Function at 0x180076ed0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x90
movzx ebx, byte [rbp + 0x77]
mov r14d, r9d
mov r9, r8
mov r12, rcx
mov r8, rdx
lea eax, [r14 + 0x45e]
mov dword [rbp - 0x41], eax
cmp r14d, eax
jae 0x180076fef
mov r15, qword [rbp + 0x7f]
lea rsi, [0x18004a1a0]
mov r13d, dword [rbp + 0x77]
lea rdx, [0x180000000]
cmp r14d, 0x195
ja 0x180077158
je 0x1800770dd
lea eax, [r14 - 0xcc]
cmp eax, 0xb2
ja case.0x180076f6b.210
movzx eax, byte [rdx + rax + 0x77468]
mov ecx, dword [rdx + rax*4 + 0x7744c]
add rcx, rdx
jmp rcx
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x180087fe8]
lea rdx, str.std._Tree_unchecked_const_iterator_std::_Tree_val_std::_Tree_simple_types_std::pair_unsigned_int_const__unsigned_long______std::_Iterator_base0_.__
mov rcx, rax
call fcn.180079020
jmp case.0x180076f6b.210
xor r13d, r13d
jmp case.0x180076f6b.210
mov ecx, dword [r8]
mov rax, qword [r15 + 0x68]
movsxd rdx, dword [r9]
mov rax, qword [rax + rcx*8]
movsxd rcx, dword [r12]
mov rax, qword [rax + rdx*8]
cmp qword [rax + rcx*8], 0
je case.0x180076f6b.210
mov edi, 0x80
cmp edi, 0x80
je 0x18007700d
cmp edi, 0x119
jne 0x180077048
mov ecx, dword [r8]
mov rax, qword [r15 + 0x68]
movsxd rdx, dword [r9]
mov rax, qword [rax + rcx*8]
movsxd rcx, dword [r12]
mov rax, qword [rax + rdx*8]
mov qword [rax + rcx*8], 0xffffffffffffffff
movzx eax, bl
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, dword [r8]
movsxd rdx, dword [r9]
mov r9d, ILRemoveLastID
mov rax, qword [r15 + 0x68]
mov r8, qword [r15 + 0x80]
mov rax, qword [rax + rcx*8]
movsxd rcx, dword [r12]
mov rax, qword [rax + rdx*8]
mov rdx, qword [r15 + 0x88]
lea rcx, [rax + rcx*8]
call fcn.18006c9f0
mov r9, qword [rbp + 0x6f]
mov r8, qword [rbp + 0x67]
add edi, 0x99
cmp edi, 0x1b2
jb 0x180076fc1
jmp case.0x180076f6b.210
xor edx, edx
mov ecx, 0xd5
call fcn.1800630d0
test al, al
jne case.0x180076f6b.210
mov edi, 0x6c
mov eax, edi
sub eax, 0x6c
je 0x1800770cd
sub eax, 1
je 0x1800770c7
cmp eax, 1
jne 0x1800770d1
xor r8d, r8d
lea rdx, [rbp - 0x21]
mov ecx, 0xea
call fcn.18005b080
test al, al
jne 0x1800770d1
mov eax, 0x120
cmp eax, 0x120
je 0x1800770b7
cmp eax, 0xa320
je 0x180076fef
jmp 0x1800770b9
xor bl, bl
add eax, 0xa200
cmp eax, 0x14400
jbe 0x1800770a3
jmp 0x1800770d1
mov qword [rbp - 0x19], r15
jmp 0x1800770d1
mov qword [rbp - 0x21], rsi
inc edi
cmp edi, 0x6f
jb 0x180077078
jmp case.0x180076f6b.210
movsxd rcx, dword [r15]
test ecx, ecx
js 0x18007714d
movsxd rax, dword [r12]
lea edx, [rcx + 1]
mov r9, rcx
mov ecx, dword [r15 + 0x20]
dec ecx
lea r10, [rax*8]
mov rax, qword [r15 + 0x68]
mov rcx, qword [rax + rcx*8]
lea r8, [rcx + r9*8]
nop dword [rax + rax]
mov rax, qword [r8]
cmp qword [r10 + rax], 0
jne 0x18007713e
mov ecx, 0xec
nop
mov eax, ecx
sub eax, 0xec
je 0x180077130
cmp eax, 0x24
je 0x18007714a
jmp 0x180077133
mov r13d, edx
add ecx, 0x24
cmp ecx, 0x134
jb 0x180077120
dec edx
sub r8, 8
sub r9, 1
jns 0x180077110
mov eax, dword [rbp - 0x41]
mov r14d, 0x195
jmp 0x18007729c
cmp r14d, 0x2ed
ja 0x1800772ee
je 0x180077390
mov eax, r14d
sub eax, 0x1eb
je 0x1800772ba
sub eax, 0x56
je 0x1800771c3
cmp eax, 0x56
jne case.0x180076f6b.210
mov eax, dword [r12]
lea rcx, [rbp - 0x11]
mov dword [rbp + 0x77], eax
mov edx, 0x81
mov eax, dword [r9]
lea r9, [rbp - 0x39]
mov dword [rbp - 0x31], eax
mov eax, dword [r8]
lea r8, [rbp - 0x31]
mov dword [rbp - 0x39], eax
lea rax, [rbp + 0x77]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
call fcn.180067e10
jmp case.0x180076f6b.210
lea esi, [r13 - 1]
cmp esi, dword [r9]
jle 0x180077292
mov r14d, 0xf4
mov eax, r14d
sub eax, 0xf4
je 0x18007721d
cmp eax, 1
jne 0x18007726e
movsxd rcx, dword [r12]
mov rax, qword [r15 + 0x38]
xor dword [rax + rcx*4], 1
cmp r13d, 1
jle 0x18007726e
mov eax, dword [r12]
lea rdx, [rbp - 0x31]
mov r9d, 0x39
mov dword [rbp - 0x39], eax
mov r8, r15
mov dword [rbp - 0x31], esi
lea rcx, [rbp - 0x39]
call fcn.1800707d0
jmp 0x18007726e
xor edi, edi
cmp dword [r15 + 0x20], edi
jbe 0x180077269
nop word [rax + rax]
mov eax, dword [r12]
lea r9, [rbp - 0x39]
mov dword [rbp - 0x31], eax
lea r8, [rbp - 0x29]
lea rax, [rbp - 0x31]
mov dword [rbp - 0x29], esi
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x11]
mov edx, 0x81
mov qword [rsp + 0x20], r15
mov dword [rbp - 0x39], edi
call fcn.180067e10
inc edi
cmp edi, dword [r15 + 0x20]
jb 0x180077230
dec r13d
dec esi
inc r14d
cmp r14d, 0xf6
jb 0x1800771d6
mov rax, qword [rbp + 0x6f]
lea esi, [r13 - 1]
cmp esi, dword [rax]
jg 0x1800771d0
mov r14d, dword [rbp + 0x77]
lea rsi, [0x18004a1a0]
mov eax, dword [rbp - 0x41]
add r14d, 0x56
mov dword [rbp + 0x77], r14d
cmp r14d, eax
jae 0x180076fef
mov r9, qword [rbp + 0x6f]
mov r8, qword [rbp + 0x67]
jmp 0x180076f2d
mov eax, dword [r15]
cmp r13d, eax
jle case.0x180076f6b.210
test eax, eax
jle case.0x180076f6b.210
cmp dword [r8], 0
jne case.0x180076f6b.210
mov dword [rbp + 0x77], eax
lea rdx, [rbp + 0x77]
mov eax, dword [r12]
lea rcx, [rbp - 0x29]
mov r9d, 0x39
mov dword [rbp - 0x29], eax
mov r8, r15
call fcn.1800707d0
jmp case.0x180076f6b.210
mov eax, r14d
sub eax, 0x343
je 0x1800773c8
cmp eax, 0x56
jne case.0x180076f6b.210
mov edi, SHSetFolderPathA
mov eax, edi
sub eax, 0xe3
je 0x18007731a
cmp eax, 0x39
je 0x180076fef
jmp 0x180077381
mov eax, dword [r15 + 0x20]
dec eax
cmp dword [r8], eax
jne 0x180077381
movsxd rax, dword [r9]
test eax, eax
jle 0x180077381
movsxd r8, dword [r12]
mov rdx, rax
mov rax, qword [r15 + 0x68]
mov rcx, qword [rax]
mov rax, qword [rcx + rdx*8 - 8]
cmp qword [rax + r8*8], 0
jne 0x18007737d
mov rax, qword [r15 + 0x38]
xor dword [rax + r8*4], 1
mov eax, dword [r9]
cmp eax, 1
jle 0x18007737d
dec eax
lea rdx, [rbp + 0x77]
mov dword [rbp + 0x77], eax
lea rcx, [rbp - 0x29]
mov eax, dword [r12]
mov r9d, 0x39
mov r8, r15
mov dword [rbp - 0x29], eax
call fcn.1800707d0
mov r9, qword [rbp + 0x6f]
mov r8, qword [rbp + 0x67]
add edi, 0x39
cmp edi, 0x155
jb 0x180077306
mov ecx, dword [r8]
movsxd rdx, dword [r9]
mov r9d, ILRemoveLastID
mov rax, qword [r15 + 0x68]
mov r8, qword [r15 + 0x80]
mov rax, qword [rax + rcx*8]
movsxd rcx, dword [r12]
mov rax, qword [rax + rdx*8]
mov rdx, qword [r15 + 0x88]
lea rcx, [rax + rcx*8]
call fcn.18006c9f0
jmp case.0x180076f6b.210
mov ecx, dword [r8]
mov rax, qword [r15 + 0x68]
movsxd rdx, dword [r9]
mov rax, qword [rax + rcx*8]
movsxd rcx, dword [r12]
mov rax, qword [rax + rdx*8]
mov qword [rax + rcx*8], 0xffffffffffffffff
jmp case.0x180076f6b.210
mov edi, 0xce
cmp edi, 0xce
je 0x180077406
cmp edi, 0x84c6
je 0x180076fef
jmp 0x180077417
lea rcx, [r15 + 0x48]
mov edx, 0xdc
call fcn.180054760
mov rbx, rax
add edi, 0x83f8
cmp edi, 0x107f0
jbe 0x1800773f0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.___x_number_tif_possible_decode_only_up_to_a_resolution_layer_not_n_t_twider_than_the_given_number_of_pixels_n___y_number_tif_possible_decode_only_up_to_a_resolution_layer_not_n_t_thigher_than_the_given_number_of_pixels_n___m_t_tdecode_a_progressive_sequence_of_multiple_concatenated_BIEs_n___b_t_tuse_binary_code_for_multiple_bit_planes__default:_Gray_code__n___d_t_tdiagnose_single_BIE__print_header__list_marker_sequences_n___p_number_tdecode_only_one_single_bit_plane__0__first_plane__n_n
call fcn.180079020
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3