Function at 0x180013e20
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov r12d, dword [rsp + 0xb0]
lea eax, [rcx - 0xe]
mov r9d, dword [rsp + 0xb0]
lea r11, [0x180000000]
mov edi, dword [rsp + 0xb0]
xor r14d, r14d
mov ebx, dword [rsp + 0xb0]
cmp ecx, eax
mov eax, dword [rsp + 0xb0]
mov r10, r8
mov r13d, dword [rsp + 0xb0]
mov rsi, rdx
mov r15d, ecx
jbe 0x180014179
mov edx, dword [rsp + 0xb0]
lea ebp, [rcx - 0x66]
mov ecx, dword [rsp + 0xb0]
mov r8d, dword [rsp + 0xb0]
mov dword [rsp + 0x50], ecx
mov ecx, dword [rsp + 0xb0]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x34], ecx
lea ecx, [r15 - 0xe]
mov dword [rsp + 0x3c], edx
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], r8d
mov dword [rsp + 0xc8], eax
cmp ebp, 0x1f
ja case.default.0x180013ee4
mov ecx, dword [r11 + rbp*4 + 0x14338]
add rcx, r11
jmp rcx
mov ecx, dword [rsi + 0x20]
mov r10d, dword [rsi + 0x1c]
mov r12d, dword [rsi + 0x18]
mov dword [rsp + 0x50], ecx
lea ecx, [r15 - 0xe]
mov dword [rsp + 0x30], r10d
jmp 0x180014114
mov eax, dword [rsi]
mov edx, dword [rsi + 0x24]
mov dword [rsp + 0x44], eax
jmp 0x180014107
mov qword [rsi + 0x20], r14
mov qword [rsi + 0x18], r14
mov qword [rsi + 0x10], r14
mov qword [rsi + 8], r14
mov dword [rsi + 4], r14d
jmp case.0x180013ee4.4
lea r9, [rsp + 0x58]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov edx, dword [rsp + 0x3c]
mov r8d, dword [rsp + 0x38]
mov dword [rsp + 0x48], eax
jmp case.0x180013ee4.4
and r9d, 0x3ffffff
mov dword [rsp + 0x40], r9d
jmp case.0x180013ee4.4
mov eax, edx
shr eax, 0x16
mov dword [rsp + 0x4c], eax
jmp case.0x180013ee4.4
mov qword [0x18008b168], rsi
lea r8, [0x1800143f0]
mov qword [rsp + 0x28], r14
mov r9, rsi
xor edx, edx
mov qword [rsi + 0x80], r10
xor ecx, ecx
mov dword [rsp + 0x20], r14d
mov byte [rsp + 0xb0], 1
mov qword [rsp + 0x58], r14
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [rsp + 0x3c]
mov r8d, dword [rsp + 0x38]
mov qword [rsp + 0x68], rax
jmp case.0x180013ee4.4
imul eax, dword [rsp + 0x4c], 0x3d1
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, r14d
mov edi, ecx
mov dword [rsp + 0x44], ecx
and edi, 0x3ffffff
mov ecx, r14d
mov ebx, edi
xor ebx, 0x3d0
cmp ebx, 0x3ffffff
setne cl
test edi, edi
setne al
test eax, ecx
jne 0x180014143
mov eax, dword [rsi + 4]
mov dword [rsp + 0x40], eax
jmp case.0x180013ee4.4
mov r8d, dword [rsi + 8]
lea ecx, [r15 - 0xe]
mov r9d, dword [rsi + 0x10]
mov r11d, dword [rsi + 0x14]
mov r13d, dword [rsi + 0xc]
mov r10d, dword [rsp + 0x30]
mov dword [rsp + 0x38], r8d
mov dword [rsp + 0xc8], r9d
mov dword [rsp + 0x34], r11d
jmp 0x180014121
mov r9, qword [rsp + 0x68]
test r9, r9
je 0x180014148
movzx eax, byte [rsp + 0xb0]
mov ecx, r14d
cmp dword [rsp + 0x48], r14d
cmove ecx, eax
mov rax, r9
mov byte [rsp + 0xb0], cl
xchg qword [0x18008b170], rax
cmp cl, 0
je case.0x180013ee4.4
lea r8, [rsp + 0x60]
mov qword [rsp + 0x60], r14
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rsp + 0x58]
mov dword [rsp + 0x48], eax
test rcx, rcx
je 0x180014093
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1800140a2
call sub.RPCRT4.dll_MesHandleFree
mov r8d, dword [rsp + 0x38]
mov edx, dword [rsp + 0x3c]
jmp case.0x180013ee4.4
mov r9d, 0xec
mov dword [rsi + 0x28], 1
mov r8, rsi
mov dword [rsi + 0x2c], 1
xor edx, edx
xor ecx, ecx
call fcn.180004b10
mov edx, dword [rsp + 0x3c]
mov r8d, dword [rsp + 0x38]
jmp case.0x180013ee4.4
mov eax, dword [r10]
mov dword [rsi], eax
jmp case.0x180013ee4.4
mov eax, dword [rsp + 0x44]
and edx, 0x3fffff
mov ecx, dword [rsp + 0x4c]
shr eax, 0x1a
add eax, r9d
shl ecx, 6
add eax, ecx
mov dword [rsp + 0x40], eax
shr eax, 0x1a
add r8d, eax
mov dword [rsp + 0x38], r8d
mov dword [rsp + 0x3c], edx
lea ecx, [r15 - 0xe]
mov r10d, dword [rsp + 0x30]
mov r11d, dword [rsp + 0x34]
mov r9d, dword [rsp + 0xc8]
dec ebp
lea eax, [rbp + 0x66]
cmp eax, ecx
jbe 0x1800141a8
mov r9d, dword [rsp + 0x40]
lea r11, [0x180000000]
mov r10, qword [rsp + 0xc0]
jmp 0x180013ed0
mov eax, r14d
jmp 0x180014157
mov byte [rsp + 0xb0], r14b
mov eax, dword [rsp + 0xb0]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0xb0], 1
jmp 0x180014150
mov r10d, dword [rsp + 0xb0]
mov esi, dword [rsp + 0xb0]
mov ebp, dword [rsp + 0xb0]
mov r11d, dword [rsp + 0xb0]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x38], eax
jmp 0x1800141b0
mov esi, dword [rsp + 0x50]
mov ebp, dword [rsp + 0x3c]
lea r8d, [r15 + 0xe]
cmp r15d, r8d
jae 0x180014150
lea edx, [r15 - 0x85]
mov r15d, dword [rsp + 0x38]
cmp edx, 0xd
ja case.default.0x1800141e6
lea rcx, [0x180000000]
mov ecx, dword [rcx + rdx*4 + 0x143b8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
and ebx, r15d
jmp case.default.0x1800141e6
and r13d, 0x3ffffff
mov eax, r9d
shr eax, 0x1a
or edi, r13d
add r11d, eax
and ebx, r13d
and r9d, 0x3ffffff
jmp case.default.0x1800141e6
or edi, r15d
jmp case.default.0x1800141e6
mov eax, r11d
and ebx, r9d
shr eax, 0x1a
and r11d, 0x3ffffff
add r12d, eax
mov eax, r11d
or eax, r9d
or edi, eax
jmp case.default.0x1800141e6
mov eax, dword [rsp + 0x40]
or edi, dword [rsp + 0x40]
xor eax, 0x40
and ebx, eax
mov eax, r15d
shr eax, 0x1a
add r13d, eax
jmp case.default.0x1800141e6
mov eax, ebp
xor eax, 0x3c00000
and ebx, eax
cmp ebp, 0x800000
jb case.default.0x1800141e6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x180070fd1]
mov rcx, rax
lea rdx, str.filter_set
lea rax, str.t__erfordert_numerische_Konstante_f
mov qword [rsp + 0x20], rax
call fcn.18006ca50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
or edi, r12d
and ebx, r12d
jmp case.default.0x1800141e6
and ebx, r11d
jmp case.default.0x1800141e6
mov eax, esi
and esi, 0x3ffffff
shr eax, 0x1a
and ebx, esi
add ebp, eax
mov eax, ebp
or eax, esi
or edi, eax
jmp case.default.0x1800141e6
mov eax, r13d
shr eax, 0x1a
add r9d, eax
jmp case.default.0x1800141e6
and dword [rsp + 0x38], 0x3ffffff
mov r15d, dword [rsp + 0x38]
jmp case.default.0x1800141e6
mov eax, r12d
shr eax, 0x1a
add r10d, eax
and r12d, 0x3ffffff
jmp case.default.0x1800141e6
mov eax, r10d
and r10d, 0x3ffffff
shr eax, 0x1a
or edi, r10d
add esi, eax
and ebx, r10d
inc edx
lea eax, [rdx + 0x85]
cmp eax, r8d
jb 0x1800141c5
jmp 0x180014150
cmp ebx, 0x3ffffff
mov eax, r14d
sete al
test edi, edi
sete r14b
or eax, r14d
jmp 0x180014157