Function at 0x18000ee98
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x240
mov rax, qword [0x18004a010]
xor rax, rsp
mov qword [rsp + 0x230], rax
lea rdi, [rcx + 0x520]
xor ebp, ebp
mov qword [rcx + 0x510], rbp
mov rsi, rdx
mov rbx, rcx
mov qword [rdi], rbp
add rcx, 0x540
mov qword [rdi + 8], rdi
xor edx, edx
mov qword [rdi + 0x10], rdi
mov r8d, 0x5f0
call fcn.180023140
lea rcx, [0x180041768]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbx + 0x10], rax
test rax, rax
je 0x18000ef16
lea rdx, str.OpenThread
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x18000ef19
mov rax, rbp
mov qword [rbx + 0xb88], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [0x1801769a0]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x20]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, str.DBGHELP.DLL
lea rcx, [rsp + 0x20]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 8], rax
test rax, rax
jne 0x18000ef7a
lea rcx, str.DBGHELP.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 8], rax
mov qword [rbx], rbp
test rax, rax
je 0x18000f12b
lea rdx, str.SymGetOptions
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.SymSetOptions
mov qword [rbx + 0xb38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.SymInitialize
mov qword [rbx + 0xb40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.SymCleanup
mov qword [rbx + 0xb48], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.SymGetModuleBase64
mov qword [rbx + 0xb50], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.SymFromAddr
mov qword [rbx + 0xb58], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.SymGetLineFromAddr64
mov qword [rbx + 0xb60], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.StackWalk64
mov qword [rbx + 0xb68], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.SymFunctionTableAccess64
mov qword [rbx + 0xb70], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.MiniDumpWriteDump
mov qword [rbx + 0xb78], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 0xb38]
mov qword [rbx + 0xb80], rax
test rcx, rcx
je 0x18000f115
cmp qword [rbx + 0xb40], rbp
je 0x18000f115
cmp qword [rbx + 0xb48], rbp
je 0x18000f115
cmp qword [rbx + 0xb50], rbp
je 0x18000f115
cmp qword [rbx + 0xb58], rbp
je 0x18000f115
cmp qword [rbx + 0xb60], rbp
je 0x18000f115
cmp qword [rbx + 0xb68], rbp
je 0x18000f115
cmp qword [rbx + 0xb70], rbp
je 0x18000f115
cmp qword [rbx + 0xb78], rbp
je 0x18000f115
test rax, rax
je 0x18000f115
call rcx
or eax, 0x16
mov ecx, eax
call qword [rbx + 0xb40]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov qword [rbx], rax
mov rcx, rax
lea r8d, [rdx + 1]
call qword [rbx + 0xb48]
test eax, eax
je 0x18000f10c
mov rdx, rsi
mov rcx, rbx
call fcn.18000edc8
jmp 0x18000f10f
mov qword [rbx], rbp
mov rax, qword [rbx + 8]
jmp 0x18000f126
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, rbp
mov qword [rbx + 8], rbp
test rax, rax
jne 0x18000f171
mov qword [rbx + 0xb38], rbp
mov qword [rbx + 0xb40], rbp
mov qword [rbx + 0xb48], rbp
mov qword [rbx + 0xb50], rbp
mov qword [rbx + 0xb58], rbp
mov qword [rbx + 0xb60], rbp
mov qword [rbx + 0xb68], rbp
mov qword [rbx + 0xb70], rbp
mov qword [rbx + 0xb78], rbp
mov qword [rbx + 0xb80], rbp
cmp qword [rbx], rbp
jne 0x18000f1be
or qword [rbx + 0x38], 0xffffffffffffffff
mov rcx, rdi
mov qword [rbx + 0x18], rbp
mov dword [rbx + 0x518], ebp
mov dword [rbx + 0x30], ebp
call fcn.180013fe4
mov qword [rdi], rbp
mov qword [rdi + 8], rdi
mov qword [rdi + 0x10], rdi
mov rcx, qword [rbx + 0x510]
test rcx, rcx
je 0x18000f1ad
mov rdx, qword [rcx]
call qword [rdx + 0x10]
lea rcx, [rbx + 0x20]
mov qword [rbx + 0x510], rbp
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov rax, rbx
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.180021cb0
mov rbx, qword [rsp + 0x270]
add rsp, 0x240
pop rdi
pop rsi
pop rbp
ret