Function at 0x180050660
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rax, qword [0x18007cd08]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov ebx, ecx
mov dword [rbp - 0x19], ecx
mov esi, ecx
mov r12, rdx
imul ecx, ecx, 0x9b0
mov dword [rbp - 0x49], ecx
cmp ebx, ecx
ja 0x180050b8f
mov rdi, qword [rbp - 0x21]
xor r14d, r14d
mov r13, qword [rbp - 0x21]
mov eax, ecx
mov r15, qword [rbp - 0x21]
movabs r10, 0x342da7f2f4960343
movabs rcx, 0x64002e0032
cmp esi, 0x43e
ja 0x180050a1f
je 0x1800509c0
cmp esi, 0x1d2
ja 0x1800508b1
je 0x18005087c
mov eax, esi
sub eax, 1
je 0x180050834
sub eax, 0x9b
je 0x1800507a0
sub eax, 0x3e
je 0x180050775
cmp eax, 0x5d
jne 0x180050b7c
cmp qword [rdi + 8], 1
jne 0x180050cb1
cmp qword [rdi + 0x10], 0
jne 0x180050c8b
cmp qword [rdi + 0x18], 0
jne 0x180050c65
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x18005074f
cmp qword [rax + 8], 2
je 0x180050b7c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.EGL_EXT_gl_colorspace_display_p3
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 2
mov byte [rbp - 9], 0
lea rdx, [0x180074a47]
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov dword [rbp - 7], 0x756e4541
mov byte [rbp - 3], 0
jmp 0x180050b7c
mov edx, 0x23
mov qword [rbp - 0x31], 2
lea rax, [rbp - 0x29]
mov r9, r13
lea r8, [rbp - 0x31]
mov qword [rsp + 0x20], rax
lea ecx, [rdx - 0x21]
call fcn.180062560
mov edx, 0x23
mov qword [rbp - 0x31], 3
lea rax, [rbp - 0x29]
mov r9, r13
lea r8, [rbp - 0x31]
mov qword [rsp + 0x20], rax
lea ecx, [rdx - 0x20]
call fcn.180062560
mov edx, 0x23
mov qword [rbp - 0x31], 4
lea rax, [rbp - 0x29]
mov r9, r13
lea r8, [rbp - 0x31]
mov qword [rsp + 0x20], rax
lea ecx, [rdx - 0x1f]
call fcn.180062560
mov r8, qword [rbp - 0x29]
lea rcx, [rbp - 0x31]
mov r9, r13
mov qword [rbp - 0x31], 1
mov edx, 0x7f
call fcn.180062810
mov rdi, rax
jmp 0x180050b7c
mov r9d, 0xef
mov qword [rsp + 0x20], r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180042520
mov r13, rax
mov qword [rbp - 0x29], r14
mov edx, 0x23
mov qword [rbp - 0x21], 1
lea rax, [rbp - 0x29]
mov r9, r13
lea r8, [rbp - 0x21]
mov qword [rsp + 0x20], rax
lea ecx, [rdx - 0x22]
call fcn.180062560
jmp 0x180050b7c
mov rdi, qword [rdi + 0x20]
cmp qword [rdi + 8], 2
je 0x180050b7f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.KEY_DERIVATION_ALGORITHM_UNKNOWN
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp esi, 0x26d
je 0x18005095f
cmp esi, 0x308
je 0x18005090b
cmp esi, 0x3a3
jne 0x180050b7f
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x1800508e5
cmp qword [rax + 8], 2
je 0x180050b7c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.list_special_access__url___s_
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdi, qword [rdi + 0x18]
cmp qword [rdi + 8], 3
jne 0x180050cfd
cmp qword [rdi + 0x10], 0
jne 0x180050cd7
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x180050939
cmp qword [rax + 8], 4
je 0x180050b7c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.UpdatusUtil::CheckForTrayStartXP
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x180050d49
cmp qword [rax + 8], 1
jne 0x180050d49
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x180050d23
cmp qword [rax + 8], 3
jne 0x180050d23
cmp qword [rdi + 0x20], 0
je 0x180050b7c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Failed_to_get_rmGpuId_for_dev__d
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdi, qword [rdi + 0x18]
cmp qword [rdi + 8], 4
jne 0x180050dbb
cmp qword [rdi + 0x10], 0
jne 0x180050d95
cmp qword [rdi + 0x18], 0
jne 0x180050d6f
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x1800509f9
cmp qword [rax + 8], 3
je 0x180050b7c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ReplayableResource.prototype__
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp esi, 0x18cd4
ja 0x180050aea
je 0x180050ab5
cmp esi, 0x4d9
je 0x180050a98
cmp esi, 0x84d8
je 0x180050a6d
cmp esi, 0x108d6
jne 0x180050b7f
mov r8d, 1
lea rdx, [0x1800749f0]
lea rcx, [rbp + 7]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 8], 0
jmp 0x180050b7c
mov r8d, 5
mov byte [rbp - 3], 0x6d
lea rdx, [0x1800748a7]
mov dword [rbp - 2], 0x746f7250
lea rcx, [rbp - 9]
mov byte [rbp + 2], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x180050b7c
lea r8, [rbp - 0x41]
mov byte [rbp - 0x41], 1
mov rdx, r13
mov ecx, 0x91
call fcn.18006b1e0
mov r13, rax
jmp 0x180050b7c
mov r8d, 3
mov word [rbp + 0xf], r14w
lea rdx, [0x180074870]
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x180074878]
mov dword [rbp + 0x15], eax
movzx eax, word [0x18007487c]
mov word [rbp + 0x19], ax
jmp 0x180050b7c
cmp esi, 0x210d2
je 0x180050c20
cmp esi, 0x294d0
je 0x180050b1e
cmp esi, 0x318ce
jne 0x180050b7f
mov rdx, qword [r12]
lea r8, [rbp - 0x39]
xor ecx, ecx
call qword [rbp - 0x11]
movsxd rcx, eax
cmp rcx, r15
sete al
jmp 0x180050b93
mov eax, dword [rbp - 0x39]
cmp eax, 0x274
jb 0x180050de1
mov r14, qword [r12 + 8]
mov ecx, eax
mov r9, qword [r12]
mov rax, r10
mul rcx
mov rcx, r14
mov byte [rbp - 0x45], 0
sub rcx, r9
mov r15, rdx
mov rax, r10
shr r15, 7
imul rcx
mov r8, rdx
sar r8, 7
mov rax, r8
shr rax, 0x3f
add r8, rax
cmp r15, r8
jae 0x180050bc0
imul rax, r15, 0x274
add rax, r9
mov qword [r12 + 8], rax
xor r14d, r14d
mov eax, dword [rbp - 0x49]
imul ecx, ebx, 0x9b
add esi, ecx
cmp esi, eax
jbe 0x1800506be
movzx eax, byte [rbp - 0x45]
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.18006edc0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
jbe 0x180050b79
mov rcx, qword [r12 + 0x10]
mov rax, r10
sub rcx, r9
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r15, rdx
jbe 0x180050bf4
lea r8, [rbp - 0x45]
mov rdx, r15
mov rcx, r12
call fcn.18003f110
jmp 0x180050b79
mov rax, r15
sub rax, r8
je 0x180050c16
imul rbx, rax, 0x274
xor edx, edx
mov rcx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memset
add r14, rbx
mov ebx, dword [rbp - 0x19]
mov qword [r12 + 8], r14
jmp 0x180050b79
mov qword [rbp + 0x19], rcx
lea rdx, [0x180074a90]
lea rcx, [rbp + 0xf]
mov r8d, 2
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 0x8b
lea rdx, [rbp - 9]
lea rcx, [rbp + 0xf]
call fcn.1800417d0
lea r8, [rbp - 0x39]
mov qword [rbp - 0x11], rax
xor edx, edx
mov dword [rbp - 0x39], r14d
xor ecx, ecx
call rax
jmp 0x180050b7c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.5dcc7a3ab0f93796613f382a3c29d5fc
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.BUFFER_ATOMIC_UMIN_RTN_BOTHEN_vi
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.bookmark_popup_bookmark_popup.js
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Array_of_VmodlVimHostCpuIdInfo
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__builtin_ia32_cvtpd2uqq128_mask
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.IProc::setOpt_QUALIFY_METHODS__s
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.npdjjkjlcidkjlamlmmdelcjbcpdjocm
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.944F8312FB104FDC968E1E232B0C9065
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Merging_with_delta_font__I64u...
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.http:__ocsp02.telesec.de_ocspr0A
call fcn.18006e7b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor al, al
jmp 0x180050b93