Function at 0x18000c600
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
imul r13d, ecx, 0x492
mov r14, r9
mov r12d, ecx
mov edi, ecx
cmp ecx, r13d
ja 0x18000c721
mov r15, qword [rsp + 0xa0]
xor ebx, ebx
cmp edi, 0xc8
ja 0x18000c6fd
je 0x18000c78a
mov eax, edi
sub eax, 0xb
je 0x18000c6f2
sub eax, 7
je 0x18000c781
sub eax, 0x72
je 0x18000c6e3
sub eax, 0x12
je 0x18000c6a4
cmp eax, 0x16
jne 0x18000c76a
mov r9, r14
mov dword [rsp + 0x80], 4
xor edx, edx
lea rcx, [rsp + 0x80]
mov r8d, 0xfe
mov r15, rbx
call fcn.1800dee70
jmp 0x18000c75a
mov rbp, qword [r8]
mov rcx, r14
mov rsi, qword [r15]
cmp rsi, rbp
mov r8, rsi
cmova r8, rbp
call sub.VCRUNTIME140.dll_memcmp
cmp rsi, rbp
je 0x18000c77b
test eax, eax
jne 0x18000c77b
cmp rsi, rbp
mov eax, 0xffffffff
mov ecx, 1
cmova eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x18000c75a
mov eax, dword [r15 + 0x24]
cmp dword [r14 + 0x24], eax
setb byte [rsp + 0x30]
jmp 0x18000c76a
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
jmp 0x18000c75a
cmp edi, 0x512
je 0x18000c73e
cmp edi, 0xa19
je 0x18000c960
cmp edi, 0x3cd8
je 0x18000c721
cmp edi, 0x4524
jne 0x18000c76a
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x98]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rsp + 0x28], 0xdf
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call fcn.1800cd5b0
mov rdx, qword [rsp + 0x88]
mov r8, qword [rsp + 0x90]
imul eax, r12d, 0x75
add edi, eax
cmp edi, r13d
jbe 0x18000c640
jmp 0x18000c721
mov dword [rsp + 0x30], eax
jmp 0x18000c721
lea rax, str.2.1.4
jmp 0x18000c726
mov esi, dword [0x18012172c]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
lea rbp, [0x18010646e]
test al, al
je 0x18000c7fa
xor r9d, r9d
xor r8d, r8d
mov edx, 0x111
xor ecx, ecx
call fcn.18005f2c0
lea r9, [rsp + 0x80]
mov dword [rsp + 0x80], ebx
mov r8, rbp
mov edx, 0x77
mov rcx, rbp
call fcn.1800b78f0
xor r9d, r9d
mov dword [rsp + 0x28], 0xd2
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call fcn.1800e5fa0
mov rdi, qword [r14 + 0x30]
test rdi, rdi
je 0x18000c834
mov rax, qword [rdi + 0x28]
mov r8, r15
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18000c823
inc rax
test ecx, ecx
jne 0x18000c810
test edx, edx
je 0x18000c8d7
mov rdi, qword [rdi + 0x38]
test rdi, rdi
jne 0x18000c803
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18000c8cf
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
cmp esi, dword [0x18012172c]
je 0x18000c894
lea rcx, str.C:Program_FilesMicrosoft_Visual_Studio_10.0VC_atlmfcinclude_atlcore.h
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.sdata1_tid___sdata1_tid__4__
mov r8, rbp
mov rdx, rbp
call fcn.1800fcfa0
mov dword [0x18012172c], esi
lea rax, str.FileWriterCallback
mov qword [rsp + 0x28], rbp
lea r9, [rsp + 0x80]
mov qword [0x180121770], rax
lea r8, str.5_MiB__RAM___512_
mov dword [rsp + 0x80], ebx
mov rdx, rbp
mov dword [rsp + 0x20], 0x59
xor ecx, ecx
call fcn.18002be30
mov rax, rbx
jmp 0x18000c726
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x18000c958
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov r8d, dword [0x18012172c]
cmp esi, r8d
je 0x18000c939
mov edx, esi
lea rcx, str.SOUNDLIB:_SoundDirectCaptureAECInit__:_SoundDirectFindDeviceWithGUID_failed.
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.Autofill.UserHappiness.Password
mov r8, rbp
mov rdx, rbp
call fcn.1800fcfa0
mov dword [0x18012172c], esi
lea r9, [rsp + 0x80]
mov dword [rsp + 0x80], ebx
mov r8, rbp
mov edx, 0x77
mov rcx, rbp
call fcn.1800b78f0
mov rax, rdi
jmp 0x18000c726
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3