Function at 0x180027a70
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rdi
sub rsp, 0xc0
mov qword [rax - 0x10], rbx
lea r10, [0x180000000]
mov ebx, dword [rsp + 0x48]
mov edi, 0xffffffff
mov qword [rax - 0x18], rbp
mov r11, r8
mov r8d, dword [rsp + 0xe8]
mov qword [rax - 0x20], rsi
mov qword [rax - 0x28], r12
lea esi, [rdi + 2]
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
mov eax, r9d
mov r15, rdx
mov qword [rsp + 0x70], 0
mov r9, rcx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
lea r12d, [rax + 0xc]
mov dword [rsp + 0x44], r8d
cmp eax, r12d
jae 0x18002807b
mov ecx, dword [rsp + 0xe8]
lea ebp, [rax - 0xa4]
mov rax, qword [rsp + 0x58]
lea r9, str._cairo_win32_save_initial_clip
mov r13, qword [rsp + 0x100]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x58]
mov qword [rsp + 0x50], r15
mov dword [rsp + 0x40], ecx
lea rdx, str.PerfCounter::Registry
cmp ebp, 0x25
ja case.0x180027b54.11
movzx eax, byte [r10 + rbp + 0x285b8]
mov ecx, dword [r10 + rax*4 + 0x28588]
add rcx, r10
jmp rcx
xor eax, eax
mov qword [rsp + 0x58], rax
test r11, r11
jne case.0x180027b54.11
mov rax, qword [0x1800b4688]
lea r9, str.Czas_Jekaterynburg_letni
mov rcx, qword [rsp + 0xd8]
lea edx, [r11 + 0x61]
mov r8d, esi
mov qword [rsp + 0x20], rax
call fcn.180066dc0
mov esi, edi
jmp 0x180028504
xor r15d, r15d
mov qword [0x1800b4688], r9
xor r14d, r14d
mov qword [rsp + 0x50], r15
xor edx, edx
mov dword [rsp + 0x40], edx
jmp 0x180027eb5
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x60]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r14, rax
test rax, rax
je 0x180027f4a
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
test rax, rax
je 0x180027f06
movsxd r15, dword [r13]
shl r15, 3
mov qword [rsp + 0x50], r15
cmp r15, 0x7fffffff
ja 0x180027eec
mov r11, qword [rsp + 0xe0]
lea r9, str._cairo_win32_save_initial_clip
mov r8d, dword [rsp + 0x44]
lea r10, [0x180000000]
jmp case.0x180027b54.11
mov r15, qword [r11]
test r15, r15
je 0x180027eac
mov rcx, r15
mov qword [r11], 0
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15, qword [rsp + 0x50]
jmp 0x180027c0f
mov rax, qword [r11]
test rax, rax
je 0x180028072
mov rcx, qword [rsp + 0xf8]
mov rcx, qword [rcx]
test rcx, rcx
je 0x180028072
mov r9, qword [rax + 8]
test r9, r9
je 0x180028072
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x180028072
movsxd rax, dword [rax + 4]
test eax, eax
js 0x180028072
mov r8d, dword [rcx + 4]
test r8d, r8d
js 0x180028072
cmp eax, r8d
jne 0x180027f66
cmp r9, rdx
je 0x180028074
test eax, eax
je 0x180028074
mov r8, rax
mov rcx, r9
call fcn.18006a5b0
xor ebx, ebx
test eax, eax
sete bl
mov dword [rsp + 0x48], ebx
jmp 0x180027c0f
xor r9d, r9d
xor r8d, r8d
mov rdx, r11
mov ecx, 0xe1
call fcn.180029fa0
test al, al
je 0x180027f6f
mov rax, qword [rsp + 0xf8]
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x180027d1e
mov rcx, qword [rax]
mov rbx, qword [rsp + 0xe0]
lea rdx, [rsp + 0x60]
mov r9d, 0xd0
xor r8d, r8d
mov rax, qword [rbx + 0x88]
mov qword [rsp + 0x20], rax
call fcn.1800127f0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], 0
mov r9, rbx
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
mov r8d, 0xf5
call fcn.18004b970
mov byte [rsp + 0x48], al
mov ebx, dword [rsp + 0x48]
jmp 0x180027c0f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [r14 + 0x38], rax
mov r15, rax
test rax, rax
je 0x180027f9c
mov r8, qword [rsp + 0x50]
xor edx, edx
mov rcx, rax
call fcn.18006aac0
test r15, r15
je 0x180027f7f
mov eax, dword [r13]
mov r15, qword [rsp + 0x50]
mov dword [r14 + 0x34], eax
mov rax, qword [rsp + 0xf0]
mov qword [r14 + 0x18], rax
jmp 0x180027c0f
cmp qword [r11], 0
jne 0x180028014
mov rax, qword [rsp + 0x108]
mov eax, dword [rax]
test eax, eax
jle 0x180027fe6
cmp eax, 0xfffffff
jg 0x180027fb8
cmp dword [r13], 0
jg case.0x180027b54.11
mov rax, qword [0x1800b4688]
lea r9, str.Microsoft.VisualC.Editor.Implementation.SyntacticColorer
mov rcx, qword [rsp + 0xd8]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5e]
call fcn.180066dc0
jmp 0x180028504
cmp dword [r13], 0xfffffff
jg 0x180028042
cmp qword [rsp + 0xf0], 0
jne case.0x180027b54.11
mov rax, qword [0x1800b4688]
lea r9, str.finie_implicitement_dans_C98
mov rcx, qword [rsp + 0xd8]
mov r8d, esi
mov edx, 0x61
mov qword [rsp + 0x20], rax
call fcn.180066dc0
jmp 0x180028504
mov qword [0x1800b4680], rdx
mov r8d, esi
mov dword [rsp + 0x44], esi
test r11, r11
jne case.0x180027b54.11
mov rcx, qword [rsp + 0xf8]
lea r9, str.llvm.aarch64.stxr
mov qword [rsp + 0x20], rdx
lea edx, [r11 + 0x61]
call fcn.180066dc0
jmp 0x180028504
mov r15, qword [rsp + 0x50]
mov edx, dword [rsp + 0x40]
inc ebp
lea eax, [rbp + 0xa4]
cmp eax, r12d
jb 0x180027b30
mov r15, qword [rsp + 0xd8]
mov r12, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
mov eax, dword [rsp + 0xe8]
mov r9, qword [rsp + 0xd0]
jmp 0x18002809f
mov rcx, qword [rsp + 0xd8]
lea r9, str.extensions::NetworkingPrivateServiceClient::Shutdown
mov r8d, 0xd
jmp 0x18002848f
mov rax, qword [0x1800b4688]
lea r9, str.return_this.frame_.sourceLine___
mov rcx, qword [rsp + 0xd8]
mov edx, 0x6d
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x6a]
call fcn.180066dc0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, edi
jmp 0x180028504
mov rcx, qword [rsp + 0xd8]
lea r9, str.Nvda.Graphics.ViewManager.Interop
mov r8d, esi
mov edx, 0x6d
jmp 0x180028494
xor esi, esi
mov edi, esi
jmp 0x180028504
mov byte [rsp + 0x48], 0
mov esi, dword [rsp + 0x48]
mov edi, esi
jmp 0x180028504
mov rcx, qword [rsp + 0xd8]
lea r9, str.PPP_for_pppd__with_direction_flag
mov edx, 0x6d
lea r8d, [rdx - 0x6a]
jmp 0x180028494
mov rcx, qword [rsp + 0xd8]
lea r9, str._s:_unable_to_create_values_array.
mov r8d, esi
mov edx, 0x6d
jmp 0x180028494
mov rax, qword [0x1800b4688]
lea r9, str.Cannot_create_image_file_attribute_of_unknown_type__
mov rcx, qword [rsp + 0xd8]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5d]
call fcn.180066dc0
jmp 0x180028504
mov rax, qword [0x1800b4688]
lea r9, str.define_convert_char16_rtz_x__convert_char_rtz_x_
mov rcx, qword [rsp + 0xd8]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5e]
call fcn.180066dc0
jmp 0x180028504
mov rax, qword [0x1800b4688]
lea r9, str.Target_Phx.CxxIL.Intrinsic.IV_ACCUM2FLOATT
mov rcx, qword [rsp + 0xd8]
mov edx, 0x72
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x70]
call fcn.180066dc0
jmp 0x180028504
mov rax, qword [0x1800b4688]
lea r9, str.Intel::OpenCL::Framework::OclCommandQueue::OclCommandQueue
mov rcx, qword [rsp + 0xd8]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5d]
call fcn.180066dc0
jmp 0x180028504
mov edi, ebx
mov esi, edi
mov edi, esi
jmp 0x180028504
mov r10, qword [rsp + 0x58]
mov edx, dword [rsp + 0xe8]
mov qword [rsp + 0x58], r10
mov r12, qword [rsp + 0x58]
mov r14, qword [rsp + 0x58]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x40], edx
mov r13d, eax
add eax, 0xb
cmp r13d, eax
jae case.0x1800280d0.184
lea eax, [r13 - 0xb0]
cmp eax, 0x19
ja case.0x1800280d0.185
lea r11, [0x180000000]
mov ecx, dword [r11 + rax*4 + 0x285e0]
add rcx, r11
jmp rcx
mov rax, qword [rsp + 0x108]
movsxd r12, dword [rax]
shl r12, 2
mov qword [rsp + 0x50], r12
cmp r12, 0x7fffffff
jbe 0x180028101
lea r9, str.MonthPopupButton.prototype.setCurrentMonth__function_month__
mov r8d, 0xc
jmp 0x18002848c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [r14 + 0x10], rax
mov rbp, rax
test rax, rax
jne 0x180028136
lea r9, str._s:_unable_to_create_thread_identifiers_array.
mov r8d, esi
lea edx, [rax + 0x6d]
mov rcx, r15
jmp 0x180028494
mov r8, r12
xor edx, edx
mov rcx, rbp
call fcn.18006aac0
test rbp, rbp
jne 0x1800284c6
lea r9, str.ERROR:_Unable_to_create_procedure_names_table
mov rcx, r15
lea edx, [rbp + 0x6d]
lea r8d, [rbp + 3]
jmp 0x180028494
xor ebp, ebp
lea r9, [r14 + 0x40]
mov qword [rsp + 0x28], rbp
mov rdx, r15
xor ecx, ecx
mov qword [rsp + 0x20], rbp
lea r8d, [rbp + 0x43]
call fcn.18001fc70
cmp eax, esi
je 0x180028190
lea r9, str.SQLTransactionCallback_returned_error
jmp 0x180028486
lea rdx, [r14 + 0x48]
mov qword [rsp + 0x20], rbp
mov r9d, 0xfb
mov r8, r15
xor ecx, ecx
call fcn.18003fe00
cmp eax, esi
je 0x1800284c6
lea r9, str._s:_unable_to_create_empty_condition.
jmp 0x180028486
cmp r12, 0x7fffffff
jbe 0x1800281d8
lea r9, str.vec4_shadow2DProjOffset_sampler2DShadow_vec4_ivec2_float__
mov r8d, 0xc
jmp 0x18002848c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [r14 + 8], rax
mov rbp, rax
test rax, rax
jne 0x18002820d
lea r9, str.ext_ms_win_ntuser_windowstation_l1_1_1.dll
mov r8d, esi
lea edx, [rax + 0x6d]
mov rcx, r15
jmp 0x180028494
mov r8, r12
xor edx, edx
mov rcx, rbp
call fcn.18006aac0
test rbp, rbp
jne 0x180028235
lea r9, str.err_operator_overload_needs_class_or_enum
mov rcx, r15
lea edx, [rbp + 0x6d]
lea r8d, [rbp + 3]
jmp 0x180028494
mov rax, qword [rsp + 0x108]
mov eax, dword [rax]
mov dword [r14], eax
jmp 0x1800284c6
mov ebx, r8d
jmp case.0x1800280d0.185
mov rax, qword [rsp + 0xf8]
mov rbp, qword [rsp + 0x108]
test rax, rax
cmovne r10, rax
xor edx, edx
mov qword [rsp + 0x58], r10
mov dword [rsp + 0x40], edx
cmp dword [rbp], edx
jle case.0x1800280d0.185
xor r15d, r15d
nop dword [rax]
mov rax, qword [r14 + 0x10]
lea r8, [0x180050e60]
mov r9, r14
lea rcx, [rax + rdx*4]
xor edx, edx
mov qword [rsp + 0x28], rcx
mov rcx, r10
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800282d4
mov edx, dword [rsp + 0x40]
mov rcx, qword [r14 + 8]
inc edx
mov r10, qword [rsp + 0x58]
mov dword [rsp + 0x40], edx
mov qword [r15 + rcx], rax
add r15, 8
cmp edx, dword [rbp]
jl 0x180028280
jmp case.0x1800280d0.185
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rsp + 0x40]
mov r9d, 3
mov dword [rsp + 0x30], ecx
mov edx, eax
mov rcx, qword [0x1800b4688]
mov qword [rsp + 0x28], rcx
lea rcx, str._s:_Input_file__s_is_not_a_normal_file.
mov qword [rsp + 0x20], rcx
lea r8d, [r9 + 0x6f]
mov rcx, qword [rsp + 0xd8]
call fcn.180067190
mov r12, qword [rsp + 0x50]
mov r13d, 0xb6
jmp 0x1800284c6
test r14, r14
je 0x180028454
mov r15d, 0xc4
movsxd rbx, edx
nop word [rax + rax]
mov eax, r15d
sub eax, 0xc4
je 0x180028422
sub eax, 0x5c
je 0x1800283b5
sub eax, 0x5c
je 0x18002836f
cmp eax, 0x5c
jne 0x180028443
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r14
jmp 0x180028434
cmp qword [r14 + 0x48], 0
lea rdx, [r14 + 0x48]
je 0x18002838f
xor r9d, r9d
mov dword [rsp + 0x20], 0xae
xor r8d, r8d
xor ecx, ecx
call fcn.180027190
cmp qword [r14 + 0x40], 0
lea r8, [r14 + 0x40]
je 0x1800283a6
xor edx, edx
mov ecx, 0x14e
call fcn.18004cf90
mov rbp, qword [r14 + 0x38]
test rbp, rbp
je 0x18002843f
jmp 0x18002842b
mov rbp, qword [r14 + 8]
test rbp, rbp
je 0x180028400
test rbx, rbx
js 0x1800283ec
mov eax, edi
sub eax, ebx
add edx, eax
mov dword [rsp + 0x40], edx
nop dword [rax]
mov rcx, qword [r14 + 8]
mov edx, 0xffffffff
mov rcx, qword [rcx + rbx*8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub rbx, rsi
jns 0x1800283d0
mov rbp, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbp
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [r14 + 0x50], 0
lea rdx, [r14 + 0x50]
je 0x18002843f
xor r9d, r9d
mov dword [rsp + 0x20], 0xae
xor r8d, r8d
xor ecx, ecx
call fcn.180027190
jmp 0x18002843f
mov rbp, qword [r14 + 0x10]
test rbp, rbp
je 0x180028443
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbp
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov edx, dword [rsp + 0x40]
add r15d, 0x5c
cmp r15d, 0x234
jb 0x180028340
mov ebx, edi
jmp case.0x1800280d0.185
mov qword [r14 + 0x20], r9
jmp case.0x1800280d0.185
lea rdx, [r14 + 0x50]
mov qword [rsp + 0x20], 0
mov r9d, 0xfb
mov r8, r15
xor ecx, ecx
call fcn.18003fe00
cmp eax, esi
je 0x1800284b2
lea r9, str._s:_unable_to_create_full_condition.
mov r8d, 3
mov rcx, r15
mov edx, 0x72
mov rax, qword [0x1800b4688]
mov qword [rsp + 0x20], rax
call fcn.180066dc0
mov r12, qword [rsp + 0x50]
mov r13d, 0xb6
jmp 0x1800284c6
mov rax, qword [rsp + 0x108]
movsxd r12, dword [rax]
shl r12, 3
mov qword [rsp + 0x50], r12
mov edx, dword [rsp + 0x40]
mov r15, qword [rsp + 0xd8]
inc r13d
mov r10, qword [rsp + 0x58]
mov eax, dword [rsp + 0xe8]
mov r8d, dword [rsp + 0x44]
mov r9, qword [rsp + 0xd0]
jmp 0x1800280a2
mov rbx, qword [rsp + 0xe0]
mov edi, esi
mov qword [rbx], r14
jmp 0x180028504
mov edi, ebx
mov rdx, qword [rsp + 0x78]
mov r15, qword [rsp + 0x88]
mov r14, qword [rsp + 0x90]
mov r13, qword [rsp + 0x98]
mov r12, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xa8]
mov rbp, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x180028575
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180028570
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180028580
call fcn.1800694fc
mov eax, edi
add rsp, 0xc0
pop rdi
ret
call fcn.18006d604
int3