Function at 0x1400786d0
Capabilities:
Terminate process

Disassembly:
push rbx
push rsi
sub rsp, 0x468
mov rsi, rdx
mov rax, qword [0x1400a3fc0]
pxor xmm0, xmm0
xor rax, rsp
mov qword [rsp + 0x460], rax
movsxd rbx, ecx
movdqu xmmword [rsp + 0x50], xmm0
cmp qword [0x1400aac48], 0
je 0x140078b7d
cmp rbx, 2
jge 0x1400789e5
lea rax, [0x140000000]
mov rdx, rsi
mov rax, qword [rax + rbx*8 + 0xaac48]
and rdx, rax
cmp rdx, rsi
jne 0x14007875b
mov rcx, qword [rsp + 0x460]
mov qword [rsp + 0x460], 0
xor rcx, rsp
cmp rcx, qword [0x1400a3fc0]
jne 0x140078a2d
add rsp, 0x468
pop rsi
pop rbx
ret
not rax
mov ecx, 0x39
and rax, rsi
xor esi, esi
xor edx, edx
mov qword [rsp + rbx*8 + 0x50], rax
call fcn.14007a9f0
nop
mov ebx, 1
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov r12, rsi
mov qword [rsp + 0x38], r13
mov r13, rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov r15, rsi
mov qword [rsp + 0x20], rbp
mov eax, ebx
call fcn.140079070
test eax, eax
jl 0x1400788cf
mov edx, ebx
lea rcx, [rsp + 0x50]
call fcn.1400792b0
test eax, eax
je 0x1400788cf
mov edx, ebx
lea rcx, [rsp + 0x50]
call fcn.1400792b0
test eax, eax
jl 0x140078b11
mov ecx, ebx
call fcn.140079030
mov r14, rax
test r14, r14
je 0x140078aa6
cmp byte [r14], 0
je 0x140078aa6
cmp byte [rsp + 0x60], 0
je 0x1400788a8
test r15, r15
je 0x1400788a3
mov rcx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
lea rcx, [0x14008f8a8]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbp, rax
mov rcx, r13
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add rsi, r12
add rsi, rbp
add rsi, rdi
add rsi, rax
cmp rsi, 0x400
jae 0x140078a33
neg r12
lea rcx, [rsp + 0x60]
add r12, 0x3ff
lea rdx, [0x14008f8a8]
mov r8, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x60]
neg r8
mov rdx, r15
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r12, eax
mov r15, r14
jmp 0x1400788cf
neg r12
lea rcx, [rsp + 0x60]
add r12, 0x3ff
mov rdx, r14
mov r8, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r12, eax
inc ebx
cmp ebx, 0x47
jl 0x1400787a6
mov rsi, r15
mov r8, r12
mov rdi, qword [rsp + 0x48]
mov rax, r13
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
test rsi, rsi
je 0x140078941
neg r8
lea rcx, [rsp + 0x60]
add r8, 0x3ff
mov rdx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x60]
neg r8
mov rdx, rsi
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
cmp byte [rsp + 0x60], 0
jne 0x14007899a
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.14007ac20
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x1400a3fc0]
jne 0x140078a2d
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov ecx, 1
mov edx, 0x38
mov r8d, ecx
lea r9, [rsp + 0x60]
call fcn.14007ac20
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x1400a3fc0]
jne 0x140078a2d
jmp 0x140078990
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.14007ac20
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x1400a3fc0]
je 0x140078990
call fcn.140081cb0
nop
mov r8, r12
mov rax, r13
neg r8
lea rcx, [rsp + 0x60]
add r8, 0x3ff
mov rdx, rax
mov rdi, qword [rsp + 0x48]
mov rsi, r15
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
nop
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
movsxd r8, eax
lea rcx, [rsp + 0x60]
neg r8
mov rdx, rsi
add r8, 0x3ff
call sub.api_ms_win_crt_string_l1_1_0.dll_strncat
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
nop
jmp 0x140078941
mov rdi, qword [rsp + 0x48]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.14007ac20
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x1400a3fc0]
jne 0x140078a2d
jmp 0x140078990
xor edx, edx
mov ecx, 1
xor r8d, r8d
mov rdi, qword [rsp + 0x48]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x20]
call fcn.14007ac20
nop
mov ecx, 1
mov edx, 0x3a
xor r8d, r8d
call fcn.14007ac20
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x1400a3fc0]
jne 0x140078a2d
jmp 0x140078990
call fcn.140079e40
test eax, eax
jne 0x140078b94
cmp qword [0x1400aac48], 0
jne 0x140078709
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov ecx, 1
mov edx, 0x3b
xor r8d, r8d
call fcn.14007ac20
xor edx, edx
mov ecx, 1
xor r8d, r8d
call fcn.14007ac20
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
cmp rcx, qword [0x1400a3fc0]
jne 0x140078a2d
jmp 0x140078990