Function at 0x180001c90
Capabilities:
Allocate or change rwx memory
Link many functions at runtime
Terminate process

Disassembly:
sub rsp, 0x58
mov rax, qword [0x180011058]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rcx, qword [0x1800146a8]
test rcx, rcx
jne 0x180001cc9
call fcn.180001bd0
test eax, eax
jne 0x180001cc2
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000cf98]
mov qword [rsp + 0x50], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001d0c
lea rcx, [0x18000cf98]
shr rcx, 0x10
test cx, cx
jne 0x180001d0c
lea r8, [0x18000cf98]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x1800146d0], rbx
test rcx, rcx
jne 0x180001d39
call fcn.180001bd0
test eax, eax
jne 0x180001d32
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000cfb0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001d77
lea rcx, [0x18000cfb0]
shr rcx, 0x10
test cx, cx
jne 0x180001d77
lea r8, [0x18000cfb0]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x1800146d8], rbx
test rcx, rcx
jne 0x180001da4
call fcn.180001bd0
test eax, eax
jne 0x180001d9d
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000cfd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001de2
lea rcx, [0x18000cfd0]
shr rcx, 0x10
test cx, cx
jne 0x180001de2
lea r8, [0x18000cfd0]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x1800146e0], rbx
test rcx, rcx
jne 0x180001e0f
call fcn.180001bd0
test eax, eax
jne 0x180001e08
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000cfe8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001e4d
lea rcx, [0x18000cfe8]
shr rcx, 0x10
test cx, cx
jne 0x180001e4d
lea r8, [0x18000cfe8]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x1800146e8], rbx
test rcx, rcx
jne 0x180001e7a
call fcn.180001bd0
test eax, eax
jne 0x180001e73
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d000]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001eb8
lea rcx, [0x18000d000]
shr rcx, 0x10
test cx, cx
jne 0x180001eb8
lea r8, [0x18000d000]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x1800146f0], rbx
test rcx, rcx
jne 0x180001ee5
call fcn.180001bd0
test eax, eax
jne 0x180001ede
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d018]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001f23
lea rcx, [0x18000d018]
shr rcx, 0x10
test cx, cx
jne 0x180001f23
lea r8, [0x18000d018]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x1800146f8], rbx
test rcx, rcx
jne 0x180001f50
call fcn.180001bd0
test eax, eax
jne 0x180001f49
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d038]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001f8e
lea rcx, [0x18000d038]
shr rcx, 0x10
test cx, cx
jne 0x180001f8e
lea r8, [0x18000d038]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014700], rbx
test rcx, rcx
jne 0x180001fbb
call fcn.180001bd0
test eax, eax
jne 0x180001fb4
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d058]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180001ff9
lea rcx, [0x18000d058]
shr rcx, 0x10
test cx, cx
jne 0x180001ff9
lea r8, [0x18000d058]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014708], rbx
test rcx, rcx
jne 0x180002026
call fcn.180001bd0
test eax, eax
jne 0x18000201f
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d070]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180002064
lea rcx, [0x18000d070]
shr rcx, 0x10
test cx, cx
jne 0x180002064
lea r8, [0x18000d070]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014710], rbx
test rcx, rcx
jne 0x180002091
call fcn.180001bd0
test eax, eax
jne 0x18000208a
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d088]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1800020cf
lea rcx, [0x18000d088]
shr rcx, 0x10
test cx, cx
jne 0x1800020cf
lea r8, [0x18000d088]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014718], rbx
test rcx, rcx
jne 0x1800020fc
call fcn.180001bd0
test eax, eax
jne 0x1800020f5
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d098]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x18000213a
lea rcx, [0x18000d098]
shr rcx, 0x10
test cx, cx
jne 0x18000213a
lea r8, [0x18000d098]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014720], rbx
test rcx, rcx
jne 0x180002167
call fcn.180001bd0
test eax, eax
jne 0x180002160
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d0a8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1800021a5
lea rcx, [0x18000d0a8]
shr rcx, 0x10
test cx, cx
jne 0x1800021a5
lea r8, [0x18000d0a8]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014728], rbx
test rcx, rcx
jne 0x1800021d2
call fcn.180001bd0
test eax, eax
jne 0x1800021cb
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d0b8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180002210
lea rcx, [0x18000d0b8]
shr rcx, 0x10
test cx, cx
jne 0x180002210
lea r8, [0x18000d0b8]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014730], rbx
test rcx, rcx
jne 0x18000223d
call fcn.180001bd0
test eax, eax
jne 0x180002236
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d0c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x18000227b
lea rcx, [0x18000d0c8]
shr rcx, 0x10
test cx, cx
jne 0x18000227b
lea r8, [0x18000d0c8]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014738], rbx
test rcx, rcx
jne 0x1800022a8
call fcn.180001bd0
test eax, eax
jne 0x1800022a1
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d0e0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1800022e6
lea rcx, [0x18000d0e0]
shr rcx, 0x10
test cx, cx
jne 0x1800022e6
lea r8, [0x18000d0e0]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014740], rbx
test rcx, rcx
jne 0x180002313
call fcn.180001bd0
test eax, eax
jne 0x18000230c
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d0f8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x180002351
lea rcx, [0x18000d0f8]
shr rcx, 0x10
test cx, cx
jne 0x180002351
lea r8, [0x18000d0f8]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [0x1800146a8]
mov qword [0x180014748], rbx
test rcx, rcx
jne 0x18000237e
call fcn.180001bd0
test eax, eax
jne 0x180002377
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1800146a8]
lea rdx, [0x18000d108]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1800023bc
lea rcx, [0x18000d108]
shr rcx, 0x10
test cx, cx
jne 0x1800023bc
lea r8, [0x18000d108]
lea rdx, [0x18000cf90]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_wsprintfA]
mov qword [0x180014750], rbx
lea rdx, [0x1800146d0]
lea rcx, [0x180014761]
lea r8, [0x180014758]
nop dword [rax + rax]
mov rax, qword [rdx]
add rdx, 8
mov byte [rcx - 1], 0x48
mov byte [rcx], 0xb8
mov byte [rcx + 9], 0xff
mov byte [rcx + 0xa], 0xe0
mov qword [rcx + 1], rax
add rcx, 0xc
cmp rdx, r8
jl 0x1800023e0
lea r9, [rsp + 0x20]
lea rcx, [0x180014760]
mov edx, 0xcc
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.180004310
add rsp, 0x58
ret