Function at 0x160054940
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x270
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x160270bd8]
xor rax, rsp
mov qword [rbp + 0x160], rax
mov r13d, r9d
mov rbx, r8
mov r15, rcx
lea rcx, [rbp + 0x80]
call fcn.160040ae8
nop
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.160040ae8
nop
mov eax, dword [0x160273a68]
mov esi, 1
add eax, esi
cmp eax, 0x400
cmove eax, esi
mov dword [0x160273a68], eax
xor edi, edi
mov r14d, edi
mov r12d, edi
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x40]
call fcn.160040ae8
nop
mov r8d, 0xa
lea rdx, [rbp + 0x120]
mov ecx, dword [0x160273a68]
call qword [sym.imp.msvcrt.dll__itow]
mov rax, qword [rsp + 0x40]
or r9d, 0xffffffff
mov r8d, dword [rsp + 0x54]
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x40]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
mov dword [rsp + 0x30], edi
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1600571e8
test eax, eax
jne 0x160099b62
mov ebx, esi
cmp r13d, esi
jb 0x160054afb
mov rax, qword [rsp + 0x40]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, qword [rbp + 0x88]
lea rcx, [rsp + 0x40]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
mov r8d, 0xa
lea rdx, [rbp + 0x120]
mov ecx, dword [0x160273a68]
call qword [sym.imp.msvcrt.dll__itow]
mov rax, qword [rsp + 0x40]
or r9d, 0xffffffff
mov r8d, dword [rsp + 0x54]
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x40]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
mov edx, 0x5f
lea rcx, [rsp + 0x40]
call fcn.160034ce8
mov r8d, 0xa
lea rdx, [rbp + 0x120]
mov ecx, ebx
call qword [sym.imp.msvcrt.dll__itow]
mov rax, qword [rsp + 0x40]
or r9d, 0xffffffff
mov r8d, dword [rsp + 0x54]
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x40]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1600571e8
test eax, eax
jne 0x160099b62
add ebx, esi
cmp ebx, r13d
jbe 0x160054a32
lea rcx, [rsp + 0x40]
call fcn.160040b2c
lea rcx, [rbp - 0x20]
call fcn.160040b2c
nop
lea rcx, [rbp + 0x80]
call fcn.160040b2c
mov eax, edi
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.16006e590
mov rbx, qword [rsp + 0x2c8]
add rsp, 0x270
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test r14d, r14d
je 0x160099b6e
mov esi, edi
mov r14d, edi
jmp 0x160099b72
mov esi, dword [rsp + 0x30]
test esi, esi
je 0x160099c53
test dword [0x160274340], 0x800
je 0x160099b9c
mov r9, qword [r15 + 0x2c8]
mov r8d, esi
lea rdx, [0x1601f8f80]
call fcn.1600e963c
mov qword [rsp + 0x30], rdi
mov r8d, esi
xor edx, edx
mov ecx, 0x401
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_1.dll_OpenProcess]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1600161cc
mov rbx, qword [rsp + 0x30]
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x160099c1e
xor edx, edx
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TerminateProcess]
mov r14d, 1
test dword [0x160274340], 0x800
je 0x160099c00
mov r9, qword [r15 + 0x2c8]
mov r8d, esi
lea rdx, [0x1601f8778]
call fcn.1600e963c
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop
lea rcx, [rsp + 0x40]
call fcn.160040b2c
mov esi, 1
jmp 0x1600549c0
test dword [0x160274340], 0x8000
je 0x160099c40
mov r9, qword [r15 + 0x2c8]
xor r8d, r8d
lea rdx, [0x1601f9568]
call fcn.1600e963c
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x160099c53
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov eax, dword [0x160273a68]
mov esi, 1
add eax, esi
cmp eax, 0x400
cmove eax, esi
mov dword [0x160273a68], eax
add r12d, esi
cmp r12d, 0x400
je 0x160099c8a
lea rcx, [rsp + 0x40]
call fcn.160040b2c
nop
jmp 0x1600549c0
mov edi, 0x80004005
jmp 0x160054afb