Function at 0x1800146a0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
lea edi, [r9 + 0xa]
mov r13d, r9d
mov r14, r8
mov rax, rdx
cmp r9d, edi
jae 0x1800148be
lea ebx, [r9 - 0xb6]
movabs r15, 0x68747065642064
lea rsi, [0x180000000]
mov r12d, 0x59
nop dword [rax]
cmp ebx, 0x14
ja case.0x180014713.6
mov ecx, dword [rsi + rbx*4 + 0x14b68]
add rcx, rsi
jmp rcx
mov r8d, 2
mov qword [rsp + 0x3f], r15
lea rdx, [0x1800530cc]
lea rcx, [rsp + 0x46]
call fcn.18003fd90
jmp case.0x180014713.6
mov dword [rsp + 0x47], 0x6e6574
jmp case.0x180014713.6
mov r8d, 2
mov byte [rsp + 0x38], 0
lea rdx, [0x1800554fc]
lea rcx, [rsp + 0x38]
call fcn.18003fbe0
mov dword [rsp + 0x3a], 0x636570
jmp case.0x180014713.6
cmp qword [r14], 0
je 0x180014951
mov dword [rsp + 0x70], 1
mov ecx, 0xdd
cmp ecx, 0x238c
ja 0x1800147c8
je 0x1800147c2
cmp ecx, 0x32
je 0x1800147e8
cmp ecx, 0x34
je 0x1800147aa
cmp ecx, 0xdd
jne 0x1800147e8
mov eax, 1
xchg dword [r14 + 0xc], eax
jmp 0x1800147e8
movss xmm0, dword [rsp + 0x70]
movss dword [r14], xmm0
mov eax, dword [pe_dos_header]
mov dword [r14 + 4], eax
jmp 0x1800147e8
cmp qword [r14], 0
jmp 0x1800147e2
cmp ecx, 0x24f8
je case.0x180014713.6
cmp ecx, 0x46e6
je 0x1800147e8
cmp ecx, 0x6a40
je case.0x180014713.6
add ecx, 0x9c41
cmp ecx, 0x445c7
jbe 0x180014783
jmp case.0x180014713.6
mov r8d, 4
lea rdx, [0x180055500]
lea rcx, [rsp + 0x51]
call fcn.18003fd90
mov r10d, 0x6e6a
mov word [rbp - 0x80], r12w
mov word [rbp - 0x7f], r10w
jmp case.0x180014713.6
movzx eax, word [0x180055504]
mov word [rsp + 0x3d], ax
movzx eax, byte [0x180055506]
mov byte [rsp + 0x3f], al
jmp case.0x180014713.6
movzx eax, word [0x180055508]
lea rdx, [0x18005550c]
mov word [rsp + 0x4a], ax
lea rcx, [rsp + 0x38]
movzx eax, byte [0x18005550a]
mov r8d, 2
mov byte [rsp + 0x4c], al
call fcn.18003fbe0
mov dword [rsp + 0x4e], 0x726174
jmp case.0x180014713.6
mov qword [rsp + 0x28], 0
lea r8, [0x18000bb00]
mov r9, r14
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
jmp case.0x180014713.6
mov byte [rsp + 0x30], 1
inc ebx
lea eax, [rbx + 0xb6]
cmp eax, edi
jb 0x180014700
mov rax, qword [rbp + 0xd8]
lea r12d, [r13 + 0x1e0]
cmp r13d, r12d
jae 0x180014a42
mov esi, dword [rbp + 0xe8]
lea r9, [0x180014bc0]
movzx r15d, byte [rbp + 0xe8]
mov ecx, 0x6a
mov edi, dword [rbp + 0xe8]
lea edx, [rcx - 0xe]
lea r8d, [rcx - 0x30]
nop word [rax + rax]
cmp r13d, 0x176
ja 0x180014a61
je 0x1800149de
mov eax, r13d
sub eax, 0xb6
je 0x1800149d7
sub eax, 0xa
je 0x180014a42
sub eax, 0x26
je 0x1800149c9
sub eax, 0x30
je 0x1800149bc
cmp eax, 0x30
jne 0x180014a1e
mov word [rbp - 0x75], cx
mov r15b, 1
jmp 0x180014a1e
mov byte [rsp + 0x30], 0
jmp 0x180014a42
mov r8, qword [rbp + 0xd0]
movss xmm3, dword [r8 + 4]
movss xmm0, dword [r8]
subss xmm0, dword [r14]
subss xmm3, dword [r14 + 4]
movss xmm1, dword [r8 + 8]
subss xmm1, dword [r14 + 8]
movss xmm2, dword [r8 + 0xc]
subss xmm2, dword [r14 + 0xc]
mulss xmm0, xmm0
mulss xmm3, xmm3
mulss xmm1, xmm1
addss xmm0, xmm3
mulss xmm2, xmm2
addss xmm0, xmm1
addss xmm0, xmm2
call fcn.180043fb8
movss dword [rsp + 0x30], xmm0
jmp 0x180014a42
mov dword [rbp - 0x79], 0x6a6e6a
mov word [rbp - 0x76], dx
jmp 0x180014a1e
mov word [rbp - 0x7c], dx
mov word [rbp - 0x7b], cx
mov word [rbp - 0x7a], dx
jmp 0x180014a1e
mov word [rbp - 0x7d], r8w
jmp 0x180014a1e
movzx eax, word [rax]
lea rdx, [rbp + 0xe8]
xor r9d, r9d
mov word [rbp + 0xe8], ax
mov r8d, 0xde
mov rcx, r14
call fcn.180037ad0
lea rax, [rsp + 0x38]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180014a10
mov ecx, 0x6a
mov rax, qword [rbp + 0xd8]
lea r9, [0x180014bc0]
mov edx, 0x5c
add r13d, 0x30
lea r8d, [rdx - 0x22]
cmp r13d, r12d
jb 0x180014900
mov eax, dword [rsp + 0x30]
mov rbx, qword [rsp + 0x1e0]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, r13d
sub eax, 0x1a6
je 0x180014b59
sub eax, 0x30
je 0x180014b30
sub eax, 0x30
je 0x180014abb
cmp eax, 0x30
jne 0x180014a1e
lea rcx, [rbp - 0x80]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov r8, qword [rbp + 0xd0]
lea rcx, [r14 + 0xa]
cmp rcx, r8
je 0x180014a19
cmp qword [r8 + 0x18], 0x10
mov rdx, r8
jb 0x180014aad
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.1800171c0
jmp 0x180014a19
xor ecx, ecx
movzx eax, r15b
test esi, esi
cmove ecx, eax
movzx r15d, cl
test cl, cl
je 0x180014a19
mov ebx, 0x100
mov eax, ebx
sub eax, 0xff
je 0x180014af0
cmp eax, 1
jne 0x180014b21
mov qword [rsp + 0x60], 0
jmp 0x180014b21
lea r8, [rsp + 0x60]
mov edx, edi
lea rcx, [rsp + 0x38]
call sub.RPCRT4.dll_MesDecodeBufferHandleCreate
mov rcx, qword [rsp + 0x68]
mov esi, eax
test rcx, rcx
je 0x180014b12
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180014b21
call sub.RPCRT4.dll_MesHandleFree
dec ebx
cmp ebx, 0xfe
ja 0x180014ad7
jmp 0x180014a19
mov qword [r14], r9
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x68]
mov qword [rsp + 0x68], 0
mov edx, edi
lea rcx, [rsp + 0x38]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
mov esi, eax
jmp 0x180014a19
mov dword [rsp + 0x58], 0
jmp 0x180014a1e