Function at 0x1800a7120
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov ebx, dword [rbp + 0x40]
mov r10, r9
imul eax, ecx, 0x390
mov r15, r8
mov rdi, rdx
mov dword [rbp - 0x30], ecx
mov esi, ecx
mov dword [rbp - 0x18], eax
cmp ecx, eax
ja 0x1800a71de
mov r14d, dword [rbp + 0x40]
mov r13d, dword [rbp + 0x40]
mov dword [rbp - 0x28], ebx
nop
cmp esi, 0x3ee4
ja 0x1800a753e
je 0x1800a7416
cmp esi, 0x44e
ja 0x1800a7253
je 0x1800a7243
mov eax, esi
sub eax, 0x13
je 0x1800a7206
sub eax, 0x34
je 0x1800a71f8
sub eax, 0x45
je 0x1800a71d2
cmp eax, 0x76
jne 0x1800a73ef
mov rax, qword [r15]
cmp dword [rax], 0x7f2bb712
jne 0x1800a7716
mov rax, qword [rax + 8]
test byte [rax + 0x10], 1
jne 0x1800a73ef
mov eax, 0x7f2bb715
jmp 0x1800a71e0
xor r14d, r14d
cmp dword [rdi], r14d
jg 0x1800a73ef
mov eax, ebx
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1800a73eb
lea r9, [rbp - 0x30]
mov dword [rbp - 0x30], 0x28
mov r8d, 0x28
lea rdx, [rbp - 0x10]
xor ecx, ecx
call fcn.1800a5750
test eax, eax
je 0x1800a73eb
lea rcx, str.rttHistorySize
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rbp - 0x10]
mov rax, qword [rdi]
mov qword [rcx + 0x18], rax
jmp 0x1800a73ef
cmp esi, 0x889
je 0x1800a7406
cmp esi, 0x1fb8
je 0x1800a728e
cmp esi, 0x3a74
jne 0x1800a73ef
mov rax, qword [r15]
cmp qword [rax + 0xb0], 0
jne 0x1800a73ef
mov eax, 0x7f2bb780
jmp 0x1800a71e0
mov edx, r14d
lea rcx, str.__03X_
call fcn.1800c03a0
xor r14d, r14d
xor r12d, r12d
cmp dword [rdi], r12d
jle 0x1800a73eb
lea ebx, [r14 + 8]
mov esi, 0x10d
nop word [rax + rax]
mov eax, esi
sub eax, 0x10d
je 0x1800a7391
cmp eax, 0x1a
jne 0x1800a73c9
mov eax, r14d
and eax, 0x8000000f
jge 0x1800a72e7
dec eax
or eax, 0xfffffff0
inc eax
test eax, eax
jne 0x1800a73c9
mov edi, 0xb3
mov eax, edi
sub eax, 0xb3
je 0x1800a734e
cmp eax, 0x5b
jne 0x1800a7380
lea eax, [r14 - 8]
mov dword [rbp - 0x40], ebx
movsxd rcx, eax
lea rdx, [rbp - 0x40]
add rcx, r15
xor r9d, r9d
mov qword [rsp + 0x20], rcx
mov r8d, 0xe7
xor ecx, ecx
call fcn.180080550
lea rcx, [0x1800cf0f8]
call fcn.1800c03a0
mov rax, qword [rbp + 0x48]
cmp r14d, dword [rax]
jge 0x1800a7380
mov edx, r14d
lea rcx, str.__03X_
call fcn.1800c03a0
jmp 0x1800a7380
lea eax, [r14 - 0x10]
mov dword [rbp - 0x40], ebx
movsxd rcx, eax
lea rdx, [rbp - 0x40]
add rcx, r15
xor r9d, r9d
mov qword [rsp + 0x20], rcx
mov r8d, 0xe7
xor ecx, ecx
call fcn.180080550
lea rcx, [0x1800c9210]
call fcn.1800c03a0
add edi, 0x5b
cmp edi, 0x169
jb 0x1800a72f4
jmp 0x1800a73c9
movsx edx, byte [r12 + r15]
lea rcx, str._02X
call fcn.1800c03a0
inc r14d
inc r12
mov eax, r14d
and eax, 0x80000007
jge 0x1800a73b9
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
jne 0x1800a73c9
lea rcx, [0x1800c9210]
call fcn.1800c03a0
add esi, 0x1a
cmp esi, 0x141
jb 0x1800a72c0
mov rdi, qword [rbp + 0x48]
cmp r14d, dword [rdi]
jl 0x1800a72b0
mov ebx, dword [rbp - 0x28]
mov esi, dword [rbp - 0x30]
mov r10, qword [rbp + 0x58]
imul eax, dword [rbp + 0x40], 0x39
add esi, eax
mov dword [rbp - 0x30], esi
cmp esi, dword [rbp - 0x18]
jbe 0x1800a7170
jmp 0x1800a71de
mov rcx, qword [rbp - 0x10]
mov rax, qword [r10]
mov qword [rcx + 0x20], rax
mov qword [r15], rcx
jmp 0x1800a73ef
mov edi, r14d
and edi, 0x8000000f
jge 0x1800a7428
dec edi
or edi, 0xfffffff0
inc edi
test edi, edi
je 0x1800a770d
mov esi, 0xbd
mov ebx, 8
nop word [rax + rax]
mov eax, esi
mov ecx, r13d
sub eax, 0xba
je 0x1800a74eb
sub eax, 1
je 0x1800a74e3
sub eax, 1
je 0x1800a74a9
cmp eax, 1
jne 0x1800a7524
mov r13d, 0x10
lea rcx, [0x1800c9210]
sub r13d, edi
call fcn.1800c03a0
cmp r13d, ebx
jle 0x1800a748d
lea rcx, [0x1800c9210]
call fcn.1800c03a0
test r13d, r13d
je 0x1800a74a4
lea rcx, [0x1800d003c]
call fcn.1800c03a0
sub r13d, 1
jne 0x1800a7492
dec r13d
jmp 0x1800a7524
cmp edi, ebx
lea rdx, [rbp - 0x40]
mov eax, r14d
mov r13d, edi
cmovg r13d, ebx
mov r8d, 0xe7
sub eax, edi
mov dword [rbp - 0x40], r13d
movsxd rcx, eax
xor r9d, r9d
add rcx, r15
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.180080550
lea rcx, [0x1800c9210]
jmp 0x1800a751f
mov r13d, edi
sub r13d, ecx
jmp 0x1800a7524
test r13d, r13d
jle 0x1800a7518
mov eax, r14d
mov dword [rbp - 0x40], r13d
sub eax, ecx
lea rdx, [rbp - 0x40]
movsxd rcx, eax
xor r9d, r9d
add rcx, r15
mov r8d, 0xe7
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.180080550
lea rcx, [0x1800cf0f8]
call fcn.1800c03a0
dec esi
cmp esi, 0xb9
ja 0x1800a7440
mov ebx, dword [rbp - 0x28]
mov rdi, qword [rbp + 0x48]
jmp 0x1800a73e8
cmp esi, 0x1203c
ja 0x1800a7689
je 0x1800a7640
cmp esi, 0x73e6
je 0x1800a75cb
cmp esi, 0xad58
je 0x1800a7578
cmp esi, 0xe6ca
jne 0x1800a73ef
mov rax, qword [rbp - 0x20]
inc dword [rax + 0x10]
jmp 0x1800a73ef
mov r12, qword [rbp - 0x20]
mov rdx, qword [r12 + 0x28]
mov rax, qword [r12]
test rdx, rdx
je 0x1800a759a
test byte [rdi], 1
je 0x1800a759e
add rdx, 0xc
dec dword [r12 + 0x10]
jmp 0x1800a759e
lea rdx, [rax + 0xc]
mov eax, dword [r12 + 0x10]
mov qword [r12 + 0x28], rdx
test eax, eax
js 0x1800a73ef
inc eax
movsxd rcx, eax
lea r8, [rcx + rcx*2]
shl r8, 2
lea rcx, [rdx + 0xc]
call sub.VCRUNTIME140.dll_memmove
jmp 0x1800a73eb
mov rcx, qword [r15]
movsxd rax, dword [rcx + 0xa4]
lea r12, [rax + rax*2]
shl r12, 4
add r12, qword [rcx + 0xb0]
mov qword [rbp - 0x20], r12
mov eax, dword [r12 + 0xc]
cmp dword [r12 + 8], eax
jl 0x1800a73ef
test byte [rdi], 2
jne 0x1800a7720
mov qword [rbp - 0x20], rcx
lea rdx, [rbp - 0x20]
mov ecx, 0xdd
call fcn.180072bd0
mov dword [rbp - 0x38], eax
test eax, eax
jne 0x1800a71e0
mov rcx, qword [r15]
movsxd rax, dword [rcx + 0xa4]
lea r12, [rax + rax*2]
shl r12, 4
add r12, qword [rcx + 0xb0]
mov qword [rbp - 0x20], r12
jmp 0x1800a73eb
mov r12, qword [rbp - 0x20]
xor r9d, r9d
mov r8, r10
mov dword [rbp - 0x40], 0
mov edx, 0xdf
inc dword [r12 + 8]
mov rax, qword [r12]
mov ecx, dword [r12 + 8]
mov word [rax + 2], cx
lea rcx, [rbp - 0x40]
mov rax, qword [r15]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
call fcn.180036cc0
mov dword [rbp - 0x38], eax
jmp 0x1800a73eb
cmp esi, 0x159ae
je 0x1800a76b1
cmp esi, 0x19320
je 0x1800a71de
cmp esi, 0x1cc92
jne 0x1800a73ef
mov eax, dword [rbp - 0x38]
jmp 0x1800a71e0
cmp dword [rbp - 0x38], 0
jne 0x1800a76e1
mov rax, qword [r15]
lea rcx, [rbp - 0x40]
xor edx, edx
mov qword [rbp - 0x40], rax
mov r8d, 0x98
call fcn.18008d880
mov dword [rbp - 0x38], eax
cmp eax, 0
jne 0x1800a76e1
xor ebx, ebx
mov dword [rbp - 0x28], ebx
jmp 0x1800a73eb
mov rax, qword [r15]
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x40]
mov qword [rbp - 0x30], rax
mov edx, 0xb5
mov dword [rbp - 0x40], 0
xor ecx, ecx
mov esi, 0x19320
call fcn.1800ba4e0
jmp 0x1800a73eb
mov rdi, qword [rbp + 0x48]
jmp 0x1800a73ef
mov eax, 0x7f2bb712
jmp 0x1800a71e0
mov eax, 0x7f2bb782
jmp 0x1800a71e0