Function at 0x180050d10
Capabilities:
Terminate process

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x30
lea ebp, [rcx + 0xe]
cmp ecx, ebp
jae 0x1800510aa
mov r14, qword [rsp + 0x70]
lea esi, [rcx - 0x74]
mov rdi, qword [rsp + 0x70]
lea r15, [0x180000000]
nop dword [rax + rax]
cmp esi, 0x1a
ja case.0x180050d54.1
mov ecx, dword [r15 + rsi*4 + 0x511fc]
add rcx, r15
jmp rcx
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
mov r8d, 0xf1
call fcn.180021380
mov r14, rax
mov qword [rsp + 0x70], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x78], 1
mov rdx, r14
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
mov r8d, 0xbb
mov ecx, 1
call fcn.18005f180
jmp case.0x180050d54.1
cmp qword [rdi + 8], 4
je case.0x180050d54.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Two_Sided_Stencil_Support___:__s
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rdi + 8], 1
jne 0x1800510e1
cmp qword [rdi + 0x10], 0
jne 0x1800510bb
cmp qword [rdi + 0x18], 0
je case.0x180050d54.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Guest__1_not_supported_on_dest
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rdi + 8], 2
jne 0x18005112d
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x180051107
cmp qword [rax + 8], 1
jne 0x180051107
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x180050e5c
cmp qword [rax + 8], 3
je case.0x180050d54.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.N6icu_5121TimeArrayTimeZoneRuleE
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x180050e96
cmp qword [rax + 8], 3
je case.0x180050d54.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.IsMousePressEnsureVisibleEnabled
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rdi + 0x10], 0
jne 0x180051153
cmp qword [rdi + 0x18], 0
je case.0x180050d54.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.msocbvcrgalinribbonbkgdmouseover
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0x70]
mov qword [rsp + 0x78], 2
lea r9, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r14
mov ecx, 2
call fcn.18005f180
jmp case.0x180050d54.1
mov rdi, qword [rdi + 0x20]
test rdi, rdi
je 0x180050f3c
cmp qword [rdi + 8], 2
je case.0x180050d54.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ThreadRunner_threadRunners___
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rdi + 8], 3
jne 0x18005119f
cmp qword [rdi + 0x10], 0
jne 0x180051179
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x180050f8c
cmp qword [rax + 8], 4
je case.0x180050d54.1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.VertCS_Bessel_Modified_ellipsoid
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0x70]
mov qword [rsp + 0x78], 3
lea r9, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r14
mov ecx, 3
call fcn.18005f180
lea rax, [rsp + 0x70]
mov qword [rsp + 0x78], 4
lea r9, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, r14
mov ecx, 4
call fcn.18005f180
mov r8, qword [rsp + 0x70]
lea rax, [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, r14
mov qword [rsp + 0x78], 1
mov ecx, 0x88
call fcn.180016bb0
mov rdi, rax
jmp case.0x180050d54.1
mov r9d, 0xba
mov byte [rsp + 0x60], 1
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, r14
call fcn.1800401b0
mov r14, rax
jmp case.0x180050d54.1
cmp qword [rdi + 0x20], 0
je 0x180051099
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.BUFFER_STORE_DWORDX2_OFFEN_exact
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x1800511c5
cmp qword [rax + 8], 2
jne 0x1800511c5
mov rdi, qword [rdi + 0x18]
inc esi
lea eax, [rsi + 0x74]
cmp eax, ebp
jb 0x180050d40
mov rax, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Phx::UInt8_________mapKind__0
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._NV_VIDEO_POSTPROCESSING_NR_MISC
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ID2D1Factory1::CreateGdiMetafile
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Remote_Settings_Antivirus_Policy
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Cap_off_dangling_D3D_annotations
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Invalid_floating_point_operation
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.broadwell_de_sbox_db_private.txt
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.class_qualified_name_not_allowed
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor eax, eax
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret