Function at 0x180020700
Capabilities:
Terminate process

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x150
lea rbp, [rsp + 0x50]
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x138], rsi
mov qword [rbp + 0x140], rdi
mov rax, qword [0x180081de0]
xor rax, rbp
mov qword [rbp + 0xf8], rax
mov r13, rdx
mov qword [rbp + 0xb0], rdx
lea edx, [r8 + 0xa]
mov qword [rbp + 0x90], r9
mov dword [rbp + 0x14], r8d
mov qword [rbp + 0x98], rcx
mov dword [rbp], edx
cmp r8d, edx
jae 0x180020dd8
mov ebx, dword [rbp + 8]
lea edx, [r8 - 0x21]
mov r12d, dword [rbp + 8]
xor edi, edi
mov r15d, dword [rbp + 8]
mov rsi, qword [rbp + 0x88]
mov r14, qword [rbp + 0x88]
mov eax, dword [rbp]
mov dword [rbp + 0x10], edx
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x48], r12
lea r11, [0x180000000]
movabs r10, 0xffffffffffffff0
cmp edx, 0x10
ja case.default.0x1800207ba
mov ecx, dword [r11 + rdx*4 + 0x20e14]
add rcx, r11
jmp rcx
movsxd r8, dword [rbp + 0x20]
mov rcx, rdi
test r8, r8
jle 0x18002080b
mov r9, qword [rbp + 0x80]
movabs rdi, 0xffffffffffffff0
movsxd rdx, ebx
shl rdx, 2
lea rax, [rdx + 0xf]
cmp rax, rdx
ja 0x1800207ec
mov rax, rdi
and rax, 0xfffffffffffffff0
call fcn.18005fe60
sub rsp, rax
lea rax, [rsp + 0x50]
mov qword [r9 + rcx*8], rax
inc rcx
cmp rcx, r8
jl 0x1800207e0
xor edi, edi
mov r9, qword [rbp + 0x80]
lea rax, [r13 + 0x218]
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rbx, qword [rbp + 0x40]
mov r8, r13
mov qword [rsp + 0x28], rax
mov ecx, 0x128
mov qword [rsp + 0x20], rbx
call fcn.180020e60
mov rdx, qword [rbp + 0x90]
mov rcx, r13
mov rdx, qword [rdx]
call qword [rbp + StrCmpCA]
test eax, eax
jne 0x180020d11
xor r9d, r9d
mov r8, r13
mov edx, reloc.SHLWAPI.dll_StrCmpCA
xor ecx, ecx
call fcn.180035050
mov r8d, dword [rbp + 0x14]
mov r15, rax
mov edx, dword [rbp + 0x10]
mov rbx, qword [rbp + 0x38]
jmp case.0x1800207ba.3
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x18]
mov r8d, SHRegGetIntW
mov dword [rbp + 0x18], edi
call fcn.1800059f0
mov rbx, rax
mov dword [rbp + 0x18], edi
lea rax, [rbp + 0x18]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea r12, [r13 + 0x218]
mov r8, r12
mov dword [rsp + 0x20], 0x7e
xor edx, edx
xor ecx, ecx
call fcn.18002e710
xor r9d, r9d
lea rdx, [rbp + 0xa8]
mov r8, r12
mov ecx, 0x121
mov r13, rax
call fcn.18005eb40
mov eax, dword [rbp + 8]
lea r9, [rbp + 0x60]
mov ecx, dword [rbp + 0x30]
mov r8, qword [rbp + 0xa8]
inc ecx
mov rdx, qword [rbp + 0xb8]
mov dword [rbp + 0x50], eax
mov eax, dword [rbp + 0x20]
mov dword [rbp + 0x60], eax
mov rax, qword [rbp + 0x80]
mov dword [rsp + 0x40], 0xa8
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x50]
sar ebx, cl
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x58]
mov dword [rbp + 0x58], ebx
mov rbx, qword [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x28], ebx
call fcn.1800545a0
mov r8d, dword [rbp + 0x14]
