Function at 0x180017f80
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
lea r12d, [rcx + 0xb]
mov r14, r9
mov r13, r8
mov rdi, rdx
mov ebp, ecx
cmp ecx, r12d
jae case.0x180017fdb.1
lea r15d, [rcx - 0xc]
xor esi, esi
lea rdx, [0x180000000]
cmp r15d, 0x22
ja case.0x180017fdb.9
movzx eax, byte [rdx + r15 + 0x1827c]
mov ecx, dword [rdx + rax*4 + 0x18254]
add rcx, rdx
jmp rcx
mov qword [0x180164008], r14
mov qword [r14 + 0x80], r13
jmp case.0x180017fdb.9
mov byte [rsp + 0x30], 1
jmp case.0x180017fdb.9
mov dword [rsp + 0x30], esi
jmp case.0x180017fdb.9
cmp qword [r14], 0
je 0x180018069
mov ebx, 0x21
nop
cmp ebx, 0x21
je 0x180018034
cmp ebx, 0x14e2
je 0x18001802a
cmp ebx, 0x29a3
jne 0x18001805b
mov qword [r14], rsi
jmp 0x18001805b
mov rcx, qword [r14]
call fcn.1800b147c
jmp 0x18001805b
mov rdi, qword [r14]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x180018049
call fcn.1800b147c
mov qword [rdi + 0x68], rsi
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x18001805b
call fcn.1800b147c
mov qword [rdi + 0x50], rsi
add ebx, 0x14c1
cmp ebx, 0x3e43
jbe 0x180018010
mov rcx, qword [r14 + 0x20]
test rcx, rcx
je case.0x180017fdb.9
call fcn.1800b147c
mov qword [r14 + 0x20], rsi
jmp case.0x180017fdb.9
mov qword [rsp + 0x28], rsi
lea r8, [0x18007ec40]
mov r9, r14
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180018234
xchg qword [0x180164010], rax
jmp case.0x180017fdb.9
movzx ecx, byte [r13]
mov rax, qword [r14]
cmp rcx, rax
ja 0x18001823e
sub rax, rcx
mov qword [rsp + 0x30], rax
jmp case.0x180017fdb.9
mov rax, qword [r14]
lea r8, [rsp + 0x38]
mov rdx, r13
mov rcx, qword [rax + 8]
mov qword [rsp + 0x38], rcx
mov ecx, 0x6e
call fcn.1800709e0
xor edx, edx
mov qword [rsp + 0x40], rax
xor r9d, r9d
lea r8, [rsp + 0x40]
mov rbx, rax
lea ecx, [rdx + 0x43]
call fcn.1800734c0
test eax, eax
je 0x180018151
mov eax, dword [rdi]
lea r8, [rsp + 0x48]
mov dword [rsp + 0xb0], eax
lea rdx, [rsp + 0x50]
mov rax, qword [r14]
mov r9d, 0x44
mov qword [rsp + 0x48], rbx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0xb0]
call fcn.180060c50
mov qword [rsp + 0x60], rax
jmp case.0x180017fdb.9
mov esi, 0x6f
mov eax, esi
sub eax, 0x6f
je 0x180018193
sub eax, 1
je 0x180018188
cmp eax, 1
jne 0x18001820c
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x30], 0
jmp 0x18001820c
mov rbx, qword [r14]
mov edi, 0xd7
add rbx, 0x48
nop
mov eax, edi
sub eax, 0x5c
je 0x1800181cd
sub eax, 0x7b
je 0x1800181b3
cmp eax, 0x4b
je 0x18001820c
jmp 0x180018201
mov ecx, dword [rbx]
test ecx, ecx
je 0x180018201
mov rax, qword [rbx + 8]
test rax, rax
je 0x180018201
mov r8, qword [rbx + 0x10]
mov edx, dword [rbx + 4]
call rax
jmp 0x180018201
mov r8d, 0x123
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.1800a03b0
test eax, eax
je 0x18001820c
mov eax, 0x64
nop dword [rax]
cmp eax, 0x64
je 0x18001820c
add eax, 0x9e
cmp eax, 0x102
jb 0x1800181f0
add edi, 0x4b
cmp edi, 0x1b8
jb 0x1800181a0
inc esi
cmp esi, 0x72
jb 0x180018156
xor esi, esi
inc ebp
inc r15d
cmp ebp, r12d
jae case.0x180017fdb.1
mov rdi, qword [rsp + 0xb8]
jmp 0x180017fb7
mov byte [rsp + 0x30], 0
jmp case.0x180017fdb.1
sub rax, rcx
add rax, 0x40
jmp 0x180018170
mov rax, qword [rsp + 0x60]
jmp 0x180018170