Function at 0x180024e10
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x14b0]
mov eax, 0x15b0
call fcn.180040ee0
sub rsp, rax
lea r13d, [r9 + 0x70a]
xor r10d, r10d
mov r12d, r9d
mov r14, rdx
mov r15, rcx
mov esi, r9d
cmp r9d, r13d
jae 0x180025186
mov r12, qword [rbp - 0x80]
lea ecx, [r10 + 0x2e]
lea edx, [rcx + 0x49]
mov eax, 0x6165
lea r9d, [r10 + 0x73]
cmp esi, 0x18d
ja 0x18002508a
je 0x18002507b
cmp esi, 0xc1
ja 0x180025023
je 0x180025899
mov eax, esi
sub eax, 0x19
je 0x180024f8a
sub eax, 0x1f
je 0x180024efc
sub eax, 0x1f
je 0x180024eee
cmp eax, 0x4b
jne 0x18002516e
mov eax, dword [r14]
lea rdx, [rsp + 0x30]
mov r9d, 0x9b
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x3c]
call fcn.180037050
mov r8, qword [rbp + 0x1500]
mov ecx, 0x2e
mov r12, rax
xor r10d, r10d
lea edx, [rcx + 0x49]
lea r9d, [rcx + 0x45]
jmp 0x18002516e
cmp qword [r8], 0xffffffffffffffff
setne byte [rsp + 0x44]
jmp 0x18002516e
cmp dword [r14], 0
jne 0x18002516e
mov r9, r8
xor edx, edx
xor r8d, r8d
mov ecx, 0xc6
call fcn.180023ea0
cmp rax, 2
jbe 0x180024f68
mov r9, qword [rbp + 0x1500]
lea r8, [rsp + 0x60]
lea rdx, [0x180061bb8]
mov qword [rsp + 0x60], 2
mov ecx, 0x46
call fcn.18003c0d0
test eax, eax
jne 0x180024f68
mov r8, qword [rbp + 0x1500]
lea ecx, [rax + 0x2e]
mov dword [r14], 0x10
lea edx, [rax + 0x77]
lea r9d, [rax + 0x73]
xor r10d, r10d
jmp 0x18002516e
mov r8, qword [rbp + 0x1500]
mov ecx, 0x2e
mov dword [r14], 0xa
xor r10d, r10d
lea edx, [rcx + 0x49]
lea r9d, [rcx + 0x45]
jmp 0x18002516e
test r8, r8
je 0x18002516e
mov edi, 0xfd
cmp edi, 0xfd
je 0x180024fb7
cmp edi, 0x1b8
jne 0x180024ff8
mov rdx, r8
mov ecx, 4
call fcn.18001eae0
jmp 0x180024ff8
cmp qword [r8], 0
je 0x180024ff8
mov ebx, 0xf8
cmp ebx, 0xf8
je 0x180024fd7
cmp ebx, 0x1a3
jne 0x180024fea
mov qword [r8], r10
jmp 0x180024fea
mov rcx, qword [r8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [rbp + 0x1500]
xor r10d, r10d
add ebx, 0xab
cmp ebx, 0x24e
jb 0x180024fc2
mov r8, qword [rbp + 0x1500]
add edi, 0xbb
mov r10d, 0
cmp edi, 0x273
jb 0x180024f98
lea ecx, [r10 + 0x2e]
lea edx, [rcx + 0x49]
lea r9d, [r10 + 0x73]
jmp 0x18002516e
mov eax, esi
sub eax, 0x10c
je 0x180025066
sub eax, 0x17
je 0x180025047
cmp eax, 0x53
jne 0x18002516e
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x44], eax
jmp 0x18002516e
mov eax, dword [0x180061c07]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x180061c0b]
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x4d], 0
jmp 0x18002516e
test r15, r15
je 0x18002516e
lea rax, [r12 + r8]
mov qword [r15], rax
jmp 0x18002516e
mov word [rsp + 0x4d], ax
mov byte [rsp + 0x4f], 0
jmp 0x180025173
cmp esi, 0x335
ja 0x180025135
je 0x18002512e
mov eax, esi
sub eax, 0x1e0
je 0x180025899
sub eax, 0x17
je 0x1800250ff
sub eax, 0x6a
je 0x1800250cb
cmp eax, 0x6a
mov eax, 0x6165
jne 0x180025173
mov byte [rsp + 0x55], 0x74
jmp 0x180025173
mov r8d, 3
mov byte [rsp + 0x52], 0
lea rdx, [0x180061bea]
lea rcx, [rsp + 0x48]
call fcn.180047330
mov r8, qword [rbp + 0x1500]
mov ecx, 0x2e
xor r10d, r10d
lea edx, [rcx + 0x49]
lea r9d, [rcx + 0x45]
jmp 0x18002516e
mov r8d, 3
lea rdx, [0x180061ba4]
lea rcx, [rsp + 0x4f]
call fcn.1800474e0
mov r8, qword [rbp + 0x1500]
mov ecx, 0x2e
xor r10d, r10d
lea edx, [rcx + 0x49]
lea r9d, [rcx + 0x45]
jmp 0x18002516e
mov byte [rsp + 0x56], 0
jmp 0x180025173
mov eax, esi
sub eax, 0x39f
je 0x180025166
sub eax, 0x6a
je 0x180025154
cmp eax, 0x6a
mov eax, 0x6165
jne 0x180025173
mov word [rsp + 0x74], cx
jmp 0x180025173
mov dword [rsp + 0x6c], 0x5f0032
mov dword [rsp + 0x70], 0x320033
jmp 0x18002516e
mov dword [rsp + 0x68], 0x730077
mov eax, 0x6165
add esi, 0x6a
cmp esi, r13d
jb 0x180024e72
mov r12d, dword [rbp + 0x1508]
lea eax, [r12 - 0x10]
mov dword [rsp + 0x60], eax
cmp r12d, eax
jbe 0x180025899
mov r13d, dword [rbp + 0x1508]
lea rdi, [0x180000000]
mov r15d, dword [rbp + 0x1508]
mov ebx, 0x64
mov esi, dword [rbp + 0x1508]
nop dword [rax + rax]
lea eax, [r12 - 0x114]
cmp eax, 0xf
ja case.default.0x1800251db
mov ecx, dword [rdi + rax*4 + 0x258c0]
add rcx, rdi
jmp rcx
mov rcx, qword [0x18007e690]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rsp + 0x40]
mov rcx, qword [rbp + rcx*8 + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r10d, r10d
jmp case.default.0x1800251db
mov dword [rsp + 0x78], 0x6c006c
mov word [rsp + 0x7c], r10w
jmp case.default.0x1800251db
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [0x18007e688], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x18007e690], rax
xor r10d, r10d
jmp case.default.0x1800251db
mov esi, r10d
mov dword [rbp + 0x1508], r10d
mov dword [rsp + 0x40], r10d
jmp case.default.0x1800251db
dec dword [rsp + 0x38]
jmp case.default.0x1800251db
mov word [rsp + 0x76], bx
jmp case.default.0x1800251db
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp - 0x68], rax
xor r9d, r9d
xor eax, eax
lea r8, [0x18003c2e0]
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x60], rax
xor r10d, r10d
jmp case.default.0x1800251db
mov r13d, r10d
jmp case.default.0x1800251db
lea rcx, str.__ready_n
call fcn.18003efe0
mov eax, dword [rsp + 0x3c]
mov r14, qword [rbp + 0x1500]
mov dword [rsp + 0x58], eax
nop
test r15d, r15d
jne 0x1800252e1
lea rcx, [0x180061c34]
call fcn.18003efe0
movsxd rax, dword [r14]
lea r9, [rsp + 0x30]
mov qword [rbp - 0x70], rax
lea rdx, [rsp + 0x58]
mov eax, dword [rsp + 0x38]
lea rcx, [rbp + 0x50]
mov dword [rsp + 0x30], eax
mov r8d, 0xf0
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
call fcn.180033660
mov edi, eax
cmp eax, 0xffffffff
jne 0x18002535f
mov ebx, 0xf9
nop
mov ecx, ebx
sub ecx, 0xf8
je 0x1800257de
cmp ecx, 1
jne 0x180025350
lea rcx, str.qqqqqqqqqq
call fcn.18003edc0
mov edx, 0xffffffff
lea rcx, str.NvFBC_GetStatusEx_failed_with_code__d
call fcn.18003efe0
dec ebx
cmp ebx, 0xf7
ja 0x180025320
mov ebx, 0x64
cmp edi, dword [rsp + 0x3c]
jne 0x1800253db
xor r9d, r9d
lea rcx, [rbp + 0x250]
mov r8, r14
lea edx, [r9 + 0x61]
call fcn.180014ba0
