Function at 0x1800c5db0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x18017d2b8]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
lea eax, [rcx + 7]
mov qword [rsp + 0x78], r9
mov dword [rsp + 0x70], eax
mov r13, rdx
mov rdx, qword [rbp + 0x240]
mov rsi, r9
mov edi, dword [rsp + 0x70]
mov r15d, ecx
mov qword [rbp - 0x70], r8
mov qword [rbp - 0x78], rdx
cmp ecx, eax
jae case.0x1800c5e3f.109
mov ebx, dword [rsp + 0x70]
mov r12d, dword [rsp + 0x70]
mov qword [rbp - 0x58], rbx
mov dword [rbp - 0x64], edi
lea eax, [r15 - 0x5e]
lea r9, [0x180000000]
cmp eax, 0xf
ja case.0x1800c5e3f.97
mov ecx, dword [r9 + rax*4 + 0xc658c]
add rcx, r9
jmp rcx
test rsi, rsi
je 0x1800c64ea
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdx, qword [rbp - 0x78]
xor edi, edi
mov dword [rbp - 0x64], edi
jmp 0x1800c64ac
mov ecx, dword [0x18017d654]
mov dword [rbp - 0x68], 0
test ecx, ecx
je 0x1800c5e91
mov r8d, dword [rdx]
mov eax, r8d
cdq
idiv ecx
mov rdx, qword [rbp - 0x78]
imul ecx, eax
mov dword [rsp + 0x74], eax
sub r8d, ecx
mov dword [rbp - 0x68], r8d
mov r8, qword [rbp - 0x70]
cmp dword [0x18018abdc], 0
jne 0x1800c5efb
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [0x18018a840], rax
test rax, rax
je 0x1800c6521
xor r14d, r14d
lea rsi, [0x18018a890]
nop
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsi], rax
test rax, rax
je 0x1800c64f1
inc r14d
add rsi, 0x78
cmp r14d, 7
jl 0x1800c5ec0
mov rsi, qword [rsp + 0x78]
mov r8, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x78]
mov dword [0x18018abdc], 1
cmp dword [rdx], 0
mov eax, dword [r8]
je case.0x1800c5e3f.97
mov edi, eax
lea rbx, [0x180000000]
mov r14d, 0xa7
nop word [rax + rax]
mov eax, r14d
sub eax, 0xa7
je 0x1800c5fb9
sub eax, 1
je 0x1800c62fa
cmp eax, 1
jne 0x1800c632f
cmp dword [0x18017d64c], 0
je 0x1800c632f
movsxd rax, dword [rsi]
lea rcx, [rax + rax*8]
mov eax, edi
cdq
idiv dword [rbx + rcx*8 + 0x17b4e0]
cmp edx, 2
jge 0x1800c632f
mov rdx, qword [rbx + rcx*8 + 0x17b4d8]
mov r8d, edi
lea rcx, str.if__d_0x10000__d_0x10ffff__
call fcn.18010fd70
mov eax, dword [rsi]
xor ecx, ecx
mov qword [rsp + 0x40], rcx
xor r9d, r9d
mov qword [rsp + 0x38], rcx
xor r8d, r8d
mov dword [rsp + 0x68], eax
xor edx, edx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xb3
mov qword [rsp + 0x20], rcx
call fcn.18001a5a0
jmp 0x1800c632f
cmp dword [0x18017d614], 0
jle 0x1800c5ffe
mov eax, edi
and eax, 0x80000003
jge 0x1800c5fd2
dec eax
or eax, 0xfffffffc
inc eax
cdqe
mov ecx, 2
movsx esi, byte [rax + rbx + 0x17a000]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, esi
lea rdx, [0x180150848]
mov rcx, rax
call fcn.18010fd20
mov rsi, qword [rsp + 0x78]
mov eax, dword [rsi]
xor r9d, r9d
mov dword [rsp + 0x68], eax
xor r8d, r8d
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], 0
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0xce
call fcn.1800c8a90
mov ecx, dword [rsi]
test ecx, ecx
je 0x1800c62ac
sub ecx, 2
je 0x1800c617c
sub ecx, 1
je 0x1800c6252
sub ecx, 1
je 0x1800c61cd
cmp ecx, 1
jne 0x1800c632f
mov r15, qword [rsp + 0x78]
mov esi, 0x18
mov eax, esi
sub eax, 0x15
je 0x1800c62f7
sub eax, 1
je 0x1800c612c
sub eax, 1
je 0x1800c60ce
cmp eax, 1
jne 0x1800c616e
mov ecx, dword [r13]
lea r9, [rsp + 0x68]
mov eax, 0x68db8bad
mov dword [rsp + 0x60], edi
imul ecx
xor r8d, r8d
mov dword [rsp + 0x20], 0x49
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x2710
lea rdx, [0x18018a840]
sub ecx, eax
mov dword [rsp + 0x68], ecx
lea rcx, [rsp + 0x60]
call fcn.1800bc570
jmp 0x1800c616e
cmp dword [0x18017d654], 0
je 0x1800c616e
mov ecx, dword [r13]
test ecx, ecx
jle 0x1800c616e
mov eax, 0x68db8bad
inc r12d
imul ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, dword [rbp - 0x68]
jge 0x1800c6116
cmp r12d, dword [rsp + 0x74]
jle 0x1800c616e
lea eax, [rcx + 0x2710]
xor r12d, r12d
mov dword [r13], eax
jmp 0x1800c616e
cmp r12d, dword [rsp + 0x74]
jl 0x1800c616e
lea eax, [rcx + 0x2710]
xor r12d, r12d
mov dword [r13], eax
jmp 0x1800c616e
cmp dword [0x18017d64c], 0
jne 0x1800c616e
cmp dword [0x18017d650], 0
lea rcx, [0x18018a840]
movsxd rax, dword [r15]
lea r8, [rax + rax*8]
je 0x1800c6158
xor edx, edx
call qword [rbx + r8*8 + 0x17b508]
jmp 0x1800c616e
movsxd rax, dword [0x18017d624]
mov edx, dword [r13]
add r8, rax
call qword [rbx + r8*8 + 0x17b4f0]
dec esi
cmp esi, 0x14
ja 0x1800c6061
mov rsi, r15
mov r8d, 0x38
mov dword [rsp + 0x60], edi
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x60]
call fcn.1800f54d0
cmp dword [0x18017d64c], 0
jne 0x1800c62fa
cmp dword [0x18017d650], 0
lea rcx, [rbp + 0xb0]
movsxd rax, dword [rsi]
je 0x1800c6290
lea rax, [rax + rax*8]
xor edx, edx
call qword [rbx + rax*8 + 0x17b508]
jmp 0x1800c62fa
xor ecx, ecx
mov dword [rsp + 0x60], edi
mov qword [rsp + 0x50], rcx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rcx
lea r8, [rbp - 0x40]
mov qword [rsp + 0x40], rcx
mov r9d, 0xc5
mov qword [rsp + 0x38], rcx
xor edx, edx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
call fcn.1800e5180
cmp dword [0x18017d64c], 0
jne 0x1800c62fa
movsxd rax, dword [rsi]
lea rcx, [rbp - 0x40]
xor edx, edx
cmp dword [0x18017d650], edx
lea r8, [rax + rax*8]
je 0x1800c623b
call qword [rbx + r8*8 + 0x17b508]
jmp 0x1800c62fa
movsxd rax, dword [0x18017d624]
add r8, rax
call qword [rbx + r8*8 + 0x17b4f0]
jmp 0x1800c62fa
xor r9d, r9d
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x60]
mov dword [rsp + 0x60], edi
lea rdx, [rbp + 0x130]
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8d, [r9 + 0x5e]
call fcn.1800e4d90
cmp dword [0x18017d64c], 0
jne 0x1800c62fa
lea rcx, [rbp + 0x130]
jmp 0x1800c62db
lea r8, [rax + rax*8]
movsxd rax, dword [0x18017d624]
mov edx, dword [r13]
add r8, rax
call qword [rbx + r8*8 + 0x17b4f0]
jmp 0x1800c62fa
lea rax, [rbp + 0x30]
mov dword [rsp + 0x60], edi
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x10a
call fcn.1800f43f0
cmp dword [0x18017d64c], 0
jne 0x1800c62fa
lea rcx, [rbp + 0x30]
cmp dword [0x18017d650], 0
movsxd rax, dword [rsi]
lea r8, [rax + rax*8]
je 0x1800c6294
xor edx, edx
call qword [rbx + r8*8 + 0x17b508]
jmp 0x1800c62fa
mov rsi, r15
mov eax, dword [rsi]
lea r9, [rsp + 0x60]
mov dword [rsp + 0x60], eax
mov r14d, 0xa8
xor eax, eax
xor r8d, r8d
mov qword [rsp + 0x30], rax
xor edx, edx
mov dword [rsp + 0x28], 0xcc
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea r15d, [r14 - 0x49]
call fcn.1800285d0
inc r14d
cmp r14d, 0xaa
jb 0x1800c5f20
mov rdx, qword [rbp - 0x78]
inc edi
dec dword [rdx]
cmp dword [rdx], 0
jne 0x1800c5f10
mov rbx, qword [rbp - 0x58]
mov edi, dword [rbp - 0x64]
jmp 0x1800c64ac
mov ecx, dword [0x18018abd8]
mov eax, dword [rsi]
bts ecx, eax
mov dword [0x18018abd8], ecx
jmp case.0x1800c5e3f.97
test rsi, rsi
je 0x1800c655b
cmp dword [rdx], 0
jle 0x1800c6551
mov rax, qword [rsi]
mov qword [rbp - 0x50], rax
xor eax, eax
mov dword [rbp - 0x80], eax
jmp case.0x1800c5e3f.97
mov dword [0x18018abd8], 0
mov r12d, 0xffffffff
mov dword [0x18018abdc], 0
mov dword [rsp + 0x74], 0
jmp case.0x1800c5e3f.97
xor r14d, r14d
cmp dword [rdx], r14d
jle 0x1800c6483
mov r15, qword [rsp + 0x78]
nop dword [rax]
mov esi, ILFindLastID
mov eax, esi
sub eax, 0xd
je 0x1800c6440
sub eax, 1
je 0x1800c6431
sub eax, 1
je 0x1800c6423
cmp eax, 1
jne 0x1800c6456
mov rax, qword [rbp - 0x60]
xor r8d, r8d
mov r9, rax
mov qword [rsp + 0x20], 0
mov edx, 0xdb
mov rcx, r15
mov dword [rax + 8], 3
call fcn.1800d9450
mov qword [rbp - 0x58], rax
mov rbx, rax
cmp eax, 1
jl 0x1800c647c
add dword [rbp - 0x80], eax
jmp 0x1800c6452
test r8, r8
je 0x1800c6456
mov rax, qword [rbp - 0x60]
mov qword [r8], rax
jmp 0x1800c6456
mov rax, qword [rbp - 0x60]
test rax, rax
je 0x1800c6473
mov byte [rax + 4], 1
jmp 0x1800c6456
mov edx, 0x28
lea ecx, [rdx - 0x27]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x60], rax
mov r8, qword [rbp - 0x70]
inc esi
cmp esi, 0x11
jb 0x1800c63d5
mov rdx, qword [rbp - 0x78]
inc r14d
cmp r14d, dword [rdx]
jl 0x1800c63d0
jmp 0x1800c6480
mov ebx, 0xfffffffa
mov qword [rbp - 0x58], rbx
mov rdx, qword [rbp - 0x78]
mov rsi, r15
mov r15d, 0x66
cmp ebx, 1
jge 0x1800c6584
mov eax, 0x30
cmp eax, 0x30
je 0x1800c6565
add eax, 0x6c0
cmp eax, 0x6c0
jbe 0x1800c6497
mov r8, qword [rbp - 0x70]
inc r15d
cmp r15d, dword [rsp + 0x70]
jb 0x1800c5e20
mov eax, edi
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.180110960
mov rbx, qword [rsp + 0x320]
add rsp, 0x2e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, 0xfffffffe
jmp 0x1800c64c0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x18014d9e9]
mov rcx, rax
lea rdx, str.get_FontRenderingEmSize
call fcn.18010fd20
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x18014d9e9]
mov rcx, rax
lea rdx, str._s:_name_s_addr_I64x
call fcn.18010fd20
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, 0xfffffffb
jmp 0x1800c64c0
mov eax, 0xfffffff6
jmp 0x1800c64c0
mov rcx, qword [rbp - 0x50]
xor r8d, r8d
lea edx, [r8 + 0x2a]
call fcn.1800ffaf0
test eax, eax
js 0x1800c64c0
mov eax, ebx
jmp 0x1800c64c0
mov eax, dword [rbp - 0x80]
jmp 0x1800c64c0