 0xfffffff6
jmp 0x180105726
movsd xmm0, qword [r13]
lea r9, [rbp - 0x80]
movsd xmm1, qword [r15]
lea rcx, [rbp - 0x68]
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], r8
mov r8, rdx
mov rdx, r14
movsd qword [rbp - 0x80], xmm0
movsd qword [rbp - 0x68], xmm1
call fcn.180105750
jmp 0x1801053df
mov rax, qword [0x18017d7b8]
lea rcx, str.Failed_to_set_discovery_filter
mov eax, dword [rax + 0x14]
mov dword [rsp + 0x7c], eax
call fcn.18010fd70
jmp 0x1801053df
mov word [rbp + 0x240], r9w
mov eax, 0x5341
mov word [rbp + 0x241], r11w
mov word [rbp + 0x242], ax
jmp 0x1801053f7
mov dword [rbp + 0x246], 0x74656b
mov word [rbp + 0x249], r9w
jmp 0x1801053f7
cmp edi, 0x15a0
je 0x18010534b
cmp edi, 0x2240
je 0x180105322
cmp edi, 0x2a93
je 0x1801052ef
cmp edi, 0x436e
je 0x1801052df
cmp edi, 0x649c
jne 0x1801053f7
mov qword [rsp + 0x30], 0
lea rax, [rsp + 0x74]
mov qword [rsp + 0x28], r13
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xe2
mov dword [rsp + 0x78], ebx
xor ecx, ecx
call fcn.1800139d0
test eax, eax
js 0x180105726
mov r8d, SHRegGetIntW
lea rcx, [rsp + 0x74]
mov rdx, r15
call fcn.1800d1140
mov rbx, rax
jmp 0x1801053df
cmp ebx, 1
jge 0x1801053f7
mov eax, ebx
jmp 0x180105726
mov rcx, qword [0x18017d7b8]
test rcx, rcx
je 0x180105301
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [rsp + 0x7c]
lea rcx, str.LogVideoSendStreamConfig_currently_only_supports_one
call fcn.18010fd70
lea rcx, str.Exit_OK_n
call fcn.18010fd70
jmp 0x1801053df
test r13, r13
je 0x1801054c6
xor eax, eax
mov r9d, SHTestTokenMembership
mov r8, r15
mov dword [rsp + 0x78], eax
xor edx, edx
mov rcx, r13
call fcn.1800096f0
mov ebx, eax
jmp 0x1801053df
mov rcx, qword [0x18017d7b8]
mov rax, qword [rcx + 8]
cmp qword [rax + 0x60], 0
je 0x18010537d
mov rdx, rcx
mov qword [rsp + 0x20], 0
xor ecx, ecx
lea r9, [0x18014d9ec]
mov r8d, 0x30
call fcn.1800d7ff0
mov rcx, qword [0x18017d7b8]
mov rax, qword [rcx + 8]
cmp qword [rax + 0x40], 0
je 0x180105392
call qword [rax + 0x70]
mov rax, qword [0x18017d7b8]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1801053a8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x18017d7b8]
mov rcx, qword [rax]
test rcx, rcx
je 0x1801053df
mov qword [rsp + 0x38], rcx
xor eax, eax
mov qword [rsp + 0x30], rax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0xb9
call fcn.1800077b0
mov rdx, qword [rbp - 0x70]
mov r9d, 0x57
mov r8, qword [rbp - 0x78]
mov r10d, 0x636f
lea r11d, [r9 - 4]
imul eax, r12d, 0x1f
add edi, eax
cmp edi, esi
jbe 0x180105170
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
movaps xmmword [rsp + 0x3a0], xmm6
mov edi, r12d
movaps xmmword [rsp + 0x390], xmm7
imul r14d, r12d, 0x82a
movaps xmmword [rsp + 0x380], xmm8
movaps xmmword [rsp + 0x370], xmm9
cmp r12d, r14d
ja 0x180105700
movsd xmm6, qword [0x18015cda8]
mov ecx, 0x32
movsd xmm7, qword [0x18015cf80]
movsd xmm8, qword [0x1801598f8]
movsd xmm9, qword [0x18015d138]
lea esi, [rcx + 1]
lea r8d, [rcx + 0x2d]
mov eax, 0x64
cmp edi, 0x1b9b
ja 0x1801055f0
je 0x1801055c7
mov eax, edi
sub eax, 0x25
je 0x1801055a7
sub eax, 0x5d
je 0x180105545
sub eax, 0x2b
je 0x1801056f0
sub eax, 0x27
je 0x1801054d0
cmp eax, 0x3e
jne 0x1801056cd
cmp ebx, 1
jge 0x1801056cd
mov eax, ebx
jmp 0x180105704
mov eax, 0xfffffffe
jmp 0x180105726
movsd xmm0, qword [r9]
lea rax, [rdx + 0x60]
movsd xmm1, qword [r11]
lea rdx, [rbp - 0x60]
mov dword [rsp + 0x68], 0xf6
xor ecx, ecx
mov qword [rsp + 0x60], rax
xor r9d, r9d
mov qword [rsp + 0x58], rcx
lea rax, [rbp - 0x80]
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov qword [rsp + 0x48], rcx
lea rax, [rbp - 0x68]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
movsd qword [rbp - 0x80], xmm0
movsd xmm0, qword [r10]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
movsd qword [rbp - 0x60], xmm1
movsd qword [rbp - 0x68], xmm0
call fcn.1800f32e0
jmp 0x1801056c4
lea r8, [rbp - 0x60]
movsd qword [rbp - 0x80], xmm6
mov edx, 0x7e
movsd qword [rbp - 0x60], xmm7
lea rcx, [rbp - 0x80]
call fcn.1800c1ca0
mov qword [rbp - 0x80], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x60]
movsd qword [rbp - 0x68], xmm8
mov qword [rsp + 0x30], rax
lea r8, [0x18014d9e9]
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea rdx, str.eraS00a
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x20], r15
movsd qword [rbp - 0x60], xmm9
call fcn.1800fe9c0
jmp 0x1801056c4
mov dword [rbp + 0x250], 0x730077
mov dword [rbp + 0x254], 0x5f0032
mov word [rbp + 0x258], si
jmp 0x1801056cd
mov word [rbp + 0x25e], ax
xor eax, eax
mov word [rbp + 0x264], ax
mov dword [rbp + 0x25a], 0x2e0032
mov dword [rbp + 0x260], 0x6c006c
jmp 0x1801056cd
cmp edi, 0x3711
je 0x18010563c
cmp edi, 0x5287
je 0x180105632
cmp edi, 0x6dfd
je 0x180105700
cmp edi, 0xcc6e
je 0x180105629
cmp edi, 0x197ca
jne 0x1801056cd
mov eax, dword [rsp + 0x78]
jmp 0x180105704
mov dword [rsp + 0x78], ebx
jmp 0x1801056cd
mov byte [rsp + 0x70], 1
jmp 0x1801056cd
lea r8, [rbp + 0x240]
mov edx, 0x29
lea rcx, [rbp + 0x250]
call fcn.180012590
mov rsi, rax
lea r9, [rbp - 0x68]
mov rax, qword [rbp - 0x78]
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x80]
mov ecx, 0x101
mov eax, dword [rax]
mov dword [rbp - 0x68], eax
mov eax, dword [r13]
mov dword [rbp - 0x80], eax
call fcn.1800085a0
test al, al
je 0x1801056fb
xor eax, eax
mov dword [rsp + 0x28], 1
lea r9, [rbp - 0x40]
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov qword [r15], rax
xor r9d, r9d
xor eax, eax
mov qword [rsp + 0x28], r15
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
lea ecx, [rax + 0x42]
call fcn.1800bcff0
test al, al
je 0x1801056fb
mov esi, 0x33
mov ecx, 0x32
lea r8d, [rcx + 0x2d]
imul eax, r12d, 0xbe
add edi, eax
cmp edi, r14d
ja 0x180105700
mov rdx, qword [rbp - 0x70]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
jmp 0x180105474
mov ecx, dword [rsp + 0x7c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [rsp + 0x70], 0
mov eax, dword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x380]
movaps xmm7, xmmword [rsp + 0x390]
movaps xmm6, xmmword [rsp + 0x3a0]
movaps xmm9, xmmword [rsp + 0x370]
mov rcx, qword [rbp + 0x268]
xor rcx, rsp
call fcn.180110960
mov rbx, qword [rsp + 0x3f0]
add rsp, 0x3b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret