Function at 0x1800cff60
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x18], r8d
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov r12, r9
mov r15, rdx
lea r9d, [r8 - 6]
mov r13, rcx
mov dword [rsp + 0x50], r9d
cmp r8d, r9d
jbe 0x1800d026d
mov ebp, dword [rsp + 0xb0]
lea r9d, [r8 - 0x1d]
mov rbx, qword [rsp + 0x68]
lea r14, [0x18010646e]
mov rdi, qword [rsp + 0x68]
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x54], r9d
lea r10, [0x180000000]
cmp r9d, 9
ja case.0x1800cffdd.4
mov edx, dword [r10 + r9*4 + 0xd04cc]
add rdx, r10
jmp rdx
xor edx, edx
mov eax, ebp
div dword [r15 + 8]
mov rax, qword [r15]
mov ebp, edx
lea rcx, [rdx*2]
add rcx, rbp
lea r14, [rcx*8]
cmp qword [r14 + rax], 0
jne 0x1800d0022
mov qword [r14 + rax], r12
mov rax, qword [r15]
mov qword [r14 + rax + 8], r13
lea r14, [0x18010646e]
inc dword [r15 + 0xc]
jmp 0x1800d024d
mov esi, 0xb8
nop word [rax + rax]
mov eax, esi
sub eax, 0xb5
je 0x1800d00fe
sub eax, 1
je 0x1800d00e5
sub eax, 1
je 0x1800d00dd
cmp eax, 1
jne 0x1800d0102
mov edx, eax
lea ecx, [rax + 0x17]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdi, rax
test rax, rax
je 0x1800d0292
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d00d4
lea rax, [rsp + 0x60]
mov byte [rsp + 0x40], 1
mov qword [rsp + 0x30], rax
lea r9, [0x18010646e]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x34
lea r8, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea rdx, [0x18010646e]
mov byte [rsp + 0x48], 2
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], 0
call fcn.180096080
mov qword [rdi], r12
mov qword [rdi + 8], r13
jmp 0x1800d0102
mov rbx, qword [r15]
add rbx, r14
jmp 0x1800d0102
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x1800d0102
nop
mov rbx, rax
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1800d00f0
jmp 0x1800d0102
mov qword [rbx + 0x10], rdi
dec esi
cmp esi, 0xb4
ja 0x1800d0030
mov r8d, dword [rsp + 0xb0]
lea r14, [0x18010646e]
mov r9d, dword [rsp + 0x54]
inc dword [r15 + 0xc]
jmp 0x1800d024d
mov dword [rsp + 0x30], 0x91
xor r9d, r9d
mov qword [rsp + 0x28], 0
xor r8d, r8d
mov rdx, r12
mov qword [rsp + 0x20], 0
mov rcx, r15
call fcn.18005c020
mov rbx, rax
test rax, rax
jne 0x1800d02b2
movzx eax, byte [r12]
xor edi, edi
xor ebp, ebp
mov rcx, r12
test al, al
je 0x1800d0240
nop dword [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
add ebp, eax
movzx eax, byte [rcx]
test al, al
jne 0x1800d0180
jmp 0x1800d0240
mov r9, r15
mov dword [rsp + 0x68], 2
xor edx, edx
lea rcx, [rsp + 0x68]
mov r8d, 0xfe
call fcn.1800dee70
jmp 0x1800d0240
xor r12d, r12d
jmp case.0x1800cffdd.4
mov esi, dword [0x18012172c]
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x58], esi
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d022e
xor r9d, r9d
xor r8d, r8d
mov edx, 0x111
xor ecx, ecx
call fcn.18005f2c0
lea r9, [rsp + 0x68]
mov dword [rsp + 0x68], 0
mov r8, r14
mov edx, 0x77
mov rcx, r14
call fcn.1800b78f0
xor r9d, r9d
mov dword [rsp + 0x28], 0xd2
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call fcn.1800e5fa0
test r15, r15
je 0x1800d0353
test r12, r12
je 0x1800d0353
mov r9d, dword [rsp + 0x54]
mov r8d, dword [rsp + 0xb0]
mov eax, dword [rsp + 0x50]
dec r8d
dec r9d
mov dword [rsp + 0xb0], r8d
mov dword [rsp + 0x54], r9d
cmp r8d, eax
ja 0x1800cffc1
mov eax, dword [rsp + 0xb0]
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov r8d, 0xe
lea rdx, str.calcLineNumber
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d033b
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov r8d, dword [0x18012172c]
mov ebx, dword [rsp + 0x58]
cmp ebx, r8d
je 0x1800d0318
mov edx, ebx
lea rcx, str.MCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEGA1UEAxMqRW50cnVzdC5u
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.Entered_NaClCreateServiceSocket
mov r8, r14
mov rdx, r14
call fcn.1800fcfa0
mov dword [0x18012172c], ebx
lea r9, [rsp + 0xb0]
mov dword [rsp + 0xb0], 0
mov r8, r14
mov edx, 0x77
mov rcx, r14
call fcn.1800b78f0
mov r9, r13
mov r8, r15
mov edx, 0x4d
mov rcx, r12
call fcn.1800d4d00
jmp 0x1800d0274
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d0430
mov ebx, 0xde
lea rdi, str.OS_not_supported_denied
nop dword [rax]
cmp ebx, 0xde
je 0x1800d0407
cmp ebx, 0x8214
je 0x1800d03cf
cmp ebx, 0x1034a
jne 0x1800d041e
mov qword [rsp + 0x28], r14
lea r9, [rsp + 0xb0]
lea r8, str.CJK_743_IDEOGRAPH_F96C
mov dword [rsp + 0x20], 0x59
mov rdx, r14
mov dword [rsp + 0xb0], 0
xor ecx, ecx
call fcn.18002be30
jmp 0x1800d041e
cmp esi, dword [0x18012172c]
je 0x1800d03fe
lea rcx, str.data_reduction.daily_original_length_via_data_reduction_proxy_application
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.null_value_field_in_ReturnValue
mov r8, r14
mov rdx, r14
call fcn.1800fcfa0
mov dword [0x18012172c], esi
mov qword [0x180121770], rdi
jmp 0x1800d041e
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
add ebx, 0x8136
cmp ebx, 0x183a2
jbe 0x1800d0380
mov eax, 0xffffffff
jmp 0x1800d0274
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xde
call fcn.18009c830
test al, al
je 0x1800d04c3
xor r9d, r9d
mov dword [rsp + 0x20], 0xc3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c13c0
mov r8d, dword [0x18012172c]
mov ebx, dword [rsp + 0x58]
cmp ebx, r8d
je 0x1800d04a0
mov edx, ebx
lea rcx, str.IEItNjA5Mjk0NTIxMzAxBgNVBAsTKklQUyBDQSBDaGFpbmVkIENBcyBDZXJ0aWZpY2F0aW9uIEF1
call fcn.1800fcfa0
xor r9d, r9d
lea rcx, str.Profile.DesktopMenu.GAIASignout
mov r8, r14
mov rdx, r14
call fcn.1800fcfa0
mov dword [0x18012172c], ebx
lea r9, [rsp + 0xb0]
mov dword [rsp + 0xb0], 0
mov r8, r14
mov edx, 0x77
mov rcx, r14
call fcn.1800b78f0
mov eax, ebp
jmp 0x1800d0274