Function at 0x18001d0b0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x30
lea ebx, [r8 + 0x60b]
mov r14d, r8d
cmp r8d, ebx
mov r15, rdx
mov ebx, dword [rbp + 0x50]
mov rdi, rcx
mov esi, r8d
jae 0x18001d2bb
mov ecx, dword [rbp + 0x50]
lea rdx, [0x180000000]
mov r13d, dword [rbp + 0x50]
lea eax, [r8 + 0x60b]
mov rdi, qword [rbp + 0x58]
mov r12d, dword [rbp + 0x50]
mov qword [rbp - 0x10], rcx
nop dword [rax]
cmp esi, 0x179
ja 0x18001d1d2
je 0x18001d1be
lea eax, [rsi - 0x8b]
cmp eax, 0xb0
ja case.default.0x18001d145
movzx eax, byte [rdx + rax + 0x1d560]
mov ecx, dword [rdx + rax*4 + 0x1d544]
add rcx, rdx
jmp rcx
mov rax, qword [rbp + 0x40]
movsd xmm0, qword [rax]
mov eax, 0x51eb851f
cvttsd2si rcx, xmm0
mulsd xmm0, qword [0x18007f310]
mov qword [rbp - 0x10], rcx
cvttsd2si r13, xmm0
mul r13d
shr edx, 5
imul eax, edx, 0x64
lea rdx, [0x180000000]
sub r13d, eax
jmp case.default.0x18001d145
mov rax, qword [rbp + 0x40]
movsd xmm0, qword [rax]
addsd xmm0, qword [0x18007f2b0]
movsd qword [rax], xmm0
jmp case.0x18001d145.140
mov rax, qword [rbp + 0x40]
mov edx, dword [r15]
mov rcx, rax
call qword [rax + 0x2a8]
mov ebx, eax
jmp 0x18001d29a
mov dword [rbp + 0x58], 0
jmp case.0x18001d145.140
mov rdx, r15
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x18001d29a
cmp esi, 0x267
ja 0x18001d24a
je 0x18001d242
mov eax, esi
sub eax, 0x1aa
je 0x18001d222
sub eax, 0x46
je 0x18001d208
cmp eax, 0x31
jne case.default.0x18001d145
test r12d, r12d
jns case.default.0x18001d145
add r12d, 0x100
jmp case.default.0x18001d145
mov rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [r15 + rdi], 0
jne 0x18001d210
add rdi, r15
jmp case.default.0x18001d145
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], 8
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
mov r12d, eax
sub r12d, dword [rbp + 0x58]
jmp 0x18001d29a
mov byte [rdi], PathMakeUniqueName
inc rdi
jmp 0x18001d2ac
mov eax, esi
sub eax, 0x298
je 0x18001d278
cmp eax, 0x46
jne case.default.0x18001d145
cmp r13d, 0xa
jae 0x18001d264
mov byte [rdi], 0x30
inc rdi
mov rdx, rdi
mov ecx, r13d
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x18001d29a
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], 8
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
cmp eax, 0x87
jne 0x18001d340
lea rdx, [0x180000000]
mov rcx, qword [rbp - 0x10]
lea eax, [r14 + 0x60b]
add esi, 0x77
cmp esi, eax
jb 0x18001d110
mov rdi, qword [rbp + 0x40]
lea r13d, [r14 + 0x2f4]
cmp r14d, r13d
jae case.0x18001d145.144
mov r12d, dword [rbp + 0x50]
mov esi, 1
mov r15d, dword [rbp + 0x50]
nop dword [rax + rax]
cmp r14d, 0x236
ja 0x18001d3ef
je 0x18001d3b9
cmp r14d, 0x15e
ja 0x18001d37a
je 0x18001d512
mov eax, r14d
sub eax, 0xbc
je 0x18001d45f
sub eax, 0x36
je 0x18001d358
cmp eax, 0x36
jne 0x18001d512
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], esi
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
mov r15d, eax
jmp 0x18001d512
lea rcx, str._RESP_CHECK_DIRECTORY
call fcn.18006f5a0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], 3
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
mov dword [rdi + 0x20], eax
mov dword [rbp + 0x50], esi
jmp 0x18001d502
mov eax, r14d
sub eax, 0x194
je 0x18001d372
sub eax, 0x36
je 0x18001d39e
cmp eax, 0x36
jne 0x18001d512
test r12d, r12d
cmovne r15d, esi
jmp 0x18001d512
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], esi
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
mov r12d, eax
jmp 0x18001d512
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], ILFindLastID
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], 3
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
mov dword [rdi + 0x58], eax
jmp 0x18001d512
cmp r14d, 0x30e
ja 0x18001d493
je 0x18001d477
mov eax, r14d
sub eax, 0x26c
je 0x18001d46b
sub eax, 0x36
je 0x18001d449
cmp eax, 0x36
jne 0x18001d512
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], esi
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
test eax, eax
je 0x18001d512
lea rcx, str.Allocating__u_bytes_failed_with_error__u.
call fcn.18006f5a0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], esi
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
mov dword [rdi + 0x78], eax
mov dword [rbp + 0x50], 3
jmp 0x18001d502
mov dword [rbp + 0x50], 2
jmp 0x18001d502
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], 5
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
mov dword [rdi + 0x5c], eax
jmp 0x18001d512
mov eax, r14d
sub eax, 0x344
je 0x18001d4e0
cmp eax, 0x36
jne 0x18001d512
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], esi
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
test eax, eax
je 0x18001d512
mov edi, 0x7c
nop
mov eax, edi
sub eax, 0x7b
je 0x18001d524
cmp eax, esi
jne 0x18001d4d7
lea rcx, str.get_ReturnedParameterIndex
call fcn.18006f5a0
dec edi
cmp edi, 0x7a
ja 0x18001d4c0
jmp 0x18001d512
cmp dword [rdi + 0x58], 6
jne 0x18001d512
mov eax, dword [rdi + 0x60]
lea r8, [rbp + 0x50]
mov edx, 0xfd
mov dword [rbp + 0x50], eax
xor ecx, ecx
call fcn.180047720
mov eax, dword [rdi + 0x64]
mov dword [rbp + 0x50], eax
lea r8, [rbp + 0x50]
mov edx, 0xfd
xor ecx, ecx
call fcn.180047720
add r14d, 0x36
cmp r14d, r13d
jae case.0x18001d145.144
mov rdi, qword [rbp + 0x40]
jmp 0x18001d2e0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, ebx
mov rbx, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret