Function at 0x18000a640
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x60], r9
mov r14, r8
mov r15, rdx
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x50], 0
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
movdqa xmm0, xmmword [0x18009bfb0]
movdqa xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea ebx, [rcx + 0xaa0]
mov dword [rsp + 0x44], ebx
cmp ecx, ebx
jae 0x18000aea7
mov r12, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
mov r13d, dword [rsp + 0x58]
lea rdx, [0x180000000]
cmp ecx, 0x20c
ja 0x18000aabc
je 0x18000aea7
cmp ecx, 0x105
ja 0x18000aa3b
je 0x18000a9bb
mov eax, ecx
sub eax, 0xe
je 0x18000a9ab
sub eax, 0xaa
je 0x18000a740
sub eax, 0xf
je 0x18000a734
cmp eax, 0x1c
jne 0x18000ae71
mov eax, dword [r9]
mov dword [0x1800a4048], eax
jmp 0x18000ae71
mov byte [0x1800a3e08], 0
jmp 0x18000ae71
mov rax, qword [r14 + 0x10]
sub rax, rsi
mov rdi, qword [rsp + 0x68]
cmp rax, rdi
jb 0x18000ae71
nop word [rax + rax]
mov qword [rbp - 0x80], 0
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov ebx, 0x100
nop word [rax + rax]
cmp ebx, 0x100
je 0x18000a8af
cmp ebx, 0xbe00
je 0x18000a8a7
cmp ebx, 0x17b00
je 0x18000a885
cmp ebx, 0x23800
je 0x18000a831
cmp ebx, 0x2f500
jne 0x18000a947
mov dword [rsp + 0x58], r13d
mov r8d, 0x31
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x58]
call fcn.180079bb0
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x18000a81f
mov qword [rdx + 0x10], 0
mov qword [rdx + 0x18], 0
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x80], 0
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
add qword [r15 + 8], 0x20
jmp 0x18000a947
lea r8, [rsp + 0x70]
mov rcx, r15
call fcn.1800014f0
jmp 0x18000a947
test r13d, r13d
jne 0x18000a947
mov byte [rsp + 0x48], r13b
mov rax, qword [rbp - 0x78]
cmp rax, 0x10
jb 0x18000aea7
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a87b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ae90
call fcn.18008eb9c
jmp 0x18000aea7
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rcx, qword [rbp - 0x70]
xor edx, edx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov r13d, eax
jmp 0x18000a947
add rsi, rdi
jmp 0x18000a947
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rax, qword [r14 + 0x10]
cmp rax, rsi
jb 0x18000afb2
sub rax, rsi
mov r8, rdi
cmp rax, rdi
cmovb r8, rax
mov rax, r14
cmp qword [r14 + 0x18], 0x10
jb 0x18000a8ea
mov rax, qword [r14]
lea rdx, [rax + rsi]
lea rcx, [rbp - 0x30]
call fcn.180027360
or dword [rsp + 0x50], 1
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18000a937
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a932
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ae89
call fcn.18008eb9c
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x60], xmm1
add ebx, 0xbd00
cmp ebx, 0x3b100
jbe 0x18000a780
mov rax, qword [rbp - 0x78]
cmp rax, 0x10
jb 0x18000a996
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a991
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ae90
call fcn.18008eb9c
mov rax, qword [r14 + 0x10]
sub rax, rsi
cmp rax, rdi
jae 0x18000a760
jmp 0x18000ae69
mov qword [rsp + 0x68], 8
xor esi, esi
jmp 0x18000ae71
mov ebx, 0xb6
cmp ebx, 0xb6
je 0x18000a9d6
cmp ebx, 0x14d
je 0x18000aea7
jmp 0x18000a9e9
mov r8, r15
xor edx, edx
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
mov qword [rsp + 0x48], rax
add ebx, 0x97
cmp ebx, 0x1e4
jb 0x18000a9c0
mov ebx, dword [rsp + 0x44]
xor r9d, r9d
mov r8d, 0x107
lea rdx, [rbp - 0x10]
xor ecx, ecx
call fcn.180089b40
test al, al
jne 0x18000ad9f
mov eax, SHRegGetIntW
nop dword [rax]
cmp eax, 0x115
je 0x18000ad8a
cmp eax, 0x862c
je 0x18000aea7
jmp 0x18000ad8f
mov eax, ecx
sub eax, 0x162
je 0x18000aaae
sub eax, 0xf
je 0x18000aa5d
cmp eax, 0x1c
jne 0x18000ae71
inc dword [0x1800a4044]
jmp 0x18000ae71
mov r9, r14
lea r8, [rbp - 0x50]
mov edx, 0x13b
lea rcx, [rbp - 0x10]
call fcn.180081750
test al, al
jne 0x18000adb5
mov eax, 0xc6
nop
cmp eax, 0xc6
je 0x18000aa94
cmp eax, 0x9480
je 0x18000aea7
jmp 0x18000aa99
mov byte [rsp + 0x48], 0
add eax, 0x93ba
cmp eax, 0x12774
jbe 0x18000aa80
mov ecx, dword [rsp + 0x40]
jmp 0x18000ae71
cmp rsi, qword [r14 + 0x10]
sete byte [rsp + 0x48]
jmp 0x18000ae71
cmp ecx, 0x2e1
ja 0x18000adbe
je 0x18000aea0
mov eax, ecx
sub eax, 0x21b
je 0x18000a9fb
sub eax, 0x1c
je 0x18000ab28
cmp eax, 0x8e
jne 0x18000ae71
test r12, r12
jne 0x18000ae71
mov eax, 0x1c
nop dword [rax]
cmp eax, 0x1c
je 0x18000ab12
cmp eax, 0xd20
je 0x18000aea7
jmp 0x18000ab17
mov byte [rsp + 0x48], 0
add eax, 0xd04
cmp eax, 0x1a08
jbe 0x18000ab00
jmp 0x18000ae71
mov rax, qword [rbp + 0xa0]
cmp dword [rax], 0
je 0x18000ae71
mov ebx, 0x74
nop dword [rax]
cmp ebx, 0x74
je 0x18000ad43
cmp ebx, 0x123
je 0x18000ab6b
cmp ebx, 0x1d2
jne 0x18000ad6f
mov ecx, 0x237
mov dword [rsp + 0x40], ecx
jmp 0x18000ad73
movsxd rax, dword [r9]
cmp eax, 0x21
ja case.0x18000ab89.7
movzx eax, byte [rdx + rax + 0xafd8]
mov ecx, dword [rdx + rax*4 + 0xafb8]
add rcx, rdx
jmp rcx
mov ebx, StrCmpICA
cmp ebx, 0x9a
je 0x18000aba6
cmp ebx, 0x159
je 0x18000ad3c
jmp 0x18000abc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.O.K._n
call fcn.18008e110
add ebx, 0xbf
cmp ebx, 0x218
jb 0x18000ab90
mov ebx, 0xf5
mov eax, ebx
sub eax, 0xf4
je 0x18000ad3c
cmp eax, 1
jne 0x18000abfd
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.bTopoWillBeReloaded
call fcn.18008e110
dec ebx
cmp ebx, 0xf3
ja 0x18000abd3
mov ebx, 0x79
nop dword [rax]
mov eax, ebx
sub eax, 0x78
je 0x18000ad3c
cmp eax, 1
jne 0x18000ac38
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.COpenGLInterceptionContext::glRotatex
call fcn.18008e110
dec ebx
cmp ebx, 0x77
ja 0x18000ac10
mov eax, 0x6a
cmp eax, 0x6a
je 0x18000ac76
add eax, 0x9f0
cmp eax, 0x9f0
jbe 0x18000ac44
mov ebx, 0x10b
nop word [rax + rax]
cmp ebx, 0x10b
je 0x18000ac9a
cmp ebx, 0x28ad
je 0x18000ad3c
jmp 0x18000acb4
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.KSEVENT_TYPE_QUERYBUFFER
mov rcx, rax
call fcn.18008e110
mov ebx, 0x123
jmp 0x18000ad63
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Z18convert_float8_rtnDv8_t
call fcn.18008e110
add ebx, 0x27a2
cmp ebx, 0x4f44
jbe 0x18000ac60
mov eax, 0x119
cmp eax, 0x119
je 0x18000ad01
add eax, 0xcc2a
cmp eax, 0xcc2a
jbe 0x18000acc7
nop word [rax + rax]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.VmotionInterfaceNotEnabled
mov rcx, rax
call fcn.18008e110
mov ebx, 0x123
jmp 0x18000ad63
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str._etc_gss_mech
mov rcx, rax
call fcn.18008e110
mov ebx, 0x123
jmp 0x18000ad63
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.CWfProject.SetProperty
mov rcx, rax
call fcn.18008e110
mov ebx, 0x123
jmp 0x18000ad63
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r9d, dword [r15]
mov r8, r14
lea rdx, str.BoxCheckRule
call fcn.18008e110
lea rdx, [0x180000000]
mov r9, qword [rsp + 0x60]
mov ecx, dword [rsp + 0x40]
add ebx, 0xaf
cmp ebx, 0x281
jb 0x18000ab40
jmp 0x18000ae6d
mov byte [rsp + 0x48], 0
add eax, 0x8517
cmp eax, 0x10a2e
jbe 0x18000aa20
lea r9, [rbp - 0x50]
xor r8d, r8d
xor edx, edx
mov ecx, 0xb1
call fcn.18004def0
mov r12, rax
mov ecx, dword [rsp + 0x40]
jmp 0x18000ae71
cmp ecx, 0x36f
je 0x18000adf0
cmp ecx, 0x419
je 0x18000addf
cmp ecx, 0x4c3
je 0x18000aea7
jmp 0x18000ae71
mov byte [0x1800a3e08], 1
mov byte [rsp + 0x48], 1
jmp 0x18000ae71
mov rbx, qword [0x1800a4090]
cmp rbx, qword [0x1800a4098]
je 0x18000ae6d
mov rcx, r12
call qword [rbx]
test al, al
jne 0x18000ae5c
mov edi, SHRegGetIntW
nop
mov eax, edi
sub eax, 0x115
je 0x18000aea7
cmp eax, 1
jne 0x18000ae52
mov qword [rsp + 0x58], r12
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rax + 0x15]
call fcn.180059c70
mov byte [rsp + 0x48], 0
dec edi
cmp edi, 0x114
ja 0x18000ae10
add rbx, 8
cmp rbx, qword [0x1800a4098]
jne 0x18000ae00
mov ecx, dword [rsp + 0x40]
mov ebx, dword [rsp + 0x44]
add ecx, 0xaa
mov dword [rsp + 0x40], ecx
cmp ecx, ebx
jae 0x18000aea7
mov r9, qword [rsp + 0x60]
jmp 0x18000a6db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [r9]
mov dword [rsp + 0x48], eax
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18000aee5
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000aee0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000aee0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008eb9c
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x18000af37
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000af32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000af32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008eb9c
movdqa xmm0, xmmword [0x18009bfb0]
movdqa xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18000af86
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000af81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000af81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008eb9c
mov rax, qword [rsp + 0x48]
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.18008f350
mov rbx, qword [rsp + 0x180]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180025ec0
nop
mov ebp, dword [rbx - 0x53200000]
add byte [rax], al
ret 0xac