Function at 0x18000f460
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rbp
push rbx
push rdi
lea rbp, [rax - 0x208]
sub rsp, 0x2f0
movdqa xmm0, xmmword [0x1800b1730]
xor edi, edi
mov qword [rax + 0x10], rsi
mov qword [rax - 0x20], r12
mov r12, rdx
mov qword [rax - 0x28], r13
mov qword [rax - 0x30], r14
mov r14d, ecx
movdqu xmmword [rbp - 0x16], xmm0
lea ecx, [rdi + 0x30]
mov qword [rax - 0x38], r15
movdqu xmmword [rbp - 0x56], xmm0
mov qword [rbp - 0x30], rdi
xorps xmm0, xmm0
mov word [rbp - 0x28], di
mov byte [rbp - 0x26], dil
mov qword [rbp - 0x70], rdi
mov word [rbp - 0x68], di
mov byte [rbp - 0x66], dil
movdqa xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov qword [rbp], rdi
mov qword [rbp + 0x10], rdi
call fcn.1800728a0
mov ebx, dword [rbp + 0x210]
lea r15d, [r14 - 0xb]
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 8], rax
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0x18], rdi
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0x28], rdi
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0x30], rdi
movups xmmword [rbp + 0xd0], xmm0
mov dword [rbp + 0x38], 1
movdqa xmm0, xmmword [0x1800b1730]
movdqa xmmword [rbp + 0xf0], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x110], xmm0
movsd qword [rbp + 0x20], xmm2
movsd qword [rbp + 0x1b0], xmm2
movdqa xmmword [rbp + 0x50], xmm1
movdqa xmmword [rbp + 0x70], xmm1
mov qword [rbp + 0x80], 0xffffffffffffffff
mov dword [rbp + 0x88], edi
mov byte [rbp + 0xe0], dil
mov word [rbp + 0x100], di
mov dword [rbp + 0x104], edi
mov qword [rbp + 0x108], rdi
mov dword [rbp + 0x120], edi
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], dil
mov qword [rbp + 0x158], rdi
mov qword [rbp + 0x160], 0xf
mov byte [rbp + 0x148], dil
mov qword [rbp + 0x178], rdi
mov qword [rbp + 0x180], 0xf
mov byte [rbp + 0x168], dil
mov qword [rbp + 0x188], rdi
mov qword [rbp + 0x190], 0xffffffffffffffff
mov qword [rbp + 0x198], rdi
mov qword [rbp + 0x1a0], rdi
mov qword [rbp + 0x1a8], rdi
mov word [rbp + 0x1b8], di
mov byte [rbp + 0x1ba], dil
cmp r14d, r15d
jbe 0x18000f8de
mov r13, qword [rbp + 0x220]
lea esi, [r14 - 0xcb]
lea r8, [0x180000000]
mov r9d, 0x1bb
lea rdx, [0x1800bbb10]
cmp esi, 0x1d
ja case.0x18000f684.11
movzx eax, byte [r8 + rsi + 0xfbe0]
mov ecx, dword [r8 + rax*4 + 0xfbb0]
add rcx, r8
jmp rcx
mov rax, qword [r12]
lea rdx, [rbp + 0x220]
mov qword [rbp + 0x220], rax
call fcn.180013570
jmp 0x18000fb7a
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rdi
mov qword [rbp - 0x40], rax
lea r9, [rbp + 0x1c0]
mov eax, dword [0x1800bbba0]
lea r8, [0x180015130]
mov dword [rbp - 0x38], eax
xor edx, edx
mov eax, dword [0x1800bbba4]
xor ecx, ecx
mov dword [rbp - 0x34], eax
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x1c0], xmm0
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r13, rax
jmp 0x18000fb7a
mov word [rbp + 0x210], r9w
lea r8, [0x1800bbb58]
lea r9, [rbp + 0x210]
mov edx, 0x11d
lea rcx, [rbp - 0x30]
call fcn.18001a9d0
mov dword [rsp + 0x38], 0xc2
lea rcx, [rbp + 0x210]
mov eax, 0x1bb
mov qword [rsp + 0x30], rdi
mov word [rbp + 0x210], ax
xor r9d, r9d
lea rax, [rbp - 0x70]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
lea rax, [0x1800bbb78]
mov qword [rsp + 0x20], rax
call fcn.18001fb70
mov edi, 0xeb
nop dword [rax]
mov eax, edi
sub eax, 0xeb
je 0x18000f789
cmp eax, 2
jne 0x18000f77a
mov edx, eax
lea ecx, [rax - 1]
call qword [OleUIPasteSpecialA]
inc edi
cmp edi, 0xed
jb 0x18000f760
jmp 0x18000fb7a
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rbp - 0x80], rax
jmp 0x18000fb7a
mov rax, qword [r12]
cmp dword [rax + 0x20], 0
je 0x18000f7c0
mov dword [rax + 0x24], Ordinal_203
mov rax, qword [r12]
mov qword [rax + 0x1c8], rdi
jmp case.0x18000f684.11
mov dword [rax + 0x24], 0x64
jmp case.0x18000f684.11
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
lea rax, [0x1800315e0]
lea r8, [rbp + 0x220]
mov qword [rbp + 0x220], rax
lea edx, [r9 + 0x37]
call fcn.18004b3a0
jmp 0x18000fb7a
lea rax, [rbp - 0x70]
mov qword [rbp + 0x220], rax
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x50]
je 0x18000f821
lea rcx, [rbp - 0x70]
mov qword [rax], rcx
add qword [rsp + 0x48], 8
jmp 0x18000f837
mov rdx, qword [rsp + 0x48]
lea r8, [rbp + 0x220]
lea rcx, [rsp + 0x40]
call fcn.1800687c0
mov eax, dword [0x1800bbba0]
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x210]
mov dword [rbp + 0x210], eax
xor edx, edx
mov dword [rsp + 0x20], 0x9f
xor ecx, ecx
call fcn.180031660
jmp 0x18000fb7a
mov edi, 0x5b
nop word [rax + rax]
mov eax, edi
sub eax, 0x5a
je 0x18000fba3
cmp eax, 1
jne 0x18000f8ab
mov r8, rdx
lea r9, [rsp + 0x40]
lea edx, [rax + 0x7f]
lea rcx, [rbp]
call fcn.18003d940
mov edx, 0x129
lea rcx, [rbp]
call fcn.180015510
xor ebx, ebx
lea rdx, [0x1800bbb10]
dec edi
cmp edi, 0x59
ja 0x18000f870
mov rcx, qword [r12]
mov rax, qword [rcx + 8]
test rax, rax
je 0x18000fba3
mov edx, 1
call qword [rax + 0x48]
jmp 0x18000fb7a
test r13, r13
jne case.0x18000f684.11
mov ebx, 1
lea rcx, [rbp + 0x128]
call fcn.18000fc00
mov rdx, qword [rbp + 0xf8]
mov r15, qword [rsp + 0x2d0]
mov r14, qword [rsp + 0x2d8]
mov r13, qword [rsp + 0x2e0]
mov r12, qword [rsp + 0x2e8]
mov rsi, qword [rsp + 0x318]
cmp rdx, 0x10
jb 0x18000f953
mov rcx, qword [rbp + 0xe0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f94e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fbaa
call fcn.180072898
movdqa xmm0, xmmword [0x1800b1730]
lea rcx, [rbp + 0x68]
movdqa xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], 0
call fcn.180066e90
mov rcx, qword [rbp + 0x50]
test rcx, rcx
je 0x18000f9bd
mov rdx, qword [rbp + 0x60]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff0
cmp rdx, 0x1000
jb 0x18000f9ac
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fbaa
call fcn.180072898
xorps xmm0, xmm0
mov qword [rbp + 0x60], rdi
movdqa xmmword [rbp + 0x50], xmm0
mov rcx, qword [rbp + 8]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x18000f9fb
nop dword [rax + rax]
mov r8, qword [rdi + 0x10]
lea rdx, [rbp + 8]
lea rcx, [rbp + 8]
call fcn.18006a370
mov rcx, rdi
mov edx, 0x30
mov rdi, qword [rdi]
call fcn.180072898
cmp byte [rdi + 0x19], 0
je 0x18000f9d0
mov rcx, qword [rbp + 8]
mov edx, 0x30
call fcn.180072898
lea rcx, [rsp + 0x58]
call fcn.180066f00
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x18000fa61
mov rdx, qword [rsp + 0x50]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x18000fa4a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fbaa
call fcn.180072898
xorps xmm0, xmm0
mov qword [rsp + 0x50], 0
movdqa xmmword [rsp + 0x40], xmm0
mov rdx, qword [rbp - 0x4e]
cmp rdx, 0x10
jb 0x18000fa9c
mov rcx, qword [rbp - 0x66]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fa97
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fbaa
call fcn.180072898
mov rdx, qword [rbp - 0xe]
movdqa xmm0, xmmword [0x1800b1730]
mov byte [rbp - 0x66], 0
movdqu xmmword [rbp - 0x56], xmm0
cmp rdx, 0x10
jb 0x18000fae8
mov rcx, qword [rbp - 0x26]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fae3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fbaa
call fcn.180072898
mov eax, ebx
add rsp, 0x2f0
pop rdi
pop rbx
pop rbp
ret
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov qword [rsp + 0x28], rdx
xor ecx, ecx
xor edx, edx
mov qword [rsp + 0x20], rdi
mov r8d, 0xb8
call fcn.1800053c0
mov edx, 0x62
lea rcx, [0x1800bbb18]
call fcn.180062e40
test al, al
je 0x18000f8d9
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.180076eb0
jmp 0x18000fb7a
lea rax, [rbp - 0x30]
mov qword [rbp + 0x220], rax
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x50]
je 0x18000fb64
lea rcx, [rbp - 0x30]
mov qword [rax], rcx
add qword [rsp + 0x48], 8
jmp case.0x18000f684.11
mov rdx, qword [rsp + 0x48]
lea r8, [rbp + 0x220]
lea rcx, [rsp + 0x40]
call fcn.1800687c0
lea rdx, [0x1800bbb10]
mov r9d, 0x1bb
lea r8, [0x180000000]
dec r14d
dec esi
xor edi, edi
cmp r14d, r15d
jbe 0x18000f8de
jmp 0x18000f667
xor edi, edi
jmp 0x18000f8de
call fcn.1800773d0
int3