Function at 0x18002ea10
Capabilities:
Terminate process

Disassembly:
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x118]
sub rsp, 0x218
mov rax, qword [0x180183c70]
xor rax, rsp
mov qword [rbp + 0x108], rax
mov rax, qword [rbp + 0x180]
xor r15d, r15d
mov qword [rsp + 0x68], rax
mov r13, r9
mov rax, qword [rbp + 0x188]
mov ebx, ecx
mov qword [rsp + 0x70], rax
mov edi, ecx
mov rax, qword [rbp + 0x190]
mov qword [rsp + 0x58], rax
imul eax, ecx, 0x9b3
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x60], r8
mov qword [rbp - 0x80], r9
mov dword [rsp + 0x44], ecx
cmp ecx, eax
ja 0x18002ed9d
mov rsi, qword [rsp + 0x50]
mov r14d, 0x6553
nop dword [rax]
cmp edi, 0xbf4
ja 0x18002eca6
je 0x18002ec9a
cmp edi, 0x300
ja 0x18002ec2e
je 0x18002ec22
mov eax, edi
sub eax, 4
je 0x18002ec15
sub eax, 0x19
je 0x18002ebf3
cmp eax, 0x79
jne 0x18002ed83
mov ecx, 0xd0
mov dword [r13 + 0x128], 1
mov rax, qword [0x1801d5a20]
mov edx, ecx
mov dword [rsp + 0x40], ecx
nop
cmp edx, 0xd0
je 0x18002ebc3
cmp edx, 0x150
je 0x18002eb2f
cmp edx, 0x1d0
jne 0x18002ebcb
mov rax, rsi
mov qword [0x1801d5a20], rax
jmp 0x18002ebcb
lea rax, [rbp - 0x50]
mov rdx, rsp
lea rcx, [rbp - 0x50]
mov qword [0x1801d5a20], rax
call sub.VCRUNTIME140.dll___intrinsic_setjmp
test eax, eax
jne 0x18002eb90
mov rax, qword [rsp + 0x68]
mov r8, qword [rsp + 0x60]
mov r9, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rax]
mov rax, qword [rsp + 0x70]
mov r8, qword [r8]
mov qword [rsp + 0x28], rcx
mov ecx, dword [rax]
mov dword [rsp + 0x20], ecx
mov ecx, 1
call fcn.1800eba40
mov ecx, dword [rsp + 0x40]
mov rax, qword [0x1801d5a20]
mov rsi, qword [rsp + 0x50]
jmp 0x18002ebcb
mov rsi, qword [rsp + 0x50]
mov ecx, 0x42
mov rax, qword [0x1801d5a20]
cmp ecx, 0x42
cmove rax, rsi
add ecx, 0x1188
cmp ecx, 0x2310
jbe 0x18002eba1
mov ecx, dword [rsp + 0x40]
mov qword [0x1801d5a20], rax
jmp 0x18002ebcb
mov rsi, rax
mov qword [rsp + 0x50], rax
sub ecx, 0xffffff80
mov dword [rsp + 0x40], ecx
mov edx, ecx
cmp ecx, 0x250
jb 0x18002eb00
mov ebx, dword [rbp + 0x160]
mov edi, dword [rsp + 0x44]
mov r13, qword [rbp - 0x80]
jmp 0x18002ed83
add dword [r13], 0xffffffff
jne 0x18002f00d
mov r9, r13
xor r8d, r8d
mov edx, 0x15d
xor ecx, ecx
call fcn.1800736d0
jmp 0x18002ed83
mov word [rbp + 0xc8], r14w
jmp 0x18002ed83
mov byte [rbp + 0xca], r15b
jmp 0x18002ed83
cmp edi, 0x5fc
je 0x18002ec61
cmp edi, 0x8f8
jne 0x18002ed83
mov r8d, 4
lea rdx, [0x180171ceb]
lea rcx, [rbp + 0xc8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18002ed83
mov r8d, 4
lea rdx, [0x180171be5]
lea rcx, [rbp + 0xc8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x180171c2c]
lea rcx, [rbp + 0xc8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18002ed83
mov byte [rbp + 0xd3], 0x73
jmp 0x18002ed83
cmp edi, 0x17e4
ja 0x18002ed45
je 0x18002ed3b
cmp edi, 0xef0
je 0x18002ed32
cmp edi, 0x11ec
je 0x18002ed0e
cmp edi, 0x14e8
jne 0x18002ed83
mov r8d, 4
lea rdx, [0x180171c6e]
lea rcx, [rbp + 0xd8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movsd xmm0, qword [0x180171c88]
movzx eax, word [0x180171c90]
movsd qword [rbp + 0xe2], xmm0
mov word [rbp + 0xea], ax
jmp 0x18002ed83
mov r8d, 1
lea rdx, [0x180171cac]
lea rcx, [rbp + 0xd8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0xda], r15w
jmp 0x18002ed83
mov byte [rbp + 0xd4], r15b
jmp 0x18002ed83
mov word [rbp + 0xec], r15w
jmp 0x18002ed83
cmp edi, 0x7080
je 0x18002ed61
cmp edi, 0xe06a
jne 0x18002ed83
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r8, [0x1801625c5]
mov dword [r13 + 0x128], r15d
mov edx, 0x104
mov dword [rsp + 0x48], r15d
lea rcx, [rsp + 0x48]
call fcn.1800a47e0
imul eax, ebx, 0xbf
add edi, eax
imul eax, ebx, 0x9b3
mov dword [rsp + 0x44], edi
cmp edi, eax
jbe 0x18002eaa0
imul esi, ebx, 0x324
cmp ebx, esi
ja 0x18002f00d
mov rdi, qword [rbp - 0x78]
mov ecx, 0x64
mov r14, qword [rbp - 0x70]
mov r11d, 0x7463
imul r15d, ebx, 0x43
lea edx, [rcx + 6]
lea eax, [rcx - 0x12]
lea r12d, [rcx - 0x23]
lea r8d, [rcx + 0xb]
lea r9d, [rcx + 0x13]
lea r10d, [rcx + 1]
nop dword [rax + rax]
cmp ebx, 0x64c
ja 0x18002eebf
je 0x18002ee98
cmp ebx, 0x328
ja 0x18002ee63
je 0x18002ee4e
cmp ebx, 4
je 0x18002ee41
cmp ebx, 0x110
je 0x18002ee2e
cmp ebx, 0x21c
jne 0x18002f002
mov dword [rbp + 0xb3], 0x57747375
mov dword [rbp + 0xb7], 0x646e69
jmp 0x18002f002
mov word [rbp + 0xb1], cx
mov word [rbp + 0xb2], dx
jmp 0x18002f002
mov word [rbp + 0xb0], r12w
jmp 0x18002f002
mov word [rbp + 0xba], r8w
mov word [rbp + 0xbb], r9w
jmp 0x18002f002
cmp ebx, 0x434
je 0x18002ee8c
cmp ebx, 0x540
jne 0x18002f002
mov word [rbp + 0xbd], r10w
mov word [rbp + 0xbe], r11w
jmp 0x18002f002
mov word [rbp + 0xbc], ax
jmp 0x18002f002
mov r12d, 0x45
mov word [rbp + 0xc0], r12w
mov r12d, 0x78
mov word [rbp + 0xc1], r12w
mov r12d, 0x41
jmp 0x18002f002
cmp ebx, 0x758
je 0x18002efe3
cmp ebx, 0x864
je 0x18002ef9f
cmp ebx, 0x970
je 0x18002ef7a
cmp ebx, 0xa7c
je 0x18002ef53
cmp ebx, 0xb88
jne 0x18002f002
mov r9d, dword [r13 + 0x254]
lea rcx, [rbp - 0x68]
mov edx, dword [r13 + 0x250]
xor r8d, r8d
call rdi
mov r9d, dword [rbp - 0x64]
xor eax, eax
mov r8d, dword [rbp - 0x68]
xor edx, edx
mov rcx, qword [r13 + 0x248]
mov dword [rsp + 0x30], 0x15
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
call r14
mov ecx, 0x64
mov r11d, 0x7463
lea edx, [rcx + 6]
lea r8d, [rcx + 0xb]
lea r9d, [rcx + 0x13]
lea r10d, [rcx + 1]
jmp 0x18002effd
mov rax, qword [rsp + 0x58]
mov edx, dword [rax]
mov rax, qword [rsp + 0x60]
mov ecx, dword [rax]
mov dword [rbp - 0x64], ecx
mov dword [rbp - 0x5c], ecx
mov ecx, 0x64
mov dword [rbp - 0x68], edx
mov dword [rbp - 0x60], edx
lea edx, [rcx + 6]
jmp 0x18002effd
mov r9d, 0x110
lea rdx, [rbp + 0xb0]
xor r8d, r8d
lea rcx, [rbp + 0xf0]
call fcn.18002fce0
mov rdi, rax
mov qword [rbp - 0x78], rax
jmp 0x18002ef34
movups xmm0, xmmword [str.er32.dll]
movzx eax, word [0x180171d10]
lea rdx, [rbp + 0xc8]
mov r9d, 0x110
mov word [rbp + 0x104], ax
xor r8d, r8d
lea rcx, [rbp + 0xd8]
movups xmmword [rbp + 0xf4], xmm0
call fcn.18002fce0
mov r14, rax
mov qword [rbp - 0x70], rax
jmp 0x18002ef34
mov eax, dword [0x180166000]
mov dword [rbp + 0xf0], eax
movzx eax, word [0x180166004]
mov word [rbp + 0xf4], ax
mov eax, 0x52
add ebx, r15d
cmp ebx, esi
jbe 0x18002ede0
mov rcx, qword [rbp + 0x108]
xor rcx, rsp
call fcn.18015c4c0
add rsp, 0x218
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret