Function at 0x1800527a0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x1800a0238]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov r14, qword [rbp + 0xf0]
lea r13d, [r9 + 0x240]
mov rax, r8
mov edi, r9d
mov qword [rbp - 0x80], rax
mov r12, rdx
mov rsi, rcx
cmp r9d, r13d
ja 0x180052a1d
mov r15, qword [rbp - 0x80]
xor ebx, ebx
nop dword [rax]
cmp edi, 0x3767
ja 0x180052a4b
je 0x1800529eb
cmp edi, 0x19a7
ja 0x180052980
je 0x180052a1d
mov eax, edi
sub eax, 0x132b
je 0x18005289d
sub eax, 0x55c
je 0x18005285a
sub eax, 0x60
je 0x18005284b
cmp eax, 0x60
jne 0x180052bc6
mov dword [rsp + 0x68], ebx
jmp 0x180052bc6
cmp dword [rsi + 8], 0
setne al
mov byte [r14], al
jmp 0x180052bc6
mov qword [rsp + 0x50], rbx
lea r8, [r14 + 1]
mov qword [rsp + 0x48], rbx
xor r9d, r9d
mov qword [rsp + 0x40], rbx
xor edx, edx
mov qword [rsp + 0x38], rbx
xor ecx, ecx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x7e69
mov qword [rsp + 0x20], rsi
call fcn.180048690
test eax, eax
jne 0x180052a21
jmp 0x180052bc6
mov rcx, qword [rsi + 0xb8]
test rcx, rcx
je 0x1800528af
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x50], rax
mov byte [rbp - 0x48], al
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rax
mov byte [rbp - 0x28], al
mov byte [rbp - 8], al
mov byte [rbp + 0x20], al
mov byte [rbp + 0x40], al
mov dword [rsi], eax
lea rax, [rbp - 0x48]
mov qword [rbp - 0x18], rbx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x50], rbx
lea rbx, [rsi + 8]
mov qword [rbp - 0x30], 0xf
mov qword [rbp - 0x10], 0xf
mov qword [rbp + 0x10], 0xf
mov qword [rbp + 0x38], 0xf
mov qword [rbp + 0x58], 0xf
mov qword [rbp + 0x60], 0xffffffffffffffff
cmp rbx, rax
je 0x18005294d
mov rcx, rbx
call fcn.180006f30
movups xmm1, xmmword [rbp - 0x38]
mov qword [rbp - 0x30], 0xf
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
xor ebx, ebx
mov qword [rbp - 0x38], rbx
mov byte [rbp - 0x48], bl
jmp 0x18005294f
xor ebx, ebx
lea rcx, [rsi + 0x28]
lea rdx, [rbp - 0x28]
call fcn.180007ef0
mov rax, qword [rbp + 0x68]
lea rcx, [rbp - 0x50]
mov qword [rsi + 0xb8], rax
mov rax, qword [rbp + 0x70]
mov qword [rsi + 0xc0], rax
call fcn.1800074d0
jmp 0x180052bc6
mov eax, edi
sub eax, 0x2c9d
je 0x1800529df
sub eax, 0x60
je 0x1800529aa
sub eax, 0x60
je 0x180052a1d
cmp eax, 0x9aa
jne 0x180052bc6
mov r15, r14
jmp 0x180052bc6
mov qword [rsp + 0x28], rbx
lea r8, [0x18001fa40]
mov r9, rsi
mov dword [rsp + 0x20], ebx
xor edx, edx
mov qword [rsi + 0x70], r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
mov qword [0x1800a11e0], rax
setne byte [rsp + 0x68]
jmp 0x180052bc6
mov qword [0x1800a11d8], rsi
jmp 0x180052bc6
movzx eax, byte [rax]
lea rdx, [rsp + 0x60]
mov byte [rsp + 0x60], al
mov r9, r15
lea rax, [rbp - 0x70]
mov r8d, 0x2b71
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.180011ed0
test al, al
jne 0x180052bc6
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x68]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.18005fbe0
mov rbx, qword [rsp + 0x1e0]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp edi, 0x40e8
ja 0x180052b3b
je 0x180052b19
mov eax, edi
sub eax, 0x37c7
je 0x180052b0c
sub eax, 0x60
je 0x180052b04
sub eax, 0x60
je 0x180052a82
cmp eax, 0x60
je 0x180052a1d
jmp 0x180052bc6
mov rdx, qword [rsi]
mov rbx, rdx
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x180052ab6
mov ecx, dword [r15]
cmp dword [rax + 0x20], ecx
jae 0x180052aa0
mov rax, qword [rax + 0x10]
jmp 0x180052aa6
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180052a95
cmp rbx, rdx
je 0x180052ab6
cmp ecx, dword [rbx + 0x20]
jae 0x180052af0
lea r9, [rsp + 0x78]
mov qword [rsp + 0x70], r15
lea r8, [rsp + 0x70]
mov rcx, rsi
lea rdx, [0x18007fa4c]
call fcn.180001c30
mov r8, rbx
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x78]
mov rcx, rsi
lea r9, [rax + 0x20]
call fcn.180003c00
mov rbx, qword [rbp - 0x78]
movups xmm0, xmmword [rbp - 0x68]
mov byte [rsp + 0x68], 1
movups xmmword [rbx + 0x28], xmm0
xor ebx, ebx
jmp 0x180052bc6
mov dword [rbp - 0x60], ebx
jmp 0x180052bc6
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x68], rax
jmp 0x180052bc6
mov rax, qword [0x1800a1210]
test rax, rax
je 0x180052bc6
mov rcx, qword [rsi]
xor edx, edx
mov r8d, 0x8000
call rax
jmp 0x180052bc6
mov eax, edi
sub eax, 0x6f00
je 0x180052ba0
sub eax, 0x60
je 0x180052b92
sub eax, 0x60
je 0x180052b84
cmp eax, 0x60
jne 0x180052bc6
mov r9, r14
mov r8, r12
mov edx, 0x16d4
mov rcx, rsi
call fcn.18001e640
xor r9d, r9d
mov dword [rsp + 0x70], eax
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov ecx, 0x5992
call fcn.18004fdf0
jmp 0x180052a21
test r12, r12
jne 0x180052bc6
lea r9, str.McBlogger
jmp 0x180052bac
test r14, r14
jne 0x180052bc6
lea r9, str.b___NULL
jmp 0x180052bac
test rsi, rsi
jne 0x180052bc6
lea r9, str.Level:_10
lea r8, [0x180082820]
mov dword [rsp + 0x70], ebx
mov edx, 0x5836
lea rcx, [rsp + 0x70]
call fcn.18000e4c0
add edi, 0x60
cmp edi, r13d
ja 0x180052a1d
mov rax, qword [rbp - 0x80]
jmp 0x180052800