mov edx, dword [rbp + 0x10]
mov r13, qword [rbp + 0xb0]
mov r12, qword [rbp + 0x48]
jmp case.0x1800207ba.3
mov rbx, qword [rbp + 0x40]
lea rcx, [rbp + 0x28]
mov r8d, SHRegGetIntW
mov dword [rbp + 0x28], edi
mov rdx, rbx
mov eax, dword [rbx + 4]
mov dword [rbp + 0x20], eax
call fcn.1800059f0
dec dword [rbx - 0x72b2cfb3]
test dword [rax], ebx
add al, byte [rax]
add byte [rax - 0x75], cl
fmul dword [rcx - 0x3e009783]
lea rax, [rbp + 0x68]
sar ebx, cl
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor ecx, ecx
xor edx, edx
mov qword [rbp + 0x38], rbx
mov dword [rsp + 0x20], 0x7e
call fcn.18002e710
mov qword [rbp + 0xb8], rax
movsxd rax, dword [rbp + 0x20]
lea rax, [rax*8]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1800209cc
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.18005fe60
mov r8d, dword [rbp + 0x14]
sub rsp, rcx
mov edx, dword [rbp + 0x10]
lea rax, [rsp + 0x50]
mov qword [rbp + 0x80], rax
jmp case.0x1800207ba.3
test r15d, r15d
jne 0x180020d25
mov dword [rbp + 0xc0], 0xffffffff
mov ebx, 0xbc
mov r12, qword [rbp + 0xc0]
cmp ebx, 0xbc
ja 0x180020a9e
je 0x180020ad6
mov eax, ebx
sub eax, 0x54
je 0x180020a95
sub eax, 0x42
je 0x180020a79
cmp eax, 8
jne 0x180020ac3
mov dword [rbp + 0x70], 1
lea r9, [rbp + 0xc8]
mov rax, qword [ParseURLA]
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x70]
mov qword [rbp + 0xc8], rax
mov ecx, 0x2a
mov qword [rbp + 0xd0], r12
mov qword [rsp + 0x20], r13
call fcn.180057280
jmp 0x180020ac3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.error__n
call fcn.18005f710
jmp 0x180020ac3
mov qword [rbp + 0xd8], rdi
jmp 0x180020ac3
cmp ebx, 0x888
je 0x180020abc
cmp ebx, 0xf3c
je 0x180020d19
cmp ebx, 0x10bc
je 0x180020b00
jmp 0x180020ac3
mov rsi, qword [rbp + 0xd8]
add ebx, 0x125c
cmp ebx, 0x8084
ja 0x180020b00
jmp 0x180020a12
cmp dword [r13 + 8], 0
je 0x180020afc
cmp dword [r13 + 0x80], 3
jl 0x180020afc
movsxd rax, dword [r13 + 0x88]
lea rcx, [rax + rax*4]
mov rax, qword [r13 + 0x68]
lea rsi, [rax + rcx*8]
jmp 0x180020b00
mov rsi, qword [r13 + 0x68]
mov r12, qword [rbp + 0x48]
mov r8d, dword [rbp + 0x14]
mov edx, dword [rbp + 0x10]
mov rbx, qword [rbp + 0x38]
mov qword [rbp + 0x40], rsi
jmp case.0x1800207ba.3
mov dword [rbp + 0x34], edi
mov r12, 0xffffffffffffffff
inc r12
cmp byte [r9 + r12], 0
jne 0x180020b22
inc r12d
mov qword [rbp + 0x48], r12
jmp case.0x1800207ba.3
cmp dword [r13 + 0x80], 2
jl 0x180020d3a
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov rcx, r13
lea r8d, [r9 + 0x69]
call fcn.180046840
mov r15d, eax
test eax, eax
jne 0x180020d11
mov dword [rbp + 0xe0], 0xffffffff
mov ebx, 0xbc
mov r12, qword [rbp + 0xe0]
nop dword [rax]
cmp ebx, 0xbc
ja 0x180020c0c
je 0x180020c44
mov eax, ebx
sub eax, 0x54
je 0x180020c03
sub eax, 0x42
je 0x180020be7
cmp eax, 8
jne 0x180020c31
mov dword [rbp + 0x78], 1
lea r9, [rbp + 0xe8]
mov rax, qword [ParseURLA]
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x78]
mov qword [rbp + 0xe8], rax
mov ecx, 0x2a
mov qword [rbp + 0xf0], r12
mov qword [rsp + 0x20], r13
call fcn.180057280
jmp 0x180020c31
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.error__n
call fcn.18005f710
jmp 0x180020c31
mov qword [rbp + 0x88], rdi
jmp 0x180020c31
cmp ebx, 0x888
je 0x180020c2a
cmp ebx, 0xf3c
je 0x180020d2e
cmp ebx, 0x10bc
je 0x180020c6e
jmp 0x180020c31
mov r14, qword [rbp + 0x88]
add ebx, 0x125c
cmp ebx, 0x8084
ja 0x180020c6e
jmp 0x180020b80
cmp dword [r13 + 8], 0
je 0x180020c6a
cmp dword [r13 + 0x80], 3
jl 0x180020c6a
movsxd rax, dword [r13 + 0x88]
lea rcx, [rax + rax*4]
mov rax, qword [r13 + 0x68]
lea r14, [rax + rcx*8]
jmp 0x180020c6e
mov r14, qword [r13 + 0x68]
mov edx, 0xb4
mov qword [rbp + 0x40], r14
mov rcx, r13
call fcn.1800417d0
mov r8d, dword [rbp + 0x14]
mov edx, dword [rbp + 0x10]
mov r12, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x38]
mov dword [rbp + 0x30], eax
jmp case.0x1800207ba.3
lea eax, [r12 + 1]
movsxd rcx, eax
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x180020ca7
mov rax, r10
and rax, 0xfffffffffffffff0
call fcn.18005fe60
sub rsp, rax
mov rcx, r9
lea rdx, [rsp + 0x50]
mov qword [rbp + 0xa0], rdx
sub rdx, r9
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x180020cd0
mov edx, dword [rbp + 0x10]
jmp case.0x1800207ba.3
mov rax, qword [rbp + 0x40]
mov eax, dword [rax + 4]
mov dword [rbp + 8], eax
mov eax, dword [rbp]
inc r8d
inc edx
mov dword [rbp + 0x14], r8d
mov dword [rbp + 0x10], edx
cmp r8d, eax
jae 0x180020dd8
mov r9, qword [rbp + 0x90]
jmp 0x180020795
mov dword [rbp + 8], eax
jmp 0x180020dd8
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp + 8], r15d
jmp 0x180020dd8
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp + 8], 0xffffff7d
jmp 0x180020dd8
mov rdx, qword [rbp + 0xa0]
lea rcx, [rdx - 1]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180020d51
movzx eax, word [0x1800788a0]
mov ebx, edi
mov word [rcx], ax
cmp dword [r13 + 0x10], 0
jle 0x180020dd0
mov r14, qword [rbp + 0x98]
mov rsi, rdi
nop dword [rax + rax]
mov rax, qword [r13]
lea rcx, [rbp + 8]
mov r8d, reloc.SHLWAPI.dll_GetAcceptLanguagesA
mov dword [rbp + 8], r12d
mov r9, qword [rsi + rax]
call fcn.18005f230
test eax, eax
jne 0x180020dac
mov eax, dword [rbp + 0x34]
cmp dword [r14], eax
je 0x180020dc1
inc eax
mov dword [rbp + 0x34], eax
inc ebx
add rsi, 8
cmp ebx, dword [r13 + 0x10]
jge 0x180020dd0
mov rdx, qword [rbp + 0xa0]
jmp 0x180020d80
mov rcx, qword [r13]
mov edx, ebx
movsxd rax, r12d
add rax, qword [rcx + rdx*8]
jmp 0x180020ddc
mov rax, rdi
jmp 0x180020ddc
mov dword [rbp + 8], edi
mov rax, qword [rbp + 8]
mov rcx, qword [rbp + 0xf8]
xor rcx, rbp
call fcn.18005fed0
mov rbx, qword [rbp + 0x130]
mov rsi, qword [rbp + 0x138]
mov rdi, qword [rbp + 0x140]
lea rsp, [rbp + 0x100]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret