Function at 0x18000b0b0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
lea eax, [rcx + 0xee]
mov r14, rdx
mov dword [rsp + 0x30], eax
mov ebp, ecx
cmp ecx, eax
jae case.0x18000b152.55
movsxd rsi, dword [rsp + 0xa0]
lea rcx, [0x180000000]
mov rax, qword [rsp + 0x58]
mov r15, rsi
mov r12, qword [rsp + 0xc0]
xor ebx, ebx
mov rdi, qword [rsp + 0x58]
mov r13, qword [rsp + 0x58]
mov qword [rsp + 0x40], rax
nop word [rax + rax]
cmp ebp, 0x135
ja 0x18000b257
je 0x18000b22c
lea eax, [rbp - 0x34]
cmp eax, 0xf3
ja case.0x18000b152.62
movzx eax, byte [rcx + rax + 0xb414]
mov edx, dword [rcx + rax*4 + 0xb3e8]
add rdx, rcx
jmp rdx
xor edx, edx
mov rcx, r12
lea r8d, [rdx + 0x6f]
call fcn.1800334c0
mov r12, rax
cmp byte [rax], 0xff
je 0x18000b24f
jmp 0x18000b373
mov dword [r14 + 4], ebx
jmp case.0x18000b152.62
mov rcx, qword [rsp + 0x48]
test byte [r14], 1
lea rax, [rcx + 8]
cmove rax, rcx
mov qword [rsp + 0x48], rax
add rax, 9
mov qword [rsp + 0x58], rax
jmp 0x18000b373
mov eax, dword [r14]
shr rax, 3
lea rcx, [rax*8 + 4]
add rcx, rax
mov qword [rsp + 0x48], rcx
jmp 0x18000b373
mov r8d, 0x125
mov dword [rsp + 0xa0], ebx
lea rdx, [rsp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x50]
call fcn.18004cb10
mov qword [rsp + 0x40], rax
test rax, rax
je 0x18000b24f
jmp 0x18000b373
mov qword [rsp + 0x28], rbx
lea r8, [0x18000b510]
mov r9, r14
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
test rax, rax
je 0x18000b3a4
mov byte [r14 + 0xc], 1
jmp 0x18000b373
mov byte [rsp + 0x38], 1
jmp case.0x18000b152.62
mov rdx, qword [rsp + 0x58]
mov rcx, r14
call fcn.18005454c
mov r14, rax
test rax, rax
jne 0x18000b373
mov rcx, qword [rsp + 0x40]
call fcn.18005453c
mov rax, rbx
jmp 0x18000b38c
mov eax, ebp
sub eax, 0x143
je 0x18000b2ef
sub eax, 0xe
je 0x18000b319
sub eax, 0xe
je 0x18000b2c1
sub eax, 0xe
je 0x18000b2a4
cmp eax, 0xe
jne case.0x18000b152.62
mov eax, 0x73
cmp eax, 0x73
je 0x18000b3c1
add eax, 0x4c5e
cmp eax, 0x4c5e
jbe 0x18000b285
mov qword [rsp + 0x38], r12
jmp case.0x18000b152.62
mov eax, dword [r14]
shr rax, 3
movsxd rcx, esi
add rax, r14
lea r13, [rcx*8 + 4]
add r13, rax
jmp 0x18000b373
mov ecx, dword [r14]
mov rdx, rdi
shr ecx, 3
sub ecx, esi
movsxd rax, esi
lea r8, [rcx + rax*8]
lea rcx, [rdi + 1]
call fcn.180050810
movzx eax, byte [r12]
mov byte [r15 + r14 + 4], al
add dword [r14], 8
jmp 0x18000b373
mov ecx, dword [r14]
mov esi, ebx
shr ecx, 3
mov r15, rbx
test ecx, ecx
je 0x18000b373
movzx edx, byte [r12]
lea rax, [r14 + 4]
cmp byte [rax], dl
ja 0x18000b319
inc esi
inc r15
inc rax
cmp esi, ecx
jb 0x18000b307
jmp 0x18000b373
mov eax, dword [r14]
mov ebp, 0x151
mov ecx, eax
test al, 1
je 0x18000b343
test al, 2
jne 0x18000b343
mov ecx, eax
shr rcx, 3
lea rax, [r14 + rcx*8]
add rcx, rax
mov rax, qword [rcx + 4]
mov qword [rcx + 0xd], rax
mov ecx, dword [r14]
mov edx, ecx
shr rdx, 3
add rdx, 4
shr ecx, 3
sub ecx, esi
movsxd rdi, esi
mov r8d, ecx
add rdx, r14
shl r8, 3
lea rdx, [rdx + rdi*8]
lea rcx, [rdx + 9]
call fcn.180050810
add rdi, 4
add rdi, r14
lea rcx, [0x180000000]
add ebp, 0xe
cmp ebp, dword [rsp + 0x30]
jb 0x18000b120
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x38], bl
jmp case.0x18000b152.55
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 0x36]
call fcn.1800075f0
mov byte [rsp + 0x38], al
jmp case.0x18000b152.55
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb8]
mov qword [r13], rax
mov qword [rcx], rax
mov rax, qword [rsp + 0xb0]
mov qword [rax], r13
mov rax, r14
jmp 0x18000b38c