Function at 0x1800f40d0
Capabilities:
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xd8
mov ebx, dword [rbp + 0x77]
lea eax, [r9 - 0x13]
mov dword [rbp - 0x6d], eax
mov rsi, r8
mov r14, rdx
mov r13, rcx
cmp r9d, eax
jbe case.0x1800f4160.7
mov r12, qword [rbp - 0x31]
lea eax, [r9 - 0xcb]
mov r15, qword [rbp - 0x31]
lea r8, [0x180000000]
mov edx, dword [rbp - 0x6d]
xor edi, edi
mov dword [rbp - 0x71], eax
mov ecx, dword [rbp - 0x71]
mov eax, dword [rbp + 0x77]
mov qword [rbp - 0x49], rbx
cmp ecx, 0x5f
ja case.default.0x1800f4160
mov eax, dword [rbp - 0x71]
movzx eax, byte [r8 + rax + 0xf47e8]
mov ecx, dword [r8 + rax*4 + 0xf479c]
add rcx, r8
jmp rcx
xor edx, edx
mov rcx, r13
cmp dword [rsi], 1
jl 0x1800f46b8
mov r8d, 0x10b
call fcn.18002b4e0
mov r12, rax
test rax, rax
jne 0x1800f41f0
mov edi, 0xa9
nop dword [rax + rax]
mov eax, edi
sub eax, 0xa9
je 0x1800f41b1
sub eax, 1
je 0x1800f41a9
cmp eax, 1
je case.0x1800f4160.7
jmp 0x1800f41e4
xor ebx, ebx
mov qword [rbp - 0x49], rbx
jmp 0x1800f41e4
mov r9d, 0x75
mov dword [rbp - 0x51], 1
lea r8, [rbp - 0x51]
mov rdx, r13
lea rcx, str._s:_Failed_to_run_the_UI__error:__u
call fcn.1800dd630
xor r9d, r9d
xor edx, edx
mov r8d, 0xed
mov rcx, r13
call fcn.1800f3ce0
inc edi
cmp edi, 0xac
jb 0x1800f4190
xor edi, edi
lea r8, [0x180000000]
mov edx, dword [rbp - 0x6d]
mov ecx, dword [rbp - 0x71]
mov eax, dword [rbp + 0x77]
dec eax
dec ecx
mov dword [rbp + 0x77], eax
mov dword [rbp - 0x71], ecx
cmp eax, edx
ja 0x1800f4140
jmp case.0x1800f4160.7
cmp dword [rsi], 0
mov r14d, edi
jle 0x1800f46af
mov rsi, qword [rbp + 0x67]
mov r13, qword [rbp + 0x6f]
mov rbx, qword [rbp - 0x21]
nop
mov r8, qword [rsi]
mov edx, 0x110
xor ecx, ecx
call fcn.1800e5740
mov rcx, qword [rsi]
xor r9d, r9d
test eax, eax
jne 0x1800f42bf
mov rdx, rcx
xor r8d, r8d
mov ecx, 0x119
call fcn.1800a59f0
test eax, eax
je 0x1800f433e
mov edi, 0x114
mov eax, edi
sub eax, 0x114
je 0x1800f42aa
cmp eax, 1
jne 0x1800f42b1
lea rax, [rbp - 0x19]
mov dword [rsp + 0x30], 0xfd
mov qword [rsp + 0x28], rax
lea r9, [0x1800906d0]
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor edx, edx
mov dword [rbp - 0x11], 0
xor ecx, ecx
mov qword [rbp - 0x19], r12
call fcn.1800208b0
jmp 0x1800f42b1
mov rax, qword [rsi]
mov r15, qword [rax + 8]
inc edi
cmp edi, 0x116
jb 0x1800f4266
xor edi, edi
jmp 0x1800f433e
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x39]
mov ecx, 0xac
xor edx, edx
call fcn.180093140
mov rcx, rax
mov eax, dword [rbp - 0x39]
test eax, eax
jle 0x1800f433e
mov dword [rbp - 1], eax
lea r9, [rbp - 0x69]
lea rax, [rbp - 0x51]
mov qword [rbp - 9], rcx
mov r8d, 0x5f
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov dword [rbp - 0x69], edi
lea rcx, [rbp - 9]
mov dword [rbp - 0x51], edi
call fcn.1800c40c0
test rax, rax
je 0x1800f433e
mov qword [rsp + 0x40], rdi
xor r9d, r9d
mov qword [rsp + 0x38], rdi
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rdx, r12
mov rax, qword [rsi]
mov ecx, 0x90
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.1800ad5f0
inc r14d
add rsi, 8
cmp r14d, dword [r13]
jl 0x1800f4230
mov rbx, qword [rbp - 0x49]
mov r13, qword [rbp + 0x5f]
mov rsi, qword [rbp + 0x6f]
mov r14, qword [rbp + 0x67]
jmp 0x1800f41f0
mov rax, qword [rbp - 0x41]
mov dword [rax + 0xc], 0xffffffff
jmp case.0x1800f4160.18
mov dword [rsp + 0x30], 0x91
lea rcx, [0x1801217a0]
mov qword [rsp + 0x28], rdi
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdi, qword [rbp - 0x41]
mov rdx, qword [rdi]
call fcn.18005c020
test rax, rax
jne 0x1800f41ee
mov r9, qword [rdi]
lea r8d, [rax + 0x20]
lea rdx, [0x1801217a0]
mov rcx, rdi
call fcn.1800cff60
jmp 0x1800f41ee
cmp dword [rsi], 1
jl 0x1800f4418
mov rax, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x26]
call fcn.18005f7e0
test eax, eax
je 0x1800f4418
mov rax, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x13b
xor ecx, ecx
call fcn.180070d40
mov qword [rbp - 0x31], rax
test rax, rax
je 0x1800f4418
cmp dword [rax + 0x46c], 0x851efc52
je 0x1800f41f0
lea rax, [rbp + 0x77]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], StrCmpICW
mov rdx, r13
mov dword [rbp + 0x77], edi
xor ecx, ecx
call fcn.1800e4220
mov eax, edi
jmp 0x1800f4786
mov rdi, qword [rbp - 0x29]
lea rdx, [rbp - 0x69]
mov r8, rsi
mov ecx, 0xe3
mov eax, dword [rdi + 8]
mov r9, qword [rdi]
mov dword [rbp - 0x69], eax
lea rax, [r13 + 0x60]
mov qword [rsp + 0x20], rax
call fcn.180090700
mov rbx, rax
mov qword [rbp - 0x49], rax
jmp 0x1800f41ee
mov qword [rbp - 0x29], rsi
jmp case.0x1800f4160.18
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov rdi, qword [rbp - 0x41]
mov qword [rdi], rax
mov eax, dword [rsi]
mov dword [rdi + 8], eax
mov eax, dword [r14]
mov dword [rdi + 0x10], eax
jmp 0x1800f41ee
mov r9, r12
mov r8d, 0x122
mov rdx, r13
xor ecx, ecx
call fcn.1800e50a0
mov ebx, edi
mov qword [rbp - 0x49], rbx
jmp 0x1800f41f0
mov rcx, qword [0x180121710]
mov r8d, 0x5a
mov rdx, r13
call fcn.1800828e0
jmp 0x1800f41f0
mov rax, qword [r13 + 0x60]
mov qword [rbp - 0x21], rax
jmp case.0x1800f4160.18
mov eax, dword [r14]
mov ecx, dword [r13 + 8]
mov edx, dword [r8 + rax*4 + 0x105bb0]
and rdx, qword [rsi]
shl rdx, cl
or qword [r13], rdx
jmp 0x1800f41f7
mov edi, 0x4d
nop dword [rax]
mov eax, edi
sub eax, 0x4b
je 0x1800f46cd
sub eax, 1
je 0x1800f454e
cmp eax, 1
jne 0x1800f457f
cmp dword [rsi], eax
jle 0x1800f457f
mov rcx, qword [rbp - 0x31]
lea r9d, [rax + 0x68]
mov r8, qword [r14 + 8]
add rcx, 0x360
xor edx, edx
mov qword [rsp + 0x20], 0
call fcn.18007e870
jmp 0x1800f457f
lea rax, [rbp - 0x69]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], StrCmpICW
mov rdx, r13
mov dword [rbp - 0x69], 1
xor ecx, ecx
call fcn.1800e4220
dec edi
cmp edi, 0x4a
ja 0x1800f4510
xor edi, edi
mov eax, dword [0x18012172c]
xor r9d, r9d
xor edx, edx
mov dword [rbp - 0x35], eax
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800f45f4
xor r9d, r9d
xor r8d, r8d
mov edx, 0x111
xor ecx, ecx
call fcn.18005f2c0
lea r9, [rbp - 0x69]
mov dword [rbp - 0x69], edi
lea r8, [0x18010646e]
mov edx, 0x77
lea rcx, [0x18010646e]
call fcn.1800b78f0
xor r9d, r9d
mov dword [rsp + 0x28], 0xd2
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
call fcn.1800e5fa0
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x41], rax
mov rdi, rax
test rax, rax
je 0x1800f46d4
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800f41ee
lea rax, [rbp - 0x69]
mov dword [rbp - 0x51], edi
mov qword [rsp + 0x30], rax
lea r9, [0x18010646e]
lea rax, [rbp - 0x61]
mov dword [rsp + 0x28], 0x34
xor edi, edi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x51]
mov byte [rbp - 0x61], 1
lea rdx, [0x18010646e]
mov byte [rbp - 0x59], 2
lea rcx, [rbp - 0x59]
mov dword [rbp - 0x69], edi
call fcn.180096080
jmp 0x1800f41f0
mov eax, dword [r14]
add dword [r13 + 8], eax
jmp case.0x1800f4160.18
mov rax, qword [rbp - 0x41]
mov r9d, 0x64
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rax + 0x18], rdi
mov rax, qword [rbp + 0x7f]
mov qword [rsp + 0x20], rax
call fcn.18001b980
jmp 0x1800f41f0
mov r14, qword [rbp + 0x67]
jmp case.0x1800f4160.18
xor r9d, r9d
mov r8d, 0xed
call fcn.1800f3ce0
mov eax, edi
jmp 0x1800f4786
xor eax, eax
jmp 0x1800f4786
mov r8d, 0xe
lea rdx, str.abbcccdddeeef
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je case.0x1800f4160.7
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov r8d, dword [0x18012172c]
mov edi, dword [rbp - 0x35]
cmp edi, r8d
je 0x1800f4761
mov edx, edi
lea rcx, str._s:__s:__s_before_calling_UTPS_USSDSrv_UnRegisterUSSDCallback__:_retVal_ld
call fcn.1800fcfa0
xor r9d, r9d
lea r8, [0x18010646e]
lea rdx, [0x18010646e]
lea rcx, str.WdfLdr:_WdfVersionUnbind:_enter
call fcn.1800fcfa0
mov dword [0x18012172c], edi
lea r9, [rbp + 0x77]
mov dword [rbp + 0x77], 0
lea r8, [0x18010646e]
mov edx, 0x77
lea rcx, [0x18010646e]
call fcn.1800b78f0
mov eax, ebx
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret