Function at 0x18000fd44
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
sub rsp, 0x30
xor ebp, ebp
mov rsi, rcx
mov rcx, qword [rcx + 8]
mov rdi, rdx
lea r12d, [rbp + 8]
lea r8d, [rbp + 0x30]
mov edx, r12d
mov dword [rsp + 0x50], ebp
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r8, qword [rsi + 8]
mov rcx, rdi
mov qword [rax], r8
mov rbx, rax
call qword [sym.imp.msvcrt.dll_wcslen]
mov rcx, qword [rsi + 8]
lea r8, [rax + rax + 2]
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbx + 8], rax
test rax, rax
jne 0x18000fdac
xor al, al
jmp 0x180010133
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcscpy]
mov rcx, qword [rsi + 0x20]
call qword [sym.imp.msvcrt.dll_wcslen]
mov rcx, qword [rsi + 8]
mov edx, r12d
lea r8, [rax + rax + 2]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbx + 0x20], rax
test rax, rax
jne 0x18000fe0f
mov r8, qword [rbx + 8]
test r8, r8
je 0x18000fdfc
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18000fda5
mov qword [rbx + 8], rbp
jmp 0x18000fda5
lea rdx, str._HeapFree__NULL_n
mov ecx, 0x153
call fcn.180030818
jmp 0x18000fda5
mov rdx, qword [rsi + 0x20]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcscpy]
mov rcx, qword [rsi + 0x28]
call qword [sym.imp.msvcrt.dll_wcslen]
mov rcx, qword [rsi + 8]
mov edx, r12d
lea r8, [rax + rax + 2]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbx + 0x28], rax
test rax, rax
jne 0x18000fe8e
mov r8, qword [rbx + 0x20]
lea rdi, str._HeapFree__NULL_n
test r8, r8
je 0x18000fe67
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18000fe74
mov qword [rbx + 0x20], rbp
jmp 0x18000fe74
mov rdx, rdi
mov ecx, 0x15a
call fcn.180030818
mov r8, qword [rbx + 8]
test r8, r8
jne 0x18000fde6
mov rdx, rdi
mov ecx, 0x15b
jmp 0x18000fe08
mov rdx, qword [rsi + 0x28]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcscpy]
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.msvcrt.dll_wcslen]
mov rcx, qword [rsi + 8]
mov edx, r12d
lea r8, [rax + rax + 2]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbx + 0x10], rax
test rax, rax
jne 0x18000ff39
mov r8, qword [rbx + 0x28]
lea rdi, str._HeapFree__NULL_n
test r8, r8
je 0x18000fee6
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18000fef3
mov qword [rbx + 0x28], rbp
jmp 0x18000fef3
mov rdx, rdi
mov ecx, 0x162
call fcn.180030818
mov r8, qword [rbx + 0x20]
test r8, r8
je 0x18000ff12
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18000ff1f
mov qword [rbx + 0x20], rbp
jmp 0x18000ff1f
mov rdx, rdi
mov ecx, 0x163
call fcn.180030818
mov r8, qword [rbx + 8]
test r8, r8
jne 0x18000fde6
mov rdx, rdi
mov ecx, 0x164
jmp 0x18000fe08
mov rdx, qword [rsi + 0x10]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcscpy]
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.msvcrt.dll_wcslen]
mov rcx, qword [rsi + 8]
mov edx, r12d
lea r8, [rax + rax + 2]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbx + 0x18], rax
test rax, rax
jne 0x180010014
mov r8, qword [rbx + 0x10]
lea rdi, str._HeapFree__NULL_n
test r8, r8
je 0x18000ff95
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18000ffa2
mov qword [rbx + 0x10], rbp
jmp 0x18000ffa2
mov rdx, rdi
mov ecx, 0x16b
call fcn.180030818
mov r8, qword [rbx + 0x28]
test r8, r8
je 0x18000ffc1
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18000ffce
mov qword [rbx + 0x28], rbp
jmp 0x18000ffce
mov rdx, rdi
mov ecx, 0x16c
call fcn.180030818
mov r8, qword [rbx + 0x20]
test r8, r8
je 0x18000ffed
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18000fffa
mov qword [rbx + 0x20], rbp
jmp 0x18000fffa
mov rdx, rdi
mov ecx, 0x16d
call fcn.180030818
mov r8, qword [rbx + 8]
test r8, r8
jne 0x18000fde6
mov rdx, rdi
mov ecx, 0x16e
jmp 0x18000fe08
mov rdx, qword [rsi + 0x18]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcscpy]
lea r11, [rsp + 0x50]
lea r8, [0x18000fae0]
mov qword [rsp + 0x28], r11
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], ebp
call qword [sym.imp.msvcrt.dll__beginthreadex]
test rax, rax
jne 0x18001011d
mov r8, qword [rbx + 0x18]
lea rdi, str._HeapFree__NULL_n
test r8, r8
je 0x180010072
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x18001007f
mov qword [rbx + 0x18], rbp
jmp 0x18001007f
mov rdx, rdi
mov ecx, 0x175
call fcn.180030818
mov r8, qword [rbx + 0x10]
test r8, r8
je 0x18001009e
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x1800100ab
mov qword [rbx + 0x10], rbp
jmp 0x1800100ab
mov rdx, rdi
mov ecx, 0x176
call fcn.180030818
mov r8, qword [rbx + 0x28]
test r8, r8
je 0x1800100ca
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x1800100d7
mov qword [rbx + 0x28], rbp
jmp 0x1800100d7
mov rdx, rdi
mov ecx, 0x177
call fcn.180030818
mov r8, qword [rbx + 0x20]
test r8, r8
je 0x1800100f6
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x180010103
mov qword [rbx + 0x20], rbp
jmp 0x180010103
mov rdx, rdi
mov ecx, 0x178
call fcn.180030818
mov r8, qword [rbx + 8]
test r8, r8
jne 0x18000fde6
mov rdx, rdi
mov ecx, 0x179
jmp 0x18000fe08
lea rdx, [0x18003a400]
mov r8, rdi
mov ecx, 0x17c
call fcn.180030818
mov al, 1
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r12
pop rdi
pop rsi
ret