Function at 0x180012330
Capabilities:
Suspend thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rax, qword [0x1800a5088]
xor rax, rsp
mov qword [rsp + 0x80], rax
lea ebx, [rcx - 0xa]
mov r13, r9
mov dword [rsp + 0x58], ebx
mov rbp, r8
mov r12, rdx
mov r15d, ecx
cmp ecx, ebx
jbe case.0x18001239c.0
lea r14d, [rcx - 0xf]
lea rdx, [0x180000000]
cmp r14d, 0x22
ja case.0x18001239c.9
movzx eax, byte [rdx + r14 + 0x12628]
mov ecx, dword [rdx + rax*4 + 0x12600]
add rcx, rdx
jmp rcx
mov byte [rsp + 0x41], 0
jmp case.0x18001239c.9
cmp byte [r12 + 0x19], 0
jne 0x180012547
mov rcx, qword [r12 + 8]
xor eax, eax
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], eax
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov qword [rsp + 0x28], 0
lea rcx, [0x180093660]
cmp eax, 0xffffffff
mov dword [rsp + 0x20], 2
mov r9d, 1
setne al
xor r8d, r8d
xor edx, edx
mov byte [r12 + 0x19], al
call qword [sym.imp.USER32.dll_CreateDesktopW]
mov qword [rsp + 0x68], rax
jmp case.0x18001239c.9
xor edi, edi
cmp qword [rbp], rdi
jbe 0x180012487
xor esi, esi
movzx eax, byte [rsi + r12]
lea r9, [rsp + 0x48]
mov byte [rsp + 0x48], al
xor r8d, r8d
lea rax, [rsp + 0x41]
mov edx, 0xbd
mov qword [rsp + 0x28], rax
call fcn.180044660
mov ebx, eax
lea r9, [rsp + 0x50]
lea eax, [rdi + 1]
xor r8d, r8d
mov edx, 0xbd
movzx eax, byte [rax + r12]
mov byte [rsp + 0x50], al
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
call fcn.180044660
shl bl, 4
shr rsi, 1
or al, bl
cmp byte [rsp + 0x41], 0
mov byte [rsi + r13], al
jne 0x18001254e
add edi, 2
mov esi, edi
cmp rsi, qword [rbp]
jb 0x180012412
mov ebx, dword [rsp + 0x58]
mov byte [rsp + 0x60], 1
jmp case.0x18001239c.9
movzx eax, byte [r12 + 0x19]
mov byte [rsp + 0x60], al
jmp case.0x18001239c.9
mov byte [rsp + 0x40], 1
jmp case.0x18001239c.9
movzx eax, byte [rsp + 0x40]
xor ecx, ecx
mov rdi, qword [rsp + 0x68]
test rdi, rdi
cmovne ecx, eax
mov byte [rsp + 0x40], cl
cmp cl, 0
je case.0x18001239c.9
mov r9d, 0xc
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x70]
mov rcx, rdi
lea edx, [r9 - 0xb]
call qword [sym.imp.USER32.dll_GetUserObjectInformationW]
test eax, eax
jne 0x1800124e7
mov byte [rsp + 0x40], al
jmp case.0x18001239c.9
mov r9d, 0xc
lea r8, [rsp + 0x70]
mov rcx, rdi
lea edx, [r9 - 0xb]
call qword [sym.imp.USER32.dll_SetUserObjectInformationW]
mov rcx, rdi
call qword [sym.imp.USER32.dll_CloseDesktop]
dec r15d
dec r14d
cmp r15d, ebx
ja 0x180012378
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.180051f60
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x60], 1
jmp case.0x18001239c.0
mov byte [rsp + 0x60], 0
jmp case.0x18001239c.0
mov ecx, dword [r12]
cmp ecx, 8
jg 0x180012593
je 0x18001258a
sub ecx, 1
je 0x180012581
sub ecx, 1
je 0x180012578
cmp ecx, 2
jne 0x1800125a3
lea rax, str.Total_Memory_Bandwidth__TMEM_
jmp 0x18001251c
lea rax, str.Default_Gallery_Type_Template
jmp 0x18001251c
lea rax, str.Iaeaiueee_eoiaeuuee
jmp 0x18001251c
lea rax, str.Thermal_Metamaterial:_Waste_Heat_Harvesting
jmp 0x18001251c
cmp ecx, 0x4000
je 0x1800125bb
cmp ecx, 0x8000
je 0x1800125af
lea rax, str._______
jmp 0x18001251c
lea rax, str._solaris_at_sean_dot_de_
jmp 0x18001251c
lea rax, str.2006_05_17
jmp 0x18001251c
mov dword [rsp + 0x30], 0x27
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], 0
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rsp + 0x58], 3
xor ecx, ecx
call fcn.1800087d0
jmp 0x18001251c