Function at 0x180028290
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x18005a098]
xor rax, rsp
mov qword [rbp + 0x258], rax
mov r15, qword [rbp + 0x2b0]
mov eax, r9d
mov rsi, qword [rbp + 0x2b8]
mov r9, rdx
mov qword [rsp + 0x58], rdx
mov r11, r8
mov r10, qword [rsp + 0x58]
mov r13d, eax
mov r14, qword [rsp + 0x58]
lea edx, [rax - 0x15]
mov qword [rbp - 0x80], r8
mov r8, qword [rsp + 0x58]
mov dword [rbp - 0x78], eax
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x70], rsi
mov dword [rsp + 0x50], edx
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x60], r8
cmp eax, edx
jbe 0x180028866
mov rax, qword [rsp + 0x58]
mov rdi, qword [rbp - 0x70]
mov r12, qword [rbp - 0x70]
mov ebx, dword [rbp - 0x78]
mov qword [rsp + 0x40], rax
nop word [rax + rax]
lea eax, [r13 - 0x96]
cmp eax, 0x6c
ja case.0x180028370.154
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x28e50]
mov ecx, dword [rcx + rax*4 + 0x28df8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], 3
mov r9, r10
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x70]
mov r8d, 3
call fcn.18002ccc0
mov r9, qword [rsp + 0x48]
lea rax, [rsp + 0x78]
mov edx, 0xf0
mov qword [rsp + 0x20], rax
mov r8d, 4
mov qword [rsp + 0x70], 4
lea rcx, [rsp + 0x70]
call fcn.18002ccc0
mov r9, qword [rsp + 0x48]
lea rax, [rsp + 0x78]
mov edx, 0xf0
mov qword [rsp + 0x20], rax
mov r8d, 5
mov qword [rsp + 0x70], 5
lea rcx, [rsp + 0x70]
call fcn.18002ccc0
mov r15, qword [rbp - 0x68]
jmp 0x1800284b2
mov r9, qword [rsp + 0x40]
imul rax, r9, 0x38
mov qword [rax + r12 + 0x10], r11
inc qword [r15 + 8]
mov rax, qword [r15 + 8]
cmp rax, qword [r15 + 0x10]
jb 0x1800284c9
mov rcx, qword [r15]
lea rdx, [rsp + 0x70]
add rax, 0x1000
xor r9d, r9d
mov qword [r15 + 0x10], rax
xor r8d, r8d
imul rax, rax, 0x38
mov qword [rsp + 0x70], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xbf
call fcn.180020300
mov qword [r15], rax
jmp 0x1800284b2
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], 6
mov r9, r10
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x70]
mov r8d, 6
call fcn.18002ccc0
mov r9, qword [rsp + 0x48]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov edx, 0xf0
mov qword [rsp + 0x70], 7
mov r8d, 7
lea rcx, [rsp + 0x70]
call fcn.18002ccc0
mov r10, qword [rsp + 0x48]
mov r11, qword [rbp - 0x80]
mov r8, qword [rsp + 0x60]
mov edx, dword [rsp + 0x50]
mov r9, qword [rsp + 0x40]
dec r13d
cmp r13d, edx
jbe 0x180028872
mov r9, qword [rsp + 0x58]
jmp 0x180028340
mov eax, 0x6f
mov dword [rbp + 0x231], 0x534153
mov word [rbp + 0x234], ax
jmp case.0x180028370.154
xor eax, eax
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov r8d, 0xf6
call fcn.18000e210
mov r10, rax
mov qword [rsp + 0x48], rax
jmp 0x1800284b7
imul rcx, qword [rsp + 0x40], 0x38
mov rax, qword [rbp - 0x60]
mov qword [rcx + r12], rax
mov rax, qword [r9]
mov qword [rcx + r12 + 8], rax
jmp case.0x180028370.154
imul rcx, qword [r15 + 8], 0x38
mov rax, qword [r15]
xor r9d, r9d
mov qword [rcx + rax], r9
imul rcx, qword [r15 + 8], 0x38
mov rax, qword [r15]
mov qword [rcx + rax + 0x10], r9
jmp case.0x180028370.154
mov eax, dword [0x18004f2d4]
mov dword [rbp + 0x240], eax
