Function at 0x18004c450
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
lea esi, [r9 + 0x441]
mov rdi, rdx
mov dword [rsp + 0x30], esi
mov eax, r9d
mov r13, r8
mov rdx, rcx
cmp r9d, esi
jae 0x18004c559
mov r15, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
mov r12, qword [rsp + 0x50]
mov r14, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x30]
cmp eax, 0x126
ja 0x18004c576
je 0x18004c559
sub eax, 0x49
je 0x18004c703
sub eax, 0x17
je 0x18004c4e9
sub eax, 0x63
je 0x18004c4e2
cmp eax, 0x24
je 0x18004c74b
jmp 0x18004c540
mov byte [rsp + 0x40], 1
jmp 0x18004c540
mov qword [rsp + 0x28], 0
lea r8, [0x180018780]
mov r9, rdi
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi], rax
test rax, rax
je 0x18004c6f9
mov r8, rdi
mov dword [rsp + 0x38], 1
mov edx, 0x16
lea rcx, [rsp + 0x38]
call fcn.180044540
mov ecx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xa0]
mov eax, dword [rsp + 0xb8]
add eax, 0x63
mov dword [rsp + 0xb8], eax
cmp eax, ecx
jb 0x18004c4b3
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
sub eax, 0x15f
je 0x18004c6ef
sub eax, 0x63
je 0x18004c6cc
sub eax, 0x63
je 0x18004c6c1
sub eax, 0x63
je 0x18004c5a7
cmp eax, 0x63
jne 0x18004c540
mov ecx, 0x10d
jmp 0x18004c720
mov byte [r13], 0
mov r12, 0xffffffffffffffff
mov rbx, rdi
test rdi, rdi
je 0x18004c540
nop dword [rax + rax]
lea rax, [r14 + rbx]
cmp rax, rbp
jae 0x18004c534
cmp rbx, rdi
je 0x18004c5dc
cmp byte [rbx - 1], 0x26
jne 0x18004c6b2
cmp byte [rax], 0x3d
jne 0x18004c6b2
mov rcx, qword [rsp + 0xc0]
lea r9, [rsp + 0x38]
mov r8, rbx
mov qword [rsp + 0x38], r14
mov edx, 0x130
call fcn.1800a34b0
test eax, eax
jne 0x18004c6b2
mov edi, 0xc8
mov eax, edi
sub eax, 0xc5
je 0x18004c714
sub eax, 1
je 0x18004c655
sub eax, 1
je 0x18004c635
cmp eax, 1
jne 0x18004c69c
inc rbx
add rbx, r14
jmp 0x18004c69c
mov r8, rbp
mov edx, 0x26
sub r8, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
jne 0x18004c69c
mov rsi, rbp
jmp 0x18004c69c
mov rcx, qword [r15]
mov rax, rsi
sub rax, rbx
cmp rax, rcx
jae 0x18004c69c
mov qword [rsp + 0x48], rcx
lea r9, [rsp + 0x38]
mov rcx, rbx
mov qword [rsp + 0x28], r13
lea r8, [rsp + 0x48]
mov dword [rsp + 0x38], 1
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x20], 0x93
call fcn.18004ac20
mov r12, rax
dec edi
cmp edi, 0xc4
ja 0x18004c611
mov rdi, qword [rsp + 0xa8]
add rbx, 1
jne 0x18004c5c0
jmp 0x18004c534
mov rbp, qword [rdx]
add rbp, rdi
jmp 0x18004c540
mov rsi, qword [rsp + 0x50]
mov r14, 0xffffffffffffffff
mov rax, qword [rsp + 0xc0]
inc r14
cmp byte [rax + r14], 0
jne 0x18004c6e0
jmp 0x18004c540
mov rbp, qword [rsp + 0x50]
jmp 0x18004c540
mov byte [rsp + 0x40], 0
jmp 0x18004c559
mov rdx, qword [rdx]
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
jmp 0x18004c55e
mov ecx, 0x10d
mov dword [rsp + 0x40], r12d
inc ecx
cmp ecx, 0x10f
jae 0x18004c73b
mov eax, ecx
sub eax, 0x10d
je 0x18004c714
cmp eax, 1
jne 0x18004c71e
jmp 0x18004c559
mov rdi, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xa0]
mov rdx, qword [rdx]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x18004c55e