Function at 0x1800176c0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
mov rax, qword [0x1800923a0]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r12, r9
mov qword [rbp - 0x21], rcx
lea r9d, [r8 + 0x6e]
mov eax, r8d
mov dword [rbp - 0x25], eax
mov r15, rdx
mov dword [rbp - 0x49], r9d
cmp r8d, r9d
jae case.0x18001774e.53
movss xmm6, dword [0x18008bd70]
lea rdx, [0x180000000]
mov r13, qword [rbp - 0x41]
mov rbx, qword [rbp - 0x41]
mov esi, dword [rbp - 0x31]
nop dword [rax]
add eax, 0xffffffd0
cmp eax, 0x6e
ja case.0x18001774e.59
movzx eax, byte [rdx + rax + 0x18060]
mov ecx, dword [rdx + rax*4 + 0x18030]
add rcx, rdx
jmp rcx
mov rax, qword [rbp - 0x41]
mov r13, qword [rax + 0x30]
jmp case.0x18001774e.59
mov rdx, qword [rbp - 0x41]
mov eax, dword [rdx + 0x18]
mov ecx, dword [rdx + 0x1c]
mov dword [rbp - 0x29], eax
mov eax, dword [rdx + 0x28]
mov dword [rbp - 0x31], eax
mov dword [rbp - 0x19], ecx
jmp 0x180017893
mov rax, qword [r15 + 8]
add rax, 0x2090
mov qword [rbp - 0x41], rax
jmp case.0x18001774e.59
mov edi, 0x117
mov eax, edi
sub eax, 0x117
je 0x180017867
sub eax, 0x27
je 0x1800177e1
cmp eax, 0x27
jne 0x180017880
mov r10, qword [r15 + 8]
lea rdx, [rbp - 9]
xor r9d, r9d
mov rcx, r15
mov rax, qword [r10 + 0x2268]
mov qword [rsp + 0x28], rax
lea r8d, [r9 + 6]
mov dword [rsp + 0x20], 0
call qword [r10 + 0x2250]
test eax, eax
jne 0x18001782c
jmp 0x180017880
mov eax, dword [rbp - 0x29]
mov rcx, r15
mov r14d, dword [rbp - 0x19]
mov r9, qword [r15 + 8]
mov edx, dword [rbp - 0x15]
mov byte [rbp - 7], al
mov eax, r14d
shr eax, 0x10
mov byte [rbp - 6], al
mov eax, r14d
shr eax, 8
mov byte [rbp - 5], al
mov rax, qword [r15]
mov byte [rbp - 4], r14b
mov r8, qword [r9 + 0x2268]
add rdx, qword [rax + 0x268]
call qword [r9 + 0x2240]
test eax, eax
je 0x180017880
cmp eax, 1
jne case.0x18001774e.53
mov rax, qword [r15]
mov dword [rax], 5
mov eax, dword [rbp - 0x45]
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.180077c10
mov rbx, qword [rsp + 0x120]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, dword [rbp - 0x29]
shr eax, 0x10
mov byte [rbp - 9], al
mov eax, dword [rbp - 0x29]
shr eax, 8
mov byte [rbp - 8], al
mov dword [rbp - 0x15], 8
add edi, 0x27
cmp edi, 0x18c
jb 0x180017790
mov r9d, dword [rbp - 0x49]
lea rdx, [0x180000000]
mov eax, dword [rbp - 0x25]
add eax, 0xa
mov dword [rbp - 0x25], eax
cmp eax, r9d
jb 0x180017730
jmp case.0x18001774e.53
mov qword [rsp + 0x28], 0
lea r8, [0x18002b940]
mov r9, r15
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r15], rax
test rax, rax
je 0x180017e8c
mov r9d, 0xe2
mov dword [rbp - 0x39], 1
lea r8, [rbp - 0x39]
mov rdx, r15
xor ecx, ecx
call fcn.18000d780
mov byte [rbp - 0x45], 1
jmp 0x18001788f
mov rax, qword [r15]
mov rcx, r15
mov r9, qword [r15 + 8]
mov rdx, qword [rax + 0x268]
mov r8, qword [r9 + 0x2268]
add rdx, 0x16
call qword [r9 + 0x2240]
test eax, eax
jne 0x180017827
mov r10, qword [r15 + 8]
xor r14d, r14d
mov rdx, qword [rbp - 0x41]
xor r9d, r9d
add rdx, 0x38
mov rcx, r15
mov rax, qword [r10 + 0x2268]
lea r8d, [r14 + 0x10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
call qword [r10 + 0x2250]
test eax, eax
jne 0x18001782c
mov edi, 0x1a
nop dword [rax]
cmp edi, 0x1a
je 0x180017a05
cmp edi, 0xc4
je 0x1800179c1
cmp edi, 0x16e
jne 0x180017a2e
mov r10, qword [r15 + 8]
lea rdx, [rbp - 9]
xor r9d, r9d
mov rcx, r15
mov rax, qword [r10 + 0x2268]
mov qword [rsp + 0x28], rax
lea r8d, [r9 + 5]
mov dword [rsp + 0x20], r14d
call qword [r10 + 0x2250]
test eax, eax
jne 0x18001782c
jmp 0x180017a2e
mov r9, qword [r15 + 8]
mov rax, r13
mov edx, dword [rbp - 0x11]
mov rcx, r15
shr rax, 0x10
mov byte [rbp - 7], al
mov rax, r13
shr rax, 8
mov byte [rbp - 6], al
mov rax, qword [r15]
mov byte [rbp - 5], r13b
mov r8, qword [r9 + 0x2268]
add rdx, qword [rax + 0x268]
call qword [r9 + 0x2240]
test eax, eax
jne 0x180017827
jmp 0x180017a2e
movzx eax, byte [rbp - 0x31]
mov rcx, r13
shr rcx, 0x20
dec al
shl al, 4
and cl, 0xf
or cl, al
mov dword [rbp - 0x11], 0x11
mov rax, r13
mov byte [rbp - 9], cl
shr rax, 0x18
mov byte [rbp - 8], al
add edi, 0xaa
cmp edi, 0x218
jb 0x180017970
jmp 0x18001788f
mov rax, qword [r15 + 8]
mov rcx, qword [rax + 0x2140]
test rcx, rcx
je case.0x18001774e.59
cmp dword [rcx], 0
jbe case.0x18001774e.59
mov rax, qword [r15]
cmp qword [rax + 0x270], 0
jbe case.0x18001774e.59
mov qword [rsp + 0x38], 0
xor r9d, r9d
mov qword [rsp + 0x30], 0
xor r8d, r8d
mov dword [rsp + 0x28], 0x44
xor edx, edx
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.18000de80
mov rax, qword [r15]
mov rcx, r15
mov r9, qword [r15 + 8]
mov rdx, qword [rax + 0x270]
mov r8, qword [r9 + 0x2268]
add rdx, 4
call qword [r9 + 0x2240]
test eax, eax
jne 0x180017827
mov rax, qword [r15 + 8]
xor r14d, r14d
mov rcx, qword [rax + 0x2140]
cmp dword [rcx], r14d
jbe 0x18001788f
mov edi, 0x110
nop dword [rax + rax]
cmp edi, 0x4e5c0
ja 0x180017bec
je 0x180017b7c
cmp edi, 0x22dd0
ja 0x180017b8d
je 0x180017b85
cmp edi, 0x110
je 0x180017b62
cmp edi, 0x8c40
je 0x180017b5a
cmp edi, 0x11770
je 0x180017b47
cmp edi, 0x1a2a0
jne 0x180017cc1
shr rbx, 8
mov byte [rbp - 6], bl
shr rbx, 8
mov byte [rbp - 7], bl
shr rbx, 8
jmp 0x180017cc1
shr rbx, 8
mov byte [rbp - 4], bl
shr rbx, 8
mov byte [rbp - 5], bl
jmp 0x180017cc1
mov byte [rbp - 3], bl
jmp 0x180017cc1
mov rax, qword [r15 + 8]
lea rcx, [r14 + r14*2]
mov rdx, qword [rax + 0x2140]
mov rax, qword [rdx + 8]
mov rbx, qword [rax + rcx*8]
mov byte [rbp - 2], bl
shr rbx, 8
jmp 0x180017cc1
mov byte [rbp - 8], bl
jmp 0x180017cc1
cmp edi, 0x2b900
je 0x180017b7c
cmp edi, 0x34430
je 0x180017bcc
cmp edi, 0x3cf60
je 0x180017bbd
cmp edi, 0x45a90
jne 0x180017cc1
shr rbx, 8
mov byte [rbp + 4], bl
jmp 0x180017cc1
mov byte [rbp + 6], bl
shr rbx, 8
mov byte [rbp + 5], bl
jmp 0x180017cc1
mov rax, qword [r15 + 8]
lea rcx, [r14 + r14*2]
mov byte [rbp - 9], bl
mov rdx, qword [rax + 0x2140]
mov rax, qword [rdx + 8]
mov rbx, qword [rax + rcx*8 + 8]
jmp 0x180017cc1
cmp edi, 0x79db0
ja 0x180017c62
je 0x180017c45
cmp edi, 0x570f0
je 0x180017c39
cmp edi, 0x5fc20
je 0x180017c2d
cmp edi, 0x68750
je 0x180017b7c
cmp edi, 0x71280
jne 0x180017cc1
mov byte [rbp], bl
shr rbx, 8
mov byte [rbp - 1], bl
jmp 0x180017cc1
shr rbx, 8
mov byte [rbp + 1], bl
jmp 0x180017cc1
mov byte [rbp + 3], bl
shr rbx, 8
mov byte [rbp + 2], bl
jmp 0x180017cc1
mov rax, qword [r15 + 8]
lea rcx, [r14 + r14*2]
shr rbx, 8
mov rdx, qword [rax + 0x2140]
mov rax, qword [rdx + 8]
mov esi, dword [rax + rcx*8 + 0x10]
jmp 0x180017cc1
cmp edi, 0x828e0
je 0x180017cbd
cmp edi, 0x8b410
je 0x180017cb1
cmp edi, 0x93f40
jne 0x180017cc1
mov r10, qword [r15 + 8]
lea rdx, [rbp - 9]
xor r9d, r9d
mov rcx, r15
mov rax, qword [r10 + 0x2268]
mov qword [rsp + 0x28], rax
lea r8d, [r9 + 0x12]
mov dword [rsp + 0x20], 0
call qword [r10 + 0x2250]
test eax, eax
jne 0x18001782c
jmp 0x180017cc1
shr esi, 8
mov byte [rbp + 7], sil
shr esi, 8
jmp 0x180017cc1
mov byte [rbp + 8], sil
add edi, 0x8b30
cmp edi, 0x9c960
jbe 0x180017af0
mov rax, qword [r15 + 8]
inc r14d
mov rcx, qword [rax + 0x2140]
cmp r14d, dword [rcx]
jb 0x180017ae3
jmp 0x18001788f
mov eax, dword [r15]
lea rcx, [rbp - 0x39]
mov r8, qword [r15 + 8]
mov edx, 0x44
mov dword [rbp - 0x39], eax
call fcn.18002bc60
test eax, eax
je 0x180018025
jmp 0x18001788f
mov ecx, dword [r12]
mov r8d, 1
mov r10d, r8d
test r8b, cl
je 0x180017ddc
lea eax, [rcx + 1]
cdq
sub eax, edx
sar eax, 1
cmp eax, r8d
jl 0x180017d81
mov r9, r15
nop word [rax + rax]
movd xmm0, dword [r12]
inc r10
movd xmm1, r8d
inc r8d
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
addss xmm1, xmm1
addss xmm0, xmm6
divss xmm1, xmm0
movss dword [r9], xmm1
add r9, 4
mov ecx, dword [r12]
lea eax, [rcx + 1]
cdq
sub eax, edx
sar eax, 1
cmp r8d, eax
jle 0x180017d40
mov r9d, dword [rbp - 0x49]
cmp r8d, ecx
jg 0x180017893
lea rdx, [r15 - 4]
lea rdx, [rdx + r10*4]
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r12]
mov eax, ecx
sub eax, r8d
inc r8d
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
lea eax, [rax*2 + 2]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm0, xmm6
divss xmm1, xmm0
movss dword [rdx], xmm1
add rdx, 4
cmp r8d, dword [r12]
jle 0x180017da0
jmp 0x180017893
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, r8d
jl 0x180017e30
mov r9, r15
nop dword [rax + rax]
movd xmm0, dword [r12]
inc r10
movd xmm1, r8d
inc r8d
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
addss xmm1, xmm1
addss xmm0, xmm6
divss xmm1, xmm0
movss dword [r9], xmm1
add r9, 4
mov ecx, dword [r12]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp r8d, eax
jle 0x180017df0
mov r9d, dword [rbp - 0x49]
cmp r8d, ecx
jg 0x180017893
lea rdx, [r15 - 4]
lea rdx, [rdx + r10*4]
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r12]
mov eax, ecx
sub eax, r8d
inc r8d
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
lea eax, [rax*2 + 2]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm0, xmm6
divss xmm1, xmm0
movss dword [rdx], xmm1
add rdx, 4
cmp r8d, dword [r12]
jle 0x180017e50
jmp 0x180017893
mov byte [rbp - 0x45], 0
jmp case.0x18001774e.53
mov rsi, qword [rbp - 0x41]
mov r14d, 0xcd
mov rdi, qword [rbp - 0x41]
mov r9, qword [rbp - 0x21]
nop word [rax + rax]
cmp r14d, 0xcd
je 0x180017f87
cmp r14d, 0x3273
je 0x180017f0a
cmp r14d, 0x6419
je 0x180017ef0
cmp r14d, 0x95bf
jne 0x180018001
mov rax, qword [r12]
mov byte [rsi + rax], 0
mov rax, qword [r9]
mov byte [rdi + rax], 0
jmp 0x180018001
mov rdx, qword [r15 + 8]
mov r8, rdi
mov rcx, qword [r9]
inc rdx
add rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180017ffd
mov qword [rsp + 0x50], 0
lea rax, [rbp - 0x41]
mov qword [rsp + 0x48], rax
lea rdx, [rbp - 0x31]
mov qword [rsp + 0x40], 0
xor r9d, r9d
mov qword [rsp + 0x38], 0
xor r8d, r8d
mov qword [rsp + 0x30], 0
xor ecx, ecx
mov dword [rsp + 0x28], 0x14a
mov qword [rsp + 0x20], 0
mov qword [rbp - 0x31], 1
mov qword [rbp - 0x41], rdi
call fcn.18002ce00
mov rcx, qword [rbp - 0x21]
mov qword [rcx], rax
mov rcx, qword [r12]
test rax, rax
je 0x18001801f
mov rdx, qword [r15 + 8]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180017ffd
mov edi, dword [r15]
mov edx, 0x3d
mov rcx, qword [r15 + 8]
mov r8d, edi
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
sub rsi, qword [r15 + 8]
sub rdi, rsi
dec rdi
test rax, rax
je 0x180018025
xor ecx, ecx
mov qword [rbp - 0x31], 1
mov qword [rsp + 0x50], rcx
lea rax, [rbp - 0x41]
mov qword [rsp + 0x48], rax
lea rdx, [rbp - 0x31]
mov qword [rsp + 0x40], rcx
xor r9d, r9d
mov qword [rsp + 0x38], rcx
xor r8d, r8d
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x14a
mov qword [rsp + 0x20], rcx
mov qword [rbp - 0x41], rsi
call fcn.18002ce00
mov qword [r12], rax
test rax, rax
je 0x180018025
mov r9, qword [rbp - 0x21]
add r14d, 0x31a6
cmp r14d, 0xc698
jbe 0x180017eb0
mov eax, 1
jmp 0x180017838
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r14d, r14d
mov eax, r14d
jmp 0x180017838