Function at 0x180018426
Capabilities:
Enumerate threads
Suspend thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x5a8
mov dword [rsp + 0x68], r8d
mov dword [rsp + 0x80], edx
mov rax, qword [0x180044008]
xor rax, rsp
mov qword [rsp + 0x5a0], rax
mov qword [rsp + 0xb0], rcx
mov rax, qword [rsp + 0xb0]
mov qword [rax], 0
lea rax, [rcx + 8]
mov qword [rsp + 0x90], rax
xor eax, eax
mov dword [rcx + 8], eax
mov qword [rsp + 0x98], rcx
add rcx, 0xc
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rsp + 0xc8]
mov dword [rcx], eax
mov ecx, 4
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rsp + 0x50], rax
mov eax, 0x858fbfe
mov esi, 0x9a1a45d9
cmp eax, 0x1490f653
jg 0x180018519
cmp eax, 0xd859a934
jg 0x180018586
cmp eax, 0xc9ea7637
jg 0x180018629
cmp eax, 0x84cb86ab
je 0x180018766
cmp eax, 0x9363d784
je 0x1800187aa
cmp eax, 0x9a1a45d9
jne 0x1800184c0
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0xa8]
mov eax, 0x1490f654
mov dword [rsp + 0x40], r12d
jmp 0x1800184c0
cmp eax, 0x3c75d90f
jle 0x1800185e1
cmp eax, 0x5bca5827
jg 0x18001868d
cmp eax, 0x3c75d910
je 0x1800187b7
cmp eax, 0x4ede0225
je 0x180018802
cmp eax, 0x5958778c
jne 0x1800184c0
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1c
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0xd0]
call sub.KERNEL32.dll_Thread32Next
test eax, eax
mov eax, 0x5bca5828
mov ecx, 0xdfb36c6d
cmove eax, ecx
mov ebp, ebx
mov r15d, ebx
jmp 0x1800184c0
cmp eax, 0x858fbfd
jg 0x1800186e1
cmp eax, 0xd859a935
je 0x180018827
cmp eax, 0xdfb36c6d
je 0x18001886c
cmp eax, 0xf71a7f39
jne 0x1800184c0
mov r8, qword [rsp + 0x48]
mov rcx, qword [0x180045c70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x38]
mov qword [rax], 0
mov eax, 0x9a1a45d9
mov r12d, dword [rsp + 0x28]
jmp 0x1800184c0
cmp eax, 0x27f75272
jle 0x18001872d
cmp eax, 0x27f75273
je 0x18001887f
cmp eax, 0x377fd8b6
je 0x1800188b1
cmp eax, 0x391216d4
jne 0x1800184c0
cmp dword [rsp + 0x44], 0
mov eax, 0xdfb36c6d
mov ecx, 0x6788efb7
cmove eax, ecx
mov ebp, edi
mov r13d, edi
jmp 0x1800184c0
cmp eax, 0xc9ea7638
je 0x1800188c5
cmp eax, 0xd4004582
je 0x1800188ed
cmp eax, 0xd4df61d8
jne 0x1800184c0
mov rax, qword [rsp + 0x88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
mov ecx, dword [rcx]
mov dword [rsp + 0x84], ecx
cmp eax, dword [rsp + 0x84]
mov eax, 0x3c75d910
mov ecx, 0x6788efb7
cmovb eax, ecx
mov r13d, dword [rsp + 0x24]
jmp 0x1800184c0
cmp eax, 0x5bca5828
je 0x18001890e
cmp eax, 0x5d96065e
je 0x180018931
cmp eax, 0x6788efb7
jne 0x1800184c0
mov rax, qword [rsp + 0x70]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx]
mov rsi, qword [rsp + 0x88]
mov edx, dword [rsi]
lea ebx, [rdx + 1]
mov dword [rsi], ebx
mov esi, 0x9a1a45d9
mov dword [rcx + rdx*4], eax
mov eax, 0x5958778c
mov ebx, r13d
jmp 0x1800184c0
cmp eax, 0x858fbfe
je 0x180018951
cmp eax, 0x85ad1d7
je 0x180018974
cmp eax, 0xf1d7aa1
jne 0x1800184c0
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov ebx, dword [rax]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
mov eax, 0xc9ea7638
mov ecx, 0x5958778c
jmp 0x18001881b
cmp eax, 0x1bcfa45a
je 0x180018984
cmp eax, 0x249381fc
jne 0x180018990
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
mov qword [rax], rcx
mov eax, 0x391216d4
mov dword [rsp + 0x44], 0
mov edi, dword [rsp + 0x24]
jmp 0x1800184c0
lea rdx, [rsp + 0xd0]
mov qword [rsp + 0xa8], rdx
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x58], rdx
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1c
mov rcx, qword [rsp + 0x50]
call sub.KERNEL32.dll_Thread32First
test eax, eax
mov eax, 0x85ad1d7
cmove eax, esi
xor r12d, r12d
jmp 0x1800184c0
mov eax, 0xd4004582
xor r14d, r14d
jmp 0x1800184c0
mov r9d, dword [rsp + 0x84]
add r9d, r9d
mov rax, qword [rsp + 0x60]
mov dword [rax], r9d
shl r9, 2
mov rax, qword [rsp + 0x30]
mov r8, qword [rax]
mov rcx, qword [0x180045c70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
mov eax, 0x249381fc
mov ecx, 0x377fd8b6
cmove eax, ecx
jmp 0x1800184c0
mov ebx, dword [rsp + 0xdc]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp ebx, eax
mov eax, 0x5958778c
mov ecx, 0xf1d7aa1
cmove eax, ecx
mov ebx, dword [rsp + 0x24]
jmp 0x1800184c0
mov rax, qword [rsp + 0x90]
mov dword [rax], 0x80
mov rcx, qword [0x180045c70]
mov r8d, 0x200
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, qword [rsp + 0x30]
mov qword [rcx], rax
test rax, rax
mov eax, 0x6788efb7
mov ecx, 0x1bcfa45a
cmove eax, ecx
mov r13d, dword [rsp + 0x24]
jmp 0x1800184c0
mov dword [rsp + 0x2c], ebp
cmp dword [rsp + 0x2c], 0
mov eax, 0x5d96065e
jmp 0x18001893f
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
mov eax, 0xf71a7f39
cmove eax, esi
mov r12d, dword [rsp + 0x28]
jmp 0x1800184c0
mov eax, 0x391216d4
xor edi, edi
mov dword [rsp + 0x44], 2
jmp 0x1800184c0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp qword [rax], 0
mov eax, 0xd4df61d8
mov ecx, 0xd859a935
cmove eax, ecx
jmp 0x1800184c0
mov dword [rsp + 0x28], r14d
cmp dword [rsp + 0x28], 0
mov eax, 0x9a1a45d9
mov ecx, 0x27f75273
cmove eax, ecx
mov r12d, dword [rsp + 0x28]
jmp 0x1800184c0
mov dword [rsp + 0x24], r15d
mov rax, qword [rsp + 0x58]
cmp dword [rax], 0xf
mov eax, 0x5958778c
mov ecx, 0x4ede0225
cmova eax, ecx
mov ebx, dword [rsp + 0x24]
jmp 0x1800184c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
mov eax, 0x9363d784
mov ecx, 0xd4004582
cmove eax, ecx
mov r14d, dword [rsp + 0x2c]
jmp 0x1800184c0
mov rax, qword [rsp + 0x50]
cmp rax, 0xffffffffffffffff
mov eax, 0x84cb86ab
mov ecx, 0x1490f654
cmove eax, ecx
mov dword [rsp + 0x40], 0
jmp 0x1800184c0
mov eax, 0x5bca5828
mov r15d, 1
jmp 0x1800184c0
mov eax, 0xdfb36c6d
xor ebp, ebp
jmp 0x1800184c0
cmp eax, 0x1490f654
jne 0x1800184c0
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0xc4], eax
mov edx, dword [rsp + 0x68]
cmp edx, 1
mov ecx, 0xc5de1540
mov eax, 0x27d0dc07
cmovne ecx, eax
mov dword [rsp + 0x88], ecx
test edx, edx
mov ecx, 0x29b8e939
cmovne ecx, eax
mov dword [rsp + 0x44], ecx
mov eax, 0x10a520f6
mov ecx, 0xcd59d7
cmovle ecx, eax
mov dword [rsp + 0x40], ecx
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x68], eax
mov eax, 0xbfa4314c
mov ecx, 0xd09746ec
cmove ecx, eax
mov dword [rsp + 0x98], ecx
mov eax, 0xfd6980cf
cmp eax, 0x119b27e4
jg 0x180018a3e
cmp eax, 0xdc55d0ef
jle 0x180018aa2
cmp eax, 0xdc55d0f0
je 0x180018afa
cmp eax, 0xfd6980cf
je 0x180018b09
cmp eax, 0xa07e3c9
jne 0x180018a06
mov eax, 0x119b27e5
xor esi, esi
jmp 0x180018a06
cmp eax, 0x6c4bb89c
jg 0x180018adc
cmp eax, 0x20145cac
je 0x180018b23
cmp eax, 0x21878801
jne 0x1800191ea
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov ecx, dword [rsp + 0x6c]
mov r8d, dword [rax + rcx*4]
mov ecx, 0x5a
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa0], 0
mov eax, 0x6c4bb89d
mov ecx, 0xaf79ba3d
cmove eax, ecx
jmp 0x180018a06
cmp eax, 0xaf79ba3d
je 0x180018b43
cmp eax, 0xc17f51dc
jne 0x180018a06
mov dword [rsp + 0x6c], edi
mov rax, qword [rsp + 0xc8]
mov ecx, dword [rsp + 0x6c]
cmp ecx, dword [rax]
mov eax, 0xa07e3c9
mov ecx, 0x21878801
cmovb eax, ecx
jmp 0x180018a06
cmp eax, 0x6c4bb89d
je 0x180018b53
cmp eax, 0x6e020afe
jne 0x180018a06
mov eax, 0xc17f51dc
xor edi, edi
jmp 0x180018a06
mov eax, 0x119b27e5
mov esi, 9
jmp 0x180018a06
cmp dword [rsp + 0xc4], 0
mov eax, 0x20145cac
mov ecx, 0xdc55d0f0
cmove eax, ecx
jmp 0x180018a06
mov rax, qword [rsp + 0xb0]
cmp qword [rax], 0
mov eax, 0x6e020afe
mov ecx, 0x119b27e5
cmove eax, ecx
xor esi, esi
jmp 0x180018a06
mov edi, dword [rsp + 0x6c]
inc edi
mov eax, 0xc17f51dc
jmp 0x180018a06
mov dword [rsp + 0xbc], edi
mov dword [rsp + 0xc0], esi
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov rcx, qword [rsp + 0xa0]
lea rdx, [rsp + 0xd0]
mov qword [rsp + 0x70], rdx
mov rax, qword [rsp + 0x70]
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x100], 0x100001
mov qword [rsp + 0x90], rcx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [rsp + 0x24], eax
mov eax, 0x9c0f2fe5
mov ecx, eax
cmp eax, 0x27d0dc06
jle 0x180018c01
cmp ecx, 0x3c639286
jle 0x180018c52
cmp ecx, 0x4cb6addf
jle 0x180018ce0
cmp ecx, 0x6a57cbed
jg 0x180018f80
cmp ecx, 0x4cb6ade0
je 0x180018fee
mov eax, ecx
cmp ecx, 0x4dfcc404
je 0x180018fb7
jmp 0x180018bb8
cmp ecx, 0xde3b2044
jg 0x180018ca2
cmp ecx, 0xc5de153f
jg 0x180018ee4
cmp ecx, 0xbf933e0e
jle 0x180018fcb
cmp ecx, 0xbf933e0f
je 0x1800190bc
mov eax, ecx
cmp ecx, 0xbfa4314c
jne 0x180018bb8
mov eax, 0x3815c98a
xor r12d, r12d
mov esi, dword [0x180045c84]
jmp 0x180018bb8
cmp ecx, 0x3203673f
jg 0x180018f0f
cmp ecx, 0x27d0dc07
je 0x1800190e6
cmp ecx, 0x29b8e939
je 0x1800190f0
mov eax, ecx
cmp ecx, 0x314bd92a
jne 0x180018bb8
mov eax, dword [rsp + 0x28]
imul rax, rax, 0x38
