Function at 0x18003ee20
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x180121650]
xor rax, rsp
mov qword [rbp + 0x240], rax
mov r13d, r9d
mov r10, r8
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x80], rdx
mov r12, rcx
mov r15d, r9d
lea edi, [r9 + 0x5b]
lea rcx, [0x180000000]
xor r11d, r11d
mov rbx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x60]
mov qword [rbp - 0x50], rbx
mov qword [rsp + 0x68], r8
cmp r9d, edi
jae 0x18003f447
lea r14d, [r9 - 0x57]
mov r9, qword [rbp - 0x60]
mov qword [rbp - 0x78], r9
mov esi, dword [rbp - 0x58]
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x78], eax
cmp r14d, 0xde
ja case.default.0x18003eec9
movzx eax, byte [rcx + r14 + 0x3fa78]
mov ecx, dword [rcx + rax*4 + 0x3fa40]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r8d, 1
lea rdx, [0x180107c98]
lea rcx, [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp - 0xe], 0x61
lea rcx, [rbp - 0x10]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18003eef1
mov eax, dword [0x180107c9c]
mov dword [rcx], eax
movzx eax, word [0x180107ca0]
mov word [rcx + 4], ax
jmp 0x18003f30a
lea r9, [rbp - 0x58]
xor r8d, r8d
mov edx, 0xb5
mov rcx, qword [r12]
call fcn.1800536f0
mov qword [rbp - 0x78], rax
test rax, rax
je 0x18003f390
mov r9d, dword [0x180131b34]
lea ecx, [r9 + 1]
mov dword [0x180131b34], ecx
lea r8, str.u8FEu_8FFu
mov edx, 0x200
lea rcx, [rbp + 0x40]
call fcn.180087a40
mov esi, eax
mov dword [rsp + 0x70], eax
mov r8, qword [r12]
add r8, 0x340
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x11d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call fcn.180018b10
test rax, rax
je 0x18003f30a
nop dword [rax]
cmp esi, 0x1fe
jae 0x18003f30a
mov r9d, dword [0x180131b34]
lea eax, [r9 + 1]
mov dword [0x180131b34], eax
lea r8, str.Korea_Leboa
mov edx, 0x200
lea rcx, [rbp + 0x40]
call fcn.180087a40
mov esi, eax
mov dword [rsp + 0x70], eax
mov r8, qword [r12]
add r8, 0x340
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x11d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call fcn.180018b10
test rax, rax
jne 0x18003efa0
jmp 0x18003f30a
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18003f07a
mov byte [rsp + 0x50], 3
mov byte [rsp + 0x58], 2
mov dword [rsp + 0x60], r12d
mov dword [rsp + 0x70], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x34
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [0x18010646e]
lea r8, [rsp + 0x60]
lea rdx, [0x18010646e]
lea rcx, [rsp + 0x58]
call fcn.180096080
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r11d, r11d
mov r12d, r11d
jmp 0x18003f30d
mov dword [0x180131b34], 1
add qword [r12 + 0x1e8], 0x20
mov rax, qword [r12 + 0x1e8]
mov r8, qword [rsp + 0x68]
lea rcx, [0x180000000]
test byte [rax + 0x10], 0xc
je 0x18003f31d
add rax, 0x20
mov qword [r12 + 0x1e8], rax
jmp 0x18003f31d
mov rax, qword [r12 + 8]
mov ecx, dword [rax + 0x30]
mov dword [rbp - 0x68], ecx
jmp case.0x18003eec9.13
mov eax, dword [0x18012172c]
mov dword [rsp + 0x78], eax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18003f30a
xor r9d, r9d
xor r8d, r8d
mov edx, 0x111
xor ecx, ecx
call fcn.18005f2c0
xor ebx, ebx
mov dword [rsp + 0x60], ebx
lea r9, [rsp + 0x60]
lea r8, [0x18010646e]
lea edx, [rbx + 0x77]
lea rcx, [0x18010646e]
call fcn.1800b78f0
mov dword [rsp + 0x28], 0xd2
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800e5fa0
jmp 0x18003f30a
lea rax, [rbp + 0x40]
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], esi
jmp case.0x18003eec9.13
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rbx, rax
mov qword [rbp - 0x50], rax
test rax, rax
je 0x18003f3e4
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18003f1eb
mov byte [rsp + 0x58], 1
mov byte [rsp + 0x50], 2
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x34
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [0x18010646e]
lea r8, [rsp + 0x70]
lea rdx, [0x18010646e]
lea rcx, [rsp + 0x50]
call fcn.180096080
mov eax, dword [r12 + 0xc]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x20], 0x33
lea r9, [rsp + 0x60]
mov r8, rbx
mov rdx, qword [r12 + 0x18]
xor ecx, ecx
call fcn.18006c2d0
mov rbx, qword [r12]
test rbx, rbx
je 0x18003f30a
nop dword [rax]
mov r9d, StrCmpNICW
mov r8, qword [rbx]
mov rdx, qword [rbp - 0x50]
mov rcx, qword [rbx + 8]
call fcn.1800e4c20
mov rdi, qword [rbx + 0x10]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18003f29f
mov byte [rsp + 0x58], 3
mov byte [rsp + 0x50], 2
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x34
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [0x18010646e]
lea r8, [rsp + 0x70]
lea rdx, [0x18010646e]
lea rcx, [rsp + 0x50]
call fcn.180096080
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, rdi
test rdi, rdi
jne 0x18003f220
lea edi, [r13 + 0x5b]
jmp 0x18003f30a
mov word [rbp - 0x10], r11w
jmp case.0x18003eec9.13
mov eax, dword [rdx + 0x10]
mov dword [rbp - 0x70], eax
mov r9, r12
xor edx, edx
mov r8d, 0xec
lea rcx, [rbp - 0x70]
call fcn.1800dee70
mov r8, rax
mov qword [rsp + 0x68], rax
mov rdx, qword [rbp - 0x80]
xor r11d, r11d
lea rcx, [0x180000000]
jmp 0x18003f31d
mov r9, qword [r12 + 0x18]
xor edx, edx
lea r8d, [rdx + 0x6c]
mov rcx, qword [0x180121768]
call fcn.1800d3030
xor r11d, r11d
mov rdx, qword [rbp - 0x80]
lea rcx, [0x180000000]
mov r8, qword [rsp + 0x68]
add r15d, 7
add r14d, 7
cmp r15d, edi
jb 0x18003eea2
mov r15d, dword [rsp + 0x78]
mov r9, qword [rbp - 0x78]
mov r10, qword [rbp - 0x60]
lea esi, [r13 - 0xe]
cmp r13d, esi
jbe case.0x18003f385.1
lea edi, [r13 - 0x83]
mov r13d, 0x6f
mov r14, qword [rbp - 0x48]
nop word [rax + rax]
cmp edi, 0xa4
ja case.0x18003f385.14
movzx eax, byte [rcx + rdi + 0x3fb94]
mov ecx, dword [rcx + rax*4 + 0x3fb58]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
lea r9, str.QCString::setNum:_Invalid_format_char__c
mov edx, 1
mov r8d, edx
mov rcx, r12
call fcn.18004dee0
mov rbx, qword [rbp - 0x80]
xor eax, eax
mov dword [rbx], eax
mov dword [rbp - 0x68], 0xfffffff6
mov rax, qword [rbp - 0x68]
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.1800fd9d0
mov rbx, qword [rsp + 0x3a8]
add rsp, 0x350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r8d, 0xe
lea rdx, str._Z3maxDv16_fS_
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9, r12
xor r8d, r8d
mov edx, 0xc7
xor ecx, ecx
call fcn.1800d5c00
test al, al
jne case.0x18003f385.1
mov rbx, qword [rbp - 0x80]
nop
imul ecx, dword [rbx], 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r9, r12
xor r8d, r8d
mov edx, 0xc7
xor ecx, ecx
call fcn.1800d5c00
test al, al
je 0x18003f420
jmp case.0x18003f385.1
mov r9, qword [rbp - 0x60]
mov qword [rbp - 0x78], r9
mov r15d, dword [rbp - 0x70]
jmp 0x18003f33b
mov qword [rbp - 0x20], r11
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r11w
lea rax, [rbp - 0x10]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18003f474
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x30]
call fcn.1800c4e10
nop
mov rdx, qword [r12 + 8]
cmp rdx, qword [r12 + 0x10]
je 0x18003f4bb
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x20]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
xor eax, eax
mov word [rbp - 0x30], ax
add qword [r12 + 8], 0x20
jmp 0x18003f4cb
lea r8, [rbp - 0x30]
mov rcx, r12
call fcn.180006c40
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x18003f507
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18003f502
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f99b
call fcn.1800fd224
mov r8, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp case.0x18003f385.14
mov dword [rsp + 0x60], r11d
mov dword [rsp + 0x30], 0x70
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, qword [r12]
test byte [r14 + 0xb0], 0x10
je 0x18003f56f
mov dword [rsp + 0x78], r11d
mov dword [rsp + 0x70], 8
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9, r14
call fcn.18005c020
mov r8, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp case.0x18003f385.14
mov eax, dword [rbp - 0x58]
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x70], 4
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
xor r9d, r9d
call fcn.18005c020
mov r8, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp case.0x18003f385.14
test r8, r8
je 0x18003f98f
mov dword [rsp + 0x60], r11d
mov dword [rsp + 0x78], 0xffffffff
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x28], 0xa2
mov qword [rsp + 0x20], r11
mov r9, r10
mov r8, r12
mov rdx, qword [rdx + 8]
lea rcx, [rsp + 0x78]
call fcn.1800311e0
mov ebx, eax
mov dword [rsp + 0x20], 0x40
mov r9, r12
mov r8, qword [rsp + 0x68]
xor edx, edx
xor ecx, ecx
call fcn.180089ec0
mov dword [rbp - 0x68], ebx
mov r8, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp case.0x18003f385.14
mov qword [rbp - 0x20], r11
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r11w
mov r8d, 0xb
lea rdx, str.perfmon.exe
lea rcx, [rbp - 0x30]
call fcn.1800c4e10
nop
mov rdx, qword [r12 + 8]
cmp rdx, qword [r12 + 0x10]
je 0x18003f670
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x20]
