Function at 0x180001000
Capabilities:
Terminate process

Disassembly:
push rbp
sub rsp, 0x6d0
lea rbp, [rsp + 0x80]
mov rax, qword [0x180023008]
xor rax, rbp
mov qword [rbp + 0x648], rax
mov dword [rbp - 0x3c], 0xc06bd5b3
mov eax, dword [rbp - 0x3c]
mov dword [rbp - 0x40], eax
sub eax, 0x821504a0
je 0x1800013fe
jmp 0x18000103e
mov eax, dword [rbp - 0x40]
sub eax, 0x8e2ba68c
je 0x1800012d5
jmp 0x180001051
mov eax, dword [rbp - 0x40]
sub eax, 0x90e33003
je 0x1800012e1
jmp 0x180001064
mov eax, dword [rbp - 0x40]
sub eax, 0xc06bd5b3
je 0x180001114
jmp 0x180001077
mov eax, dword [rbp - 0x40]
sub eax, 0xc98bc225
je 0x18000157a
jmp 0x18000108a
mov eax, dword [rbp - 0x40]
sub eax, 0xccea8b74
je 0x180001454
jmp 0x18000109d
mov eax, dword [rbp - 0x40]
sub eax, 0x1ca6f679
je 0x1800016a5
jmp 0x1800010b0
mov eax, dword [rbp - 0x40]
sub eax, 0x2c98e929
je 0x18000157a
jmp 0x1800010c3
mov eax, dword [rbp - 0x40]
sub eax, 0x3498a8a0
je 0x180001362
jmp 0x1800010d6
mov eax, dword [rbp - 0x40]
sub eax, 0x4b52e771
je 0x180001163
jmp 0x1800010e9
mov eax, dword [rbp - 0x40]
sub eax, 0x6b524e53
je 0x18000140a
jmp 0x1800010fc
mov eax, dword [rbp - 0x40]
sub eax, 0x71054e06
je 0x18000164c
jmp 0x18000110f
jmp 0x180001756
mov eax, dword [0x180024d1c]
mov ecx, dword [0x180024d18]
mov edx, eax
add edx, 0x205069a
sub edx, 1
sub edx, 0x205069a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc98bc225
mov ecx, 0x4b52e771
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x3c], eax
jmp 0x180001756
mov eax, 0x10
mov qword [rbp - 0x48], rax
call fcn.18000a1b0
sub rsp, rax
mov rax, qword [rbp - 0x48]
mov rcx, rsp
mov qword [rbp - 0x18], rcx
call fcn.18000a1b0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov rcx, rbp
sub rsp, 0x20
call fcn.180001760
add rsp, 0x20
mov rdx, rax
lea rcx, [rbp + 0x18]
mov r8d, 0x629
sub rsp, 0x20
call fcn.18000b380
add rsp, 0x20
lea rcx, [rbp - 8]
sub rsp, 0x20
call fcn.180001ce0
add rsp, 0x20
mov rcx, qword [rax]
mov qword [rbp + 8], rcx
mov ecx, dword [rax + 8]
mov dword [rbp + 0x10], ecx
mov ax, word [rax + 0xc]
mov word [rbp + 0x14], ax
lea rcx, [rbp + 8]
sub rsp, 0x20
call fcn.180003b40
add rsp, 0x20
mov r8, rax
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
xor eax, eax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add rsp, 0x30
mov dword [rbp - 0x1c], eax
movsxd rax, dword [rbp - 0x1c]
mov ecx, 2
mul rcx
mov rcx, rax
seto dl
mov rax, 0xffffffffffffffff
test dl, 1
cmovne rcx, rax
sub rsp, 0x20
call fcn.18000a200
add rsp, 0x20
mov qword [rbp - 0x28], rax
mov ecx, dword [0x180024d1c]
mov eax, dword [0x180024d18]
mov edx, ecx
add edx, 0x55ba3e00
sub edx, 1
sub edx, 0x55ba3e00
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc98bc225
mov ecx, 0x8e2ba68c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x3c], eax
jmp 0x180001756
mov dword [rbp - 0x3c], 0x90e33003
jmp 0x180001756
mov ecx, dword [0x180024d1c]
mov eax, dword [0x180024d18]
mov edx, ecx
sub edx, 0x1796f35
sub edx, 1
add edx, 0x1796f35
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x71054e06
mov ecx, 0x3498a8a0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x3c], eax
jmp 0x180001756
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x4c], eax
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x58], rax
lea rcx, [rbp + 8]
sub rsp, 0x20
call fcn.180003b40
mov r10, qword [rbp - 0x58]
add rsp, 0x20
mov r8, rax
mov eax, dword [rbp - 0x4c]
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
sub rsp, 0x30
mov qword [rsp + 0x20], r10
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add rsp, 0x30
mov eax, dword [0x180024d1c]
mov ecx, dword [0x180024d18]
mov edx, eax
add edx, 0xfe346bbf
sub edx, 1
sub edx, 0xfe346bbf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x71054e06
mov ecx, 0x821504a0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x3c], eax
jmp 0x180001756
mov dword [rbp - 0x3c], 0x6b524e53
jmp 0x180001756
mov eax, dword [0x180024d1c]
mov ecx, dword [0x180024d18]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ca6f679
mov ecx, 0xccea8b74
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x3c], eax
jmp 0x180001756
lea rcx, [rbp + 8]
sub rsp, 0x20
call fcn.180003b40
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rsp, 0x20
mov qword [rbp - 0x30], rax
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.180002490
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180003fb0
add rsp, 0x20
mov rdx, rax
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
add rsp, 0x20
mov qword [rbp - 0x38], rax
mov rcx, qword [rbp - 0x38]
mov rax, qword [rbp - 0x10]
mov qword [rax], rcx
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov qword [rbp - 0x60], rax
lea rcx, [rbp + 0x18]
sub rsp, 0x20
call fcn.180004280
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x60]
xor edx, edx
sub rsp, 0x20
call rax
add rsp, 0x20
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, rbp
sub rsp, 0x20
call fcn.180001760
add rsp, 0x20
mov rdx, rax
lea rcx, [rbp + 0x18]
mov r8d, 0x629
sub rsp, 0x20
call fcn.18000b380
add rsp, 0x20
lea rcx, [rbp - 8]
sub rsp, 0x20
call fcn.180001ce0
add rsp, 0x20
mov rcx, qword [rax]
mov qword [rbp + 8], rcx
mov ecx, dword [rax + 8]
mov dword [rbp + 0x10], ecx
mov ax, word [rax + 0xc]
mov word [rbp + 0x14], ax
lea rcx, [rbp + 8]
sub rsp, 0x20
call fcn.180003b40
add rsp, 0x20
mov r8, rax
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
xor eax, eax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add rsp, 0x30
mov dword [rbp - 0x1c], eax
movsxd rax, dword [rbp - 0x1c]
mov ecx, 2
mul rcx
mov rcx, rax
seto dl
mov rax, 0xffffffffffffffff
test dl, 1
cmovne rcx, rax
sub rsp, 0x20
call fcn.18000a200
add rsp, 0x20
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x3c], 0x4b52e771
jmp 0x180001756
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x64], eax
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x70], rax
lea rcx, [rbp + 8]
sub rsp, 0x20
call fcn.180003b40
mov r10, qword [rbp - 0x70]
add rsp, 0x20
mov r8, rax
mov eax, dword [rbp - 0x64]
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
sub rsp, 0x30
mov qword [rsp + 0x20], r10
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add rsp, 0x30
mov dword [rbp - 0x3c], 0x3498a8a0
jmp 0x180001756
lea rcx, [rbp + 8]
sub rsp, 0x20
call fcn.180003b40
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rsp, 0x20
mov qword [rbp - 0x30], rax
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.180002490
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180003fb0
add rsp, 0x20
mov rdx, rax
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
add rsp, 0x20
mov qword [rbp - 0x38], rax
mov rcx, qword [rbp - 0x38]
mov rax, qword [rbp - 0x10]
mov qword [rax], rcx
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov qword [rbp - 0x78], rax
lea rcx, [rbp + 0x18]
sub rsp, 0x20
call fcn.180004280
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x78]
xor edx, edx
sub rsp, 0x20
call rax
add rsp, 0x20
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x180001028