Function at 0x1800bfd10
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x58]
sub rsp, 0x158
mov eax, ecx
mov r15, r9
add ecx, 0xfffffff1
mov rdi, r8
mov dword [rsp + 0x60], ecx
cmp eax, ecx
jbe case.0x1800bfd93.229
mov ecx, dword [rbp - 0x78]
xor ebx, ebx
mov r12, qword [rbp - 0x40]
mov r13, qword [rbp]
mov r14, qword [rbp]
mov dword [rbp - 0x70], ecx
mov ecx, dword [rsp + 0x60]
add eax, 0xffffff25
lea r8, [0x180000000]
cmp eax, 0x41
ja case.default.0x1800bfd93
movzx eax, byte [r8 + rax + 0xc1344]
mov ecx, dword [r8 + rax*4 + 0xc1304]
add rcx, r8
jmp rcx
mov rax, qword [rbp - 0x38]
mov edx, 0x125
mov qword [rbp - 0x78], rax
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx - 0x125]
cmp eax, 0xc
ja case.0x1800bfdca.294
mov ecx, dword [r8 + rax*4 + 0xc1388]
add rcx, r8
jmp rcx
mov eax, dword [pe_dos_header]
mov r15, qword [rbp + 8]
mov rcx, r15
lea edx, [rax + 0x10]
mov dword [0], edx
mov rax, qword [r15 + 8]
mov qword [rbp + 0x18], rax
mov rax, qword [r15]
mov qword [rbp + 0x20], rax
mov rax, qword [8]
call qword [rax + 8]
mov qword [rbp - 0x48], rax
cmp rax, 0
jne 0x1800bfe56
mov esi, dword [rbp - 0x50]
lea edi, [rax + 8]
mov r12d, 0x20
mov rax, qword [r12]
test rax, rax
je 0x1800bfe48
cmp esi, 3
ja 0x1800bfe48
mov rcx, qword [0x28]
call rax
cmp eax, 0xffffffdf
jne 0x1800bfe48
mov rax, qword [rdi]
mov rcx, r15
mov edx, dword [rbx]
inc esi
call qword [rax + 8]
mov qword [rbp - 0x48], rax
cmp rax, 0
je 0x1800bfe14
mov rdi, qword [rbp + 0xb0]
mov r12, qword [rbp - 0x40]
mov dword [rbp - 0x50], esi
lea r8, [0x180000000]
mov edx, 0x12d
cmp qword [rbp - 0x48], rbx
jne case.0x1800bfdca.294
mov r15, qword [rbp + 0xb8]
mov ecx, ebx
mov eax, ebx
add qword [rbp - 0x38], rax
mov qword [rbp - 0x78], rbx
mov dword [rbp - 0x70], ebx
jmp case.0x1800bfd93.234
lea rax, [rbp - 0x78]
mov dword [rbp - 0x50], ebx
sub rax, 0x10
mov qword [rbp + 8], rax
inc edx
cmp edx, 0x12b
jb 0x1800bfdb0
mov ecx, dword [rbp - 0x70]
mov r15, qword [rbp + 0xb8]
mov eax, ecx
add qword [rbp - 0x38], rax
jmp case.0x1800bfd93.234
mov rax, qword [rbp - 0x48]
cmp rax, qword [rbp + 8]
je 0x1800bfee2
mov rcx, qword [rbp + 0x18]
test rcx, rcx
jne 0x1800bfed2
mov qword [0x10], rax
jmp 0x1800bfed5
mov qword [rcx], rax
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x1800bfee2
mov qword [rcx + 8], rax
mov r15, qword [rbp + 0xb8]
add rax, 0x10
mov qword [rbp - 0x78], rax
mov ecx, eax
mov dword [rbp - 0x70], eax
mov eax, eax
add qword [rbp - 0x38], rax
jmp case.0x1800bfd93.234
mov rax, qword [rbp - 0x78]
cmp rax, 0x7f
ja 0x1800bff25
mov r15, qword [rbp + 0xb8]
mov ecx, 1
mov eax, ecx
add qword [rbp - 0x38], rax
mov dword [rbp - 0x70], ecx
jmp case.0x1800bfd93.234
cmp rax, 0x3fff
jae 0x1800bff47
mov r15, qword [rbp + 0xb8]
mov ecx, 2
mov eax, ecx
add qword [rbp - 0x38], rax
mov dword [rbp - 0x70], ecx
jmp case.0x1800bfd93.234
cmp rax, 0x1fffff
jae 0x1800bff69
mov r15, qword [rbp + 0xb8]
mov ecx, 3
mov eax, ecx
add qword [rbp - 0x38], rax
mov dword [rbp - 0x70], ecx
jmp case.0x1800bfd93.234
mov r15, qword [rbp + 0xb8]
cmp rax, 0xfffffff
sbb ecx, ecx
add ecx, 5
mov eax, ecx
add qword [rbp - 0x38], rax
mov dword [rbp - 0x70], ecx
jmp case.0x1800bfd93.234
mov ecx, dword [pe_dos_header]
cmp ecx, 0xf
jbe 0x1800bffa5
mov dword [0], 0xf
mov ecx, 0xf
mov eax, 1
shl eax, cl
inc eax
movsxd rcx, eax
shl rcx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, qword [rbp + 0xb8]
mov ecx, eax
mov qword [rbp - 0x78], rax
mov dword [rbp - 0x70], eax
mov eax, eax
add qword [rbp - 0x38], rax
jmp case.0x1800bfd93.234
mov rax, rdi
sub rax, rdx
cmp rax, 6
je 0x1800c120b
dec rdi
mov r9d, 0xe5
mov rcx, rdi
mov qword [rbp + 0xb0], rdi
xor r8d, r8d
xor edx, edx
call fcn.180008c80
mov qword [rbp - 0x38], rax
jmp case.0x1800bfd93.234
test r12, r12
je 0x1800c0021
mov eax, dword [r12]
sub eax, 0xb
cmp eax, 6
ja 0x1800c0e4b
lea r9, [rsp + 0x70]
mov dword [rsp + 0x68], ebx
lea r8, [rbp + 0x28]
mov dword [rsp + 0x70], 0xa
lea rdx, str.astype_late
mov dword [rsp + 0x20], 0xca
lea rcx, [rsp + 0x68]
call fcn.18006c2d0
mov rsi, qword [rbp + 0x10]
test rsi, rsi
jne 0x1800c01a1
mov esi, 0xa3
mov eax, esi
sub eax, 0xa3
je 0x1800c007b
cmp eax, 1
jne 0x1800c018e
mov dword [rbp - 0x58], ebx
jmp 0x1800c018e
mov edx, 1
lea ecx, [rdx + 0x3f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x40], rax
mov r12, rax
test rax, rax
je 0x1800c0f47
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c00fa
lea rax, [rsp + 0x70]
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x68]
lea rax, [rsp + 0x48]
mov dword [rsp + 0x28], 0x34
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x50]
lea rax, [0x18010646e]
mov byte [rsp + 0x50], 2
mov r9, rax
mov dword [rsp + 0x68], r12d
mov rdx, rax
mov dword [rsp + 0x70], ebx
call fcn.180096080
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r12 + 0x30], rax
test rax, rax
je 0x1800c0f27
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c017b
mov eax, dword [r12 + 0x30]
lea r8, [rsp + 0x68]
mov dword [rsp + 0x68], eax
lea rcx, [rsp + 0x48]
lea rax, [rsp + 0x70]
mov byte [rsp + 0x50], 1
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 0x34
mov qword [rsp + 0x20], rax
lea rax, [0x18010646e]
mov r9, rax
mov byte [rsp + 0x48], 2
mov rdx, rax
mov dword [rsp + 0x70], ebx
call fcn.180096080
mov rcx, rdi
mov qword [r12 + 0x30], rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov qword [r12 + 0x20], rax
inc esi
cmp esi, 0xa5
jb 0x1800c0061
jmp case.0x1800bfd93.234
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rdi
mov r9, rsi
mov qword [rsp + 0x20], rax
mov r8d, 0x124
mov dword [rbp - 0x28], 1
lea rdx, [rbp + 0x28]
mov dword [rbp - 0x30], ebx
lea rcx, [rbp - 0x30]
call fcn.18007db40
mov r12, rax
mov qword [rbp - 0x40], rax
mov eax, dword [rax + 8]
mov dword [rbp - 0x58], eax
jmp case.0x1800bfd93.234
lea rdx, [0x180106370]
mov qword [rbp + 0x10], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_strstr
mov r13, rax
test rax, rax
je 0x1800c021e
add r13, 2
mov byte [rax], bl
mov r8, r13
mov edx, 0xf
xor ecx, ecx
call fcn.1800c1a70
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1800c0f67
mov dword [rsp + 0x30], 0x91
lea rcx, [0x180121780]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, rdi
call fcn.18005c020
mov r12, rax
mov qword [rbp - 0x40], rax
jmp case.0x1800bfd93.234
mov esi, ebx
cmp dword [rdx + 0x28], ebx
jbe 0x1800c0292
mov r15, qword [rbp + 0xa8]
mov rax, qword [rbp - 0x10]
mov rdx, qword [rbp + 0xc0]
mov rcx, rax
call rdi
test eax, eax
jne 0x1800c103c
mov rax, qword [rbp - 0x10]
inc esi
mov rax, qword [rax + 0x28]
mov qword [rbp - 0x10], rax
cmp esi, dword [r15 + 0x28]
jb 0x1800c0263
mov r15, qword [rbp + 0xb8]
mov dword [rbp - 8], ebx
jmp case.0x1800bfd93.234
mov rax, qword [rdx]
movzx eax, byte [rax - 1]
mov byte [rbp - 0x6c], al
jmp case.0x1800bfd93.234
mov qword [0x180121770], rbx
jmp case.0x1800bfd93.234
mov ecx, ebx
mov dword [rsp + 0x68], ebx
mov dword [rbp - 0x5c], ebx
cmp dword [r15], ebx
jbe case.0x1800bfd93.234
nop word [rax + rax]
mov eax, 0x4c
mov qword [rbp - 0x78], rbx
xor sil, sil
mov dword [rbp - 0x80], eax
mov byte [rsp + 0x48], sil
mov r8, rbx
mov r15d, ebx
mov dword [rsp + 0x70], ebx
nop
cmp eax, 0xa42c
ja 0x1800c0cba
je 0x1800c0c2e
cmp eax, 0x4c
je 0x1800c0be8
cmp eax, 0x36ec
je 0x1800c09ab
cmp eax, 0x6d8c
jne 0x1800c044a
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov r8d, 0x20
lea rdx, [rbp + 0x28]
mov r9, rax
lea ecx, [r8 - 0x1f]
call fcn.1800cff60
test r13, r13
jne 0x1800c0480
mov esi, 0x7a
nop
mov eax, esi
sub eax, 0x7a
je 0x1800c0413
sub eax, 0x2f
je 0x1800c0398
sub eax, 0x2f
je 0x1800c038c
cmp eax, 0x2f
jne 0x1800c0424
mov ecx, dword [r14]
mov dword [r14 + 8], r15d
add rcx, rcx
mov rax, qword [0x180121f08]
mov rcx, qword [rax + rcx*8]
mov qword [r14 + 0x20], rcx
jmp 0x1800c0424
mov dword [r14], 1
jmp 0x1800c0424
mov edx, 1
lea ecx, [rdx + 0x3f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r14, rax
test rax, rax
je 0x1800c1057
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c0424
lea rax, [rbp - 0x68]
mov byte [rsp + 0x50], 1
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x58]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 0x34
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x40]
lea rax, [0x18010646e]
mov byte [rsp + 0x40], 2
mov r9, rax
mov dword [rsp + 0x58], r14d
mov rdx, rax
mov dword [rbp - 0x68], ebx
call fcn.180096080
jmp 0x1800c0424
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [rsp + 0x70], eax
mov r15d, eax
add esi, 0x2f
cmp esi, 0x136
jb 0x1800c0350
movzx esi, byte [rsp + 0x48]
mov r8, qword [rbp - 0x78]
mov ecx, dword [rsp + 0x68]
mov eax, dword [rbp - 0x80]
mov rdx, qword [rbp + 0xa8]
mov r15d, dword [rsp + 0x70]
add eax, 0x36a0
mov dword [rbp - 0x80], eax
cmp eax, 0x147c0
jbe 0x1800c02f0
mov r15, qword [rbp + 0xb8]
inc ecx
mov dword [rsp + 0x68], ecx
mov dword [rbp - 0x5c], ebx
cmp ecx, dword [r15]
jb 0x1800c02d0
jmp case.0x1800bfd93.234
mov r15d, 0x12
cmp r15d, 0x12
je 0x1800c0969
cmp r15d, 0x9c
je 0x1800c076c
cmp r15d, 0x126
jne 0x1800c0992
test r14, r14
jne 0x1800c074d
mov r8, r13
mov rax, rdi
sub r8, rdi
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1800c04d3
inc rax
test ecx, ecx
jne 0x1800c04c0
test edx, edx
jne 0x1800c04ea
mov sil, 1
mov dword [rsp + 0x70], 4
mov r14, r12
jmp 0x1800c098d
test sil, sil
je 0x1800c0581
mov edx, 1
lea ecx, [rdx + 0x3f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r14, rax
test rax, rax
je 0x1800c1077
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c056c
lea rax, [rsp + 0x58]
mov byte [rsp + 0x40], 1
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x68]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x34
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x50]
lea rax, [0x18010646e]
mov byte [rsp + 0x50], 2
mov r9, rax
mov dword [rbp - 0x68], r14d
mov rdx, rax
mov dword [rsp + 0x58], ebx
call fcn.180096080
mov rcx, r13
mov dword [r14], ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov qword [r14 + 0x20], rax
jmp 0x1800c0992
mov esi, 0x45
nop word [rax + rax]
mov eax, esi
sub eax, 0x45
je 0x1800c063f
cmp eax, 1
jne 0x1800c0738
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c120b
mov esi, dword [rbp - 0x60]
lea r14, str._fastAtan2_cv__YAMMM_Z
mov edi, 0xe9
nop dword [rax]
mov eax, edi
sub eax, 0xe8
je 0x1800c1097
cmp eax, 1
jne 0x1800c10c9
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
cmp esi, dword [0x18012172c]
je 0x1800c0633
lea rcx, str.com_yourkit_probes_builtin_Processes_FileOutputStream_write_Probe.classPK
call fcn.1800fcfa0
lea rax, [0x18010646e]
xor r9d, r9d
mov r8, rax
lea rcx, str.dst__wxCONFIG_PATH_SEPARATOR
mov rdx, rax
call fcn.1800fcfa0
mov dword [0x18012172c], esi
mov qword [0x180121770], r14
jmp 0x1800c10c9
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x28]
xor ecx, ecx
lea edx, [r8 + 0xc]
call fcn.1800f2250
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c06b9
mov eax, dword [r12 + 0x20]
lea r8, [rbp - 0x68]
mov dword [rbp - 0x68], eax
lea rcx, [rsp + 0x50]
lea rax, [rsp + 0x58]
mov byte [rsp + 0x40], 3
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x34
mov qword [rsp + 0x20], rax
lea rax, [0x18010646e]
mov r9, rax
mov byte [rsp + 0x50], 2
mov rdx, rax
mov dword [rsp + 0x58], ebx
call fcn.180096080
mov rcx, qword [r12 + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov qword [r12 + 0x20], rbx
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c0728
lea rax, [rsp + 0x58]
mov byte [rsp + 0x40], 3
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x68]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x34
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x50]
lea rax, [0x18010646e]
mov byte [rsp + 0x50], 2
mov r9, rax
mov dword [rbp - 0x68], r12d
mov rdx, rax
mov dword [rsp + 0x58], ebx
call fcn.180096080
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r12, rbx
mov qword [rbp - 0x40], rbx
inc esi
cmp esi, 0x47
jb 0x1800c0590
movzx esi, byte [rsp + 0x48]
jmp 0x1800c0992
test sil, sil
je 0x1800c075f
mov dword [rsp + 0x70], 4
jmp 0x1800c0992
mov eax, dword [r14 + 8]
mov dword [rsp + 0x70], eax
jmp 0x1800c0992
lea rax, [rbp - 0x5c]
xor r9d, r9d
mov r8d, 0xc3
mov qword [rsp + 0x20], rax
mov rdx, r13
xor ecx, ecx
call fcn.1800c1e90
mov qword [rbp - 0x78], rax
cmp dword [rbp - 0x5c], ebx
jge 0x1800c093d
mov esi, 0x68
nop word [rax + rax]
cmp esi, 0x68
je 0x1800c090f
cmp esi, 0xfd8
jne 0x1800c0926
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
lea r15, [0x18010646e]
test al, al
je 0x1800c081e
mov eax, dword [r12 + 0x20]
lea r8, [rsp + 0x58]
mov dword [rsp + 0x58], eax
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x78]
mov byte [rbp + 0xa0], 3
mov qword [rsp + 0x30], rax
mov r9, r15
lea rax, [rbp + 0xa0]
mov dword [rsp + 0x28], 0x34
mov rdx, r15
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x40], 2
mov dword [rsp + 0x78], ebx
call fcn.180096080
mov rcx, qword [r12 + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov qword [r12 + 0x20], rbx
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c088c
lea rax, [rsp + 0x78]
mov byte [rbp + 0xa0], 3
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x58]
lea rax, [rbp + 0xa0]
mov dword [rsp + 0x28], 0x34
mov r9, r15
mov qword [rsp + 0x20], rax
mov rdx, r15
mov byte [rsp + 0x40], 2
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x78], ebx
call fcn.180096080
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c120b
mov esi, dword [rbp - 0x60]
lea r14, str.search_calculator_answer
mov edi, 0xb0
nop
cmp edi, 0xb0
je 0x1800c10df
cmp edi, 0x2890
jne 0x1800c1125
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0xa0]
lea r8, str.ERROR_CONNECTION_INVALID
mov dword [rsp + 0x20], 0x59
mov rdx, r15
mov qword [0x180121770], r14
xor ecx, ecx
mov dword [rbp + 0xa0], ebx
call fcn.18002be30
jmp 0x1800c1125
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x28]
xor ecx, ecx
lea edx, [r8 + 0xc]
call fcn.1800f2250
add esi, 0xf70
cmp esi, 0x1ee0
jbe 0x1800c07a0
movzx esi, byte [rsp + 0x48]
mov dword [rsp + 0x30], 0x91
lea rcx, [0x180121780]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, r13
call fcn.18005c020
mov r14, rax
jmp 0x1800c0992
xor sil, sil
cmp byte [r13], 0x2a
mov byte [rsp + 0x48], sil
jne 0x1800c0992
nop dword [rax + rax]
inc r13
inc sil
cmp byte [r13], 0x2a
je 0x1800c0980
mov byte [rsp + 0x48], sil
add r15d, 0x8a
cmp r15d, 0x1b0
jb 0x1800c0486
jmp 0x1800c0438
mov r15, qword [rbp - 0x20]
test r15, r15
je 0x1800c09be
mov byte [r15], bl
inc r15
mov qword [rbp - 0x20], r15
mov rax, qword [rbp - 0x18]
cmp byte [rax], bl
je 0x1800c0a1a
mov dword [rsp + 0x30], 0x91
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, rax
call fcn.18005c020
test rax, rax
jne 0x1800c0a1a
test r13, r13
jne 0x1800c0a0b
test r15, r15
je 0x1800c0a1a
cmp byte [r15], bl
je 0x1800c0a1a
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
test eax, eax
jmp 0x1800c0a14
test r15, r15
jne 0x1800c0a1a
cmp byte [r13], bl
jne 0x1800c0438
mov r15d, 0x51
mov esi, r15d
cmp esi, r15d
je 0x1800c0bba
cmp esi, 0xc57
jne 0x1800c0bd1
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
lea r14, [0x18010646e]
test al, al
je 0x1800c0aa1
mov eax, dword [r12 + 0x20]
lea r8, [rsp + 0x58]
mov dword [rsp + 0x58], eax
lea rcx, [rsp + 0x40]
lea rax, [rsp + 0x78]
mov byte [rbp + 0xa0], 3
mov qword [rsp + 0x30], rax
mov r9, r14
lea rax, [rbp + 0xa0]
mov dword [rsp + 0x28], 0x34
mov rdx, r14
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x40], 2
mov dword [rsp + 0x78], ebx
call fcn.180096080
mov rcx, qword [r12 + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov qword [r12 + 0x20], rbx
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c0b0f
lea rax, [rsp + 0x78]
mov byte [rbp + 0xa0], 3
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x58]
lea rax, [rbp + 0xa0]
mov dword [rsp + 0x28], 0x34
mov r9, r14
mov qword [rsp + 0x20], rax
mov rdx, r14
mov byte [rsp + 0x40], 2
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x78], ebx
call fcn.180096080
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c120b
mov esi, dword [rbp - 0x60]
lea rdi, str.languageSettingsPrivate.moveLanguage
nop dword [rax]
cmp r15d, 0x51
je 0x1800c113f
cmp r15d, 0x7c
jne 0x1800c1156
cmp esi, dword [0x18012172c]
je 0x1800c0b83
lea rcx, str._s_SetVAppConfigSpec_VAppImportSpec_VApp_Vim__QAEXPAVVAppConfigSpec_23__Z
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.DNS.Yandex.ResolveFailure.Opera
mov r8, r14
mov rdx, r14
call fcn.1800fcfa0
mov dword [0x18012172c], esi
mov qword [rsp + 0x28], r14
lea r9, [rbp + 0xa0]
lea r8, str.FIND_ACTCTX_SECTION_KEY_RETURN_FLAGS
mov dword [rsp + 0x20], 0x59
mov rdx, r14
mov qword [0x180121770], rdi
xor ecx, ecx
mov dword [rbp + 0xa0], ebx
call fcn.18002be30
jmp 0x1800c1156
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x28]
xor ecx, ecx
lea edx, [r8 + 0xc]
call fcn.1800f2250
add esi, 0xc06
cmp esi, 0x180c
jbe 0x1800c0a23
jmp 0x1800c0433
movsxd rax, ecx
mov edx, 0x3a
mov rcx, qword [rbp + 0xc0]
lea rsi, [rcx + rax*8]
mov rax, qword [rcx + rax*8]
mov rcx, rax
mov qword [rbp - 0x18], rax
call sub.VCRUNTIME140.dll_strchr
mov r13, rax
test rax, rax
je 0x1800c0c18
mov byte [rax], bl
inc r13
mov rcx, qword [rsi]
mov edx, 0x25
call sub.VCRUNTIME140.dll_strchr
mov qword [rbp - 0x20], rax
jmp 0x1800c0433
mov eax, dword [rbp - 0x5c]
mov r9d, 0x1d
cmp byte [rdx], bl
mov rdx, r14
mov rcx, qword [rbp - 0x18]
mov dword [rsp + 0x58], eax
mov eax, dword [rbp - 0x58]
cmovne eax, ebx
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x78], eax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x58]
mov byte [rsp + 0x40], sil
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call fcn.1800fa250
mov r8, qword [rbp - 0x78]
mov edx, ebx
mov qword [rbp], rax
mov eax, r15d
mov dword [rbp - 0x54], eax
test r8, r8
je 0x1800c0ca3
nop dword [rax + rax]
cmp edx, dword [rbp - 0x5c]
jae 0x1800c0ca0
mov ecx, edx
imul eax, dword [r8 + rcx*4]
inc edx
jmp 0x1800c0c90
mov dword [rbp - 0x54], eax
cmp dword [r14], 9
jne 0x1800c043c
shr eax, 3
inc eax
mov dword [rbp - 0x54], eax
jmp 0x1800c043c
cmp eax, 0xdacc
je 0x1800c0ce9
cmp eax, 0x1116c
jne 0x1800c044a
mov rcx, qword [rbp]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
lea edx, [r9 + 0x47]
call fcn.18005f7e0
jmp 0x1800c0438
mov edx, dword [rbp - 0x58]
add edx, dword [rbp - 0x54]
mov dword [rbp - 0x58], edx
jmp 0x1800c0443
mov esi, dword [0x18012172c]
xor r9d, r9d
xor edx, edx
mov dword [rbp - 0x60], esi
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c0d65
xor r9d, r9d
xor r8d, r8d
mov edx, 0x111
xor ecx, ecx
call fcn.18005f2c0
lea r9, [rsp + 0x58]
mov dword [rsp + 0x58], ebx
lea r8, [0x18010646e]
mov edx, 0x77
lea rcx, [0x18010646e]
call fcn.1800b78f0
xor r9d, r9d
mov dword [rsp + 0x28], 0xd2
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call fcn.1800e5fa0
test rdi, rdi
je 0x1800c0d7c
cmp qword [rbp + 0xc0], rbx
je 0x1800c0d7c
cmp dword [r15], ebx
jne case.0x1800bfd93.234
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c120b
mov edi, 0xda
lea r14, str.stra:MaxPartnerStorage
cmp edi, 0xda
je 0x1800c116f
cmp edi, 0xe7a
jne 0x1800c11c3
lea r15, [0x18010646e]
mov dword [rbp + 0xa0], ebx
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0xa0]
mov rdx, r15
mov dword [rsp + 0x20], 0x59
lea r8, str.Chatxam_standart_vaqti
xor ecx, ecx
call fcn.18002be30
jmp 0x1800c11c3
cmp byte [rdx], bl
je 0x1800c0e13
mov r9, r12
mov dword [rsp + 0x20], 0x57
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov dword [r12 + 8], eax
jmp case.0x1800bfd93.234
mov eax, dword [rbp - 0x58]
mov dword [r12 + 8], eax
jmp case.0x1800bfd93.234
mov rax, qword [rdx + 0x18]
mov qword [rbp - 0x10], rax
mov ecx, dword [rsp + 0x60]
mov eax, dword [rbp + 0xa0]
dec eax
mov dword [rbp + 0xa0], eax
cmp eax, ecx
jbe case.0x1800bfd93.229
mov rdx, qword [rbp + 0xa8]
jmp 0x1800bfd6a
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c120b
mov esi, dword [rbp - 0x60]
lea r14, str.Target_Phx.CxxIL.Intrinsic.IV_ADDSAT_8BT
mov edi, reloc.SHLWAPI.dll_StrCmpNICW
mov eax, edi
sub eax, 0x9a
je 0x1800c0ef9
cmp eax, 0x5b
jne 0x1800c0f10
cmp esi, dword [0x18012172c]
je 0x1800c0ebe
lea rcx, str.const_char___cdecl_WTF::GetStringWithTypeName_void___T__blink::IconURL_
call fcn.1800fcfa0
lea r15, [0x18010646e]
xor r9d, r9d
mov r8, r15
lea rcx, str.ID2D1ImageBrush::GetExtendModeX
mov rdx, r15
call fcn.1800fcfa0
mov dword [0x18012172c], esi
jmp 0x1800c0ec5
lea r15, [0x18010646e]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0xa0]
lea r8, str.IDS_SAFEBROWSING_V3_CLOSE_DETAILS_BUTTON
mov dword [rsp + 0x20], 0x59
mov rdx, r15
mov qword [0x180121770], r14
xor ecx, ecx
mov dword [rbp + 0xa0], ebx
call fcn.18002be30
jmp 0x1800c0f10
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
add edi, 0x5b
cmp edi, 0x150
jb 0x1800c0e74
mov rax, rbx
jmp 0x1800c1043
mov r8d, 0xe
lea rdx, str.djur_och_natur
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 0xe
lea rdx, str.dc_device_open
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c120b
mov esi, dword [rbp - 0x60]
lea rdi, str._s_:__s_:__s_:_break_here
mov r15d, 8
mov eax, r15d
sub eax, 7
je 0x1800c0ff8
cmp eax, 1
jne 0x1800c102a
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
cmp esi, dword [0x18012172c]
je 0x1800c0fef
lea rcx, str.Function_IDXGIFactory2_EnumAdapters_is_excluded_from_stream_serialization
call fcn.1800fcfa0
lea rax, [0x18010646e]
xor r9d, r9d
mov r8, rax
lea rcx, str.com.tw_net.tw_edu.tw_org.tw_tw_
mov rdx, rax
call fcn.1800fcfa0
mov dword [0x18012172c], esi
mov qword [0x180121770], rdi
jmp 0x1800c102a
lea rax, [0x18010646e]
mov dword [rbp + 0xa0], ebx
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0xa0]
mov rdx, rax
mov dword [rsp + 0x20], 0x59
lea r8, str._Float32x4FromInt32x4Bits
xor ecx, ecx
call fcn.18002be30
dec r15d
cmp r15d, 6
ja 0x1800c0f91
mov rax, rbx
jmp 0x1800c1043
mov dword [rbp - 8], eax
mov rax, qword [rbp - 8]
add rsp, 0x158
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r8d, 0xe
lea rdx, str.Preparant_mitj
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 0xe
lea rdx, str.VPSLLWZ128rmkz
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x18010646e]
mov dword [rbp + 0xa0], ebx
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0xa0]
mov rdx, rax
mov dword [rsp + 0x20], 0x59
lea r8, str.pNJLzzRYQFhBk4Y5tgEgw
xor ecx, ecx
call fcn.18002be30
dec edi
cmp edi, 0xe7
ja 0x1800c05d0
mov rax, rbx
jmp 0x1800c1043
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
cmp esi, dword [0x18012172c]
je 0x1800c1125
lea rcx, str.W20121207_HC699723742_PR4050_DT20130104_REF433282445_RUN3_TS1357312258174
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.BFD_RELOC_NDS32_PLT_GOTREL_LO12
mov r8, r15
mov rdx, r15
call fcn.1800fcfa0
mov dword [0x18012172c], esi
add edi, 0x27e0
cmp edi, 0x4fc0
jbe 0x1800c08c0
mov rax, rbx
jmp 0x1800c1043
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
add r15d, 0x2b
cmp r15d, 0xa7
jb 0x1800c0b40
mov rax, rbx
jmp 0x1800c1043
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
cmp esi, dword [0x18012172c]
je 0x1800c11bc
lea rcx, str.ATL.CComPtr_IUnknown_.QueryInterface_struct_IPsSidLookupConstantMetadata_
call fcn.1800fcfa0
lea rax, [0x18010646e]
xor r9d, r9d
mov r8, rax
lea rcx, str.Texture_cache_read_transactions
mov rdx, rax
call fcn.1800fcfa0
mov dword [0x18012172c], esi
mov qword [0x180121770], r14
add edi, 0xda0
cmp edi, 0x1b40
jbe 0x1800c0da2
mov rax, rbx
jmp 0x1800c1043
sub rdi, qword [rbp - 0x38]
lea rax, [rdi + 1]
jmp 0x1800c1043
movzx r8d, byte [rbp - 0x6c]
mov ecx, r8d
and ecx, 7
je 0x1800c1242
sub ecx, 1
je 0x1800c1236
sub ecx, 1
je 0x1800c122a
sub ecx, 1
je 0x1800c121f
cmp ecx, 1
je 0x1800c1213
mov rax, rbx
jmp 0x1800c1043
mov rax, qword [rdx]
mov rax, qword [rax - 0x18]
jmp 0x1800c1043
mov rax, qword [rdx]
mov eax, dword [rax - 0xc]
jmp 0x1800c1043
mov rax, qword [rdx]
movzx eax, word [rax - 6]
jmp 0x1800c1043
mov rax, qword [rdx]
movzx eax, byte [rax - 3]
jmp 0x1800c1043
mov rax, r8
shr rax, 3
jmp 0x1800c1043
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x28]
xor ecx, ecx
lea edx, [r8 + 0xc]
call fcn.1800f2250
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800c12fb
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov r8d, dword [0x18012172c]
mov esi, dword [rbp - 0x60]
cmp esi, r8d
je 0x1800c12d7
mov edx, esi
lea rcx, str.program_writes_to_standard_output._If_FILTER_PATTERNS_is_specified__this_tag
call fcn.1800fcfa0
lea rdi, [0x18010646e]
xor r9d, r9d
mov r8, rdi
lea rcx, str.__builtin_HEXAGON_V6_vmpyhv_acc
mov rdx, rdi
call fcn.1800fcfa0
mov dword [0x18012172c], esi
jmp 0x1800c12de
lea rdi, [0x18010646e]
lea r9, [rbp + 0xa0]
mov dword [rbp + 0xa0], ebx
mov r8, rdi
mov edx, 0x77
mov rcx, rdi
call fcn.1800b78f0
mov rax, r12
jmp 0x1800c1043