Function at 0x18003dae0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
movdqa xmm0, xmmword [0x1800841b0]
xor edi, edi
movdqu xmmword [rbp - 0x16], xmm0
mov rsi, r9
mov r15d, r8d
movdqu xmmword [rbp - 0x56], xmm0
mov qword [rbp - 0x30], rdi
lea ecx, [rdi + 0x30]
xorps xmm0, xmm0
mov word [rbp - 0x28], di
mov r13, rdx
mov byte [rbp - 0x26], dil
mov qword [rbp - 0x70], rdi
mov word [rbp - 0x68], di
mov byte [rbp - 0x66], dil
movdqa xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov qword [rbp], rdi
mov qword [rbp + 0x10], rdi
call fcn.1800544d8
xorps xmm0, xmm0
imul r12d, r15d, 0x65e
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ebx, 1
mov r14d, r15d
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 8], rax
xor eax, eax
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rdi
mov dword [rbp + 0x88], edi
mov qword [rbp + 0xe8], rdi
mov word [rbp + 0xf8], di
mov dword [rbp + 0xfc], edi
mov qword [rbp + 0x100], rdi
mov edi, dword [rsp + 0x38]
mov qword [rbp + 0xd0], rax
mov byte [rbp + 0xd8], al
mov word [rbp + 0x120], ax
movsd qword [rbp + 0x20], xmm2
movsd qword [rbp + 0x118], xmm2
mov dword [rbp + 0x38], ebx
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
movdqa xmmword [rbp + 0x60], xmm0
movdqa xmmword [rbp + 0x70], xmm1
mov qword [rbp + 0x80], 0xffffffffffffffff
mov qword [rbp + 0xf0], 0xf
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0x108], xmm0
mov byte [rbp + 0x122], al
cmp r15d, r12d
ja 0x18003e089
lea rcx, [0x18009d0f0]
lea rax, [0x180008920]
cmp r14d, 0x1acc
ja 0x18003df03
je 0x18003ded7
mov eax, r14d
sub eax, 0xe
je 0x18003dea7
sub eax, 0x107
je 0x18003de9a
sub eax, 0x12
je 0x18003de73
sub eax, 0x7d1
je 0x18003dd53
cmp eax, 0x8ea
jne 0x18003e076
xor r9d, r9d
lea rdx, [rsp + 0x40]
xor r8d, r8d
mov ecx, 0xb6
call fcn.180028060
mov rdx, qword [rsp + 0x48]
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
cmp rdx, qword [rsp + 0x50]
je 0x18003dced
lea rax, [rbp - 0x30]
mov qword [rdx], rax
mov rdx, qword [rsp + 0x48]
add rdx, 8
mov qword [rsp + 0x48], rdx
jmp 0x18003dd01
lea r8, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1800017f0
mov rdx, qword [rsp + 0x48]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
cmp rdx, qword [rsp + 0x50]
je 0x18003dd20
lea rax, [rbp - 0x70]
mov qword [rdx], rax
add qword [rsp + 0x48], 8
jmp 0x18003dd2f
lea r8, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.1800017f0
mov eax, dword [0x18009d180]
lea rdx, [rsp + 0x40]
mov r8d, 0x11b
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x30]
call fcn.180023580
jmp 0x18003e06f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.180059de8
mov eax, 0x1bb
lea r9, [rsp + 0x30]
lea r8, [0x18009d138]
mov word [rsp + 0x30], ax
lea rdx, [rbp - 0x30]
mov ecx, 0x9f
call fcn.18002cfd0
mov esi, 0x4d
nop dword [rax]
cmp esi, 3
je 0x18003de10
cmp esi, 0x4d
je 0x18003dde3
cmp esi, 0x116
je 0x18003de42
cmp esi, 0x213
je 0x18003de67
cmp esi, 0x353d
jne 0x18003de24
cmp qword [0x18009d170], 0x10
lea rdx, [0x18009d158]
mov r8, qword [0x18009d168]
lea rcx, [rbp - 0x66]
cmovae rdx, qword [0x18009d158]
call fcn.180033410
jmp 0x18003de24
mov eax, 0x1bb
lea r8, [rsp + 0x30]
mov r9d, 0x116
mov word [rsp + 0x30], ax
xor edx, edx
lea rcx, [rbp - 0x70]
call fcn.18004f9b0
lea rax, [0x18002b420]
mov qword [rbp - 0x70], rax
jmp 0x18003de24
mov rcx, qword [rbp - 0x70]
cmp dword [rcx], ebx
jne 0x18003de67
mov eax, dword [0x18009d158]
mov dword [rcx + 0x230], eax
add esi, 0x34f0
cmp esi, 0x108b0
jbe 0x18003dd90
mov rsi, qword [rbp + 0x198]
jmp 0x18003e06f
mov r9d, 0xd0
mov dword [rsp + 0x38], 4
lea r8, [rbp - 0x70]
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1800171e0
mov qword [0x18009d158], rax
mov rsi, qword [rbp + 0x198]
jmp 0x18003e06f
mov rcx, qword [rbp + 0x180]
lea rdx, [rsp + 0x30]
mov r9d, 0x38
mov dword [rsp + 0x30], 3
mov r8, rsi
call fcn.18004d2a0
jmp 0x18003e06f
mov dword [r13 + 0x24], 0xc
jmp 0x18003e076
mov r9, rcx
xor r8d, r8d
xor ecx, ecx
mov edx, 0x120
call fcn.180041a00
lea rdx, [0x18009d0f8]
mov ecx, 0x55
call fcn.180017fb0
test al, al
je 0x18003e08b
jmp 0x18003e06f
lea rax, [rsp + 0x40]
mov qword [rbp - 0x40], rax
mov eax, dword [0x18009d180]
mov dword [rbp - 0x38], eax
mov eax, dword [0x18009d184]
mov dword [rbp - 0x34], eax
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x130], xmm0
jmp 0x18003e076
cmp r14d, 0x23b6
je 0x18003e03e
cmp r14d, 0x2ca0
je 0x18003df3b
cmp r14d, 0x358a
je 0x18003df34
cmp r14d, 0x3e74
je 0x18003e089
jmp 0x18003e076
xor edi, edi
jmp 0x18003e076
mov qword [rsp + 0x30], rax
mov esi, 0x12b
mov eax, esi
sub eax, 0x11c
je 0x18003df91
sub eax, 0xf
je 0x18003df5c
cmp eax, 0x2a19
je 0x18003dfaa
jmp 0x18003df9c
mov rdx, qword [0x18009e138]
cmp rdx, qword [0x18009e140]
je 0x18003df7e
mov rax, qword [rsp + 0x30]
mov qword [rdx], rax
add qword [0x18009e138], 8
jmp 0x18003df9c
lea r8, [rsp + 0x30]
lea rcx, [0x18009e130]
call fcn.1800017f0
jmp 0x18003df9c
lea rcx, [rsp + 0x30]
call qword [0x18009e158]
add esi, 0x2c62
cmp esi, 0x8526
jbe 0x18003df45
mov esi, 0x8a
nop
mov eax, esi
sub eax, 0x8a
je 0x18003dfe4
sub eax, 0x45
je 0x18003dffa
cmp eax, 6
jne 0x18003dfed
lea rcx, [0x18009d0f0]
mov qword [rbp + 0x108], rcx
lea rdx, [rbp + 0x110]
mov ecx, 0xdf
call fcn.1800228f0
jmp 0x18003dfed
lea rax, [rsp + 0x40]
mov qword [rbp], rax
add esi, 0x4b
cmp esi, 0x16b
jb 0x18003dfb0
jmp 0x18003e022
mov rax, qword [rbp]
lea rdx, [rsp + 0x30]
shr rax, 0x20
xor r9d, r9d
xor ecx, ecx
mov r8d, 0xf3
test eax, eax
jne 0x18003e019
mov eax, dword [rbp]
mov dword [rsp + 0x30], eax
call fcn.1800459c0
lea r9, [rbp]
xor r8d, r8d
xor edx, edx
mov ecx, 0x10c
call fcn.180014840
mov rsi, qword [rbp + 0x198]
jmp 0x18003e06f
xor eax, eax
lea r9, [rbp + 0x130]
mov qword [rsp + 0x28], rax
lea r8, [0x1800293d0]
xor edx, edx
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18003e08b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x18009d0f0]
imul eax, r15d, 0xa3
add r14d, eax
cmp r14d, r12d
jbe 0x18003dc5c
mov ebx, edi
lea rcx, [rbp + 0x80]
call fcn.180004cf0
mov rdi, qword [rbp + 0x68]
test rdi, rdi
je 0x18003e10e
mov rsi, qword [rbp + 0x70]
cmp rdi, rsi
je 0x18003e0c5
nop dword [rax]
mov rcx, rdi
call fcn.180032260
add rdi, 0x20
cmp rdi, rsi
jne 0x18003e0b0
mov rdi, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x78]
mov rax, rdi
sub rdx, rdi
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x18003e0f5
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003e2e6
mov rcx, rdi
call fcn.180054514
xor r14d, r14d
xorps xmm0, xmm0
mov qword [rbp + 0x68], r14
movdqa xmmword [rbp + 0x70], xmm0
jmp 0x18003e111
xor r14d, r14d
mov rcx, qword [rbp + 0x50]
test rcx, rcx
je 0x18003e15b
mov rdx, qword [rbp + 0x60]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff0
cmp rdx, 0x1000
jb 0x18003e14a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003e2e6
call fcn.180054514
xorps xmm0, xmm0
mov qword [rbp + 0x60], r14
movdqa xmmword [rbp + 0x50], xmm0
lea rcx, [rbp + 8]
call fcn.180004c90
mov rdi, qword [rsp + 0x58]
test rdi, rdi
je 0x18003e1fc
mov rsi, qword [rsp + 0x60]
cmp rdi, rsi
je 0x18003e196
nop dword [rax]
mov rcx, rdi
call fcn.180004c30
add rdi, 0x28
cmp rdi, rsi
jne 0x18003e180
mov rdi, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x68]
movabs rax, 0x6666666666666667
sub rcx, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rdi
lea rdx, [rdx + rdx*4]
shl rdx, 3
cmp rdx, 0x1000
jb 0x18003e1e6
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003e2e6
mov rcx, rdi
call fcn.180054514
xorps xmm0, xmm0
mov qword [rsp + 0x58], r14
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x18003e24a
mov rdx, qword [rsp + 0x50]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x18003e237
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003e2e6
call fcn.180054514
xorps xmm0, xmm0
mov qword [rsp + 0x50], r14
movdqa xmmword [rsp + 0x40], xmm0
mov rdx, qword [rbp - 0x4e]
cmp rdx, 0x10
jb 0x18003e281
mov rcx, qword [rbp - 0x66]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e27c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003e2e6
call fcn.180054514
mov rdx, qword [rbp - 0xe]
movdqa xmm0, xmmword [0x1800841b0]
mov byte [rbp - 0x66], 0
movdqu xmmword [rbp - 0x56], xmm0
cmp rdx, 0x10
jb 0x18003e2c9
mov rcx, qword [rbp - 0x26]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e2c4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003e2e6
call fcn.180054514
mov eax, ebx
mov rbx, qword [rsp + 0x288]
add rsp, 0x240
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180058754
int3