Function at 0x18002af60
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov ebx, r9d
mov rdi, rdx
imul eax, ebx, 0x4d8
mov r9, r8
mov r13, rcx
mov r12d, ebx
mov dword [rsp + 0x60], eax
cmp ebx, eax
ja 0x18002b3d9
mov r14d, dword [rsp + 0xc8]
lea rbp, [0x18002fa85]
mov r15d, dword [rsp + 0xc8]
xor ebx, ebx
nop dword [rax]
cmp r12d, 0x3f60
ja 0x18002b10e
je 0x18002b403
mov eax, r12d
sub eax, 0x68
je 0x18002b0f8
sub eax, 0x47
je 0x18002b095
sub eax, 0x25
je 0x18002b002
cmp eax, 0x4b
jne 0x18002b3c0
mov r14d, dword [0x18003cb1c]
jmp 0x18002b3c0
mov eax, 0x107
nop word [rax + rax]
cmp eax, 0x107
je 0x18002b3f6
add eax, 0x43
cmp eax, 0x14a
jb 0x18002b010
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002b200
movzx edx, byte [0x18003cbb1]
mov edi, 0xdf
mov eax, edi
sub eax, 0xdf
je 0x18002b1b4
cmp eax, 1
jne 0x18002b1ea
mov r9, rbp
mov dword [rsp + 0x50], ebx
lea r8, [rsp + 0x50]
mov rdx, rbp
lea ecx, [rax + 0x5c]
call fcn.180007790
xor edx, edx
mov ecx, 0xcb
call fcn.18002b650
movzx edx, byte [0x18003cbb1]
jmp 0x18002b1ea
mov r8, r13
mov rdx, r9
mov ecx, 0x12a
call fcn.180024110
mov r9, rax
test rax, rax
je 0x18002b0e0
nop dword [rax]
mov rax, qword [r9]
test rax, rax
je 0x18002b0ea
mov r8, r13
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18002b0d3
inc rax
test ecx, ecx
jne 0x18002b0c0
test edx, edx
je 0x18002b0ea
mov r9, qword [r9 + 0x10]
test r9, r9
jne 0x18002b0b0
mov qword [rsp + 0x68], rbx
jmp 0x18002b3b8
lea rax, [r9 + 8]
mov qword [rsp + 0x68], rax
jmp 0x18002b3b8
test r9, r9
je 0x18002b106
cmp qword [r9], rbx
jne 0x18002b3c0
mov rax, rbx
jmp 0x18002b3de
cmp r12d, 0x6aa4
je 0x18002b3d9
cmp r12d, 0xaee4
je 0x18002b025
cmp r12d, 0x15ca9
jne 0x18002b3c0
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002b3d9
mov esi, 0x6f
nop dword [rax]
mov eax, esi
sub eax, 0x6f
je 0x18002b46a
cmp eax, 0x18
jne 0x18002b477
mov r8d, dword [0x18003cb1c]
cmp r14d, r8d
je 0x18002b449
mov edi, 0x38
nop dword [rax]
cmp edi, 0x38
je 0x18002b40c
cmp edi, 0xe38
jne 0x18002b437
mov r8d, r14d
mov dword [0x18003cb1c], r14d
jmp 0x18002b437
mov ecx, 0x4f
nop dword [rax]
mov eax, ecx
sub eax, 0x4c
je 0x18002b1da
sub eax, 1
je 0x18002b1e4
cmp eax, 2
jne 0x18002b1dd
mov byte [0x18003900c], 0x2b
jmp 0x18002b1dd
or dl, 2
inc ecx
cmp ecx, 0x52
jb 0x18002b1c0
mov byte [0x18003cbb1], dl
inc edi
cmp edi, 0xe1
jb 0x18002b050
mov rdi, qword [rsp + 0xb8]
mov r9, qword [rsp + 0xc0]
mov rsi, qword [r9]
test rsi, rsi
jne 0x18002b391
mov ebp, reloc.SHELL32.dll_SHSetFolderPathA
nop dword [rax]
mov eax, ebp
sub eax, 0xe7
je 0x18002b244
cmp eax, 1
jne 0x18002b372
mov eax, dword [r13]
mov dword [rsi], eax
mov qword [rsi + 8], rdi
mov qword [r9], rsi
jmp 0x18002b372
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rsi, rax
test rax, rax
jne 0x18002b305
mov edi, 0xad
cmp edi, 0xad
je 0x18002b2d9
cmp edi, 0x4f11
je 0x18002b53b
cmp edi, 0x9d75
jne 0x18002b2f3
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002b3d9
mov esi, 0xc5
lea rbp, str.IV__MM256_OR_PD
lea rdi, [0x18002fa85]
mov eax, esi
sub eax, 0xc4
je 0x18002b48b
cmp eax, 1
jne 0x18002b528
xor edx, edx
lea r8d, [rax + 0x14]
xor ecx, ecx
call fcn.18002a460
jmp 0x18002b528
mov r8d, 0xe
lea rdx, str.gmon.monitor32
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov r15d, eax
add edi, 0x4e64
cmp edi, 0xeb2c
jbe 0x18002b263
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002b36a
lea rax, [rsp + 0x40]
mov byte [rsp + 0x40], 1
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x48]
mov dword [rsp + 0x28], 0x121
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
lea rax, [0x18002fa85]
mov byte [rsp + 0x48], 2
mov r8, rax
mov dword [rsp + 0x50], esi
mov rcx, rax
mov dword [rsp + 0x58], ebx
call fcn.18001c8f0
mov r9, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xb8]
inc ebp
cmp ebp, 0xe9
jb 0x18002b220
lea rbp, [0x18002fa85]
jmp 0x18002b3c0
mov eax, dword [r13]
lea rcx, [rsp + 0x58]
lea r8, [rsi + 0x10]
mov dword [rsp + 0x58], eax
mov r9d, 0x11f
mov rdx, rdi
cmp eax, dword [rsi]
jb 0x18002b3b3
lea r8, [rsi + 0x18]
call fcn.18002af60
mov r9, qword [rsp + 0xc0]
imul eax, dword [rsp + 0xc8], 0x9b
add r12d, eax
cmp r12d, dword [rsp + 0x60]
jbe 0x18002afc0
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
and byte [0x18003cbb1], 0xf7
mov dword [rsp + 0x68], ebx
jmp 0x18002b3d9
mov rax, qword [r9]
mov rax, qword [rax + 8]
jmp 0x18002b3de
mov edx, r14d
lea rcx, str._____msg.vmplayer.license.lblPrompt_Enter_your_25_character_license_key:
call fcn.18002cfd0
xor r9d, r9d
lea rcx, str._s:_option_requires_an_argument
mov r8, rbp
mov rdx, rbp
call fcn.18002cfd0
mov r8d, dword [0x18003cb1c]
add edi, 0xe00
cmp edi, 0x1c00
jbe 0x18002b190
mov r9, rbp
mov dword [rsp + 0xc8], ebx
lea r8, [rsp + 0xc8]
mov rdx, rbp
mov ecx, 0x5d
call fcn.180007790
jmp 0x18002b477
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
add esi, 0x18
cmp esi, 0x9f
jb 0x18002b160
jmp 0x18002b3d9
cmp r14d, dword [0x18003cb1c]
je 0x18002b4f8
mov edi, 0x53
lea rbx, [0x18002fa85]
cmp edi, 0x53
je 0x18002b4d5
cmp edi, 0x4032
je 0x18002b4be
cmp edi, 0x8011
jne 0x18002b4e1
mov dword [0x18003cb1c], r14d
jmp 0x18002b4e1
xor r9d, r9d
lea rcx, str.auto_retiring_reference_picture
mov r8, rbx
mov rdx, rbx
call fcn.18002cfd0
jmp 0x18002b4e1
lea rcx, str.use__ftemplate_depth_N_to_increase_recursive_template_instantiation_depth
call fcn.18002cfd0
add edi, 0x3fdf
cmp edi, 0xbf9d
jbe 0x18002b4a0
xor ebx, ebx
lea rdi, [0x18002fa85]
mov r9d, 0xda
mov qword [0x18003cb60], rbp
lea r8, [rsp + 0xc8]
mov dword [rsp + 0xc8], ebx
lea rdx, str.__libc_csu_fini
mov qword [rsp + 0x20], rdi
mov rcx, rdi
call fcn.1800186f0
dec esi
cmp esi, 0xc3
ja 0x18002b2b1
jmp 0x18002b3d9
mov ecx, r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3