Function at 0x180059380
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rax, qword [0x180071748]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov r14, r8
mov qword [rsp + 0x58], rdx
mov r8, qword [rsp + 0xf0]
lea r15d, [rcx + 0xe]
mov qword [rsp + 0x40], r8
mov rdi, r9
mov rbx, rdx
mov esi, ecx
cmp ecx, r15d
jae case.0x18005940f.193
mov rax, qword [rsp + 0x50]
lea r9, [0x180000000]
mov r12, qword [rsp + 0x50]
xor r10d, r10d
mov ebp, dword [rsp + 0x38]
mov qword [rsp + 0x48], rax
lea eax, [rsi - 0xc0]
cmp eax, 0x3a
ja case.0x18005940f.204
movzx eax, byte [r9 + rax + 0x59b9c]
mov ecx, dword [r9 + rax*4 + 0x59b68]
add rcx, r9
jmp rcx
mov qword [rsp + 0x28], r10
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0x67
xor edx, edx
xor ecx, ecx
call fcn.180033660
mov qword [rsp + 0x48], rax
xor r10d, r10d
mov r8, qword [rsp + 0x40]
lea r9, [0x180000000]
inc esi
cmp esi, r15d
jb 0x1800593f0
jmp case.0x18005940f.193
cmp r8, r14
je 0x1800595a7
mov edx, 0xde
nop dword [rax + rax]
mov eax, edx
sub eax, 0xde
je 0x18005958e
sub eax, 0x76
je 0x180059575
sub eax, 0x76
je 0x180059587
sub eax, 0x76
je 0x18005956e
cmp eax, 0x76
jne 0x180059598
inc r8
mov qword [rsp + 0x40], r8
cmp r8, r14
je 0x180059598
mov eax, 0x4a
cmp eax, 0x4a
je 0x1800594bf
cmp eax, 0x104
jne 0x18005954b
lea esi, [rax - 0x44]
jmp 0x18005954b
movzx eax, byte [r8]
movzx ecx, byte [rax + rbx + 0x90]
cmp cl, 0x12
je 0x1800594d7
cmp cl, 0x19
jne 0x180059514
jmp 0x180059546
mov ecx, 0xab
nop dword [rax]
mov eax, ecx
sub eax, 0xab
je 0x180059503
sub eax, 1
je 0x1800594f9
cmp eax, 1
je case.0x18005940f.193
jmp 0x18005950a
mov dword [rsp + 0x30], 0xa
jmp 0x18005950a
lea rax, [r8 + 1]
mov qword [rdi], rax
inc ecx
cmp ecx, 0xae
jb 0x1800594e0
mov ecx, 0x2b
nop dword [rax]
mov eax, ecx
sub eax, 0x29
je case.0x18005940f.193
sub eax, 1
je 0x18005953a
cmp eax, 1
jne 0x18005953f
mov qword [rdi], r8
jmp 0x18005953f
mov dword [rsp + 0x30], r10d
dec ecx
cmp ecx, 0x28
ja 0x180059520
mov eax, 0x4a
add eax, 0xba
cmp eax, 0x1be
jb 0x1800594a7
inc r8
mov qword [rsp + 0x40], r8
cmp r8, r14
jne 0x1800594a2
jmp 0x180059598
mov esi, 0xc0
jmp 0x180059598
movzx eax, byte [r8]
cmp byte [rax + rbx + 0x90], 0x19
jne 0x180059730
mov edx, 0x1ca
jmp 0x180059598
cmp byte [r8], 0x78
je 0x18005973d
add edx, 0x76
cmp edx, 0x32c
jb 0x180059460
mov dword [rsp + 0x30], 0xffffffff
jmp case.0x18005940f.204
xor edx, edx
mov qword [rsp + 0x50], reloc.SHELL32.dll_ILFindLastID
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], r10
xor ecx, ecx
lea r8d, [rdx + 0x60]
call fcn.18002cc40
mov r12, rax
test rax, rax
jne 0x180059432
mov ebx, 0x106
xor r13d, r13d
cmp ebx, 0x106
je 0x1800595fe
cmp ebx, 0x51e0
je case.0x18005940f.193
jmp 0x180059627
xor edx, edx
mov qword [rsp + 0x28], r13
xor r9d, r9d
mov dword [rsp + 0x38], r13d
lea r8, [rsp + 0x38]
mov qword [rsp + 0x20], r13
lea ecx, [rdx + 0x6b]
call fcn.180032e50
mov dword [rsp + 0x30], 0xffffffff
add ebx, 0x50da
cmp ebx, 0xa1b4
jbe 0x1800595e8
mov rbx, qword [rsp + 0x58]
jmp 0x180059432
test ebp, 0xffff0000
jne 0x180059733
jmp case.0x18005940f.204
mov eax, SHSetFolderPathW
cmp eax, 0xe6
je 0x18005975f
add eax, 0xae
cmp eax, 0x194
jb 0x180059655
mov rax, qword [r14]
mov r9, r12
mov dword [rsp + 0x38], r10d
test rax, rax
je 0x18005969c
lea rcx, [rsp + 0x38]
xor edx, edx
mov qword [rsp + 0x28], rcx
lea r8, [0x180016e30]
xor ecx, ecx
mov dword [rsp + 0x20], r10d
call rax
mov eax, eax
jmp 0x1800596bc
lea rax, [rsp + 0x38]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r8, [0x180016e60]
xor ecx, ecx
mov dword [rsp + 0x20], r10d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbx + 8], rax
test rax, rax
je 0x180059ae1
xor r10d, r10d
mov dword [rsp + 0x30], r10d
jmp 0x180059435
mov byte [rbx], 0
dec dword [r8]
jmp case.0x18005940f.204
mov rax, qword [rdi]
mov qword [r12 + 8], rax
mov qword [r12], r8
jmp case.0x18005940f.204
mov rcx, qword [rbx + 0x1e0]
mov rdx, r8
call qword [rbx + 0x1d8]
mov ebp, eax
jmp 0x180059432
movzx ecx, byte [r8]
mov rax, qword [rbx]
cmp rcx, rax
ja 0x180059af7
sub rax, rcx
mov qword [rsp + 0x30], rax
jmp case.0x18005940f.204
mov qword [rdi], r8
mov dword [rsp + 0x30], r10d
jmp case.0x18005940f.193
lea rax, [r8 + 1]
mov r9, rdi
mov r8d, 2
mov qword [rsp + 0x20], rax
mov rdx, r14
mov rcx, rbx
call fcn.1800618b0
jmp 0x180059b33
mov rdi, qword [rsp + 0x48]
cmp dword [rdi], 0
je 0x180059ad7
mov r14, qword [rsp + 0x50]
mov r13d, 0x8c
mov rsi, qword [rsp + 0x50]
mov ebp, dword [rsp + 0x38]
mov eax, r13d
sub eax, 0x8c
je 0x180059ac7
sub eax, 1
je 0x180059adc
sub eax, 1
je 0x1800597ae
cmp eax, 1
jne 0x180059ac7
mov byte [rsi], 0
jmp 0x180059ac7
mov qword [rsp + 0x28], r10
lea r9, [rdi + 4]
xor r8d, r8d
mov qword [rsp + 0x20], r10
xor edx, edx
mov ecx, 0xe9
call fcn.18005b3f0
xor r10d, r10d
mov r12, rax
mov r15d, r10d
movzx ecx, byte [rax]
test cl, cl
je 0x180059ac7
mov r8, qword [rsp + 0x40]
cmp dword [r8], 0
jbe 0x180059ac2
cmp cl, 0x25
jne 0x180059aaa
mov edx, 0xfc
nop dword [rax]
cmp edx, 0xfc
je 0x180059a75
cmp edx, 0x4fbc
je 0x180059a5f
cmp edx, 0x9e7c
jne 0x180059a4b
movsx eax, byte [r14 - 2]
add eax, 0xffffffdb
cmp eax, 0x53
ja case.0x180059850.38
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x59bf0]
mov ecx, dword [rdx + rax*4 + 0x59bd8]
add rcx, rdx
jmp rcx
mov eax, 0x3a
cmp eax, 0x3a
je 0x18005986b
cmp eax, 0x5e4
jne 0x180059871
dec dword [r8]
jmp case.0x180059850.38
mov byte [rsi], 0x25
inc rsi
add eax, 0x5aa
cmp eax, 0xb54
jbe 0x180059857
movsxd rax, r15d
add rdi, 0x88
shl rax, 7
mov ebx, 0x36
add rdi, rax
mov eax, ebx
sub eax, 0x35
je 0x1800598fd
cmp eax, 1
jne 0x1800598c4
mov edx, dword [r8]
mov rcx, rsi
mov r9d, dword [rdi]
lea r8, [rsp + 0x60]
call fcn.1800212f0
mov r8, qword [rsp + 0x40]
inc r15d
movsxd rbp, eax
sub rdi, 0xffffffffffffff80
add rsi, rbp
dec ebx
cmp ebx, 0x34
ja 0x180059893
mov rdi, qword [rsp + 0x48]
movsxd rax, r15d
add rdi, 0x88
shl rax, 7
mov ebx, 0x2e
add rdi, rax
mov eax, ebx
sub eax, 0x2e
je 0x18005990a
sub eax, 1
je 0x180059905
cmp eax, 1
je case.0x180059850.38
jmp 0x180059930
sub dword [r8], ebp
jmp case.0x180059850.38
sub dword [r8], ebp
jmp 0x180059930
movsd xmm3, qword [rdi]
mov rcx, rsi
mov edx, dword [r8]
movq r9, xmm3
lea r8, [rsp + 0x60]
call fcn.1800212f0
movsxd rbp, eax
inc r15d
sub rdi, 0xffffffffffffff80
add rsi, rbp
mov r8, qword [rsp + 0x40]
inc ebx
cmp ebx, 0x31
jb 0x1800598e6
mov rdi, qword [rsp + 0x48]
movsxd rax, r15d
add rdi, 0x88
shl rax, 7
mov ebx, 0x5e
add rdi, rax
nop word [rax + rax]
mov eax, ebx
sub eax, 0x5c
je case.0x180059850.38
sub eax, 1
je 0x180059997
cmp eax, 1
jne 0x18005999a
mov edx, dword [r8]
mov rcx, rsi
mov r9, qword [rdi]
lea r8, [rsp + 0x60]
call fcn.1800212f0
movsxd rbp, eax
inc r15d
sub rdi, 0xffffffffffffff80
add rsi, rbp
jmp 0x18005999a
sub dword [r8], ebp
mov r8, qword [rsp + 0x40]
dec ebx
cmp ebx, 0x5b
ja 0x180059960
mov rdi, qword [rsp + 0x48]
xor r10d, r10d
mov ebx, 0xdd
cmp ebx, 0xdd
je 0x1800599d2
cmp ebx, 0x8d94
je 0x1800599cd
cmp ebx, 0x11a4b
je case.0x180059850.38
jmp 0x180059a1c
sub dword [r8], ebp
jmp 0x180059a1c
mov qword [rsp + 0x28], r10
xor r8d, r8d
movsxd r9, r15d
xor edx, edx
shl r9, 7
mov ecx, 0xe9
add r9, 0x88
mov qword [rsp + 0x20], r10
add r9, rdi
call fcn.18005b3f0
mov r9, rax
lea r8, [rsp + 0x60]
mov rax, qword [rsp + 0x40]
mov rcx, rsi
mov edx, dword [rax]
call fcn.1800212f0
movsxd rbp, eax
inc r15d
add rsi, rbp
mov r8, qword [rsp + 0x40]
add ebx, 0x8cb7
mov r10d, 0
cmp ebx, 0x1a625
jbe 0x1800599b3
mov r8, qword [rsp + 0x40]
mov edx, 0x9e7c
mov rdi, qword [rsp + 0x48]
xor r10d, r10d
add edx, 0x4ec0
cmp edx, 0x13b00
jbe 0x180059800
jmp 0x180059ab5
movzx eax, byte [r12]
inc r12
mov byte [r14], al
mov byte [r14 + 1], 0
add r14, 2
jmp 0x180059a4b
movzx eax, byte [r12]
lea r14, [rsp + 0x61]
mov byte [rsp + 0x60], al
movzx ecx, byte [r12 + 1]
inc r12
cmp cl, 0x2e
je 0x180059a98
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x180059a4b
lea rax, [rsp + 0x7e]
cmp r14, rax
jae 0x180059a4b
mov byte [r14], cl
inc r14
jmp 0x180059a83
mov byte [rsi], cl
inc r12
inc rsi
dec dword [r8]
movzx ecx, byte [r12]
test cl, cl
jne 0x1800597e4
mov rbx, qword [rsp + 0x58]
inc r13d
cmp r13d, 0x90
jb 0x180059781
mov rax, rbx
jmp 0x180059b3c
mov rsi, rbx
jmp 0x180059ac7
lea rcx, str.Direktori_root_imej_disk_sudah_penuh_
call fcn.18001bf30
mov dword [rsp + 0x30], 0xffffffff
jmp case.0x18005940f.193
sub rax, rcx
add rax, 0x40
jmp 0x180059b3c
movsxd rax, ebp
mov edx, 1
sar rax, 8
movzx ecx, byte [rax + r9 + 0x67330]
mov eax, ebp
sar eax, 5
and ebp, 0x1f
and eax, 7
lea eax, [rax + rcx*8]
movzx ecx, bpl
mov eax, dword [r9 + rax*4 + 0x66e30]
shl edx, cl
and eax, edx
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.180064e10
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret