Function at 0x1800428c0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov r12, rcx
mov r14, r9
lea ecx, [rdx + 0x8bb]
mov r13, r8
mov dword [rbp - 0x59], ecx
cmp edx, ecx
jae 0x1800429bc
mov r15, qword [rbp - 0x21]
mov eax, 0x11
mov rsi, qword [rbp - 0x21]
mov ebx, dword [rbp - 0x31]
mov r9d, 7
xor r8d, r8d
mov edi, ebx
lea r10d, [r9 + 9]
cmp edx, 0x1b4
ja 0x180042d8c
je 0x180042d7d
cmp edx, 0x117
ja 0x180042ac4
je 0x180042a3f
mov eax, edx
sub eax, 0x63
je 0x1800429f7
sub eax, 0x1f
je 0x180042985
cmp eax, 0x76
jne 0x180042d62
test r15, r15
je 0x180042ef3
lea r9d, [r10 + 0x62]
mov qword [rbp - 0x19], r15
xor edx, edx
lea rcx, [rbp - 0x19]
call fcn.18003a680
mov dword [rbp - 0x19], eax
mov edx, dword [rbp + 0x6f]
mov ecx, dword [rbp - 0x59]
jmp 0x180042d62
mov rax, qword [r14]
lea r9, [rbp - 0x41]
mov ebx, r8d
mov qword [rbp - 0x41], rax
mov r8d, 0x9f
mov dword [rbp - 0x31], ebx
xor edx, edx
xor ecx, ecx
call fcn.1800185f0
test eax, eax
jne 0x18004297a
mov ecx, 0x71
nop
mov eax, ecx
sub eax, 0x71
je 0x1800429da
cmp eax, 0x79
jne 0x1800429e1
mov eax, dword [rbp - 0x39]
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp - 0x39], 0x1023
add ecx, 0x79
cmp ecx, 0x163
jb 0x1800429b0
mov edx, dword [rbp + 0x6f]
mov ecx, dword [rbp - 0x59]
jmp 0x180042d62
mov rax, qword [r14]
test rax, rax
je 0x180042f00
cmp qword [r12], 0
je 0x180042f00
mov r9d, 0x18
mov word [rbp - 0x51], r10w
lea r8, [rbp - 0x51]
mov qword [rbp - 0x41], rax
lea rdx, str.Names
lea rcx, [rbp - 0x41]
call fcn.18007e300
mov edx, dword [rbp + 0x6f]
mov r15, rax
mov ecx, dword [rbp - 0x59]
jmp 0x180042d62
mov word [rbp - 0x51], ax
lea rdx, [rbp - 0x41]
mov rax, qword [r14]
lea rcx, [rbp - 0x51]
mov dword [rbp - 0x41], r8d
mov r9d, 0x32
lea r8, [rbp - 0x49]
mov qword [rbp - 0x49], rax
call fcn.180033390
mov rbx, rax
mov rax, qword [r14]
mov rcx, qword [rax + 0x18]
cmp dword [rcx + 0x18], 1
jbe 0x180042ee5
xor edx, edx
mov qword [rbp - 0x31], rax
lea r9, [rbp - 0x31]
xor ecx, ecx
lea r8d, [rdx + 0x5f]
call fcn.1800249d0
mov rax, qword [r14]
lea rcx, [rbp - 0x31]
xor r9d, r9d
mov qword [rbp - 0x31], rax
mov r8d, 0x99
mov qword [rsp + 0x20], 0
mov rdx, rbx
call fcn.18001cad0
mov edx, dword [rbp + 0x6f]
mov ecx, dword [rbp - 0x59]
lea ebx, [rdi + rax]
mov dword [rbp - 0x31], ebx
jmp 0x180042d62
mov eax, edx
sub eax, 0x11f
je 0x180042eb9
sub eax, 0x6e
je 0x180042b2f
cmp eax, 0x1f
jne 0x180042d62
mov rax, qword [r14]
lea rcx, str.FitH
mov qword [rsp + 0x48], r8
xor r9d, r9d
mov qword [rsp + 0x40], r8
xor edx, edx
mov qword [rbp - 0x49], rax
lea rax, [rbp - 0x49]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], r8
xor r8d, r8d
mov dword [rsp + 0x20], 0x18
call fcn.18001ba10
mov edx, dword [rbp + 0x6f]
add ebx, eax
mov ecx, dword [rbp - 0x59]
mov dword [rbp - 0x31], ebx
jmp 0x180042d62
mov edi, dword [rbp - 0x19]
test edi, edi
je 0x180042c08
mov word [rbp - 0x51], r9w
lea eax, [rdi - 2]
mov r9d, 0x32
mov dword [rbp - 0x41], eax
lea r8, [rbp - 0x49]
mov qword [rbp - 0x49], r15
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 0x51]
call fcn.180033390
mov qword [rbp - 0x49], rax
lea r9, [rbp - 0x49]
mov rax, qword [r12]
lea r8, [rbp - 0x41]
mov edx, 0x41
mov qword [rbp - 0x41], rax
xor ecx, ecx
call fcn.1800609b0
test eax, eax
jle 0x180042bfc
mov ebx, 0x95
nop dword [rax]
cmp ebx, 0x95
je 0x180042bab
cmp ebx, 0x1e44
jne 0x180042beb
xor r8d, r8d
mov eax, r8d
jmp 0x1800429bf
mov rdx, qword [r12]
lea rcx, [rbp - 0x49]
xor r14d, r14d
mov qword [rbp - 0x49], r15
xor r9d, r9d
mov qword [rsp + 0x20], r14
mov r8d, 0x99
call fcn.18001cad0
xor r9d, r9d
mov qword [rbp - 0x49], r15
mov r8d, 0x99
mov qword [rsp + 0x20], r14
mov rdx, r13
lea rcx, [rbp - 0x49]
call fcn.18001cad0
add ebx, 0x1daf
cmp ebx, 0x3b5e
jbe 0x180042b90
mov ebx, dword [rbp - 0x31]
mov ecx, dword [rbp - 0x59]
mov r9d, 7
mov edx, dword [rbp + 0x6f]
lea r14d, [rdi - 4]
test r14d, r14d
js 0x180042d5e
mov edi, 0x12a
nop word [rax + rax]
cmp edi, 0x12a
je 0x180042d0c
cmp edi, 0x3462
jne 0x180042d33
test r14d, r14d
je 0x180042c65
mov rax, qword [r12]
lea r9, [rbp - 0x49]
lea r8, [rbp - 0x41]
mov qword [rbp - 0x41], rax
mov edx, 0x41
mov qword [rbp - 0x49], rsi
xor ecx, ecx
call fcn.1800609b0
test eax, eax
jns 0x180042d33
mov ebx, 0x106
nop word [rax + rax]
mov eax, ebx
sub eax, 0x104
je 0x1800429bc
sub eax, 1
je 0x180042cf5
cmp eax, 1
jne 0x180042cfc
mov rax, qword [r12]
lea rcx, [rbp - 9]
mov dword [rsp + 0x38], 0x63
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov r8, rsi
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], 0
xor edx, edx
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x49], r15
call fcn.180083a10
mov dword [rsp + 0x38], 0x63
lea rax, [rbp - 0x49]
mov qword [rsp + 0x30], r13
lea rcx, [rbp + 7]
mov qword [rsp + 0x28], 0
xor r9d, r9d
mov r8, rsi
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp - 0x49], r15
call fcn.180083a10
jmp 0x180042cfc
mov dword [rbp - 0x39], 0
dec ebx
cmp ebx, 0x103
ja 0x180042c70
jmp 0x180042d33
mov word [rbp - 0x29], r9w
lea r8, [rbp - 0x21]
mov r9d, 0x32
mov dword [rbp - 0x11], r14d
lea rdx, [rbp - 0x11]
mov qword [rbp - 0x21], r15
lea rcx, [rbp - 0x29]
call fcn.180033390
mov rsi, rax
add edi, 0x3338
mov r9d, 7
cmp edi, 0x6670
jbe 0x180042c20
sub r14d, 2
jns 0x180042c15
mov edx, dword [rbp + 0x6f]
mov ebx, dword [rbp - 0x31]
mov ecx, dword [rbp - 0x59]
mov r14, qword [rbp + 0x7f]
mov eax, 0x11
add edx, 0x95
mov dword [rbp + 0x6f], edx
cmp edx, ecx
jae 0x1800429bc
jmp 0x18004290f
cmp qword [r14], 0
jne 0x180042d67
mov byte [rbp - 0x39], 0
jmp 0x1800429bc
cmp edx, 0x2b7
ja 0x180042e72
je 0x180042e69
mov eax, edx
sub eax, 0x222
je 0x180042e1d
sub eax, 0x1f
je 0x180042dd1
cmp eax, 8
jne 0x180042d62
lea r8, [rbp - 0x41]
mov dword [rbp - 0x41], 1
mov edx, 0xfe
mov rcx, r14
call fcn.1800862a0
mov edx, dword [rbp + 0x6f]
mov ecx, dword [rbp - 0x59]
jmp 0x180042d62
mov rax, qword [r14]
lea rcx, [rbp + 0x17]
movss xmm0, dword [r12]
xor r9d, r9d
mov qword [rbp - 0x49], rax
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
lea r8, [rbp - 0x41]
lea edx, [r9 + 0x45]
movss dword [rbp - 0x41], xmm0
call fcn.18004e9e0
mov eax, dword [rax]
add ebx, eax
mov dword [rbp - 0x31], ebx
jne 0x180042f10
mov edx, dword [rbp + 0x6f]
mov ecx, dword [rbp - 0x59]
jmp 0x180042d62
mov rdx, qword [r12]
lea rcx, [rbp - 0x49]
mov qword [rsp + 0x20], r8
xor r9d, r9d
mov r8d, 0x99
mov qword [rbp - 0x49], r15
call fcn.18001cad0
xor r9d, r9d
mov qword [rbp - 0x49], r15
mov r8d, 0x99
mov qword [rsp + 0x20], 0
mov rdx, r13
lea rcx, [rbp - 0x49]
call fcn.18001cad0
mov edx, dword [rbp + 0x6f]
mov ecx, dword [rbp - 0x59]
jmp 0x180042d62
mov dword [rbp - 0x39], r8d
jmp 0x180042d67
mov eax, edx
sub eax, 0x2d6
je 0x180042ba3
sub eax, 8
je 0x180042e92
cmp eax, 0x6e
je 0x1800429bc
jmp 0x180042d62
mov eax, 0x12
cmp eax, 0x12
je 0x180042ea9
cmp eax, 0xa32
je 0x1800429bc
jmp 0x180042ead
mov byte [rbp - 0x39], 1
add eax, 0xa20
cmp eax, 0x1440
jbe 0x180042e97
mov qword [rsp + 0x28], r8
mov r9, r14
mov dword [rsp + 0x20], r8d
xor edx, edx
lea r8, [0x180078600]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [rbp + 0x6f]
mov ecx, dword [rbp - 0x59]
mov qword [r14], rax
jmp 0x180042d62
mov edx, dword [rbp + 0x6f]
mov ebx, dword [rbp - 0x31]
mov ecx, dword [rbp - 0x59]
jmp 0x180042d62
mov eax, 0x1033
jmp 0x1800429bf
mov eax, 0x1039
jmp 0x1800429bf
mov rax, qword [r14]
xor r9d, r9d
xor edx, edx
mov r8d, 0x90
mov rcx, qword [rax + 0x10]
lea rax, [rbp - 0x21]
mov qword [rbp - 0x21], rcx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.18002e6b0
jmp 0x1800429bf