Function at 0x140056210
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x780]
sub rsp, 0x880
mov rax, qword [0x1401f7030]
xor rax, rsp
mov qword [rbp + 0x770], rax
mov rax, qword [0x1401faab8]
mov rdi, rcx
mov qword [0x1401fb578], rcx
mov rbx, rdx
mov ecx, 0x131a5b5
call rax
test eax, eax
je 0x1400ab6fc
cmp byte [0x1401fcbb2], 0
jne 0x1400ab709
cmp byte [0x1401fa4b8], 0
mov eax, 2
mov word [rsp + 0x48], 0x7977
je 0x14005628a
mov byte [rsp + 0x4a], 0x49
mov eax, 3
cmp byte [0x1401fa4e1], 0
jne 0x14005629b
mov byte [rsp + rax + 0x48], 0x66
inc rax
mov ecx, dword [rdi + 0x158]
bt ecx, 0xa
jb 0x1400ab715
bt ecx, 0xb
jb 0x1400ab722
bt ecx, 0xd
jae 0x1400562c3
mov byte [rsp + rax + 0x48], 0x4d
inc rax
mov edx, ecx
test cl, 4
jne 0x1400ab72f
mov r8d, dword [rdi + 0x194]
cmp r8d, 1
je 0x1400ab75e
cmp r8d, 2
je 0x1400ab765
bt edx, 0xe
jb 0x1400ab772
cmp byte [0x1401fa9b0], 0
jne 0x1400ab77f
cmp rax, 0x20
jae 0x1400563d7
mov r8d, dword [rdi + 0x184]
lea rcx, [0x1401fab10]
mov qword [rsp + 0x30], rcx
lea r9, [rsp + 0x40]
lea rcx, [rsp + 0x70]
mov byte [rsp + rax + 0x48], 0
mov rax, qword [0x1401faaa8]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x28], 0x400
mov qword [rsp + 0x20], rcx
mov rcx, rbx
call rax
test eax, eax
je 0x1400ab78c
mov rcx, qword [0x1401fab10]
lea r8, [0x1401fab00]
lea rdx, [0x1401a3d24]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov rcx, qword [0x1401fab10]
test eax, eax
mov rax, qword [rcx]
je 0x1400ab84e
lea r8, [0x1401faaf8]
lea rdx, [0x1401a3d24]
call qword [rax + 0x48]
neg eax
sbb rdx, rdx
and qword [0x1401faaf8], rdx
cmp byte [0x1401fa4e1], 0
jne 0x1400563b3
call fcn.1400564bc
mov rcx, rdi
call fcn.1400563e0
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.14005a600
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.14005a730
int3
mov edx, 0x44d
xor ecx, ecx
call fcn.14005e3e8
int3
call qword [0x1401faa88]
nop
jmp 0x14005626b
mov byte [rsp + rax + 0x48], 0x43
inc rax
jmp 0x1400562ab
mov byte [rsp + rax + 0x48], 0x74
inc rax
jmp 0x1400562b5
mov byte [rsp + rax + 0x48], 0x6d
inc rax
mov byte [0x1401facd6], 1
mov dword [0x1401f7138], 1
test cl, 8
je 0x1400562ce
mov byte [rsp + rax + 0x48], 0x53
inc rax
jmp 0x1400562ce
mov byte [rsp + rax + 0x48], 0x6c
jmp 0x1400ab76a
mov byte [rsp + rax + 0x48], 0x6f
inc rax
jmp 0x1400562e9
mov byte [rsp + rax + 0x48], 0x4c
inc rax
jmp 0x1400562f3
mov byte [rsp + rax + 0x48], 0x7a
inc rax
jmp 0x140056300
mov edx, dword [rsp + 0x40]
mov ecx, edx
sub ecx, 2
je 0x1400ab8b8
sub ecx, 1
je 0x1400ab83e
sub ecx, 1
je 0x1400ab82e
sub ecx, 6
je 0x1400ab898
sub ecx, 1
je 0x1400ab898
sub ecx, 2
je 0x1400ab888
sub ecx, 2
je 0x1400ab820
cmp ecx, 0xd
jne 0x1400ab813
cmp byte [0x1401fa4e1], 0
je 0x1400ab813
mov cl, 1
call fcn.140005b0c
mov rcx, qword [0x1401fa4f0]
test rcx, rcx
je 0x1400ab7fb
call fcn.1400ba5e4
and qword [0x1401fa4f0], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 1
call fcn.14000510c
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, [rsp + 0x70]
xor ecx, ecx
call fcn.1400d4dbc
int3
mov edx, 0x4bc
mov rcx, rbx
call fcn.14005e3e8
int3
mov r8, rbx
mov edx, 0x450
xor ecx, ecx
call fcn.14005e3e8
int3
mov r8, rbx
mov edx, 0x4b1
xor ecx, ecx
call fcn.14005e3e8
int3
mov r8d, 0x400
lea rdx, [rsp + 0x70]
call qword [rax + 0x98]
mov edx, eax
mov dword [rsp + 0x40], eax
sub edx, 2
je 0x1400ab8b8
sub edx, 1
je 0x1400ab8a8
sub edx, 8
je 0x1400ab898
cmp edx, 2
je 0x1400ab888
lea r8, [rsp + 0x70]
mov edx, eax
xor ecx, ecx
call fcn.1400d4dbc
int3
mov r8, rbx
mov edx, 0x505
xor ecx, ecx
call fcn.14005e3e8
int3
mov r8, rbx
mov edx, 0x4b7
xor ecx, ecx
call fcn.14005e3e8
int3
mov r8, rbx
mov edx, 0x4b0
xor ecx, ecx
call fcn.14005e3e8
int3
call fcn.1400eb820
int3