Function at 0x18006bef0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
lea eax, [r9 - 0xa]
mov r14d, r9d
mov dword [rbp - 0x70], eax
mov rsi, r8
mov r15, rcx
cmp r9d, eax
jbe case.0x18006bf94.0
mov rbx, qword [rsp + 0x78]
lea eax, [r9 - 0x116]
movzx r9d, byte [rbp + 0x178]
lea r8, [0x180000000]
mov rdx, qword [rbp + 0x180]
movzx r12d, byte [rbp + 0x178]
movzx r13d, byte [rbp + 0x178]
mov rdi, qword [rsp + 0x78]
mov byte [rsp + 0x60], r9b
mov dword [rsp + 0x70], eax
mov qword [rbp - 0x68], rbx
nop dword [rax + rax]
cmp eax, 0x15
ja case.0x18006bf94.2
mov ecx, dword [r8 + rax*4 + 0x6c3fc]
add rcx, r8
jmp rcx
movzx r12d, byte [rbp + 0xf0]
jmp case.0x18006bf94.2
mov byte [rbp + 0xf0], r12b
mov byte [rbp + 0xf1], r13b
jmp case.0x18006bf94.2
movzx r13d, byte [rbp + 0xf1]
jmp case.0x18006bf94.2
mov qword [rsp + 0x28], 0
lea r8, [0x18006bee0]
mov r9, rsi
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsi], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
test rax, rax
jne 0x18006c3c7
mov byte [rsp + 0x68], al
jmp case.0x18006bf94.0
cmp qword [rsi + 0x18], 0x10
mov r8, rsi
jb 0x18006c021
mov r8, qword [rsi]
cmp rbx, qword [rsi + 0x10]
jae 0x18006c3ce
nop dword [rax + rax]
mov edx, 0xe8
mov eax, edx
sub eax, 0xe5
je 0x18006c07a
sub eax, 1
je 0x18006c067
sub eax, 1
je 0x18006c05b
cmp eax, 1
jne 0x18006c09e
inc r12b
movzx eax, r12b
add r13b, byte [rbp + rax - 0x10]
jmp 0x18006c09e
movzx eax, r12b
movzx r9d, byte [rbp + rax - 0x10]
jmp 0x18006c09e
movzx eax, r13b
movzx ecx, r12b
movzx eax, byte [rbp + rax - 0x10]
mov byte [rbp + rcx - 0x10], al
jmp 0x18006c09e
movzx eax, r13b
mov byte [rbp + rax - 0x10], r9b
movzx eax, r12b
movzx ecx, byte [rbp + rax - 0x10]
add cl, r9b
movzx eax, cl
movzx ecx, byte [rbp + rax - 0x10]
xor byte [r8 + rbx], cl
inc rbx
dec edx
cmp edx, 0xe4
ja 0x18006c035
mov byte [rsp + 0x60], r9b
mov qword [rbp - 0x68], rbx
cmp rbx, qword [rsi + 0x10]
jb 0x18006c030
jmp 0x18006c3c7
mov ebx, 0xc6
cmp ebx, 0xc6
je 0x18006c0fa
cmp ebx, 0x207c
jne 0x18006c104
mov byte [rsp + 0x68], 1
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x260]
add rsp, 0x220
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rbp - 0x60]
call qword [sym.imp.COMDLG32.dll_FindTextW]
add ebx, 0x1fb6
cmp ebx, 0x3f6c
jbe 0x18006c0c5
xor ebx, ebx
mov rcx, r15
cmp qword [r15 + 0x18], 0x10
mov qword [rbp - 0x68], rbx
jb 0x18006c125
mov rcx, qword [r15]
mov eax, dword [r15 + 0x10]
lea r9, [rbp + 0x178]
lea r8, [rbp - 0x10]
mov dword [rbp + 0x178], eax
mov edx, 0x10c
call fcn.18008bff0
jmp 0x18006c3c7
mov rax, qword [rdx]
test rax, rax
je 0x18006c15a
mov ecx, 0x28
call rax
jmp 0x18006c172
xor edx, edx
mov dword [rbp - 0x80], 0x28
lea r9, [rbp - 0x80]
xor ecx, ecx
lea r8d, [rdx + 0x53]
call fcn.180021f40
mov rbx, rax
test rax, rax
je 0x18006c35f
mov r14d, 0x78
cmp r14d, 0x78
