Function at 0x18001c150
Capabilities:
Create thread
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x1800b3dc8]
xor rax, rsp
mov qword [rbp + 0x80], rax
lea eax, [rdx + 0xb]
mov qword [rsp + 0x70], rcx
mov dword [rsp + 0x40], eax
mov rbx, r9
mov qword [rsp + 0x50], rbx
mov r12, r8
mov r13d, edx
mov rsi, rcx
cmp edx, eax
jae case.0x18001c1cf.44
mov r15d, dword [rsp + 0x40]
mov edi, dword [rsp + 0x40]
xor r14d, r14d
lea eax, [r13 - 0x26]
lea rdx, [0x180000000]
cmp eax, 0x17
ja case.0x18001c1cf.45
mov ecx, dword [rdx + rax*4 + 0x1c988]
add rcx, rdx
jmp rcx
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x58]
call fcn.18004bfe0
test eax, eax
je case.0x18001c1cf.45
mov r9d, 0x123
mov dword [rsp + 0x40], 0x68
lea r8, [0x182544780]
lea rdx, [0x182544970]
lea rcx, [rsp + 0x40]
call fcn.180042b20
mov eax, r14d
jmp 0x18001c95c
cmp qword [0x182544678], 0
jne 0x18001c432
mov esi, 0x25
nop word [rax + rax]
cmp esi, 0x262
ja 0x18001c36a
je 0x18001c320
cmp esi, 0x25
je 0x18001c30d
cmp esi, 0xe4
je 0x18001c2be
cmp esi, 0x1a3
jne 0x18001c41b
cmp qword [0x182544678], 0
jne 0x18001c41b
mov ebx, 7
cmp ebx, 7
je 0x18001c294
cmp ebx, 0x3fe
je 0x18001c28d
cmp ebx, 0x7f5
je case.0x18001c1cf.44
jmp 0x18001c2ab
mov dword [rsp + 0x30], r14d
jmp 0x18001c2ab
xor r9d, r9d
lea rdx, str.GL_BOUNDING_BOX_CHROMIUM
mov r8d, 0x8b
xor ecx, ecx
call fcn.18002eda0
add ebx, 0x3f7
cmp ebx, 0xbe5
jbe 0x18001c272
jmp 0x18001c41b
mov r8, qword [0x182544898]
lea rcx, str.SERVICE_608_CAPTIONS
mov rdx, qword [0x182544888]
call fcn.180032670
mov rax, qword [0x182544898]
lea r9, [rsp + 0x38]
mov r8, qword [0x182544888]
mov ecx, 0x7a
mov rdx, qword [0x182544880]
mov qword [rsp + 0x38], rax
call fcn.180030d50
mov qword [0x182544678], rax
jmp 0x18001c41b
mov rax, qword [0x182544898]
mov qword [0x182544890], rax
jmp 0x18001c41b
mov rdx, qword [0x182544678]
lea rcx, [rsp + 0x60]
mov r8d, 0xa0
call fcn.180049840
test eax, eax
je 0x18001c930
cmp qword [rsp + 0x60], 0
jge 0x18001c41b
xor r9d, r9d
lea rdx, str.llvm.x86.fma.mask.vfnmsub.ps.128
mov r8d, 0x8b
xor ecx, ecx
call fcn.18002eda0
mov eax, r14d
jmp 0x18001c95c
cmp esi, 0x321
je 0x18001c3e9
cmp esi, 0x3e0
je 0x18001c3cf
cmp esi, 0x49f
jne 0x18001c41b
xor r9d, r9d
mov qword [rsp + 0x28], r14
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor ecx, ecx
lea edx, [r9 + 0x7f]
call fcn.180045e60
xor r9d, r9d
mov qword [rsp + 0x28], r14
xor r8d, r8d
mov dword [0x182954c28], eax
xor ecx, ecx
mov qword [rsp + 0x20], r14
lea edx, [r9 + 0x7f]
call fcn.180045e60
add eax, 0x1f4
mov dword [0x182954e30], eax
jmp 0x18001c41b
mov r8, qword [0x1825448a0]
lea rcx, str.unexpected_samplerkind_in_SamplerKind2SamplerTypes
mov rdx, qword [rsp + 0x60]
call fcn.180032670
jmp 0x18001c41b
mov rdx, qword [rsp + 0x60]
lea r8, [rsp + 0x38]
mov rcx, qword [0x182544898]
add rcx, rdx
mov qword [rsp + 0x38], rdx
xor edx, edx
mov qword [0x1825448a0], rcx
lea ecx, [rdx + 0x2b]
call fcn.180046330
test eax, eax
je 0x18001c20c
add esi, 0xbf
