Function at 0x180030880
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rdi, qword [rsp + 0xa8]
mov r9, r8
lea r8d, [rcx + 0xa]
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x34], r8d
mov r12, rdx
mov edx, ecx
cmp ecx, r8d
jae case.0x18003090f.1
mov r15, qword [rsp + 0xa8]
lea r13d, [rcx - 0xe2]
mov r14, qword [rsp + 0xa8]
lea rcx, [0x180000000]
mov rbx, qword [rsp + 0xa8]
xor esi, esi
mov rbp, qword [rsp + 0xa8]
cmp r13d, 0x18
ja case.default.0x18003090f
mov ecx, dword [rcx + r13*4 + 0x30f38]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov qword [rsp + 0xa8], 3
mov r8d, 3
jmp 0x180030b32
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor edx, edx
xor ecx, ecx
mov r8d, 0xf6
call fcn.18000e210
mov r15, rax
jmp 0x180030b51
mov qword [rsp + 0x28], rsi
lea rdx, [rsp + 0xa8]
mov r9d, 0xef
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov qword [rsp + 0xa8], 0x18
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 1
call fcn.1800292f0
mov rdi, rax
jmp 0x180030b51
test r12, r12
je 0x180030aef
mov r9, qword [r12]
lea rdx, [rsp + 0xa8]
xor r8d, r8d
mov byte [rsp + 0xa8], 1
xor ecx, ecx
mov dword [rsp + 0x20], 0xe9
call fcn.180031df0
jmp 0x180030b51
lea rax, [rsp + 0x38]
mov qword [rsp + 0x38], rsi
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
mov qword [rsp + 0xa8], 1
mov r8d, 1
lea rcx, [rsp + 0xa8]
call fcn.18002ccc0
mov r8d, 2
mov qword [rsp + 0xa8], 2
jmp 0x180030b32
mov r14, qword [rsp + 0x38]
mov edx, 0xb9
mov eax, edx
sub eax, 0xb9
je 0x180030a9a
sub eax, 0x23
je 0x180030a93
sub eax, 0x5d
je 0x180030a37
sub eax, 0x23
je 0x180030a6b
cmp eax, 0x80
jne 0x180030abb
mov r14, rbx
cmp qword [r14 + 8], 1
je 0x180030b56
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.VmodlVimEventGeneralVmErrorEvent
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [r14]
test rcx, rcx
je 0x180030a8e
mov rax, qword [r15]
test cl, 1
je 0x180030a7f
imul rbp, rax
imul rax, rax
mov qword [r15], rax
shr qword [r14], 1
mov rcx, qword [r14]
jne 0x180030a73
mov rbx, rbp
jmp 0x180030abb
mov ebp, 1
jmp 0x180030abb
test r14, r14
je 0x180030ab8
nop
cmp qword [r14 + 8], 1
je 0x180030acf
jbe 0x180030aaf
mov r14, qword [r14 + 0x10]
jmp 0x180030ab3
mov r14, qword [r14 + 0x18]
test r14, r14
jne 0x180030aa0
mov rbx, rsi
sub edx, 0xffffff80
cmp edx, 0x339
jb 0x180030a14
jmp 0x180030a37
mov rbx, r14
jmp 0x180030a3a
cmp byte [r9], sil
je 0x180030b1b
mov edi, 0xfb
mov eax, edi
sub eax, 0xfb
je 0x180030af7
cmp eax, 0x45
jne 0x180030b07
mov rax, rsi
jmp 0x180030f1e
xor r8d, r8d
mov rdx, r12
mov ecx, 0x9e
call fcn.1800230f0
add edi, 0x45
cmp edi, 0x185
jb 0x180030ae1
mov edx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rdi, r12
jmp case.0x18003090f.2
mov qword [rsp + 0xa8], 4
mov r8d, 4
lea rax, [rsp + 0x38]
mov r9, r15
mov edx, 0xf0
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0xa8]
call fcn.18002ccc0
mov r8d, dword [rsp + 0x34]
mov edx, dword [rsp + 0x30]
lea rcx, [0x180000000]
inc edx
inc r13d
mov dword [rsp + 0x30], edx
cmp edx, r8d
jae 0x180030b7c
mov r9, qword [rsp + 0xa0]
jmp 0x1800308f3
mov ebx, dword [rsp + 0x90]
add ebx, 0xffffff0a
nop dword [rax]
cmp ebx, 9
ja case.default.0x180030baa
mov ecx, dword [rcx + rbx*4 + 0x30f9c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [r14 + 0x20]
test rax, rax
je 0x180030deb
cmp qword [rax + 8], 3
jne 0x180030deb
lea r8, [rsp + 0x90]
mov byte [rsp + 0x90], 1
mov rdx, r15
mov ecx, 0xec
call fcn.180030880
mov r8d, dword [rsp + 0x34]
mov r15, rax
jmp case.default.0x180030baa
cmp qword [r14 + 0x10], rsi
jne 0x180030e11
cmp qword [r14 + 0x18], rsi
je case.default.0x180030baa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.MprAdminRoutingDomainSetConfigEx
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [r14 + 0x20]
test rax, rax
je 0x180030c3c
cmp qword [rax + 8], 2
je case.default.0x180030baa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.External_memory_reported:__6d_KB
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [r14 + 0x10], rsi
jne 0x180030e37
cmp qword [r14 + 0x18], rsi
je case.default.0x180030baa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.feedback::FeedbackUploaderChrome
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r14, qword [r14 + 0x20]
cmp qword [r14 + 8], 2
je case.default.0x180030baa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.nEventType_errorcode_strErrorMsg
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [r14 + 0x18]
test rax, rax
je 0x180030ce5
cmp qword [rax + 8], 4
je case.default.0x180030baa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.guarantee_im__is_klass____failed
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [r14 + 0x20]
test rax, rax
je 0x180030e5d
cmp qword [rax + 8], 2
jne 0x180030e5d
mov r14, qword [r14 + 0x18]
cmp qword [r14 + 8], 4
je case.default.0x180030baa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.5E_rotation_QTabletEvent__QBENXZ
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [r14 + 8], 3
jne 0x180030e83
cmp qword [r14 + 0x10], rsi
je case.default.0x180030baa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.frames___d_markers___d_Hz___g
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [r14 + 0x18]
test rax, rax
je 0x180030ecf
cmp qword [rax + 8], 3
jne 0x180030ecf
cmp qword [r14 + 0x20], rsi
jne 0x180030ea9
mov r14, rax
jmp case.default.0x180030baa
mov rax, qword [r14 + 0x10]
test rax, rax
je 0x180030ef5
cmp qword [rax + 8], 1
jne 0x180030ef5
inc ebx
lea eax, [rbx + 0xf6]
cmp eax, r8d
jae case.0x18003090f.1
lea rcx, [0x180000000]
jmp 0x180030b90
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.unsupported_node_type_in_DupNode
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.elocale::_Impl::_M_replace_facet
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.GetMetaDataRequestMessage_failed
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Could_not_initialize_QoS_Manager
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.DISPLAY_OUTPUT_ACTOR_EX_TEXT_DVI
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Z23convert_ushort8_sat_rtpDv8_f
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.NV::UI::IGridEventSelectionModel
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Media.Remoting.VideoCodecProfile
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, rdi
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret