Function at 0x18001836a
Capabilities:
Enumerate threads
Suspend thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x5a8
mov dword [rsp + 0x68], r8d
mov dword [rsp + 0x80], edx
mov rax, qword [0x180044008]
xor rax, rsp
mov qword [rsp + 0x5a0], rax
mov qword [rsp + 0xb0], rcx
mov rax, qword [rsp + 0xb0]
mov qword [rax], 0
lea rax, [rcx + 8]
mov qword [rsp + 0x90], rax
xor eax, eax
mov dword [rcx + 8], eax
mov qword [rsp + 0x98], rcx
add rcx, 0xc
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rsp + 0xc8]
mov dword [rcx], eax
mov ecx, 4
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rsp + 0x50], rax
mov eax, 0x858fbfe
mov esi, 0x9a1a45d9
cmp eax, 0x1490f653
jg 0x18001845d
cmp eax, 0xd859a934
jg 0x1800184ca
cmp eax, 0xc9ea7637
jg 0x18001856d
cmp eax, 0x84cb86ab
je 0x1800186aa
cmp eax, 0x9363d784
je 0x1800186ee
cmp eax, 0x9a1a45d9
jne 0x180018404
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0xa8]
mov eax, 0x1490f654
mov dword [rsp + 0x40], r12d
jmp 0x180018404
cmp eax, 0x3c75d90f
jle 0x180018525
cmp eax, 0x5bca5827
jg 0x1800185d1
cmp eax, 0x3c75d910
je 0x1800186fb
cmp eax, 0x4ede0225
je 0x180018746
cmp eax, 0x5958778c
jne 0x180018404
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1c
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0xd0]
call sub.KERNEL32.dll_Thread32Next
test eax, eax
mov eax, 0x5bca5828
mov ecx, 0xdfb36c6d
cmove eax, ecx
mov ebp, ebx
mov r15d, ebx
jmp 0x180018404
cmp eax, 0x858fbfd
jg 0x180018625
cmp eax, 0xd859a935
je 0x18001876b
cmp eax, 0xdfb36c6d
je 0x1800187b0
cmp eax, 0xf71a7f39
jne 0x180018404
mov r8, qword [rsp + 0x48]
mov rcx, qword [0x180045c70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x38]
mov qword [rax], 0
mov eax, 0x9a1a45d9
mov r12d, dword [rsp + 0x28]
jmp 0x180018404
cmp eax, 0x27f75272
jle 0x180018671
cmp eax, 0x27f75273
je 0x1800187c3
cmp eax, 0x377fd8b6
je 0x1800187f5
cmp eax, 0x391216d4
jne 0x180018404
cmp dword [rsp + 0x44], 0
mov eax, 0xdfb36c6d
mov ecx, 0x6788efb7
cmove eax, ecx
mov ebp, edi
mov r13d, edi
jmp 0x180018404
cmp eax, 0xc9ea7638
je 0x180018809
cmp eax, 0xd4004582
je 0x180018831
cmp eax, 0xd4df61d8
jne 0x180018404
mov rax, qword [rsp + 0x88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
mov ecx, dword [rcx]
mov dword [rsp + 0x84], ecx
cmp eax, dword [rsp + 0x84]
mov eax, 0x3c75d910
mov ecx, 0x6788efb7
cmovb eax, ecx
mov r13d, dword [rsp + 0x24]
jmp 0x180018404
cmp eax, 0x5bca5828
je 0x180018852
cmp eax, 0x5d96065e
je 0x180018875
cmp eax, 0x6788efb7
jne 0x180018404
mov rax, qword [rsp + 0x70]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx]
mov rsi, qword [rsp + 0x88]
mov edx, dword [rsi]
lea ebx, [rdx + 1]
mov dword [rsi], ebx
mov esi, 0x9a1a45d9
mov dword [rcx + rdx*4], eax
mov eax, 0x5958778c
mov ebx, r13d
jmp 0x180018404
cmp eax, 0x858fbfe
je 0x180018895
cmp eax, 0x85ad1d7
je 0x1800188b8
cmp eax, 0xf1d7aa1
jne 0x180018404
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov ebx, dword [rax]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
mov eax, 0xc9ea7638
mov ecx, 0x5958778c
jmp 0x18001875f
cmp eax, 0x1bcfa45a
je 0x1800188c8
cmp eax, 0x249381fc
jne 0x1800188d4
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
mov qword [rax], rcx
mov eax, 0x391216d4
mov dword [rsp + 0x44], 0
mov edi, dword [rsp + 0x24]
jmp 0x180018404
lea rdx, [rsp + 0xd0]
mov qword [rsp + 0xa8], rdx
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x58], rdx
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1c
mov rcx, qword [rsp + 0x50]
call sub.KERNEL32.dll_Thread32First
test eax, eax
mov eax, 0x85ad1d7
cmove eax, esi
xor r12d, r12d
jmp 0x180018404
mov eax, 0xd4004582
xor r14d, r14d
jmp 0x180018404
mov r9d, dword [rsp + 0x84]
add r9d, r9d
mov rax, qword [rsp + 0x60]
mov dword [rax], r9d
shl r9, 2
mov rax, qword [rsp + 0x30]
mov r8, qword [rax]
mov rcx, qword [0x180045c70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
mov eax, 0x249381fc
mov ecx, 0x377fd8b6
cmove eax, ecx
jmp 0x180018404
mov ebx, dword [rsp + 0xdc]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp ebx, eax
mov eax, 0x5958778c
mov ecx, 0xf1d7aa1
cmove eax, ecx
mov ebx, dword [rsp + 0x24]
jmp 0x180018404
mov rax, qword [rsp + 0x90]
mov dword [rax], 0x80
mov rcx, qword [0x180045c70]
mov r8d, 0x200
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, qword [rsp + 0x30]
mov qword [rcx], rax
test rax, rax
mov eax, 0x6788efb7
mov ecx, 0x1bcfa45a
cmove eax, ecx
mov r13d, dword [rsp + 0x24]
jmp 0x180018404
mov dword [rsp + 0x2c], ebp
cmp dword [rsp + 0x2c], 0
mov eax, 0x5d96065e
jmp 0x180018883
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
mov eax, 0xf71a7f39
cmove eax, esi
mov r12d, dword [rsp + 0x28]
jmp 0x180018404
mov eax, 0x391216d4
xor edi, edi
mov dword [rsp + 0x44], 2
jmp 0x180018404
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp qword [rax], 0
mov eax, 0xd4df61d8
mov ecx, 0xd859a935
cmove eax, ecx
jmp 0x180018404
mov dword [rsp + 0x28], r14d
cmp dword [rsp + 0x28], 0
mov eax, 0x9a1a45d9
mov ecx, 0x27f75273
cmove eax, ecx
mov r12d, dword [rsp + 0x28]
jmp 0x180018404
mov dword [rsp + 0x24], r15d
mov rax, qword [rsp + 0x58]
cmp dword [rax], 0xf
mov eax, 0x5958778c
mov ecx, 0x4ede0225
cmova eax, ecx
mov ebx, dword [rsp + 0x24]
jmp 0x180018404
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
mov eax, 0x9363d784
mov ecx, 0xd4004582
cmove eax, ecx
mov r14d, dword [rsp + 0x2c]
jmp 0x180018404
mov rax, qword [rsp + 0x50]
cmp rax, 0xffffffffffffffff
mov eax, 0x84cb86ab
mov ecx, 0x1490f654
cmove eax, ecx
mov dword [rsp + 0x40], 0
jmp 0x180018404
mov eax, 0x5bca5828
mov r15d, 1
jmp 0x180018404
mov eax, 0xdfb36c6d
xor ebp, ebp
jmp 0x180018404
cmp eax, 0x1490f654
jne 0x180018404
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0xc4], eax
mov edx, dword [rsp + 0x68]
cmp edx, 1
mov ecx, 0xc5de1540
mov eax, 0x27d0dc07
cmovne ecx, eax
mov dword [rsp + 0x88], ecx
test edx, edx
mov ecx, 0x29b8e939
cmovne ecx, eax
mov dword [rsp + 0x44], ecx
mov eax, 0x10a520f6
mov ecx, 0xcd59d7
cmovle ecx, eax
mov dword [rsp + 0x40], ecx
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x68], eax
mov eax, 0xbfa4314c
mov ecx, 0xd09746ec
cmove ecx, eax
mov dword [rsp + 0x98], ecx
mov eax, 0xfd6980cf
cmp eax, 0x119b27e4
jg 0x180018982
cmp eax, 0xdc55d0ef
jle 0x1800189e6
cmp eax, 0xdc55d0f0
je 0x180018a3e
cmp eax, 0xfd6980cf
je 0x180018a4d
cmp eax, 0xa07e3c9
jne 0x18001894a
mov eax, 0x119b27e5
xor esi, esi
jmp 0x18001894a
cmp eax, 0x6c4bb89c
jg 0x180018a20
cmp eax, 0x20145cac
je 0x180018a67
cmp eax, 0x21878801
jne 0x18001912e
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov ecx, dword [rsp + 0x6c]
mov r8d, dword [rax + rcx*4]
mov ecx, 0x5a
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa0], 0
mov eax, 0x6c4bb89d
mov ecx, 0xaf79ba3d
cmove eax, ecx
jmp 0x18001894a
cmp eax, 0xaf79ba3d
je 0x180018a87
cmp eax, 0xc17f51dc
jne 0x18001894a
mov dword [rsp + 0x6c], edi
mov rax, qword [rsp + 0xc8]
mov ecx, dword [rsp + 0x6c]
cmp ecx, dword [rax]
mov eax, 0xa07e3c9
mov ecx, 0x21878801
cmovb eax, ecx
jmp 0x18001894a
cmp eax, 0x6c4bb89d
je 0x180018a97
cmp eax, 0x6e020afe
jne 0x18001894a
mov eax, 0xc17f51dc
xor edi, edi
jmp 0x18001894a
mov eax, 0x119b27e5
mov esi, 9
jmp 0x18001894a
cmp dword [rsp + 0xc4], 0
mov eax, 0x20145cac
mov ecx, 0xdc55d0f0
cmove eax, ecx
jmp 0x18001894a
mov rax, qword [rsp + 0xb0]
cmp qword [rax], 0
mov eax, 0x6e020afe
mov ecx, 0x119b27e5
cmove eax, ecx
xor esi, esi
jmp 0x18001894a
mov edi, dword [rsp + 0x6c]
inc edi
mov eax, 0xc17f51dc
jmp 0x18001894a
mov dword [rsp + 0xbc], edi
mov dword [rsp + 0xc0], esi
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov rcx, qword [rsp + 0xa0]
lea rdx, [rsp + 0xd0]
mov qword [rsp + 0x70], rdx
mov rax, qword [rsp + 0x70]
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x100], 0x100001
mov qword [rsp + 0x90], rcx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [rsp + 0x24], eax
mov eax, 0x9c0f2fe5
mov ecx, eax
cmp eax, 0x27d0dc06
jle 0x180018b45
cmp ecx, 0x3c639286
jle 0x180018b96
cmp ecx, 0x4cb6addf
jle 0x180018c24
cmp ecx, 0x6a57cbed
jg 0x180018ec4
cmp ecx, 0x4cb6ade0
je 0x180018f32
mov eax, ecx
cmp ecx, 0x4dfcc404
je 0x180018efb
jmp 0x180018afc
cmp ecx, 0xde3b2044
jg 0x180018be6
cmp ecx, 0xc5de153f
jg 0x180018e28
cmp ecx, 0xbf933e0e
jle 0x180018f0f
cmp ecx, 0xbf933e0f
je 0x180019000
mov eax, ecx
cmp ecx, 0xbfa4314c
jne 0x180018afc
mov eax, 0x3815c98a
xor r12d, r12d
mov esi, dword [0x180045c84]
jmp 0x180018afc
cmp ecx, 0x3203673f
jg 0x180018e53
cmp ecx, 0x27d0dc07
je 0x18001902a
cmp ecx, 0x29b8e939
je 0x180019034
mov eax, ecx
cmp ecx, 0x314bd92a
jne 0x180018afc
mov eax, dword [rsp + 0x28]
imul rax, rax, 0x38
add rax, qword [0x180045c78]
mov qword [rsp + 0x60], rax
mov eax, 0x26a0f63b
jmp 0x180018afc
cmp ecx, 0xe1bcde
jg 0x180018e91
cmp ecx, 0xde3b2045
je 0x180019041
cmp ecx, 0xf2e33ffd
je 0x18001905c
mov eax, ecx
cmp ecx, 0xcd59d7
jne 0x180018afc
mov eax, dword [rsp + 0x88]
jmp 0x180018afc
cmp ecx, 0x3c639287
je 0x180019089
cmp ecx, 0x3cd9cb5c
je 0x180018efb
mov eax, ecx
cmp ecx, 0x3f81d500
jne 0x180018afc
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x60]
movzx edx, byte [rcx + 0x20]
and edx, 1
mov dword [rsp + 0xa8], edx
mov ebx, 0x7face5a5
cmp ebx, 0xe52e9769
jg 0x180018cc9
cmp ebx, 0xa5e6f1a2
jg 0x180018d02
cmp ebx, 0x827a5028
je 0x180018d68
cmp ebx, 0x83c486ae
je 0x180018d81
cmp ebx, 0xa070e75d
jne 0x180018c6a
mov rbp, qword [rcx + 0x10]
mov ebx, dword [rsp + 0x58]
mov qword [rsp + 0x48], rbx
mov rbx, qword [rsp + 0x48]
movzx edi, byte [rcx + rbx + 0x30]
add rdi, rbp
mov ebx, 0x83c486ae
cmp rdi, rax
je 0x180018c6a
mov ebx, 0xe52e976a
jmp 0x180018c6a
cmp ebx, 0x3b54bee2
jg 0x180018d33
cmp ebx, 0xe52e976a
je 0x180018d99
cmp ebx, 0x785b92
je 0x180018da9
cmp ebx, 0x1a8d3619
jne 0x180018c6a
mov ebx, 0x6fbf4f47
xor r15d, r15d
jmp 0x180018c6a
cmp ebx, 0xa5e6f1a3
je 0x180018db8
cmp ebx, 0xa73b453d
je 0x180018ddd
cmp ebx, 0xae6fa583
jne 0x180018c6a
mov r15, qword [rcx]
mov ebx, 0x6fbf4f47
jmp 0x180018c6a
cmp ebx, 0x3b54bee3
je 0x180018de9
cmp ebx, 0x7face5a5
jne 0x180018e12
cmp dword [rsp + 0xa8], 0
mov ebx, 0xa73b453d
je 0x180018c6a
mov ebx, 0x3b54bee3
jmp 0x180018c6a
mov ebx, 0xae6fa583
cmp rax, qword [rcx + 8]
je 0x180018c6a
mov ebx, 0x1a8d3619
jmp 0x180018c6a
mov rbp, qword [rsp + 0x48]
movzx r15d, byte [rcx + rbp + 0x28]
add r15, qword [rcx]
mov ebx, 0x6fbf4f47
jmp 0x180018c6a
mov edx, dword [rsp + 0x58]
inc edx
mov ebx, 0xa5e6f1a3
jmp 0x180018c6a
mov ebx, 0x6fbf4f47
mov r15, qword [rsp + 0x38]
jmp 0x180018c6a
mov dword [rsp + 0x58], edx
mov edi, dword [rcx + 0x24]
and edi, 0xf
mov ebp, dword [rsp + 0x58]
mov ebx, 0xa070e75d
cmp ebp, edi
jb 0x180018c6a
mov ebx, 0x827a5028
jmp 0x180018c6a
mov ebx, 0xa5e6f1a3
xor edx, edx
jmp 0x180018c6a
mov rbx, qword [rcx]
mov qword [rsp + 0x38], rbx
mov rdi, qword [rsp + 0x38]
add rdi, 0xfffffffffffffffb
mov ebx, 0x785b92
cmp rdi, rax
je 0x180018c6a
mov ebx, 0xa73b453d
jmp 0x180018c6a
cmp ebx, 0x6fbf4f47
jne 0x180018c6a
mov eax, 0xe1bcdf
jmp 0x180018afc
cmp ecx, 0xc5de1540
je 0x1800190a0
cmp ecx, 0xd09746ec
je 0x1800190b0
mov eax, ecx
cmp ecx, 0xdbebdb01
je 0x180018f05
jmp 0x180018afc
cmp ecx, 0x32036740
je 0x1800190c6
mov eax, dword [rsp + 0x98]
cmp ecx, 0x32e68e95
je 0x180018afc
mov eax, ecx
cmp ecx, 0x3815c98a
jne 0x180018afc
mov dword [rsp + 0x2c], esi
mov eax, 0x6f5b0762
mov r14d, r12d
jmp 0x180018afc
cmp ecx, 0xe1bcdf
je 0x1800190d8
mov eax, dword [rsp + 0x44]
cmp ecx, 0x10a520f6
je 0x180018afc
mov eax, ecx
cmp ecx, 0x26a0f63b
jne 0x180018afc
mov eax, dword [rsp + 0x40]
jmp 0x180018afc
cmp ecx, 0x6a57cbee
je 0x180018f05
mov eax, ecx
cmp ecx, 0x6f5b0762
jne 0x180018afc
mov dword [rsp + 0x28], r14d
mov eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x28]
cmp ecx, eax
mov eax, 0x6a57cbee
mov ecx, 0x314bd92a
cmovb eax, ecx
jmp 0x180018afc
mov eax, 0x32036740
jmp 0x180018afc
mov eax, 0xab46b591
jmp 0x180018afc
cmp ecx, 0x9c0f2fe5
jne 0x1800190f5
cmp dword [rsp + 0x24], 0
mov eax, 0x32e68e95
mov ecx, 0xdbebdb01
cmove eax, ecx
jmp 0x180018afc
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x60]
mov ebx, 0xaba0e6f9
xor edx, edx
cmp ebx, 0x19d5666e
jg 0x180018f73
cmp ebx, 0xaba0e6f9
je 0x180018f90
cmp ebx, 0xe2a5ae27
je 0x180018faf
cmp ebx, 0xe8f4ca45
jne 0x180018f46
mov edx, dword [rsp + 0x38]
inc edx
mov ebx, 0xaba0e6f9
jmp 0x180018f46
cmp ebx, 0x19d5666f
je 0x180018fc5
cmp ebx, 0x3c4def91
je 0x180018ff3
cmp ebx, 0x4a6fc07f
jne 0x180018f46
jmp 0x180018e1e
mov dword [rsp + 0x38], edx
mov ebx, dword [rcx + 0x24]
and ebx, 0xf
mov edi, dword [rsp + 0x38]
cmp edi, ebx
mov ebx, 0x3c4def91
mov ebp, 0x19d5666f
cmovb ebx, ebp
jmp 0x180018f46
mov rbx, qword [rsp + 0x48]
movzx r15d, byte [rcx + rbx + 0x30]
add r15, qword [rcx + 0x10]
mov ebx, 0x4a6fc07f
jmp 0x180018f46
mov rbx, qword [rcx]
mov edi, dword [rsp + 0x38]
mov qword [rsp + 0x48], rdi
mov rdi, qword [rsp + 0x48]
movzx edi, byte [rcx + rdi + 0x28]
add rdi, rbx
cmp rdi, rax
mov ebx, 0xe8f4ca45
mov ebp, 0xe2a5ae27
cmove ebx, ebp
jmp 0x180018f46
mov ebx, 0x4a6fc07f
xor r15d, r15d
jmp 0x180018f46
mov dword [rsp + 0x50], r13d
mov rax, qword [rsp + 0x60]
mov eax, dword [rax + 0x20]
shr eax, 1
and eax, 1
mov ecx, dword [rsp + 0x50]
cmp ecx, eax
mov eax, 0x3c639287
mov ecx, 0x4dfcc404
cmove eax, ecx
jmp 0x180018afc
mov eax, 0xde3b2045
jmp 0x180018afc
mov eax, 0xbf933e0f
xor r13d, r13d
jmp 0x180018afc
mov rax, qword [rsp + 0x60]
mov r13d, dword [rax + 0x20]
shr r13d, 2
and r13d, 1
mov eax, 0xbf933e0f
jmp 0x180018afc
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x90]
lea rdx, [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, 0x3cd9cb5c
jmp 0x180018afc
cmp dword [rsp + 0x50], 0
mov eax, 0x4cb6ade0
mov ecx, 0x3f81d500
cmove eax, ecx
jmp 0x180018afc
mov eax, 0xbf933e0f
mov r13d, 1
jmp 0x180018afc
mov eax, 0x3815c98a
mov r12d, dword [rsp + 0x80]
mov esi, dword [rsp + 0x68]
jmp 0x180018afc
mov r14d, dword [rsp + 0x28]
inc r14d
mov eax, 0x6f5b0762
jmp 0x180018afc
mov qword [rsp + 0x78], r15
cmp qword [rsp + 0x78], 0
mov eax, 0xf2e33ffd
mov ecx, 0x3cd9cb5c
cmove eax, ecx
jmp 0x180018afc
mov eax, ecx
cmp ecx, 0xab46b591
jne 0x180018afc
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xaf79ba3d
mov esi, dword [rsp + 0xc0]
mov edi, dword [rsp + 0xbc]
jmp 0x18001894a
cmp eax, 0x119b27e5
jne 0x18001894a
mov rcx, qword [rsp + 0x5a0]
xor rcx, rsp
call fcn.18001e300
mov eax, esi
add rsp, 0x5a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret