Function at 0x1800348b0
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x170
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180041118]
xor rax, rsp
mov qword [rsp + 0x150], rax
imul ebp, ecx, 0x609
mov r15, r8
mov rdi, rdx
mov esi, ecx
mov ebx, ecx
cmp ecx, ebp
ja 0x180034990
movsd xmm6, qword [0x18003d1e8]
mov r13d, 0x54
movzx r14d, word [rsp + 0x30]
xor r12d, r12d
cmp ebx, 0xb78d
ja 0x180034a7f
je 0x180034a42
cmp ebx, 0x11f
ja 0x1800349cb
je 0x180034961
mov eax, ebx
sub eax, 0x6b
je 0x180034b90
sub eax, 0x78
je 0x180034956
cmp eax, 0x14
jne 0x180034b7b
movzx r14d, word [rdi]
jmp 0x180034b7b
mov word [rsp + 0x40], r13w
jmp 0x180034b7b
xor edx, edx
lea rcx, [rdi + 0x48]
lea r8d, [rdx + 0x43]
call fcn.180037ae0
lea r9, [rdi + 8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x12f
call fcn.18002aa50
test al, al
jne 0x180034b7b
mov byte [rsp + 0x38], r12b
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.1800387b0
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
cmp ebx, 0x5c38
je 0x180034a35
cmp ebx, 0x6458
je 0x180034a21
cmp ebx, 0x7498
jne 0x180034b7b
xor r9d, r9d
mov dword [rsp + 0x20], 0x79
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180028030
mov eax, eax
xorps xmm0, xmm0
movaps xmm1, xmm6
mov byte [rsp + 0x38], 1
cvtsi2sd xmm0, rax
divsd xmm1, xmm0
movsd qword [rdi + 0x110], xmm1
jmp 0x180034b7b
xor r8d, r8d
mov rdx, rdi
lea ecx, [r8 + 0x1f]
call fcn.180030480
jmp 0x180034b7b
mov dword [rsp + 0x41], 0x677261
jmp 0x180034b7b
mov r8d, 2
lea rdx, [0x18003bea0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 5
mov dword [rsp + 0x46], 0x206449
lea rdx, str.__
lea rcx, [rsp + 0x49]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180034b7b
cmp ebx, 0x12b1a
ja 0x180034aff
je 0x180034990
cmp ebx, 0xc7b9
je 0x180034ae1
cmp ebx, 0xe811
je 0x180034990
cmp ebx, 0x112e2
jne 0x180034b7b
movzx eax, word [0x18003be98]
lea rdx, [0x18003be9c]
mov word [rsp + 0x4d], ax
lea rcx, [rsp + 0x4f]
movzx eax, byte [0x18003be9a]
mov r8d, 3
mov byte [rsp + 0x4f], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180034b7b
xor r8d, r8d
mov word [rsp + 0x30], r14w
lea rdx, [rsp + 0x30]
lea ecx, [r8 + 0x27]
call fcn.18001cba0
mov word [rsp + 0x38], ax
jmp 0x180034b7b
cmp ebx, 0x16e37
je 0x180034b2f
cmp ebx, 0x1c98c
je 0x180034b1d
cmp ebx, 0x224e1
je 0x180034990
jmp 0x180034b7b
lea rcx, [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
mov byte [rsp + 0x38], 1
jmp 0x180034b7b
mov qword [rsp + 0x28], r12
lea r8, [0x1800229b0]
mov r9, rdi
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi], rax
test rax, rax
je 0x18003498b
xor r9d, r9d
mov dword [rsp + 0x30], 1
lea r8, [rsp + 0x30]
mov dword [rsp + 0x20], 0x95
xor edx, edx
mov rcx, rdi
call fcn.180028030
imul eax, esi, 0x67
add ebx, eax
cmp ebx, ebp
jbe 0x180034914
jmp 0x180034990
mov rdx, rdi
mov ecx, 0x4e
call fcn.18002f4e0
xor edx, edx
div qword [r15]
mov rax, rdx
jmp 0x180034995