Function at 0x1800224e0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x180046bd8]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, r8
mov qword [rbp - 0x71], rdx
mov ebx, ecx
mov dword [rbp - 0x79], ecx
xor r10d, r10d
mov qword [rbp - 0x41], r10
mov qword [rbp - 0x39], 0xf
mov byte [rbp - 0x51], r10b
mov edi, ecx
lea esi, [rcx + 0xa]
mov r8, qword [rbp - 0x71]
mov qword [rsp + 0x48], r8
cmp ecx, esi
jae 0x180022645
add ebx, 0xffffffd6
lea r15, [0x180000000]
mov r12d, 0x696e
cmp ebx, 0xc
ja case.0x18002256b.7
mov ecx, dword [r15 + rbx*4 + 0x229c8]
add rcx, r15
jmp rcx
movzx eax, word [0x18003f221]
mov word [rbp + 0x18], ax
movzx eax, byte [0x18003f223]
mov byte [rbp + 0x1a], al
jmp case.0x18002256b.7
mov word [rbp + 0x1b], r12w
jmp case.0x18002256b.7
test r8, r8
jne case.0x18002256b.7
xor bl, bl
jmp 0x180022952
mov qword [0x180046cb8], rdx
mov qword [rdx + 0x80], r14
jmp case.0x18002256b.7
mov byte [rbp + 0x13], 0
jmp case.0x18002256b.7
mov byte [rbp + 0x1b], 0
jmp case.0x18002256b.7
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], r10d
mov r9, rdx
lea r8, [0x180022a00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r8, rax
mov qword [rsp + 0x48], rax
mov rdx, qword [rbp - 0x71]
xor r10d, r10d
jmp case.0x18002256b.7
mov r8d, 2
lea rdx, [0x18003f298]
lea rcx, [rbp + 0x13]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x15], 0
mov rdx, qword [rbp - 0x71]
mov r8, qword [rsp + 0x48]
xor r10d, r10d
jmp case.0x18002256b.7
movzx eax, word [0x18003f2ce]
mov word [rbp + 0x15], ax
movzx eax, byte [0x18003f2d0]
mov byte [rbp + 0x17], al
jmp case.0x18002256b.7
mov dword [rbp + 0xf], 0x656d227b
inc edi
inc ebx
cmp edi, esi
jb 0x180022557
mov ebx, dword [rbp - 0x79]
mov edi, ebx
imul esi, ebx, 0x2da
mov dword [rbp - 0x69], esi
cmp ebx, esi
movzx ebx, byte [rsp + 0x40]
ja 0x180022952
mov eax, 0x2274
cmp edi, 0x2418
ja 0x180022872
je 0x180022845
cmp edi, 0x2a
je 0x18002283c
cmp edi, 0x34
je 0x18002282d
cmp edi, 0xc24
je 0x180022824
cmp edi, 0xf08
je 0x180022950
cmp edi, 0x181e
jne 0x18002292c
mov qword [rbp - 0x21], r10
mov qword [rbp - 0x19], 0xf
mov byte [rbp - 0x31], 0
lea rax, [rbp + 0xf]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800226c5
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x31]
call fcn.180024af0
nop
lea r15, [rbp - 0x31]
mov r13, qword [rbp - 0x31]
mov r12, qword [rbp - 0x19]
cmp r12, 0x10
cmovae r15, r13
mov r14, qword [rbp - 0x21]
cmp r14, 0x10
jae 0x180022710
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp + 7], 0xf
jmp 0x180022790
mov rsi, r14
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x180022764
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800229c1
mov rcx, rax
call fcn.180038fd0
mov rcx, rax
test rax, rax
je 0x180022942
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180022772
test rcx, rcx
je 0x180022770
call fcn.180038fd0
jmp 0x180022772
xor eax, eax
mov qword [rbp - 0x11], rax
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 7], rsi
movups xmm0, xmmword [rbp - 0x11]
mov esi, dword [rbp - 0x69]
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 1], r14
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x1800227d3
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800227ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180022942
call fcn.18003900c
movups xmm0, xmmword [rbp - 0x61]
movups xmmword [rbp - 0x51], xmm0
movups xmm0, xmmword [rbp - 1]
movups xmmword [rbp - 0x41], xmm0
cmp r12, 0x10
jb 0x180022927
lea rdx, [r12 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x180022817
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180022949
mov rcx, r13
call fcn.18003900c
jmp 0x180022927
mov byte [rbp + 0x1f], 0
jmp 0x18002292c
mov rax, r8
xchg qword [0x180046cc0], rax
jmp 0x18002292c
mov word [rbp + 0x1d], ax
jmp 0x18002292c
lea r9, [rdx + 0xa8]
mov qword [rsp + 0x30], r10
lea rax, [rbp - 0x51]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r10
xor r8d, r8d
lea edx, [r8 + 0xc]
xor ecx, ecx
call fcn.18002c5c0
jmp 0x180022927
cmp edi, 0x3012
je 0x18002290b
cmp edi, 0x3c0c
je 0x1800228f7
cmp edi, 0x4806
je 0x18002289f
cmp edi, 0x5400
je 0x180022952
jmp 0x18002292c
mov rdx, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x39]
cmp rdx, rcx
jae 0x1800228c9
lea rax, [rdx + 1]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x51]
cmp rcx, 0x10
cmovae rax, qword [rbp - 0x51]
mov word [rax + rdx], 0x7d
jmp 0x1800228dc
mov r9b, 0x7d
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x51]
call fcn.180001db0
mov r8d, 0xb2
lea rdx, [rbp - 0x51]
mov rcx, qword [0x180046cb0]
call fcn.180021730
movzx ebx, al
jmp 0x180022927
lea r8, [rdx + 0x48]
lea rdx, [rbp - 0x51]
mov ecx, 0x82
call fcn.1800200b0
jmp 0x180022927
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x20], r10
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 0x16]
lea rcx, [rbp - 0x51]
call fcn.180003660
mov r8, qword [rsp + 0x48]
imul eax, dword [rbp - 0x79], 0x49
add edi, eax
cmp edi, esi
ja 0x180022952
mov rdx, qword [rbp - 0x71]
xor r10d, r10d
jmp 0x18002265d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov bl, 1
mov rcx, qword [rbp - 0x39]
cmp rcx, 0x10
jb 0x180022991
lea rdx, [rcx + 1]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002298c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002298c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003900c
movzx eax, bl
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180039520
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800244d0
nop
nop
invalid