je 0x18006c333
cmp r14d, 0x3570
jne 0x18006c339
mov rax, qword [rbp + 0x180]
mov rax, qword [rax]
test rax, rax
je 0x18006c1c7
mov rcx, qword [rbp + 0x168]
cmp qword [rcx], 0
je 0x18006c1c7
mov qword [rbx + 8], rax
lea rdx, [0x180064fe0]
mov rax, qword [rcx]
jmp 0x18006c1d9
lea rdx, [0x180064fe0]
mov qword [rbx + 8], rdx
lea rax, [0x180064f90]
mov qword [rbx + 0x10], rax
cmp dword [r15], 0
jne 0x18006c1f0
mov qword [rbx + 0x18], 0
jmp 0x18006c326
mov esi, 0x47
cmp esi, 0x47
je 0x18006c2da
cmp esi, 0x3424
jne 0x18006c306
test rdi, rdi
jne 0x18006c29f
mov rax, qword [rbp + 0x170]
lea r9, [rbp - 0x78]
mov r8d, 0x104
mov dword [rsp + 0x68], edi
lea rdx, [rsp + 0x78]
mov dword [rbp - 0x78], 0x1015
lea rcx, [rsp + 0x68]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
call fcn.180069300
mov rax, qword [rbx + 0x10]
lea rcx, [0x180064f90]
cmp rax, rcx
jne 0x18006c296
xor eax, eax
lea rcx, [rbp + 0x100]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov dword [rsp + 0x48], 0x82
xor r8d, r8d
mov qword [rsp + 0x40], rbx
xor edx, edx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.18009c070
xor ebx, ebx
jmp 0x18006c306
mov rcx, rbx
call rax
xor ebx, ebx
jmp 0x18006c306
mov ecx, 0xed
mov eax, ecx
sub eax, 0xed
je 0x18006c2c3
cmp eax, 1
jne 0x18006c2ce
mov eax, dword [r15]
mov dword [rdi + 8], eax
xor eax, eax
mov dword [rdi + 0xc], eax
mov qword [rdi + 0x10], rax
jmp 0x18006c2ce
lea rax, [rdi + 0x18]
mov qword [rbx + 0x18], rdi
mov qword [rdi], rax
inc ecx
cmp ecx, 0xef
jb 0x18006c2a4
jmp 0x18006c306
mov ecx, dword [r15]
mov rax, qword [rbx + 8]
add ecx, 0x18
cmp rax, rdx
jne 0x18006c301
xor edx, edx
mov dword [rsp + 0x68], ecx
lea r9, [rsp + 0x68]
xor ecx, ecx
lea r8d, [rdx + 0x53]
call fcn.180021f40
jmp 0x18006c303
call rax
mov rdi, rax
add esi, 0x33dd
lea rdx, [0x180064fe0]
cmp esi, 0x67ba
jbe 0x18006c1f5
mov rsi, qword [rbp + 0x170]
test rbx, rbx
je 0x18006c339
mov eax, dword [r15]
mov dword [rbx + 0x20], eax
jmp 0x18006c339
mov rax, qword [rsi]
mov qword [rbx], rax
add r14d, 0x34f8
cmp r14d, 0x69f0
jbe 0x18006c184
mov r14d, dword [rbp + 0x178]
mov qword [rsp + 0x68], rbx
mov rbx, qword [rbp - 0x68]
jmp 0x18006c3c7
mov rax, qword [rsi]
lea r9, [rbp + 0x178]
mov r8d, 0x104
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x68], 0
lea rcx, [rsp + 0x68]
mov dword [rbp + 0x178], 0x1015
call fcn.180069300
mov qword [rsp + 0x68], rbx
mov rbx, qword [rbp - 0x68]
jmp 0x18006c3c7
xor r9d, r9d
mov dword [rbp - 0x60], 0x50
mov r8, rsi
mov dword [rbp + 0x178], 1
lea rcx, [rbp + 0x178]
lea edx, [r9 + 0x12]
call fcn.18007be50
mov rdx, qword [rbp + 0x180]
lea r8, [0x180000000]
dec dword [rsp + 0x70]
dec r14d
mov dword [rbp + 0x178], r14d
cmp r14d, dword [rbp - 0x70]
jbe case.0x18006bf94.0
movzx r9d, byte [rsp + 0x60]
mov eax, dword [rsp + 0x70]
jmp 0x18006bf80