Function at 0x18001f090
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x18003ca28]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov r14d, r9d
mov dword [rsp + 0x74], r9d
xor r12d, r12d
mov qword [rsp + 0x50], r8
mov r9, r8
mov qword [rbp - 0x80], rdx
mov qword [rbp - 0x50], rcx
mov r13d, r14d
lea eax, [r14 - 0x11]
cmp r14d, eax
jbe 0x18001f500
mov esi, dword [rsp + 0x60]
lea r8, [0x180000000]
mov ebx, 0x3239
lea r15, [0x18002fa85]
lea r10d, [r12 + 0x36]
mov r11d, 0x3833
nop dword [rax]
lea eax, [r13 - 0x55]
cmp eax, 0x44
ja case.0x18001f131.102
movzx eax, byte [r8 + rax + 0x1fcb8]
mov ecx, dword [r8 + rax*4 + 0x1fc70]
add rcx, r8
jmp rcx
mov dword [0x18004cd76], 0x35363239
jmp case.0x18001f131.102
mov edi, 0x3f
mov eax, edi
sub eax, 0x3f
je 0x18001f160
cmp eax, 0x77
jne 0x18001f204
mov rax, qword [rbp - 0x60]
jmp 0x18001fc45
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001f204
mov ebx, 0xd3
mov eax, ebx
sub eax, 0xd2
je 0x18001f1a1
cmp eax, 1
jne 0x18001f1fa
xor edx, edx
lea r8d, [rax + 0x14]
xor ecx, ecx
call fcn.18002a460
jmp 0x18001f1fa
mov r8d, dword [0x18003cb1c]
cmp esi, r8d
je 0x18001f1e0
mov edx, esi
lea rcx, str.extensions::api::DeveloperPrivateLoadDirectoryFunction::SnapshotFileCallback
call fcn.18002cfd0
xor r9d, r9d
lea rcx, str.Profiling_passes_already_set_up
mov r8, r15
mov rdx, r15
call fcn.18002cfd0
mov dword [0x18003cb1c], esi
nop word [rax + rax]
mov r9, r15
mov dword [rsp + 0x48], r12d
lea r8, [rsp + 0x48]
mov rdx, r15
mov ecx, 0x5d
call fcn.180007790
dec ebx
cmp ebx, 0xd1
ja 0x18001f184
add edi, 0x77
cmp edi, 0x12d
jb 0x18001f147
mov r9, qword [rsp + 0x50]
mov rdx, qword [rbp - 0x80]
lea r8, [0x180000000]
mov ebx, 0x3239
mov r10d, 0x36
mov r11d, 0x3833
jmp case.0x18001f131.102
mov word [0x18004cd87], r10w
jmp case.0x18001f131.102
xor r8d, r8d
mov rdx, r9
mov ecx, 0x137
call fcn.180024110
mov r9, qword [rsp + 0x50]
lea r8, [0x180000000]
mov rdx, qword [rbp - 0x80]
mov r10d, 0x36
mov r11d, 0x3833
mov dword [r9 + 0xb0], 0x3c
mov dword [r9 + 0xb4], 0x3840
jmp case.0x18001f131.102
mov dword [0x18004cd7a], 0x383533
mov dword [0x18004cd7d], 0x33393739
jmp case.0x18001f131.102
mov r9, qword [rbp - 0x58]
mov r15, r12
movsxd r12, dword [rsp + 0x70]
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x68], r12
test r12, r12
jle 0x18001f4e2
lea rbx, [0x18002fa85]
xor edi, edi
nop
mov r14d, 0xdf
nop word [rax + rax]
mov eax, r14d
sub eax, 0xdf
je 0x18001f479
sub eax, 0x3c
je 0x18001f45c
sub eax, 0x3c
je 0x18001f315
cmp eax, 0x3c
jne 0x18001f492
mov rcx, qword [rbp - 0x60]
mov eax, dword [rbp - 0x70]
mov dword [rcx + r15*4], eax
jmp 0x18001f492
mov rcx, qword [rbp - 0x68]
inc rcx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [rbp - 0x70], eax
cmp eax, 0
jne 0x18001f48d
mov esi, 0x8e
mov eax, esi
sub eax, 0x8e
je 0x18001f358
sub eax, 0x6c
je 0x18001f34f
cmp eax, 0x6c
je 0x18001fc41
jmp 0x18001f44b
mov qword [rbp - 0x78], rdi
jmp 0x18001f44b
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001f44b
mov r12d, dword [rsp + 0x60]
mov edi, 0x12
cmp edi, 0x12
je 0x18001f3c7
cmp edi, 0xbb
jne 0x18001f432
lea rax, str.Section_not_opened_for_write
mov dword [rsp + 0x48], 0
lea r9d, [rdi + 0x1f]
mov qword [0x18003cb60], rax
lea r8, [rsp + 0x48]
mov qword [rsp + 0x20], rbx
lea rdx, str.IPDL::PLayer::Recv__delete__
mov rcx, rbx
call fcn.1800186f0
jmp 0x18001f432
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
cmp r12d, dword [0x18003cb1c]
je 0x18001f432
mov ebx, 0xab
mov eax, ebx
sub eax, 0xab
je 0x18001f3f9
cmp eax, 1
jne 0x18001f421
mov dword [0x18003cb1c], r12d
jmp 0x18001f421
lea rcx, str.GetSerialNumbersEx_:_Passed_in_Payload_LEID_is_the_same_as_passed_LEID__s
call fcn.18002cfd0
lea rax, [0x18002fa85]
xor r9d, r9d
mov r8, rax
lea rcx, str.downloadProgress_qint64_qint64_
mov rdx, rax
call fcn.18002cfd0
inc ebx
cmp ebx, 0xad
jb 0x18001f3e2
lea rbx, [0x18002fa85]
add edi, 0xa9
cmp edi, 0x164
jb 0x18001f381
mov r12, qword [rsp + 0x68]
xor edi, edi
add esi, 0x6c
cmp esi, 0x1d2
jb 0x18001f333
jmp 0x18001f48d
mov rcx, qword [rbp - 0x68]
mov edx, 0x5d
inc rcx
call sub.VCRUNTIME140.dll_strchr
mov r9, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
jmp 0x18001f497
mov edx, 0x5b
mov rcx, r9
call sub.VCRUNTIME140.dll_strchr
mov qword [rbp - 0x68], rax
mov byte [rax], 0
mov r9, qword [rsp + 0x50]
mov rax, qword [rsp + 0x78]
add r14d, 0x3c
cmp r14d, 0x1cf
jb 0x18001f2e0
inc r15
lea r9, [rax + 1]
mov qword [rsp + 0x50], r9
cmp r15, r12
jl 0x18001f2d0
mov esi, dword [rsp + 0x60]
lea r8, [0x180000000]
mov r14d, dword [rsp + 0x74]
mov ebx, 0x3239
mov rdx, qword [rbp - 0x80]
mov r10d, 0x36
mov r11d, 0x3833
xor r12d, r12d
lea r15, [0x18002fa85]
dec r13d
lea eax, [r14 - 0x11]
cmp r13d, eax
ja 0x18001f110
mov rcx, qword [rbp - 0x50]
imul ebx, r14d, 0x870
mov edi, r14d
mov dword [rsp + 0x48], ebx
cmp r14d, ebx
ja 0x18001fc41
mov r13, qword [rbp - 0x60]
lea r8, [0x18004cd70]
movzx esi, byte [rsp + 0x40]
mov edx, 0x2e
mov r12d, dword [rsp + 0x68]
mov r14d, dword [rsp + 0x68]
mov r15, qword [rbp - 0x58]
lea eax, [rdx + 0x36]
nop dword [rax]
cmp edi, 0x16720
ja 0x18001fa8a
je 0x18001fa7a
cmp edi, 0x5148
ja 0x18001fa23
je 0x18001fc41
mov eax, edi
sub eax, 0x55
je 0x18001f9ef
