Function at 0x180009a50
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x420]
sub rsp, 0x520
mov rax, qword [0x18005a098]
xor rax, rsp
mov qword [rbp + 0x410], rax
mov r15, qword [rsp + 0x38]
lea ebx, [r8 + 0x5f0]
xor edi, edi
mov dword [rsp + 0x58], ebx
lea r9, [0x180000000]
mov eax, r8d
mov dword [rsp + 0x5c], eax
mov r12, rdx
mov r14, rcx
mov esi, r8d
cmp r8d, ebx
jae 0x180009f1e
mov r13, qword [rsp + 0x38]
movabs rdx, 0x73005f006c006c
cmp esi, 0x17d
ja 0x180009c32
je 0x180009bd7
mov eax, esi
sub eax, 0x5e
je 0x180009bb0
sub eax, 0x6d
je 0x180009b80
sub eax, 0x1a
je 0x180009b5c
sub eax, 0x11
je 0x180009b32
cmp eax, 0x6d
jne 0x180009f05
lea r8d, [rax - 0x6a]
lea rdx, [0x18004cd48]
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 0xb
lea rdx, [rbp + 0x1e0]
lea ecx, [r8 + 0x38]
call fcn.18003df30
mov qword [rsp + 0x38], rax
jmp 0x180009efb
mov rdx, qword [r14 + 0x28]
test rdx, rdx
je 0x180009b48
xor r8d, r8d
mov ecx, 0x9e
call fcn.1800230f0
cmp byte [r12], dil
jne 0x180009f70
mov qword [rsp + 0x50], r14
jmp 0x180009efb
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
mov r8d, 0xf6
call fcn.18000e210
mov r15, rax
mov qword [rsp + 0x40], rdi
jmp 0x180009efb
mov r8d, 5
lea rdx, str.ws2_
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movabs rax, 0x2e00320033
mov qword [rbp + 0x1e8], rax
jmp 0x180009efb
test r14, r14
je 0x180009f80
mov rdx, qword [r14]
test rdx, rdx
je 0x180009efb
xor r8d, r8d
mov ecx, 0x9e
call fcn.1800230f0
jmp 0x180009efb
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], 1
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x48]
mov r8d, 1
call fcn.18002ccc0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], 2
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x48]
mov r8d, 2
call fcn.18002ccc0
jmp 0x180009efb
mov eax, esi
sub eax, 0x1fb
je 0x180009ef0
sub eax, 0x1a
je 0x180009e6d
sub eax, 0x7e
je 0x180009c87
cmp eax, 0x98
jne 0x180009f05
mov rax, qword [rsp + 0x50]
mov rcx, qword [rbp + 0x410]
xor rcx, rsp
call fcn.1800436f0
mov rbx, qword [rsp + 0x570]
add rsp, 0x520
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp dword [r12], 0xffffffff
je 0x180009e51
mov ebx, 0xa
cmp ebx, 0xa
ja case.default.0x180009cad
mov eax, ebx
mov ecx, dword [r9 + rax*4 + 0xa388]
add rcx, r9
jmp rcx
mov byte [rsp + 0x30], 1
mov r13, 0xffffffffffffffff
jmp case.default.0x180009cad
mov r8d, 1
lea rdx, [0x18004d5c4]
lea rcx, [rbp + 0x1d6]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x1d8], di
jmp case.default.0x180009cad
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r13, rax
jmp case.default.0x180009cad
movzx eax, byte [rsp + 0x30]
cmp r13, 0xffffffffffffffff
mov ecx, edi
cmovne ecx, eax
mov byte [rsp + 0x30], cl
cmp cl, 0
je case.default.0x180009cad
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp case.default.0x180009cad
mov r8d, 2
mov dword [rbp + 0x1b0], 0x4d
lea rdx, [0x18004d61c]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.default.0x180009cad
mov qword [rbp + 0x1ce], rdx
mov word [rbp + 0x1d6], di
jmp case.default.0x180009cad
mov eax, dword [0x18004d6da]
mov dword [rbp + 0x1b6], eax
movzx eax, word [0x18004d6de]
mov word [rbp + 0x1ba], ax
jmp case.default.0x180009cad
mov r8d, 5
lea rdx, [0x18004d70a]
lea rcx, [rbp + 0x1c2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 1
mov word [rbp + 0x1cc], di
lea rdx, [0x18004d740]
lea rcx, [rbp + 0x1cc]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp case.default.0x180009cad
mov r8d, 1
mov word [rbp + 0x1bc], di
lea rdx, [0x18004d7be]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 2
lea rdx, [0x18004d80c]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.default.0x180009cad
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbp + rcx + 0x1b0]
mov word [rbp + rcx + 0x200], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x180009e10
dec ebx
lea r9, [0x180000000]
movabs rdx, 0x73005f006c006c
lea eax, [rbx + 0xbb]
cmp eax, 0xba
ja 0x180009c97
mov ebx, dword [rsp + 0x58]
mov r9d, 0x60
mov r8, r14
xor edx, edx
mov rcx, r12
call fcn.1800095f0
mov byte [rsp + 0x50], al
jmp 0x180009efb
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], 3
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x48]
mov r8d, 3
call fcn.18002ccc0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], 4
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x48]
mov r8d, 4
call fcn.18002ccc0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], 5
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x48]
mov r8d, 5
call fcn.18002ccc0
jmp 0x180009efb
mov rcx, r14
call qword [rsp + 0x38]
mov dword [r12], eax
movabs rdx, 0x73005f006c006c
add esi, 0x98
lea r9, [0x180000000]
cmp esi, ebx
jb 0x180009ac1
mov eax, dword [rsp + 0x5c]
lea r12d, [rax + 0xa]
cmp eax, r12d
jae case.0x180009f61.0
mov rsi, qword [rsp + 0x38]
lea r13d, [rax - 0x5e]
mov rbx, qword [rsp + 0x38]
mov r14, qword [rsp + 0x38]
nop
cmp r13d, 0x8f
ja case.0x180009f61.10
movzx eax, byte [r9 + r13 + 0xa3e0]
mov ecx, dword [r9 + rax*4 + 0xa3b4]
add rcx, r9
jmp rcx
xor r8d, r8d
mov rdx, r14
mov ecx, 0x9e
call fcn.1800230f0
mov rax, rdi
jmp 0x180009c5d
mov byte [rsp + 0x50], 1
jmp case.0x180009f61.0
mov rax, qword [rsi + 0x18]
mov rdx, qword [rax + 0x18]
cmp qword [rdx + 8], 9
jne 0x18000a2c7
mov rax, qword [rax + 0x10]
mov rcx, qword [rax + 0x10]
cmp qword [rcx + 8], 5
jne 0x18000a2a1
mov rax, qword [rdx + 0x18]
cmp qword [rax + 8], 0xa
je case.0x180009f61.10
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Bapi_ms_win_core_datetime_l1_1_1
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rsi + 0x18]
mov rcx, qword [rax + 0x10]
cmp qword [rcx + 8], 6
je case.0x180009f61.10
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.wxFFile::Tell__:_file_is_closed_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], 0xa
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 0xa
call fcn.18002ccc0
mov r9d, 0x112
mov qword [rsp + 0x38], 8
lea r8, [rsp + 0x38]
mov rcx, r15
lea rdx, [rsp + 0x40]
call fcn.18003d920
mov rsi, qword [rsp + 0x40]
mov edx, 0xb9
nop dword [rax]
mov eax, edx
sub eax, 0xb9
je 0x18000a0d8
sub eax, 0x23
je 0x18000a0d0
sub eax, 0x5d
je 0x18000a09f
sub eax, 0x23
je 0x18000a0a7
cmp eax, 0x80
jne 0x18000a0fb
mov rsi, rbx
jmp case.0x180009f61.10
mov rcx, qword [rsi]
test rcx, rcx
je 0x18000a0cb
nop
mov rax, qword [r15]
test cl, 1
je 0x18000a0bc
imul r14, rax
imul rax, rax
mov qword [r15], rax
shr qword [rsi], 1
mov rcx, qword [rsi]
jne 0x18000a0b0
mov rbx, r14
jmp 0x18000a0fb
mov r14d, 1
jmp 0x18000a0fb
test rsi, rsi
je 0x18000a0f8
nop dword [rax]
cmp qword [rsi + 8], 4
je 0x18000a112
jbe 0x18000a0ef
mov rsi, qword [rsi + 0x10]
jmp 0x18000a0f3
mov rsi, qword [rsi + 0x18]
test rsi, rsi
jne 0x18000a0e0
mov rbx, rdi
sub edx, 0xffffff80
cmp edx, 0x339
jb 0x18000a080
mov rsi, rbx
jmp case.0x180009f61.10
mov rbx, rsi
jmp case.0x180009f61.10
mov rax, qword [rsi + 0x18]
cmp qword [rax + 8], 7
je case.0x180009f61.10
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.PKIX_ValidateResult_GetPublicKey
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], 9
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 9
call fcn.18002ccc0
jmp case.0x180009f61.10
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], 6
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 6
call fcn.18002ccc0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], 7
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 7
call fcn.18002ccc0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], 8
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x38]
mov r8d, 8
call fcn.18002ccc0
jmp case.0x180009f61.10
lea r8, [rsp + 0x30]
mov byte [rsp + 0x30], 1
mov rdx, r15
mov ecx, 0xec
call fcn.180030880
mov r15, rax
jmp case.0x180009f61.10
mov rcx, qword [rsi + 0x10]
cmp qword [rcx + 8], 2
jne 0x18000a313
mov rax, qword [rcx + 0x10]
cmp qword [rax + 8], 1
jne 0x18000a2ed
mov rax, qword [rcx + 0x18]
cmp qword [rax + 8], 3
je case.0x180009f61.10
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.BOX_603_DOWN_337_AND_243_338
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rsi + 8], 4
jne 0x18000a35f
cmp qword [rsi + 0x20], rdi
jne 0x18000a339
inc r13d
lea eax, [r13 + 0x5e]
cmp eax, r12d
jae case.0x180009f61.0
lea r9, [0x180000000]
jmp 0x180009f40
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.CColorState.BufferStatsHelper._
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.GetSecurityDescriptorDacl_failed
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.cv::linemod::computeResponseMaps
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.VirtualSerialPortFileBackingInfo
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Phx.CxxIL.SymbolType.SSR_COMEQUT
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.application_vnd.twitchtv.v1json
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3