Function at 0x18005f610
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1800c37a8]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r13d, dword [rsp + 0x70]
lea r10, [0x180000000]
movzx edi, byte [rsp + 0x60]
mov eax, r8d
mov ebx, dword [rsp + 0x70]
mov r8, rdx
mov qword [rsp + 0x78], rdx
mov r15, r9
mov rdx, qword [rbp + 0x290]
mov r14d, eax
mov qword [rbp - 0x48], r9
mov r9, rcx
mov qword [rbp - 0x50], rdx
mov dword [rbp - 0x5c], eax
mov qword [rbp - 0x80], rcx
mov dword [rsp + 0x68], eax
nop dword [rax]
nop word [rax + rax]
imul eax, eax, 0xe6
cmp r14d, eax
ja 0x1800600e2
cmp r14d, 0x3f0
ja 0x18005fa63
je 0x1800600e2
cmp r14d, 0x12
je 0x18005f9eb
cmp r14d, 0x2a
je 0x18005f766
cmp r14d, 0x34
je 0x18005f757
cmp r14d, 0x1b0
je 0x18005f723
cmp r14d, 0x34e
jne 0x180060033
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], r9
mov r9, r8
mov r8, rdx
mov byte [rsp + 0x60], dil
mov edx, 0xb0
call fcn.1800909e0
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
mov r9, qword [rbp - 0x80]
jmp 0x180060033
mov eax, dword [rbp - 0x68]
lea rdx, [rsp + 0x60]
add r8, 0x202c
mov byte [rsp + 0x60], al
mov ecx, 0xd3
call fcn.1800556d0
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
mov r9, qword [rbp - 0x80]
mov edi, eax
jmp 0x180060033
mov dword [0x1800c62a8], 0
jmp 0x180060033
mov ecx, dword [r8]
mov eax, dword [0x1800c3b1c]
bt eax, ecx
jae 0x18005f77a
mov r14d, PathMakeUniqueName
mov esi, 0x22
nop
cmp esi, 0x26
jae 0x18005f9e0
mov eax, esi
sub eax, 0x22
je 0x18005f8b9
sub eax, 1
je 0x18005f881
sub eax, 1
je 0x18005f83d
cmp eax, 1
jne 0x18005f9cd
movsxd rax, dword [r8]
lea rcx, [rax + rax*8]
mov rax, qword [rbp - 0x58]
mov qword [r10 + rcx*8 + 0xc14d0], rax
movsxd rax, dword [r8]
lea rcx, [rax + rax*8]
cmp dword [r10 + rcx*8 + 0xc1510], 0xffffffff
je 0x18005f9cd
mov edx, 0xc2
nop dword [rax]
mov eax, edx
sub eax, 0xc2
je 0x18005f80e
sub eax, 1
je 0x18005f7f9
cmp eax, 1
je 0x18005f774
jmp 0x18005f820
movsxd rax, dword [r8]
lea rcx, [rax + rax*8]
mov dword [r10 + rcx*8 + 0xc1510], 0xffffffff
jmp 0x18005f820
movsxd rax, dword [r8]
lea rcx, [rax + rax*8]
mov eax, dword [r10 + rcx*8 + 0xc1510]
mov dword [r8], eax
inc edx
cmp edx, 0xc5
jb 0x18005f7e0
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
inc esi
jmp 0x18005f780
mov r9, qword [rbp - 0x58]
test r9, r9
je 0x18006004b
lea rax, [rbp + 0x1d0]
mov rdx, r9
sub rdx, rax
lea rcx, [rbp + 0x1d0]
nop
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x18005f860
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
inc esi
jmp 0x18005f780
lea rax, [rbp + 0x1d0]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], 0
jne 0x18005f890
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
mov qword [rbp - 0x58], rax
inc esi
jmp 0x18005f780
mov r9d, dword [r15]
cmp r9d, 0xffffffff
je 0x18005f8f7
movsxd rax, dword [r8]
lea rdx, str._s._d
lea rcx, [rbp + 0x1d0]
lea r8, [rax + rax*8]
mov r8, qword [r10 + r8*8 + 0xc14d0]
call fcn.1800a0e90
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
inc esi
jmp 0x18005f780
mov ebx, 0x73
nop dword [rax]
cmp ebx, 0x73
je 0x18005f994
cmp ebx, 0x12c
je 0x18005f943
cmp ebx, 0x1e5
jne 0x18005f9bb
lea rcx, [rbp + 0x1d0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x18005f930
test rax, rax
jne 0x18005f9bb
jmp 0x1800600e4
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov edx, 0x50
lea rcx, [rbp + 0x1d0]
mov r8, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x18006007b
mov edx, 0xa
lea rcx, [rbp + 0x1d0]
call sub.VCRUNTIME140.dll_strchr
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x18005f9bb
mov byte [rax], 0
jmp 0x18005f9bb
movsxd rax, dword [r8]
lea rcx, str.ERROR_STATE_DELETE_CONTAINER_FAILED
lea rdx, [rax + rax*8]
mov rdx, qword [r10 + rdx*8 + 0xc14d0]
call fcn.1800a0e30
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
add ebx, 0xb9
cmp ebx, 0x29e
jb 0x18005f900
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
inc esi
jmp 0x18005f780
mov r9, qword [rbp - 0x80]
xor ebx, ebx
jmp 0x180060033
mov eax, dword [r15]
lea rdx, [0x1800a4310]
mov qword [rsp + 0x50], 0
mov r9, r8
mov dword [rsp + 0x48], 0xf1
xor r8d, r8d
mov qword [rsp + 0x40], 0
xor ecx, ecx
mov qword [rsp + 0x38], 0
mov dword [rbp - 0x68], eax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call fcn.18008b2a0
mov dword [rbp - 0x68], eax
test eax, eax
jl 0x1800600e2
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
mov r9, qword [rbp - 0x80]
jmp 0x180060033
cmp r14d, 0x4e0
je 0x180060022
cmp r14d, 0x98c
je 0x18006001a
cmp r14d, 0xe38
je 0x18005ffea
cmp r14d, 0x12e4
jne 0x180060033
cmp dword [0x1800c62ac], 0
jne 0x18005fb0c
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [0x1800c5f10], rax
test rax, rax
je 0x1800600b2
xor r14d, r14d
lea rsi, [0x1800c5f60]
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsi], rax
test rax, rax
je 0x180060082
inc r14d
add rsi, 0x78
cmp r14d, 7
jl 0x18005fac5
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
mov r9, qword [rbp - 0x80]
mov r14d, dword [rsp + 0x68]
mov rdx, qword [rbp - 0x50]
mov dword [0x1800c62ac], 1
cmp dword [rdx], 0
mov r12d, dword [r15]
je 0x18005ffcb
nop dword [rax + rax]
mov r15d, PathMakeUniqueName
nop word [rax + rax]
lea eax, [r15 - 0x2e]
mov r14d, r13d
cmp eax, 5
ja case.default.0x18005fb4b
mov ecx, dword [r10 + rax*4 + 0x60110]
add rcx, r10
jmp rcx
mov eax, dword [r8]
lea rcx, [rbp - 0x78]
mov r8d, 0xa0
mov dword [rbp - 0x78], eax
xor edx, edx
call fcn.18003c380
cmp dword [0x1800c3b3c], 0
je case.default.0x18005fb4b
mov r14, qword [rsp + 0x78]
lea r9, [0x180000000]
movsxd rax, dword [r14]
lea rcx, [rax + rax*8]
mov eax, r12d
cdq
idiv dword [r9 + rcx*8 + 0xc14e0]
cmp edx, 2
jge case.default.0x18005fb4b
mov rdx, qword [r9 + rcx*8 + 0xc14d8]
mov r8d, r12d
lea rcx, str.Empty_skip_map_for_format_0x10
call fcn.1800a0e30
mov eax, dword [r14]
lea r8, [rbp - 0x78]
xor edx, edx
mov dword [rbp - 0x78], eax
mov ecx, 0xee
call fcn.180030c30
jmp case.default.0x18005fb4b
mov ecx, dword [r8]
test ecx, ecx
je 0x18005fed0
sub ecx, 2
je 0x18005fda2
sub ecx, 1
je 0x18005fe3e
sub ecx, 1
je 0x18005fd0e
cmp ecx, 1
jne case.default.0x18005fb4b
mov esi, 0x6e
nop
mov eax, esi
sub eax, 0x6e
je 0x18005fcac
sub eax, 0x52
je 0x18005fc1e
cmp eax, 0x52
je case.0x18005fb4b.49
jmp 0x18005fcf6
cmp dword [0x1800c3b44], 0
je 0x18005fc61
mov ecx, dword [r9]
test ecx, ecx
jle 0x18005fc61
mov eax, 0x68db8bad
inc r13d
imul ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, dword [rbp - 0x60]
jge 0x18005fc4f
cmp r13d, dword [rbp - 0x70]
jle 0x18005fc61
jmp 0x18005fc55
cmp r13d, dword [rbp - 0x70]
jl 0x18005fc61
lea eax, [rcx + 0x2710]
xor r13d, r13d
mov dword [r9], eax
cmp dword [0x1800c3b3c], 0
jne 0x18005fcf6
cmp dword [0x1800c3b40], 0
lea rcx, [0x1800c5f10]
movsxd rax, dword [r8]
je 0x18005fc91
lea rax, [rax + rax*8]
xor edx, edx
call qword [r10 + rax*8 + 0xc1508]
jmp 0x18005fcea
mov edx, dword [r9]
lea r8, [rax + rax*8]
movsxd rax, dword [0x1800c3b14]
add r8, rax
call qword [r10 + r8*8 + 0xc14f0]
jmp 0x18005fcea
mov ecx, dword [r9]
lea r8, [rsp + 0x70]
mov eax, 0x68db8bad
mov dword [rbp - 0x78], r12d
imul ecx
lea r9, [rbp - 0x78]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x2710
lea rdx, [0x1800c5f10]
sub ecx, eax
mov dword [rsp + 0x70], ecx
mov ecx, 0x36
call fcn.180060900
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
add esi, 0x52
cmp esi, 0x164
jae 0x18005fda2
mov r9, qword [rbp - 0x80]
jmp 0x18005fc00
mov esi, 0x76
nop dword [rax]
nop word [rax + rax]
mov eax, esi
mov r13d, r14d
sub eax, 0x74
je case.0x18005fb4b.49
sub eax, 1
je 0x18005fd50
cmp eax, 1
jne 0x18005fd96
lea r8, [rsp + 0x70]
mov dword [rsp + 0x70], r12d
lea rdx, [rbp - 0x40]
lea ecx, [rax + 0x30]
call fcn.180040ad0
jmp 0x18005fd8a
cmp dword [0x1800c3b3c], 0
jne 0x18005fd96
movsxd rax, dword [r8]
lea rcx, [rbp - 0x40]
xor edx, edx
cmp dword [0x1800c3b40], edx
lea r8, [rax + rax*8]
je 0x18005fd78
call qword [r10 + r8*8 + 0xc1508]
jmp 0x18005fd8a
movsxd rax, dword [0x1800c3b14]
add r8, rax
call qword [r10 + r8*8 + 0xc14f0]
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
dec esi
cmp esi, 0x73
ja 0x18005fd20
jmp case.default.0x18005fb4b
mov r14, qword [rsp + 0x78]
mov esi, 0xa0
mov r15, qword [rbp - 0x80]
mov eax, esi
sub eax, 0xa0
je 0x18005fdc4
cmp eax, 1
je case.0x18005fb4b.49
jmp 0x18005fe2e
xor edx, edx
mov dword [rsp + 0x70], r12d
lea r9, [rsp + 0x70]
lea r8, [rbp + 0xb0]
lea ecx, [rdx + 0x78]
call fcn.18001b9c0
cmp dword [0x1800c3b3c], 0
jne 0x18005fe2e
cmp dword [0x1800c3b40], 0
lea rcx, [rbp + 0xb0]
movsxd rax, dword [r14]
lea r8, [rax + rax*8]
je 0x18005fe12
xor edx, edx
lea rax, [0x180000000]
call qword [rax + r8*8 + 0xc1508]
jmp 0x18005fe2e
movsxd rax, dword [0x1800c3b14]
mov edx, dword [r15]
add r8, rax
lea rax, [0x180000000]
call qword [rax + r8*8 + 0xc14f0]
inc esi
cmp esi, 0xa2
jb 0x18005fdb0
jmp 0x18005fe47
mov r14, qword [rsp + 0x78]
mov r15, qword [rbp - 0x80]
mov esi, 0x27
nop dword [rax]
cmp esi, 0x27
je 0x18005fea1
cmp esi, 0xd5
jne 0x18005febd
cmp dword [0x1800c3b3c], 0
jne case.0x18005fb4b.49
lea rcx, [rbp + 0x130]
cmp dword [0x1800c3b40], 0
movsxd rax, dword [r14]
je 0x18005ff04
lea rax, [rax + rax*8]
xor edx, edx
lea r8, [0x180000000]
call qword [r8 + rax*8 + 0xc1508]
mov r15d, 0x31
jmp case.default.0x18005fb4b
mov r8d, 0x24
mov dword [rsp + 0x70], r12d
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x70]
call fcn.180069d20
add esi, 0xae
cmp esi, 0x183
jb 0x18005fe50
jmp 0x18005fed9
mov r14, qword [rsp + 0x78]
mov r15, qword [rbp - 0x80]
mov r8d, 0xf2
mov dword [rsp + 0x70], r12d
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.18009ad20
cmp dword [0x1800c3b3c], 0
jne case.0x18005fb4b.49
lea rcx, [rbp + 0x30]
jmp 0x18005fe71
mov edx, dword [r15]
lea r8, [rax + rax*8]
movsxd rax, dword [0x1800c3b14]
add r8, rax
lea rax, [0x180000000]
call qword [rax + r8*8 + 0xc14f0]
mov r15d, 0x31
jmp case.default.0x18005fb4b
mov r14d, 0x12e4
mov dword [rsp + 0x68], r14d
jmp 0x18005ff91
cmp dword [0x1800c3b04], 0
jle case.default.0x18005fb4b
mov eax, r12d
and eax, 0x80000003
jge 0x18005ff53
dec eax
or eax, 0xfffffffc
inc eax
cdqe
mov ecx, 2
movsx esi, byte [rax + r10 + 0xc0000]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, esi
lea rdx, [0x1800b4768]
mov rcx, rax
call fcn.1800a0de0
jmp case.default.0x18005fb4b
lea rdx, [rsp + 0x70]
mov ecx, 0x1b
call fcn.180049070
mov r14d, dword [rsp + 0x68]
mov r8, qword [rsp + 0x78]
lea r10, [0x180000000]
mov r9, qword [rbp - 0x80]
inc r15d
cmp r15d, 0x34
jb 0x18005fb30
mov rdx, qword [rbp - 0x50]
lea r10, [0x180000000]
inc r12d
dec dword [rdx]
cmp dword [rdx], 0
jne 0x18005fb20
mov r15, qword [rbp - 0x48]
mov ecx, dword [0x1800c62a8]
lea r10, [0x180000000]
mov eax, dword [r8]
bts ecx, eax
mov r9, qword [rbp - 0x80]
mov dword [0x1800c62a8], ecx
jmp 0x180060033
mov ecx, dword [0x1800c3b44]
mov dword [rbp - 0x60], 0
test ecx, ecx
je 0x180060033
mov r10d, dword [rdx]
mov eax, r10d
cdq
idiv ecx
imul ecx, eax
mov dword [rbp - 0x70], eax
sub r10d, ecx
mov dword [rbp - 0x60], r10d
lea r10, [0x180000000]
jmp 0x180060033
mov r13d, 0xffffffff
jmp 0x180060033
mov dword [0x1800c62ac], 0
mov dword [rbp - 0x70], 0
imul eax, dword [rbp - 0x5c], 0x17
mov rdx, qword [rbp - 0x50]
add r14d, eax
mov eax, dword [rbp - 0x5c]
mov dword [rsp + 0x68], r14d
jmp 0x18005f690
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x1800a3b9b]
mov rcx, rax
lea rdx, str.VigorSampleSetEnumValue
call fcn.1800a0de0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, 0xffffffff
jmp 0x1800600e4
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x1800a3b9b]
mov rcx, rax
lea rdx, str.::ResourceUsageReporter
call fcn.1800a0de0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x1800a3b9b]
mov rcx, rax
lea rdx, str.ms_after_last_activity.
call fcn.1800a0de0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, ebx
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1800a1820
mov rbx, qword [rsp + 0x380]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret