Function at 0x180001000
Capabilities:
Terminate process

Disassembly:
push rbp
sub rsp, 0xb0
lea rbp, [rsp + 0x80]
mov rax, qword [0x180025008]
xor rax, rbp
mov qword [rbp + 0x28], rax
mov ecx, dword [0x180026d24]
mov eax, dword [0x180026d20]
mov edx, ecx
sub edx, 0x82734f90
sub edx, 1
add edx, 0x82734f90
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [rbp - 0x22], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [rbp - 0x21], al
mov dword [rbp - 0x28], 0x7db5553f
mov eax, dword [rbp - 0x28]
mov dword [rbp - 0x2c], eax
sub eax, 0xf290bd67
je 0x180001112
jmp 0x180001075
mov eax, dword [rbp - 0x2c]
sub eax, 0x1c0a6377
je 0x180001454
jmp 0x180001088
mov eax, dword [rbp - 0x2c]
sub eax, 0x425d849f
je 0x1800012ee
jmp 0x18000109b
mov eax, dword [rbp - 0x2c]
sub eax, 0x473ce30c
je 0x1800013bc
jmp 0x1800010ae
mov eax, dword [rbp - 0x2c]
sub eax, 0x637fce13
je 0x1800012fa
jmp 0x1800010c1
mov eax, dword [rbp - 0x2c]
sub eax, 0x64a2bbf6
je 0x180001419
jmp 0x1800010d4
mov eax, dword [rbp - 0x2c]
sub eax, 0x7db5553f
je 0x1800010ec
jmp 0x1800010e7
jmp 0x18000154a
mov al, byte [rbp - 0x22]
mov cl, byte [rbp - 0x21]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1c0a6377
mov ecx, 0xf290bd67
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x18000154a
mov eax, 0x630
call fcn.18000c360
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
mov eax, 0x10
mov qword [rbp - 0x40], rax
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rcx, rsp
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp - 0x18], rdx
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp - 0x38], rdx
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp - 0x10], rdx
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp - 8], rdx
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp], rdx
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp + 8], rdx
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp + 0x10], rdx
call fcn.18000c360
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x18], rax
sub rsp, 0x20
call fcn.180001550
add rsp, 0x20
mov rdx, rax
mov rcx, qword [rbp - 0x20]
mov r8d, 0x621
sub rsp, 0x20
call fcn.18000d530
mov rcx, qword [rbp - 0x38]
call fcn.180001ca0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x18]
mov rdx, qword [rcx]
mov qword [rax], rdx
mov edx, dword [rcx + 8]
mov dword [rax + 8], edx
mov cx, word [rcx + 0xc]
mov word [rax + 0xc], cx
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.180003a80
add rsp, 0x20
mov r8, rax
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
xor eax, eax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 0x10]
mov dword [rax], ecx
mov rax, qword [rbp - 0x10]
movsxd rax, dword [rax]
mov qword [rbp + 0x20], rax
mov ecx, dword [0x180026d24]
mov eax, dword [0x180026d20]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1c0a6377
mov ecx, 0x425d849f
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x18000154a
mov dword [rbp - 0x28], 0x637fce13
jmp 0x18000154a
mov rax, qword [rbp + 0x20]
mov ecx, 2
mul rcx
mov rcx, rax
seto dl
mov rax, 0xffffffffffffffff
test dl, 1
cmovne rcx, rax
sub rsp, 0x20
call fcn.18000c3b0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 8]
mov qword [rax], rcx
mov rax, qword [rbp - 0x10]
mov eax, dword [rax]
mov dword [rbp - 0x44], eax
mov rax, qword [rbp - 8]
mov rax, qword [rax]
mov qword [rbp - 0x50], rax
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.180003a80
mov r10, qword [rbp - 0x50]
add rsp, 0x20
mov r8, rax
mov eax, dword [rbp - 0x44]
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
sub rsp, 0x30
mov qword [rsp + 0x20], r10
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add rsp, 0x30
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.180003a80
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp]
mov qword [rax], rcx
mov dword [rbp - 0x28], 0x473ce30c
jmp 0x18000154a
mov rcx, qword [rbp + 0x10]
sub rsp, 0x20
call fcn.180002550
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.180003ef0
add rsp, 0x20
mov rdx, rax
mov rax, qword [rbp]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 8]
mov qword [rax], rcx
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x18]
mov qword [rax], rcx
mov dword [rbp - 0x28], 0x64a2bbf6
jmp 0x18000154a
mov rax, qword [rbp + 0x18]
mov rax, qword [rax]
mov qword [rbp - 0x58], rax
mov rcx, qword [rbp - 0x20]
sub rsp, 0x20
call fcn.180004270
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x58]
xor edx, edx
sub rsp, 0x20
call rax
add rsp, 0x20
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x630
call fcn.18000c360
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x78], rax
mov eax, 0x10
mov qword [rbp - 0x80], rax
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rcx, rsp
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rdx, rsp
mov qword [rbp - 0x68], rdx
call fcn.18000c360
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rdx, rsp
mov qword [rbp - 0x70], rdx
call fcn.18000c360
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x60], rax
sub rsp, 0x20
call fcn.180001550
mov rcx, qword [rbp - 0x78]
add rsp, 0x20
mov rdx, rax
mov r8d, 0x621
sub rsp, 0x20
call fcn.18000d530
mov rcx, qword [rbp - 0x70]
call fcn.180001ca0
mov rcx, qword [rbp - 0x68]
add rsp, 0x20
mov rdx, qword [rax]
mov qword [rcx], rdx
mov edx, dword [rax + 8]
mov dword [rcx + 8], edx
mov ax, word [rax + 0xc]
mov word [rcx + 0xc], ax
sub rsp, 0x20
call fcn.180003a80
add rsp, 0x20
mov r8, rax
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
xor eax, eax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 0x60]
mov dword [rax], ecx
mov dword [rbp - 0x28], 0xf290bd67
jmp 0x18000105f