Function at 0x18005cea0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
movaps xmmword [rsp + 0x100], xmm9
mov rax, qword [0x1800c37a8]
xor rax, rsp
mov qword [rbp - 0x10], rax
movsd xmm9, qword [0x1800b8560]
mov r12, r8
mov ebx, dword [rsp + 0x40]
mov edi, edx
imul r15d, edx, 0x5e8
mov r13, rcx
mov qword [rsp + 0x70], r8
mov esi, edx
xor r8d, r8d
mov dword [rsp + 0x68], edx
mov qword [rsp + 0x78], rcx
cmp edx, r15d
ja 0x18005d1aa
mov r14d, dword [rsp + 0x6c]
lea rdx, str.ecdh
lea rcx, [0x18001f970]
cmp esi, 0x3842
ja 0x18005d0a7
je 0x18005d094
cmp esi, 0x12da
ja 0x18005d04a
je 0x18005d037
mov eax, esi
sub eax, 0x26
je 0x18005cff2
sub eax, 0x45
je 0x18005d00f
cmp eax, 0x46
jne 0x18005d19c
mov edi, 0x91
cmp edi, 0x91
je 0x18005cf87
cmp edi, 0x131
je 0x18005cf82
cmp edi, 0x1d1
je 0x18005db32
jmp 0x18005cfdc
mov ebx, r8d
jmp 0x18005cfdc
mov qword [rsp + 0x38], rcx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x28], r8
mov r9d, 0x105
mov qword [rsp + 0x20], rdx
lea r8, [0x18001f990]
lea rdx, [rbp - 0x80]
mov dword [rsp + 0x40], 0x4e20
mov dword [rsp + 0x50], 0xa
call fcn.1800839f0
lea rcx, [0x18001f970]
xor r8d, r8d
lea rdx, str.ecdh
add edi, 0xa0
cmp edi, 0x271
jb 0x18005cf64
mov edi, dword [rsp + 0x68]
mov dword [0x1800c3b1c], 0x3cc
mov dword [0x1800c3b08], r8d
mov dword [0x1800c3b44], r8d
jmp 0x18005d19c
xor r9d, r9d
mov dword [rsp + 0x40], 2
lea r8, [rsp + 0x40]
mov rdx, r12
mov ecx, 0xb3
call fcn.18005be90
mov r14d, eax
xor r8d, r8d
jmp 0x18005d19c
mov dword [0x1800c3b50], r8d
mov dword [0x1800c3b54], r8d
jmp 0x18005d19c
cmp esi, 0x258e
je 0x18005d07a
cmp esi, 0x3515
jne 0x18005d19c
test r14d, r14d
js 0x18005d293
cmp r14d, 3
jge 0x18005d19c
lea eax, [r14 + 3]
jmp 0x18005db34
mov dword [0x1800c3b58], r8d
mov dword [0x1800c3b5c], r8d
mov dword [0x1800c3b04], r8d
jmp 0x18005d19c
mov dword [0x1800c3b10], r8d
mov dword [0x1800c3b3c], r8d
jmp 0x18005d19c
cmp esi, 0x4af6
je 0x18005d18e
cmp esi, 0x5daa
je 0x18005d179
cmp esi, 0x69bf
je 0x18005d117
cmp esi, 0x705e
je 0x18005d0f7
cmp esi, 0x9e69
jne 0x18005d19c
test r14d, r14d
js 0x18005d293
cmp r14d, 0x3e
jge 0x18005d20f
lea eax, [r14 + 0x17]
jmp 0x18005db34
mov dword [0x1800c3b18], r8d
mov dword [0x1800c3afc], 0xa
mov dword [0x1800c3b38], 0xffffffff
jmp 0x18005d19c
xor r9d, r9d
mov dword [rsp + 0x40], 3
lea r8, [rsp + 0x40]
mov rdx, r12
mov ecx, 0xb3
call fcn.18005be90
test eax, eax
js 0x18005d293
cmp eax, 5
jl 0x18005d28b
lea r8, [rsp + 0x40]
mov rdx, r12
mov ecx, 0xb3
je 0x18005d26f
xor r9d, r9d
cmp eax, 6
je 0x18005d256
mov dword [rsp + 0x40], 6
call fcn.18005be90
mov r14d, eax
xor r8d, r8d
jmp 0x18005d19c
movsd qword [0x1800c3b88], xmm9
mov dword [0x1800c3af8], 1
jmp 0x18005d19c
mov dword [0x1800c3b0c], r8d
mov dword [0x1800c3b14], r8d
imul eax, edi, 0x7e
add esi, eax
cmp esi, r15d
jbe 0x18005cf10
lea eax, [rdi + 0xc]
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm7
movaps xmmword [rsp + 0x110], xmm8
mov dword [rsp + 0x6c], eax
cmp edi, eax
jae case.0x18005d20d.49
movsd xmm6, qword [0x1800b8558]
lea r14, [0x1800a3b9b]
movsd xmm8, qword [0x1800b8590]
movsd xmm7, qword [rsp + 0x70]
lea eax, [rdi - 0x26]
lea rsi, [0x180000000]
cmp eax, 0xb
ja case.default.0x18005d20d
mov ecx, dword [rsi + rax*4 + 0x5dc08]
add rcx, rsi
jmp rcx
lea r8, [rsp + 0x40]
mov rdx, r12
mov ecx, 0xb3
jne 0x18005d23a
xor r9d, r9d
mov dword [rsp + 0x40], 5
call fcn.18005be90
test eax, eax
js 0x18005d293
add eax, 0x55
jmp 0x18005db34
xor r9d, r9d
mov dword [rsp + 0x40], 7
call fcn.18005be90
test eax, eax
js 0x18005d293
add eax, 0x75
jmp 0x18005db34
mov dword [rsp + 0x40], 3
call fcn.18005be90
test eax, eax
js 0x18005d293
add eax, 0xf
jmp 0x18005db34
xor r9d, r9d
mov dword [rsp + 0x40], 2
call fcn.18005be90
test eax, eax
js 0x18005d293
add eax, 0xb
jmp 0x18005db34
add eax, 6
jmp 0x18005db34
mov eax, 0xffffffff
jmp 0x18005db34
mov eax, dword [0x1800c38d0]
mov dword [0x1800c1720], eax
mov eax, dword [0x1800c3900]
mov dword [0x1800c1768], eax
jmp case.default.0x18005d20d
mov ebx, r8d
jmp case.default.0x18005d20d
mov dword [0x1800c3b20], 1
mov qword [0x1800c3b48], r8
jmp case.default.0x18005d20d
cmp dword [0x1800c3b14], 0
je 0x18005d302
mov rax, qword [0x1800c3b30]
lea rdx, [0x1800afc88]
test rax, rax
mov ecx, SHSetFolderPathA
cmovne rdx, rax
call fcn.180055290
jmp 0x18005d359
cmp dword [0x1800c3b24], 0
je 0x18005d359
mov ecx, r8d
mov edi, r8d
mov eax, dword [0x1800c3b1c]
bt eax, edi
jae 0x18005d34f
mov dword [rsp + 0x50], ecx
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], r8
lea rdx, [rsp + 0x50]
mov r8d, PathMakeUniqueName
mov dword [rsp + 0x40], 0xffffffff
xor ecx, ecx
call fcn.18005f610
test eax, eax
jne 0x18005db60
xor r8d, r8d
lea ecx, [rdi + 1]
mov edi, ecx
cmp ecx, 9
jle 0x18005d311
xor r15d, r15d
xor ecx, ecx
nop
mov eax, dword [0x1800c3b1c]
bt eax, ecx
jae 0x18005d5b9
cmp dword [0x1800c3b20], 1
jle 0x18005d3e2
cmp ecx, 8
jge 0x18005d3e2
mov eax, dword [0x1800c3b38]
test eax, eax
js 0x18005d3ba
cmp dword [0x1800c3b40], 0
jne 0x18005db86
xor r9d, r9d
mov dword [rsp + 0x40], eax
mov r8d, 0x12b
mov dword [rsp + 0x50], r15d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1800191a0
jmp 0x18005d570
cmp dword [0x1800c3b40], 0
jne 0x18005dbae
xor r8d, r8d
mov dword [rsp + 0x40], r15d
lea rcx, [rsp + 0x40]
lea edx, [r8 + 0x70]
call fcn.18009c110
jmp 0x18005d570
mov r12d, 0x120
lea r13, str.xsort:none
nop
mov eax, r12d
sub eax, 0x120
je 0x18005d4f1
sub eax, 0x4a
je 0x18005d4e3
cmp eax, 0x4a
jne 0x18005d55a
cmp dword [0x1800c3b04], 0
jle 0x18005d473
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
cmp dword [0x1800c3b40], 0
lea rdi, str.backupTime
movsxd rcx, r15d
mov r14d, eax
cmovne rdi, r13
lea rsi, [rcx + rcx*8]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rdi
mov dword [rsp + 0x20], r14d
mov rcx, rax
lea rdx, str.BFD_RELOC_SH_IMM_MEDHI16
lea rax, [0x180000000]
mov r9, qword [rax + rsi*8 + 0xc14d8]
call fcn.1800a0de0
lea rsi, [0x180000000]
mov eax, dword [0x1800c3b84]
lea r9, [rsp + 0x50]
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x60]
mov eax, dword [0x1800c3b74]
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x40], eax
mov r8d, 0x34
mov eax, dword [0x1800c3b80]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x60], r15d
call fcn.18005f610
cmp dword [0x1800c3b04], 0
jle 0x18005d55a
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.done._n
call fcn.1800a0de0
jmp 0x18005d55a
cmp r15d, 4
jne 0x18005d55a
mov eax, dword [0x1800c1600]
jmp 0x18005d554
movsxd rax, r15d
mov dword [0x1800c3b80], 1
lea rcx, [rax + rax*8]
mov eax, dword [rsi + rcx*8 + 0xc14e0]
cmp r15d, 8
jge 0x18005d516
imul eax, dword [0x1800c3af8]
mov dword [0x1800c3b74], eax
test r15d, r15d
jne 0x18005d55a
movd xmm0, dword [0x1800c3af8]
cvtdq2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_log
mulsd xmm0, xmm6
addsd xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
movd xmm1, dword [0x1800c14e0]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [0x1800c3b74], eax
add r12d, 0x4a
cmp r12d, 0x1fe
jb 0x18005d3f0
mov r13, qword [rsp + 0x78]
cmp dword [0x1800c3b40], 0
je 0x18005d5b9
movsxd rax, r15d
lea rcx, str.wxAuiNotebook::OnTabEndDrag
lea rdi, [rax + rax*8]
mov rdx, qword [rsi + rdi*8 + 0xc14d0]
call fcn.1800a0e30
mov edx, dword [0x1800c3af8]
lea rcx, str.TMetaClass
call fcn.1800a0e30
mov edx, dword [rsi + rdi*8 + 0xc1514]
lea rcx, str._0lx_n
call fcn.1800a0e30
inc r15d
mov dword [rsp + 0x50], r15d
mov ecx, r15d
cmp r15d, 9
jle 0x18005d360
mov r12, qword [rsp + 0x70]
xor r8d, r8d
jmp 0x18005dafe
mov eax, dword [r12]
lea rcx, [rsp + 0x48]
mov r8, r13
mov dword [rsp + 0x48], eax
mov edx, 0x35
call fcn.1800595f0
mov eax, dword [r12]
xor r8d, r8d
mov dword [rsp + 0x50], r8d
mov r14d, r8d
test eax, eax
jle 0x18005d6c3
lea r15, [0x180000000]
nop dword [rax]
nop word [rax + rax]
mov esi, 0xff
mov eax, esi
sub eax, 0xff
je 0x18005d663
cmp eax, 0x12
jne 0x18005d695
movsxd rax, r14d
mov rcx, qword [r13 + rax*8]
mov rdx, qword [r15 + rax*8 + 0xc3b90]
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x18005d650
jmp 0x18005d695
movsxd rdi, r14d
mov rcx, 0xffffffffffffffff
mov rax, qword [r13 + rdi*8]
inc rcx
cmp byte [rax + rcx], 0
jne 0x18005d672
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r15 + rdi*8 + 0xc3b90], rax
test rax, rax
je 0x18005dbd6
add esi, 0x12
cmp esi, 0x123
jb 0x18005d625
mov eax, dword [r12]
inc r14d
mov dword [rsp + 0x50], r14d
cmp r14d, eax
jl 0x18005d620
mov edi, dword [rsp + 0x68]
lea rsi, [0x180000000]
xor r8d, r8d
cdqe
mov qword [rsi + rax*8 + 0xc3b90], r8
jmp 0x18005db02
mov dword [0x1800c3b24], r8d
mov qword [0x1800c3b30], r8
jmp case.default.0x18005d20d
mov eax, dword [0x1800c1648]
lea ecx, [rax + rax*4]
add ecx, ecx
mov dword [0x1800c1648], ecx
jmp case.default.0x18005d20d
cmp dword [0x1800c3b04], 0
jl 0x18005d76a
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rsp + 0x30], r14
lea r8, str.GotUsageAndQuotaDataCallback
mov rcx, rax
mov qword [rsp + 0x28], 0
mov r9d, 1
mov qword [rsp + 0x20], 0
lea rdx, str.PpapiMsg_PPPContentDecryptor_DecryptAndDecode
call fcn.1800a0de0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r9, str.NewCallNode
lea r8, str.ReadWavDataAsMono:_no_longer_reading_file.
lea rdx, str.register_request
call fcn.1800a0de0
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x64]
call fcn.180085290
xor r8d, r8d
jmp case.default.0x18005d20d
mov dword [0x1800c3b28], r8d
mov dword [0x1800c3b2c], r8d
jmp case.default.0x18005d20d
cmp dword [0x1800c3b14], 0
je case.default.0x18005d20d
mov ecx, 0xef
call fcn.180098b60
xor r8d, r8d
jmp case.default.0x18005d20d
cmp dword [0x1800c3b18], 0
je case.default.0x18005d20d
mov r15d, 0x8b
nop word [rax + rax]
mov eax, r15d
sub eax, 0x8b
je 0x18005da88
sub eax, 1
je 0x18005d9b3
sub eax, 1
je 0x18005d7fe
cmp eax, 1
jne 0x18005dae8
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [0x1800c3b18]
cmp dword [0x1800c3b84], eax
jge 0x18005dae8
mov r14d, 0x84
nop word [rax + rax]
mov eax, r14d
sub eax, 0x80
je 0x18005d938
sub eax, 1
je 0x18005d8c7
sub eax, 1
je 0x18005d8ad
sub eax, 1
je 0x18005d893
cmp eax, 1
jne 0x18005d989
cmp dword [0x1800c3b04], 0
jle 0x18005d989
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov esi, dword [0x1800c3b84]
mov ecx, 2
mov edi, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, qword [str.OnUnpackFailure]
lea r8d, [rsi + 1]
mov rcx, rax
mov dword [rsp + 0x20], edi
lea rdx, str.dr_insert_get_stolen_reg:_reg_has_wrong_size
call fcn.1800a0de0
jmp 0x18005d989
mov dword [0x1800c3b54], r8d
mov dword [0x1800c3b58], r8d
mov dword [0x1800c3b5c], r8d
jmp 0x18005d989
mov eax, dword [0x1800c3b84]
imul eax, dword [0x1800c3b74]
inc eax
mov dword [0x1800c3b80], eax
jmp 0x18005d989
mov eax, dword [0x1800c3b84]
lea r9, [rsp + 0x60]
inc eax
mov dword [rsp + 0x40], 5
mov dword [rsp + 0x58], eax
lea rdx, [rsp + 0x40]
mov eax, dword [0x1800c3b74]
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x48], eax
mov r8d, 0x34
mov eax, dword [0x1800c3b80]
mov dword [rsp + 0x60], eax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
call fcn.18005f610
cmp dword [0x1800c3b04], 0
jle 0x18005d989
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.done._n
call fcn.1800a0de0
jmp 0x18005d989
mov eax, dword [0x1800c3b84]
lea r9, [rsp + 0x48]
inc eax
mov dword [rsp + 0x60], 5
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x60]
mov eax, dword [0x1800c3b74]
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x48], eax
mov ecx, 0x94
mov eax, dword [0x1800c3b80]
mov dword [rsp + 0x58], eax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.180067940
inc dword [0x1800c3b84]
dec r14d
mov r8d, 0
cmp r14d, 0x7f
ja 0x18005d820
mov eax, dword [0x1800c3b18]
cmp dword [0x1800c3b84], eax
jl 0x18005d810
jmp 0x18005dae8
cmp dword [0x1800c3b38], 0
movd xmm1, dword [0x1800c3af8]
movd xmm0, dword [0x1800c3afc]
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm7
mulsd xmm1, xmm0
cvttsd2si eax, xmm1
mov dword [0x1800c3b74], eax
jle 0x18005da7f
mov edi, 0xc3
nop
mov eax, edi
sub eax, 0xc3
je 0x18005da41
sub eax, 0x55
je 0x18005da13
cmp eax, 0x55
jne 0x18005da68
mov eax, dword [0x1800c3b38]
dec eax
mov dword [0x1800c3b84], eax
jmp 0x18005da68
mov eax, dword [0x1800c3b38]
lea rcx, [rsp + 0x48]
dec eax
mov dword [rsp + 0x48], r8d
imul eax, dword [0x1800c3b74]
lea r8, [rsp + 0x58]
mov edx, 0x27
mov dword [rsp + 0x58], eax
call fcn.1800274a0
jmp 0x18005da68
mov eax, dword [0x1800c3b38]
lea r8, [rsp + 0x48]
dec eax
lea rdx, [rsp + 0x58]
imul eax, dword [0x1800c3b74]
mov ecx, 0x33
mov dword [rsp + 0x58], eax
call fcn.1800048a0
add edi, 0x55
mov r8d, 0
cmp edi, 0x1c2
jb 0x18005d9f0
jmp 0x18005dae8
mov dword [0x1800c3b84], r8d
jmp 0x18005dae8
mov eax, dword [0x1800c3af8]
lea r9, [rsp + 0x60]
mov dword [rsp + 0x48], eax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x58]
mov dword [rsp + 0x40], 2
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x50]
lea rax, [rsp + 0x48]
mov dword [rsp + 0x60], 1
mov ecx, 0x45
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x58], 5
call fcn.180084780
movd xmm7, dword [0x1800c1648]
cvtdq2pd xmm7, xmm7
divsd xmm7, xmm8
inc r15d
mov r8d, 0
cmp r15d, 0x8f
jb 0x18005d7d0
mov edi, dword [rsp + 0x68]
lea r14, [0x1800a3b9b]
inc edi
mov dword [rsp + 0x68], edi
cmp edi, dword [rsp + 0x6c]
jb 0x18005d1f0
movaps xmm7, xmmword [rsp + 0x120]
movaps xmm6, xmmword [rsp + 0x130]
movaps xmm8, xmmword [rsp + 0x110]
mov eax, ebx
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1800a1820
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x48]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.get_CacheStart
call fcn.1800a0de0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.object_size_is_larger_than_varsize_limit
lea rdx, [0x1800a73f4]
call fcn.1800a0de0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.9834387FDA1F66A1B5CA06CB442137B556F12F2A
lea rdx, [0x1800a73f4]
call fcn.1800a0de0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x1800a3b9b]
mov rcx, rax
lea rdx, str._movedToBeforePostCount
call fcn.1800a0de0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3