Function at 0x18005dc30
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xb0
mov r15d, dword [rbp + 0x77]
mov r12, rcx
lea ecx, [r8 + 0x834]
xor r10d, r10d
cmp r8d, ecx
mov dword [rbp - 0x59], ecx
mov r14d, r8d
mov r13d, r8d
mov r8, qword [rbp - 0x39]
mov qword [rbp - 0x51], r8
jae 0x18005e062
mov rdi, qword [rbp - 0x39]
lea r14, [0x180096847]
mov ebx, dword [rbp + 0x77]
nop dword [rax]
nop dword [rax + rax]
cmp r13d, 0x189
ja 0x18005dfb4
je 0x18005de21
cmp r13d, 0xfd
ja 0x18005dd86
je 0x18005dd79
mov eax, r13d
sub eax, 0x5b
je 0x18005dcfe
sub eax, 0x75
je 0x18005dcf2
cmp eax, 0x17
jne 0x18005ddf5
mov ebx, dword [r9]
inc ebx
cmp ebx, 0x10
jae 0x18005ddf5
lea ebx, [rax - 7]
jmp 0x18005ddf5
mov dword [rbp - 0x49], 0x3f656843
jmp 0x18005ddf5
test r12, r12
jne 0x18005dd6a
mov esi, 0x106
nop dword [rax + rax]
mov eax, esi
sub eax, 0x106
je 0x18005dd24
cmp eax, 0x29
je 0x18005e262
jmp 0x18005dd54
mov ecx, 2
call fcn.180079a6c
mov rcx, rax
lea rdx, str.The_New_Tab_Page_cannot_be_scripted.
lea rax, str.string
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov r8, r14
mov qword [rsp + 0x20], r14
call fcn.18006bd20
add esi, 0x29
cmp esi, 0x158
jb 0x18005dd10
mov r9, qword [rbp + 0x7f]
mov ecx, dword [rbp - 0x59]
mov r8, qword [rbp - 0x51]
cmp dword [r9], 0x7fffffff
jae 0x18005e270
jmp 0x18005ddf5
mov rdi, qword [r12 + 0x70]
mov r15d, 1
jmp 0x18005ddf5
mov eax, r13d
sub eax, 0x11c
je 0x18005de17
sub eax, 0x40
je 0x18005de11
cmp eax, 0x17
jne 0x18005ddf5
lea rax, [rbp - 1]
mov dword [rbp - 1], ebx
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov ecx, 0xef
call fcn.180037ad0
test al, al
jne 0x18005ddea
mov eax, ebx
lea r9, [rbp + 7]
mov qword [rsp + 0x28], 0
xor r8d, r8d
xor edx, edx
mov qword [rbp + 7], rax
xor ecx, ecx
mov dword [rsp + 0x20], 0x117
call fcn.18000e2e0
mov rbx, rax
mov r9, qword [rbp + 0x7f]
mov r8, qword [rbp - 0x51]
mov ecx, dword [rbp - 0x59]
add r13d, 0x8c
xor r10d, r10d
cmp r13d, ecx
jae 0x18005e05e
mov rdx, qword [rbp + 0x6f]
jmp 0x18005dca0
mov byte [rbp - 0x45], 0
jmp 0x18005ddf5
mov r8, qword [r12]
mov qword [rbp - 0x51], r8
jmp 0x18005ddf5
cmp dword [r9], 0x1000
jne 0x18005dedf
mov r14d, 0x4a
cmp r14d, 0x4a
je 0x18005de6b
cmp r14d, 0x52
jne 0x18005decc
lea r8, [rdi + 0x50]
mov dword [rbp - 0x31], 0x1000
mov r9, r12
lea edx, [r14 + 0x4e]
lea rcx, [rbp - 0x31]
call fcn.180013410
xor r10d, r10d
test eax, eax
jne 0x18005decc
mov r15d, r10d
jmp 0x18005decc
cmp dword [rdi + 0x2c], 0
jle 0x18005dec8
mov esi, 0x59
mov eax, esi
sub eax, 0x59
je 0x18005de93
sub eax, 1
je 0x18005de8d
cmp eax, 1
jne 0x18005debb
add dword [rdi + 0x2c], 0xfffffff8
jmp 0x18005debb
shr dword [rdi + 0x30], 8
jmp 0x18005debb
movzx eax, byte [rdi + 0x30]
lea r8, [rdi + 0x50]
mov r9, r12
mov dword [rbp - 0x29], eax
mov edx, 0xa0
lea rcx, [rbp - 0x29]
call fcn.180013410
test eax, eax
mov r10d, 0
cmove r15d, r10d
inc esi
cmp esi, 0x5c
jb 0x18005de76
cmp dword [rdi + 0x2c], 0
jg 0x18005de71
mov dword [rdi + 0x2c], r10d
add r14d, 8
cmp r14d, 0x5a
jb 0x18005de34
jmp 0x18005df7b
mov r14d, 0x45
mov eax, r14d
sub eax, 0x45
je 0x18005df5d
cmp eax, 1
jne 0x18005df6e
cmp dword [rdi + 0x2c], 8
jl 0x18005df6e
nop dword [rax]
mov esi, 0x20
cmp esi, 0x20
je 0x18005df1c
cmp esi, 0x960
jne 0x18005df43
shr dword [rdi + 0x30], 8
add dword [rdi + 0x2c], 0xfffffff8
jmp 0x18005df43
movzx eax, byte [rdi + 0x30]
lea r8, [rdi + 0x50]
mov r9, r12
mov dword [rbp - 0x21], eax
mov edx, 0xa0
lea rcx, [rbp - 0x21]
call fcn.180013410
test eax, eax
mov eax, 0
cmove r15d, eax
add esi, 0x940
cmp esi, 0x1280
jbe 0x18005df05
cmp dword [rdi + 0x2c], 8
jge 0x18005df00
mov r9, qword [rbp + 0x7f]
jmp 0x18005df6e
mov eax, dword [r9]
mov ecx, dword [rdi + 0x2c]
shl eax, cl
or dword [rdi + 0x30], eax
add ecx, dword [rdi + 0x18]
mov dword [rdi + 0x2c], ecx
inc r14d
cmp r14d, 0x47
jb 0x18005dee5
mov eax, dword [rdi + 0x1c]
lea r14, [0x180096847]
mov r9, qword [rbp + 0x7f]
cmp dword [rdi + 0x14], eax
jl 0x18005ddee
cmp dword [r9], 0xfff
jg 0x18005ddee
inc dword [rdi + 0x18]
mov eax, 1
mov ecx, dword [rdi + 0x18]
shl eax, cl
mov dword [rdi + 0x1c], eax
jmp 0x18005ddee
cmp r13d, 0x274
ja 0x18005e025
je 0x18005e01c
mov eax, r13d
sub eax, 0x1a8
je 0x18005e00d
sub eax, 0x40
je 0x18005e001
cmp eax, 0x17
jne 0x18005ddf5
mov rdx, qword [r12]
lea rcx, [rbp - 0x39]
mov eax, ebx
mov r9d, 0x6a
xor r8d, r8d
mov qword [rbp - 0x39], rax
call fcn.18003ebb0
mov qword [r12], rax
mov dword [r12 + 0xc], ebx
jmp 0x18005ddea
mov dword [rbp - 0x45], 0x6d615220
jmp 0x18005ddf5
mov qword [r8], r9
mov rax, qword [rdx]
mov qword [r8 + 8], rax
jmp 0x18005ddf5
mov byte [rbp - 0x41], 0
jmp 0x18005ddf5
mov eax, r13d
sub eax, 0x28b
je 0x18005e051
sub eax, 0x75
je 0x18005e048
cmp eax, 0x8c
jne 0x18005ddf5
mov byte [rbp - 0x40], 0
jmp 0x18005ddf5
mov byte [rbp - 0x41], 0x65
jmp 0x18005ddf5
mov eax, dword [r9]
mov dword [r12 + 8], eax
jmp 0x18005ddf5
mov r14d, dword [rbp + 0x77]
imul esi, r14d, 0xa50
mov ebx, r14d
cmp r14d, esi
ja 0x18005e244
mov rdi, qword [rbp - 0x39]
nop dword [rax]
cmp ebx, 0x1add0
ja 0x18005e168
je 0x18005e137
cmp ebx, 0x11c
ja 0x18005e0de
je 0x18005e0d5
mov eax, ebx
sub eax, 0x5b
je 0x18005e0c3
sub eax, 0x75
je 0x18005e0ba
cmp eax, 0x2d
jne 0x18005e21b
mov dword [rbp + 0x77], r15d
jmp 0x18005e21b
mov byte [rbp - 0x40], 0x79
jmp 0x18005e21b
mov ecx, dword [r12 + 8]
mov rax, qword [r12]
mov byte [rcx + rax], 0
jmp 0x18005e21b
mov qword [r8 + 0x10], r10
jmp 0x18005e21b
cmp ebx, 0x8fd0
je 0x18005e12e
cmp ebx, 0xaeed
je 0x18005e244
cmp ebx, 0x11ed0
jne 0x18005e21b
mov eax, dword [0x18009bc78]
movsd xmm0, qword [str.Save_MSInfoFor]
mov dword [rbp - 0x11], eax
movzx eax, word [0x18009bc7c]
mov word [rbp - 0xd], ax
movzx eax, byte [0x18009bc7e]
mov byte [rbp - 0xb], al
movsd qword [rbp - 0x19], xmm0
jmp 0x18005e21b
mov byte [rbp - 0x3f], 0
jmp 0x18005e21b
mov r8d, 4
lea rdx, [0x18009bc68]
lea rcx, [rbp - 0xb]
call fcn.180074b20
mov r8d, 1
lea rdx, [0x180099820]
lea rcx, [rbp - 0x19]
call fcn.1800748e0
jmp 0x18005e217
cmp ebx, 0x478d0
ja 0x18005e1eb
je 0x18005e1da
cmp ebx, 0x23cd0
je 0x18005e1bb
cmp ebx, 0x2cbd0
je 0x18005e1b1
cmp ebx, 0x3e9d0
jne 0x18005e21b
mov qword [rsp + 0x28], r10
lea r8, [0x18002a9b0]
mov r9, r12
mov dword [rsp + 0x20], r10d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
jmp 0x18005e217
mov qword [r12 + 0x80], r9
jmp 0x18005e21b
mov r8d, 1
lea rdx, [0x180099a24]
lea rcx, [rbp - 0x19]
call fcn.1800748e0
mov qword [0x1800b9f08], r12
jmp 0x18005e217
test rdi, rdi
je 0x18005e240
mov rax, rdi
xchg qword [0x1800b9f10], rax
jmp 0x18005e21b
cmp ebx, 0x507d0
je 0x18005e1fd
cmp ebx, 0x596d0
je 0x18005e244
jmp 0x18005e21b
lea r9, [rbp + 0xf]
lea r8, [rbp + 0x17]
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x49]
call qword [sym.imp.dbghelp.dll_SymMatchFileName]
mov byte [rbp + 0x77], 1
mov r8, qword [rbp - 0x51]
imul eax, r14d, 0xb0
add ebx, eax
cmp ebx, esi
ja 0x18005e244
mov r9, qword [rbp + 0x7f]
xor r10d, r10d
jmp 0x18005e080
mov byte [rbp + 0x77], 0
mov eax, dword [rbp + 0x77]
mov rbx, qword [rsp + 0xf0]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180075408
int3
mov ecx, 2
call fcn.180079a6c
mov rcx, rax
lea rdx, str.msocbvcrogdlgstickybuttonbkgdpressed
lea rax, str.423_321_QHE
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov r8, r14
mov qword [rsp + 0x20], r14
call fcn.18006bd20
call fcn.180075408
int3