cmp esi, 0x55e
jb 0x18001c230
mov rbx, qword [rsp + 0x50]
mov eax, dword [rbx]
mov r9, r12
mov r8, qword [0x182544678]
xor edx, edx
mov dword [rsp + 0x38], eax
mov ecx, 0x9b
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
call fcn.180031550
mov r15d, eax
jmp case.0x18001c1cf.45
mov dword [rsp + 0x30], r15d
jmp case.0x18001c1cf.45
xor r8d, r8d
mov edx, 0x91
xor ecx, ecx
call fcn.1800427a0
cmp dword [0x182544674], 0
je case.0x18001c1cf.45
mov r14d, 0xed
nop dword [rax]
mov eax, r14d
sub eax, 0xed
je 0x18001c4b7
cmp eax, 1
jne 0x18001c56a
xor r8d, r8d
xor edx, edx
mov ecx, 0x116
call fcn.18002c360
jmp 0x18001c56a
mov eax, dword [rbx]
lea rcx, [rsp + 0x38]
mov r8, qword [0x1825448b8]
mov r9, r12
mov edx, 0x64
mov dword [rsp + 0x38], eax
call fcn.18003f280
mov rbx, rax
test eax, eax
jns 0x18001c533
mov esi, 5
mov eax, esi
sub eax, 5
je 0x18001c4f4
cmp eax, 1
je case.0x18001c1cf.44
jmp 0x18001c52c
lea r9, [0x182544ae0]
mov edx, 0x100
lea r8, str.UhIe0vJHTEup53zSOpAooA
lea rcx, [rbp - 0x80]
call fcn.1800354a0
xor r9d, r9d
lea rdx, [rbp - 0x80]
mov r8d, 0x8b
xor ecx, ecx
call fcn.18002eda0
mov dword [rsp + 0x30], 0xffffffff
inc esi
cmp esi, 7
jb 0x18001c4e2
test ebx, ebx
je 0x18001c565
mov ecx, 0x4e
nop dword [rax]
mov eax, ecx
sub eax, 0x4d
je case.0x18001c1cf.44
cmp eax, 1
jne 0x18001c55e
movsxd rax, ebx
add qword [0x182544898], rax
mov dword [rsp + 0x30], ebx
dec ecx
cmp ecx, 0x4c
ja 0x18001c540
mov rbx, qword [rsp + 0x50]
inc r14d
cmp r14d, 0xef
jb 0x18001c490
jmp case.0x18001c1cf.45
mov qword [rsp + 0x28], r14
lea r8, [0x18000fc10]
mov r9, r12
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r12], rax
test rax, rax
je 0x18001c94c
mov r9, r12
mov dword [rsp + 0x38], 1
lea r8, [rsp + 0x38]
mov dword [rsp + 0x20], 0x60
xor edx, edx
xor ecx, ecx
call fcn.18004d8f0
jmp case.0x18001c1cf.45
lea r9, [rsp + 0x48]
mov dword [rsp + 0x38], 0xfa
mov r8, r12
lea rdx, [rsp + 0x38]
mov ecx, 0x50
call fcn.180005650
jmp case.0x18001c1cf.45
cmp dword [rsp + 0x48], 1
jne 0x18001c610
mov r8d, 0x92
mov rdx, r12
xor ecx, ecx
call fcn.180017af0
jmp case.0x18001c1cf.45
cmp dword [rsp + 0x48], 2
jne case.0x18001c1cf.45
mov ebx, 0x15
mov eax, ebx
sub eax, 0x13
jne 0x18001c634
mov rdx, r12
mov ecx, 0xd6
call fcn.18002db00
dec ebx
cmp ebx, 0x12
ja 0x18001c620
jmp case.0x18001c1cf.45
mov r9, r12
mov dword [rsp + 0x38], r15d
lea r8, [0x182544970]
mov edx, 0x69
lea rcx, [rsp + 0x38]
call fcn.18003bb40
cmp dword [rsi], 0
je 0x18001c6b5
mov rcx, qword [0x182954c10]
lea rax, [rsp + 0x68]
add rcx, qword [0x182954c18]
lea rdx, [0x1825448a8]
mov qword [rsp + 0x28], rax
mov r9d, 0xab
mov qword [rsp + 0x68], rcx
lea rax, [rsp + 0x38]
lea rcx, [0x1825448c0]
mov dword [rsp + 0x38], r15d
mov r8, r12
mov qword [rsp + 0x20], rax
call fcn.180018380
movsxd rax, r15d
add qword [0x182954c18], rax
mov rax, qword [rbp + 0xf0]
cmp dword [rax], 0
je case.0x18001c1cf.45
cmp dword [rsi], 0
je 0x18001c700
movsxd rax, r15d
