Function at 0x18006e220
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov rbx, qword [rbp - 0x39]
mov r10, rcx
mov ecx, dword [rbp + 0x6f]
mov rsi, r9
mov edx, dword [rbp + 0x6f]
mov r14d, ecx
mov r13, qword [rbp - 0x39]
imul r12d, ecx, 0x604
mov qword [rbp - 0x19], rbx
mov dword [rbp - 0x29], edx
cmp ecx, r12d
ja 0x18006e611
mov rax, qword [rbp - 0x39]
mov rsi, qword [rbp - 1]
mov r15, qword [rbp - 1]
mov rdx, qword [rbp + 0x7f]
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x51], rax
mov r9d, 2
cmp r14d, 0x1ed8
ja 0x18006e3e2
je 0x18006e3cc
mov eax, r14d
sub eax, 0x2e
je 0x18006e3bd
sub eax, 0xa
je 0x18006e367
sub eax, 0x75
je 0x18006e357
sub eax, 0x70
je 0x18006e333
cmp eax, 0x1839
jne 0x18006e588
test rsi, rsi
jne 0x18006e315
mov ecx, 0xe8
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe7
je 0x18006e3a6
cmp eax, 1
jne 0x18006e308
xor ebx, ebx
mov qword [rbp - 0x19], rbx
dec ecx
cmp ecx, 0xe6
ja 0x18006e2f0
mov ecx, dword [rbp + 0x6f]
mov rax, qword [rsi + 8]
test rax, rax
je 0x18006e588
mov rsi, rax
mov rax, qword [rax + 8]
test rax, rax
jne 0x18006e322
jmp 0x18006e588
mov rax, qword [rdx]
lea rcx, [0x1800018d0]
mov r15, qword [0x1800f6120]
test rax, rax
cmovne rcx, rax
mov qword [0x1800f6120], rcx
jmp 0x18006e585
mov r9, qword [0x1800fba18]
mov qword [rbp - 0x49], r9
jmp 0x18006e58c
mov rax, qword [rbp + 0x7f]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
test byte [rax + 0x64], 0x10
je 0x18006e3a6
mov eax, dword [r10]
lea r8, [rbp - 0x21]
mov word [rbp - 0x21], r9w
lea rdx, [rbp - 0x41]
mov qword [rbp - 0x41], rcx
mov r9d, 0xf7
lea rcx, [rbp - 0x59]
mov dword [rbp - 0x59], eax
call fcn.180049e40
test eax, eax
jne 0x18006e579
mov rax, rbx
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [rbp + 0x7f]
mov rdx, rax
mov rsi, qword [rax]
jmp 0x18006e588
mov eax, dword [r10]
mov dword [rbp - 0x59], eax
mov rax, qword [rbp + 0x7f]
mov rax, qword [rax]
mov qword [rbp - 0x41], rax
jmp 0x18006e564
cmp r14d, 0x327e
je 0x18006e4e1
cmp r14d, 0x3d78
je 0x18006e458
cmp r14d, 0x5c18
je 0x18006e50b
cmp r14d, 0x5f49
je 0x18006e449
cmp r14d, 0x9cf9
jne 0x18006e588
mov ecx, 0xeb
mov eax, ecx
sub eax, 0xeb
je 0x18006e434
cmp eax, 0x25
je 0x18006e3a6
jmp 0x18006e43b
mov rbx, r15
mov qword [rbp - 0x19], rbx
add ecx, 0x25
cmp ecx, 0x135
jb 0x18006e420
mov ecx, dword [rbp + 0x6f]
mov r9, qword [rbp - 0x49]
xor edi, edi
mov qword [rbp - 0x51], rdi
jmp 0x18006e590
mov eax, dword [r10]
lea r9, [rbp - 0x11]
mov rdi, qword [rbp + 0x7f]
lea r8, [rbp - 0x59]
mov dword [rbp - 0x59], eax
lea rcx, [rbp - 0x39]
mov dword [rsp + 0x30], 0x8b
xor edx, edx
mov rax, qword [rdi]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 7]
mov qword [rsp + 0x20], rax
call fcn.180074070
mov rcx, qword [rdi]
mov rdi, qword [rbp - 0x51]
mov r9, qword [rbp - 0x49]
mov r10, qword [rbp + 0x67]
mov rax, qword [rcx + 0x20]
mov r8, qword [rbp + 0x77]
test byte [rax + 0x60], 0x10
je 0x18006e4c8
mov edx, dword [rax + 0x104]
mov ecx, dword [rbp + 0x6f]
mov dword [rbp - 0x29], edx
mov rdx, qword [rbp + 0x7f]
jmp 0x18006e590
movzx edx, word [rax + 0xce]
add edx, dword [rcx + 0x34]
mov ecx, dword [rbp + 0x6f]
mov dword [rbp - 0x29], edx
mov rdx, qword [rbp + 0x7f]
jmp 0x18006e590
mov ecx, 0xcc
mov eax, ecx
sub eax, 0xcc
je 0x18006e4fa
cmp eax, 1
je 0x18006e3a6
jmp 0x18006e501
mov rbx, rsi
mov qword [rbp - 0x19], rbx
inc ecx
cmp ecx, 0xce
jb 0x18006e4e6
mov rax, qword [rbp + 0x7f]
xor edi, edi
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
cmp dword [rax + 0x20], edi
jbe 0x18006e55a
nop dword [rax]
mov rax, qword [r8]
lea rdx, [rbp - 9]
lea r8, [rbp - 0x41]
mov qword [rbp - 9], rax
mov ecx, 0x3b
mov qword [rbp - 0x41], r13
call fcn.18005a870
mov rax, qword [rbp + 0x7f]
inc edi
mov r8, qword [rbp + 0x77]
inc r13
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
cmp edi, dword [rax + 0x20]
jb 0x18006e520
mov r10, qword [rbp + 0x67]
mov eax, dword [r10]
mov dword [rbp - 0x59], eax
mov qword [rbp - 0x41], rcx
xor edx, edx
lea r9, [rbp - 0x59]
lea r8, [rbp - 0x41]
lea ecx, [rdx + 9]
call fcn.180062890
mov r13, rax
mov rdx, qword [rbp + 0x7f]
mov r10, qword [rbp + 0x67]
mov r8, qword [rbp + 0x77]
mov ecx, dword [rbp + 0x6f]
mov r9, qword [rbp - 0x49]
mov rdi, qword [rbp - 0x51]
imul eax, ecx, 0x8c
add r14d, eax
cmp r14d, r12d
jbe 0x18006e295
mov rsi, qword [rbp + 0x7f]
imul eax, ecx, 0x339
mov r15d, ecx
mov dword [rbp - 0x21], ecx
mov dword [rbp - 9], eax
cmp ecx, eax
ja 0x18006e3a6
mov r12, qword [rbp - 0x11]
mov rcx, qword [rbp - 0x39]
cmp r15d, 0x660b
ja 0x18006e92f
je 0x18006e911
mov eax, r15d
sub eax, 0x38
je 0x18006e6f9
sub eax, 0x75
je 0x18006e697
sub eax, 0xff3
je 0x18006e64b
sub eax, 0x1068
je 0x18006e623
cmp eax, 0x1254
jne 0x18006e885
mov r15d, 0x335c
jmp 0x18006e885
mov r9, qword [rbp - 0x39]
mov rdi, qword [rbp - 0x39]
mov qword [rbp - 0x49], r9
mov qword [rbp - 0x51], rdi
jmp 0x18006e5a6
mov rax, qword [rsi]
lea r8, [rbp - 0x59]
mov r9d, 0x109
mov qword [rbp - 0x59], rax
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call fcn.180082e80
jmp 0x18006e881
mov eax, dword [r10]
lea r8, [rbp - 0x21]
mov dword [rbp - 0x59], eax
lea rdx, [rbp - 0x59]
mov rax, qword [rsi]
mov ecx, 0xb4
mov qword [rbp - 0x21], rax
call fcn.1800b0620
mov rax, qword [rsi]
lea r8, [rbp - 0x59]
mov qword [rsp + 0x28], 0
xor r9d, r9d
xor edx, edx
mov qword [rbp - 0x59], rax
xor ecx, ecx
mov dword [rsp + 0x20], 0xfc
call fcn.180012b40
jmp 0x18006e881
test r9, r9
je 0x18006e885
mov r8, r9
mov rax, rsi
sub r8, rsi
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18006e6c3
inc rax
test ecx, ecx
jne 0x18006e6b0
test edx, edx
jne 0x18006e6a0
mov eax, 0x8a
nop dword [rax]
cmp eax, 0x8a
je 0x18006e6e4
cmp eax, 0x14f
je 0x18006e606
jmp 0x18006e6eb
mov rdi, r9
mov qword [rbp - 0x51], r9
add eax, 0xc5
cmp eax, 0x214
jb 0x18006e6d0
jmp 0x18006e6a0
mov r14, qword [rsi]
xor edi, edi
mov rax, qword [r14 + 0x20]
cmp dword [rax + 0x20], edi
jbe 0x18006e854
movsxd r15, dword [rbp - 0x29]
mov rbx, qword [rbp + 0x77]
cmp r13, qword [rbp + 7]
je 0x18006e807
test r12, r12
je 0x18006e739
test r15d, r15d
je 0x18006e739
cmp r13, r12
jb 0x18006e739
lea rax, [r12 + r15]
cmp r13, rax
jb 0x18006e807
test rcx, rcx
je 0x18006e747
cmp r13, rcx
je 0x18006e807
mov eax, dword [r10]
lea r9, [rbp - 0x31]
xor r8d, r8d
mov dword [rbp - 0x59], eax
mov edx, 0x12f
mov qword [rbp - 0x31], r14
lea rcx, [rbp - 0x59]
call fcn.18004e5a0
cmp r13, rax
je 0x18006e807
mov r14, qword [rbp + 0x67]
xor ecx, ecx
mov qword [rsp + 0x30], rcx
xor r9d, r9d
xor edx, edx
mov r8d, 0xde
mov eax, dword [r14]
mov dword [rbp - 0x59], eax
mov rax, qword [rsi]
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x59]
call fcn.18006d6e0
cmp r13, rax
je 0x18006e807
mov eax, dword [r14]
lea rdx, [rbp - 0x59]
mov dword [rbp - 0x59], eax
lea rcx, [rbp - 0x31]
mov rax, qword [rsi]
mov r9d, 0x119
xor r8d, r8d
mov qword [rbp - 0x31], rax
call fcn.1800910a0
cmp r13, rax
jb 0x18006e82f
mov eax, dword [r14]
lea rdx, [rbp - 0x59]
mov dword [rbp - 0x59], eax
lea rcx, [rbp - 0x31]
mov rax, qword [rsi]
mov r9d, 0x119
xor r8d, r8d
mov qword [rbp - 0x31], rax
call fcn.1800910a0
mov rcx, qword [rsi]
mov edx, dword [rcx + 0x40]
add rdx, rax
cmp r13, rdx
jae 0x18006e82f
mov rax, qword [rbx]
lea rdx, [rbp - 0x59]
mov qword [rbp - 0x59], rax
mov r9d, 0x35
lea rax, [rbp - 0x31]
mov qword [rbp - 0x31], r13
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180055c60
mov r14, qword [rsi]
inc edi
mov rcx, qword [rbp - 0x39]
inc r13
mov r10, qword [rbp + 0x67]
mov rax, qword [r14 + 0x20]
cmp edi, dword [rax + 0x20]
jb 0x18006e713
mov rbx, qword [rbp - 0x19]
mov r15d, dword [rbp - 0x21]
mov esi, dword [r10]
mov edi, 0x52
nop dword [rax]
cmp edi, 0x52
je 0x18006e8cf
cmp edi, 0xe8
je 0x18006e8ab
cmp edi, 0x2766
je 0x18006e87d
cmp edi, 0x6f78
jne 0x18006e8fa
mov rdi, qword [rbp - 0x51]
mov r10, qword [rbp + 0x67]
imul eax, dword [rbp + 0x6f], 0x4b
add r15d, eax
mov dword [rbp - 0x21], r15d
cmp r15d, dword [rbp - 9]
ja 0x18006e3a6
mov rsi, qword [rbp + 0x7f]
mov r9, qword [rbp - 0x49]
mov r8, qword [rbp + 0x77]
jmp 0x18006e5c1
xor r8d, r8d
mov dword [rbp - 0x11], esi
lea rax, [rbp - 0x11]
mov qword [rbp - 1], r14
lea r9, [rbp - 1]
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r8 + 0x11]
call fcn.180065e80
jmp 0x18006e8fa
mov r9, qword [r14 + 0x38]
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x31]
mov dword [rbp - 0x59], esi
xor ecx, ecx
mov qword [rbp - 0x31], r14
mov dword [rsp + 0x20], 0x3e
call fcn.180085210
mov ecx, 0xfffd
and word [rax + 0x12], cx
add edi, 0x2714
cmp edi, 0x9c50
jbe 0x18006e860
jmp 0x18006e87d
test rdi, rdi
je 0x18006e9c5
mov ecx, dword [rdi + 0x28]
add ecx, dword [r8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x41], rax
jmp 0x18006e881
cmp r15d, 0x98ba
je 0x18006e9a7
cmp r15d, 0xcb69
je 0x18006e981
cmp r15d, 0xfe18
je 0x18006e974
cmp r15d, 0x130c7
je 0x18006e969
cmp r15d, 0x16376
jne 0x18006e885
mov rax, qword [rdi + 0x20]
jmp 0x18006e3a9
mov eax, dword [r8]
add dword [rdi + 0x28], eax
jmp 0x18006e885
mov rax, qword [rbp - 0x41]
mov qword [rdi + 0x20], rax
jmp 0x18006e885
test r10, r10
je 0x18006e998
mov ecx, dword [rdi + 0x28]
mov rdx, r10
add rcx, qword [rbp - 0x41]
mov r8d, dword [r8]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rdi + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18006e881
mov rsi, qword [rbp - 0x41]
test rsi, rsi
je 0x18006e9e4
mov r8d, dword [rdi + 0x28]
mov rcx, rsi
mov rdx, qword [rdi + 0x20]
call sub.VCRUNTIME140.dll_memcpy
jmp 0x18006e881
xor r8d, r8d
lea rdx, [0x1800d9468]
lea rcx, str.mom_ly__0___s_
call fcn.1800d0700
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r8d, r8d
lea rdx, [0x1800d9468]
lea rcx, str._INSTALLNAME_DIR
call fcn.1800d0700
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3