Function at 0x180005d40
Capabilities:
Create thread

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xe0
lea rbp, [rsp + 0x50]
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], rdi
mov rax, qword [0x180081de0]
xor rax, rbp
mov qword [rbp + 0x80], rax
mov r12, r8
mov esi, edx
mov rdi, rcx
movdqa xmm0, xmmword [0x18007b1f0]
movdqa xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
xor edx, edx
mov qword [rbp + 0x30], rdx
mov eax, 0xf
mov qword [rbp + 0x38], rax
mov byte [rbp + 0x20], dl
lea r15d, [rsi + 0x2be]
cmp esi, r15d
jae 0x1800061a8
mov r13, qword [rbp + 0x18]
mov r14, qword [rbp + 0x18]
nop
cmp esi, 0x9f
ja 0x180005f26
je 0x180005efe
cmp esi, 0xc
je 0x180005ed9
cmp esi, 0x17
je 0x180005ec8
cmp esi, 0x5a
je 0x180005ea6
cmp esi, 0x65
jne 0x180005fb5
mov ecx, dword [r12]
test ecx, ecx
jg 0x18000610b
mov eax, StrCmpNICW
mov dword [rbp], eax
mov r14d, dword [rbp + 0x10]
mov r15, qword [rbp + 0x18]
mov rbx, qword [rbp + 0x18]
nop word [rax + rax]
sub eax, 0x95
je 0x180005fc8
cmp eax, 1
jne 0x1800060ed
lea r14d, [rax + 0x1f]
mov eax, dword [rsp]
sub rsp, 0x80
lea r15, [rsp + 0x50]
mov eax, dword [r15]
cmp dword [rdi + 0x2c], 0
jne 0x180005e80
mov dword [rsp + 0x48], 0x101
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180004b60
mov eax, dword [r13 + 4]
lea ecx, [rax + rax*2]
mov dword [rbp + 8], ecx
lea r8, [rbp + 8]
mov edx, 0x10e
mov rcx, rdi
call fcn.180018190
mov eax, dword [rdi + 0x24]
mov dword [rdi + 0x30], eax
jmp 0x1800060eb
mov dword [rbp + 8], 1
mov r8d, 0x3e
lea rdx, [rbp + 8]
mov rcx, rdi
call fcn.18005d2b0
mov byte [rbp], 1
jmp 0x180005fb5
mov rax, qword [rdi + 8]
mov qword [rbp + 0x18], rax
mov r13, qword [rax + 0x20]
jmp 0x180005fb5
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], edx
mov r9, rdi
lea r8, [0x180010060]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi], rax
jmp 0x180005fac
mov byte [0x180081eb8], 0
mov dword [rsp + 0x20], 0x6c
lea r9, [rbp + 0x20]
mov r8, rdi
xor edx, edx
lea rcx, [rbp + 0x40]
call fcn.180011320
test al, al
jmp 0x180005faf
mov eax, esi
sub eax, 0xa8
je 0x18000619b
sub eax, 0x45
je 0x180005f7f
sub eax, 0x4e
je 0x180005f48
cmp eax, 0x4e
je 0x18000619b
jmp 0x180005fb5
mov rbx, qword [0x1800827a8]
cmp rbx, qword [0x1800827b0]
je 0x180005f72
mov rcx, r14
call qword [rbx]
test al, al
je 0x18000616d
add rbx, 8
cmp rbx, qword [0x1800827b0]
jne 0x180005f58
mov byte [0x180081eb8], 1
mov byte [rbp], 1
jmp 0x180005fb5
xor r8d, r8d
mov edx, 0xbc
lea rcx, [rbp + 0x40]
call fcn.180016bb0
test al, al
je 0x180006197
mov r8d, 0xeb
lea rdx, [rbp + 0x20]
xor ecx, ecx
call fcn.180030150
mov r14, rax
test rax, rax
je 0x180006197
add esi, 0x4e
cmp esi, r15d
jae 0x1800061a4
xor edx, edx
jmp 0x180005dc0
mov eax, dword [r13 + 4]
lea ecx, [rax + rax*2]
add dword [rdi + 0x24], ecx
mov r12d, edx
cmp dword [rbx + 4], 0
jle 0x1800060ed
lea eax, [r14 + r14]
mov rsi, rdx
nop word [rax + rax]
movsxd rcx, dword [rdi + 0x30]
cmp ecx, eax
jle 0x1800060af
mov ebx, 0xfb
mov eax, ebx
sub eax, 0xfb
je 0x18000605b
cmp eax, 0x5f
jne 0x18000609e
movsxd rcx, dword [rdi + 0x30]
mov eax, dword [rdi + 0x24]
sub eax, ecx
mov dword [rbp + 8], eax
mov r8, rcx
mov rax, qword [rdi + 0x10]
mov rdx, qword [rsi + rax]
lea rcx, [rdx + rcx*4]
mov dword [rbp + 0x10], r14d
movsxd rax, r14d
sub r8, rax
lea rdx, [rdx + r8*4]
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40
mov r9, r15
lea r8, [rbp + 0x10]
call fcn.180028880
jmp 0x18000609e
movsxd rax, dword [rdi + 0x30]
mov ecx, dword [r13 + 4]
cmp eax, ecx
cmovle ecx, eax
mov dword [rbp + 8], r14d
mov dword [rbp + 0x10], ecx
mov rdx, rax
movsxd rax, ecx
sub rdx, rax
mov rax, qword [rdi + 0x10]
mov rcx, qword [rax + rsi]
lea rax, [rcx + rdx*4]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10]
lea r8, [rbp + 8]
mov edx, 0x44
mov rcx, r15
call fcn.1800143b0
add ebx, 0x5f
cmp ebx, 0x1b9
jb 0x180006001
jmp 0x1800060ce
mov eax, dword [rdi + 0x24]
sub eax, ecx
movsxd r8, eax
shl r8, 2
mov rax, qword [rdi + 0x10]
mov rax, qword [rax + rsi]
lea rcx, [rax + rcx*4]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
inc r12d
add rsi, 8
mov rax, qword [rbp + 0x18]
cmp r12d, dword [rax + 4]
lea eax, [r14 + r14]
jl 0x180005ff0
mov rbx, qword [rbp + 0x18]
xor edx, edx
mov eax, dword [rbp]
dec eax
mov dword [rbp], eax
cmp eax, 0x94
ja 0x180005e20
mov ebx, edx
mov rax, qword [rbp + 0x38]
jmp 0x1800061ab
add ecx, dword [rdi + 0x24]
cmp ecx, dword [rdi + 0x20]
jle 0x180006121
mov ebx, 0xffffff7d
mov rax, qword [rbp + 0x38]
jmp 0x1800061ab
mov dword [rdi + 0x24], ecx
cmp dword [rdi + 0x2c], 0
jne 0x180006165
sub ecx, dword [rdi + 0x40]
cmp ecx, dword [r13 + 4]
jle 0x180006165
mov dword [rsp + 0x48], 0x101
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180004b60
xor edx, edx
mov ebx, edx
mov rax, qword [rbp + 0x38]
jmp 0x1800061ab
mov qword [rbp + 0x18], r14
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10d
lea rcx, [rbp + 0x18]
call fcn.180008950
mov byte [rbp], 0
mov ebx, dword [rbp]
mov rax, qword [rbp + 0x38]
jmp 0x1800061ab
mov rax, qword [rbp + 0x38]
mov ebx, dword [rbp]
cmp rax, 0x10
jb 0x1800061e6
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800061e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800061e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005f9b8
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x180006238
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006233
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006233
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005f9b8
mov eax, ebx
mov rcx, qword [rbp + 0x80]
xor rcx, rbp
call fcn.18005fed0
mov rbx, qword [rbp + 0xc8]
mov rsi, qword [rbp + 0xd0]
mov rdi, qword [rbp + 0xd8]
lea rsp, [rbp + 0x90]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret