Function at 0x1800b6ac0
Capabilities:
Create thread
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
imul eax, r9d, 0xac3
mov r13, r8
mov r14, rdx
mov dword [rbp - 0x71], r9d
mov r12d, r9d
mov dword [rbp - 0x45], eax
cmp r9d, eax
ja 0x1800b6cd8
mov edi, dword [rbp + 0x7f]
xor esi, esi
mov ebx, dword [rbp + 0x7f]
mov qword [rbp - 0x31], rdi
cmp r12d, 0x72cf
ja 0x1800b6d9a
je 0x1800b6d7c
cmp r12d, 0x163e
ja 0x1800b6cac
je 0x1800b6c63
mov eax, r12d
sub eax, 0x27
je 0x1800b6bec
sub eax, 0x3e
je 0x1800b6bbc
sub eax, 0xa7
je 0x1800b6b73
cmp eax, 1
jne 0x1800b706c
mov r9, r13
mov dword [rbp - 0x79], esi
lea r8, [rbp - 0x21]
mov rcx, r14
lea edx, [rax + 0x5a]
call fcn.180067a90
jmp 0x1800b706c
mov qword [rsp + 0x28], rsi
lea r8, [0x180012de0]
mov r9, r14
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
test rax, rax
je 0x1800b7336
mov r9d, 0x6e
mov dword [rbp - 0x71], 1
mov r8, r14
lea rcx, [rbp - 0x71]
xor edx, edx
call fcn.18001b270
jmp 0x1800b706c
mov rax, qword [r13]
xor edx, edx
mov qword [rbp - 0x39], rax
mov rcx, r13
mov rax, qword [r13 + 0x10]
mov qword [rbp - 0x41], rax
mov eax, dword [r13 + 0x18]
lea r8d, [rdx + 0x75]
mov dword [rbp - 0x65], eax
mov dword [rbp - 0x69], esi
call fcn.1800876d0
mov dword [rbp - 0x55], eax
jmp 0x1800b706c
lea rax, [rbp - 0x11]
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor r8d, r8d
mov qword [rsp + 0x40], rsi
xor edx, edx
mov qword [rsp + 0x38], rsi
mov ecx, 0xf8
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call fcn.180097920
mov r9d, 0x29
lea rdx, [rbp - 0x11]
xor r8d, r8d
mov rcx, r14
call fcn.180025390
test eax, eax
jne 0x1800b733f
xor r9d, r9d
lea rcx, [rbp - 0x11]
xor r8d, r8d
mov edx, SHSetInstanceExplorer
call fcn.18008a7e0
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r13], rax
jmp 0x1800b706c
xor r9d, r9d
lea rcx, [rbp - 0x11]
xor r8d, r8d
mov edx, SHSetInstanceExplorer
call fcn.18008a7e0
mov rdx, qword [rbp - 9]
mov rcx, qword [r13]
movsxd r8, eax
call sub.VCRUNTIME140.dll_memcpy
xor r9d, r9d
lea rcx, [rbp - 0x11]
xor r8d, r8d
mov edx, SHSetInstanceExplorer
call fcn.18008a7e0
mov dword [r13 + 8], eax
mov qword [r13 + 0xc], 0
jmp 0x1800b706c
cmp r12d, 0x2c55
je 0x1800b6d73
cmp r12d, 0x399a
je 0x1800b6d06
cmp r12d, 0x426c
je 0x1800b6cf6
cmp r12d, 0x5883
jne 0x1800b706c
mov eax, dword [rbp - 0x61]
mov rbx, qword [rsp + 0x130]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [r13 + 0x20], 1
mov dword [rbp - 0x61], esi
jmp 0x1800b706c
mov r8, r13
mov edx, 0xbb
xor ecx, ecx
call fcn.1800925d0
xor edx, edx
mov dword [rbp - 0x51], eax
mov r8, r13
lea ecx, [rdx + 0x36]
call fcn.1800484f0
xor edx, edx
mov rcx, r13
mov rbx, rax
lea r8d, [rdx + 0x3f]
call fcn.180088050
mov dword [rsp + 0x48], 0x107
xor r9d, r9d
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rsi
xor edx, edx
mov qword [rsp + 0x30], rsi
mov rcx, r13
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov dword [rbp - 0x49], eax
call fcn.1800199e0
mov qword [rbp - 0x29], rax
jmp 0x1800b706c
mov qword [r13 + 0x18], rsi
jmp 0x1800b706c
mov r9d, reloc.SHELL32.dll_SHSetFolderPathA
mov r8, r13
xor edx, edx
xor ecx, ecx
call fcn.180087160
mov rdi, rax
mov qword [rbp - 0x31], rax
jmp 0x1800b706c
cmp r12d, 0x11e6e
ja 0x1800b72be
je 0x1800b708f
cmp r12d, 0x98d8
je 0x1800b7089
cmp r12d, 0x996a
je 0x1800b6eef
cmp r12d, 0xac04
je 0x1800b6e9b
cmp r12d, 0xe539
jne 0x1800b706c
movsxd rax, dword [r14 + 0x10]
movsxd r15, dword [r14 + 0x34]
test eax, eax
je 0x1800b6e07
sub dword [r14 + 0xc], eax
je 0x1800b6e03
mov rcx, qword [r14]
movsxd r8, dword [r14 + 0xc]
lea rdx, [rcx + rax]
call sub.VCRUNTIME140.dll_memmove
mov dword [r14 + 0x10], esi
test r15d, r15d
je 0x1800b6e5b
mov eax, dword [r14 + 0x2c]
mov edx, eax
sub edx, r15d
je 0x1800b6e4c
mov rcx, qword [r14 + 0x18]
movsxd r8, edx
shl r8, 2
lea rdx, [rcx + r15*4]
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [r14 + 0x2c]
mov rcx, qword [r14 + 0x20]
sub eax, r15d
movsxd r8, eax
shl r8, 3
lea rdx, [rcx + r15*8]
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [r14 + 0x2c]
xor esi, esi
sub eax, r15d
mov dword [r14 + 0x34], esi
sub dword [r14 + 0x30], r15d
mov dword [r14 + 0x2c], eax
cmp edi, dword [r14 + 0x160]
jne 0x1800b738b
cmp dword [rbp - 0x55], 0
jg 0x1800b738b
mov eax, dword [rbp - 0x5d]
lea rdx, [rbp - 0x71]
inc eax
mov r9d, 0xa5
mov r8, r14
mov dword [rbp - 0x71], eax
xor ecx, ecx
call fcn.180031bc0
test eax, eax
jne 0x1800b738b
jmp 0x1800b706c
mov dword [rsp + 0x30], 0x86
mov r9, r13
mov qword [rsp + 0x28], rsi
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.18006e460
mov dword [rbp - 0x59], eax
xor r9d, r9d
mov rax, qword [rbp - 0x39]
xor r8d, r8d
mov rdx, r14
mov dword [rsp + 0x20], 0x69
xor ecx, ecx
movzx eax, byte [rax + 0x1a]
mov dword [rbp - 0x5d], eax
call fcn.180083420
test eax, eax
jne 0x1800b738b
jmp 0x1800b706c
mov edx, dword [r13 + 0xc]
mov ecx, edx
test dl, 2
jne 0x1800b6f7e
mov r9, qword [rbp - 0x21]
test r9, r9
je 0x1800b6f7e
mov r8, qword [rbp - 0x19]
test r8, r8
je 0x1800b6f7e
test byte [r9 + 0xc], 4
je 0x1800b6f7e
test byte [r8 + 0xc], 4
je 0x1800b6f7e
mov eax, dword [r8 + 0x10]
cmp dword [r9 + 0x10], eax
jne 0x1800b6f32
mov eax, dword [r8 + 0x14]
cmp dword [r9 + 0x14], eax
je 0x1800b6f7e
cmp dword [0x180357744], 0
mov ecx, edx
je 0x1800b6f6d
mov edx, dword [0x180357778]
lea r8, [0x180341909]
mov eax, dword [r13 + 4]
lea rcx, str.D:drmemory_packagedynamoriocoreheap.c:1400
mov r9d, dword [r13]
mov dword [rsp + 0x20], eax
lea edx, [rdx*4]
call fcn.1800befd0
mov ecx, dword [r13 + 0xc]
or ecx, 2
mov eax, 1
mov dword [r13 + 0xc], ecx
mov dword [rbp - 0x79], eax
jmp 0x1800b6f81
mov eax, dword [rbp - 0x79]
test cl, 2
je 0x1800b6cdb
mov r12d, esi
lea r15, [rbp - 0x21]
mov rsi, qword [r15]
test rsi, rsi
je 0x1800b7052
test byte [rsi + 0xc], 4
je 0x1800b7052
mov r8, r14
mov edx, 0x61
mov rcx, rsi
call fcn.1800b3d40
test rax, rax
je 0x1800b7349
mov r8d, dword [rax + 4]
mov r9d, dword [rax]
mov r10d, dword [rsi + 4]
mov edx, dword [rsi]
mov r11d, dword [r13]
sub edx, r11d
mov r13d, dword [r13 + 4]
sub r10d, r13d
lea eax, [r10 + r8]
imul eax, dword [r14 + 8]
add eax, r9d
add eax, edx
cdqe
imul rsi, rax, 0x1c
add rsi, qword [r14 + 0x10]
mov eax, dword [rsi + 0xc]
test al, 2
jne 0x1800b704b
cmp dword [0x180357744], 0
je 0x1800b703b
sub r9d, edx
mov dword [rsp + 0x30], r13d
mov edx, dword [0x180357778]
lea rcx, str.AndroidDeviceManager::SetDeviceProviders
sub r8d, r10d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], r8d
lea r8, [0x180341909]
lea edx, [rdx*4]
call fcn.1800befd0
mov eax, dword [rsi + 0xc]
or eax, 2
mov dword [rsi + 0xc], eax
mov eax, 1
mov dword [rbp - 0x79], eax
jmp 0x1800b704e
mov eax, dword [rbp - 0x79]
mov r13, qword [rbp + 0x77]
inc r12d
add r15, 8
cmp r12d, 2
jl 0x1800b6f91
mov r12d, dword [rbp - 0x71]
mov dword [rbp - 0x61], eax
xor esi, esi
imul eax, dword [rbp + 0x7f], 0x91
add r12d, eax
mov dword [rbp - 0x71], r12d
cmp r12d, dword [rbp - 0x45]
jbe 0x1800b6b12
jmp 0x1800b6cd8
mov byte [rbp - 0x61], 1
jmp 0x1800b706c
mov r11d, dword [r14 + 0x164]
cmp dword [rbp - 0x59], r11d
je 0x1800b70f2
movsxd r10, dword [r14 + 0x30]
mov r9d, dword [r14 + 0x2c]
cmp r10d, r9d
jge 0x1800b70d4
mov rax, qword [r14 + 0x18]
sub r9d, r10d
mov edx, dword [r14 + 0xc]
mov ecx, r9d
lea r8, [rax + r10*4]
nop dword [rax + rax]
movzx eax, byte [r8]
lea r8, [r8 + 4]
sub edx, eax
mov dword [r14 + 0xc], edx
sub rcx, 1
jne 0x1800b70c0
mov dword [r14 + 0x2c], r10d
cmp r11d, 0xffffffff
je 0x1800b70f2
mov rax, qword [r14 + 0x18]
mov dword [rax + r10*4], 0x400
inc dword [r14 + 0x2c]
inc dword [r14 + 0x30]
cmp dword [rbp - 0x51], 0
movsxd rsi, dword [rbp - 0x5d]
je 0x1800b716e
movsxd rax, dword [r14 + 0x2c]
cmp eax, 1
jl 0x1800b7116
mov rcx, rax
mov rax, qword [r14 + 0x18]
cmp dword [rax + rcx*4 - 4], 0x400
jne 0x1800b716e
movsxd r15, dword [rbp - 0x69]
xor ebx, ebx
mov rdx, r15
cmp r15, rsi
jge 0x1800b7166
mov r8, qword [rbp - 0x41]
nop dword [rax + rax]
mov rax, qword [rbp - 0x39]
movzx ecx, byte [rax + rdx + 0x1b]
sub dword [rbp - 0x65], ecx
add r8, rcx
inc r15d
mov qword [rbp - 0x41], r8
mov dword [rbp - 0x69], r15d
cmp ecx, 0xff
jb 0x1800b7162
inc rdx
cmp rdx, rsi
jl 0x1800b7130
mov r12d, 0x11e6e
jmp 0x1800b7172
mov dword [rbp - 0x69], r15d
mov r12d, 0x11e6e
jmp 0x1800b7172
mov r15d, dword [rbp - 0x69]
mov eax, dword [rbp - 0x65]
test eax, eax
je 0x1800b71cb
xor r9d, r9d
mov dword [rbp - 0x71], eax
lea r8, [rbp - 0x71]
mov dword [rsp + 0x20], 0x3e
mov rdx, r14
lea rcx, [rbp + 0xf]
call fcn.18000bc40
movups xmm1, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movd eax, xmm1
movsd qword [rbp + 0x1f], xmm0
test eax, eax
jne 0x1800b738b
movsxd rcx, dword [r14 + 0xc]
add rcx, qword [r14]
movsxd r8, dword [rbp - 0x65]
mov rdx, qword [rbp - 0x41]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp - 0x65]
add dword [r14 + 0xc], eax
movsxd r9, r15d
mov r10d, 0xffffffff
cmp r9, rsi
jge 0x1800b706a
mov edi, dword [rbp - 0x4d]
mov r13, qword [rbp - 0x39]
nop dword [rax]
nop dword [rax + rax]
lea r8, [r13 + 0x1b]
mov edx, 0xa
add r8, r9
nop dword [rax]
mov eax, edx
sub eax, 0xa
je 0x1800b7245
sub eax, 0x64
je 0x1800b7237
sub eax, 0x64
je 0x1800b7228
cmp eax, 0x64
jne 0x1800b7279
cmp edi, 0xff
jge 0x1800b7279
mov eax, dword [r14 + 0x2c]
mov dword [r14 + 0x30], eax
jmp 0x1800b7279
inc dword [r14 + 0x2c]
inc r15d
inc r9
inc r8
jmp 0x1800b7279
cmp edi, 0xff
jge 0x1800b7279
mov r10d, dword [r14 + 0x2c]
jmp 0x1800b7279
movsxd rcx, dword [r14 + 0x2c]
mov rax, qword [r14 + 0x18]
movzx edi, byte [r8]
mov dword [rax + rcx*4], edi
movsxd rcx, dword [r14 + 0x2c]
mov rax, qword [r14 + 0x20]
mov qword [rax + rcx*8], 0xffffffffffffffff
test ebx, ebx
je 0x1800b7279
movsxd rcx, dword [r14 + 0x2c]
mov rax, qword [r14 + 0x18]
or dword [rax + rcx*4], 0x100
xor ebx, ebx
add edx, 0x64
cmp edx, 0x190
jbe 0x1800b7200
mov dword [rbp - 0x69], r15d
mov dword [rbp - 0x4d], edi
cmp r9, rsi
jl 0x1800b71f0
mov rdi, qword [rbp - 0x31]
mov r13, qword [rbp + 0x77]
cmp r10d, 0xffffffff
je 0x1800b706a
mov rax, qword [r14 + 0x20]
mov rdx, qword [rbp - 0x29]
movsxd rcx, r10d
mov qword [rax + rcx*8], rdx
jmp 0x1800b706a
cmp r12d, 0x130a4
je 0x1800b6cd8
cmp r12d, 0x131c7
je 0x1800b6cd8
cmp r12d, 0x157a3
je 0x1800b7301
cmp r12d, 0x190d8
jne 0x1800b706c
mov ecx, dword [rbp - 0x59]
mov eax, esi
inc ecx
mov dword [r14 + 0x164], ecx
jmp 0x1800b6cdb
cmp dword [rbp - 0x49], 0
je 0x1800b706c
movsxd rax, dword [r14 + 0x2c]
mov dword [r14 + 0x158], 1
test eax, eax
jle 0x1800b706c
mov rcx, rax
mov rax, qword [r14 + 0x18]
or dword [rax + rcx*4 - 4], 0x200
jmp 0x1800b706c
mov byte [rbp - 0x61], 0
jmp 0x1800b6cd8
mov eax, 0xffffff7e
jmp 0x1800b6cdb
cmp dword [0x180357744], 0
je 0x1800b738b
mov eax, dword [rsi + 4]
lea r8, [0x180341909]
mov edx, dword [0x180357778]
lea rcx, str.Deep_data_provided_to_CompositeDeepScanLine_is_missing_a_Z_channel
mov r9d, dword [r13]
mov dword [rsp + 0x30], eax
mov eax, dword [rsi]
mov dword [rsp + 0x28], eax
lea edx, [rdx*4]
mov eax, dword [r13 + 4]
mov dword [rsp + 0x20], eax
call fcn.1800befd0
mov eax, 0xffffffff
jmp 0x1800b6cdb