Function at 0x1800041b0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x18005a098]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, qword [rbp - 0x61]
lea ebx, [rcx - 0x11]
mov dword [rbp - 0x51], ecx
mov esi, ecx
mov edi, dword [rbp - 0x51]
mov r13d, ecx
mov qword [rbp - 0x49], rdx
mov dword [rbp - 0x69], ebx
cmp ecx, ebx
jbe 0x180004586
mov rsi, qword [rbp - 0x61]
lea r12d, [rcx - 0xbc]
mov r14d, dword [rbp - 0x51]
lea r8, [0x180000000]
mov ebx, dword [rbp - 0x51]
mov r9d, 0x65
mov eax, dword [rbp - 0x69]
mov qword [rbp - 0x39], rsi
lea r10d, [r9 + 0xf]
lea r11d, [r9 - 0x1e]
cmp r12d, 0x34
ja case.default.0x18000424f
movzx eax, byte [r8 + r12 + 0x4ccc]
mov ecx, dword [r8 + rax*4 + 0x4c84]
add rcx, r8
jmp rcx
mov r8, rdx
xor r9d, r9d
mov edx, 0x10d
xor ecx, ecx
call fcn.18003e4c0
mov r9d, 0xbd
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rsi, rax
call fcn.180034c60
mov r15, rax
mov edx, 0xb6
mov ecx, edx
sub ecx, 0xb3
je 0x18000429a
sub ecx, 2
je 0x1800042a9
cmp ecx, 1
jne 0x18000429f
xor eax, eax
mov ebx, eax
jmp 0x18000429f
mov eax, dword [rsi]
mov dword [r15], eax
dec edx
cmp edx, 0xb3
ja 0x180004280
mov rsi, qword [rbp - 0x39]
mov r14d, ebx
jmp 0x180004554
dec dword [rdx + 0x38c]
jmp case.0x18000424f.17
mov dword [rbp + 6], 0x496d65
jmp case.0x18000424f.17
lea rax, [rbp - 0x41]
mov qword [rbp - 0x61], 4
mov r9, rsi
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rbp - 0x61]
mov r8d, 4
call fcn.18002ccc0
lea rax, [rbp - 0x41]
mov qword [rbp - 0x61], 6
mov r9, rsi
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rbp - 0x61]
mov r8d, 6
call fcn.18002ccc0
lea rax, [rbp - 0x41]
mov qword [rbp - 0x61], 7
mov r9, rsi
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rbp - 0x61]
mov r8d, 7
call fcn.18002ccc0
jmp 0x180004554
mov word [rbp], r9w
jmp case.0x18000424f.17
mov esi, 0xf0
cmp esi, 0xf0
je 0x180004397
cmp esi, 0x7440
jne 0x1800043af
mov eax, edi
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1800436f0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rdx, r15
mov ecx, 0xdf
call fcn.1800041b0
xor eax, eax
test r14d, r14d
mov edi, eax
sete dil
add esi, 0x7350
cmp esi, 0xe6a0
jbe 0x180004358
mov rsi, qword [rbp - 0x39]
lea rax, [rbp - 0x41]
mov qword [rbp - 0x61], 5
mov r9, rsi
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rbp - 0x61]
mov r8d, 5
call fcn.18002ccc0
lea rax, [rbp - 0x41]
mov qword [rbp - 0x61], 1
mov r9, rsi
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rbp - 0x61]
mov r8d, 1
call fcn.18002ccc0
jmp 0x180004554
xor eax, eax
lea rdx, [0x18004bd4c]
lea rcx, [rbp + 0x19]
mov word [rbp + 0x19], ax
lea r8d, [rax + 3]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x1f], ax
jmp 0x180004554
movsd xmm0, qword [0x18004bd68]
movzx eax, word [0x18004bd70]
movsd qword [rbp + 0xf], xmm0
mov word [rbp + 0x17], ax
mov dword [rbp + 9], 0x6f666e
jmp case.0x18000424f.17
mov dword [rbp + 1], 0x73795374
jmp case.0x18000424f.17
mov word [rbp + 5], r10w
jmp case.0x18000424f.17
xor eax, eax
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov r8d, 0xf6
call fcn.18000e210
mov rsi, rax
mov qword [rbp - 0x39], rax
xor eax, eax
mov qword [rbp - 0x61], 3
mov qword [rbp - 0x41], rax
lea rcx, [rbp - 0x61]
lea rax, [rbp - 0x41]
mov r9, rsi
mov edx, 0xf0
mov qword [rsp + 0x20], rax
mov r8d, 3
call fcn.18002ccc0
jmp 0x180004554
lea r8, [rbp - 1]
mov ecx, 0x43
lea rdx, [rbp + 0xf]
call fcn.18003df30
lea rcx, [rbp - 0x31]
call rax
mov edi, dword [rbp - 0x11]
jmp 0x180004554
mov word [rbp - 1], r11w
jmp case.0x18000424f.17
lea rax, [rbp - 0x41]
mov qword [rbp - 0x61], 2
mov r9, rsi
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rbp - 0x61]
mov r8d, 2
call fcn.18002ccc0
jmp 0x180004554
xor eax, eax
mov dword [rbp + 0x1f], 0x64002e
lea rdx, [0x18004bdd2]
mov word [rbp + 0x23], ax
lea rcx, [rbp + 0xf]
lea r8d, [rax + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180004554
cmp dword [rdx + 0x38c], 0
jne case.0x18000424f.17
xor r8d, r8d
mov ecx, 0x91
call fcn.180019f40
mov rdx, qword [rbp - 0x49]
lea r8, [0x180000000]
mov r11d, 0x47
lea r10d, [r11 + 0x2d]
lea r9d, [r11 + 0x1e]
mov eax, dword [rbp - 0x69]
dec r13d
dec r12d
cmp r13d, eax
ja 0x180004231
mov r15, qword [rbp - 0x39]
mov esi, dword [rbp - 0x51]
imul r13d, esi, 0x320
mov r12d, esi
cmp esi, r13d
ja 0x180004368
mov rsi, qword [rbp - 0x61]
mov rbx, qword [rbp - 0x61]
mov r14, qword [rbp - 0x61]
nop word [rax + rax]
cmp r12d, 0x11a72
ja 0x1800048db
je 0x180004896
cmp r12d, 0x7982
ja 0x18000479d
je 0x180004768
mov eax, r12d
sub eax, 0xce
je 0x180004675
sub eax, 0x22
je 0x180004368
sub eax, 0x281a
je 0x180004639
cmp eax, 0x283c
jne 0x180004aa6
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x180004613
cmp qword [rax + 8], 3
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Z23convert_double3_sat_rtzDv3_d
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rsi + 0x10], 0
jne 0x180004abb
cmp qword [rsi + 0x18], 0
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Install_service_failed__0x_08x_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9d, 0x112
mov qword [rbp - 0x61], 1
lea r8, [rbp - 0x61]
mov rcx, r15
lea rdx, [rbp - 0x41]
call fcn.18003d920
mov rsi, qword [rbp - 0x41]
mov edx, 0xb9
nop dword [rax]
mov eax, edx
sub eax, 0xb9
je 0x18000472b
sub eax, 0x23
je 0x180004723
sub eax, 0x5d
je 0x1800046c7
sub eax, 0x23
je 0x1800046fb
cmp eax, 0x80
jne 0x18000474c
mov rsi, rbx
cmp qword [rsi + 8], 2
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.1369EB2069FA4709B87E90CC3B560ACC
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rsi]
test rcx, rcx
je 0x18000471e
mov rax, qword [r15]
test cl, 1
je 0x18000470f
imul r14, rax
imul rax, rax
mov qword [r15], rax
shr qword [rsi], 1
mov rcx, qword [rsi]
jne 0x180004703
mov rbx, r14
jmp 0x18000474c
mov r14d, 1
jmp 0x18000474c
test rsi, rsi
je 0x180004748
cmp qword [rsi + 8], 2
je 0x180004760
jbe 0x18000473f
mov rsi, qword [rsi + 0x10]
jmp 0x180004743
mov rsi, qword [rsi + 0x18]
test rsi, rsi
jne 0x180004730
xor eax, eax
mov ebx, eax
sub edx, 0xffffff80
cmp edx, 0x339
jb 0x1800046a0
jmp 0x1800046c7
mov rbx, rsi
jmp 0x1800046ca
mov rsi, qword [rsi + 0x20]
cmp qword [rsi + 8], 3
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.YandexServices.UpdaterWasCreated
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp r12d, 0xa1be
je 0x18000482c
cmp r12d, 0xc9fa
je 0x1800047ec
cmp r12d, 0xf236
jne 0x180004aa6
cmp qword [rsi + 0x18], 0
jne 0x180004b07
mov rsi, qword [rsi + 0x20]
test rsi, rsi
je 0x180004ae1
cmp qword [rsi + 8], 3
jne 0x180004ae1
mov rsi, qword [rsi + 0x20]
jmp 0x180004aa6
mov rsi, qword [rsi + 0x18]
cmp qword [rsi + 8], 4
jne 0x180004b2d
cmp qword [rsi + 0x10], 0
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.err_direct_interface_unsupported
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x180004b79
cmp qword [rax + 8], 2
jne 0x180004b79
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x180004b53
cmp qword [rax + 8], 4
jne 0x180004b53
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x180004870
cmp qword [rax + 8], 5
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ERROR_IPSEC_IKE_INVALID_AUTH_ALG
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rsi + 8], 5
jne 0x180004b9f
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1800048b5
cmp qword [rax + 8], 3
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.IDCT_16x16_UV_2D_Hybrid_BB_14267
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp r12d, 0x1bb62
ja 0x180004a0e
je 0x1800049bc
cmp r12d, 0x142ae
je 0x180004982
cmp r12d, 0x16aea
je 0x180004951
cmp r12d, 0x19326
jne 0x180004aa6
mov rsi, qword [rsi + 0x18]
cmp qword [rsi + 8], 6
jne 0x180004bc5
cmp qword [rsi + 0x10], 0
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.new_number_settings_section.html
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rsi + 0x20], 0
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.FrameMsg_GetSavableResourceLinks
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x180004996
cmp qword [rax + 8], 6
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.HRESULT_ID3DXEffect::SetMatrix__
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x180004beb
cmp qword [rax + 8], 7
jne 0x180004beb
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x1800049e8
cmp qword [rax + 8], 5
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.EquivalentSignaturesIgnoringThis
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp r12d, 0x1e39e
je 0x180004a97
cmp r12d, 0x20bda
je 0x180004a4b
cmp r12d, 0x23416
jne 0x180004aa6
lea r8, [rbp - 0x59]
mov byte [rbp - 0x59], 1
mov rdx, r15
mov ecx, 0xec
call fcn.180030880
mov r15, rax
jmp 0x180004aa6
cmp qword [rsi + 0x10], 0
jne 0x180004c37
cmp qword [rsi + 0x18], 0
jne 0x180004c11
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x180004a71
cmp qword [rax + 8], 6
je 0x180004aa6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._depth_RandomizedTree_cv__QAEHXZ
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rsi, qword [rsi + 0x18]
cmp qword [rsi + 8], 7
jne 0x180004c5d
imul eax, dword [rbp - 0x51], 0x32
add r12d, eax
cmp r12d, r13d
jbe 0x1800045b0
jmp 0x180004368
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.vpWinRT::MFVideoSource::GetEvent
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ppEnabledLayerNames____nullptr
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Could_not_replace_the_old_bitmap
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.OGL_clampRenderTargetNanToZeroWA
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Sistemas_de_escritura_americanos
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.pool__type__AVMEDIA_TYPE_VIDEO
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.void_finish_thread_state_ptid_t_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Failed_to_read_drcov_log_file__s
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.invalid_type_in_type_constructor
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.uint8_clamped_array_external_map
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.vm_gc_detailed_evacuation_failed
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3