Function at 0x180030220
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x18008b088]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov r15, rcx
mov dword [rsp + 0x58], edx
imul ecx, edx, 0x7cb
mov r12, r8
mov r14d, edx
mov dword [rsp + 0x38], ecx
cmp edx, ecx
ja 0x180030713
movzx r13d, byte [rsp + 0x30]
xor ebx, ebx
lea rax, str.bscribe_
cmp r14d, 0x1c29
ja 0x180030632
je 0x180030628
cmp r14d, 0x91
ja 0x1800305b2
je 0x18003039b
cmp r14d, 0x1b
je 0x180030376
cmp r14d, 0x30
je 0x180030356
cmp r14d, 0x48
jne 0x180030749
mov rcx, qword [r15]
test rcx, rcx
je 0x1800302e3
xor r9d, r9d
mov byte [rsp + 0x30], 1
lea r8, [rsp + 0x30]
lea edx, [r14 + 0x57]
call fcn.180053c20
mov qword [r15], rbx
mov r8d, 0xd5
lea rdx, [rsp + 0x3c]
mov rcx, r12
call fcn.18000aef0
test al, al
je 0x18003075e
mov eax, dword [rsp + 0x3c]
cmp qword [r12 + 8], rax
jb 0x18003075e
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor edx, edx
lea rcx, [rsp + 0x48]
mov r8d, 0x85
call fcn.180042a00
mov ecx, dword [rsp + 0x3c]
xor edx, edx
mov r9, qword [r12]
mov qword [rsp + 0x68], rcx
lea rcx, [rsp + 0x68]
mov qword [rbp - 0x80], rax
lea r8d, [rdx + 0x31]
mov qword [rsp + 0x20], rax
call fcn.180052170
mov ecx, dword [rsp + 0x38]
jmp 0x180030749
mov rcx, qword [r15]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x180030765
mov ecx, dword [rsp + 0x38]
mov qword [rsp + 0x40], rax
jmp 0x180030749
xor edx, edx
mov qword [rsp + 0x78], rax
xor r9d, r9d
xor r8d, r8d
mov r13b, 1
lea ecx, [rdx + 2]
call fcn.18000b990
mov ecx, dword [rsp + 0x38]
mov dword [rsp + 0x50], ebx
jmp 0x180030749
movups xmm0, xmmword [rbp + 0x140]
mov qword [rbp - 0x78], 0
mov edi, 1
movups xmm1, xmmword [rbp + 0x150]
mov qword [rbp - 0x70], 0
lea rsi, [rbp + 0x170]
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp - 0x68], 0
movups xmm0, xmmword [rbp + 0x160]
mov qword [rbp - 0x60], 0
movups xmmword [rbp + 0x180], xmm1
movups xmmword [rbp + 0x190], xmm0
mov ebx, 0x31
cmp ebx, 0x31
je 0x1800304fc
cmp ebx, 0xa25
je 0x1800304b0
cmp ebx, 0x1419
jne 0x180030586
mov r9d, 0x10b
lea r8, [rbp - 0x50]
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.18005ba20
mov r9, qword [0x18008b278]
lea rax, [rsp + 0x48]
mov r8d, 0x128
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x20]
mov dword [rsp + 0x48], edi
lea rcx, [rbp + 0x170]
call fcn.18006bbb0
cmp eax, 1
jne 0x18003078b
lea r8d, [rax + 0x3f]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x180030586
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x180070fd1]
mov rcx, rax
lea rdx, str.cgu_Ig__Ig
lea rax, str.6IntraPred_IntraOnly_Luma_STRONGSMOOTH_MSLICETILE_LCU64z
mov qword [rsp + 0x20], rax
call fcn.18006ca50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov r9, qword [0x18008b278]
lea r8, [rbp - 0x78]
mov eax, edi
lea rdx, [rbp + 0xa0]
shl rax, 6
add r9, 8
mov ecx, 0x104
lea rax, [rbp + rax + 0x160]
mov qword [rsi], rax
call fcn.1800644a0
mov r8d, 0x52
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xa0]
call fcn.180044410
jmp 0x180030586
mov r8d, 0x40
lea rdx, [rbp + 0x140]
xor ecx, ecx
call fcn.180014da0
xor edx, edx
lea rax, [rbp + 0x140]
lea r9, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x78]
lea ecx, [rdx + 0x3e]
call fcn.180014400
mov r9, qword [0x18008b278]
lea r8, [rbp + 0x140]
add r9, 8
lea rdx, [rbp + 0xa0]
mov ecx, 0x104
call fcn.1800644a0
mov r8d, 0x52
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xa0]
call fcn.180044410
mov eax, edi
lea r8, [rbp - 0x50]
shl rax, 6
mov r9d, 0x10b
xor edx, edx
lea rcx, [rbp + rax + 0x160]
call fcn.18005ba20
add ebx, 0x9f4
cmp ebx, 0x1ddc
jbe 0x1800303f6
inc edi
add rsi, 8
cmp edi, 6
jle 0x1800303f1
mov ecx, dword [rsp + 0x38]
xor ebx, ebx
jmp 0x180030749
cmp r14d, 0xf3
je 0x1800305eb
cmp r14d, 0xe22
je 0x1800305d6
cmp r14d, 0x1920
je 0x180030713
jmp 0x180030749
mov rax, qword [0x18008b160]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x70], rax
jmp 0x180030749
cmp dword [r12], 0
jne 0x180030606
xor edx, edx
mov r8d, 0x1000
mov rcx, r15
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [rsp + 0x38]
mov dword [r15 + 0x1000], ebx
mov qword [r15 + 0x1004], 0x10000
mov dword [r15 + 0x100c], 0xb
jmp 0x180030749
mov qword [rsp + 0x60], rbx
jmp 0x180030749
cmp r14d, 0x463e
ja 0x1800306ed
je 0x1800306c7
cmp r14d, 0x25b0
je 0x18003069d
cmp r14d, 0x2a30
je 0x18003067c
cmp r14d, 0x3837
jne 0x180030749
mov rcx, qword [rsp + 0x70]
mov edx, 8
call fcn.18006cd18
mov ecx, dword [rsp + 0x38]
jmp 0x180030749
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call sub.RPCRT4.dll_MesEncodeDynBufferHandleCreate
mov ecx, dword [rsp + 0x38]
mov dword [rsp + 0x54], eax
jmp 0x180030749
mov ecx, dword [rsp + 0x3c]
mov byte [rsp + 0x40], 1
lea rax, [rcx*4]
add qword [r12], rax
sub qword [r12 + 8], rcx
mov rax, qword [rbp - 0x80]
mov ecx, dword [rsp + 0x38]
mov qword [r15], rax
jmp 0x180030749
cmp dword [rsp + 0x54], 0
mov ecx, ebx
movzx eax, r13b
cmove ecx, eax
movzx r13d, cl
test cl, cl
je 0x1800306e7
mov rcx, qword [rsp + 0x60]
call sub.RPCRT4.dll_MesHandleFree
mov ecx, dword [rsp + 0x38]
jmp 0x180030749
cmp r14d, 0x4b18
je 0x180030713
cmp r14d, 0x5445
je 0x180030742
cmp r14d, 0x7f32
jne 0x180030749
mov dword [r15 + 0x1010], 0xffffffff
mov rax, qword [rsp + 0x40]
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.18006d4c0
mov rbx, qword [rsp + 0x478]
add rsp, 0x430
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [0x18008b160], rbx
imul eax, dword [rsp + 0x58], 0x85
add r14d, eax
cmp r14d, ecx
ja 0x180030713
jmp 0x180030277
mov byte [rsp + 0x40], 0
jmp 0x180030713
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Hybrid_NACK_FEC_enabled_for_channel
call fcn.18006ca50
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x180070fd1]
mov rcx, rax
lea rdx, str.EoT0x3sExi
lea rax, str.m_fragmentsReceivedFromServerm_receiveDataBytesPerSecondFromIPMulticast
mov qword [rsp + 0x20], rax
call fcn.18006ca50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3