Function at 0x18007cb50
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x138
mov qword [rsp + 0xf8], 0xfffffffffffffffe
mov rcx, qword [rsp + 0x150]
call fcn.180001e97
test rax, rax
jne 0x18007cbc1
xor eax, eax
test eax, eax
jne 0x18007cbb7
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x127
lea rdx, [0x1801b0260]
mov ecx, 2
call fcn.1800d5be0
cmp eax, 1
jne 0x18007cbb7
int3
mov eax, 0xffffeff9
jmp 0x18007d0e1
mov rcx, qword [rsp + 0x160]
call fcn.180076fd0
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x150]
call fcn.180001e97
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0x98]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.18003d6f0
nop
mov eax, dword [rsp + 0x98]
mov edx, eax
lea rcx, [rsp + 0x88]
call fcn.180001622
nop
mov eax, dword [rsp + 0x98]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.180083710
nop
mov eax, dword [rsp + 0x98]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.1800837e0
nop
mov dword [rsp + 0xa0], 0
jmp 0x18007cc57
mov eax, dword [rsp + 0xa0]
inc eax
mov dword [rsp + 0xa0], eax
mov eax, dword [rsp + 0x98]
cmp dword [rsp + 0xa0], eax
jae 0x18007ce63
mov eax, dword [rsp + 0xa0]
mov edx, eax
mov rcx, qword [rsp + 0x150]
call fcn.18004b230
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
mov ecx, 0x30
call fcn.1800d66b0
mov qword [rsp + 0xd8], rax
cmp qword [rsp + 0xd8], 0
je 0x18007ccc5
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xd8]
call fcn.1800770b0
mov qword [rsp + 0x100], rax
jmp 0x18007ccd1
mov qword [rsp + 0x100], 0
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xd0], rax
mov eax, dword [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.1800837c0
mov rcx, qword [rsp + 0xd0]
mov qword [rax], rcx
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0xa4], eax
mov eax, dword [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.1800837c0
mov r8d, 4
lea rdx, [rsp + 0xa4]
mov rcx, qword [rax]
call fcn.180076de0
mov eax, dword [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.180083890
mov rcx, qword [rsp + 0xa8]
mov qword [rax], rcx
lea rax, [rsp + 0xe8]
mov rdi, rax
mov rsi, qword [rsp + 0x158]
mov ecx, SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.180083890
lea rcx, [rsp + 0xe8]
lea rdi, [rax + 8]
mov rsi, rcx
mov ecx, SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.1800837c0
mov qword [rsp + 0x108], rax
mov ecx, dword [rsp + 0xa0]
mov edx, ecx
lea rcx, [rsp + 0x40]
call fcn.180083890
mov rcx, qword [rsp + 0x108]
mov rcx, qword [rcx]
mov qword [rax + 0x18], rcx
mov eax, dword [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x88]
call fcn.1800010a0
mov qword [rsp + 0x110], rax
mov ecx, dword [rsp + 0xa0]
mov edx, ecx
lea rcx, [rsp + 0x40]
call fcn.180083890
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x18007d100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x118], rax
mov ecx, dword [rsp + 0xa0]
mov edx, ecx
lea rcx, [rsp + 0x78]
call fcn.18003d8a0
mov rcx, qword [rsp + 0x118]
mov qword [rax], rcx
mov ecx, 1
call fcn.180035da0
jmp 0x18007cc47
mov dword [rsp + 0x9c], 1
mov eax, dword [rsp + 0x98]
mov edx, eax
lea rcx, [rsp + 0x58]
call fcn.1800838b0
nop
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.18003d8a0
mov r9d, 0xffffffff
mov r8d, 1
mov rdx, rax
mov ecx, dword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x38], eax
mov qword [rsp + 0xb0], 0
jmp 0x18007cecf
mov rax, qword [rsp + 0xb0]
inc rax
mov qword [rsp + 0xb0], rax
mov eax, dword [rsp + 0x98]
cmp qword [rsp + 0xb0], rax
jae 0x18007cf69
mov dword [rsp + 0xb8], 0
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0x78]
call fcn.18003d8a0
lea rdx, [rsp + 0xb8]
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x18007cf33
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0x58]
call fcn.180083960
mov ecx, dword [rsp + 0xb8]
mov dword [rax], ecx
jmp 0x18007cf64
xor eax, eax
test eax, eax
jne 0x18007cf64
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x153
lea rdx, [0x1801b0270]
mov ecx, 2
call fcn.1800d5be0
cmp eax, 1
jne 0x18007cf64
int3
jmp 0x18007cebc
mov qword [rsp + 0xc0], 0
jmp 0x18007cf8a
mov rax, qword [rsp + 0xc0]
inc rax
mov qword [rsp + 0xc0], rax
mov eax, dword [rsp + 0x98]
cmp qword [rsp + 0xc0], rax
jae 0x18007d020
mov rdx, qword [rsp + 0xc0]
lea rcx, [rsp + 0x58]
call fcn.180083960
cmp dword [rax], 0xffffed00
jne 0x18007cfd6
mov rdx, qword [rsp + 0xc0]
lea rcx, [rsp + 0x58]
call fcn.180083960
mov eax, dword [rax]
mov dword [rsp + 0x9c], eax
jmp 0x18007d020
mov rdx, qword [rsp + 0xc0]
lea rcx, [rsp + 0x68]
call fcn.1800837c0
mov qword [rsp + 0x120], rax
mov rdx, qword [rsp + 0xc0]
lea rcx, [rsp + 0x58]
call fcn.180083960
mov rcx, qword [rsp + 0x120]
mov r8, qword [rcx]
mov edx, dword [rax]
mov ecx, dword [rsp + 0xc0]
call fcn.18007b390
jmp 0x18007cf77
xor eax, eax
test eax, eax
jne 0x18007cf69
mov qword [rsp + 0xc8], 0
jmp 0x18007d04b
mov rax, qword [rsp + 0xc8]
inc rax
mov qword [rsp + 0xc8], rax
mov eax, dword [rsp + 0x98]
cmp qword [rsp + 0xc8], rax
jae 0x18007d093
mov rdx, qword [rsp + 0xc8]
lea rcx, [rsp + 0x78]
call fcn.18003d8a0
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0xc8]
lea rcx, [rsp + 0x68]
call fcn.1800837c0
mov rcx, rax
call fcn.180083980
jmp 0x18007d038
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0xe0], eax
lea rcx, [rsp + 0x58]
call fcn.180083940
nop
lea rcx, [rsp + 0x40]
call fcn.180083870
nop
lea rcx, [rsp + 0x68]
call fcn.1800837a0
nop
lea rcx, [rsp + 0x88]
call fcn.1800010b9
nop
lea rcx, [rsp + 0x78]
call fcn.18000129e
mov eax, dword [rsp + 0xe0]
add rsp, 0x138
pop rdi
pop rsi
ret