Function at 0x18005d770
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov edi, dword [rsp + 0x80]
lea eax, [rcx + 0x2be]
mov dword [rsp + 0x30], eax
mov r10, r8
mov r12, rdx
mov r15d, ecx
cmp ecx, eax
jae 0x18005d9f4
mov r13d, dword [rsp + 0x80]
lea rdx, [0x180000000]
xor esi, esi
mov r14d, 0x7fffffff
cmp r15d, 0xe4
ja 0x18005d8d8
je 0x18005ded0
mov eax, r15d
sub eax, 0x48
je 0x18005d8ce
sub eax, 0x4e
je 0x18005d824
sub eax, 0x2d
je 0x18005d809
cmp eax, 7
jne 0x18005deb0
mov dword [0x18008501c], esi
mov dword [0x180085768], 1
jmp 0x18005deb0
lea rdx, str.return_QueryThread__server_error
mov rcx, r10
call fcn.1800250a0
lea rdx, [0x180000000]
jmp 0x18005deb0
mov ebp, esi
lea r14, [r10 + 0x44]
nop word [rax + rax]
mov ebx, 0xc6
cmp ebx, 0xc6
je 0x18005d87d
cmp ebx, 0x4410
jne 0x18005d89c
mov rax, qword [r10 + 0x650]
lea r9, [rsp + 0x80]
mov r8d, 0xd3
mov dword [rsp + 0x98], ebp
lea rdx, [rsp + 0x98]
mov ecx, dword [rax + 0x5c]
mov dword [rsp + 0x80], ecx
mov rcx, r10
call fcn.18005df80
jmp 0x18005d894
xor r9d, r9d
mov dword [rsp + 0x20], 0xbd
mov r8, r14
xor edx, edx
xor ecx, ecx
call fcn.1800290f0
mov r10, qword [rsp + 0x90]
add ebx, 0x434a
cmp ebx, 0x8694
jbe 0x18005d835
inc ebp
add r14, 0x100
cmp ebp, 6
jl 0x18005d830
mov r14d, 0x7fffffff
lea rdx, [0x180000000]
jmp 0x18005deb0
mov byte [r10 + 4], 3
jmp 0x18005deb0
mov eax, r15d
sub eax, 0x118
je 0x18005dea3
sub eax, 0x4e
je 0x18005d920
sub eax, 0x4e
je 0x18005de53
cmp eax, 0x4e
jne 0x18005deb0
mov eax, 0x10d
cmp eax, 0x10d
je 0x18005ded0
add eax, 0x7f25
cmp eax, 0x7f25
jbe 0x18005d902
jmp 0x18005deb0
mov ebp, 0x35
nop word [rax + rax]
mov eax, ebp
mov ebx, edi
sub eax, 0x35
je 0x18005de5b
sub eax, 1
je 0x18005de4d
cmp eax, 1
jne 0x18005de93
lea eax, [r13 - 0x44]
cmp eax, 0x30
ja case.0x18005d970.79
cdqe
movzx eax, byte [rdx + rax + 0x5df48]
mov ecx, dword [rdx + rax*4 + 0x5df18]
add rcx, rdx
jmp rcx
mov ecx, 0x6e
mov eax, ecx
sub eax, 0x6e
je 0x18005d989
cmp eax, 0x78
je 0x18005de46
jmp 0x18005d993
mov dword [0x180089c34], 1
add ecx, 0x78
cmp ecx, 0x15e
jb 0x18005d977
mov ebx, 0x7a
mov eax, ebx
sub eax, 0x7a
je 0x18005da0e
cmp eax, 0x11
jne 0x18005da1d
mov rcx, qword [0x1800929c8]
lea rdx, [0x1800777a0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x180092600], rax
test rax, rax
jne 0x18005de46
mov ebx, 0x5d
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x5d
je 0x18005db62
cmp eax, 1
jne 0x18005db88
mov eax, edi
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [0x180092600], rax
add ebx, 0x11
cmp ebx, 0x9c
jb 0x18005d9a3
mov ebp, 0x123
mov eax, ebp
sub eax, 0x122
je 0x18005de46
cmp eax, 1
jne 0x18005dabb
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [0x1800929c8]
lea rdx, [0x1800778d0]
mov qword [0x180092608], rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x180092608], rax
test rax, rax
jne 0x18005dabb
mov ebx, 0xd4
nop word [rax + rax]
mov eax, ebx
sub eax, 0xd3
je 0x18005de03
cmp eax, 1
jne 0x18005dab1
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800929c8]
lea rdx, str.PaintAttribute
mov rcx, rax
call fcn.18006f4c0
dec ebx
cmp ebx, 0xd2
ja 0x18005da80
dec ebp
cmp ebp, 0x121
ja 0x18005da31
mov ebx, 0x15
nop
mov eax, ebx
sub eax, 0x14
je 0x18005de46
cmp eax, 1
jne 0x18005daf3
mov rcx, qword [0x1800929c8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [reloc.SHELL32.dll_SHChangeNotifyRegister], eax
dec ebx
cmp ebx, 0x13
ja 0x18005dad0
mov ebp, 0x8a
nop
mov eax, ebp
sub eax, 0x89
je 0x18005de46
cmp eax, 1
jne 0x18005dbca
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [0x1800929c8]
lea rdx, [0x180078698]
mov qword [0x180092610], rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x180092610], rax
test rax, rax
jne 0x18005dbca
mov ebx, 6
nop
mov eax, ebx
sub eax, 6
je 0x18005db9d
cmp eax, 1
je 0x18005d9f4
jmp 0x18005dbc3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800929c8]
lea rdx, str.IV_NEON_DP_ACC
mov rcx, rax
call fcn.18006f4c0
mov edi, 1
inc ebx
cmp ebx, 0x5f
jb 0x18005d9e0
mov ebp, 0x37
jmp 0x18005de84
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800929c8]
lea rdx, str.DecodeDebugGet
mov rcx, rax
call fcn.18006f4c0
mov edi, 1
inc ebx
cmp ebx, 8
jb 0x18005db50
dec ebp
cmp ebp, 0x88
ja 0x18005db00
mov ebp, 0x31
nop dword [rax]
cmp ebp, 0x31
je 0x18005dc51
cmp ebp, 0x777
je 0x18005dbfb
cmp ebp, 0xebd
je 0x18005de46
jmp 0x18005dc64
cmp dword [0x180089c24], esi
jl 0x18005dc0c
cmp dword [0x180092620], 5
jle 0x18005dc64
mov ebx, 0xe0
mov eax, ebx
sub eax, 0xe0
je 0x18005dc25
cmp eax, 0x4b
je 0x18005d9f4
jmp 0x18005dc44
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.GNUTLS_E_RECORD_LIMIT_REACHED
call fcn.18006f4c0
mov edi, 1
add ebx, 0x4b
cmp ebx, 0x176
jb 0x18005dc11
jmp 0x18005dc64
mov rcx, qword [0x1800929c8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x180092620], eax
add ebp, 0x746
cmp ebp, 0x15d2
jbe 0x18005dbe0
mov ebp, 0x16
nop dword [rax + rax]
mov eax, ebp
sub eax, 0x15
je 0x18005de46
cmp eax, 1
jne 0x18005dcee
mov rcx, qword [0x1800929c8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1800925a4], eax
test eax, eax
jns 0x18005dcee
mov ebx, 0x9d
nop dword [rax]
mov eax, ebx
sub eax, 0x9d
je 0x18005dcc4
cmp eax, 0x41
je 0x18005d9f4
jmp 0x18005dce3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.if__x___thread_cols__y___rows_
call fcn.18006f4c0
mov edi, 1
add ebx, 0x41
cmp ebx, 0x11f
jb 0x18005dcb0
dec ebp
cmp ebp, 0x14
ja 0x18005dc80
mov ebx, 0x63
nop word [rax + rax]
mov eax, ebx
sub eax, 0x63
je 0x18005dd12
cmp eax, 1
je 0x18005de46
jmp 0x18005dd2b
mov rcx, qword [0x1800929c8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
test eax, eax
cmovs eax, r14d
mov dword [0x1800925a8], eax
inc ebx
cmp ebx, 0x65
jb 0x18005dd00
mov ebx, 0xe0
mov eax, ebx
sub eax, 0xe0
je 0x18005dd77
sub eax, 0x76
je 0x18005dd50
cmp eax, 0x76
je 0x18005de46
jmp 0x18005dd8a
cmp dword [0x180092624], 3
jbe 0x18005dd8a
mov eax, 0x58
nop
cmp eax, 0x58
je 0x18005ded7
add eax, 0x4258
cmp eax, 0x4258
jbe 0x18005dd60
jmp 0x18005dd8a
mov rcx, qword [0x1800929c8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x180092624], eax
add ebx, 0x76
cmp ebx, 0x242
jb 0x18005dd37
mov ebx, 0x114
nop word [rax + rax]
mov eax, ebx
sub eax, 0x114
je 0x18005ddb4
cmp eax, 1
je 0x18005de46
jmp 0x18005ddc7
mov rcx, qword [0x1800929c8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x180092618], eax
inc ebx
cmp ebx, 0x116
jb 0x18005dda0
mov rcx, qword [0x1800929c8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x18009261c], eax
mov ebp, 0x37
jmp 0x18005de84
mov ebp, 0xb3
cmp ebp, 0xb3
je 0x18005de0d
cmp ebp, 0x37f
jne 0x18005de36
mov eax, 1
jmp 0x18005d9f6
mov eax, dword [0x180085768]
mov ecx, 2
dec eax
movsxd rdi, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [r12 + rdi*8]
lea rdx, str.V784_NeighbourAbove
mov rcx, rax
call fcn.18006f4c0
add ebp, 0x2cc
mov edi, ebx
cmp ebp, 0x598
jbe 0x18005ddf3
mov ebp, 0x37
jmp 0x18005de84
cmp r13d, 0xffffffff
jne 0x18005de93
mov r15d, 0x1b4
jmp 0x18005deb0
mov eax, dword [r10]
lea r9, [rsp + 0x80]
mov r8, r12
mov dword [rsp + 0x80], eax
lea rdx, str.Search_Dropdown_Edit_Skin
mov ecx, 0x107
call fcn.180046aa0
mov r13d, eax
mov r10, qword [rsp + 0x90]
lea rdx, [0x180000000]
inc ebp
cmp ebp, 0x39
jb 0x18005d930
jmp 0x18005d920
mov dword [0x1800925a4], esi
mov dword [0x1800925a8], r14d
add r15d, 0x4e
cmp r15d, dword [rsp + 0x30]
jae 0x18005d9f4
mov r10, qword [rsp + 0x90]
jmp 0x18005d7c2
mov eax, esi
jmp 0x18005d9f6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov dword [rsp + 0x28], 3
lea rdx, str.policy::AsyncPolicyProvider::ReloadAfterRefreshSync
mov rcx, rax
mov dword [rsp + 0x20], 1
mov r9d, 2
xor r8d, r8d
call fcn.18006f4c0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3