lea r8, [rsp + 0x68]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x38]
mov rax, qword [0x182954c20]
mov ecx, 0x22
mov qword [rsp + 0x38], rax
call fcn.18002c360
mov rbx, rax
mov eax, eax
sub qword [0x182954c20], rax
jmp 0x18001c703
mov ebx, r15d
mov r14, qword [0x1825448b8]
mov esi, 0x108
nop
mov eax, esi
sub eax, 0x108
je 0x18001c75c
sub eax, 3
je 0x18001c729
cmp eax, 1
je 0x18001c7a4
jmp 0x18001c750
test r14, r14
je 0x18001c73c
test r12, r12
je 0x18001c73c
mov rax, qword [r12]
mov qword [r14], rax
jmp 0x18001c74e
mov r8, r12
lea rcx, str._tbrw__u::helper_init_fillin_stream_samplefilesections_stream_number___u
mov rdx, r14
call fcn.18004e550
xor edi, edi
inc esi
cmp esi, 0x10b
jb 0x18001c710
jmp 0x18001c7a4
mov eax, 0x16
cmp eax, 0x16
je 0x18001c774
add eax, 0xe70
cmp eax, 0xe70
jbe 0x18001c761
jmp 0x18001c7a4
lea r9, [rsp + 0x58]
mov qword [rsp + 0x20], 0
mov r8d, ebx
mov rdx, r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x18001c7a2
cmp dword [rsp + 0x58], ebx
jne 0x18001c7a2
mov edi, 1
jmp 0x18001c7a4
xor edi, edi
test edi, edi
jne case.0x18001c1cf.45
mov ebx, 0xf
mov eax, ebx
sub eax, 0xe
je case.0x18001c1cf.44
cmp eax, 1
jne 0x18001c7f9
lea r9, [0x182544ae0]
mov edx, 0x100
lea r8, str.llvm.x86.mic.scale.ps
lea rcx, [rbp - 0x80]
call fcn.1800354a0
xor r9d, r9d
lea rdx, [rbp - 0x80]
mov r8d, 0x8b
xor ecx, ecx
call fcn.18002eda0
mov dword [rsp + 0x30], 0xffffffff
dec ebx
cmp ebx, 0xd
ja 0x18001c7b1
jmp case.0x18001c1cf.45
test r15d, r15d
jns 0x18001c89d
mov ebx, 0xfc
mov eax, ebx
sub eax, 0xf9
je case.0x18001c1cf.44
sub eax, 1
je 0x18001c85f
sub eax, 1
je 0x18001c849
cmp eax, 1
jne 0x18001c88d
mov r9d, r15d
lea r8, str.26_27_28_A_WITH_40_72
mov edx, 0x100
lea rcx, [rbp - 0x80]
call fcn.1800354a0
jmp 0x18001c88d
xor r9d, r9d
lea rdx, [rbp - 0x80]
mov r8d, 0x8b
xor ecx, ecx
call fcn.18002eda0
jmp 0x18001c88d
mov r9d, 0x123
mov dword [rsp + 0x38], 0x68
lea r8, [0x182544780]
lea rdx, [0x182544970]
lea rcx, [rsp + 0x38]
call fcn.180042b20
mov dword [rsp + 0x30], 0xffffffff
dec ebx
cmp ebx, 0xf8
ja 0x18001c813
jmp 0x18001c900
jne 0x18001c900
mov ebx, 0x67
mov eax, ebx
sub eax, 0x66
je case.0x18001c1cf.44
cmp eax, 1
jne 0x18001c8f9
xor r9d, r9d
lea rdx, str.sF3zv6m4RPaFn5OTSD_GdA
mov r8d, 0x8b
xor ecx, ecx
call fcn.18002eda0
mov r9d, 0x123
mov dword [rsp + 0x38], 0x68
lea r8, [0x182544780]
lea rdx, [0x182544970]
lea rcx, [rsp + 0x38]
call fcn.180042b20
mov dword [rsp + 0x30], 0xffffffff
dec ebx
cmp ebx, 0x65
ja 0x18001c8a4
movsxd rax, r15d
add qword [0x182544898], rax
inc r13d
cmp r13d, dword [rsp + 0x40]
jae case.0x18001c1cf.44
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x70]
jmp 0x18001c1ae
xor r9d, r9d
lea rdx, str._sMap_bluring_of__f
mov r8d, 0x8b
xor ecx, ecx
call fcn.18002eda0
mov eax, r14d
jmp 0x18001c95c
mov byte [rsp + 0x30], 0
jmp case.0x18001c1cf.44
mov byte [rsp + 0x30], 1
mov eax, dword [rsp + 0x30]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1800508f0
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret