Function at 0x1800709c0
Capabilities:
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xa8
mov esi, dword [rbp + 0x6f]
mov r10, r8
imul eax, r9d, 0x66f
mov r12d, r9d
mov dword [rbp - 0x45], r9d
mov dword [rbp - 0x39], eax
cmp r9d, eax
ja 0x180070f1d
mov ebx, dword [rbp + 0x6f]
mov r13, qword [rbp - 0x21]
mov edi, dword [rbp + 0x6f]
mov r14, qword [rbp - 0x29]
mov r15, qword [rbp + 0x77]
xor r9d, r9d
lea r11, [0x18007ffe0]
cmp r12d, 0x4500
ja 0x180070ef9
je 0x180070e73
mov eax, r12d
sub eax, 0x39
je 0x180070aac
sub eax, 0x27
je 0x180070a8e
sub eax, 0x5b
je 0x180070a60
cmp eax, 0x283d
jne 0x180070f8c
mov eax, r9d
jmp 0x180070f1f
mov rax, qword [rbp + 0x7f]
mov r8d, dword [rcx]
mov r9d, dword [rax]
cmp r9d, r8d
je 0x180070f8c
mov rdx, r15
lea rcx, str.DirectShowAudioReceiverPipeline
call fcn.1800d6920
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rbp + 0x7f]
mov rcx, qword [rax]
mov rax, qword [r15]
mov qword [rbp - 0x21], rcx
mov rcx, qword [rbp + 0x57]
mov byte [rax + 0x1bb], 1
jmp 0x180070f8c
mov r8, qword [rbp + 0x77]
mov rax, qword [r8]
cmp byte [rax + 0x7a], 0
je 0x180070f89
mov r15d, 0xb5
mov dword [rbp - 0x49], r15d
cmp r15d, 0xb5
je 0x180070b0c
cmp r15d, 0x799c
jne 0x180070e42
lea rax, [0x18009ba00]
mov qword [rbp - 0x51], r14
mov qword [r14 + 8], rax
lea r9, [rbp - 0x59]
mov rax, qword [r8]
lea rcx, [rbp - 0x51]
xor r8d, r8d
mov qword [rbp - 0x59], rax
lea edx, [r8 + 0x52]
call fcn.18006e400
jmp 0x180070e34
mov r14, qword [r8]
mov qword [rbp - 0x51], r14
cmp byte [r14 + 0x1ac], 0
je 0x180070b26
mov rcx, qword [r14 + 0x2c0]
jmp 0x180070b2d
mov rcx, qword [r14 + 0x2a0]
mov qword [rbp - 0x59], rcx
test rcx, rcx
jne 0x180070b41
mov rcx, qword [r14 + 0x2c0]
mov qword [rbp - 0x59], rcx
movzx eax, byte [rcx + 0x33]
mov r12d, ILRemoveLastID
mov byte [rbp - 0x69], al
nop
cmp r12d, 0x69c
ja 0x180070cc5
je 0x180070cb5
cmp r12d, 0x1b0
ja 0x180070c5a
je 0x180070c48
cmp r12d, 0xc
je 0x180070bea
cmp r12d, 0x78
jne 0x180070dbe
mov rax, qword [rbp - 0x51]
mov r15d, r9d
mov rbx, qword [r14 + 0x358]
mov r14, rbx
cmp dword [rax + 0x314], 0
jle 0x180070bda
mov r9d, 0x6a
mov qword [rbp - 0x19], rbx
xor r8d, r8d
lea rcx, [rbp - 0x19]
xor edx, edx
call fcn.180006190
shr ax, 0xe
add rbx, 2
mov byte [r14], al
lea r14, [r14 + 1]
mov rax, qword [rbp - 0x51]
inc r15d
cmp r15d, dword [rax + 0x314]
jl 0x180070ba0
xor r9d, r9d
mov r14, qword [rbp - 0x51]
mov ebx, r9d
movzx eax, byte [rbp - 0x69]
jmp 0x180070dbe
cmp word [rcx + 0x30], 0
je 0x180070c24
cmp byte [rcx + 0x54], 0
jne 0x180070bfd
cmp byte [rcx + 0x55], 0
je 0x180070c24
mov qword [rbp - 0x11], rcx
lea r8, [rbp - 0x11]
lea rcx, [rbp - 9]
mov qword [rbp - 9], r14
mov r9d, 0xc6
xor edx, edx
call fcn.180045dd0
mov edi, eax
test eax, eax
jne 0x180070dde
mov ecx, 0x78
call qword [r14 + 0xa8]
mov r13, rax
test rax, rax
je 0x180070de2
movzx eax, byte [rbp - 0x69]
xor r9d, r9d
jmp 0x180070dbe
mov qword [r13], r11
mov qword [r13 + 8], r9
mov word [r13 + 0x30], r9w
jmp 0x180070dbe
cmp r12d, 0x354
je 0x180070c9b
cmp r12d, 0x4f8
jne 0x180070dbe
mov byte [r13 + 0x35], 1
mov eax, dword [rcx + 0x38]
mov dword [r13 + 0x38], eax
mov eax, dword [rcx + 0x3c]
mov dword [r13 + 0x3c], eax
movzx eax, byte [rcx + 0x40]
mov byte [r13 + 0x40], al
mov eax, dword [rcx + 0x44]
mov dword [r13 + 0x44], eax
movzx eax, byte [rbp - 0x69]
jmp 0x180070dbe
mov byte [r13 + 0x33], al
mov byte [r13 + 0x32], 0
movzx eax, byte [rcx + 0x34]
mov byte [r13 + 0x34], al
movzx eax, byte [rbp - 0x69]
jmp 0x180070dbe
mov eax, dword [rcx + 0x48]
mov dword [r13 + 0x48], eax
movzx eax, byte [rbp - 0x69]
jmp 0x180070dbe
cmp r12d, 0xd2c
ja 0x180070dac
je 0x180070d12
cmp r12d, 0x840
je 0x180070d02
cmp r12d, 0x9e4
jne 0x180070dbe
mov eax, dword [rcx + 0x50]
mov dword [r13 + 0x50], eax
movzx eax, byte [rbp - 0x69]
mov qword [r13 + 0x64], 0
jmp 0x180070dbe
mov eax, dword [rcx + 0x4c]
mov dword [r13 + 0x4c], eax
movzx eax, byte [rbp - 0x69]
jmp 0x180070dbe
mov ebx, 0xff
mov eax, ebx
sub eax, 0xff
je 0x180070d55
sub eax, 1
je 0x180070d34
cmp eax, 1
jne 0x180070d8e
mov rax, qword [rbp - 1]
mov qword [r13 + 0x70], rax
jmp 0x180070d8e
test edi, edi
je 0x180070d8e
test r13, r13
je 0x180070d4c
mov edx, 0x78
mov rcx, r13
call qword [r14 + reloc.SHELL32.dll_SHSetInstanceExplorer]
mov ebx, edi
mov eax, edi
jmp 0x180070e1a
mov rax, qword [rcx + 0x70]
lea r9, [rbp - 0x61]
mov qword [rbp - 0x31], rax
lea r8, [rbp - 0x31]
mov edx, 0x7a
mov qword [rbp - 0x41], r14
movzx ecx, byte [rax + 0x35]
lea rax, [rbp - 0x41]
mov byte [rbp - 0x61], cl
lea rcx, [rbp - 1]
mov qword [rsp + 0x20], rax
call fcn.18006e870
mov rcx, qword [rbp - 0x59]
mov rdi, rax
inc ebx
cmp ebx, 0x102
jb 0x180070d17
movzx eax, byte [rbp - 0x69]
xor r9d, r9d
mov ebx, r9d
mov qword [rbp - 0x29], r13
jmp 0x180070dbe
cmp r12d, 0xed0
je 0x180070e18
cmp r12d, 0x10e0
je 0x180070e18
add r12d, 0x1a4
cmp r12d, 0x1554
ja 0x180070e18
mov rcx, qword [rbp - 0x59]
lea r11, [0x18007ffe0]
jmp 0x180070b50
mov ebx, eax
jmp 0x180070e1a
mov dword [rbp - 0x41], eax
lea r8, [rbp - 0x31]
mov dword [rbp - 0x51], eax
lea rdx, [rbp - 0x51]
lea rax, [rbp - 0x41]
mov dword [rbp - 0x59], 1
mov r9d, 0x75
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x59]
mov qword [rbp - 0x31], r14
call fcn.180063bc0
mov ebx, 1
mov eax, ebx
test eax, eax
jne 0x180070f1f
mov r14, qword [rbp - 0x29]
lea rax, [0x18007cd30]
mov r15d, dword [rbp - 0x49]
mov qword [r14], rax
mov r8, qword [rbp + 0x77]
lea r11, [0x18007ffe0]
xor r9d, r9d
add r15d, 0x78e7
mov dword [rbp - 0x49], r15d
cmp r15d, 0xf1ce
jbe 0x180070ac7
mov r15, qword [rbp + 0x77]
mov r12d, dword [rbp - 0x45]
mov r10, qword [rbp + 0x67]
mov rdx, qword [rbp + 0x5f]
mov rcx, qword [rbp + 0x57]
jmp 0x180070f8c
mov r8, qword [rbp - 0x21]
mov edx, 2
mov rcx, qword [r15]
mov eax, dword [r8 + 0x30]
mov dword [rcx + 0x8a4], eax
lea rcx, [r8 + 0x34]
mov rax, qword [r15]
add rax, 0x8a8
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm1, xmmword [rcx - 0x70]
movups xmmword [rax - 0x70], xmm1
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x60], xmm0
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x50], xmm1
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x40], xmm0
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x30], xmm1
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x20], xmm0
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x180070e96
mov rdx, qword [rbp + 0x5f]
mov esi, r9d
mov rcx, qword [rbp + 0x57]
jmp 0x180070f8c
cmp r12d, 0x8668
je 0x180070f63
cmp r12d, 0x89a0
je 0x180070f1d
cmp r12d, 0x10c15
je 0x180070f33
cmp r12d, 0x191c2
jne 0x180070f8c
mov eax, esi
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [rbp + 0x7f]
lea rcx, str.include_next
mov edx, dword [r10]
mov r8, r15
mov r9d, dword [rax]
call fcn.1800d6920
mov r10, qword [rbp + 0x67]
mov rax, qword [rbp + 0x7f]
mov rdx, qword [rbp + 0x5f]
mov rcx, qword [rbp + 0x57]
mov esi, dword [r10]
add esi, dword [rax]
jmp 0x180070f8c
mov r9d, dword [r10]
mov r8d, dword [rdx]
cmp r9d, r8d
je 0x180070f8c
mov rdx, r15
lea rcx, str.elements_sync_card_sync_card.html
call fcn.1800d6920
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r15, r8
imul eax, dword [rbp + 0x6f], 0xb7
add r12d, eax
mov dword [rbp - 0x45], r12d
cmp r12d, dword [rbp - 0x39]
ja 0x180070f1d
jmp 0x180070a1e