Function at 0x1800089b0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
xor esi, esi
movaps xmmword [rsp + 0x140], xmm6
xorps xmm0, xmm0
mov qword [rbp - 0x30], rsi
mov r13, r8
mov byte [rbp - 0x28], sil
movzx r8d, byte [rbp + 0x90]
lea edi, [rcx + 0xb]
mov byte [rbp + 0x90], r8b
mov r10, r9
mov r9d, dword [rbp + 0x90]
xorps xmm1, xmm1
mov dword [rsp + 0x40], r9d
mov r14, rdx
movdqa xmmword [rbp - 0x20], xmm0
mov r15d, ecx
movdqa xmmword [rbp - 0x10], xmm1
lea r11, [0x180000000]
mov qword [rbp], rsi
mov byte [rbp + 8], sil
movdqa xmmword [rbp + 0x10], xmm0
mov byte [rbp + 0x20], sil
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], rsi
mov byte [rbp + 0x38], sil
cmp ecx, edi
jae 0x180008d6b
lea ebx, [rcx - 0x117]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x48], rcx
lea edx, [rsi + 0x6e]
lea r12d, [rsi + 0x4e]
cmp ebx, 0x2d
ja case.0x180008a7d.11
movzx eax, byte [r11 + rbx + 0x9124]
mov ecx, dword [r11 + rax*4 + 0x90f4]
add rcx, r11
jmp rcx
movsd xmm0, qword [0x1800ac768]
movzx eax, word [0x1800ac770]
movsd qword [rbp - 0x72], xmm0
mov word [rbp - 0x6a], ax
jmp case.0x180008a7d.11
mov eax, 0x63
lea rdx, [0x1800ac778]
lea rcx, [rsp + 0x58]
mov word [rsp + 0x5f], ax
lea r8d, [rax - 0x60]
call fcn.180080a10
mov r8d, 3
mov word [rbp - 0x78], si
lea rdx, [0x1800ac78c]
lea rcx, [rbp - 0x78]
call fcn.1800807b0
mov r9d, dword [rsp + 0x40]
mov r10, qword [rbp + 0xa8]
lea r11, [0x180000000]
mov edx, 0x6e
jmp case.0x180008a7d.11
mov qword [rsp + 0x28], rsi
lea r9, [rsp + 0x58]
mov r8d, 0x102
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x78]
mov dword [rbp - 0x68], 0x6c006c
xor ecx, ecx
mov word [rbp - 0x64], si
call fcn.1800064f0
mov r9d, dword [rsp + 0x40]
lea r11, [0x180000000]
mov r10, qword [rbp + 0xa8]
mov edx, 0x6e
mov qword [rsp + 0x48], rax
jmp case.0x180008a7d.11
mov rcx, qword [r14 + 0x18]
mov r8, r14
mov word [rbp - 0x7c], si
mov byte [rbp + 0x90], 1
cmp rcx, 0x10
jb 0x180008b5a
mov r8, qword [r14]
mov rdx, r14
jb 0x180008b62
mov rdx, qword [r14]
add rdx, qword [r14 + 0x10]
mov rax, r14
cmp rcx, 0x10
jb 0x180008b72
mov rax, qword [r14]
mov qword [rsp + 0x28], r8
mov r9, r10
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], esi
mov rcx, rax
call fcn.180002890
test al, al
je 0x180008d02
mov r9d, dword [rsp + 0x40]
lea r11, [0x180000000]
mov r10, qword [rbp + 0xa8]
mov edx, 0x6e
jmp case.0x180008a7d.11
mov qword [rsp + 0x38], rsi
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov qword [rsp + 0x28], rsi
xor edx, edx
mov r8d, 0x8f
mov qword [rsp + 0x20], rsi
call fcn.180049f50
mov r8d, 0xa2
mov rdx, r14
xor ecx, ecx
movups xmm6, xmmword [rax]
call fcn.18004a330
mov r9d, dword [rsp + 0x40]
lea r11, [0x180000000]
mov r10, qword [rbp + 0xa8]
movq rcx, xmm6
sub rcx, rax
mov edx, 0x6e
mov qword [rsp + 0x50], rcx
jmp case.0x180008a7d.11
mov eax, dword [str.close]
mov dword [rsp + 0x58], eax
movzx eax, word [0x1800ac808]
mov word [rsp + 0x5c], ax
movzx eax, word [0x1800ac80c]
mov word [rsp + 0x5d], ax
movzx eax, byte [0x1800ac80e]
mov byte [rsp + 0x5f], al
jmp case.0x180008a7d.11
mov eax, 0x69
mov dword [rsp + 0x76], 0x570065
mov word [rsp + 0x7a], ax
jmp case.0x180008a7d.11
mov r8, qword [r14 + 0x98]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov dword [rsp + 0x40], eax
jmp 0x180008ada
mov eax, 0x77
mov word [rsp + 0x7c], dx
mov word [rbp - 0x7e], ax
mov dword [rsp + 0x7e], 0x6f0064
jmp case.0x180008a7d.11
mov word [rsp + 0x70], r12w
mov dword [rsp + 0x72], 0x6d0061
inc ebx
lea eax, [rbx + 0x117]
cmp eax, edi
jb 0x180008a60
movzx r8d, byte [rbp + 0x90]
mov rdi, qword [rbp - 0x20]
lea r12d, [r15 - 0xa]
movabs rsi, 0x2aaaaaaaaaaaaaab
cmp r15d, r12d
jbe 0x180009099
lea ebx, [r15 - 0x117]
mov r15, qword [rsp + 0x48]
mov rdx, qword [rbp - 0x18]
cmp ebx, 0x21
ja case.0x180008d00.10
movzx eax, byte [r11 + rbx + 0x9180]
mov ecx, dword [r11 + rax*4 + 0x9154]
add rcx, r11
jmp rcx
mov byte [rsp + 0x50], sil
mov r8, qword [rbp - 0x20]
test r8, r8
je 0x180008fdf
mov rcx, qword [rbp - 0x10]
movabs rax, 0x2aaaaaaaaaaaaaab
sub rcx, r8
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, r8
lea rdx, [rdx + rdx*2]
shl rdx, 3
cmp rdx, 0x1000
jb 0x180008d63
mov r8, qword [r8 - 8]
add rdx, 0x27
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800090ee
mov rcx, r8
jmp 0x180008fda
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x48], rax
jmp 0x180008cb8
test r8b, r8b
je 0x180008d90
mov rcx, r15
call qword [sym.imp.USER32.dll_CloseWindowStation]
movzx r8d, byte [rbp + 0x90]
cmp qword [r13 + 0x10], 0
setne byte [rsp + 0x50]
jmp case.0x180008d00.10
mov r8d, dword [rsp + 0x6c]
lea rcx, [rsp + 0x70]
mov edx, dword [rsp + 0x68]
call qword [sym.imp.USER32.dll_OpenWindowStationW]
mov r15, rax
movzx r8d, byte [rbp + 0x90]
dec ebx
lea eax, [rbx + 0x117]
cmp eax, r12d
jbe 0x180009099
mov r9d, dword [rsp + 0x40]
lea r11, [0x180000000]
jmp 0x180008cdf
cmp r9d, 0xb7
jne case.0x180008d00.10
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor r8d, r8d
mov edx, 0xb6
mov rcx, r14
call fcn.18006fb60
test al, al
je case.0x180008d00.1
mov rcx, qword [r14]
call qword [rsp + 0x48]
jmp 0x180008db3
mov rcx, rdx
mov dword [rsp + 0x68], 0
sub rcx, rdi
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 2
jb 0x180008f85
mov dword [rsp + 0x6c], 0x200
jmp case.0x180008d00.10
xor ecx, ecx
movzx eax, r8b
test r15, r15
cmovne ecx, eax
movzx r8d, cl
mov byte [rbp + 0x90], cl
jmp case.0x180008d00.10
mov rcx, rdx
mov rax, rsi
sub rcx, rdi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rbp + 0x28]
cmp rdx, 1
jbe 0x180008e8c
lea rax, [rdi + 0x18]
cmp byte [rax + 0x10], 0
je 0x180008e9b
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
jmp 0x180008ea3
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov rdx, qword [rbp - 0x60]
mov eax, 0xf
mov r8, qword [rbp - 0x58]
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], rax
mov byte [rbp - 0x50], 0
cmp rdx, r8
je 0x180008ed5
sub r8, rdx
lea rcx, [rbp - 0x50]
call fcn.18001e7f0
mov rax, qword [rbp - 0x38]
lea rcx, [rbp - 0x50]
cmp r13, rcx
je 0x180008f30
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x180008f19
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x180008f14
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800090ee
mov rcx, r8
call fcn.18007bed0
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rbp - 0x40]
movups xmmword [r13], xmm0
movups xmmword [r13 + 0x10], xmm1
jmp 0x180008db3
cmp rax, 0x10
jb 0x180008db3
mov rcx, qword [rbp - 0x50]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008f67
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800090ee
call fcn.18007bed0
jmp 0x180008db3
mov qword [r14], 0xffffffffffffffff
mov dword [r14 + 8], 0
jmp case.0x180008d00.10
mov byte [rsp + 0x50], 0
test rdi, rdi
je 0x180008fdf
mov rcx, qword [rbp - 0x10]
mov rax, rsi
sub rcx, rdi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rdi
lea rdx, [rdx + rdx*2]
shl rdx, 3
cmp rdx, 0x1000
jb 0x180008fd7
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800090ee
mov rcx, rdi
call fcn.18007bed0
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x198]
movaps xmm6, xmmword [rsp + 0x140]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [r13]
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x90]
mov rax, qword [rbp + 0xa8]
mov r9d, 0xd
mov rcx, r14
mov qword [rsp + 0x20], rax
mov byte [rbp + 0x90], 1
call fcn.18005ae90
mov rbx, qword [r14]
test rdi, rdi
je 0x180009091
mov rcx, qword [rbp - 0x10]
mov rax, rsi
sub rcx, rdi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rdi
lea rdx, [rdx + rdx*2]
shl rdx, 3
cmp rdx, 0x1000
jb 0x180009089
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800090ee
mov rcx, rdi
call fcn.18007bed0
mov rax, rbx
jmp 0x180008fe4
test rdi, rdi
je 0x180008fdf
mov rcx, qword [rbp - 0x10]
mov rax, rsi
sub rcx, rdi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rdi
lea rdx, [rdx + rdx*2]
shl rdx, 3
cmp rdx, 0x1000
jb 0x180008fd7
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180008fd7
call fcn.180080234
int3