Function at 0x18000b920
Capabilities:
Create thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xa8
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rbp - 9], rax
mov qword [rbp - 0x51], r9
mov r14, r8
mov r13, rdx
mov r12, rcx
mov r8, qword [rbp + 0x77]
mov qword [rbp - 0x59], r8
mov qword [rbp - 0x19], 0
mov eax, 0xf
mov qword [rbp - 0x11], rax
mov byte [rbp - 0x29], 0
mov qword [rbp - 0x39], 0
mov edx, eax
mov qword [rbp - 0x31], rax
mov byte [rbp - 0x49], 0
mov esi, dword [rbp + 0x7f]
lea r15d, [rsi - 8]
movzx ebx, byte [rbp - 0x69]
cmp esi, r15d
jbe 0x18000bb30
lea edi, [rsi - 0x120]
lea rdx, [0x180000000]
cmp edi, 0x10
ja case.0x18000b9b7.1
mov ecx, dword [rdx + rdi*4 + 0xbbe0]
add rcx, rdx
jmp rcx
mov eax, dword [r8]
mov dword [rbp - 0x61], eax
mov r9d, 0x30
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x29]
xor ecx, ecx
call fcn.180046fa0
jmp 0x18000bb0c
movzx eax, word [r12]
mov word [rbp - 0x61], ax
mov byte [rbp - 0x69], 4
lea r9, [rbp - 0x69]
lea r8, [rbp - 0x61]
mov edx, 0x1d
mov rcx, r14
call fcn.18000a1e0
jmp 0x18000bb0c
mov rcx, qword [r14 + 0x10]
cmp qword [r12 + 0x10], rcx
cmovae rcx, qword [r12 + 0x10]
mov qword [rbp - 0x61], rcx
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x29]
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x49]
mov ecx, 0x126
call fcn.180015ab0
cmp r13, r14
je 0x18000bb0c
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x18000ba44
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, r13
call fcn.180027360
jmp 0x18000bb0c
mov rax, qword [r9]
mov qword [rbp - 0x61], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x49]
xor r8d, r8d
mov edx, 0x100
lea rcx, [rbp - 0x61]
call fcn.18005e4e0
jmp 0x18000bb0c
mov dword [rbp - 0x61], 1
mov qword [rsp + 0x20], 0
lea r9, [rbp - 0x61]
mov r8d, 0x15c
mov rdx, r14
xor ecx, ecx
call fcn.18001d9b0
mov bl, 1
jmp 0x18000bb0c
cmp dword [r8], 0
je case.0x18000b9b7.6
cmp qword [r14 + 0x10], 0
je case.0x18000b9b7.6
cmp qword [r12 + 0x10], 0
je case.0x18000b9b7.6
jmp case.0x18000b9b7.1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, r14
lea r8, [0x180014a40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
test rax, rax
jne 0x18000bb0c
mov ecx, 0xb6
nop dword [rax]
mov eax, ecx
sub eax, 0xb6
je 0x18000bb00
cmp eax, 1
je case.0x18000b9b7.6
jmp 0x18000bb02
xor bl, bl
inc ecx
cmp ecx, 0xb8
jb 0x18000baf0
lea rdx, [0x180000000]
mov r9, qword [rbp - 0x51]
mov r8, qword [rbp - 0x59]
dec esi
dec edi
cmp esi, r15d
ja 0x18000b9a4
mov rax, qword [rbp - 0x11]
mov rdx, qword [rbp - 0x31]
cmp rdx, 0x10
jb 0x18000bb6e
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bb65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bb65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008eb9c
mov rax, qword [rbp - 0x11]
mov qword [rbp - 0x39], 0
mov qword [rbp - 0x31], 0xf
mov byte [rbp - 0x49], 0
cmp rax, 0x10
jb 0x18000bbbd
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bbb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bbb8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008eb9c
movzx eax, bl
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.18008f350
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret