Function at 0x180010ff8
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
sub rsp, 0xf0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
xor edi, edi
mov rbx, rcx
cmp byte [0x1803a6a28], dil
jne 0x18001158a
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
call fcn.180002b5c
test al, al
jne 0x18001104e
lea edx, [rdi + 1]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
call fcn.1800de3c8
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x180003034]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movabs r15, 0x7692cd8566e656fc
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x48], r15
lea rdx, [rbp + 0x40]
movabs rax, 0xf68976cc4405b585
mov qword [rbp + 0x28], r15
mov qword [rbp], rax
lea rcx, [rbp + 0x60]
movabs r12, 0x95e703bc2166d4c3
movabs rax, 0x7692cd8566e65694
mov qword [rbp + 0x40], r12
movabs r14, 0x95e766c84002a496
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 8], rax
pxor xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x20], r12
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm0, xmmword [0x1801555b0]
movdqu xmmword [rbp + 0x70], xmm0
call fcn.1800418c8
movabs rax, 0xf48a71d34714b193
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0x40]
movabs rax, 0x7692cdcc33833592
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x80]
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm0, xmmword [0x1801555b0]
movdqu xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0x80], rdi
call fcn.1800418c8
lea rax, [rbp]
xor r9d, r9d
lea r8, [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x80]
lea rcx, [0x180009518]
call fcn.1800ddc28
mov qword [rbp + 8], r15
lea rdx, [rbp]
movabs rax, 0x95e703f57421ba8c
mov qword [rbp + 0x20], r12
mov qword [rbp], rax
lea rcx, [rbp + 0x80]
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x28], r15
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [0x1801555b0]
movdqu xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0x80], rdi
call fcn.1800418c8
movabs rax, 0xe7936dd36210b187
mov qword [rbp + 0x20], r12
mov qword [rbp], rax
movabs rax, 0x7692cd8566953a93
mov qword [rbp + 8], rax
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x28], r15
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [0x1801555b0]
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x60], rdi
lea rdx, [rbp]
lea rcx, [rbp + 0x60]
call fcn.1800418c8
lea rsi, [0x180156383]
xor r9d, r9d
lea r8, [rbp + 0x80]
mov qword [rsp + 0x20], rsi
lea rdx, [rbp + 0x60]
lea rcx, [0x18000fc20]
call fcn.1800ddc28
mov qword [rbp], r14
lea rdx, [rbp]
mov qword [rbp + 8], r15
lea rcx, [rbp + 0x80]
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [0x1801555b0]
movdqu xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0x80], rdi
call fcn.1800418c8
movabs rax, 0xfc9360d94b09a693
mov qword [rbp + 0x20], r12
mov qword [rbp], rax
lea rdx, [rbp]
movabs rax, 0x7692cd8566e63390
mov qword [rbp + 0x28], r15
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x60]
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [0x1801555b0]
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x60], rdi
call fcn.1800418c8
xor r9d, r9d
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x60]
lea rcx, [0x18000bcb4]
call fcn.1800ddc28
mov qword [0x1803a6a88], rax
lea r8, [0x180009484]
mov qword [rbp + 0x20], r12
lea rdx, [rbp]
mov qword [rbp + 0x28], r15
lea rcx, [rbp + 0x40]
mov qword [rbp + 0x48], r15
movabs rax, 0xe3884ed3751fa697
mov qword [rbp], rax
xor r9d, r9d
movabs rax, 0x7692cd8566e65699
mov qword [rsp + 0x20], rsi
mov qword [rbp + 8], rax
movabs rax, 0xfb8860f54c03a08a
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0x40], rax
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x40], xmm0
call fcn.1800dde1c
mov qword [0x1803a6ab8], rax
movabs rdi, 0x9574460e41014e9d
movabs rax, 0xe7b76bdf4f13b58f
mov qword [rbp + 0x50], rdi
movabs rbx, 0x70c4257683426be
mov qword [rbp + 0x40], rax
movabs rax, 0x13fea4f105833c93
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rbx
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
movabs rax, 0xff8871ec4415b581
mov qword [rbp + 0x20], r12
mov qword [rbp], rax
lea r8, [fcn.180009310]
movabs rax, 0x7692a8e90f923599
mov qword [rbp + 0x28], r15
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x40]
vmovdqa xmm0, xmmword [rbp]
lea rcx, [rbp]
vpxor xmm0, xmm0, xmmword [rbp + 0x20]
xor r9d, r9d
vmovdqa xmmword [rbp], xmm0
vmovdqa ymmword [rbp + 0x40], ymm1
mov qword [rsp + 0x20], rsi
vzeroupper
call fcn.1800dde1c
mov qword [0x1803a6a90], rax
lea r8, [0x180004044]
mov qword [rbp + 0x20], r12
lea rdx, [rbp]
mov qword [rbp + 0x28], r15
lea rcx, [rbp + 0x40]
movabs rax, 0xfbae77d2440fb880
mov qword [rsp + 0x20], rsi
mov qword [rbp], rax
mov r9d, 1
movabs rax, 0x7692cd856692238c
mov qword [rbp + 8], rax
movabs rax, 0xec866fec4415b581
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x40], rax
movabs rax, 0x7692cd8566e62499
mov qword [rbp + 0x48], rax
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x40], xmm0
call fcn.1800dde1c
mov qword [0x1803a6aa8], rax
lea r8, [0x18000f6c0]
mov qword [rbp + 0x20], r12
lea rdx, [rbp]
mov qword [rbp + 0x28], r15
lea rcx, [rbp + 0x40]
movabs rax, 0xf48b53925515a191
mov qword [rbp + 0x78], rbx
mov qword [rbp + 0x60], rax
xor r9d, r9d
movabs rax, 0x2c1e3e814893088
mov qword [rbp], r14
mov qword [rbp + 0x68], rax
movabs rax, 0x9574460e416c2ff8
mov qword [rbp + 0x70], rax
movabs rax, 0xf48b53d14003a090
mov qword [rbp + 0x40], rax
movabs rax, 0x7692cde814893088
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 8], r15
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rbx
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
vpxor xmm0, xmm0, xmmword [rbp + 0x20]
vmovdqa xmmword [rbp], xmm0
vmovdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
vpxor xmm0, xmm0, xmmword [rbp + 0x20]
vmovdqa xmmword [rbp + 0x40], xmm0
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rsp + 0x20], rax
vzeroupper
call fcn.1800dde1c
mov qword [0x1803a6a98], rax
mov byte [0x1803a6a28], 1
mov eax, 1
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret