Function at 0x180013c40
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov rax, qword [0x18005a098]
xor rax, rsp
mov qword [rbp + 0x17], rax
lea ebx, [rcx - 0xb]
mov qword [rbp - 0x61], r8
mov dword [rbp - 0x69], ecx
mov r14, rdx
mov dword [rbp - 0x79], ebx
mov esi, ecx
cmp ecx, ebx
jbe case.0x180013cba.0
mov r15, qword [rbp - 0x41]
lea edi, [rcx - 0xdf]
mov r13, qword [rbp - 0x41]
lea r9, [0x180000000]
movzx r12d, byte [rbp - 0x71]
xor ebx, ebx
mov eax, dword [rbp - 0x79]
mov dword [rbp - 0x6d], edi
cmp edi, 0x19
ja case.default.0x180013cba
mov ecx, dword [r9 + rdi*4 + 0x14038]
add rcx, r9
jmp rcx
mov qword [0x18005a178], r8
jmp case.0x180013cba.4
mov qword [r8 + 0x80], r14
mov r9, r8
lea r8, [0x1800140e0]
mov qword [rsp + 0x28], rbx
xor edx, edx
mov dword [rsp + 0x20], ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x39], rax
cmp rax, 0
jne 0x180013f73
mov edi, 0xf
nop
lea r9, [0x180000000]
cmp edi, 0xf
ja case.default.0x180013d1d
mov ecx, edi
mov edx, dword [r9 + rcx*4 + 0x140a0]
add rdx, r9
jmp rdx
mov word [rbp - 0x15], bx
jmp case.default.0x180013d1d
mov r8d, 4
lea rdx, [0x18004ebe2]
lea rcx, [rbp - 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 3
mov word [rbp - 7], bx
lea rdx, [0x18004ec4a]
lea rcx, [rbp - 7]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
lea r9, [0x180000000]
jmp case.default.0x180013d1d
mov r9d, dword [rbp - 0x4d]
mov r8d, dword [rbp - 0x59]
mov edx, dword [rbp - 0x51]
mov ecx, dword [rbp - 0x55]
call qword [sym.imp.GDI32.dll_CreateRectRgn]
lea r9, [0x180000000]
mov r13, rax
test rax, rax
jne case.default.0x180013d1d
xor r12b, r12b
jmp case.default.0x180013d1d
mov dword [rbp - 0x59], 0x28
jmp case.default.0x180013d1d
test r12b, r12b
je 0x180013dbc
mov rdx, qword [rbp - 0x31]
mov rcx, r13
call qword [sym.imp.GDI32.dll_EqualRgn]
mov rcx, r13
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rbp - 0x41]
lea rdx, [rbp - 0x29]
call qword [sym.imp.GDI32.dll_CopyMetaFileW]
lea r9, [0x180000000]
mov byte [rbp - 0x49], bl
jmp case.default.0x180013d1d
mov r8d, 3
lea rdx, [0x18004ec62]
lea rcx, [rbp - 0x25]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
lea r9, [0x180000000]
jmp case.default.0x180013d1d
mov dword [rbp - 0x1f], 0x720072
mov word [rbp - 0x1b], bx
jmp case.default.0x180013d1d
mov r12b, 1
mov dword [rbp - 0x55], 0xa
mov dword [rbp - 0x51], 0x14
jmp case.default.0x180013d1d
mov eax, dword [0x18004ecae]
mov dword [rbp - 0x1b], eax
movzx eax, word [0x18004ecb2]
mov word [rbp - 0x17], ax
jmp case.default.0x180013d1d
mov dword [rbp - 0x29], 0x720050
mov word [rbp - 0x25], bx
jmp case.default.0x180013d1d
mov dword [rbp - 0x4d], 0x32
mov qword [rbp - 0x31], rbx
jmp case.default.0x180013d1d
mov eax, dword [0x18004ed16]
mov dword [rbp - 0x15], eax
movzx eax, word [0x18004ed1a]
mov word [rbp - 0x11], ax
mov word [rbp - 0xf], bx
jmp case.default.0x180013d1d
mov word [rbp + 5], bx
jmp case.default.0x180013d1d
mov eax, dword [0x18004ed76]
mov dword [rbp - 1], eax
movzx eax, word [0x18004ed7a]
mov word [rbp + 3], ax
jmp case.default.0x180013d1d
mov qword [rbp - 0x41], rbx
dec edi
lea eax, [rdi + 0x26]
cmp eax, 0x25
ja 0x180013d00
mov edi, dword [rbp - 0x6d]
jmp 0x180013f7a
test r8, r8
je 0x180013eaa
test r14, r14
jne case.0x180013cba.4
mov eax, 0x97
nop
cmp eax, 0x97
je 0x180013ee9
cmp eax, 0x305e
jne 0x180013efa
mov rax, qword [rbp - 0x49]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1800436f0
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r8, r14
je 0x180014024
mov qword [rbp - 0x49], 1
add eax, 0x2fc7
cmp eax, 0x5f8e
jbe 0x180013eb0
jmp case.0x180013cba.4
mov ecx, dword [r8]
mov eax, ecx
shr eax, 0x18
shr ecx, 0x10
mov byte [rbp - 0x74], cl
mov byte [rbp - 0x75], al
jmp case.0x180013cba.4
movzx eax, byte [r8]
lea rdx, [rbp + 7]
mov byte [rbp - 0x72], al
lea rsi, [rbp - 0x75]
mov edi, ebx
nop dword [rax]
test edi, edi
je 0x180013f51
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], bl
jne 0x180013f40
add rdx, rax
mov byte [rdx], 0x2e
inc rdx
movzx ecx, byte [rsi]
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
inc edi
inc rsi
mov rdx, rax
cmp edi, 4
jb 0x180013f30
mov esi, dword [rbp - 0x69]
mov edi, dword [rbp - 0x6d]
lea r9, [0x180000000]
mov r8, qword [rbp - 0x61]
mov eax, dword [rbp - 0x79]
dec esi
dec edi
mov dword [rbp - 0x69], esi
mov dword [rbp - 0x6d], edi
cmp esi, eax
ja 0x180013ca6
jmp case.0x180013cba.0
lea rax, [rbp + 7]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x180013fa3
lea rdx, [rbp + 7]
mov rcx, r14
call fcn.180015250
jmp 0x180013f73
mov rax, qword [rbp - 0x39]
xchg qword [0x18005a180], rax
mov byte [rbp - 0x49], 1
jmp case.0x180013cba.4
mov eax, dword [r8]
shr eax, 8
mov byte [rbp - 0x73], al
jmp case.0x180013cba.4
mov r15, r8
jmp case.0x180013cba.4
mov r8, rbx
nop
mov ecx, 0x21
mov eax, ecx
sub eax, 0x21
je 0x180013ffc
cmp eax, 1
jne 0x18001401b
inc r15
inc r14
inc r8
jmp 0x18001401b
movzx eax, byte [r14]
movzx edx, byte [r15]
movzx eax, byte [rax + r9 + 0x45ba0]
cmp byte [rdx + r9 + 0x45ba0], al
jne 0x18001402c
test dl, dl
je 0x180014024
inc ecx
cmp ecx, 0x23
jb 0x180013fe5
jmp 0x180013fe0
mov rax, rbx
jmp 0x180013ec2
lea rax, [r8 + 1]
jmp 0x180013ec2