Function at 0x18001cc70
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov edi, dword [rbp - 0x49]
mov eax, r8d
mov r13, qword [rbp + 0x7f]
mov r14, rdx
mov r12d, dword [rbp + 0x77]
mov rsi, rcx
mov ebx, dword [rbp + 0x77]
mov r15d, r8d
add eax, 0x474
lea rdx, [0x180062423]
lea r8, [0x180000000]
cmp r15d, eax
jae case.0x18001cd02.8
cmp r15d, 0x14a
ja 0x18001d10f
je 0x18001d12b
lea eax, [r15 - 1]
cmp eax, 0xf0
ja case.0x18001cd02.11
movzx eax, byte [r8 + rax + 0x1d184]
mov ecx, dword [r8 + rax*4 + 0x1d158]
add rcx, r8
jmp rcx
cmp qword [rbp + 0x17], 0
jne case.0x18001cd02.11
mov byte [rbp - 0x49], 0
mov eax, dword [rbp - 0x49]
jmp 0x18001d13b
mov eax, 0x10c
jmp 0x18001ceb6
mov edi, dword [r14 + 4]
add r15d, 0x5f
mov eax, dword [rbp + 0x77]
mov dword [rbp - 0x49], edi
jmp 0x18001ccb0
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov ecx, 0x9e
call fcn.180057ae0
test eax, eax
jne 0x18001d124
nop dword [rax]
nop word [rax + rax]
mov r8, r14
mov dword [rbp - 0x41], 0x36
mov edx, 0xa
lea rcx, [rbp - 0x41]
call fcn.18000c450
test eax, eax
jne 0x18001cde8
mov r8, r14
mov dword [rbp - 0x39], 0x18
lea edx, [rax + 0xa]
lea rcx, [rbp - 0x39]
call fcn.18000c450
test eax, eax
jne 0x18001cde8
mov r8, r14
mov dword [rbp - 0x31], 0x37
lea edx, [rax + 0xa]
lea rcx, [rbp - 0x31]
call fcn.18000c450
test eax, eax
jne 0x18001cde8
mov r8, r14
mov dword [rbp - 0x29], 0x27
lea edx, [rax + 0xa]
lea rcx, [rbp - 0x29]
call fcn.18000c450
test eax, eax
jne 0x18001cde8
mov r8, r14
mov dword [rbp - 0x21], 0x26
lea edx, [rax + 0xa]
lea rcx, [rbp - 0x21]
call fcn.18000c450
test eax, eax
je 0x18001cea4
mov esi, dword [r14 + 0x818]
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov ecx, 0x9e
call fcn.180057ae0
test eax, eax
jne 0x18001d124
cmp esi, 0x36
jne 0x18001ce28
lea r8d, [rax + 0x6c]
mov byte [rbp + 0x7f], 0x15
lea rdx, [rbp + 0x7f]
mov rcx, r14
call fcn.180013f10
jmp 0x18001cd60
cmp esi, 0x37
jne 0x18001ce46
lea r8d, [rsi + 0x35]
mov byte [rbp - 0x69], 0x1f
lea rdx, [rbp - 0x69]
mov rcx, r14
call fcn.180013f10
jmp 0x18001cd60
cmp esi, 0x27
jne 0x18001ce64
lea r8d, [rsi + 0x45]
mov byte [rbp - 0x61], 0x1d
lea rdx, [rbp - 0x61]
mov rcx, r14
call fcn.180013f10
jmp 0x18001cd60
cmp esi, 0x26
jne 0x18001ce82
lea r8d, [rsi + 0x46]
mov byte [rbp - 0x59], 0x1e
lea rdx, [rbp - 0x59]
mov rcx, r14
call fcn.180013f10
jmp 0x18001cd60
cmp esi, 0x18
jne 0x18001cd60
lea r8d, [rsi + 0x54]
mov byte [rbp - 0x51], 0x1b
lea rdx, [rbp - 0x51]
mov rcx, r14
call fcn.180013f10
jmp 0x18001cd60
mov rsi, qword [rbp + 0x67]
mov eax, 0x10c
lea r15d, [rax - 0x71]
add eax, 0xd9c
cmp eax, 0x1b38
ja case.0x18001cd02.10
cmp eax, 0x10c
je 0x18001cea8
cmp eax, 0xea8
jne 0x18001ceb1
xor eax, eax
jmp 0x18001d13b
mov rax, qword [rbp + 0x17]
add r15d, 0x5f
xchg qword [0x18006e300], rax
mov eax, dword [rbp + 0x77]
jmp 0x18001ccb0
mov esi, 0xdc
nop
cmp esi, 0x44c0
ja 0x18001cfef
je 0x18001d032
mov eax, esi
sub eax, 0xd1
je 0x18001cf9f
sub eax, 0xb
je 0x18001cf6e
cmp eax, 0x4074
jne 0x18001d004
xor r9d, r9d
mov dword [rbp - 0x19], 8
lea r8, [rbp - 0x19]
mov rdx, r14
mov ecx, 0x100
call fcn.180057ae0
mov edx, reloc.SHLWAPI.dll_SHStripMneumonicW
mov dword [rbp - 0x11], eax
lea rcx, [rbp - 0x11]
call fcn.180033a20
mov rbx, rax
lea rdx, [0x180062423]
xor eax, eax
cmp dword [0], 1
sete al
mov dword [0], eax
jmp 0x18001d004
mov r8, qword [r14 + 0x3c0]
test r8, r8
je 0x18001d018
mov rdx, qword [r8 + 0x48]
mov rax, qword [r8 + 8]
mov rcx, qword [rax + rdx*8]
lea rax, [rdx - 1]
mov qword [r8 + 0x48], rax
lea rdx, [0x180062423]
mov qword [rbp + 0xf], rcx
jmp 0x18001d004
test r14, r14
jne 0x18001cfc7
mov r9, rdx
mov dword [rbp - 9], r14d
mov edx, 0xa8
lea r8, [rbp - 9]
lea rcx, str.a___NULL
call fcn.1800175c0
lea rdx, [0x180062423]
mov r9, rdx
mov dword [rbp - 1], 0
mov edx, 0xa8
lea r8, [rbp - 1]
lea rcx, str.b___NULL
call fcn.1800175c0
lea rdx, [0x180062423]
jmp 0x18001d004
cmp esi, 0x81cf
je 0x18001d001
cmp esi, 0xc24e
je 0x18001d032
jmp 0x18001d004
mov dword [rbp + 0xf], ebx
add esi, 0x43e4
cmp esi, 0x19758
jbe 0x18001cef0
jmp 0x18001d032
movsxd rdx, dword [r14 + 0x3a4]
mov rcx, qword [r14 + rdx*8 + 0x68]
lea eax, [rdx - 1]
mov qword [rbp + 0xf], rcx
mov dword [r14 + 0x3a4], eax
mov r13, qword [rbp + 0xf]
xor edx, edx
mov r9, r14
mov rcx, r13
lea r8d, [rdx + 0xa]
call fcn.180056460
mov rsi, qword [rbp + 0x67]
mov r12d, eax
mov eax, dword [rbp + 0x77]
add r15d, 0x5f
jmp 0x18001ccb0
mov qword [rsp + 0x38], 0
xor edx, edx
mov qword [rsp + 0x30], 0
mov r9, r14
mov qword [rsp + 0x28], 0
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea ecx, [rdx + 0x46]
call fcn.1800373a0
mov eax, dword [rsi]
add dword [r14 + 4], eax
mov eax, dword [rbp + 0x77]
add r15d, 0x5f
jmp 0x18001ccb0
mov qword [0x18006e2f8], r14
lea r8, [0x18001e720]
mov qword [rsp + 0x28], 0
mov r9, r14
xor edx, edx
mov qword [r14 + 0x80], rsi
xor ecx, ecx
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp + 0x17], rax
add r15d, 0x5f
mov eax, dword [rbp + 0x77]
jmp 0x18001ccb0
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 7]
mov rdx, r13
mov dword [rbp + 7], 0
mov r9, r14
mov ecx, 0x11f
call fcn.18004b9f0
mov eax, dword [rbp + 0x77]
add r15d, 0x5f
jmp 0x18001ccb0
cmp r15d, 0x150
je 0x18001d130
mov eax, dword [rbp + 0x77]
add r15d, 0x5f
jmp 0x18001ccb0
mov eax, 1
jmp 0x18001d13b
mov eax, r12d
jmp 0x18001d13b
mov byte [rbp - 0x49], 1
mov eax, dword [rbp - 0x49]
jmp 0x18001d13b
mov eax, edi
mov rbx, qword [rsp + reloc.SHLWAPI.dll_SHRegGetIntW]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret