Function at 0x180014570
Capabilities:
Create thread
Terminate process

Disassembly:
push rbp
push rsi
push r15
sub rsp, 0x80
mov rax, qword [0x18003c008]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rsi, r8
mov qword [rsp + 0x30], rdx
movsxd r8, dword [rdx + 0x568]
mov r15, rdx
mov qword [0x18003dd40], rcx
mov qword [0x18003dd48], rdx
mov qword [0x18003dd50], r9
mov dword [0x18003fd30], r8d
cmp r8d, 7
ja case.default.0x1800145d5
lea rbp, sym.TimelineSource.dll_:S_Ml8_V7qvi__W_Wmy2Hk1ncUgWD__Fpa_wiyg
mov eax, dword [rbp + r8*4 + 0x14a68]
add rax, rbp
jmp rax
mov r8d, dword [rdx + 0xb58]
cmp r8d, 0x14c0
je case.0x1800145d5.4
mov r9d, 0x14c0
lea rdx, str.Error_TimelineSourceShare_size___d____d_n
mov ecx, 3
call fcn.180012910
mov rax, 0xffffffffffffffff
jmp 0x1800149fe
mov rcx, qword [rdx + 0xb78]
mov qword [rsp + 0xa0], rbx
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [0x18003dd48]
mov edx, 0xffffffff
mov rcx, qword [rcx + 0xb60]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rax, [0x180014510]
mov qword [rsi + 0x28], rax
lea rbx, [0x180013230]
mov eax, dword [0x18003fd30]
add eax, 0xfffffffc
mov qword [rsi + 0x18], rbx
cmp eax, 3
jbe 0x180014a17
mov r10, qword [0x18003dd48]
mov qword [rsp + 0x78], rdi
xor edi, edi
mov qword [rsp + 0x60], r14
cmp dword [r10 + 0x498], edi
jne 0x1800146c8
mov r8d, dword [r10 + 0xb90]
mov ecx, r8d
sub ecx, 1
je 0x1800148f7
sub ecx, 1
je 0x18001476c
sub ecx, 1
je 0x180014746
sub ecx, 1
je 0x180014746
cmp ecx, 1
jne 0x180014a4e
lea rax, [0x1800140c0]
mov qword [rsi], rax
lea rax, [0x180014100]
mov qword [rsi + 8], rax
cmp dword [r10 + 0x4b0], edi
jne 0x1800149ea
mov eax, dword [r10 + 0x4c4]
cmp eax, 1
jne 0x1800149d2
cmp dword [r10 + 0xbf8], edi
jne 0x1800149d6
lea edx, [rax + 0x3f]
mov ecx, 0x100040
call fcn.180018a74
mov ecx, dword [r15 + 0x57c]
mov qword [0x18003fd40], rax
test ecx, ecx
je 0x180014716
cmp ecx, 5
jne 0x18001471b
mov edi, 0x80
mov r8d, 0x100000
mov edx, edi
mov rcx, rax
call fcn.180016590
lea rax, [0x180014540]
mov qword [rsi + 0x10], rax
lea rax, [0x180014100]
mov qword [rsi + 0x18], rax
jmp 0x1800149ea
call fcn.1800136b0
mov r10, qword [0x18003dd48]
lea rax, [0x180013f80]
mov qword [rsi], rax
lea rax, [0x180014050]
mov qword [rsi + 8], rax
jmp 0x1800146c8
mov qword [rsp + 0x70], r12
mov rbx, rdi
mov qword [rsp + 0x68], r13
nop dword [rax]
mov rcx, qword [rbx + r10 + 0xc88]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
lea edx, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_MapViewOfFileEx]
mov qword [rbx + rbp + 0x3f900], rax
add rbx, 0x20
cmp rbx, 0x200
jae 0x1800147c0
mov r10, qword [0x18003dd48]
jmp 0x180014780
lea rax, [rsp + 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x20], rax
lea r9, [0x18003fd00]
mov rax, qword [0x18003dd48]
mov r8d, dword [rax + 0x478]
mov edx, dword [rax + 0x474]
mov ecx, dword [rax + 0x574]
mov rax, qword [0x18003dd50]
call qword [rax]
lea r15, [0x18003fb00]
mov ebx, 8
mov r13d, eax
lea r12, [rsp + 0x40]
mov r14, r15
mov rbp, 0xffffffffffffffff
nop word [rax + rax]
mov ecx, r13d
mov edx, 0x40
add ecx, 0x40
cmovb rcx, rbp
call fcn.180018a74
movsxd rdx, dword [r12]
lea r12, [r12 + 4]
mov qword [r14], rax
lea r14, [r14 + 0x20]
add rax, rdx
mov qword [rbx + r15], rax
mov rcx, qword [r14 - 0x20]
add rcx, rdx
mov qword [rbx + r15 + 8], rcx
mov rcx, qword [r14 - 0x20]
add rcx, rdx
mov qword [rbx + r15 + 0x10], rcx
add rbx, 0x20
cmp rbx, 0x208
jb 0x180014820
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [0x18003fd20], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x18003fd28], rax
xor r9d, r9d
lea r8, [0x180014250]
xor edx, edx
lea rax, [rsp + 0x38]
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r10, qword [0x18003dd48]
lea rax, [0x1800143c0]
mov r15, qword [rsp + 0x30]
lea rbx, [0x180013230]
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
mov qword [rsi], rax
lea rax, [0x180014490]
mov qword [rsi + 8], rax
jmp 0x1800146c8
mov r14, rdi
mov ebx, 8
nop
mov rcx, qword [r14 + r10 + 0xc88]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
lea edx, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_MapViewOfFileEx]
mov qword [r14 + rbp + 0x3f700], rax
test rax, rax
je 0x1800149ac
mov r10, qword [0x18003dd48]
movsxd rcx, dword [r10 + 0xba8]
add rcx, rax
movsxd rax, dword [r10 + 0xbac]
mov qword [rbx + rbp + 0x3f700], rcx
add rax, qword [r14 + rbp + 0x3f700]
mov qword [rbx + rbp + 0x3f708], rax
movsxd rax, dword [r10 + 0xbb0]
add rax, qword [r14 + rbp + 0x3f700]
add r14, 0x20
mov qword [rbx + rbp + 0x3f710], rax
add rbx, 0x20
cmp rbx, 0x208
jb 0x180014900
lea rax, [0x180014110]
mov qword [rsi], rax
lea rbx, [0x180013230]
lea rax, [0x180014210]
mov qword [rsi + 8], rax
jmp 0x1800146c8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Failed__d__to_open_shared_memory__n
mov ecx, 3
mov r8d, eax
call fcn.180012910
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
test eax, eax
je 0x1800149ea
call fcn.180012ac0
lea rax, [0x180012f80]
mov qword [rsi + 0x18], rbx
mov qword [rsi + 0x10], rax
mov rdi, qword [rsp + 0x78]
xor eax, eax
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.180014aa0
add rsp, 0x80
pop r15
pop rsi
pop rbp
ret
lea rax, [0x1800144d0]
mov qword [rsi + 0x20], rax
mov rax, qword [r15 + 0x408]
mov qword [0x18003fd38], rax
xor eax, eax
jmp 0x1800149f6
lea rdx, str.Unknown_encode_type__d_n
mov ecx, 3
call fcn.180012910
mov rax, 0xffffffffffffffff
jmp 0x1800149fe
lea rdx, str.Unnown_source_type___d_n
mov ecx, 3
call fcn.180012910
xor ecx, ecx
call fcn.18001a5b8
int3