add rax, qword [0x180045c78]
mov qword [rsp + 0x60], rax
mov eax, 0x26a0f63b
jmp 0x180018bb8
cmp ecx, 0xe1bcde
jg 0x180018f4d
cmp ecx, 0xde3b2045
je 0x1800190fd
cmp ecx, 0xf2e33ffd
je 0x180019118
mov eax, ecx
cmp ecx, 0xcd59d7
jne 0x180018bb8
mov eax, dword [rsp + 0x88]
jmp 0x180018bb8
cmp ecx, 0x3c639287
je 0x180019145
cmp ecx, 0x3cd9cb5c
je 0x180018fb7
mov eax, ecx
cmp ecx, 0x3f81d500
jne 0x180018bb8
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x60]
movzx edx, byte [rcx + 0x20]
and edx, 1
mov dword [rsp + 0xa8], edx
mov ebx, 0x7face5a5
cmp ebx, 0xe52e9769
jg 0x180018d85
cmp ebx, 0xa5e6f1a2
jg 0x180018dbe
cmp ebx, 0x827a5028
je 0x180018e24
cmp ebx, 0x83c486ae
je 0x180018e3d
cmp ebx, 0xa070e75d
jne 0x180018d26
mov rbp, qword [rcx + 0x10]
mov ebx, dword [rsp + 0x58]
mov qword [rsp + 0x48], rbx
mov rbx, qword [rsp + 0x48]
movzx edi, byte [rcx + rbx + 0x30]
add rdi, rbp
mov ebx, 0x83c486ae
cmp rdi, rax
je 0x180018d26
mov ebx, 0xe52e976a
jmp 0x180018d26
cmp ebx, 0x3b54bee2
jg 0x180018def
cmp ebx, 0xe52e976a
je 0x180018e55
cmp ebx, 0x785b92
je 0x180018e65
cmp ebx, 0x1a8d3619
jne 0x180018d26
mov ebx, 0x6fbf4f47
xor r15d, r15d
jmp 0x180018d26
cmp ebx, 0xa5e6f1a3
je 0x180018e74
cmp ebx, 0xa73b453d
je 0x180018e99
cmp ebx, 0xae6fa583
jne 0x180018d26
mov r15, qword [rcx]
mov ebx, 0x6fbf4f47
jmp 0x180018d26
cmp ebx, 0x3b54bee3
je 0x180018ea5
cmp ebx, 0x7face5a5
jne 0x180018ece
cmp dword [rsp + 0xa8], 0
mov ebx, 0xa73b453d
je 0x180018d26
mov ebx, 0x3b54bee3
jmp 0x180018d26
mov ebx, 0xae6fa583
cmp rax, qword [rcx + 8]
je 0x180018d26
mov ebx, 0x1a8d3619
jmp 0x180018d26
mov rbp, qword [rsp + 0x48]
movzx r15d, byte [rcx + rbp + 0x28]
add r15, qword [rcx]
mov ebx, 0x6fbf4f47
jmp 0x180018d26
mov edx, dword [rsp + 0x58]
inc edx
mov ebx, 0xa5e6f1a3
jmp 0x180018d26
mov ebx, 0x6fbf4f47
mov r15, qword [rsp + 0x38]
jmp 0x180018d26
mov dword [rsp + 0x58], edx
mov edi, dword [rcx + 0x24]
and edi, 0xf
mov ebp, dword [rsp + 0x58]
mov ebx, 0xa070e75d
cmp ebp, edi
jb 0x180018d26
mov ebx, 0x827a5028
jmp 0x180018d26
mov ebx, 0xa5e6f1a3
xor edx, edx
jmp 0x180018d26
mov rbx, qword [rcx]
mov qword [rsp + 0x38], rbx
mov rdi, qword [rsp + 0x38]
add rdi, 0xfffffffffffffffb
mov ebx, 0x785b92
cmp rdi, rax
je 0x180018d26
mov ebx, 0xa73b453d
jmp 0x180018d26
cmp ebx, 0x6fbf4f47
jne 0x180018d26
mov eax, 0xe1bcdf
jmp 0x180018bb8
cmp ecx, 0xc5de1540
je 0x18001915c
cmp ecx, 0xd09746ec
je 0x18001916c
mov eax, ecx
cmp ecx, 0xdbebdb01
je 0x180018fc1
jmp 0x180018bb8
cmp ecx, 0x32036740
je 0x180019182
mov eax, dword [rsp + 0x98]
cmp ecx, 0x32e68e95
je 0x180018bb8
mov eax, ecx
cmp ecx, 0x3815c98a
jne 0x180018bb8
mov dword [rsp + 0x2c], esi
mov eax, 0x6f5b0762
mov r14d, r12d
jmp 0x180018bb8
cmp ecx, 0xe1bcdf
je 0x180019194
mov eax, dword [rsp + 0x44]
cmp ecx, 0x10a520f6
je 0x180018bb8
mov eax, ecx
cmp ecx, 0x26a0f63b
jne 0x180018bb8
mov eax, dword [rsp + 0x40]
jmp 0x180018bb8
cmp ecx, 0x6a57cbee
je 0x180018fc1
mov eax, ecx
cmp ecx, 0x6f5b0762
jne 0x180018bb8
mov dword [rsp + 0x28], r14d
mov eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x28]
cmp ecx, eax
mov eax, 0x6a57cbee
mov ecx, 0x314bd92a
cmovb eax, ecx
jmp 0x180018bb8
mov eax, 0x32036740
jmp 0x180018bb8
mov eax, 0xab46b591
jmp 0x180018bb8
cmp ecx, 0x9c0f2fe5
jne 0x1800191b1
cmp dword [rsp + 0x24], 0
mov eax, 0x32e68e95
mov ecx, 0xdbebdb01
cmove eax, ecx
jmp 0x180018bb8
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x60]
mov ebx, 0xaba0e6f9
xor edx, edx
cmp ebx, 0x19d5666e
jg 0x18001902f
cmp ebx, 0xaba0e6f9
je 0x18001904c
cmp ebx, 0xe2a5ae27
je 0x18001906b
cmp ebx, 0xe8f4ca45
jne 0x180019002
mov edx, dword [rsp + 0x38]
inc edx
mov ebx, 0xaba0e6f9
jmp 0x180019002
cmp ebx, 0x19d5666f
je 0x180019081
cmp ebx, 0x3c4def91
je 0x1800190af
cmp ebx, 0x4a6fc07f
jne 0x180019002
jmp 0x180018eda
mov dword [rsp + 0x38], edx
mov ebx, dword [rcx + 0x24]
and ebx, 0xf
mov edi, dword [rsp + 0x38]
cmp edi, ebx
mov ebx, 0x3c4def91
mov ebp, 0x19d5666f
cmovb ebx, ebp
jmp 0x180019002
mov rbx, qword [rsp + 0x48]
movzx r15d, byte [rcx + rbx + 0x30]
add r15, qword [rcx + 0x10]
mov ebx, 0x4a6fc07f
jmp 0x180019002
mov rbx, qword [rcx]
mov edi, dword [rsp + 0x38]
mov qword [rsp + 0x48], rdi
mov rdi, qword [rsp + 0x48]
movzx edi, byte [rcx + rdi + 0x28]
add rdi, rbx
cmp rdi, rax
mov ebx, 0xe8f4ca45
mov ebp, 0xe2a5ae27
cmove ebx, ebp
jmp 0x180019002
mov ebx, 0x4a6fc07f
xor r15d, r15d
jmp 0x180019002
mov dword [rsp + 0x50], r13d
mov rax, qword [rsp + 0x60]
mov eax, dword [rax + 0x20]
shr eax, 1
and eax, 1
mov ecx, dword [rsp + 0x50]
cmp ecx, eax
mov eax, 0x3c639287
mov ecx, 0x4dfcc404
cmove eax, ecx
jmp 0x180018bb8
mov eax, 0xde3b2045
jmp 0x180018bb8
mov eax, 0xbf933e0f
xor r13d, r13d
jmp 0x180018bb8
mov rax, qword [rsp + 0x60]
mov r13d, dword [rax + 0x20]
shr r13d, 2
and r13d, 1
mov eax, 0xbf933e0f
jmp 0x180018bb8
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x90]
lea rdx, [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, 0x3cd9cb5c
jmp 0x180018bb8
cmp dword [rsp + 0x50], 0
mov eax, 0x4cb6ade0
mov ecx, 0x3f81d500
cmove eax, ecx
jmp 0x180018bb8
mov eax, 0xbf933e0f
mov r13d, 1
jmp 0x180018bb8
mov eax, 0x3815c98a
mov r12d, dword [rsp + 0x80]
mov esi, dword [rsp + 0x68]
jmp 0x180018bb8
mov r14d, dword [rsp + 0x28]
inc r14d
mov eax, 0x6f5b0762
jmp 0x180018bb8
mov qword [rsp + 0x78], r15
cmp qword [rsp + 0x78], 0
mov eax, 0xf2e33ffd
mov ecx, 0x3cd9cb5c
cmove eax, ecx
jmp 0x180018bb8
mov eax, ecx
cmp ecx, 0xab46b591
jne 0x180018bb8
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xaf79ba3d
mov esi, dword [rsp + 0xc0]
mov edi, dword [rsp + 0xbc]
jmp 0x180018a06
cmp eax, 0x119b27e5
jne 0x180018a06
mov rcx, qword [rsp + 0x5a0]
xor rcx, rsp
call fcn.18001e3c0
mov eax, esi
add rsp, 0x5a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret