Function at 0x1800200f0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov r13, qword [rbp - 0x10]
lea r15d, [r9 + 0xe]
mov ebx, dword [rbp + 0x58]
mov esi, r9d
lea r9, [0x180000000]
mov r14, rcx
cmp esi, r15d
jae 0x180020241
mov r12d, dword [rbp + 0x58]
lea edi, [rsi - 0x88]
xor r10d, r10d
nop
cmp edi, 0x1d
ja case.0x18002015d.10
movzx eax, byte [r9 + rdi + 0x20658]
mov ecx, dword [r9 + rax*4 + 0x2062c]
add rcx, r9
jmp rcx
mov eax, dword [r14]
test dword [rbp - 0x1c], eax
je 0x180020178
test r12d, r12d
je 0x180020178
mov dword [rbp - 0x20], 1
jmp case.0x18002015d.10
mov dword [rbp - 0x20], r10d
jmp case.0x18002015d.10
mov qword [rsp + 0x28], r10
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], r10
xor ecx, ecx
mov r8d, 0xbe
call fcn.180052fc0
mov r13, rax
mov r8, qword [rbp + 0x50]
lea r9, [0x180000000]
mov rdx, qword [rbp + 0x48]
xor r10d, r10d
jmp case.0x18002015d.10
mov dword [rbp - 0x20], r10d
mov dword [rbp - 0x1c], r10d
jmp case.0x18002015d.10
mov r12d, r10d
jmp case.0x18002015d.10
lea rax, [rbp - 0x10]
mov qword [rbp - 0x18], r10
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x18]
mov qword [rbp - 0x10], 1
mov rdx, r13
mov ecx, 0x95
call fcn.18003d680
jmp 0x1800201a0
cmp dword [rdx], 0
movzx eax, word [r14 + 4]
movzx ecx, word [r8]
je 0x180020209
or cx, ax
mov word [r14 + 4], cx
jmp case.0x18002015d.10
not cx
and cx, ax
mov word [r14 + 4], cx
jmp case.0x18002015d.10
movzx eax, byte [r8 + 1]
mov dword [rbp - 0x1c], eax
jmp case.0x18002015d.10
mov ebx, dword [rbp - 0x20]
jmp case.0x18002015d.10
mov r12d, dword [r14 + 4]
movzx eax, byte [r8]
and r12d, eax
inc edi
lea eax, [rdi + 0x88]
cmp eax, r15d
jb 0x180020140
lea r14d, [rsi + 0xd]
cmp esi, r14d
jae case.0x18002015d.6
lea edi, [rsi - 0xa4]
mov rsi, qword [rbp - 8]
nop dword [rax + rax]
cmp edi, 0xc
ja case.default.0x180020274
mov ecx, dword [r9 + rdi*4 + 0x20678]
add rcx, r9
jmp rcx
lea rax, [rbp - 8]
mov qword [rbp - 8], 7
mov r9d, 7
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x18]
mov rdx, r13
mov ecx, 0x95
call fcn.18003d680
mov r9d, 8
mov qword [rbp - 8], 8
jmp 0x18002051a
mov rax, qword [rsi + 0x18]
mov rcx, qword [rax + 0x18]
cmp qword [rcx + 8], 0xa
je case.default.0x180020274
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Rename_browser_admin_setup_run__
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rsi + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax + 8], 1
jne 0x180020551
mov rax, qword [rcx + 0x18]
cmp qword [rax + 8], 3
je case.default.0x180020274
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Error_when_write_Display_device
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rsi + 8], 4
jne 0x18002059d
cmp qword [rsi + 0x20], 0
jne 0x180020577
mov rax, qword [rsi + 0x10]
cmp qword [rax + 8], 2
je case.default.0x180020274
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.note_odr_objc_missing_superclass
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rbp - 8]
mov qword [rbp - 8], 3
mov r9d, 3
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x18]
mov rdx, r13
mov ecx, 0x95
call fcn.18003d680
mov r9d, 4
mov qword [rbp - 8], 4
jmp 0x18002051a
mov qword [rbp - 8], 6
mov r9d, 6
jmp 0x18002051a
lea rax, [rbp - 8]
mov qword [rbp - 8], 0xa
mov r9d, 0xa
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x18]
mov rdx, r13
mov ecx, 0x95
call fcn.18003d680
xor r9d, r9d
mov qword [rbp - 8], 9
lea r8, [rbp - 0x18]
mov qword [rsp + 0x20], r13
mov edx, 0x122
lea rcx, [rbp - 8]
call fcn.18002a630
mov r9, qword [rbp - 0x18]
lea rcx, [rbp - 8]
mov r8d, 0x75
mov qword [rbp - 8], 4
mov rdx, r13
call fcn.18006aa40
mov rsi, rax
jmp case.default.0x180020274
mov rax, qword [rsi + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax + 8], 5
je case.default.0x180020274
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.The_service_is_no_longer_active.
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rsi + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 0x18]
cmp qword [rax + 8], 7
jne 0x1800205c3
lea r8, [rbp + 0x58]
mov byte [rbp + 0x58], 1
mov edx, 9
mov rcx, r13
call fcn.180029880
mov r13, rax
jmp case.default.0x180020274
mov rax, qword [rsi + 0x18]
cmp qword [rax + 8], 8
jne 0x1800205e9
mov rax, qword [rax + 0x10]
cmp qword [rax + 8], 6
je case.default.0x180020274
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.llvm.x86.avx512.mask.pmov.db.256
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp - 8], 9
mov r9d, 9
jmp 0x18002051a
mov qword [rbp - 8], 2
mov r9d, 2
jmp 0x18002051a
mov qword [rbp - 8], 5
mov r9d, 5
lea rax, [rbp - 8]
mov rdx, r13
lea r8, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov ecx, 0x95
call fcn.18003d680
inc edi
lea eax, [rdi + 0xa4]
cmp eax, r14d
jae case.0x18002015d.6
lea r9, [0x180000000]
jmp 0x180020260
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.total_site_metrics_expanded_desc
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.c:V8.CountOf_SIGNATURE_INFO_TYPE
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.vim.profile.host.DateTimeProfile
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.scoped_array__Z3_func_decl__.__
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.StringArrayFromUtf8SizeAndIntPtr
call fcn.1800824b0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, ebx
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret