Function at 0x18003cc40
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
xor esi, esi
imul r15d, r9d, 0x8b0
mov eax, r9d
mov r14, rcx
mov r13, r8
mov dword [rbp - 0x28], eax
mov edi, esi
mov ebx, esi
lea ecx, [rsi - 1]
mov dword [rbp - 0x38], r15d
cmp dword [rbp + 0x58], r15d
ja 0x18003d02d
mov r15, qword [rbp + 0x60]
mov ecx, dword [rbp - 0x38]
cmp eax, 0xd36e
ja 0x18003cf6d
je 0x18003ce52
cmp eax, 0x4088
ja 0x18003cdf6
je 0x18003d5ab
sub eax, 9
je 0x18003cd8a
sub eax, 0x6d
je 0x18003cd33
sub eax, 0x3f
je 0x18003cce7
cmp eax, 0xd
jne 0x18003d013
mov rdx, qword [rdx]
mov rcx, r13
call fcn.18004ebb0
mov rdx, qword [rbp + 0x48]
mov ecx, dword [rbp - 0x38]
jmp 0x18003d013
mov rax, qword [0x180073a58]
test rax, rax
je 0x18003ccfc
cmp byte [rax], 0
jne 0x18003d115
mov eax, dword [r15]
lea r8, [rbp - 0x20]
mov edx, 0x87
mov dword [rbp - 0x20], eax
mov rcx, r14
call fcn.18001b070
cmp eax, 0xffffffff
je 0x18003d11d
mov rax, qword [0x180073a58]
mov rdx, qword [rbp + 0x48]
mov ecx, dword [rbp - 0x38]
mov byte [rax + 1], 1
jmp 0x18003d013
mov eax, dword [rdx]
lea r8, [rbp - 0x20]
xor r9d, r9d
mov dword [rbp - 0x40], eax
mov eax, dword [r14]
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x20], eax
mov qword [rsp + 0x20], r15
lea ecx, [r9 + 0x33]
call fcn.18002afd0
cmp eax, 0xffffffff
je 0x18003d143
mov r9, r13
mov dword [rbp - 0x40], 0xffffffff
mov r8, r15
lea rcx, [rbp - 0x40]
mov edx, 0x90
call fcn.18005e100
mov rdx, qword [rbp + 0x48]
mov ecx, dword [rbp - 0x38]
mov dword [rbp - 0x18], eax
jmp 0x18003d013
test r14, r14
je 0x18003d5ab
cmp qword [r14 + 0x10], 0
mov r12, rsi
jbe 0x18003d013
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
mov rdx, qword [rax + 0x20]
nop dword [rax]
cmp qword [rcx + r12*8], rdx
jae 0x18003cde1
nop word [rax + rax]
mov r8, qword [r15 + 0x30]
xor edx, edx
mov ecx, 0x139
call fcn.180038180
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
mov rdx, qword [rax + 0x20]
cmp qword [rcx + r12*8], rdx
jb 0x18003cdc0
inc r12
cmp r12, qword [r14 + 0x10]
jb 0x18003cdb0
mov rdx, qword [rbp + 0x48]
mov ecx, dword [rbp - 0x38]
jmp 0x18003d013
cmp eax, 0x62fc
je 0x18003ce42
cmp eax, 0x6a18
je 0x18003ce1f
cmp eax, 0xc543
jne 0x18003d013
mov rax, qword [0x180073a58]
mov byte [rax + 4], 0
jmp 0x18003d013
cmp qword [r15 + 0x18], 0x10
mov rdi, r15
jb 0x18003ce2c
mov rdi, qword [r15]
cmp qword [r14 + 0x18], 0x10
mov rbx, r14
jb 0x18003ce39
mov rbx, qword [r14]
mov byte [rbp - 0x30], 0
jmp 0x18003d013
mov rax, qword [0x180073a58]
mov byte [rax + 5], 0
jmp 0x18003d013
cmp qword [rdx], 0
mov qword [rbp - 0x10], rsi
jbe 0x18003d013
movzx esi, byte [rbp - 0x30]
nop dword [rax]
nop dword [rax + rax]
mov r12d, 0xf0
cmp r12d, 0xf0
je 0x18003cede
cmp r12d, 0x8070
jne 0x18003cf33
mov rdx, qword [r14 + 0x18]
mov rcx, r14
cmp rdx, 0x10
jb 0x18003ce9c
mov rcx, qword [r14]
add rcx, qword [r14 + 0x10]
inc rbx
cmp rbx, rcx
jne 0x18003ceb4
mov rbx, r14
cmp rdx, 0x10
jb 0x18003ceb4
mov rbx, qword [r14]
mov rdx, qword [r15 + 0x18]
mov rcx, r15
cmp rdx, 0x10
jb 0x18003cec4
mov rcx, qword [r15]
add rcx, qword [r15 + 0x10]
inc rdi
cmp rdi, rcx
jne 0x18003cf33
mov rdi, r15
cmp rdx, 0x10
jb 0x18003cf33
mov rdi, qword [r15]
jmp 0x18003cf33
movzx r9d, byte [rbx]
add r9b, byte [rdi]
mov rcx, qword [r13 + 0x10]
add r9b, sil
mov rdx, qword [r13 + 0x18]
and r9b, 0xf
cmp rcx, rdx
jae 0x18003cf19
lea rax, [rcx + 1]
mov qword [r13 + 0x10], rax
mov rax, r13
cmp rdx, 0x10
jb 0x18003cf0e
mov rax, qword [r13]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x18003cf28
xor r8d, r8d
mov rcx, r13
lea edx, [r8 + 1]
call fcn.180001fd0
mov rcx, r13
call fcn.1800225b0
movzx esi, byte [rax]
add r12d, 0x7f80
cmp r12d, 0xff00
jbe 0x18003ce76
mov rax, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x48]
inc rax
mov byte [rbp - 0x30], sil
mov qword [rbp - 0x10], rax
cmp rax, qword [rdx]
jb 0x18003ce70
mov ecx, dword [rbp - 0x38]
xor esi, esi
jmp 0x18003d013
cmp eax, 0x24e5f
ja 0x18003cfdc
je 0x18003cfcf
cmp eax, 0x1278a
je 0x18003cfb7
cmp eax, 0x189d1
je 0x18003cfaa
cmp eax, 0x1ec18
jne 0x18003d013
mov rax, qword [0x180073a58]
mov byte [rax + 3], 1
mov rax, qword [0x180073a58]
mov dword [rax + 0x18], 1
jmp 0x18003d013
mov rax, qword [0x180073a58]
mov byte [rax + 0x55], 0
jmp 0x18003d013
mov rax, qword [0x180073a58]
mov byte [rax + 2], 1
mov rax, qword [0x180073a58]
mov byte [rax + 0x54], 0
jmp 0x18003d013
mov rax, qword [0x180073a58]
mov byte [rax + 8], 0
jmp 0x18003d013
cmp eax, 0x2b0a6
je 0x18003d009
cmp eax, 0x312ed
je 0x18003cffd
cmp eax, 0x37534
jne 0x18003d013
mov rax, qword [0x180073a58]
mov dword [rax + 0x40], esi
jmp 0x18003d013
mov rax, qword [0x180073a58]
mov dword [rax + 0x2c], esi
jmp 0x18003d013
mov rax, qword [0x180073a58]
mov dword [rax + 0x28], esi
imul eax, dword [rbp + 0x58], 0x8b
add dword [rbp - 0x28], eax
mov eax, dword [rbp - 0x28]
cmp eax, ecx
jbe 0x18003cc92
mov ecx, 0xffffffff
mov edi, dword [rbp + 0x58]
mov r12d, edi
imul r13d, edi, 0x4f0
cmp edi, r13d
ja 0x18003d5ab
mov rbx, qword [rbp - 0x18]
nop word [rax + rax]
cmp r12d, 0x1bf8d
ja 0x18003d426
je 0x18003d3bd
cmp r12d, 0xe021
ja 0x18003d263
je 0x18003d1f8
cmp r12d, 0xb5
je 0x18003d1d4
cmp r12d, 0x3890
je 0x18003d19d
cmp r12d, 0x706b
je 0x18003d153
cmp r12d, 0xa846
jne 0x18003d570
mov eax, dword [0x180073ef4]
lea r9, [rbp - 0x20]
mov dword [rbp - 0x28], eax
lea r8, [rbp - 0x28]
mov eax, dword [0x180073ef0]
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x40], eax
mov ecx, 0x3c
lea rax, [rbp - 0x40]
mov dword [rbp - 0x20], esi
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x38], esi
call fcn.18002afd0
mov qword [0x180073ee0], rax
test rax, rax
jne 0x18003d570
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Check_failed:__callback_.is_null__.
call fcn.18005f980
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, rsi
jmp 0x18003d5b2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.GCSE_Everest1830_1975Definition
call fcn.18005f980
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp - 0x18], 0xffffffff
mov rax, qword [rbp - 0x18]
jmp 0x18003d5b2
cmp dword [0x180073ef0], 2
jl 0x18003d169
cmp dword [0x180073ef4], 2
jge 0x18003d570
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, dword [0x180073ef4]
lea rdx, str._INTERNAL_OPTION_safe_translate_flushed_
mov r8d, dword [0x180073ef0]
mov rcx, rax
call fcn.18005f980
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r8d, r8d
mov edx, 0x89
xor ecx, ecx
call fcn.18000b560
mov rcx, qword [0x180073a58]
mov dword [rcx + 0x1c], eax
mov rcx, qword [0x180073a58]
mov eax, dword [rcx + 0x20]
mov dword [0x180073ef0], eax
mov eax, dword [rcx + 0x24]
mov dword [0x180073ef4], eax
jmp 0x18003d570
mov rax, qword [0x180073a58]
mov dword [rax + 0x44], esi
mov rax, qword [0x180073a58]
mov dword [rax + 0x48], esi
mov rax, qword [0x180073a58]
mov word [rax + 0x58], cx
jmp 0x18003d570
mov eax, dword [0x180073ef4]
lea r9, [rbp - 0x20]
mov dword [rbp - 0x28], eax
lea r8, [rbp - 0x28]
mov eax, dword [0x180073ef0]
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x40], eax
mov ecx, 0x3c
lea rax, [rbp - 0x40]
mov dword [rbp - 0x20], esi
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x38], esi
call fcn.18002afd0
mov qword [0x180073920], rax
test rax, rax
jne 0x18003d570
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.SIPCC_FSM:_CNF___4d__d__d:___35s:_ncb__p
call fcn.18005f980
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp r12d, 0x117fc
je 0x18003d395
cmp r12d, 0x14fd7
je 0x18003d36d
cmp r12d, 0x187b2
jne 0x18003d570
mov rax, qword [0x180073a58]
mov r15d, esi
mov ecx, dword [rax + 0x34]
sub dword [0x180073ef0], ecx
cmp byte [0x18007394e], 0
jle 0x18003d361
lea r14, [0x180073f18]
mov edi, 0x7f
mov eax, edi
sub eax, 0x7f
je 0x18003d2d4
cmp eax, 0x54
jne 0x18003d338
mov rax, qword [0x180073a58]
inc dword [rax + 0x40]
dec dword [0x180073ef0]
jmp 0x18003d338
cmp dword [r14 - 8], 0
lea r9, [rbp - 0x20]
mov dword [rbp - 0x20], esi
lea r8, [rbp - 0x28]
mov dword [rbp - 0x40], 1
lea rdx, [rbp - 0x38]
jge 0x18003d2fe
mov eax, dword [0x180073ef0]
dec eax
mov dword [rbp - 0x38], eax
jmp 0x18003d310
mov rcx, qword [0x180073a58]
mov eax, dword [rcx + 0x44]
mov dword [rbp - 0x38], eax
inc eax
mov dword [rcx + 0x44], eax
mov eax, dword [0x180073ef4]
mov ecx, 0x3c
mov dword [rbp - 0x28], eax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
call fcn.18002afd0
mov edx, dword [0x180073ef4]
mov rcx, rax
call qword [r14]
add edi, 0x54
cmp edi, 0x127
jb 0x18003d2b6
movsx eax, byte [0x18007394e]
inc r15d
add r14, 0x10
cmp r15d, eax
jl 0x18003d2b1
mov edi, dword [rbp + 0x58]
mov byte [0x18007394e], 0
jmp 0x18003d570
mov rcx, qword [0x180073920]
mov edx, 0xaf
call fcn.18005a880
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfb
xor ecx, ecx
call fcn.1800546d0
jmp 0x18003d570
mov r9, qword [0x180073920]
lea r8, [rbp - 0x40]
mov edx, 0x103
mov dword [rbp - 0x40], 0xffffffff
xor ecx, ecx
mov qword [rsp + 0x20], rsi
call fcn.180059880
jmp 0x18003d570
mov rax, qword [0x180073a58]
lea r9, [rbp - 0x40]
mov dword [rbp - 0x40], esi
lea r8, [rbp - 0x10]
lea rdx, [rbp - 0x18]
mov ecx, dword [rax + 0x44]
mov eax, dword [0x180073ef4]
mov dword [rbp - 0x10], eax
mov eax, dword [0x180073ef0]
mov dword [rbp - 8], eax
lea rax, [rbp - 8]
mov dword [rbp - 0x18], ecx
mov ecx, 0x3c
mov qword [rsp + 0x20], rax
call fcn.18002afd0
mov qword [0x180073ee8], rax
test rax, rax
je 0x18003d585
xor r9d, r9d
xor edx, edx
mov r8d, 0x118
mov rcx, rax
call fcn.180037d50
jmp 0x18003d570
cmp r12d, 0x29ef9
ja 0x18003d504
je 0x18003d4fb
cmp r12d, 0x1f768
je 0x18003d477
cmp r12d, 0x22f43
je 0x18003d467
cmp r12d, 0x2671e
jne 0x18003d570
mov dword [0x180073f00], 0
jmp 0x18003d570
mov qword [0x180073ef8], 0xffffffffffffffff
jmp 0x18003d570
mov rax, qword [0x180073a58]
cmp byte [rax + 0x4c], 0
je 0x18003d4dc
mov edi, 0x17
nop dword [rax]
mov eax, edi
sub eax, 0x16
je 0x18003d4c5
cmp eax, 1
jne 0x18003d4d0
mov rdx, qword [0x180073ee0]
lea ecx, [rax + 0x5a]
call fcn.1800220a0
mov rdx, qword [0x180073ee8]
mov ecx, 0x5b
call fcn.1800220a0
mov rax, qword [0x180073ee8]
jmp 0x18003d4cc
mov rax, qword [0x180073ee0]
mov byte [rax + 0x24], 0
dec edi
cmp edi, 0x15
ja 0x18003d490
mov edi, dword [rbp + 0x58]
jmp 0x18003d4e7
mov rax, qword [0x180073ee0]
mov byte [rax + 0x24], 1
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xc7
call fcn.180046da0
jmp 0x18003d570
mov word [0x180073f04], si
jmp 0x18003d570
cmp r12d, 0x2d6d4
je 0x18003d560
cmp r12d, 0x30eaf
je 0x18003d525
cmp r12d, 0x3468a
je 0x18003d5af
jmp 0x18003d570
mov r9d, 0x16
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180054310
xor edx, edx
lea ecx, [rdx + 0x1f]
call fcn.180045f70
mov r8, rax
lea rdx, str.ATL.AtlModuleAddTermFunc
lea rcx, [0x180073e60]
call fcn.18005fb90
mov rbx, qword [0x180073ee8]
jmp 0x18003d570
mov rax, qword [0x180073a58]
mov dword [0x180073f08], esi
mov byte [rax], 1
imul eax, edi, 0x4f
add r12d, eax
cmp r12d, r13d
ja 0x18003d5af
mov ecx, 0xffffffff
jmp 0x18003d050
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.GetModuleFileName_failed_with_error
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [rbp - 0x18]
mov rax, rbx
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret