Function at 0x180040460
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x1800e72b8]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov r13, qword [rbp + 0x280]
mov r12, r8
imul eax, r9d, 0x7dd
lea r8, [0x180000000]
mov r10, rdx
mov qword [rsp + 0x48], rdx
mov edi, r9d
mov dword [rsp + 0x50], r9d
mov rdx, rcx
mov qword [rsp + 0x68], rcx
mov r15d, r9d
mov dword [rsp + 0x58], eax
cmp r9d, eax
ja 0x18004097b
mov r14d, dword [rsp + 0x58]
nop word [rax + rax]
cmp r15d, 0x2840
ja 0x1800408a8
je 0x18004063e
mov eax, r15d
sub eax, 0x11
je 0x180040603
sub eax, 0x27
je 0x1800405f7
sub eax, 0x8d
je 0x1800405d2
sub eax, 0x46
je 0x1800405b7
cmp eax, 0xb2d
jne 0x180040956
test r10, r10
je 0x18004055b
mov r8, r10
mov rax, r12
sub r8, r12
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180040553
inc rax
test ecx, ecx
jne 0x180040540
test edx, edx
je 0x1800409c3
mov ecx, pe_nt_image_headers64
mov eax, ecx
sub eax, 0x100
je 0x1800405a0
cmp eax, 1
jne 0x1800405a8
mov rbx, qword [rsp + 0x60]
mov rax, rbx
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1800bcd70
mov rbx, qword [rsp + 0x378]
add rsp, 0x320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, dword [r13]
mov dword [rsp + 0x60], eax
inc ecx
cmp ecx, 0x102
jb 0x180040560
jmp 0x180040956
mov eax, dword [r12 + 0x60]
cmp eax, dword [r10 + 0x90]
jne 0x1800409d5
test eax, eax
jne 0x18004056e
jmp 0x180040956
mov rax, qword [r12]
cmp qword [rax], 0
jne 0x180040956
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [r12]
mov qword [rcx], rax
jmp 0x180040956
mov byte [0x1800fa978], 0
jmp 0x180040956
test r12, r12
jne 0x180040956
mov eax, 0xdb
cmp eax, 0xdb
je 0x180040625
cmp eax, 0x99fc
je 0x18004056e
jmp 0x18004062d
mov dword [rsp + 0x60], 1
add eax, 0x9921
cmp eax, 0x13242
jbe 0x180040611
jmp 0x180040956
cmp dword [r12 + 0x40], 0
je 0x180040796
mov edi, 0x57
nop
mov eax, edi
sub eax, 0x54
je 0x18004073c
sub eax, 1
je 0x1800406f2
sub eax, 1
je 0x1800406c6
cmp eax, 1
jne 0x18004077b
lea rax, [r12 + 0x20]
mov qword [rsp + 0x40], 0x20
lea r9, [rbp + 0x80]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rcx, [rsp + 0x40]
mov edx, 0xdf
call fcn.180081770
mov r9d, 0xf4
mov qword [rsp + 0x40], 0x20
lea r8, [rsp + 0x40]
mov rdx, r12
lea rcx, [rbp + 0x80]
call fcn.180041a10
jmp 0x18004077b
mov r9d, 0xf4
mov qword [rsp + 0x40], 1
lea r8, [rsp + 0x40]
lea rdx, [0x1800fa978]
lea rcx, [rbp + 0x80]
call fcn.180041a10
jmp 0x18004077b
lea rbx, [r12 + 0x20]
mov r9d, 0x10b
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0x80]
xor ecx, ecx
call fcn.180041fe0
lea r9, [rbp + 0x80]
mov qword [rsp + 0x40], 0x20
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov edx, 0xdf
lea rcx, [rsp + 0x40]
call fcn.180081770
jmp 0x18004077b
mov r9d, 0xf4
mov qword [rsp + 0x40], 0x20
lea r8, [rsp + 0x40]
mov rdx, r12
lea rcx, [rbp + 0x80]
call fcn.180041a10
mov r9d, 0x10b
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rdx, [rbp + 0x80]
xor ecx, ecx
call fcn.180041fe0
dec edi
cmp edi, 0x53
ja 0x180040650
mov r10, qword [rsp + 0x48]
lea r8, [0x180000000]
mov edi, dword [rsp + 0x50]
cmp qword [r13], 0
jbe 0x180040956
mov ebx, 5
lea esi, [rbx + 1]
nop dword [rax]
cmp ebx, 5
ja case.default.0x1800407c6
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0x40c5c]
add rcx, r8
jmp rcx
movsxd rdi, r14d
mov rdx, r12
mov r8, rdi
mov rcx, r10
call sub.VCRUNTIME140.dll_memcpy
mov r10, qword [rsp + 0x48]
add r10, rdi
mov qword [rsp + 0x48], r10
jmp case.default.0x1800407c6
lea rax, [r12 + 0x20]
mov qword [rsp + 0x40], 0x20
lea r9, [rbp + 0x80]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rcx, [rsp + 0x40]
mov edx, 0xdf
call fcn.180081770
mov r9d, 0xf4
mov qword [rsp + 0x40], 0x20
lea r8, [rsp + 0x40]
mov rdx, r12
lea rcx, [rbp + 0x80]
call fcn.180041a10
jmp 0x180040875
mov r14d, dword [r13]
jmp case.default.0x1800407c6
movsxd rax, r14d
sub qword [r13], rax
jmp case.default.0x1800407c6
cmp r14d, 0x20
jle case.default.0x1800407c6
mov r14d, 0x20
jmp case.default.0x1800407c6
mov r9d, 0x10b
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rdx, [rbp + 0x80]
xor ecx, ecx
call fcn.180041fe0
mov r10, qword [rsp + 0x48]
dec ebx
lea r8, [0x180000000]
sub rsi, 1
jne 0x1800407b0
cmp qword [r13], 0
lea r8, [0x180000000]
ja 0x1800407a1
mov edi, dword [rsp + 0x50]
jmp 0x180040956
cmp r15d, 0x4168
je 0x18004091c
cmp r15d, 0x5048
je 0x180040911
cmp r15d, 0x8d98
je 0x1800408e7
cmp r15d, 0xbfe8
jne 0x180040956
lea rdx, [r10 + 0x60]
xor r9d, r9d
lea r8, [rbp + 0x18]
mov ecx, 0x143
call fcn.18001a9f0
jmp 0x180040956
mov rax, qword [r12]
mov r9, rdx
mov r8d, dword [r13]
mov rdx, r10
mov rcx, rax
call qword [rax + 8]
mov rax, qword [r12]
cmp dword [rax + 0x10], 0
jne 0x180040956
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [r12 + 0x40], 1
jmp 0x180040956
mov eax, 0xa6
cmp eax, 0xa6
jne 0x18004094a
movups xmm0, xmmword [rdx]
movups xmmword [r10], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r10 + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [r13 + 0x10], xmm1
add eax, 0x8d
cmp eax, 0x133
jb 0x180040921
mov r10, qword [rsp + 0x48]
lea r8, [0x180000000]
mov rdx, qword [rsp + 0x68]
imul eax, edi, 0xb7
add r15d, eax
cmp r15d, dword [rsp + 0x58]
jbe 0x1800404e0
lea r15d, [rdi + 0xb]
cmp edi, r15d
jae 0x18004056e
mov rbx, qword [rsp + 0x60]
lea r14d, [rdi - 0x8d]
mov rsi, qword [rsp + 0x40]
nop dword [rax]
cmp r14d, 0x84
ja case.0x1800409c1.10
movzx eax, byte [r8 + r14 + 0x40ca0]
mov ecx, dword [r8 + rax*4 + 0x40c74]
add rcx, r8
jmp rcx
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
jmp 0x180040576
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x1800c867b]
mov rcx, rax
lea rdx, str.MF_BUILTIN
lea rax, str.WeekNumberCell.prototype.reset__function_week__
mov qword [rsp + 0x20], rax
call fcn.1800bc2a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
lea r8, [rbp - 0x78]
mov ecx, 0x5e
lea rdx, [rbp - 0x18]
call fcn.18008b9f0
test eax, eax
jne 0x180040b00
mov edi, 0xe1
nop dword [rax + rax]
cmp edi, 0xe1
je 0x180040a47
cmp edi, 0x83d6
jne 0x180040a77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x1800c867b]
mov rcx, rax
lea rdx, str.FontObject
lea rax, str.bdmv_parse_header__c_c_c_c_:_invalid_signature__c_c_c_c
mov qword [rsp + 0x20], rax
call fcn.1800bc2a0
add edi, 0x82f5
cmp edi, 0x105ea
jbe 0x180040a30
mov edi, dword [rsp + 0x50]
jmp 0x180040b00
lea rcx, [r10 + 0x60]
mov r9d, 0x12f
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x18]
call fcn.180053eb0
mov r10, qword [rsp + 0x48]
movups xmm0, xmmword [r10 + 0x30]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [r10 + 0x40]
movups xmmword [rbp - 0x68], xmm1
movups xmm0, xmmword [r10 + 0x50]
movups xmmword [rbp - 0x58], xmm0
jmp case.0x1800409c1.10
mov dword [rsp + 0x28], 0x75
lea r9, [rbp - 0x48]
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.18008c850
jmp 0x180040b00
mov r9d, 0x12f
lea rdx, [rbp + 0x48]
mov r8, r12
lea rcx, [rbp + 0x18]
call fcn.180053eb0
mov r10, qword [rsp + 0x48]
inc edi
inc r14d
mov dword [rsp + 0x50], edi
cmp edi, r15d
jae 0x180040573
mov rdx, qword [rsp + 0x68]
lea r8, [0x180000000]
jmp 0x1800409a0
mov dword [rsp + 0x28], 0x75
lea r9, [rbp - 0x78]
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.18008c850
lea r8, [rbp - 0x48]
mov ecx, 0x5e
lea rdx, [rbp + 0x48]
call fcn.18008b9f0
test eax, eax
jne 0x180040b00
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x1800c867b]
mov rcx, rax
lea rdx, str.5B:BFBMBUB
lea rax, str._s_OID_OID_ATH_COEX_INQUIRY_payload_inquiry_action___s
mov qword [rsp + 0x20], rax
call fcn.1800bc2a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov eax, dword [rdx]
mov ecx, 0x400
test eax, eax
cmovg ecx, eax
mov dword [rsi + 8], ecx
jmp case.0x1800409c1.10
lea r8, [r12 + 0x30]
mov r9d, 0x12f
lea rdx, [rbp - 0x18]
jmp 0x180040af7
mov eax, dword [r13]
lea r8, [rsp + 0x60]
mov dword [rsp + 0x58], eax
lea rdx, [rsp + 0x58]
mov rax, qword [r12]
xor r9d, r9d
mov qword [rsp + 0x60], rax
mov ecx, 0x8d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r10
mov qword [rsp + 0x40], 0x10
call fcn.180085bd0
mov rsi, rax
mov qword [rax], 0
jmp 0x180040b00
mov eax, 0x31
nop dword [rax]
cmp eax, 0x31
je 0x180040c30
cmp eax, 0x66
je 0x180040573
jmp 0x180040c33
mov rbx, rsi
add eax, 0x35
cmp eax, 0x9b
jb 0x180040c20
movups xmm0, xmmword [r10]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [r10 + 0x10]
movups xmmword [rbp - 0x38], xmm1
movups xmm0, xmmword [r10 + 0x20]
movups xmmword [rbp - 0x28], xmm0
jmp case.0x1800409c1.10