Function at 0x14008e340
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov rsi, r9
mov rdi, r8
mov ebp, edx
mov rbx, rcx
cmp edx, 0x465
ja 0x14008e4a5
cmp edx, 0x465
je 0x14008e498
mov eax, edx
sub eax, 0x10
je 0x14008e432
sub eax, 0x103
je 0x14008e428
sub eax, 0xee
je 0x14008e3ed
cmp eax, 4
jne case.default.0x14008e72d
mov rcx, qword [rcx + 0xa78]
mov edx, dword [rcx + 0x708]
sub edx, 1
je 0x14008e3dd
sub edx, 2
je 0x14008e3cd
cmp edx, 1
jne 0x14008e7d5
mov r8, r9
mov rcx, rbx
call fcn.14009a5d0
jmp 0x14008e7f3
mov r8, rsi
mov rcx, rbx
call fcn.140096380
jmp 0x14008e7f3
mov r8, rsi
mov rcx, rbx
call fcn.14009ee30
jmp 0x14008e7f3
mov rcx, qword [rcx + 0xa78]
mov edx, dword [rcx + 0x708]
sub edx, 3
je 0x14008e418
cmp edx, 1
jne 0x14008e7d5
mov r8, rsi
mov rcx, rbx
call fcn.14009a410
jmp 0x14008e7f3
mov r8, rsi
mov rcx, rbx
call fcn.140095f00
jmp 0x14008e7f3
call fcn.140091190
jmp 0x14008e7f3
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14008e44f
mov rcx, qword [rbx + 8]
mov edx, 1
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
mov dword [0x14045e968], 1
call fcn.140093d60
call fcn.14012edf0
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14008e48f
mov rcx, qword [rbx + 8]
xor r9d, r9d
lea edx, [r9 + 0x10]
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_PostMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rdx, rdi
call fcn.14009f070
jmp 0x14008e7f3
cmp ebp, 0x5f5
ja 0x14008e70d
je 0x14008e700
lea eax, [rdx - 0x4c9]
cmp eax, 0xca
ja case.default.0x14008e72d
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x8e860]
mov ecx, dword [rdx + rax*4 + 0x8e818]
add rcx, rdx
jmp rcx
mov rcx, qword [rbx + 0xaf0]
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x58]
mov rcx, qword [rbx + 0xaf0]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 0x198]
test rdi, rdi
je case.default.0x14008e72d
mov rcx, rdi
call fcn.14012a2d4
jmp case.default.0x14008e72d
mov rdx, rdi
mov rcx, rbx
call fcn.1400913a0
jmp case.default.0x14008e72d
mov rcx, rbx
call fcn.140091910
jmp case.default.0x14008e72d
mov qword [rsp + 0x30], r14
mov r14, qword [rbx + 0xae8]
cmp edi, dword [r14 + 0x5ec]
je 0x14008e57b
cmp edi, dword [r14 + 0x5e8]
jl 0x14008e57b
cmp edi, dword [r14 + 0x5e4]
jg 0x14008e57b
mov rcx, r14
mov dword [r14 + 0x5ec], edi
call fcn.1400db070
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x310]
mov r14, qword [rsp + 0x30]
test esi, esi
jle case.default.0x14008e72d
mov rcx, qword [rbx + 0xae8]
mov dword [rcx + 0x5e4], esi
call fcn.1400db070
jmp case.default.0x14008e72d
mov rdx, rdi
mov rcx, rbx
call fcn.140091ac0
jmp case.default.0x14008e72d
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140091bf0
jmp case.default.0x14008e72d
mov rdx, rdi
mov rcx, rbx
call fcn.140091d50
jmp case.default.0x14008e72d
mov rdx, rdi
mov rcx, rbx
call fcn.1400941a0
jmp case.default.0x14008e72d
test rdi, rdi
je case.default.0x14008e72d
mov rcx, qword [rbx + 0xb70]
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x58]
jmp case.default.0x14008e72d
mov rdx, rdi
mov rcx, rbx
call fcn.1400942a0
jmp case.default.0x14008e72d
mov rcx, rbx
call fcn.140095330
jmp case.default.0x14008e72d
mov rdx, rdi
mov rcx, rbx
call fcn.1400956b0
jmp case.default.0x14008e72d
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140095900
jmp case.default.0x14008e72d
mov rcx, qword [rbx + 0xb90]
add rcx, 0x5a8
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
test eax, eax
jle case.default.0x14008e72d
mov rcx, qword [rbx + 0xb90]
mov edx, edi
add rcx, 0x5a8
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je case.default.0x14008e72d
mov rcx, qword [rbx + 0xb90]
mov edx, edi
add rcx, 0x5a8
mov rax, qword [rcx]
call qword [rax + gethostname]
jmp case.default.0x14008e72d
mov rdx, rdi
mov rcx, rbx
call fcn.140096520
jmp case.default.0x14008e72d
mov rcx, rbx
call fcn.140096430
jmp case.default.0x14008e72d
test rdi, rdi
je case.default.0x14008e72d
mov rcx, qword [rbx + 0xc38]
add rcx, 0x5a8
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
test eax, eax
jle 0x14008e6f3
mov rdx, qword [rdi + 0x4a8]
test rdx, rdx
je 0x14008e6f3
mov rcx, qword [rbx + 0xc38]
add rcx, 0x5a8
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rcx, rdi
call fcn.14012a2d4
jmp case.default.0x14008e72d
mov rdx, rdi
call fcn.14009ae40
jmp 0x14008e7f3
lea eax, [rdx - 0x5f6]
cmp eax, 8
ja case.default.0x14008e72d
lea rdx, [0x140000000]
mov eax, dword [rdx + rax*4 + 0x8e92c]
add rax, rdx
jmp rax
mov rdx, rdi
call fcn.14009b430
jmp case.default.0x14008e72d
mov rcx, qword [rcx + 0xcd8]
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x58]
mov rcx, qword [rbx + 0xcd8]
jmp 0x14008e4fa
mov rcx, qword [rcx + 0xe18]
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x58]
mov rcx, qword [rbx + 0xe18]
jmp 0x14008e4fa
mov rdx, rdi
call fcn.14009c490
jmp case.default.0x14008e72d
call fcn.14009c780
jmp case.default.0x14008e72d
mov rcx, qword [rcx + 0xe38]
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x58]
mov rcx, qword [rbx + 0xe38]
jmp 0x14008e4fa
mov rdx, rdi
call fcn.14009ce60
jmp case.default.0x14008e72d
mov r8, rsi
mov rdx, rdi
call fcn.14009d4b0
jmp case.default.0x14008e72d
mov rdx, rdi
call fcn.14009daa0
cmp ebp, 0x112
jne 0x14008e7d5
cmp rdi, 0xf032
jne 0x14008e7f3
xor eax, eax
jmp 0x14008e803
cmp ebp, 0x100
jne 0x14008e7f3
cmp rdi, 0x20
ja 0x14008e7f3
movabs rax, 0x108002000
bt rax, rdi
jb 0x14008e7d1
mov r9, rsi
mov r8, rdi
mov edx, ebp
mov rcx, rbx
call fcn.1400c99e0
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret