Function at 0x10000cad0
Capabilities:
Terminate process

Disassembly:
test byte [rsp + 0x7c], 1
movzx eax, word [rsp + 0x80]
mov r9d, 0xa
cmovne r9d, eax
mov r8, rcx
xor edx, edx
lea rcx, [0x100000000]
call fcn.10000dc4c
mov dword [0x1000900fc], eax
cmp dword [0x1000900f0], ebx
jne 0x100023c79
mov ecx, eax
call qword [sym.imp.msvcrt.dll_exit]
nop
jmp 0x100023c79
sub rsp, 0x28
call fcn.10000c16c
add rsp, 0x28
jmp 0x10000cae8
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r12
push r13
sub rsp, 0xb0
xor ebx, ebx
mov dword [rsp + 0x20], ebx
lea rcx, [rax - 0x78]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
nop
mov rax, qword gs:[0x30]
mov rdi, qword [rax + 8]
mov r12d, ebx
xor eax, eax
lock cmpxchg qword [0x1000900e0], rdi
jne 0x100023c03
mov eax, dword [0x100090118]
cmp eax, 1
je 0x100023c23
mov eax, dword [0x100090118]
cmp eax, ebx
jne 0x100023c3a
mov dword [0x100090118], 1
lea r13, [0x10006ac98]
lea rdi, [0x10006ac80]
mov qword [rsp + 0x30], rdi
mov eax, ebx
mov dword [rsp + 0x24], ebx
cmp rdi, r13
jae 0x10000cb94
cmp eax, ebx
jne 0x10000cb94
mov rcx, qword [rdi]
cmp rcx, rbx
je 0x10000cb89
call rcx
mov dword [rsp + 0x24], eax
add rdi, 8
mov qword [rsp + 0x30], rdi
jmp 0x10000cb72
cmp eax, ebx
jne 0x100023c30
mov eax, dword [0x100090118]
cmp eax, 1
jne 0x10000cbc4
lea rdx, [0x10006ac78]
lea rcx, [0x10006ab98]
call sub.msvcrt.dll__initterm
mov dword [0x100090118], 2
cmp r12d, ebx
jne 0x10000cbd3
mov rax, rbx
xchg qword [0x1000900e0], rax
cmp qword [0x100092b00], rbx
jne 0x100023c49
mov rcx, qword [sym.imp.msvcrt.dll__wcmdln]
cmp qword [rcx], rbx
je 0x100023c72
mov rcx, qword [rcx]
mov qword [rsp + 0x28], rcx
mov edx, dword [rsp + 0x20]
cmp word [rcx], 0x20
jbe 0x10000cc17
cmp word [rcx], 0x22
je 0x100023c8f
add rcx, 2
mov qword [rsp + 0x28], rcx
jmp 0x10000cbfc
cmp word [rcx], bx
je 0x10000cc20
cmp edx, ebx
jne 0x10000cc02
cmp word [rcx], bx
je 0x100001f77
cmp word [rcx], 0x20
ja 0x100001f77
add rsp, 0x20
pop rdi
jmp 0x1000140b2
mov dword [rbp - 0x20], 0x48c48b48
jmp 0x100013b82
mov dword [rbp - 0x1c], 0x4c085889
jmp 0x100013ba9
mov dword [rbp - 0x18], 0x48184089
jmp 0x100013be8
mov dword [rbp - 0x14], 0x55105089
jmp 0x100013c1c
mov dword [rbp - 0x10], 0x83485756
jmp 0x100013c5b
mov word [rbp - 0xc], 0x30ec
jmp 0x100013cc2
call fcn.100013df0
jmp 0x100013d3d
xor ebx, ebx
jmp 0x1000140f4
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x50
jmp 0x100013b49
mov rdi, rax
xor ecx, ecx
add rcx, rdi
lea rdx, [rbp - 0x20]
mov r8d, 0x16
call fcn.100022c64
test eax, eax
je 0x100014123
inc ebx
movsxd rcx, ebx
cmp rcx, 0xee000
jb 0x1000140f9
mov rax, qword [rbp + 0x10]
jmp 0x100014129
movsxd rax, ebx
add rax, rdi
mov ecx, 0x25bc2
jmp 0x10001422b
lea rbx, [0x1000140b2]
add rbx, rcx
mov r9d, 0x40
lea rcx, [rbp + 0x10]
mov r8d, 0x3e8
mov qword [rsp + 0x20], rcx
mov rdx, rbx
jmp 0x1000142fb
or rcx, 0xffffffffffffffff
call rax
jmp 0x100014346
mov rax, rbx
mov ecx, 0x33c
add byte [rax], 0x19
jmp 0x1000143a7
inc rax
sub rcx, 1
jne 0x10001434e
call rbx
jmp 0x100014418
mov rbx, qword [rsp + 0x68]
xor eax, eax
mov rdi, qword [rsp + 0x70]
add rsp, 0x50
pop rbp
ret
cmp rax, rdi
jne 0x100023c13
mov r12d, 1
jmp 0x10000cb32
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10000cb21
lea ecx, [rax + 0x1e]
call sub.msvcrt.dll__amsg_exit
jmp 0x10000cb9c
mov eax, 0xff
jmp 0x100023cce
mov dword [0x10009435c], 1
jmp 0x10000cb9c
lea rcx, [0x100092b00]
call fcn.1000560bc
cmp eax, ebx
je 0x10000cbe0
xor r8d, r8d
lea edx, [r8 + 2]
xor ecx, ecx
call qword [0x100092b00]
nop
jmp 0x10000cbe0
mov eax, 0xff
jmp 0x100023cce
cmp dword [0x10009435c], ebx
jne 0x100023c8d
call qword [sym.imp.msvcrt.dll__cexit]
mov eax, dword [0x1000900fc]
jmp 0x100023cce
mov eax, ebx
cmp edx, ebx
sete al
mov edx, eax
mov dword [rsp + 0x20], eax
jmp 0x10000cc0c
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov r12, qword [r11 + 0x20]
mov rsp, r11
pop r13
ret