movups xmmword [rdx + 0x10], xmm1
mov eax, 7
xor ebx, ebx
mov word [rbp - 0x30], bx
add qword [r12 + 8], 0x20
jmp 0x18003f682
lea r8, [rbp - 0x30]
mov rcx, r12
call fcn.180006c40
mov rax, qword [rbp - 0x18]
xor ebx, ebx
cmp rax, 8
jb 0x18003f6be
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003f6b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f99b
call fcn.1800fd224
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], bx
lea rax, [rbp + 8]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18003f6e0
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x30]
call fcn.1800c4e10
nop
mov rdx, qword [r12 + 8]
cmp rdx, qword [r12 + 0x10]
je 0x18003f725
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x20]
movups xmmword [rdx + 0x10], xmm1
mov eax, 7
mov word [rbp - 0x30], bx
add qword [r12 + 8], 0x20
jmp 0x18003f735
lea r8, [rbp - 0x30]
mov rcx, r12
call fcn.180006c40
mov rax, qword [rbp - 0x18]
cmp rax, 8
jb 0x18003f771
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003f76c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f99b
call fcn.1800fd224
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], bx
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18003f790
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x30]
call fcn.1800c4e10
nop
mov rdx, qword [r12 + 8]
cmp rdx, qword [r12 + 0x10]
je 0x18003f7d5
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x20]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x30], bx
add qword [r12 + 8], 0x20
jmp 0x18003f7e5
lea r8, [rbp - 0x30]
mov rcx, r12
call fcn.180006c40
mov rdx, qword [rbp - 0x18]
jmp 0x18003f4cb
mov r8d, 3
lea rdx, [0x180107d20]
lea rcx, [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x180107d28]
mov dword [rbp - 2], eax
movzx eax, word [0x180107d2c]
mov word [rbp + 2], ax
mov r8d, 3
lea rdx, [0x180107d30]
lea rcx, [rbp + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp case.0x18003f385.14
mov dword [rbp + 8], 0x720070
mov word [rbp + 0xc], r13w
jmp case.0x18003f385.14
mov rax, qword [r12]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], 0xa1
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], r11
lea r9, [rbp - 0x40]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800e8110
mov dword [rsp + 0x60], 1
xor eax, eax
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x28], r12
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x55
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.18001b980
cmp eax, 0xfffffff6
je 0x18003f3af
mov r14, qword [rbp - 0x48]
mov r8, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp case.0x18003f385.14
mov word [rbp + 0x1e], r11w
jmp case.0x18003f385.14
mov word [rbp + 0x20], r11w
lea rcx, [rbp + 0x20]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18003f8e2
mov eax, dword [0x180107db0]
mov dword [rcx], eax
jmp case.0x18003f385.14
movsd xmm0, qword [str.rocexp]
movsd qword [rbp + 0x22], xmm0
mov eax, dword [0x180107dc0]
mov dword [rbp + 0x2a], eax
movzx eax, word [0x180107dc4]
mov word [rbp + 0x2e], ax
mov r8d, 0xa
lea rdx, [rbp + 0x2e]
lea ecx, [r8 - 4]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultow]
movsd xmm0, qword [str.4.exe]
movsd qword [rbp + 0x30], xmm0
mov eax, dword [0x180107dd0]
mov dword [rbp + 0x38], eax
mov r8, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp case.0x18003f385.14
mov dword [rbp + 0xe], 0x650063
mov dword [rbp + 0x12], 0x700078
mov dword [rbp + 0x16], 0x65002e
mov dword [rbp + 0x1a], 0x650078
dec edi
lea eax, [rdi + 0x83]
cmp eax, esi
jbe case.0x18003f385.1
mov rdx, qword [rbp - 0x80]
mov r10, qword [rbp - 0x60]
xor r11d, r11d
lea rcx, [0x180000000]
jmp 0x18003f360
mov dword [rbp - 0x68], 0xffffffff
jmp case.0x18003f385.1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp - 0x68], r11d
jmp case.0x18003f385.1
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18003fa36
mov dword [rsp + 0x20], 0xc3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov r8d, dword [0x18012172c]
cmp r15d, r8d
je 0x18003fa17
mov edx, r15d
lea rcx, str.CRSModuleConnectorBase::GetModuleObject:_call_to_getInstance___returned_NULL
call fcn.1800fcfa0
xor r9d, r9d
lea r8, [0x18010646e]
lea rdx, [0x18010646e]
lea rcx, str.Mark_unknown_regions_as_defined
call fcn.1800fcfa0
mov dword [0x18012172c], r15d
xor eax, eax
mov dword [rbp - 0x70], eax
lea r9, [rbp - 0x70]
lea r8, [0x18010646e]
lea edx, [rax + 0x77]
lea rcx, [0x18010646e]
call fcn.1800b78f0
mov rax, qword [rbp - 0x50]
jmp 0x18003f3ba