Function at 0x180064da0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r11d, dword [rsp + 0xa8]
lea eax, [rdx + 0x1c2]
mov ebx, edx
mov dword [rsp + 0x54], eax
mov r15d, edx
lea r13, [0x180000000]
xor edx, edx
mov rsi, r9
mov r14, rcx
cmp ebx, eax
jae 0x180065203
movsxd rbx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0xa8]
mov rdi, rbx
mov r12d, dword [rsp + 0xa8]
mov ebp, dword [rsp + 0xa8]
mov dword [rsp + 0x44], r11d
mov dword [rsp + 0x40], eax
nop word [rax + rax]
lea eax, [r15 - 0x26]
cmp eax, 0xc3
ja case.0x180064e43.48
movzx eax, byte [rax + r13 + 0x655b0]
mov ecx, dword [r13 + rax*4 + 0x65584]
add rcx, r13
jmp rcx
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsi]
mov qword [rcx], rax
jmp case.0x180064e43.48
mov rdx, qword [r14]
mov r9d, 0x7d
xor r8d, r8d
xor ecx, ecx
call fcn.180062440
mov dword [rsp + 0x50], eax
jmp 0x1800651b7
mov r8, qword [r14]
xor r9d, r9d
mov qword [rsp + 0x30], rdx
xor ecx, ecx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
mov edx, 0x8f
call fcn.180044950
movzx ecx, al
mov dword [r14 + 0x4748], ecx
cmp ecx, 1
jb 0x1800651da
cmp ecx, 4
ja 0x1800651da
mov rax, qword [r14]
cmp ecx, dword [rax + 8]
jg 0x1800651da
lea eax, [rcx*2 + 6]
cmp dword [rsp + 0x50], eax
je 0x1800651b7
lea r9, str.SessionView
jmp 0x1800651e1
mov r13, qword [rsp + 0x58]
xor ecx, ecx
mov qword [rsp + 0x28], rdx
mov r9, r13
mov dword [rsp + 0x20], edx
xor edx, edx
mov qword [r13 + 8], r8
lea r8, [0x18002ca80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r14], rax
test rax, rax
jne 0x1800651b0
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r12d, r12d
mov eax, r12d
jmp 0x180064f46
mov rdx, qword [r14 + 0x10]
mov rcx, qword [r14 + 8]
mov rax, rdx
and rax, rcx
cmp rax, 1
jne case.0x180064e43.40
test qword [r14], rcx
jne case.0x180064e43.40
test qword [r14 + 0x18], rdx
je case.0x180064e43.48
mov byte [rsp + 0x48], 0
mov eax, dword [rsp + 0x48]
mov rbx, qword [rsp + 0xa0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp dword [r14 + 0x4724], 0x10
jge 0x180064f84
mov qword [rsp + 0x28], rdx
xor r9d, r9d
mov edx, 0x123
mov qword [rsp + 0x20], r14
xor r8d, r8d
xor ecx, ecx
call fcn.180049e30
mov eax, dword [r14 + 0x4720]
shr rax, 0x17
movzx r11d, byte [rax + rsi]
mov dword [rsp + 0x44], r11d
cmp r11d, 0xff
jae 0x180064ff6
mov edx, 0x81
mov eax, edx
sub eax, 0x7f
je 0x180064f42
sub eax, 1
je 0x180064fe2
cmp eax, 1
jne 0x180064fef
movzx ecx, byte [r11 + rsi + 0x500]
mov eax, dword [r14 + 0x4724]
cmp ecx, eax
jg 0x1800652d5
shl dword [r14 + 0x4720], cl
sub eax, ecx
mov dword [r14 + 0x4724], eax
jmp 0x180064fef
movzx eax, byte [r11 + rsi + 0x400]
mov dword [rsp + 0x48], eax
dec edx
cmp edx, 0x7e
ja 0x180064fa7
movzx ecx, word [r14 + 0x4722]
mov r8, qword [rsp + 0xb0]
mov dword [rsp + 0x40], ecx
jmp 0x1800651c8
mov rax, qword [r14 + 0x10]
test qword [r14 + 0x20], rax
jne case.0x180064e43.40
test qword [r14 + 0x28], rax
jne case.0x180064e43.40
jmp case.0x180064e43.48
mov ecx, 0x10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x58], rax
cmp rax, 0
jne 0x1800651b7
mov eax, 4
jmp 0x180064f46
cmp dword [r14 + 0x4748], 0
mov dword [rsp + 0x4c], edx
jle case.0x180064e43.48
lea r13, [r14 + 0x474c]
nop dword [rax]
mov esi, 0x17
cmp esi, 0x17
je 0x18006512d
cmp esi, 0xad
je 0x1800650dd
cmp esi, 0x143
je 0x1800650a3
cmp esi, 0x1d9
jne 0x18006517b
mov dword [r13], ebx
jmp 0x18006517b
lea rcx, [rdi + rdi*2]
shl rcx, 5
cmp dword [rcx + r14 + 0x45b0], 3
jg 0x1800651f3
mov eax, r12d
and eax, 0xf
mov dword [rcx + r14 + 0x45b4], eax
cmp eax, 3
jbe 0x18006517b
lea r9, str._binclient
jmp 0x1800651e1
mov rax, qword [r14]
mov ebx, edx
mov rdi, rdx
mov ecx, dword [rax + 8]
test ecx, ecx
jle 0x180065104
lea rax, [r14 + 0x45a0]
cmp dword [rax], ebp
je 0x180065104
inc ebx
inc rdi
add rax, 0x60
cmp ebx, ecx
jl 0x1800650f3
mov esi, 0xad
lea r15d, [rsi - 0x2d]
cmp ebx, ecx
je 0x1800651fc
mov ecx, r12d
lea rax, [rdi + rdi*2]
sar ecx, 4
shl rax, 5
mov dword [rax + r14 + 0x45b0], ecx
jmp 0x18006517b
mov r8, qword [r14]
xor r9d, r9d
mov qword [rsp + 0x30], rdx
xor ecx, ecx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
mov edx, 0x8f
call fcn.180044950
mov r8, qword [r14]
xor r12d, r12d
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov qword [rsp + 0x28], r12
mov edx, 0x8f
xor ecx, ecx
mov qword [rsp + 0x20], r12
movzx ebp, al
call fcn.180044950
movzx r12d, al
xor edx, edx
add esi, 0x96
cmp esi, 0x26f
jb 0x180065075
mov eax, dword [rsp + 0x4c]
add r13, 4
inc eax
mov dword [rsp + 0x4c], eax
cmp eax, dword [r14 + 0x4748]
jl 0x180065070
mov rsi, qword [rsp + 0xb8]
lea r13, [0x180000000]
mov r11d, dword [rsp + 0x44]
mov r8, qword [rsp + 0xb0]
mov ecx, dword [rsp + 0x40]
add r15d, 0x2d
cmp r15d, dword [rsp + 0x54]
jae 0x180065210
xor edx, edx
jmp 0x180064e20
lea r9, str.__mips16_call_stub_dc_9
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 6]
call fcn.180041b10
jmp 0x180064f46
lea r9, str.___0_O_Z_v_
jmp 0x1800651e1
mov eax, edx
jmp 0x180064f46
mov ecx, dword [rsp + 0xa8]
mov dword [rsp + 0x40], ecx
jmp 0x180065217
mov ebx, dword [rsp + 0xa8]
lea r10d, [rbx + 0x55a]
cmp ebx, r10d
jae 0x180064f42
movsxd r9, r11d
nop word [rax + rax]
cmp ebx, 0x114
ja 0x180065318
je 0x18006530a
mov eax, ebx
sub eax, 0x26
je 0x1800653da
sub eax, 0x4b
je 0x1800652df
sub eax, 0x1a
je 0x18006529b
sub eax, 4
je 0x180065521
cmp eax, 0x6b
jne 0x1800653c6
mov rax, qword [r14 + 0x18]
mov rcx, qword [r14 + 0x28]
test rax, rcx
jne case.0x180064e43.40
test qword [r14 + 0x30], rax
jne case.0x180064e43.40
test qword [r14 + 0x38], rax
jne case.0x180064e43.40
test qword [r14 + 0x20], rcx
jmp 0x1800653bc
lea rax, [rsi + 0x62c]
mov r11d, 0xa
mov r9d, r11d
cmp ecx, dword [rax]
jb 0x1800652be
nop
inc r11d
lea rax, [rax + 4]
inc r9
cmp ecx, dword [rax]
jae 0x1800652b0
mov ebx, 0x8b
cmp r11d, 0x11
jne 0x1800653c6
add dword [r14 + 0x4724], 0xfffffff0
mov eax, 0xffffffff
jmp 0x180064f46
mov rax, qword [r14 + 0x10]
test qword [r14 + 0x30], rax
jne case.0x180064e43.40
test qword [r14 + 0x38], rax
jne case.0x180064e43.40
mov rax, qword [r14 + 0x18]
test qword [r14 + 0x20], rax
jne case.0x180064e43.40
jmp 0x1800653c6
cmp r11d, dword [r14 + 0x4724]
jg 0x1800652d5
jmp 0x1800653c6
mov eax, ebx
sub eax, 0x183
je 0x180065385
sub eax, 0x1a
je 0x18006533d
sub eax, 0x6f
je 0x18006552b
cmp eax, 0x1a
je 0x180064f42
jmp 0x1800653c6
mov r8d, dword [r14 + 0x4720]
mov ecx, 0x20
sub ecx, r11d
mov eax, r8d
shr eax, cl
mov ecx, r11d
and eax, dword [r13 + r9*4 + 0x8c9c0]
add eax, dword [rsi + r9*4 + 0x64c]
sub dword [r14 + 0x4724], r11d
shl r8d, cl
cdqe
mov dword [r14 + 0x4720], r8d
movzx ecx, byte [rax + rsi + 0x400]
mov dword [rsp + 0x48], ecx
jmp 0x1800653c2
mov rcx, qword [r14 + 0x30]
mov rdx, qword [r14 + 0x20]
test rdx, rcx
jne case.0x180064e43.40
mov rax, qword [r14 + 0x38]
test rdx, rax
jne case.0x180064e43.40
mov rdx, qword [r14 + 0x28]
test rdx, rcx
jne case.0x180064e43.40
test rdx, rax
jne case.0x180064e43.40
test rax, rcx
jne case.0x180064e43.40
mov ecx, dword [rsp + 0x40]
add ebx, 0x89
cmp ebx, r10d
jb 0x180065230
jmp 0x180064f42
mov r8d, dword [rsp + 0xa8]
mov ebx, 0x83
xor r12d, r12d
nop word [rax + rax]
cmp ebx, 0x83
je 0x180065494
cmp ebx, 0x1b1f
je 0x180065482
cmp ebx, 0x35bb
jne 0x18006550f
mov ecx, dword [r14 + 0x4734]
mov eax, r8d
and eax, 0xf
mov dword [r14 + 0x4740], eax
cmp dword [r14 + 0x4730], r12d
je 0x180065461
cmp ecx, 0x3f
jg 0x180065455
mov edx, dword [r14 + 0x4738]
cmp edx, 0x3f
jg 0x180065455
cmp ecx, edx
jg 0x180065455
cmp dword [r14 + 0x473c], 0xd
jg 0x180065455
cmp eax, 0xd
jbe 0x18006550f
lea r9, str.bad_SOS
jmp 0x1800651e1
test ecx, ecx
jne 0x180065455
cmp dword [r14 + 0x473c], r12d
jne 0x180065455
test eax, eax
jne 0x180065455
mov dword [r14 + 0x4738], 0x3f
jmp 0x18006550f
mov eax, r8d
sar eax, 4
mov dword [r14 + 0x473c], eax
jmp 0x18006550f
mov r8, qword [r14]
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov edx, 0x8f
mov qword [rsp + 0x28], r12
xor ecx, ecx
mov qword [rsp + 0x20], r12
call fcn.180044950
mov r8, qword [r14]
xor r9d, r9d
movzx ecx, al
mov edx, 0x8f
mov dword [r14 + 0x4734], ecx
xor ecx, ecx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.180044950
mov r8, qword [r14]
xor r9d, r9d
movzx ecx, al
mov edx, 0x8f
mov dword [r14 + 0x4738], ecx
xor ecx, ecx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.180044950
movzx r8d, al
add ebx, 0x1a9c
cmp ebx, 0x4fd4
jbe 0x1800653f0
mov eax, 1
jmp 0x180064f46
mov rax, qword [r14 + 0x38]
movabs rcx, 0xff000000000000ff
test rcx, rax
jne case.0x180064e43.40
mov rcx, qword [r14 + 0x18]
or rcx, qword [r14 + 0x30]
or rcx, qword [r14 + 0x28]
or rcx, rax
mov rax, qword [r14 + 8]
or rcx, qword [r14 + 0x20]
or rcx, qword [r14 + 0x10]
or rax, qword [r14]
cmp rax, rcx
jne case.0x180064e43.40
mov r9, r14
xor edx, edx
xor ecx, ecx
mov r8d, 0x114
call fcn.180023aa0
mov byte [rsp + 0x48], al
jmp 0x180064f42