Function at 0x180099860
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x98
mov eax, ecx
add ecx, 0x360
mov dword [rbp - 0x39], ecx
cmp eax, ecx
jae 0x180099954
mov r12, qword [rbp - 0x11]
lea r11, [0x180000000]
mov r14, qword [rbp - 0x11]
xor r10d, r10d
mov rsi, qword [rbp - 0x11]
mov r13d, dword [rbp + 0x67]
nop dword [rax + rax]
cmp eax, 0x135
ja 0x180099c7a
je 0x180099a31
add eax, 0xffffffd5
cmp eax, 0xf3
ja case.default.0x1800998f3
movzx eax, byte [r11 + rax + 0x99e34]
mov ecx, dword [r11 + rax*4 + 0x99e00]
add rcx, r11
jmp rcx
mov qword [rbp - 1], r10
mov qword [rbp - 0x11], r10
jmp case.0x1800998f3.55
mov eax, 0x9a
cmp eax, 0x9a
je 0x180099950
add eax, 0x82
cmp eax, 0x11c
jb 0x180099907
mov ecx, dword [rbp - 0x39]
mov qword [rbp - 0x19], r9
jmp case.default.0x1800998f3
mov r12, r10
mov rsi, r9
mov r14, r9
jmp case.0x1800998f3.55
mov rax, qword [r9]
mov rcx, qword [rax + 8]
mov qword [rbp + 0xf], rcx
cmp dword [rcx], 0x7f2bb702
je case.0x1800998f3.55
nop dword [rax + rax]
mov dword [rbp - 0x19], r10d
mov rax, qword [rbp - 0x19]
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [r9]
test rax, rax
je 0x180099954
cmp dword [rax], 0x7f2bb701
jne 0x180099954
mov qword [rax + 0xf8], r8
jmp case.0x1800998f3.55
mov dword [r8], r10d
jmp case.0x1800998f3.55
mov rax, qword [r9]
cmp dword [rax], 0x7f2bb703
je case.0x1800998f3.55
mov eax, 0xd
cmp eax, 0xd
je 0x1800999b2
cmp eax, 0xa1b
je 0x180099954
jmp 0x1800999b6
mov dword [rbp - 0x19], r10d
add eax, 0xa0e
cmp eax, 0x141c
jbe 0x1800999a4
jmp case.0x1800998f3.55
mov r13d, r10d
jmp case.0x1800998f3.55
mov ebx, 0x42
cmp ebx, 0x42
je 0x1800999e7
cmp ebx, 0x2562
je 0x180099954
jmp 0x180099a23
mov eax, dword [rdx]
mov ecx, 0xf6
mov dword [rbp - 0x31], eax
lea rdx, [rbp - 0x31]
mov eax, dword [r8]
lea r8, [rbp - 0x21]
mov qword [rsp + 0x20], r9
lea r9, [rbp - 9]
mov dword [rbp - 0x21], 1
mov dword [rbp - 9], eax
call fcn.1800cd5a0
mov r9, qword [rbp + 0x7f]
mov r8, qword [rbp + 0x77]
mov rdx, qword [rbp + 0x6f]
mov dword [rbp - 0x19], eax
add ebx, 0x2520
cmp ebx, 0x4a40
jbe 0x1800999d4
cmp dword [rbp - 0x29], 0
jne 0x180099dc4
lea rdx, [0x1800e5558]
lea rcx, str._subtle::NoBarrier_Load_g_histogram_allocator_
call fcn.1800cfb40
mov r8, qword [rbp + 0x77]
lea r11, [0x180000000]
mov r9, qword [rbp + 0x7f]
mov rdx, qword [rbp + 0x6f]
xor r10d, r10d
mov ecx, dword [rbp - 0x39]
mov eax, dword [rbp + 0x67]
add eax, 0x30
mov dword [rbp + 0x67], eax
cmp eax, ecx
jb 0x1800998c0
jmp 0x180099954
cmp dword [rbp - 0x29], 0
jne 0x180099d92
mov eax, dword [rbp + 0x67]
lea r9, [rbp + 7]
mov dword [rbp + 7], eax
lea r8, [rbp - 0x31]
lea rax, [rbp - 0x29]
mov dword [rbp - 0x31], 1
mov edx, 0xf3
mov qword [rsp + 0x20], rax
lea rcx, reloc.SHELL32.dll_SHChangeNotifyRegister
call fcn.18008cbf0
jmp 0x180099a4e
cmp byte [rsi], 0
je case.0x1800998f3.55
nop dword [rax]
mov r15d, 0x11e
nop word [rax + rax]
mov eax, r15d
sub eax, 0x11d
je 0x180099bf8
cmp eax, 1
jne 0x180099bfb
movzx eax, byte [rsi]
cmp al, 0x5c
jne 0x180099bed
mov edi, 0x114
nop word [rax + rax]
mov eax, edi
sub eax, 0x114
je 0x180099bd9
cmp eax, 6
jne 0x180099bdc
movsx eax, byte [rsi]
test al, al
je 0x180099bd0
mov edx, eax
lea rcx, str._LVTLfWGTCqktqEJBpVJ0A
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x180099bd0
mov ebx, 7
nop dword [rax]
mov eax, ebx
sub eax, 6
je 0x180099b5b
cmp eax, 1
jne 0x180099bc3
movzx eax, byte [rsi]
inc rsi
mov byte [rbp - 0x25], al
mov byte [rbp - 0x24], 0
jmp 0x180099bc3
movsx eax, byte [rsi]
test al, al
je 0x180099bad
mov edx, eax
lea rcx, str.Promise.prototype.then
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x180099bad
mov ecx, 0x83
nop word [rax + rax]
cmp ecx, 0x83
je 0x180099b96
cmp ecx, 0x234f
jne 0x180099b9f
mov byte [rbp - 0x23], 0
jmp 0x180099b9f
movzx eax, byte [rsi]
inc rsi
mov byte [rbp - 0x24], al
add ecx, 0x22cc
cmp ecx, 0x4598
jbe 0x180099b80
xor edx, edx
lea rcx, [rbp - 0x25]
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov byte [r14], al
inc r14
dec ebx
cmp ebx, 5
ja 0x180099b40
jmp 0x180099bdc
movzx eax, byte [rsi]
mov byte [r14], al
inc r14
inc rsi
add edi, 6
cmp edi, 0x120
jb 0x180099b00
jmp 0x180099bfb
mov byte [r14], al
inc r14
inc rsi
jmp 0x180099bfb
inc r12
dec r15d
cmp r15d, 0x11c
ja 0x180099ad0
cmp byte [rsi], 0
jne 0x180099ac0
jmp 0x180099a4e
mov r10, qword [rbp + 0xf]
mov rcx, qword [r9]
mov eax, dword [r10 + 4]
cmp dword [rcx + 0x10], eax
jge 0x180099a61
mov edx, 0x11a
mov eax, edx
sub eax, 0x11a
je 0x180099c54
sub eax, 1
je 0x180099c4b
cmp eax, 1
je 0x180099954
jmp 0x180099c6b
mov dword [rbp - 0x19], 1
jmp 0x180099c6b
mov rax, qword [r9]
movsxd rcx, dword [rax + 0x10]
mov rax, qword [r10 + 0x10]
mov ecx, dword [rax + rcx*4]
mov dword [r8], ecx
mov rax, qword [r9]
inc dword [rax + 0x10]
inc edx
cmp edx, 0x11d
jb 0x180099c32
jmp 0x180099a5d
sub eax, 0x145
je 0x180099d8a
sub eax, 0x20
je 0x180099caa
sub eax, 0x10
je 0x18009991d
sub eax, 0x20
je 0x180099df6
cmp eax, 0x10
je 0x180099954
jmp case.default.0x1800998f3
mov rbx, qword [rbp - 1]
xor r9d, r9d
test rbx, rbx
je 0x180099d45
mov r15d, dword [rbp + 0x67]
lea rax, [rbp - 0x31]
mov qword [rsp + 0x30], r10
xor r8d, r8d
mov qword [rsp + 0x28], rax
mov rdx, rbx
mov ecx, 0xb9
mov qword [rsp + 0x20], r10
mov dword [rbp - 0x31], r15d
call fcn.1800be2c0
mov dword [rbp - 0x29], eax
test eax, eax
je 0x180099a4e
mov rdi, qword [rbp - 1]
mov ebx, 0x43
nop dword [rax]
cmp ebx, 0x43
je 0x180099d12
cmp ebx, 0x3ed
jne 0x180099d32
inc r13d
jmp 0x180099d32
mov eax, dword [rbp - 0x29]
lea r9, [rbp - 0x31]
mov r8d, 0x46
mov dword [rbp - 0x21], eax
mov rdx, rdi
mov dword [rbp - 0x31], r15d
lea rcx, [rbp - 0x21]
call fcn.1800c0160
add ebx, 0x3aa
cmp ebx, 0x754
jbe 0x180099d00
jmp 0x180099a4e
mov rbx, qword [rbp - 0x11]
lea rdx, [rbp - 0x31]
mov eax, dword [rbp + 0x67]
mov dword [rbp - 0x31], eax
test rbx, rbx
je 0x180099d78
mov qword [rsp + 0x28], r10
mov r8d, 0x124
mov rcx, rbx
mov qword [rsp + 0x20], r10
call fcn.1800bc140
mov r13d, eax
jmp 0x180099a4e
mov r8d, 0x9a
xor ecx, ecx
call fcn.1800bef30
jmp 0x180099a4e
mov qword [r8], r12
jmp case.default.0x1800998f3
mov eax, dword [rbp - 0x29]
lea r9, [rbp + 0x67]
mov dword [rbp - 0x31], eax
lea rdx, str.inf:NumberOfRecords
mov eax, dword [rbp + 0x67]
lea rcx, [rbp - 0x31]
mov r8d, 0x46
mov dword [rbp + 0x67], eax
call fcn.1800c0160
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [rbp - 0x29]
lea r9, [rbp + 0x67]
mov dword [rbp - 0x31], eax
lea rdx, str.Received_M2.1_with_hash
mov eax, dword [rbp + 0x67]
lea rcx, [rbp - 0x31]
mov r8d, 0x46
mov dword [rbp + 0x67], eax
call fcn.1800c0160
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3