Function at 0x18004d950
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e0]
sub rsp, 0x3e0
mov rax, qword [0x180089b10]
xor rax, rsp
mov qword [rbp + 0x2d8], rax
mov r9, r8
mov qword [rsp + 0x70], r8
mov r15d, edx
mov dword [rsp + 0x40], edx
mov r14, rcx
mov qword [rsp + 0x68], rcx
lea eax, [rdx - 0xb]
lea r10, [0x180000000]
xor edi, edi
lea r11d, [rdi + 0x72]
mov r13d, dword [rsp + 0x48]
cmp edx, eax
jbe 0x18004db01
lea ebx, [rdx - 0x109]
lea edi, [r11 - 0x67]
lea esi, [rdi + 0x56]
lea edx, [rdi + 0x5a]
mov r12d, 0x6843
mov r8d, 0x5772
xor r14d, r14d
cmp ebx, 0x12
ja case.0x18004d9e7.8
mov ecx, dword [r10 + rbx*4 + 0x4e1e4]
add rcx, r10
jmp rcx
mov word [rbp + 0x2b2], si
mov dword [rbp + 0x2b3], 0x776f4c72
jmp case.0x18004d9e7.8
lea rcx, [rbp + 0x2c0]
sub rcx, 2
nop word [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], r14w
jne 0x18004da10
mov eax, dword [0x1800774c4]
mov dword [rcx], eax
jmp case.0x18004d9e7.8
mov word [rbp + 0x2b0], r12w
jmp case.0x18004d9e7.8
mov qword [0x180092610], r14
mov dword [0x180092620], r14d
jmp case.0x18004d9e7.8
mov word [rbp + 0x2b7], dx
mov word [rbp + 0x2b8], r8w
jmp case.0x18004d9e7.8
mov byte [rbp + 0x2ba], r14b
jmp case.0x18004d9e7.8
mov word [rbp + 0x2c6], r11w
jmp case.0x18004d9e7.8
mov r13d, r14d
jmp case.0x18004d9e7.8
mov eax, dword [0x1800774c8]
mov dword [rbp + 0x2c0], eax
movzx eax, word [0x1800774cc]
mov word [rbp + 0x2c4], ax
jmp case.0x18004d9e7.8
mov word [rbp + 0x2c8], r14w
mov r8d, 0xa
lea rdx, [rbp + 0x2c8]
lea ecx, [r8 - 7]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itow]
jmp 0x18004dad4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [0x180092608], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [0x180092600], rax
mov r11d, 0x72
lea r10, [0x180000000]
mov r8d, 0x5772
lea edx, [r11 - 0xd]
dec ebx
sub rdi, 1
jne 0x18004d9d3
mov r14, qword [rsp + 0x68]
mov r9, qword [rsp + 0x70]
lea eax, [r15 + 0xb]
mov dword [rsp + 0x60], eax
cmp r15d, eax
jae case.0x18004db3b.276
mov r12, qword [rsp + 0x70]
mov ebx, dword [rsp + 0x60]
nop dword [rax + rax]
lea eax, [r15 - 0x110]
cmp eax, 0x10
ja case.0x18004db3b.277
mov ecx, dword [r10 + rax*4 + 0x4e230]
add rcx, r10
jmp rcx
mov dword [0x18009261c], 0x19
mov eax, dword [r14]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x40]
mov rdx, r9
mov ecx, 0xca
call fcn.18005d770
test eax, eax
je case.0x18004db3b.277
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rsi, qword [r14 + 8]
mov rdi, qword [r14]
cmp rdi, rsi
je 0x18004db94
mov rcx, rdi
call fcn.18001e1d0
add rdi, 0x20
cmp rdi, rsi
jne 0x18004db80
mov rdi, qword [r14]
mov qword [r14 + 8], rdi
xor r8d, r8d
lea edx, [r8 + 0x31]
lea rcx, [rbp + 0x20]
call fcn.180014d70
jmp case.0x18004db3b.277
mov eax, 0x15
cmp eax, 0x15
je 0x18004e1cb
add eax, 0xd
cmp eax, 0x22
jb 0x18004dbb2
mov r8d, 0x30
lea rdx, [0x1800925b0]
xor ecx, ecx
call fcn.18006ee70
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x72]
call fcn.180047090
jmp case.0x18004db3b.277
mov dword [0x180092618], 1
mov dword [0x180092624], 2
jmp case.0x18004db3b.277
mov dword [rsp + 0x40], edi
lea r9, [rbp + 0x20]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x40]
mov ecx, 0x11d
call fcn.180065da0
test al, al
je case.0x18004db3b.277
nop
mov rcx, qword [rsp + 0x78]
call r12
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], 7
mov word [rbp], di
mov rdx, qword [rsp + 0x78]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x18004dc54
lea rcx, [rbp]
call fcn.180021030
nop
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004dc92
movups xmm0, xmmword [rbp]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rbp], di
add qword [r14 + 8], 0x20
jmp 0x18004dca2
lea r8, [rbp]
mov rcx, r14
call fcn.1800018a0
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x18004dcde
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004dcd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004e1d2
call fcn.18006f72c
mov dword [rsp + 0x40], edi
lea r9, [rbp + 0x20]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x40]
mov ecx, 0x11d
call fcn.180065da0
test al, al
jne 0x18004dc30
jmp case.0x18004db3b.277
mov r14d, dword [0x1800925a4]
cmp r14d, dword [0x1800925a8]
jg 0x18004df60
nop dword [rax + rax]
mov r15d, reloc.SHELL32.dll_SHSetFolderPathW
cmp r15d, 0xe8
je 0x18004dd56
cmp r15d, 0x174
jne 0x18004df32
mov rax, qword [0x180089c38]
mov rcx, qword [rax + 0xf8]
mov qword [0x180089c38], rcx
jmp 0x18004df32
mov edx, r14d
lea rcx, str.Frame__d_n
call fcn.18006ce50
cmp dword [0x180089c34], 0
jne 0x18004de2d
movups xmm0, xmmword [0x180092600]
movaps xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x180092610]
movaps xmmword [rbp - 0x50], xmm1
movsd xmm0, qword [0x180092620]
movsd qword [rbp - 0x40], xmm0
mov dword [rsp + 0x58], r14d
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [0x1800925b0]
xor r8d, r8d
mov edx, 0x82
xor ecx, ecx
call fcn.18006f050
test eax, eax
je 0x18004de07
mov edi, 0x11e
nop dword [rax]
mov eax, edi
sub eax, 0x11d
je 0x18004e1d9
cmp eax, 1
jne 0x18004ddfd
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8d, r14d
lea rdx, str.V_CMPX_EQ_I64_e64_si
call fcn.18006f4c0
dec edi
cmp edi, 0x11c
ja 0x18004ddd0
mov dword [rsp + 0x20], 0x8b
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x180089c38]
lea rcx, [0x1800925b0]
call fcn.180026ee0
jmp 0x18004df32
mov esi, 0xb8
mov eax, esi
sub eax, 0xb6
je 0x18004defa
sub eax, 1
je 0x18004def5
cmp eax, 1
jne 0x18004df1f
mov dword [rsp + 0x58], r13d
lea r8, [rsp + 0x58]
lea edx, [rax + 8]
mov rcx, qword [0x180089c38]
call fcn.18005f030
mov rbx, rax
test eax, eax
jg 0x18004df1f
mov edi, 0x12b
nop word [rax + rax]
mov eax, edi
sub eax, 0x12b
je 0x18004decb
sub eax, 0x28
je 0x18004dec1
cmp eax, 0x28
jne 0x18004dee8
mov eax, dword [rsp + 0x48]
mov rcx, qword [rbp + 0x2d8]
xor rcx, rsp
call fcn.18006fee0
mov rbx, qword [rsp + 0x428]
add rsp, 0x3e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rsp + 0x48], 1
jmp 0x18004dee8
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8d, r14d
lea rdx, str.__24.18g__018I64x__
call fcn.18006f4c0
add edi, 0x28
cmp edi, 0x1a3
jb 0x18004de80
jmp 0x18004df1f
add r13d, ebx
jmp 0x18004df1f
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 0x11a
mov r8, qword [0x180089c38]
xor edx, edx
xor ecx, ecx
call fcn.180060100
dec esi
cmp esi, 0xb5
mov edi, 0
ja 0x18004de32
add r15d, 0x8c
cmp r15d, 0x200
mov edi, 0
jb 0x18004dd26
inc r14d
cmp r14d, dword [0x1800925a8]
jle 0x18004dd20
mov r15d, dword [rsp + 0x40]
mov r14, qword [rsp + 0x68]
inc r15d
mov dword [rsp + 0x40], r15d
cmp r15d, dword [rsp + 0x60]
jae case.0x18004db3b.276
mov r9, qword [rsp + 0x70]
xor edi, edi
lea r10, [0x180000000]
jmp 0x18004db20
movsd xmm0, qword [str.2.dll]
movsd qword [rbp + 0x2ca], xmm0
mov eax, dword [0x180077518]
mov dword [rbp + 0x2d2], eax
mov esi, 0x71
mov edi, ILFindLastID
cmp edi, 0xe
ja case.0x18004dfc7.3
mov eax, edi
mov ecx, dword [r10 + rax*4 + 0x4e274]
add rcx, r10
jmp rcx
lea rdx, [rbp + 0x2c0]
mov ecx, PathMakeUniqueName
call fcn.180058630
test eax, eax
jne 0x18004e100
cmp dword [rbp + 0x2b0], eax
jge 0x18004e018
mov eax, 0xe9
nop
cmp eax, 0xe9
je 0x18004e004
cmp eax, 0xab1c
je case.0x18004dfc7.0
jmp 0x18004e00c
mov dword [rsp + 0x50], 3
add eax, 0xaa33
cmp eax, 0x15466
jbe 0x18004dff0
lea r10, [0x180000000]
jmp case.0x18004dfc7.3
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea rdx, [rbp + 0x2b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x50], rax
lea r10, [0x180000000]
jmp case.0x18004dfc7.3
cmp dword [rbp + 0x4c8], 0
jne 0x18004e088
cmp dword [rbp + 0x2b0], 0
jne 0x18004e0e8
mov ecx, 0x90
nop
cmp ecx, 0x8f
je 0x18004e112
dec ecx
cmp ecx, 0x8e
ja 0x18004e070
jmp 0x18004e0e8
xor r8d, r8d
mov edx, r8d
cmp dword [rbp + 0x4c8], edx
jle 0x18004e0e8
mov rcx, qword [rbp + 0x4d0]
nop dword [rax]
mov eax, dword [rbp + 0x2b0]
cmp dword [rcx], eax
jne 0x18004e0da
mov eax, 0x3f
nop
cmp eax, 0x3f
je 0x18004e0ce
cmp eax, 0x8dc
je 0x18004e0c9
cmp eax, 0x1179
je case.0x18004dfc7.0
jmp 0x18004e0ce
mov dword [rsp + 0x50], r8d
add eax, 0x89d
cmp eax, 0x19d7
jbe 0x18004e0b0
inc edx
add rcx, 4
cmp edx, dword [rbp + 0x4c8]
jl 0x18004e0a0
mov dword [rsp + 0x50], 3
dec esi
dec edi
cmp esi, 0x6b
jbe case.0x18004dfc7.0
jmp 0x18004dfb1
mov dword [rsp + 0x50], 0xfffffffc
mov r12, qword [rsp + 0x50]
jmp case.0x18004db3b.277
mov dword [rsp + 0x50], 0
mov r12, qword [rsp + 0x50]
jmp case.0x18004db3b.277
cmp qword [rbp + 0x2d0], 0xffffffffffffffff
jne 0x18004e140
mov dword [rsp + 0x50], 0xffffffff
mov r12, qword [rsp + 0x50]
jmp case.0x18004db3b.277
mov eax, dword [rbp + 0x2d0]
mov dword [rsp + 0x50], eax
mov r12, qword [rsp + 0x50]
jmp case.0x18004db3b.277
lea rax, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xca
call fcn.1800620c0
mov rax, qword [r14 + 8]
cmp qword [r14], rax
setne byte [rsp + 0x48]
jmp case.0x18004db3b.277
mov eax, dword [reloc.SHELL32.dll_SHChangeNotifyRegister]
mov dword [0x1800925c8], eax
movups xmm0, xmmword [0x180092600]
movaps xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x180092610]
movaps xmmword [rbp - 0x20], xmm1
movsd xmm0, qword [0x180092620]
movsd qword [rbp - 0x10], xmm0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 0x19]
lea rcx, [rbp - 0x30]
call fcn.180045a80
jmp case.0x18004db3b.277
mov eax, edi
jmp 0x18004de97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, 1
jmp 0x18004de97