movzx eax, word [0x18004f2d8]
mov word [rbp + 0x244], ax
mov eax, 0x5f
mov word [rbp + 0x246], ax
jmp case.0x180028370.154
mov eax, 0x63
mov word [rbp + 0x235], ax
mov eax, 0x6b
mov word [rbp + 0x236], ax
jmp case.0x180028370.154
imul rax, qword [rsi], 0x38
mov r9, qword [rsp + 0x40]
mov qword [rax + r12 + 0x28], r9
jmp 0x1800284c9
xor eax, eax
mov qword [rsp + 0x70], 1
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x70]
lea rax, [rsp + 0x78]
mov r9, r10
mov edx, 0xf0
mov qword [rsp + 0x20], rax
mov r8d, 1
call fcn.18002ccc0
mov r9, qword [rsp + 0x48]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov edx, 0xf0
mov qword [rsp + 0x70], 2
mov r8d, 2
jmp 0x1800284a8
test r14, r14
je case.0x180028370.154
nop dword [rax]
nop word [rax + rax]
mov r9d, 0x1a
cmp r9d, 0x1a
jne 0x1800286dd
mov rax, qword [rsi]
movzx edx, byte [rdi + rax]
lea rax, [0x180000000]
cmp byte [rdx + rax + 0x459a0], 0xff
je 0x1800286ff
cmp ebx, 6
jae 0x1800286ff
mov eax, 4
lea r15, [0x180000000]
cmp eax, 4
je 0x180028671
cmp eax, 0x9b
jne 0x180028681
inc ebx
jmp 0x180028681
movzx ecx, byte [rdx + r15 + 0x45aa0]
shl r8, 4
or r8, rcx
add eax, 0x97
cmp eax, 0x132
jb 0x180028661
mov rax, qword [rsi]
mov r15, qword [rbp - 0x68]
inc rax
mov qword [rsi], rax
mov qword [rsp + 0x60], r8
cmp rax, qword [r14 + 0x10]
jb 0x1800286dd
mov eax, 0x62
nop word [rax + rax]
cmp eax, 0x62
je 0x1800286c2
cmp eax, 0x26aa
jne 0x1800286d1
mov r14, qword [r14 + 0x28]
jmp 0x1800286d1
cmp qword [r14 + 0x28], 0
je 0x1800286ff
xor ecx, ecx
mov qword [rsi], rcx
mov rdi, qword [r14]
add eax, 0x2648
cmp eax, 0x4c90
jbe 0x1800286b0
add r9d, 0xbe2
cmp r9d, 0xbe2
jbe 0x180028626
test r14, r14
jne 0x180028620
jmp 0x1800284c0
mov edx, dword [rsp + 0x50]
mov r13d, 0x96
jmp case.0x180028370.154
mov r9, qword [rsp + 0x40]
mov rax, qword [rsi]
imul rcx, r9, 0x38
mov qword [rcx + r12 + 0x20], rax
jmp 0x1800284c9
mov rdi, qword [r14]
xor ecx, ecx
mov ebx, ecx
mov qword [rsp + 0x60], rcx
mov r8d, ecx
jmp case.0x180028370.154
mov r14, qword [r15]
mov rdi, qword [rbp - 0x70]
mov r9, qword [rsp + 0x40]
mov rax, qword [r14 + 0x10]
cmp qword [rsi], rax
jb 0x1800284c9
xor eax, eax
mov qword [rsi], rax
mov r14, qword [r14 + 0x28]
jmp 0x1800284c9
mov dword [rbp + 0x237], 0x577465
jmp case.0x180028370.154
mov eax, 0x57
mov word [rbp + 0x230], ax
jmp case.0x180028370.154
imul rax, qword [rsi], 0x38
mov r12, qword [r15]
mov r9, qword [r15 + 8]
mov qword [rsp + 0x40], r9
mov rcx, qword [rax + r12 + 0x28]
test rcx, rcx
je 0x1800284c9
imul rax, rcx, 0x38
mov qword [rax + r12 + 0x20], r9
imul rax, qword [rsi], 0x38
imul rcx, r9, 0x38
mov rax, qword [rax + r12 + 0x28]
mov qword [rcx + r12 + 0x28], rax
jmp 0x1800284c9
xor ebx, ebx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov qword [rsp + 0x28], rbx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov r8d, 0x87
call fcn.180029960
test al, al
jne case.0x1800288cb.1
nop dword [rax]
imul ecx, dword [rsi], 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x38], r15
xor r9d, r9d
mov qword [rsp + 0x30], rbx
xor edx, edx
mov qword [rsp + 0x28], rbx
xor ecx, ecx
mov r8d, 0x87
mov qword [rsp + 0x20], rbx
call fcn.180029960
test al, al
je 0x1800287f0
mov rax, qword [rbp - 0x80]
mov rcx, qword [rbp + 0x258]
xor rcx, rsp
call fcn.1800436f0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movzx eax, byte [0x18005a188]
mov byte [rbp - 0x80], al
jmp case.0x1800288cb.1
mov r9, qword [rsp + 0x58]
mov qword [rsp + 0x40], r9
jmp 0x180028875
mov eax, dword [rbp - 0x78]
lea r12d, [rax + 0x15]
cmp eax, r12d
jae case.0x1800288cb.1
mov rdi, qword [rbp - 0x70]
lea r15d, [rax - 0x99]
mov r13, qword [rbp - 0x70]
mov edx, 0x6c
mov rbx, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x70]
lea r11d, [rdx - 0x39]
nop
cmp r15d, 0x56
ja case.0x1800288cb.2
lea rcx, [0x180000000]
movzx eax, byte [rcx + r15 + 0x28f10]
mov ecx, dword [rcx + rax*4 + 0x28ec0]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [rdi + 0x10]
mov rcx, qword [rax + 0x18]
cmp qword [rcx + 8], 3
je case.0x1800288cb.2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.rateurs_sont_une_extension_C11
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9d, 0x112
mov qword [rsp + 0x58], 6
lea r8, [rsp + 0x58]
mov rcx, r10
lea rdx, [rsp + 0x78]
call fcn.18003d920
mov rdi, qword [rsp + 0x78]
mov edx, 0xb9
mov eax, edx
sub eax, 0xb9
je 0x18002899c
sub eax, 0x23
je 0x180028995
sub eax, 0x5d
je 0x180028950
sub eax, 0x23
je 0x180028968
cmp eax, 0x80
jne 0x1800289bd
mov rdi, rbx
cmp qword [rdi + 8], 4
jne 0x180028d30
mov r10, qword [rsp + 0x48]
jmp 0x180028d03
mov rcx, qword [rdi]
test rcx, rcx
je 0x180028990
mov r8, qword [rsp + 0x48]
mov rax, qword [r8]
test cl, 1
je 0x180028981
imul rsi, rax
imul rax, rax
mov qword [r8], rax
shr qword [rdi], 1
mov rcx, qword [rdi]
jne 0x180028975
mov rbx, rsi
jmp 0x1800289bd
mov esi, 1
jmp 0x1800289bd
test rdi, rdi
je 0x1800289b9
cmp qword [rdi + 8], 4
je 0x1800289ce
jbe 0x1800289b0
mov rdi, qword [rdi + 0x10]
jmp 0x1800289b4
mov rdi, qword [rdi + 0x18]
test rdi, rdi
jne 0x1800289a1
xor eax, eax
mov ebx, eax
sub edx, 0xffffff80
cmp edx, 0x339
jb 0x180028931
jmp 0x180028950
mov rbx, rdi
jmp 0x180028953
mov r8d, 4
lea rdx, [0x18004f3d8]
lea rcx, [rbp + 0x240]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r10, qword [rsp + 0x48]
jmp 0x180028d03
mov rax, qword [rdi + 0x10]
cmp qword [rax + 8], 2
jne 0x180028d56
mov rax, qword [rax + 0x10]
cmp qword [rax + 8], 1
je case.0x1800288cb.2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.MAAP_LAB_DIFF_FIXED_FLOAT_OUTPUT
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor eax, eax
lea r8, [rbp + 0x230]
lea rdx, [rbp + 0x240]
mov word [rbp + 0x254], ax
lea ecx, [rax + 0x43]
call fcn.18003df30
mov r10, qword [rsp + 0x48]
mov r13, rax
jmp 0x180028d03
mov dword [rbp + 0x248], 0x33
jmp case.0x1800288cb.2
xor eax, eax
mov word [rbp + 0x248], ax
jmp case.0x1800288cb.2
mov rax, qword [rdi + 0x18]
cmp qword [rax + 8], 7
jne 0x180028d7c
mov rax, qword [rax + 0x10]
cmp qword [rax + 8], 5
je case.0x1800288cb.2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.vim.vm.ProvisioningPolicy.OpType
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x80], r8
mov qword [rax], r14
jmp case.0x1800288cb.2
mov rdx, qword [rbp - 0x68]
imul rcx, qword [rdx + 8], 0x38
mov rax, qword [rdx]
mov qword [rcx + rax + 0x18], 0
imul rcx, qword [rdx + 8], 0x38
mov rax, qword [rdx]
xor edx, edx
mov qword [rcx + rax + 0x20], rdx
jmp 0x180028d13
mov rcx, qword [rbp - 0x68]
xor edx, edx
lea r8d, [rdx + 0x5f]
call fcn.180021b90
test al, al
je 0x180028da2
mov r10, qword [rsp + 0x48]
mov byte [rbp - 0x80], 1
jmp 0x180028d03
mov rdx, qword [rbp - 0x68]
mov qword [rbp - 0x80], r9
imul rcx, qword [rdx + 8], 0x38
mov rax, qword [rdx]
mov qword [rcx + rax + 0x28], 0
imul rcx, qword [rdx + 8], 0x38
mov rax, qword [rdx]
xor edx, edx
mov qword [rcx + rax + 0x30], rdx
jmp 0x180028d13
mov rax, qword [rbp - 0x60]
xor ecx, ecx
xor r9d, r9d
xor edx, edx
mov r8d, 0xdc
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
mov rax, qword [rbp - 0x70]
mov eax, dword [rax]
mov dword [rbp - 0x78], eax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x50]
call fcn.180029960
test al, al
je 0x180028da2
xor eax, eax
mov dword [rsp + 0x28], 1
lea r9, [rbp - 0x50]
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r13
mov rcx, qword [rbp - 0x68]
mov r10, qword [rsp + 0x48]
mov qword [rcx], rax
jmp 0x180028d03
lea rax, [rsp + 0x78]
mov qword [rsp + 0x58], 8
mov r9, r10
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x58]
mov r8d, 8
call fcn.18002ccc0
mov r9, qword [rsp + 0x48]
lea rax, [rsp + 0x78]
mov edx, 0xf0
mov qword [rsp + 0x20], rax
mov r8d, 9
mov qword [rsp + 0x58], 9
lea rcx, [rsp + 0x58]
call fcn.18002ccc0
mov r10, qword [rsp + 0x48]
jmp 0x180028d03
cmp qword [rdi + 0x20], 0
je case.0x1800288cb.2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.extern_const_char_pNameLibGLES_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov word [rbp + 0x252], dx
jmp case.0x1800288cb.2
lea rax, [rsp + 0x78]
mov qword [rsp + 0x58], 0xa
mov r9, r10
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x58]
mov r8d, 0xa
call fcn.18002ccc0
mov rcx, qword [rsp + 0x48]
lea r8, [rsp + 0x58]
mov r9d, 0x112
mov qword [rsp + 0x58], 8
lea rdx, [rsp + 0x78]
call fcn.18003d920
mov r10, qword [rsp + 0x48]
jmp 0x180028d03
mov rax, qword [rdi + 0x18]
mov rax, qword [rax + 0x18]
cmp qword [rax + 8], 9
jne 0x180028dd1
mov rax, qword [rax + 0x18]
cmp qword [rax + 8], 0xa
jne 0x180028dab
lea r8, [rsp + 0x68]
mov byte [rsp + 0x68], 1
mov rdx, r10
mov ecx, 0xec
call fcn.180030880
mov r10, rax
mov qword [rsp + 0x48], rax
mov r9, qword [rsp + 0x40]
mov r11d, 0x33
mov r8, qword [rsp + 0x60]
mov edx, 0x6c
inc r15d
lea eax, [r15 + 0x99]
cmp eax, r12d
jb 0x1800288a0
jmp case.0x1800288cb.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.IDS_ERRORPAGE_NET_BUTTON_DETAILS
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.DISABLE_SYNC_ON_CLIENT_REQUESTED
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.e_dans_la_fonction_englobante__1
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [rbp - 0x80], 0
jmp case.0x1800288cb.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.do_not_recognize_record_type__ld
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Data_compression__zlib__failed.
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3