Function at 0x180011320
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
mov r13d, dword [rsp + 0x130]
mov r10, r9
movaps xmmword [rax - 0x58], xmm6
mov r14, r8
movaps xmmword [rax - 0x68], xmm7
mov rbp, rcx
lea ebx, [r13 - 9]
mov dword [rsp + 0x130], ebx
cmp r13d, ebx
jbe case.0x1800113ce.6
movss xmm6, dword [0x18007b840]
lea r12d, [r13 - 0x69]
movsd xmm7, qword [0x18007ab58]
lea r8, [0x180000000]
mov rbx, qword [rsp + 0x38]
lea r9, [0x18001d040]
mov rdi, qword [rsp + 0x38]
mov r15d, dword [rsp + 0x130]
mov eax, dword [rsp + 0x130]
nop
cmp r12d, 0x27
ja case.default.0x1800113ce
movzx eax, byte [r8 + r12 + 0x11738]
mov ecx, dword [r8 + rax*4 + 0x11714]
add rcx, r8
jmp rcx
cmp qword [r14 + 0x18], 0x10
mov rbx, r14
jb 0x1800113dd
mov rbx, qword [r14]
mov rdi, qword [r14 + 0x10]
add rbx, 4
sub rdi, 4
jmp case.0x1800113ce.8
xor ebp, ebp
lea r14, [rsp + 0x70]
nop word [rax + rax]
mov esi, 0x10a
mov eax, esi
sub eax, 0x108
je 0x180011448
sub eax, 1
je 0x18001142b
cmp eax, 1
jne 0x180011451
cmp rdi, 4
jb 0x18001164f
mov r15d, dword [rbx]
sub rdi, 4
jmp 0x180011451
add rbx, 4
mov r8d, r15d
cmp r8, rdi
ja 0x18001164f
mov rcx, qword [r14]
mov rdx, rbx
call fcn.180027020
jmp 0x180011451
mov eax, r15d
add rbx, rax
sub rdi, rax
dec esi
cmp esi, 0x107
ja 0x180011405
inc ebp
add r14, 8
cmp ebp, 2
jb 0x180011400
mov r14, qword [rsp + 0x120]
mov rbp, qword [rsp + 0x110]
lodsb al, byte [rsi]
and al, 0x10
add dword [rax], eax
add cl, ch
wait
add dword [rax], eax
invalid
xor r9d, r9d
lea r8, [rbp + 0x20]
mov edx, 0x8f
cmp edx, 0x8f
jne 0x1800114c2
mov qword [r8], rbx
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rbx + rcx], 0
jne 0x1800114a0
mov rax, 0xffffffffffffffff
sub rax, rcx
add rdi, rax
je 0x18001164f
inc rbx
add rbx, rcx
add edx, 0x1ad
cmp edx, 0x1ad
jbe 0x180011487
inc r9d
add r8, 8
cmp r9d, 4
jb 0x180011482
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], r10
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x70], xmm0
jmp 0x18001161e
mov rax, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
lea r8, [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov ecx, 0xaa
mov rax, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [rsp + 0x60], rax
mov rax, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov qword [rsp + 0x68], rax
mov eax, dword [rdx]
mov rdx, rbp
movups xmm1, xmmword [rsp + 0x60]
mov qword [rsp + 0x58], r9
mov r9, r10
movups xmm0, xmmword [rsp + 0x50]
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm1
call fcn.180029c50
mov dword [rsp + 0x30], eax
jmp 0x180011616
mov edx, 7
mov rcx, r14
call fcn.1800571e0
jmp 0x180011616
mov eax, dword [r14 + 4]
xor r9d, r9d
mov dword [rsp + 0x38], eax
xor r8d, r8d
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov rdx, r14
mov qword [rsp + 0x20], rax
lea ecx, [r9 + 0x3e]
call fcn.18003c2f0
mov r9, rax
test rbp, rbp
je 0x18001160d
test rax, rax
je 0x180011696
mov ecx, dword [r14]
xor esi, esi
imul ecx, dword [r14 + 4]
xor edx, edx
movsxd r8, ecx
test ecx, ecx
jle 0x180011616
mov rax, rbp
sub r9, rbp
nop dword [rax]
movss xmm1, dword [r9 + rax]
movss xmm2, dword [rax]
movaps xmm0, xmm1
subss xmm0, xmm2
andps xmm0, xmm6
cvtps2pd xmm0, xmm0
comisd xmm0, xmm7
ja 0x180011659
inc esi
inc rdx
add rax, 4
cmp rdx, r8
jl 0x1800115e0
jmp 0x180011616
test r9, r9
jne 0x1800116bc
mov r10, qword [rsp + 0x128]
mov rdx, qword [rsp + reloc.SHLWAPI.dll_SHRegGetIntW]
lea r8, [0x180000000]
lea r9, [0x18001d040]
mov eax, dword [rsp + 0x130]
dec r13d
dec r12d
cmp r13d, eax
ja 0x1800113b0
jmp case.0x1800113ce.6
mov byte [rsp + 0x30], 0
jmp case.0x1800113ce.6
mov ecx, 2
cvtps2pd xmm6, xmm2
cvtps2pd xmm7, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movaps xmm3, xmm7
movsd qword [rsp + 0x20], xmm6
mov rcx, rax
lea rdx, str.content::DOMStorageContextWrapper::StartScavengingUnusedSessionStorage
movq r9, xmm7
mov r8d, esi
call fcn.18005f710
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Fail_to_cast_IPaintSurface_to_CPaintSurface
call fcn.18005f710
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__s___l__s___fCSInstallerCustomHookProc__lf__s___em_d__im_d__ep_d__pf__s_
call fcn.18005f710
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test rdi, rdi
sete byte [rsp + 0x30]
mov eax, dword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0xb0]
movaps xmm7, xmmword [rsp + 0xa0]
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret