Function at 0x18000b340
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
lea r13d, [r8 + 8]
mov r14, r9
mov r15d, r8d
mov r12, rdx
mov rsi, rcx
cmp r8d, r13d
jae case.0x18000b3a2.218
mov ebx, dword [rsp + 0x70]
lea rdx, [0x180000000]
lea eax, [r15 - 0xd5]
cmp eax, 0x19
ja case.0x18000b3a2.221
movzx eax, byte [rdx + rax + 0xb998]
mov ecx, dword [rdx + rax*4 + 0xb974]
add rcx, rdx
jmp rcx
cmp byte [rsi + 0x118], 0
jne 0x18000b926
mov rcx, qword [rsi]
lea rdx, [rsi + 0x78]
mov rax, qword [rsi + 0x100]
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
xor ecx, ecx
lea r8d, [r9 + 0x35]
call fcn.180037e10
mov byte [rsi + 0x118], al
jmp 0x18000b911
mov eax, dword [r14]
dec eax
cmp eax, 0x10
ja case.0x18000b3fc.10
cdqe
mov ecx, dword [rdx + rax*4 + 0xb9b4]
add rcx, rdx
jmp rcx
mov eax, 0x6f
cmp eax, 0x6f
je 0x18000b43e
add eax, 0x3e7
cmp eax, 0x3e7
jbe 0x18000b403
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [r14 + 0x10]
lea rdx, str.__s:
mov rcx, rsi
call fcn.1800bc2a0
mov r15d, 0xee
jmp 0x18000b911
mov r8, qword [r14 + 0x10]
lea rdx, [0x1800d3fe4]
mov rcx, rsi
call fcn.1800bc2a0
mov r15d, 0xee
jmp 0x18000b911
mov r8, qword [r14 + 0x10]
mov r8, qword [r8 + 0x10]
jmp 0x18000b442
lea rdx, [0x1800d3ff0]
mov rcx, rsi
call fcn.1800bc2a0
mov r15d, 0xee
jmp 0x18000b911
mov eax, 6
nop
cmp eax, 6
je 0x18000b4be
add eax, 0x6f
cmp eax, 0x75
jb 0x18000b490
nop dword [rax]
mov r8, qword [r14 + 0x10]
lea rdx, [0x1800d3ffc]
mov rcx, rsi
call fcn.1800bc2a0
mov r15d, 0xee
jmp 0x18000b911
mov r8, qword [r14 + 0x10]
lea rdx, str.__s
mov rcx, rsi
call fcn.1800bc2a0
mov r15d, 0xee
jmp 0x18000b911
mov edi, 0xd7
mov eax, edi
sub eax, 0xd7
je 0x18000b4f5
cmp eax, 1
je case.0x18000b3a2.220
jmp 0x18000b508
mov r8, qword [r14 + 0x10]
lea rdx, [0x1800d4004]
mov rcx, rsi
call fcn.1800bc2a0
inc edi
cmp edi, 0xd9
jb 0x18000b4e1
mov edi, 0x80
cmp edi, 0x80
je 0x18000b52d
cmp edi, 0x6380
je case.0x18000b3a2.220
jmp 0x18000b540
mov r8, qword [r14 + 0x10]
lea rdx, str.___s_
mov rcx, rsi
call fcn.1800bc2a0
add edi, 0x6300
cmp edi, 0xc600
jbe 0x18000b517
mov edi, 0x1c
cmp edi, 0x1c
je 0x18000b566
cmp edi, 0x818
je case.0x18000b3a2.220
jmp 0x18000b579
mov r8, qword [r14 + 0x10]
lea rdx, str.____s_
mov rcx, rsi
call fcn.1800bc2a0
add edi, 0x7fc
cmp edi, 0xff8
jbe 0x18000b553
mov ebp, pe_nt_image_headers64
nop dword [rax]
mov eax, ebp
sub eax, 0x100
je 0x18000b630
sub eax, 1
je 0x18000b5c5
cmp eax, 1
jne 0x18000b643
lea rdx, [0x1800d4028]
mov rcx, rsi
call fcn.1800bc2a0
mov r15d, 0xee
jmp 0x18000b911
mov r9, r14
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
mov r14, qword [r14 + 8]
test r14, r14
je 0x18000b643
mov edi, 0x11
cmp edi, 0x11
je 0x18000b608
cmp edi, 0x2fd
jne 0x18000b617
mov r9, r14
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
jmp 0x18000b617
lea rdx, [0x1800d4024]
mov rcx, rsi
call fcn.1800bc2a0
add edi, 0x2ec
cmp edi, 0x5d8
jbe 0x18000b5e6
mov r14, qword [r14 + 8]
test r14, r14
jne 0x18000b5e1
jmp 0x18000b643
mov r14, qword [r14 + 0x10]
lea rdx, [0x1800d402c]
mov rcx, rsi
call fcn.1800bc2a0
inc ebp
cmp ebp, 0x103
jb 0x18000b590
mov edi, 0x2a
nop word [rax + rax]
mov eax, edi
sub eax, 0x2a
je 0x18000b6e3
sub eax, 0x2a
je 0x18000b6d2
sub eax, 0x2a
je 0x18000b6bd
sub eax, 0x2a
je 0x18000b685
cmp eax, 0x2a
je case.0x18000b3a2.220
jmp 0x18000b6e7
mov r14, qword [r14 + 8]
test r14, r14
je 0x18000b6ac
nop
mov r9, r14
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
mov r14, qword [r14 + 8]
test r14, r14
jne 0x18000b690
lea rdx, [0x1800d4028]
mov rcx, rsi
call fcn.1800bc2a0
jmp 0x18000b6e7
mov r9, r14
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
jmp 0x18000b6e7
lea rdx, [0x1800d402c]
mov rcx, rsi
call fcn.1800bc2a0
jmp 0x18000b6e7
mov r14, qword [r14 + 0x10]
add edi, 0x2a
cmp edi, 0xfc
jb 0x18000b660
mov edi, 0x1e
nop dword [rax + rax]
cmp edi, 0x1e
je 0x18000b729
cmp edi, 0x37
jne 0x18000b738
mov r9, qword [r14 + 0x10]
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
mov r15d, 0xee
jmp 0x18000b911
lea rdx, str.__
mov rcx, rsi
call fcn.1800bc2a0
add edi, 0x19
cmp edi, 0x50
jb 0x18000b700
mov edi, 0x78
mov eax, edi
sub eax, 0x78
je 0x18000b757
cmp eax, 1
je case.0x18000b3a2.220
jmp 0x18000b77a
lea rdx, [0x1800d4034]
mov rcx, rsi
call fcn.1800bc2a0
mov r9, qword [r14 + 0x10]
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
inc edi
cmp edi, 0x7a
jb 0x18000b745
mov edi, 0x4d
mov eax, edi
sub eax, 0x4d
je 0x18000b798
cmp eax, 1
je case.0x18000b3a2.220
jmp 0x18000b7bb
mov r9, qword [r14 + 0x10]
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
lea rdx, [0x1800d4038]
mov rcx, rsi
call fcn.1800bc2a0
inc edi
cmp edi, 0x4f
jb 0x18000b786
mov edi, 0xb
nop word [rax + rax]
mov eax, edi
sub eax, 0xa
je case.0x18000b3a2.220
cmp eax, 1
jne 0x18000b803
mov r9, qword [r14 + 0x10]
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
lea rdx, [0x1800c870c]
mov rcx, rsi
call fcn.1800bc2a0
dec edi
cmp edi, 9
ja 0x18000b7d0
mov edi, 0x120
nop
cmp edi, 0x120
je 0x18000b83a
cmp edi, 0x1c4
jne 0x18000b84e
lea rdx, [0x1800d403c]
mov rcx, rsi
call fcn.1800bc2a0
mov r15d, 0xee
jmp 0x18000b911
mov r9, qword [r14 + 0x10]
xor edx, edx
mov r8d, 0xed
mov rcx, rsi
call fcn.18000b340
add edi, 0xa4
cmp edi, 0x268
jb 0x18000b810
mov edi, 0x3c
mov eax, edi
sub eax, 0x3c
je 0x18000b877
cmp eax, 0x6f
jne 0x18000b889
lea ecx, [rax - 0x6e]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, dword [r14]
lea rdx, [0x1800d4040]
mov rcx, rsi
call fcn.1800bc2a0
add edi, 0x6f
cmp edi, 0x11a
jb 0x18000b861
jmp 0x18000b911
lea rdx, [0x1800ca5b0]
mov rcx, rsi
call fcn.1800bc2a0
mov dword [rsp + 0x70], ebx
jmp 0x18000b911
mov ecx, 0xc2
mov eax, ecx
sub eax, 0xc1
je 0x18000b8d3
cmp eax, 1
jne 0x18000b8e6
movups xmm0, xmmword [r14]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsi + 0x10], xmm1
jmp 0x18000b8e6
movups xmm0, xmmword [r12]
movups xmmword [rsi + 0x20], xmm0
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rsi + 0x30], xmm1
dec ecx
cmp ecx, 0xc0
ja 0x18000b8b3
jmp case.0x18000b3a2.221
xor r9d, r9d
mov qword [rsp + 0x20], 0
mov r8, rsi
mov edx, 0x105
mov rcx, r14
call fcn.180005930
mov rbx, rax
lea rdx, [0x180000000]
inc r15d
cmp r15d, r13d
jb 0x18000b380
jmp case.0x18000b3a2.218
mov byte [rsp + 0x70], 0
jmp case.0x18000b3a2.218
mov eax, 0xc
cmp eax, 0xc
je 0x18000b945
add eax, 0x6d8
cmp eax, 0x6d8
jbe 0x18000b932
jmp case.0x18000b3a2.218
movzx eax, byte [rsi + 0x118]
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret