Function at 0x18002e760
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
xor r13d, r13d
mov qword [rbp - 0x60], 7
mov r14, r8
mov word [rbp - 0x30], r13w
lea r8d, [rcx + 0xf]
mov qword [rbp - 0x68], r13
mov r9d, 7
mov dword [rbp + 0x238], r8d
cmp ecx, r8d
mov word [rbp - 0x78], r13w
mov r8, qword [rbp - 0x30]
mov eax, ecx
mov esi, r13d
mov qword [rbp - 0x20], r13
mov qword [rsp + 0x78], r9
mov qword [rbp - 0x18], r9
jae case.0x18002e81c.245
mov rdi, qword [rbp + 0x238]
lea rdx, [0x180000000]
mov ecx, dword [rbp + 0x238]
lea r15d, [r13 + 1]
mov r12d, 0x100
mov qword [rsp + 0x70], r8
nop dword [rax + rax]
add eax, 0xffffff14
cmp eax, 0x3c
ja case.default.0x18002e81c
movzx eax, byte [rdx + rax + 0x2f028]
mov ecx, dword [rdx + rax*4 + 0x2efe8]
add rcx, rdx
jmp rcx
movsxd rax, dword [r14 + 0x49858]
mov rcx, qword [r14 + 0x49830]
imul r8, rax, 0x16
xor edx, edx
call fcn.180048990
mov rsi, qword [rbp - 0x68]
mov r9, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
lea rdx, [0x180000000]
mov ecx, dword [rbp + 0x238]
mov eax, dword [rbp + 0x220]
inc eax
mov dword [rbp + 0x220], eax
cmp eax, ecx
jb 0x18002e800
mov r13d, dword [rbp - 0x80]
cmp r9, 8
jb 0x18002e8a3
lea rdx, [r9*2 + 2]
mov rax, r8
cmp rdx, 0x1000
jb 0x18002e89b
mov r8, qword [r8 - 8]
add rdx, 0x27
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002efe1
mov rcx, r8
call fcn.1800473c8
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x18002e8e3
mov rcx, qword [rbp - 0x78]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002e8de
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002efe1
call fcn.1800473c8
mov eax, r13d
add rsp, 0x2d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r9d, 0x8c
mov dword [rbp - 0x58], r15d
xor r8d, r8d
mov qword [rsp + 0x20], r13
lea rdx, [rbp - 0x58]
mov rcx, r14
call fcn.180015470
test eax, eax
jne 0x18002e837
mov ebx, dword [rbp - 0x50]
mov r9d, 0x8c
mov dword [rbp - 0x58], r15d
xor r8d, r8d
mov qword [rsp + 0x20], r13
lea rdx, [rbp - 0x58]
mov rcx, r14
inc ebx
call fcn.180015470
test eax, eax
je 0x18002e923
mov dword [rbp - 0x50], ebx
jmp 0x18002e837
mov qword [rsp + 0x28], r13
lea r8, [0x18000cda0]
mov r9, r14
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
test rax, rax
je 0x18002eefc
mov byte [r14 + 0xc], 1
jmp 0x18002e837
cmp rdi, 0xffffffffffffffff
je 0x18002ef00
cmp qword [rbp - 0x60], 8
lea rdx, [rbp - 0x78]
mov qword [rbp - 0x10], 0xffffffffffffffff
cmovae rdx, qword [rbp - 0x78]
mov qword [rbp + 0x68], 0xffffffffffffffff
test rsi, rsi
je 0x18002e845
lea rcx, [rsi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
mov qword [rbp + 0x70], rcx
cmovb rax, rcx
cmp word [rdx + rax*2], 0x2e
lea rcx, [rdx + rax*2]
je 0x18002e9e8
cmp rcx, rdx
je 0x18002e845
sub rcx, 2
cmp word [rcx], 0x2e
jne 0x18002e9d5
sub rcx, rdx
lea rdx, [0x180000000]
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je case.0x18002e81c.251
sub rcx, rdi
dec rcx
mov qword [rbp - 0x10], rcx
jmp case.0x18002e81c.251
mov byte [rbp - 0x80], 1
jmp case.0x18002e81c.251
movsxd r8, dword [r14 + 0x4985c]
xor edx, edx
mov rcx, qword [r14 + 0x49838]
shl r8, 3
call fcn.180048990
movsxd rax, dword [r14 + 0x49860]
mov rcx, qword [r14 + 0x49840]
lea r8, [rax + rax*2]
shl r8, 2
jmp 0x18002e830
mov ebx, 0x104
mov edx, ebx
cmp rdx, rsi
ja 0x18002ea70
cmp qword [rbp - 0x60], 8
lea rax, [rbp - 0x78]
mov qword [rbp - 0x68], rdx
cmovae rax, qword [rbp - 0x78]
mov word [rax + rdx*2], r13w
jmp 0x18002ea7f
xor r8d, r8d
lea rcx, [rbp - 0x78]
sub rdx, rsi
call fcn.18001c120
cmp qword [rbp - 0x60], 8
lea rdx, [rbp - 0x78]
mov r8d, dword [rbp - 0x68]
cmovae rdx, qword [rbp - 0x78]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rsi, qword [rbp - 0x68]
cmp eax, 0x7a
jne 0x18002eab1
add ebx, 0x104
jmp 0x18002ea50
cmp qword [rbp - 0x60], 8
lea rbx, [rbp - 0x78]
mov dword [rbp + 0x220], 0x119
cmovae rbx, qword [rbp - 0x78]
mov qword [rbp + 0x78], 0xffffffffffffffff
test rsi, rsi
je 0x18002ebb5
mov r8, r12
lea rcx, [rbp + 0xd0]
xor edx, edx
call fcn.180048990
lea rcx, [0x1800677f4]
movzx eax, word [rcx]
cmp ax, r12w
jae 0x18002eb51
movzx eax, al
add rcx, 2
mov byte [rbp + rax + 0xd0], 1
lea rax, [0x1800677f8]
cmp rcx, rax
jne 0x18002eaf2
lea rcx, [rsi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
mov qword [rbp + 0x80], rcx
cmovb rax, rcx
lea rdi, [rbx + rax*2]
movzx eax, word [rdi]
cmp ax, r12w
jae 0x18002eb46
cmp byte [rbp + rax + 0xd0], r13b
jne 0x18002ebaa
cmp rdi, rbx
je 0x18002ebb5
sub rdi, 2
jmp 0x18002eb33
lea rcx, [rsi - 1]
mov qword [rbp + 0x88], 0xffffffffffffffff
mov rax, 0xffffffffffffffff
mov qword [rbp + 0x90], rcx
cmp rcx, rax
cmovb rax, rcx
lea rdi, [rbx + rax*2]
nop dword [rax]
movzx edx, word [rdi]
lea rax, [0x1800677f4]
mov ecx, 2
nop
cmp word [rax], dx
je 0x18002ebaa
add rax, 2
sub rcx, 1
jne 0x18002eb90
cmp rdi, rbx
je 0x18002ebb5
sub rdi, 2
jmp 0x18002eb80
sub rdi, rbx
sar rdi, 1
jmp 0x18002e83b
mov rdi, 0xffffffffffffffff
jmp 0x18002e83b
lea rcx, [rdi + 1]
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], 7
mov word [rbp + 0x38], r13w
cmp rsi, rcx
jb 0x18002efdb
mov rax, qword [rbp - 0x10]
sub rsi, rcx
cmp rsi, rax
mov qword [rbp + 0x98], rax
mov r8, rax
mov qword [rbp + 0xa0], rsi
cmovb r8, rsi
lea rax, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rax, qword [rbp - 0x78]
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x38]
call fcn.18001d570
mov r12, qword [rbp + 0x50]
lea r15, [rbp + 0x38]
mov rsi, qword [rbp + 0x38]
cmp r12, 8
mov r14, qword [rbp + 0x48]
cmovae r15, rsi
cmp r14, 8
jae 0x18002ec49
movups xmm0, xmmword [r15]
mov qword [rbp + 0x10], 7
movups xmmword [rbp - 8], xmm0
jmp 0x18002ec9b
movabs rax, 0x7ffffffffffffffe
lea rcx, [rbp - 8]
mov rbx, r14
mov qword [rbp + 0xa8], rax
or rbx, 7
cmp rbx, rax
mov qword [rbp + 0xb0], rbx
cmova rbx, rax
lea rdx, [rbx + 1]
call fcn.18001bea0
lea r8, [r14*2 + 2]
mov qword [rbp - 8], rax
mov rdx, r15
mov rcx, rax
call fcn.180048580
movups xmm0, xmmword [rbp - 8]
mov qword [rbp + 0x10], rbx
mov rdx, qword [rsp + 0x78]
mov qword [rbp + 8], r14
movups xmmword [rbp + 0x58], xmm0
cmp rdx, 8
jb 0x18002ece5
mov rcx, qword [rsp + 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ece0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002efe1
call fcn.1800473c8
mov word [rbp - 8], r13w
movups xmm0, xmmword [rbp + 0x58]
movups xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [rbp + 8]
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], 7
movups xmmword [rbp - 0x20], xmm0
cmp r12, 8
jb 0x18002ed41
lea rdx, [r12*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18002ed39
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002efe1
mov rcx, rsi
call fcn.1800473c8
mov r14, qword [rbp + 0x230]
xor r8d, r8d
mov rsi, qword [rbp - 0x20]
mov rdx, rsi
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], 7
lea rcx, [r14 + 0x28]
mov word [rbp + 0x38], r13w
call fcn.1800431b0
mov r9, qword [rbp - 0x18]
mov rcx, r13
mov r8, qword [rbp - 0x30]
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x70], r8
test rsi, rsi
je 0x18002edba
nop word [rax + rax]
cmp r9, 8
lea rax, [rbp - 0x30]
lea rdx, [r14 + 0x28]
cmovae rax, r8
cmp qword [r14 + 0x40], 0x10
jb 0x18002edab
mov rdx, qword [r14 + 0x28]
movzx eax, byte [rax + rcx*2]
mov byte [rdx + rcx], al
inc rcx
cmp rcx, rsi
jb 0x18002ed90
mov rsi, qword [rbp - 0x68]
mov r15d, 1
mov r12d, 0x100
jmp 0x18002e845
movsxd r8, dword [r14 + 0x49868]
xor edx, edx
mov rcx, qword [r14 + 0x49850]
call fcn.180048990
lea rax, [rbp - 0x48]
mov dword [rbp - 0x48], r13d
lea rcx, [r14 + 0x49738]
mov qword [rsp + 0x20], rax
mov r9d, 0xd6
mov dword [rbp - 0x40], r13d
lea r8, [rbp - 0x40]
mov dword [rbp - 0x38], r13d
lea rdx, [rbp - 0x38]
call fcn.180015470
mov dword [r14 + 0x47fb8], r13d
jmp 0x18002e837
mov dword [rbp - 0x50], r13d
jmp case.0x18002e81c.251
lea r8, [rdi + 1]
mov qword [rbp + 0x28], r13
cmp rsi, r8
mov qword [rbp + 0xb8], r8
lea rdx, [rbp - 0x78]
mov qword [rbp + 0x30], 7
cmovb r8, rsi
mov word [rbp + 0x18], r13w
cmp qword [rbp - 0x60], 8
lea rcx, [rbp + 0x18]
mov qword [rbp + 0xc0], rsi
cmovae rdx, qword [rbp - 0x78]
call fcn.18001d570
lea rax, [rbp + 0x18]
lea rbx, [r14 + 8]
cmp rbx, rax
je 0x18002ee8f
mov rcx, rbx
call fcn.18001b890
movups xmm0, xmmword [rbp + 0x18]
movups xmm1, xmmword [rbp + 0x28]
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
jmp 0x18002eecf
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x18002eecf
mov rcx, qword [rbp + 0x18]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002eeca
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002efe1
call fcn.1800473c8
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], r13w
jmp 0x18002e837
movsxd r8, dword [r14 + 0x49864]
mov rcx, qword [r14 + 0x49848]
shl r8, 4
jmp 0x18002e830
mov byte [rbp - 0x80], r13b
mov r13d, dword [rbp - 0x80]
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x78]
jmp 0x18002e868
mov ebx, dword [rbp - 0x50]
test ebx, ebx
je 0x18002efcc
mov r9d, 0x8c
mov dword [rbp + 0x238], ebx
xor r8d, r8d
mov qword [rsp + 0x20], r13
lea rdx, [rbp + 0x238]
mov rcx, r14
call fcn.180015470
mov r8, qword [rsp + 0x70]
mov ecx, ebx
mov r9, qword [rsp + 0x78]
shl r15d, cl
lea r13d, [r15 - 1]
add r13d, eax
jmp 0x18002e868
lea rdx, str.__4d__get_argument_by_val
mov ecx, 2
call fcn.180033540
mov rbx, qword [rbp + 0x228]
xor r9d, r9d
mov qword [rsp + 0x60], r13
xor r8d, r8d
mov dword [rsp + 0x58], 0xad
xor edx, edx
mov qword [rsp + 0x50], r13
movsxd rax, dword [rbx + 0x8c]
mov qword [rsp + 0x48], r13
add rax, 0x2b
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
lea rcx, [rbx + rax*8]
mov qword [rsp + 0x28], rcx
lea rax, [rbx + 0x130]
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.180032470
mov r13d, eax
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x78]
jmp 0x18002e868
call fcn.18001bd20
int3
call fcn.18004b4d4
int3