Function at 0x180015b90
Capabilities:
Terminate process
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
mov rax, qword [0x18005a098]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r14, qword [rsp + 0x38]
lea r15d, [rcx + 0x770]
xor r10d, r10d
mov qword [rsp + 0x48], rdx
mov esi, ecx
mov dword [rbp - 0x79], ecx
mov qword [rbp - 0x71], r9
mov r13, r8
mov r8, rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rdx
mov r12d, ecx
lea r11d, [r10 + 0x6c]
lea rcx, [0x180000000]
cmp esi, r15d
jae 0x180015f85
mov r12, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x38]
nop dword [rax]
cmp esi, 0x115
ja 0x180015dfd
je 0x180015d6f
lea eax, [rsi - 0x27]
cmp eax, 0xc2
ja case.default.0x180015e27
movzx eax, byte [rcx + rax + 0x16224]
mov ecx, dword [rcx + rax*4 + 0x16204]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
movsxd rax, dword [r13]
imul rdx, rax, 0x204
add rdx, qword [r8 + 8]
mov qword [rsp + 0x40], rdx
jmp case.0x180015e27.287
mov r8d, 1
lea rdx, [0x18004b9b0]
lea rcx, [rbp - 0x31]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
mov dword [rbp - 0x23], 0x64
lea rdx, [0x18004ae88]
lea rcx, [rbp - 0x31]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor r10d, r10d
mov r9, qword [rbp - 0x71]
mov r11d, 0x6c
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp case.0x180015e27.287
mov eax, dword [0x18004b9c0]
movsd xmm0, qword [0x18004b9b8]
mov dword [rbp - 0x29], eax
movzx eax, word [0x18004b9c4]
mov word [rbp - 0x25], ax
movsd qword [rbp - 0x31], xmm0
jmp case.0x180015e27.287
lea rax, [rbp - 0x61]
mov qword [rsp + 0x38], 1
mov r9, r14
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 1
call fcn.18002ccc0
jmp 0x180015c99
mov dword [rbp - 0x59], 0x610070
mov dword [rbp - 0x55], 0x200073
jmp case.0x180015e27.287
mov r8, qword [r8]
mov r9d, 0xaf
xor edx, edx
xor ecx, ecx
call fcn.180005e90
mov rax, qword [rsp + 0x48]
xor edx, edx
mov r8, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
shl r8, 3
call sub.VCRUNTIME140.dll_memset
jmp 0x180015c99
xor r9d, r9d
mov qword [rsp + 0x20], r10
xor edx, edx
xor ecx, ecx
mov r8d, 0xf6
call fcn.18000e210
xor r10d, r10d
mov r14, rax
mov qword [rbp - 0x61], r10
jmp 0x180015c9c
lea rax, [rbp - 0x61]
mov qword [rsp + 0x38], 3
mov r9, r14
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 3
call fcn.18002ccc0
lea rax, [rbp - 0x61]
mov qword [rsp + 0x38], 2
mov r9, r14
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 2
call fcn.18002ccc0
mov rax, qword [rbp - 0x61]
test rax, rax
je 0x180015dd7
cmp qword [rax + 8], 2
je 0x180015c99
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Minimum_value_for_RGB_components
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea eax, [rsi - 0x119]
cmp eax, 0xee
ja case.default.0x180015e27
movzx eax, byte [rcx + rax + 0x16304]
mov ecx, dword [rcx + rax*4 + 0x162e8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r8, qword [rbp - 0x61]
mov edx, 0xb9
mov eax, edx
sub eax, 0xb9
je 0x180015e97
sub eax, 0x23
je 0x180015e90
sub eax, 0x5d
je 0x180015e51
sub eax, 0x23
je 0x180015e65
cmp eax, 0x80
jne 0x180015ebb
mov r8, rbx
xor edx, edx
mov ecx, 0xb2
call fcn.18000c280
jmp 0x180015c99
mov rcx, qword [r8]
test rcx, rcx
je 0x180015e8b
nop dword [rax]
mov rax, qword [r14]
test cl, 1
je 0x180015e7c
imul rdi, rax
imul rax, rax
mov qword [r14], rax
shr qword [r8], 1
mov rcx, qword [r8]
jne 0x180015e70
mov rbx, rdi
jmp 0x180015ebb
mov edi, 1
jmp 0x180015ebb
test r8, r8
je 0x180015eb8
nop dword [rax]
cmp qword [r8 + 8], 1
je 0x180015ecc
jbe 0x180015eaf
mov r8, qword [r8 + 0x10]
jmp 0x180015eb3
mov r8, qword [r8 + 0x18]
test r8, r8
jne 0x180015ea0
mov rbx, r10
sub edx, 0xffffff80
cmp edx, 0x339
jb 0x180015e32
jmp 0x180015e51
xor edx, edx
mov ecx, 0xb2
mov rbx, r8
call fcn.18000c280
jmp 0x180015c99
mov rdx, qword [0x18005a210]
cmp rdx, qword [0x18005a218]
je 0x180015f05
mov rax, qword [r8]
mov qword [rdx], rax
add qword [0x18005a210], 8
mov rdx, qword [rsp + 0x40]
jmp case.0x180015e27.287
lea rcx, [0x18005a208]
call fcn.1800011c0
jmp 0x180015c99
mov eax, dword [r9]
test eax, eax
je 0x180015f31
cmp dword [rdx + 0x200], 0
jne 0x180015f2d
inc dword [r8 + 0x10]
mov eax, dword [r9]
test eax, eax
jne case.0x180015e27.287
cmp dword [rdx + 0x200], 0
lea rcx, [0x180000000]
je case.default.0x180015e27
dec dword [r8 + 0x10]
jmp case.default.0x180015e27
call qword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetThreadLocale]
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_TerminateThread]
jmp 0x180015c99
mov r12, r10
jmp case.0x180015e27.287
mov dword [rbp - 0x1f], r11d
lea rcx, [0x180000000]
add esi, 0x77
cmp esi, r15d
jb 0x180015c10
mov r12d, dword [rbp - 0x79]
lea esi, [r12 + 0xe0]
cmp r12d, esi
jae 0x1800160d2
mov edi, dword [rbp - 0x79]
mov r13d, 0x6f
mov r15, qword [rsp + 0x48]
mov r11d, 0x2f
lea eax, [r12 - 0x27]
lea ebx, [r11 - 0xf]
cmp eax, 0xce
ja case.0x180015fd7.55
movzx eax, byte [rcx + rax + 0x16438]
mov ecx, dword [rcx + rax*4 + 0x163f4]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r9d, 0xffffffff
mov dword [rsp + 0x28], 0xffffffff
lea rax, [rbp - 0x59]
lea r8, [rbp - 0x19]
mov qword [rsp + 0x20], rax
lea edx, [r9 + 2]
lea ecx, [rdx + 0x7e]
call qword [sym.imp.KERNEL32.dll_CompareStringW]
mov ebx, 0x18
mov eax, ebx
sub eax, 0x17
je 0x18001603f
cmp eax, 1
jne 0x180016055
mov rdx, qword [0x18005a178]
xor r9d, r9d
xor r8d, r8d
mov ecx, r13d
call fcn.180015b90
mov r8, qword [0x18005a178]
mov r9d, 0x16
xor edx, edx
xor ecx, ecx
call fcn.180013640
jmp 0x180016055
mov rcx, qword [r15]
mov edx, edi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne case.0x180015fd7.54
dec ebx
cmp ebx, 0x16
ja 0x180016006
jmp 0x180016001
mov dword [rbp - 0xd], 0x640065
jmp case.0x180015fd7.55
mov dword [rbp - 9], 0x65004b
mov dword [rbp - 5], 0x730079
mov word [rbp - 1], r11w
jmp case.0x180015fd7.55
mov r8d, 0x16
lea rdx, [rbp - 0x31]
lea ecx, [r8 + 0x2d]
call fcn.18003df30
xor edx, edx
mov rcx, r15
mov rbx, rax
lea r8d, [rdx + 0x5f]
call fcn.180021b90
test al, al
jne 0x18001611c
mov edx, 0xa3
nop
mov ecx, edx
sub ecx, 0xa3
je 0x1800160f9
cmp ecx, 1
jne 0x180016112
lea r8, [rbp - 0x69]
lea rdx, [rbp - 0x79]
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FileTimeToDosDateTime]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1800436f0
mov rbx, qword [rsp + 0x130]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, 0x3039
mov word [rbp - 0x79], ax
mov eax, 0xd431
mov word [rbp - 0x69], ax
xor eax, eax
mov qword [rsp + 0x38], rax
inc edx
cmp edx, 0xa5
jb 0x1800160b0
mov rcx, qword [r15]
mov edx, 2
call rbx
jmp case.0x180015fd7.55
mov dword [rbp - 0x3f], 0x6e0020
mov word [rbp - 0x3b], r13w
jmp case.0x180015fd7.55
mov dword [rbp + 9], 0x730069
mov dword [rbp + 0xd], 0x74
jmp case.0x180015fd7.55
xor eax, eax
mov dword [rbp - 0x39], 0x6d006d
mov word [rbp - 0x35], ax
jmp case.0x180015fd7.55
lea r8, [rsp + 0x30]
mov byte [rsp + 0x30], 1
mov rdx, r14
mov ecx, 0xec
call fcn.180030880
mov r14, rax
jmp case.0x180015fd7.55
mov dword [rbp - 0x51], 0x650064
mov word [rbp - 0x4d], bx
mov dword [rbp - 0x4b], 0x6f006d
jmp case.0x180015fd7.55
mov dword [rbp + 1], 0x65006b
mov dword [rbp + 5], 0x6c0079
jmp case.0x180015fd7.55
mov dword [rbp - 0x43], 0x65006c
jmp case.0x180015fd7.55
mov r12d, 0xf5
jmp case.0x180015fd7.55
mov eax, dword [r9]
mov dword [rdx + 0x200], eax
jmp case.0x180015fd7.55
mov dword [rbp - 0x47], 0x750064
jmp case.0x180015fd7.55
mov dword [rbp - 0x19], 0x690075
mov dword [rbp - 0x15], 0x6f0048
mov dword [rbp - 0x11], 0x6b006f
jmp case.0x180015fd7.55
mov edi, 0x1388
add r12d, 0xe
cmp r12d, esi
jae 0x1800160d2
mov rdx, qword [rsp + 0x40]
lea rcx, [0x180000000]
mov r9, qword [rbp - 0x71]
jmp 0x180015fa4