Function at 0x1800321d0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x98
lea ebx, [rcx + 0x39b]
mov r15, r8
mov dword [rsp + 0x30], ebx
mov esi, ecx
cmp ecx, ebx
jae case.0x18003232e.167
mov rbx, qword [rsp + 0x48]
lea r8, [0x180000000]
mov r14, qword [rsp + 0x48]
xor ebp, ebp
mov rdi, qword [rsp + 0x48]
mov r13d, dword [rsp + 0xe0]
mov eax, dword [rsp + 0x30]
lea r12d, [rbp + 1]
nop word [rax + rax]
cmp esi, 0x98
ja 0x1800322f7
je 0x18003227e
cmp esi, 0x51
jne 0x1800324d9
cmp qword [r15 + 0x18], 0x10
mov rbx, r15
jb 0x180032264
mov rbx, qword [r15]
mov r14, qword [r15 + 0x10]
lea rax, [r9 + 0x20]
add rbx, 4
mov qword [rsp + 0x58], rax
sub r14, 4
jmp case.0x18003232e.169
mov rdx, qword [rsp + 0x58]
mov r8d, ebp
nop word [rax + rax]
mov ecx, 0xa9
mov eax, ecx
sub eax, 0xa9
je 0x1800322d8
sub eax, 1
je 0x1800322b9
cmp eax, 1
jne 0x1800322db
test r14, r14
je 0x180032503
inc rbx
add rbx, rdi
jmp 0x1800322db
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rbx + rdi], 0
jne 0x1800322c0
mov rax, 0xffffffffffffffff
sub rax, rdi
add r14, rax
jmp 0x1800322db
mov qword [rdx], rbx
inc ecx
cmp ecx, 0xac
jb 0x180032295
inc r8d
add rdx, 8
cmp r8d, 4
jb 0x180032290
jmp 0x1800324c6
cmp esi, 0x1d5
ja 0x1800324d9
je case.0x18003232e.167
lea eax, [rsi - 0x9f]
cmp eax, 0xef
ja case.0x18003232e.169
movzx eax, byte [r8 + rax + 0x32570]
mov ecx, dword [r8 + rax*4 + 0x32544]
add rcx, r8
jmp rcx
mov byte [rsp + 0x38], 1
jmp case.0x18003232e.169
mov qword [r15 + 0x80], r9
lea r8, [0x180034410]
mov r9, r15
mov qword [rsp + 0x28], rbp
xor edx, edx
mov dword [rsp + 0x20], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x180032503
xchg qword [0x1800bf650], rax
jmp 0x1800324be
mov qword [0x1800bf648], r15
jmp case.0x18003232e.169
mov rax, qword [r15]
lea rdx, [rsp + 0x50]
mov r8d, 0x66
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x50], ebp
call fcn.18008af50
mov ecx, eax
cmp eax, 0xffffffff
je 0x18003252c
mov eax, dword [rsp + 0x40]
test ecx, ecx
cmove eax, r12d
mov dword [rsp + 0x40], eax
mov rax, qword [r15]
lea r9, [rsp + 0x68]
mov esi, 0x11b
mov qword [rsp + 0x68], rax
lea rdx, [0x18000cf00]
lea rcx, [rsp + 0x48]
lea r8d, [rsi - 0x11]
call fcn.18001d530
test eax, eax
je 0x18003252c
jmp 0x1800324be
test r14, r14
sete byte [rsp + 0x38]
jmp case.0x18003232e.169
lea rax, [rsp + 0x40]
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], rax
jmp case.0x18003232e.169
mov eax, dword [r9]
xchg dword [r15 + 0xc], eax
jmp case.0x18003232e.169
mov qword [rsp + 0x70], r9
lea r15, [rsp + 0x80]
mov qword [rsp + 0x78], rdx
mov r12d, ebp
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x80], xmm0
mov ebp, 0x89
mov eax, ebp
sub eax, 0x89
je 0x180032484
sub eax, 0x1b
je 0x180032461
cmp eax, 0x1b
jne 0x180032491
mov eax, r13d
sub r14, rax
jmp 0x180032491
add rbx, 4
mov esi, r13d
cmp rsi, r14
ja 0x180032503
mov rcx, qword [r15]
mov r8d, esi
mov rdx, rbx
call fcn.180049ba0
add rbx, rsi
jmp 0x180032491
cmp r14, 4
jb 0x180032503
mov r13d, dword [rbx]
sub r14, 4
add ebp, 0x1b
cmp ebp, 0xda
jb 0x180032446
inc r12d
add r15, 8
cmp r12d, 2
jb 0x180032441
mov esi, dword [rsp + 0xe0]
xor ebp, ebp
mov r15, qword [rsp + 0xf0]
lea r12d, [rbp + 1]
mov r9, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0xe8]
lea r8, [0x180000000]
mov eax, dword [rsp + 0x30]
add esi, 0x47
mov dword [rsp + 0xe0], esi
cmp esi, eax
jb 0x180032240
mov eax, dword [rsp + 0x38]
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov byte [rsp + 0x38], 0
jmp case.0x18003232e.167
cmp dword [rsp + 0x44], 0
je 0x180032533
mov rax, qword [r15]
lea rdx, [rsp + 0x30]
mov ecx, 0xfe
mov qword [rsp + 0x30], rax
call fcn.18002c940
test eax, eax
jne 0x180032533
mov eax, 0xffffffff
jmp 0x1800324ef
cmp dword [rsp + 0x40], 0
mov eax, 0
sete al
jmp 0x1800324ef