Function at 0x180046f40
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x30
lea esi, [rcx + 0x352]
mov edi, ecx
cmp ecx, esi
jae 0x1800471ab
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbp
lea rbp, [0x180000000]
mov qword [rsp + 0x50], r14
xor r14d, r14d
mov eax, edi
sub eax, 0x30
je 0x180047017
sub eax, 0x7e
je 0x180046fef
sub eax, 0x2c
je 0x180046fdb
sub eax, 0xaa
je 0x180046fb1
cmp eax, 0xaa
jne 0x18004718e
xor edx, edx
lea r8d, [rax - 0x5f]
lea rcx, str.pSB_currWI_.offset
call fcn.180026840
jmp 0x18004718e
mov edx, 0x52
xor ecx, ecx
call fcn.180005040
xor r8d, r8d
xor edx, edx
mov ecx, 0xad
call fcn.180054320
mov ecx, 0xd9
call fcn.180049620
jmp 0x18004718e
xor edx, edx
xor ecx, ecx
mov r8d, 0x98
call fcn.180026e60
jmp 0x18004718e
mov ecx, dword [0x180096fec]
add ecx, dword [0x180097004]
mov rax, qword [0x180096150]
mov dword [0x180096ff0], ecx
mov dword [rax + 0x134], 0x301
jmp 0x18004718e
mov rcx, qword [str.file]
lea rdx, str._VER
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x180047095
mov ebx, 0xc6
mov eax, ebx
sub eax, 0xc6
je 0x180047073
sub eax, 1
je 0x18004706a
sub eax, 1
je 0x180047055
cmp eax, 1
jne 0x18004708b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.NvPmApi_AddCounterByName_failed:_status__d__name__s
call fcn.18005dc40
lea rcx, str.TabRestore.SaveOrRestoreDone
jmp 0x180047086
lea rcx, str.Last_sector_of_Title_set__last_sector_of_BUP_
jmp 0x180047086
lea rcx, str.Bad_attributes_for___s__at__lu:__s.
call fcn.18005dc40
lea rcx, str.ATL.CComMultiThreadModelNoCS.Decrement
call fcn.18005dc40
inc ebx
cmp ebx, 0xca
jb 0x180047034
mov rcx, qword [str.file]
lea rdx, [0x180063760]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x180047179
mov ebx, 7
cmp ebx, 7
ja case.default.0x1800470cb
mov eax, ebx
mov ecx, dword [rbp + rax*4 + 0x471b8]
add rcx, rbp
jmp rcx
lea rcx, str.LL_LOAD_REMAINING_2_REG_STARTING_FROM_R112
jmp 0x180047161
lea rcx, str.Probing_unsuccessful__receive_send_ratio_too_high
call fcn.18005dc40
lea rcx, str.media::RendererImpl::OnBufferingStateChanged
jmp 0x180047161
lea rcx, str.FilterScale__No_key_were_changed_by_filter
call fcn.18005dc40
lea rcx, str.DBK_not_implemented:__OrbProc::evCounter
call fcn.18005dc40
lea rcx, str.http:__www.adobe.com_go_learn_fp_settings_playback_ua
jmp 0x180047161
lea rcx, str.CreateClassInstance
call fcn.18005dc40
lea rcx, str.24QDynamicFileResourceRoot
call fcn.18005dc40
lea rcx, str.wxStringTokenizer::CountTokens
jmp 0x180047161
lea rcx, str.The_administration_port_is___1_.200s__.
call fcn.18005dc40
lea rcx, str.Syntax:_n
jmp 0x180047161
lea rcx, str.content::TraceControllerImpl::InitStartupTracing
call fcn.18005dc40
lea rcx, str.Unhijacking_return_address_0x_p_for_thread__p
jmp 0x180047161
lea rcx, str.vim.profile.PolicyMetadata
call fcn.18005dc40
dec ebx
lea eax, [rbx + 0xca]
cmp eax, 0xc9
ja 0x1800470b6
xor edx, edx
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x2c]
call fcn.180046520
add edi, 0xaa
cmp edi, esi
jb 0x180046f73
mov rbp, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret