Function at 0x18001bc60
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x18003ca28]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov ebx, dword [rsp + 0x60]
mov rsi, r8
imul eax, edx, 0x50a
mov rdi, rcx
mov qword [rbp - 0x78], r8
mov r15d, edx
mov dword [rsp + 0x78], edx
mov qword [rbp - 0x80], rcx
mov dword [rsp + 0x58], edx
mov dword [rsp + 0x68], eax
cmp edx, eax
ja 0x18001c30e
mov r13, qword [rbp - 0x78]
lea r12, [0x18002fa85]
mov r14d, dword [rsp + 0x60]
nop
cmp r15d, 0xcc5e
ja 0x18001c2b9
je 0x18001c1e0
mov eax, r15d
sub eax, 0x98
je 0x18001c0af
sub eax, 0x32
je 0x18001bfe6
sub eax, 0x4c66
je 0x18001bfd3
sub eax, 0x1964
je 0x18001bd63
cmp eax, 0x3334
jne 0x18001c5c7
mov rdi, qword [rbp - 0x70]
lea rdx, [0x18003cb70]
mov rax, qword [rsi]
mov r8, rdi
mov qword [rsp + 0x28], 0
mov ecx, 0x68
mov qword [rsp + 0x20], 0
mov qword [rdi + 0x20], rax
mov r9, qword [rsi]
call fcn.180026880
mov r8, qword [rsi]
lea rdx, str.type__s
lea rcx, [rbp - 0x60]
call fcn.18002d030
jmp 0x18001c5c7
test r13, r13
je 0x18001c5c7
mov r12d, 0x93
cmp r12d, 0x93
je 0x18001bfa0
cmp r12d, 0x14d
je 0x18001be55
cmp r12d, 0x207
je 0x18001be2f
cmp r12d, 0x2c1
jne 0x18001bfae
mov r9, r13
xor r8d, r8d
mov rdx, rdi
mov ecx, 0x117
call fcn.180028550
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c670
mov edi, 0x11a
cmp edi, 0x11a
je 0x18001c651
cmp edi, 0x877e
je 0x18001c5ef
cmp edi, 0x10de2
jne 0x18001c65e
lea r9, [0x18002fa85]
mov dword [rsp + 0x68], 0
lea r8, [rsp + 0x68]
mov ecx, 0x5d
lea rdx, [0x18002fa85]
call fcn.180007790
jmp 0x18001c65e
cmp dword [r13 + 0xc], 0
je 0x18001bfae
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov ecx, 0x89
call fcn.180027cc0
mov r13, rax
jmp 0x18001bfae
mov eax, dword [rdi + 0x10]
cmp dword [r13 + 0x10], eax
je 0x18001bfae
mov r15d, 0xa1
nop dword [rax + rax]
mov eax, r15d
sub eax, 0xa1
je 0x18001be8d
cmp eax, 1
jne 0x18001bf86
mov eax, 0xffffffff
jmp 0x18001c310
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001bf86
mov esi, 0x56
mov eax, esi
sub eax, 0x54
je 0x18001bf3f
sub eax, 1
je 0x18001bee0
cmp eax, 1
jne 0x18001bf7b
xor edx, edx
lea r8d, [rax + 0x14]
xor ecx, ecx
call fcn.18002a460
jmp 0x18001bf7b
cmp r14d, dword [0x18003cb1c]
je 0x18001bf7b
mov edi, 0x4d
mov eax, edi
sub eax, 0x4d
je 0x18001bf2a
sub eax, 1
je 0x18001bf0c
cmp eax, 1
jne 0x18001bf36
mov dword [0x18003cb1c], r14d
jmp 0x18001bf36
lea rax, [0x18002fa85]
xor r9d, r9d
mov r8, rax
lea rcx, str.define___DBL_MIN_EXP_____1021_
mov rdx, rax
call fcn.18002cfd0
jmp 0x18001bf36
lea rcx, str.o_do_Adobe_Flash_Player._Se_continuar_a_executar__o_seu_computador_pode_n
call fcn.18002cfd0
inc edi
cmp edi, 0x50
jb 0x18001bef2
jmp 0x18001bf7b
lea rax, str.Unknown_precision_value.
mov dword [rsp + 0x50], 0
mov qword [0x18003cb60], rax
lea r8, [rsp + 0x50]
lea rax, [0x18002fa85]
mov r9d, 0xda
mov rcx, rax
mov qword [rsp + 0x20], rax
lea rdx, str.llvm.x86.mic.mskblend.pq
call fcn.1800186f0
dec esi
cmp esi, 0x53
ja 0x18001beb5
inc r15d
cmp r15d, 0xa3
jb 0x18001be70
mov rdi, qword [rbp - 0x80]
mov rsi, qword [rbp - 0x78]
jmp 0x18001bfae
cmp dword [r13 + 0x10], 0
jne 0x18001bfae
mov eax, dword [rdi + 0x10]
mov dword [r13 + 0x10], eax
add r12d, 0xba
cmp r12d, 0x37b
jb 0x18001bd72
mov r15d, dword [rsp + 0x58]
lea r12, [0x18002fa85]
jmp 0x18001c5c7
mov eax, dword [rdi]
mov rcx, qword [rbp - 0x70]
mov dword [rcx], eax
mov eax, dword [rsi + 8]
mov dword [rcx + 8], eax
jmp 0x18001c5c7
mov r14d, dword [0x18003cb1c]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c092
mov edi, 0x6b
xor r13d, r13d
cmp edi, 0x6b
je 0x18001c031
cmp edi, 0x10d
jne 0x18001c084
xor edx, edx
lea ecx, [rdi - 0x42]
call fcn.18002b650
jmp 0x18001c084
movzx edx, byte [0x18003cbb1]
mov ecx, 0x4f
nop dword [rax]
mov eax, ecx
sub eax, 0x4c
je 0x18001c05a
sub eax, 1
je 0x18001c064
cmp eax, 2
jne 0x18001c05d
mov byte [0x18003900c], 0x2b
jmp 0x18001c05d
or dl, 2
inc ecx
cmp ecx, 0x52
jb 0x18001c040
mov byte [0x18003cbb1], dl
lea r8, [rsp + 0x50]
mov rdx, r12
mov dword [rsp + 0x50], r13d
mov r9, r12
mov ecx, 0x5d
call fcn.180007790
add edi, 0xa2
cmp edi, 0x1af
jb 0x18001c018
mov rcx, qword [0x18003cb50]
mov r8d, 0x5d
mov rdx, rsi
call fcn.180013060
mov r13, rax
jmp 0x18001c5c7
mov eax, dword [0x18003cb1c]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x70], eax
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c152
mov edi, 0x73
nop dword [rax]
mov eax, edi
sub eax, 0x71
je 0x18001c13f
sub eax, 1
je 0x18001c120
cmp eax, 1
jne 0x18001c14b
mov ecx, 0x4f
mov eax, ecx
sub eax, 0x4c
je 0x18001c110
sub eax, 1
je 0x18001c14b
cmp eax, 2
jne 0x18001c117
mov byte [0x18003900c], 0x2b
jmp 0x18001c117
or byte [0x18003cbb1], 2
inc ecx
cmp ecx, 0x52
jb 0x18001c0f6
jmp 0x18001c14b
mov r9, r12
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x50]
mov rdx, r12
mov ecx, 0x5d
call fcn.180007790
jmp 0x18001c14b
xor edx, edx
mov ecx, 0xcb
call fcn.18002b650
dec edi
cmp edi, 0x70
ja 0x18001c0e0
mov edx, 1
lea ecx, [rdx + 0x3f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x70], rax
mov rdi, rax
test rax, rax
je 0x18001c680
xor esi, esi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c5c7
lea rax, [rsp + 0x40]
mov byte [rsp + 0x40], 1
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x48]
mov dword [rsp + 0x28], 0x121
mov r8, r12
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
mov byte [rsp + 0x48], 2
mov rcx, r12
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x58], esi
call fcn.18001c8f0
jmp 0x18001c5c7
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r13, rax
test rax, rax
jne 0x18001c245
mov edi, 0x7b
nop dword [rax + rax]
cmp edi, 0x7b
je 0x18001c218
cmp edi, 0x4f47
jne 0x18001c233
mov ecx, dword [rsp + 0x7c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 0xe
lea rdx, str.ar36_UNAT_36
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov dword [rsp + 0x7c], eax
add edi, 0x4ecc
cmp edi, 0x9d98
jbe 0x18001c200
mov rdi, qword [rbp - 0x80]
xor esi, esi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c2a6
lea rax, [rsp + 0x48]
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x121
mov r8, r12
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
mov byte [rsp + 0x40], 2
mov rcx, r12
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x58], esi
call fcn.18001c8f0
mov ecx, dword [rdi + 8]
cmp ecx, dword [rdi + 0xc]
cmovle ecx, dword [rdi + 0xc]
mov dword [rsp + 0x74], ecx
jmp 0x18001c5c7
cmp r15d, 0xe660
je 0x18001c4d0
cmp r15d, 0x13228
je 0x18001c4b0
cmp r15d, 0x132f8
je 0x18001c402
cmp r15d, 0x197f2
jne 0x18001c5c7
mov esi, 0x8e
cmp esi, 0x8e
je 0x18001c341
cmp esi, 0x6466
je 0x18001c33a
cmp esi, 0xc83e
jne 0x18001c3eb
mov eax, ebx
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.18002d670
mov rbx, qword [rsp + 0x2f8]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ebx, ebx
jmp 0x18001c3eb
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c3eb
mov edi, 0x10d
nop dword [rax]
mov eax, edi
sub eax, 0x10c
je 0x18001c3c4
cmp eax, 1
jne 0x18001c3e1
xor edx, edx
lea r8d, [rax + 0x14]
xor ecx, ecx
call fcn.18002a460
mov r8d, dword [0x18003cb1c]
cmp r14d, r8d
je 0x18001c3e1
mov edx, r14d
lea rcx, str.b3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMWKGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsG
call fcn.18002cfd0
xor r9d, r9d
lea rcx, str._Z22convert_ulong8_sat_rtpDv8_c
mov r8, r12
mov rdx, r12
call fcn.18002cfd0
mov dword [0x18003cb1c], r14d
jmp 0x18001c3e1
mov r9, r12
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x50]
mov rdx, r12
mov ecx, 0x5d
call fcn.180007790
dec edi
cmp edi, 0x10b
ja 0x18001c370
add esi, 0x63d8
cmp esi, 0x12b88
jbe 0x18001c2f2
jmp 0x18001c5c7
mov edi, 0x44
mov eax, edi
sub eax, 0x44
je 0x18001c41c
cmp eax, 1
je 0x18001c30e
jmp 0x18001c4a0
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c49e
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
mov r8d, dword [0x18003cb1c]
mov ebx, dword [rsp + 0x70]
cmp ebx, r8d
je 0x18001c481
mov edx, ebx
lea rcx, str.___Pass_bytes_on_through_for_single_byte_encodings__e.g._ascii__latin1__hex_
call fcn.18002cfd0
xor r9d, r9d
lea rcx, str.__0SystemInfo_Host_Vim__QAE_XZ
mov r8, r12
mov rdx, r12
call fcn.18002cfd0
mov dword [0x18003cb1c], ebx
mov r9, r12
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x50]
mov rdx, r12
mov ecx, 0x5d
call fcn.180007790
xor ebx, ebx
inc edi
cmp edi, 0x46
jb 0x18001c407
jmp 0x18001c5c7
mov eax, dword [rdi + 0x10]
mov r8, r13
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x58], eax
mov qword [rsp + 0x20], rsi
jmp 0x18001c5b2
mov edx, 1
lea ecx, [rdx + 0x1f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rsi, rax
test rax, rax
jne 0x18001c534
mov edi, 0x8c
nop dword [rax + rax]
cmp edi, 0x8c
je 0x18001c50b
cmp edi, 0x44e8
jne 0x18001c526
mov ecx, dword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 0xe
lea rdx, str.Vinimaka__Indi
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov dword [rsp + 0x60], eax
add edi, 0x445c
cmp edi, 0x88b8
jbe 0x18001c4f0
xor edi, edi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18001c594
lea rax, [rsp + 0x48]
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x121
mov r8, r12
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
mov byte [rsp + 0x40], 2
mov rcx, r12
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x58], edi
call fcn.18001c8f0
lea rcx, [rbp - 0x60]
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x58], 0xb
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov qword [rsp + 0x20], rax
mov r8, rsi
mov r9d, 0x33
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.18001db00
imul eax, dword [rsp + 0x78], 0x81
add r15d, eax
mov dword [rsp + 0x58], r15d
cmp r15d, dword [rsp + 0x68]
ja 0x18001c30e
mov rdi, qword [rbp - 0x80]
mov rsi, qword [rbp - 0x78]
jmp 0x18001bcd0
cmp r14d, dword [0x18003cb1c]
je 0x18001c65e
mov ebx, 0x2e
nop dword [rax]
mov eax, ebx
sub eax, 0x2e
je 0x18001c615
cmp eax, 1
jne 0x18001c648
mov dword [0x18003cb1c], r14d
jmp 0x18001c648
mov r8d, dword [0x18003cb1c]
lea rcx, str.Y9iJSrSq3RZj9W6YKH47ejWkE8axsWgKdOnIaj1Wjz3x0miIZpKlVIglnKaZsv30oZDfCKlvm9
mov edx, r14d
call fcn.18002cfd0
xor r9d, r9d
lea r8, [0x18002fa85]
lea rdx, [0x18002fa85]
lea rcx, str.Intervention_Drug_Code_Sequence
call fcn.18002cfd0
inc ebx
cmp ebx, 0x30
jb 0x18001c600
jmp 0x18001c65e
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
add edi, 0x8664
cmp edi, 0x1932c
jbe 0x18001bde1
xor eax, eax
jmp 0x18001c310
mov r8d, 0xe
lea rdx, str.0_pur_minutu
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3