Function at 0x18006c2d0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x180121650]
xor rax, rsp
mov qword [rbp + 8], rax
mov rdi, rcx
mov qword [rsp + 0x70], rcx
mov ecx, dword [rbp + 0x70]
mov r13, r8
imul eax, ecx, 0xac6
mov rsi, rdx
mov qword [rsp + 0x60], r9
mov r12d, ecx
mov qword [rsp + 0x78], rdx
mov dword [rsp + 0x40], eax
mov ebx, dword [rsp + 0x40]
cmp ecx, eax
ja 0x18006cb8a
mov r15, qword [rsp + 0x70]
mov r14d, dword [rsp + 0x40]
lea r8, str._000
lea rdx, [0x180132ba0]
cmp r12d, 0x9924
ja 0x18006c852
je 0x18006c6f5
cmp r12d, 0xca
ja 0x18006c676
je 0x18006c56f
cmp r12d, 0x33
je 0x18006c4c8
cmp r12d, 0x39
je 0x18006c4bc
cmp r12d, 0xc6
jne 0x18006ca0d
mov qword [rbp - 0x80], 0
xor r8d, r8d
mov qword [rbp - 0x78], 0
movaps xmm0, xmmword [rbp - 0x80]
movaps xmmword [0x180132ba0], xmm0
mov qword [rbp - 0x70], 0
mov qword [rbp - 0x68], 0
movaps xmm1, xmmword [rbp - 0x70]
movaps xmmword [0x180132bb0], xmm1
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
movaps xmm0, xmmword [rbp - 0x60]
movaps xmmword [0x180132bc0], xmm0
mov qword [rbp - 0x50], 0
mov qword [rbp - 0x48], 0
movaps xmm1, xmmword [rbp - 0x50]
movaps xmmword [0x180132bd0], xmm1
mov dword [rbp - 0x40], 0x2010000
mov dword [rbp - 0x3c], 0x2010003
mov dword [rbp - 0x38], 0x2020000
mov dword [rbp - 0x34], 0x50504
movaps xmm0, xmmword [rbp - 0x40]
movaps xmmword [0x180132be0], xmm0
mov dword [rbp - 0x30], 0x2060201
mov dword [rbp - 0x2c], 0x10003
mov qword [rbp - 0x28], 0x20002
movaps xmm1, xmmword [rbp - 0x30]
movaps xmmword [0x180132bf0], xmm1
mov dword [rbp - 0x20], 0x2010000
mov dword [rbp - 0x1c], 0x2010003
mov dword [rbp - 0x18], 0x2020000
mov dword [rbp - 0x14], 0x50504
movaps xmm0, xmmword [rbp - 0x20]
mov dword [rbp - 0x10], 0x2060201
mov dword [rbp - 0xc], 0x10003
mov qword [rbp - 8], 0x20002
movaps xmm1, xmmword [rbp - 0x10]
movaps xmmword [0x180132c00], xmm0
movaps xmmword [0x180132c10], xmm1
cmp dword [rsi], 1
jl 0x18006ca2b
mov rax, qword [r9]
lea ecx, [r12 - 0x1a]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor edx, edx
call fcn.180093140
mov r9, qword [rsp + 0x60]
mov r15, rax
mov ecx, dword [rbp + 0x70]
jmp 0x18006ca0d
mov qword [0x180131a00], r13
jmp 0x18006ca0d
mov eax, dword [section..data]
cmp dword [r9], eax
jb 0x18006ca0d
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rsi
lea rdx, str.if___IsSmi_lastMatchInfo_1___
mov rcx, rax
call fcn.1800fcc80
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18006cb2e
mov ebx, 0xb5
lea rdi, str.ARCHIVE_OUTPUT_DIRECTORY_
nop word [rax + rax]
cmp ebx, 0xb5
je 0x18006ca58
cmp ebx, 0x5861
jne 0x18006cab1
lea rsi, [0x18010646e]
mov dword [rsp + 0x40], 0
mov qword [rsp + 0x28], rsi
lea r9, [rsp + 0x40]
mov rdx, rsi
mov dword [rsp + 0x20], 0x59
lea r8, str.23QImageTextureGlyphCache
xor ecx, ecx
call fcn.18002be30
jmp 0x18006cab1
cmp qword [0x180121760], 0
jne 0x18006c5c7
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
lea r9, [rsp + 0x68]
mov dword [rsp + 0x48], 0
mov r8, rax
mov qword [0x180121760], rax
lea rdx, str.hashes
mov dword [rsp + 0x68], 0x33
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x20], 0xca
call fcn.18006c2d0
mov r9, qword [rsp + 0x60]
mov ecx, dword [rbp + 0x70]
mov eax, dword [section..data]
cmp dword [rdi], eax
jb 0x18006ca0d
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rsi
lea rdx, str.DEVTOOLS_SHADEREDITOR_OPENED_BOOLEAN
mov rcx, rax
call fcn.1800fcc80
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18006cb2e
mov ebx, 0x18
lea rdi, str.Missing_required_property__s.
nop dword [rax + rax]
cmp ebx, 0x18
je 0x18006cb08
cmp ebx, 0x69
jne 0x18006cb1f
cmp dword [0x18012172c], 0
je 0x18006cacd
lea rcx, str.Attempt_to_use_DirectSound_8_functionality_on_an_older_DirectSound_object
call fcn.1800fcfa0
lea rsi, [0x18010646e]
xor r9d, r9d
mov r8, rsi
lea rcx, str.SafeBrowsingService::Initialize
mov rdx, rsi
call fcn.1800fcfa0
mov dword [0x18012172c], 0
jmp 0x18006cad4
cmp r12d, 0x2772
je 0x18006c6bf
cmp r12d, 0x4eb1
je 0x18006c69a
cmp r12d, 0x75f0
je 0x18006ca01
jmp 0x18006ca0d
mov rdx, qword [0x180121768]
mov r9, rsi
mov r8d, 0x20
mov rcx, r13
call fcn.1800cff60
mov r9, qword [rsp + 0x60]
mov ecx, dword [rbp + 0x70]
jmp 0x18006ca0d
xor r9d, r9d
mov r8, rsi
mov edx, 0x106
xor ecx, ecx
call fcn.180049420
mov rdi, rax
test rax, rax
jne 0x18006cb35
mov r9, qword [rsp + 0x60]
mov ecx, dword [rbp + 0x70]
mov eax, dword [r9]
mov dword [r13 + 0xc], eax
mov qword [r13 + 0x18], rsi
jmp 0x18006ca0d
xor ebx, ebx
cmp byte [r15], bl
je 0x18006c72c
nop dword [rax]
movzx eax, byte [rbx + r15]
cmp al, 0xc0
jae 0x18006c71e
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalpha]
test eax, eax
jne 0x18006c71e
inc rbx
cmp byte [rbx + r15], al
jne 0x18006c700
lea rdx, [0x180132ba0]
lea r8, str._000
cmp byte [rbx + r15], 0
je 0x18006c821
mov esi, 0x2f
nop dword [rax]
cmp esi, 0x2f
je 0x18006c79e
cmp esi, 0x38
jne 0x18006c7fa
cmp r14d, 4
jge 0x18006c776
movsxd rcx, r14d
mov eax, 4
sub eax, r14d
mov dl, 0x30
add r14d, eax
movsxd r8, eax
mov rax, rcx
lea rcx, [rbp]
add rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp]
mov dword [rsp + 0x48], 4
lea r9, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, 0xdb
mov rcx, r13
call fcn.18002dea0
jmp 0x18006c7fa
movzx ecx, byte [rbx + r15]
mov eax, ecx
and eax, 0x7f
movzx edi, byte [rax + rdx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov ecx, 1
mov byte [rbp], al
mov r14d, ecx
lea rdx, [0x180132ba0]
movzx eax, byte [rbx + r15]
test al, al
je 0x18006c7fa
and eax, 0x7f
movzx eax, byte [rax + rdx]
test al, al
je 0x18006c7ee
cmp al, dil
je 0x18006c7f1
movzx edi, al
inc r14d
add al, 0x30
mov byte [rbp + rcx], al
inc rcx
jmp 0x18006c7f1
xor dil, dil
inc rbx
cmp rcx, 4
jl 0x18006c7c4
add esi, 9
lea rdx, [0x180132ba0]
cmp esi, 0x41
jb 0x18006c740
mov rsi, qword [rsp + 0x78]
xor ebx, ebx
mov r9, qword [rsp + 0x60]
mov ecx, dword [rbp + 0x70]
jmp 0x18006ca0d
mov qword [rsp + 0x20], r8
lea r9, [rsp + 0x48]
xor r8d, r8d
mov dword [rsp + 0x48], 4
mov edx, 0xdb
mov rcx, r13
call fcn.18002dea0
mov r9, qword [rsp + 0x60]
xor ebx, ebx
mov ecx, dword [rbp + 0x70]
jmp 0x18006ca0d
cmp r12d, 0x1d320
ja 0x18006c97f
je 0x18006c965
cmp r12d, 0x9c3c
je 0x18006c928
cmp r12d, 0x13182
je 0x18006cb8a
cmp r12d, 0x137ae
jne 0x18006ca0d
movsxd rax, dword [r9]
mov edx, 1
lea rcx, [rax + rax*2]
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r13], rax
test rax, rax
je 0x18006cb6a
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18006c958
mov eax, dword [r13]
lea r8, [rsp + 0x68]
mov dword [rsp + 0x68], eax
lea rcx, [rsp + 0x58]
lea rax, [rsp + 0x48]
mov byte [rsp + 0x50], 1
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 0x34
mov qword [rsp + 0x20], rax
lea rax, [0x18010646e]
mov r9, rax
mov byte [rsp + 0x58], 2
mov rdx, rax
mov dword [rsp + 0x48], 0
call fcn.180096080
mov r9, qword [rsp + 0x60]
mov ecx, dword [rbp + 0x70]
jmp 0x18006ca0d
cmp r13, qword [0x180121760]
je 0x18006ca0d
mov r9d, 0x1a
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.18006a670
test rax, rax
je 0x18006c958
cmp qword [r13], 0
jne 0x18006cb63
mov r9, qword [rsp + 0x60]
mov ecx, dword [rbp + 0x70]
jmp 0x18006ca0d
mov eax, dword [r9]
mov dword [r13 + 8], eax
mov eax, dword [rdi]
mov dword [r13 + 0x10], eax
mov dword [r13 + 0xc], 0
jmp 0x18006ca0d
cmp r12d, 0x26e92
je 0x18006ca08
cmp r12d, 0x30a04
jne 0x18006ca0d
mov qword [r13 + 0x18], rsi
mov r9, rsi
mov rdx, qword [0x180121760]
mov r8d, 0x20
mov rcx, r13
call fcn.1800cff60
cmp qword [0x180121768], 0
jne 0x18006ca01
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
lea r9, [rsp + 0x40]
mov dword [rsp + 0x48], 0
mov r8, rax
mov qword [0x180121768], rax
lea rdx, str.lists
mov dword [rsp + 0x40], 0x33
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x20], 0xca
call fcn.18006c2d0
xor eax, eax
jmp 0x18006cb8c
mov byte [r13 + 0x14], 0
imul eax, ecx, 0xc5
add r12d, eax
cmp r12d, dword [rsp + 0x40]
ja 0x18006cb8a
mov rdi, qword [rsp + 0x70]
jmp 0x18006c338
lea rax, [0x18010646e]
mov dword [rsp + 0x40], 0
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov edx, 0xdb
mov rcx, r13
call fcn.18002dea0
xor eax, eax
jmp 0x18006cb8c
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
cmp dword [0x18012172c], 0
je 0x18006caaa
lea rcx, str._bind_trace_pprofiling__YAXPAVIReader_12_PAXPAVsigwait_v0_post_lin_12__Z
call fcn.1800fcfa0
lea rax, [0x18010646e]
xor r9d, r9d
mov r8, rax
lea rcx, str.Sync.AutofillWalletStartFailure
mov rdx, rax
call fcn.1800fcfa0
mov dword [0x18012172c], 0
mov qword [0x180121770], rdi
add ebx, 0x57ac
cmp ebx, 0xaf58
jbe 0x18006c520
mov eax, 0xffffffff
jmp 0x18006cb8c
lea rsi, [0x18010646e]
mov qword [rsp + 0x28], rsi
lea r9, [rsp + 0x40]
lea r8, str.llvm.x86.avx512.mask.psrl.w.128
mov dword [rsp + 0x20], 0x59
mov rdx, rsi
mov qword [0x180121770], rdi
xor ecx, ecx
mov dword [rsp + 0x40], 0
call fcn.18002be30
jmp 0x18006cb1f
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
add ebx, 0x51
cmp ebx, 0xba
jb 0x18006c620
mov eax, 0xffffffff
jmp 0x18006cb8c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rsp + 0x28], rdi
lea rdx, str.AntiMalwareCommandHandlerGUI::HandleManagedDeviceCommand__:_Received_BCmd__1_
mov rcx, rax
mov r9, r13
mov rax, qword [r13 + 0x18]
mov r8, rsi
mov qword [rsp + 0x20], rax
call fcn.1800fcc80
mov eax, 1
jmp 0x18006cb8c
mov r8d, 0xe
lea rdx, str.es_de_atualiza
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, ebx
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.1800fd9d0
mov rbx, qword [rsp + 0x150]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret