Function at 0x140008820
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp - 0x69], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x140018010]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor r14d, r14d
lea rax, [rbp - 0x49]
mov qword [rbp - 0x61], rax
lea rdx, [0x14001e8c8]
lea rcx, [rbp - 0x49]
call fcn.1400093ec
mov rdi, rax
lea rax, [rbp - 0x29]
mov qword [rbp - 0x59], rax
lea rdx, str.deniska132.myjino.ru_relesehack_cheak_active_Index.php
lea rcx, [rbp - 0x29]
call fcn.1400047d0
mov rbx, rax
lea rdx, str.MESSAGELVLUSERKEY
lea rcx, [rbp - 9]
call fcn.1400047d0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x17]
call fcn.140007fa0
nop
lea rcx, [rbp + 0x17]
mov rbx, qword [rbp + 0x17]
mov rsi, qword [rbp + 0x2f]
cmp rsi, 0x10
cmovae rcx, rbx
mov rdi, qword [rbp + 0x27]
mov r8, rdi
lea r15d, [r14 + 7]
cmp rdi, r15
cmova r8, r15
lea rdx, str.esp_aim
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140008934
cmp rdi, r15
jne 0x140008934
test eax, eax
jne 0x140008934
lea r8, str.EC6E03EA_BDFA_4620_BD97_9C95249D5555
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov r14, rax
lea rdx, [0x1400121a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009d20
lea rdx, [0x140009f18]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rsi, qword [rbp + 0x2f]
mov rdi, qword [rbp + 0x27]
mov rbx, qword [rbp + 0x17]
lea rcx, [rbp + 0x17]
cmp rsi, 0x10
cmovae rcx, rbx
mov r8, rdi
mov r15d, 6
cmp rdi, r15
cmova r8, r15
lea rdx, str.esp_as
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400089ac
cmp rdi, r15
jne 0x1400089ac
test eax, eax
jne 0x1400089ac
lea r8, str.EC6E03EA_BDFA_4620_BD97_9C95249D4444
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov r14, rax
lea rdx, [0x140012220]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009d20
lea rdx, [0x140009f18]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rsi, qword [rbp + 0x2f]
mov rdi, qword [rbp + 0x27]
mov rbx, qword [rbp + 0x17]
lea rcx, [rbp + 0x17]
cmp rsi, 0x10
cmovae rcx, rbx
mov r8, rdi
mov r15d, 8
cmp rdi, r15
cmova r8, r15
lea rdx, str.radar_as
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140008a20
cmp rdi, r15
jne 0x140008a20
test eax, eax
jne 0x140008a20
lea r8, str.EC6E03EA_BDFA_4620_BD97_9C95249D3333
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov r14, rax
lea rdx, [0x1400122b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009d20
lea rdx, [0x140009f18]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rsi, qword [rbp + 0x2f]
mov rbx, qword [rbp + 0x17]
cmp r14, 0xffffffffffffffff
jne 0x140008a2f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
cmp rsi, 0x10
jb 0x140008a69
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140008a61
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008a61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14000ee94
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14000ee70
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret