Function at 0x18001e510
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x3b8
call fcn.180047890
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x14]
call fcn.180044430
test al, 1
jne 0x18001e542
mov dword [rsp + 0x20], 0
jmp 0x18001e886
call fcn.180022080
call fcn.1800410e0
xor ecx, ecx
call fcn.180032db0
test al, 1
jne 0x18001e56a
mov ecx, 0xefeb14b6
call fcn.18002c000
mov dword [rsp + 0x20], eax
jmp 0x18001e886
call fcn.1800129b0
mov ecx, 5
call fcn.18004a660
call fcn.18004aac0
call fcn.18001bac0
call fcn.18003d0c0
call fcn.18003c190
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x830]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x24], 0
call fcn.18004f790
mov rcx, rax
mov edx, 1
xor r8d, r8d
call fcn.180036fa0
test al, 1
jne 0x18001e5c2
jmp 0x18001e840
call fcn.18004e700
mov edx, dword [rsp + 0x28]
mov rcx, rax
call fcn.180032bc0
test al, 1
jne 0x18001e5dc
jmp 0x18001e83e
cmp dword [rsp + 0x28], 1
jne 0x18001e812
call fcn.180047890
add rax, 0x41c
lea r8, [rsp + 0x98]
mov rcx, rax
mov edx, select
call fcn.18003f680
lea rcx, [rsp + 0x2b0]
call fcn.180034e10
lea rcx, [rsp + 0x2b0]
lea rdx, [rsp + 0x98]
mov r8d, 0x102
call fcn.180012da0
cmp eax, 0
jne 0x18001e647
xor ecx, ecx
mov edx, 0xf374ff27
call fcn.180040490
mov ecx, 1
call rax
lea rcx, [rsp + 0x40]
call fcn.18001a1b0
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x98]
call fcn.180036b20
test al, 1
jne 0x18001e67a
xor ecx, ecx
mov edx, 0xf374ff27
call fcn.180040490
mov ecx, 1
call rax
lea rcx, [rsp + 0x1a0]
call fcn.18003cf30
lea rcx, [rsp + 0x1a0]
lea rdx, [rsp + 0x98]
call fcn.1800263a0
test al, 1
jne 0x18001e6b3
xor ecx, ecx
mov edx, 0xf374ff27
call fcn.180040490
mov ecx, 1
call rax
mov ecx, 0x4e9051aa
call fcn.18002c000
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x88]
mov r8d, eax
call fcn.180015d30
lea rcx, [rsp + 0x88]
xor edx, edx
call fcn.1800524c0
test al, 1
jne 0x18001e6e7
jmp 0x18001e729
call fcn.18004e700
lea rdx, [rsp + 0x1a0]
lea r8, [rsp + 0x40]
mov rcx, rax
call fcn.180032a20
test al, 1
jne 0x18001e71f
mov ecx, 0x1c9feb90
call fcn.18002c000
xor ecx, ecx
mov edx, eax
call fcn.180040490
mov ecx, 1
call rax
lea rcx, [rsp + 0x40]
call fcn.180009a40
lea rcx, [rsp + 0x40]
call fcn.18004e900
call fcn.18004e700
mov rcx, rax
call fcn.180016810
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x38]
call fcn.18004d1e0
test al, 1
jne 0x18001e79b
mov rsi, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
add rdx, 0x1c
lea rcx, [rsp + 0x70]
call fcn.18005bab0
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.180039ad0
mov bl, al
xor bl, 0xff
lea rcx, [rsp + 0x70]
call fcn.180051710
test bl, 1
jne 0x18001e78e
jmp 0x18001e799
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x18001e79b
call fcn.18004e700
mov rcx, rax
call fcn.1800380a0
mov rsi, rax
mov ecx, 0x1cd609e
call fcn.18002c000
lea rdx, [rsp + 0x60]
mov rcx, rsi
mov r8d, eax
call fcn.180015d30
lea rcx, [rsp + 0x60]
xor edx, edx
call fcn.1800524c0
test al, 1
jne 0x18001e7d7
jmp 0x18001e810
call fcn.18004e700
mov rcx, rax
call fcn.180028d60
test al, 1
jne 0x18001e7fb
xor ecx, ecx
mov edx, 0xf374ff27
call fcn.180040490
mov ecx, 1
call rax
call fcn.18004e700
mov rcx, rax
call fcn.1800380a0
mov rcx, rax
call fcn.180009a40
jmp 0x18001e812
call fcn.18004e700
mov rcx, rax
call fcn.18000d580
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jge 0x18001e834
mov dword [rsp + 0x24], 1
jmp 0x18001e83c
mov eax, dword [rsp + 0x2c]
mov dword [rsp + 0x24], eax
jmp 0x18001e83e
jmp 0x18001e857
mov ecx, 0x1c9feb90
call fcn.18002c000
xor ecx, ecx
mov edx, eax
call fcn.180040490
xor ecx, ecx
call rax
cmp dword [rsp + 0x28], 2
jne 0x18001e87c
test byte [0x18007a54c], 1
je 0x18001e871
mov dword [rsp + 0x20], 0
jmp 0x18001e886
call fcn.180001200
mov dword [rsp + 0x20], eax
jmp 0x18001e886
mov ecx, dword [rsp + 0x24]
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [rsp + 0x20]
add rsp, 0x3b8
pop rbx
pop rsi
ret