Function at 0x18000d720
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov esi, r9d
mov r14, r8
mov r15, rdx
mov qword [rbp + 0xf], 0
mov eax, 0xf
mov qword [rbp + 0x17], rax
mov byte [rbp - 1], 0
lea r12d, [r9 + 0x60b]
movzx ebx, byte [rbp + 0x7f]
cmp r9d, r12d
jae 0x18000d98c
mov edx, 0x614d
mov r8d, 0x6c69
movzx r13d, byte [rbp + 0x7f]
movzx edi, byte [rbp + 0x7f]
nop word [rax + rax]
cmp esi, 0x1bc
ja 0x18000d89e
je 0x18000d86a
cmp esi, 0x11d
ja 0x18000d83f
je 0x18000d838
mov eax, esi
sub eax, 0x57
je 0x18000d82c
sub eax, 0x4f
je 0x18000d7d2
cmp eax, 0x28
jne 0x18000da2f
mov byte [rbp - 0x1d], 0
jmp 0x18000da2f
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, r14
lea r8, [0x1800108a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
test rax, rax
je 0x18000d928
mov dword [rbp + 0x7f], 1
mov qword [rsp + 0x20], 0
mov r9d, 0xee
lea r8, [rbp + 0x7f]
xor edx, edx
mov rcx, r14
call fcn.180005f10
jmp 0x18000da20
mov dword [rbp - 0x21], 0x6c69614d
jmp 0x18000da2f
mov bl, 1
jmp 0x18000da2f
mov eax, esi
sub eax, 0x145
je 0x18000d856
cmp eax, 0x4f
je 0x18000d988
jmp 0x18000da2f
mov byte [rbp - 0x1d], 0x4d
mov dword [rbp - 0x1c], 0x65677265
mov byte [rbp - 0x18], 0
jmp 0x18000da2f
mov word [rbp - 0x18], 0x47
mov r8d, 4
lea rdx, [0x180097f8c]
lea rcx, [rbp - 0x21]
call fcn.18006f3a0
mov eax, dword [0x180097fa1]
mov dword [rbp - 0x13], eax
movzx eax, byte [0x180097fa5]
mov byte [rbp - 0xf], al
jmp 0x18000da20
cmp esi, 0x398
ja 0x18000d962
je 0x18000d939
mov eax, esi
sub eax, 0x233
je 0x18000d92d
sub eax, 0x77
je 0x18000d8de
cmp eax, 0x77
jne 0x18000da2f
xor r9d, r9d
lea r8, [rbp - 1]
mov rdx, r14
lea ecx, [rax + 0x2d]
call fcn.18000beb0
jmp 0x18000da20
mov byte [rbp - 0xa], 0
mov r8d, 1
lea rdx, [0x180097f5b]
lea rcx, [rbp - 0x21]
call fcn.18006f3a0
mov rcx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x18000d905
mov rcx, qword [r14]
movzx eax, word [r14 + 0x60]
mov word [rbp + 0x7f], ax
mov r9d, 0xb6
mov r8, r15
lea rdx, [rbp + 0x7f]
call fcn.18000a570
test al, al
jne 0x18000da20
xor dil, dil
jmp 0x18000d984
mov dword [rbp - 0xe], 0x726f6365
jmp 0x18000da2f
mov rax, qword [r15]
mov qword [rbp - 0x31], rax
lea r9, [rbp - 0x29]
lea r8, [rbp - 0x31]
mov edx, 0x32
lea rcx, [rbp - 0x39]
call fcn.180051f10
test al, al
jne 0x18000da20
xor bl, bl
jmp 0x18000d988
mov eax, esi
sub eax, 0x40f
je 0x18000d9e2
cmp eax, 0x77
jne 0x18000da2f
movsx r8d, r13b
xor edx, edx
lea rcx, [rbp - 0x21]
call qword [sym.imp.SHLWAPI.dll_StrRChrA]
movzx ebx, dil
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x18000d9c4
lea rdx, [rax + 1]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d9bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000da40
call fcn.180069fec
movzx eax, bl
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r13b, 0x67
mov rax, qword [r15]
mov qword [rbp - 0x31], rax
mov rax, qword [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9, rcx
lea r8, [rbp - 0x31]
mov edx, 0xfd
lea rcx, [rbp - 1]
call fcn.18001d3e0
movzx edi, al
mov r8d, 0xbd
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x29]
call fcn.18001a4f0
mov r8d, 0x6c69
mov edx, 0x614d
mov rcx, qword [rbp + 0x67]
add esi, 0x77
cmp esi, r12d
jae 0x18000d988
jmp 0x18000d790
call fcn.18006eba4
int3