Function at 0x14018a790
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x1404779b8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rbx, 0xffffffffffffffff
je 0x14018aa45
cmp rax, 0xffffffffffffffff
je 0x14018aa45
xor r12d, r12d
mov qword [rbp + 0xf], r12
mov qword [rbp + 0x1f], r12
mov ebx, 7
mov qword [rbp + 0x27], rbx
mov word [rbp + 0xf], r12w
mov qword [rbp - 0x31], r12
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], rbx
lea r8d, [r12 + 0x1a]
lea rdx, str.https:__www.microsoft.com_
lea rcx, [rbp - 0x31]
call fcn.140101ff0
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x31]
call fcn.1401f5ec0
mov qword [rbp - 0x71], r12
mov qword [rbp - 0x61], r12
mov qword [rbp - 0x59], r12
mov rdi, qword [rbp + 0x1f]
lea rsi, [rbp + 0xf]
cmp qword [rbp + 0x27], 8
cmovae rsi, qword [rbp + 0xf]
movabs r13, 0x7fffffffffffffff
cmp rdi, 8
jae 0x14018a86d
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x71], xmm0
jmp 0x14018a8b4
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r13
ja 0x14018aa57
lfence
add rcx, rcx
call fcn.1400eb1a0
mov qword [rbp - 0x71], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140253310
mov qword [rbp - 0x61], rdi
mov qword [rbp - 0x59], rbx
lea rdx, [rbp - 0x71]
lea rcx, [rbp - 0x11]
call fcn.140215df0
nop
mov r14, qword [rbp - 1]
mov rax, r13
sub rax, r14
cmp rax, 0x18
jb 0x14018aa5d
lea r15, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae r15, qword [rbp - 0x11]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], r12
lea rsi, [r14 + 0x18]
mov ebx, SafeArrayGetLBound
lea rdi, [rbp - 0x51]
cmp rsi, rbx
jbe 0x14018a937
mov rbx, rsi
or rbx, 0xf
cmp rbx, r13
jbe 0x14018a91b
mov rbx, r13
jmp 0x14018a927
mov eax, SafeArrayPutElement
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
call fcn.1400eb1a0
mov rdi, rax
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x41], rsi
mov qword [rbp - 0x39], rbx
movups xmm0, xmmword [str._redirurl__msRedirUrl_]
movups xmmword [rdi], xmm0
movsd xmm1, qword [0x140355a30]
movsd qword [rdi + 0x10], xmm1
lea rcx, [rdi + 0x18]
mov r8, r14
mov rdx, r15
call fcn.140253310
mov byte [rdi + rsi], 0
lea rcx, [rbp - 0x51]
call fcn.1401a7f60
lea rdx, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rdx, qword [rbp - 0x11]
mov r8, qword [rbp - 1]
lea rcx, [0x14047d120]
call fcn.140137d20
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14018a9cc
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14018a9c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018aa63
call fcn.14021ecec
mov qword [rbp - 1], r12
mov qword [rbp + 7], SafeArrayLock
mov byte [rbp - 0x11], 0
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14018aa18
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14018aa13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018aa51
call fcn.14021ecec
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14021f250
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.140260f54
nop
call fcn.1401018e0
nop
call fcn.140101a70
nop
call fcn.140260f54
int3