test eax, eax
jne 0x1800257de
cmp r15d, 1
jne 0x1800253c0
mov r8d, dword [rbp + 0x250]
test r8d, r8d
jne 0x18002539d
xor r15d, r15d
jmp 0x1800257bb
mov rcx, qword [rbp - 0x68]
lea r9, [rbp - 0x78]
lea rdx, [rbp + 0x254]
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
jmp 0x1800257bb
mov eax, 0x3e
cmp eax, 0x3e
je 0x1800257cc
add eax, 0x2b
cmp eax, 0x69
jb 0x1800253c5
jmp 0x1800257bb
cmp edi, dword [rsp + 0x40]
jne 0x1800257bb
mov eax, 0x14
mov dword [rsp + 0x30], eax
nop
sub eax, 0x13
je 0x180025790
cmp eax, 1
jne 0x18002579d
test r15d, r15d
jne 0x180025728
mov esi, 0x1b
cmp esi, 0x26d
ja 0x1800254cc
je 0x1800254c5
cmp esi, 0x1b
je 0x1800254b9
cmp esi, 0xe1
je 0x1800254ad
cmp esi, 0x1a7
jne 0x1800254e7
xor edi, edi
lea rbx, [0x18007c770]
nop dword [rax + rax]
mov rdx, qword [rbx + 8]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180025460
lea rcx, [0x18007de44]
call qword [sym.imp.SHLWAPI.dll_StrCmpNW]
test eax, eax
jne 0x1800254a0
mov ecx, 0xec
mov eax, ecx
sub eax, 0xeb
je 0x1800254c5
cmp eax, 1
jne 0x180025496
mov eax, dword [rbx]
mov dword [rbp + 0x254], eax
dec ecx
cmp ecx, 0xea
ja 0x180025480
inc edi
add rbx, 0x10
cmp edi, 7
jb 0x180025450
jmp 0x1800254e7
mov dword [rbp + 0x254], 0xffffffff
jmp 0x1800254e7
mov dword [rbp + 0x250], 4
jmp 0x1800254e7
mov esi, 0x26d
jmp 0x1800254e7
cmp esi, 0x333
je 0x180025503
cmp esi, 0x3f9
jne 0x1800254e7
mov esi, 0x3f9
mov r12d, 0x119
add esi, 0xc6
mov ebx, 0x64
cmp esi, 0x4bf
jb 0x180025410
jmp 0x18002579d
mov eax, dword [rbp + 0x254]
mov r12d, 0x119
dec eax
cmp eax, 5
ja case.default.0x18002552b
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x25900]
add rcx, rdx
jmp rcx
xor ebx, ebx
nop
cmp ebx, 0x55
ja case.0x180025547.6
movzx eax, byte [rdx + rbx + 0x25934]
mov ecx, dword [rdx + rax*4 + 0x25918]
add rcx, rdx
jmp rcx
lea rcx, str.Too_many_identity_files_specified__max__d_
jmp 0x180025580
lea rcx, str.msocbvcrogctlbkgdmouseovergradientmiddle2
call fcn.18003efe0
lea rcx, str.CNVStandardPropertyAction::CheckValue
jmp 0x180025580
lea rcx, str.PIndexedDBIndex::Msg_PIndexedDBRequestConstructor
jmp 0x180025580
lea rcx, str.YJPAgent_Telemetry
jmp 0x180025580
lea rcx, str.NvAPI_SYS_GetGpuAndOutputIdFromDisplayId
call fcn.18003efe0
lea rdx, [0x180000000]
add ebx, 0x11
lea eax, [rbx + 0x5d]
cmp eax, 0xc3
jb 0x180025530
mov ebx, 0xdb
nop
mov eax, ebx
sub eax, 0xdb
je 0x1800255d2
sub eax, 0x1f
je 0x1800255b9
cmp eax, 0x1f
je case.0x180025547.5
jmp 0x1800255d8
xor r9d, r9d
lea r8, [rbp + 0x250]
mov edx, 0xc2
mov rcx, r14
call fcn.1800342b0
jmp 0x1800255d8
mov r13d, 1
add ebx, 0x1f
cmp ebx, 0x138
jb 0x1800255a0
mov ebx, 0x10
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xe
je case.0x180025547.5
sub eax, 1
je 0x18002560a
cmp eax, 1
jne 0x180025621
mov r15d, eax
jmp 0x180025621
xor r9d, r9d
lea r8, [rbp + 0x250]
mov edx, 0xc2
mov rcx, r14
call fcn.1800342b0
dec ebx
cmp ebx, 0xd
ja 0x1800255f0
mov ebx, 0x113
nop dword [rax]
cmp ebx, 0x113
je 0x180025667
cmp ebx, 0x199
je 0x18002564e
cmp ebx, 0x21f
je case.0x180025547.5
jmp 0x180025671
xor r9d, r9d
lea r8, [rbp + 0x250]
mov edx, 0xc2
mov rcx, r14
call fcn.1800342b0
jmp 0x180025671
mov dword [rbp + 0x1508], 1
add ebx, 0x86
cmp ebx, 0x2a5
jb 0x180025630
nop
lea r9, [0x18007de44]
mov qword [rsp + 0x20], 0
xor edx, edx
mov r8d, 0x114
mov rcx, r14
call fcn.180033660
jmp case.0x180025547.5
mov eax, 0x2c
nop word [rax + rax]
cmp eax, 0x2c
je 0x1800256e3
add eax, 7
cmp eax, 0x33
jb 0x1800256b0
mov eax, dword [rbp + 0x1508]
mov dword [rbp + 0x1508], eax
nop dword [rax]
cmp ebx, 0x64
je 0x180025709
cmp ebx, 0x384
je case.0x180025547.5
jmp 0x180025715
mov r8d, 0x7c
lea rdx, [0x18007de44]
mov rcx, r14
call fcn.180011050
mov eax, dword [rbp + 0x1508]
mov dword [rbp + 0x1508], eax
jmp case.0x180025547.5
lea rcx, str.Ostasiatische_Schriften
call fcn.18003efe0
add ebx, 0x320
cmp ebx, 0x640
jbe case.default.0x18002552b
jmp 0x1800254e7
mov ebx, 0x11d
nop dword [rax]
mov eax, ebx
sub eax, 0x11b
je 0x18002576d
sub eax, 1
je 0x180025751
cmp eax, 1
jne 0x180025784
mov eax, dword [0x18007de40]
mov dword [rbp + 0xb80], eax
jmp 0x180025784
mov r8d, dword [0x18007de40]
lea rdx, [0x18007de44]
lea rcx, [rbp + 0xb84]
call fcn.180042e20
jmp 0x180025784
xor r9d, r9d
lea r8, [rbp + 0xb80]
mov edx, 0xc2
mov rcx, r14
call fcn.1800342b0
dec ebx
cmp ebx, 0x11a
ja 0x180025730
jmp 0x18002579d
mov rcx, qword [0x18007e690]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [rsp + 0x30]
mov ebx, 0x64
dec eax
mov dword [rsp + 0x30], eax
cmp eax, 0x12
ja 0x1800253f0
mov esi, dword [rbp + 0x1508]
test esi, esi
jne 0x1800257f7
test r13d, r13d
jne 0x1800257f7
lea ebx, [rsi + 0x64]
jmp 0x1800252d0
mov edx, dword [rbp + 0x250]
lea rcx, str.Iziqhingi_ze_Virgin_yase_US
call fcn.18003efe0
lea rdi, [0x180000000]
xor r10d, r10d
mov r12d, pe_nt_image_headers64
lea ebx, [r10 + 0x64]
jmp case.default.0x1800251db
xor r10d, r10d
lea rdi, [0x180000000]
lea ebx, [r10 + 0x64]
jmp case.default.0x1800251db
mov ebx, dword [rsp + 0x38]
mov rax, qword [0x18007e688]
mov dword [rsp + 0x40], ebx
mov qword [rbp + rbx*8 + 0x50], rax
inc ebx
mov dword [rsp + 0x3c], ebx
call qword [rbp - 0x80]
mov qword [rbp + rbx*8 + 0x50], rax
inc ebx
xor r10d, r10d
mov dword [rsp + 0x38], ebx
lea ebx, [r10 + 0x64]
jmp case.default.0x1800251db
mov dword [rsp + 0x38], r10d
jmp case.default.0x1800251db
lea rcx, str._Running_color
call fcn.18003efe0
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r10d, r10d
jmp case.default.0x1800251db
mov dword [rsp + 0x3c], r10d
jmp case.default.0x1800251db
lea r9, [rsp + 0x68]
mov r8d, 0xf5
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 8]
call fcn.180024590
xor r10d, r10d
mov r15d, r10d
movups xmm2, xmmword [rax]
movq qword [rbp - 0x80], xmm2
dec r12d
cmp r12d, dword [rsp + 0x60]
ja 0x1800251c0
mov eax, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x15f0]
add rsp, 0x15b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, r13d
jmp 0x18002589d