sub eax, 0x33
je 0x18001f9e1
sub eax, 0x11
je 0x18001f9c0
cmp eax, 0x47a7
jne 0x18001fc16
mov word [rbp - 0x2c], dx
mov dword [rbp - 0x2a], 0x6c0064
jmp 0x18001fc16
mov eax, 0x35
mov dword [0x18004cd71], 0x3134312c
mov word [0x18004cd75], ax
jmp case.0x18001f131.102
movsxd rax, dword [rsp + 0x70]
mov dword [rdx], eax
mov edx, 1
lea rcx, [rax*4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x60], rax
mov rbx, rax
test rax, rax
je 0x18001f9a0
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001f213
lea rax, [rsp + 0x58]
mov byte [rsp + 0x58], 1
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x48]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x121
mov r8, r15
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x68]
mov byte [rsp + 0x40], 2
mov rcx, r15
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x68], r12d
call fcn.18001c8f0
mov r9, qword [rsp + 0x50]
lea r8, [0x180000000]
mov rdx, qword [rbp - 0x80]
mov r10d, 0x36
mov r11d, 0x3833
mov ebx, 0x3239
jmp case.0x18001f131.102
mov dword [r9], r12d
jmp case.0x18001f131.102
mov dword [rbp - 0x38], 0x730077
jmp case.0x18001f131.102
mov word [0x18004cd82], r11w
jmp case.0x18001f131.102
mov eax, 0x32
mov dword [rbp - 0x32], 0x33005f
mov word [rbp - 0x34], ax
jmp case.0x18001f131.102
mov eax, 0x33
mov word [0x18004cd70], ax
jmp case.0x18001f131.102
mov eax, 0x32
mov word [0x18004cd81], ax
jmp case.0x18001f131.102
mov eax, 0x34
mov word [0x18004cd84], ax
mov eax, 0x32
mov word [0x18004cd85], r10w
mov word [0x18004cd86], ax
jmp case.0x18001f131.102
mov esi, dword [0x18003cb1c]
mov dword [rsp + 0x60], esi
jmp case.0x18001f131.102
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001f791
mov ebx, 0x45
mov eax, ebx
sub eax, 0x44
je 0x18001f77e
cmp eax, 1
jne 0x18001f78a
movzx edx, byte [0x18003cbb1]
mov ecx, 0x4f
mov eax, ecx
sub eax, 0x4c
je 0x18001f752
sub eax, 1
je 0x18001f75c
cmp eax, 2
jne 0x18001f755
mov byte [0x18003900c], 0x2b
jmp 0x18001f755
or dl, 2
inc ecx
cmp ecx, 0x52
jb 0x18001f738
mov byte [0x18003cbb1], dl
lea r8, [rsp + 0x68]
mov rdx, r15
mov dword [rsp + 0x68], r12d
mov r9, r15
mov ecx, 0x5d
call fcn.180007790
jmp 0x18001f78a
xor edx, edx
mov ecx, 0xcb
call fcn.18002b650
dec ebx
cmp ebx, 0x43
ja 0x18001f720
mov r9, qword [rsp + 0x50]
mov ebx, r12d
mov dword [rsp + 0x70], ebx
mov qword [rbp - 0x58], r9
cmp byte [r9], 0
je 0x18001f991
nop dword [rax + rax]
mov edx, 0x5b
mov rcx, r9
call sub.VCRUNTIME140.dll_strchr
mov qword [rbp - 0x68], rax
mov rcx, rax
test rax, rax
je 0x18001f983
mov r14d, 0x67
mov dword [rsp + 0x48], r14d
nop dword [rax + rax]
mov eax, r14d
sub eax, 0x66
je 0x18001f975
cmp eax, 1
jne 0x18001f937
inc rcx
lea edx, [rax + 0x5c]
call sub.VCRUNTIME140.dll_strchr
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x18001f97d
mov esi, 0x8a
mov eax, esi
sub eax, 0x88
je 0x18001fc41
sub eax, 1
je 0x18001f91d
cmp eax, 1
jne 0x18001f921
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001f921
mov r14d, dword [rsp + 0x60]
mov edi, 0x3d
nop dword [rax + rax]
mov eax, edi
sub eax, 0x3d
je 0x18001f8fa
cmp eax, 0x78
jne 0x18001f907
cmp r14d, dword [0x18003cb1c]
je 0x18001f8c6
mov ebx, 0x5a
mov eax, ebx
sub eax, 0x5a
je 0x18001f8b3
sub eax, 1
je 0x18001f89c
cmp eax, 1
jne 0x18001f8bf
mov dword [0x18003cb1c], r14d
jmp 0x18001f8bf
xor r9d, r9d
lea rcx, str.kwiLizwe_leBritish_Indian_Ocean
mov r8, r15
mov rdx, r15
call fcn.18002cfd0
jmp 0x18001f8bf
lea rcx, str.std._Builder_char_const__char_std::regex_traits_char___._Add_named_class
call fcn.18002cfd0
inc ebx
cmp ebx, 0x5d
jb 0x18001f882
lea rax, str.get_HasOperandSideEffect
mov dword [rsp + 0x68], r12d
mov r9d, 0xda
mov qword [0x18003cb60], rax
lea r8, [rsp + 0x68]
mov qword [rsp + 0x20], r15
lea rdx, str.VmodlVimAlarmAlarmAction
mov rcx, r15
call fcn.1800186f0
jmp 0x18001f907
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
add edi, 0x78
cmp edi, 0x12d
jb 0x18001f860
mov r14d, dword [rsp + 0x48]
jmp 0x18001f921
mov qword [rbp - 0x78], r12
dec esi
cmp esi, 0x87
ja 0x18001f813
mov ebx, dword [rsp + 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, qword [rsp + 0x78]
dec r14d
mov dword [rsp + 0x48], r14d
cmp r14d, 0x65
ja 0x18001f7e0
cmp byte [rax + 1], 0
lea r9, [rax + 1]
mov qword [rsp + 0x50], r9
jne 0x18001f7b0
mov r14d, dword [rsp + 0x74]
mov r13d, 0x76
mov esi, dword [rsp + 0x60]
jmp 0x18001f218
inc ebx
mov dword [rsp + 0x70], ebx
jmp 0x18001f937
mov rcx, qword [rbp - 0x68]
jmp 0x18001f93c
mov r9, qword [rsp + 0x50]
mov r14d, dword [rsp + 0x74]
mov esi, dword [rsp + 0x60]
mov r13d, 0x76
jmp 0x18001f218
mov r8d, 0xe
lea rdx, str.RTMFPTURNProxy
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, 0x34
mov qword [rbp - 0x78], r8
mov word [0x18004cd88], ax
mov eax, 0x33
mov word [0x18004cd89], ax
jmp 0x18001fc16
mov eax, 0x32
mov word [rbp - 0x2e], ax
jmp 0x18001fc16
mov r9d, ILFree
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18001f090
mov r9, qword [rsp + 0x50]
mov qword [r9 + 0xb8], rax
movabs rax, 0x4051f33333333333
mov qword [r9 + 0xa8], rax
jmp 0x18001fc16
cmp edi, 0x8ff8
je 0x18001fa6e
cmp edi, 0xd7b0
je 0x18001fa4a
cmp edi, 0x11f68
jne 0x18001fc16
xor eax, eax
mov word [rbp - 0x12], ax
jmp 0x18001fc16
movsd xmm0, qword [0x180030cb6]
movzx eax, word [0x180030cbe]
movsd qword [rbp - 0x1c], xmm0
mov word [rbp - 0x14], ax
mov dword [rbp - 0x20], 0x730077
jmp 0x18001fc16
mov dword [rbp - 0x26], 0x6c
jmp 0x18001fc16
mov word [rbp - 0x12], ax
mov dword [rbp - 0x10], 0x6c006c
jmp 0x18001fc16
cmp edi, 0x28600
ja 0x18001fb53
je 0x18001fb33
cmp edi, 0x1aed8
je 0x18001fb0b
cmp edi, 0x1f690
je 0x18001fada
cmp edi, 0x23e48
jne 0x18001fc16
call qword [sym.imp.WINMM.dll_midiOutGetNumDevs]
mov rdx, qword [rbp - 0x80]
mov r11d, 2
mov r12d, eax
mov word [rbp - 0x48], r11w
mov ecx, dword [rdx]
mov dword [rbp - 0x44], ecx
jmp 0x18001fc11
xor r9d, r9d
lea rdx, [rbp - 0x20]
lea r8d, [r9 + 9]
lea ecx, [r9 + 0x4f]
call fcn.1800225b0
mov rdx, qword [rsp + 0x50]
xor r8d, r8d
mov ecx, 0x128
mov qword [rbp - 0x58], rax
call fcn.180024c90
test al, al
jmp 0x18001fc0f
xor eax, eax
lea rdx, [rbp - 0x38]
xor r9d, r9d
mov word [rbp - 0xc], ax
lea r8d, [rax + 4]
lea ecx, [rax + 0x4f]
call fcn.1800225b0
mov r13, rax
mov qword [rbp - 0x60], rax
mov sil, 1
jmp 0x18001fc11
movzx ecx, word [rcx]
call qword [rbp - 0x58]
mov word [rbp - 0x46], ax
xor eax, eax
mov ecx, eax
test r12d, r12d
movzx eax, sil
cmovne ecx, eax
movzx esi, cl
jmp 0x18001fc11
cmp edi, 0x2cdb8
je 0x18001fbfc
cmp edi, 0x31570
je 0x18001fb78
cmp edi, 0x35d28
je 0x18001fc41
jmp 0x18001fc16
test sil, sil
je 0x18001fbf6
mov ebx, reloc.SHELL32.dll_ILAppendID
xor r13d, r13d
mov eax, ebx
sub eax, 0x97
je 0x18001fbcc
sub eax, 1
je 0x18001fbba
sub eax, 1
je 0x18001fba2
cmp eax, 1
jne 0x18001fbe4
mov r15, r13
jmp 0x18001fbe4
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x68], r13d
mov rcx, r15
call qword [sym.imp.WINMM.dll_midiOutGetID]
mov r14d, eax
jmp 0x18001fbe4
movzx eax, sil
test r14d, r14d
mov ecx, r13d
cmovne ecx, eax
movzx esi, cl
jmp 0x18001fbe4
test sil, sil
je 0x18001fbe4
mov r8d, 0x104
lea rdx, [rbp]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_midiOutGetErrorTextW]
dec ebx
cmp ebx, 0x96
ja 0x18001fb85
mov r13, qword [rbp - 0x60]
mov ebx, dword [rsp + 0x48]
mov byte [rbp - 0x78], 1
jmp 0x18001fc11
mov rcx, qword [r9]
lea rdx, [rbp - 0x48]
mov r8d, 0x10
call r13
cmp eax, 0xffffffff
je 0x18001fc3d
mov r9, qword [rsp + 0x50]
imul eax, dword [rsp + 0x74], 0x87
lea r8, [0x18004cd70]
mov rcx, qword [rbp - 0x50]
mov edx, 0x2e
add edi, eax
lea eax, [rdx + 0x36]
cmp edi, ebx
jbe 0x18001f540
jmp 0x18001fc41
mov byte [rbp - 0x78], 0
mov rax, qword [rbp - 0x78]
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.18002d670
mov rbx, qword [rsp + 0x378]
add rsp, 0x320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret