Function at 0x1400b9410
Capabilities:
Create thread

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rbx, r8
mov r14, rdx
mov rdi, rcx
mov eax, dword [0x141dd5288]
or eax, dword [0x141dd528c]
or eax, 0x75014798
mov ecx, 0xbb4549fd
imul rcx, rax
shr rcx, 0x3d
or ecx, 0x41a3a5e8
cmp ecx, 0x32ff96fd
jb 0x1400b9473
mov eax, dword [0x141dd5290]
sub eax, dword [0x141dd5294]
imul eax, eax, 0x71bccaa9
xor eax, 0xe9f1eba8
movzx ecx, byte [0x141ddc4f8]
cmp eax, 0xd1376f47
jbe 0x1400b947c
movzx eax, byte [0x141ddc4f8]
jmp 0x1400b944e
mov edx, 0x10
xor ecx, ecx
call fcn.1400c0a10
test rax, rax
je 0x1400b94be
mov rsi, rax
mov qword [rax], r14
mov qword [rax + 8], rbx
mov eax, dword [0x141dd5298]
imul eax, dword [0x141dd529c]
mov ecx, 0x83758117
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x6f2cb576
jne 0x1400b9516
jmp 0x1400b9566
xor eax, eax
test al, al
je 0x1400b94d0
ud2
mov eax, dword [0x141dd52a8]
add eax, dword [0x141dd52ac]
imul eax, eax, 0x710ee7b0
add eax, 0xd5d2b47f
ud2
mov eax, dword [0x141dd52a0]
xor edx, edx
div dword [0x141dd52a4]
mov ebx, eax
add ebx, 0xc14f8d67
or ebx, 0x6da76ba4
add ebx, 0x9de4f193
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10000
lea r8, [0x1400ba0f0]
xor ecx, ecx
mov rdx, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp ebx, 0x635f9666
jae 0x1400b958e
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10000
lea r8, [0x1400ba0f0]
xor ecx, ecx
mov rdx, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1400b9516
mov rdx, rax
test rax, rax
je 0x1400b959d
xor eax, eax
jmp 0x1400b9737
mov rdi, qword [rsi]
mov rbx, qword [rsi + 8]
mov rax, qword [rbx]
nop word [rax + rax]
mov ecx, dword [0x141dd52b8]
and ecx, dword [0x141dd52bc]
imul rcx, rcx, 0x45ea933f
shr rcx, 0x3c
add ecx, 0x32fb4715
cmp ecx, 0x2e2473f4
jb 0x1400b95b0
test rax, rax
je 0x1400b95e0
mov rcx, rdi
call rax
nop
mov eax, dword [0x141dd52c0]
sub eax, dword [0x141dd52c4]
or eax, 0xffbbe7fd
cmp eax, 0x28cce5ae
je 0x1400b95e0
nop dword [rax + rax]
mov eax, dword [0x141dd52c8]
or eax, dword [0x141dd52cc]
add eax, 0x1cc590ff
or eax, 0xb5ec0ed8
shr eax, 2
imul rax, rax, 0x21187c13
shr rax, 0x3a
cmp eax, 0x7f8b52ee
ja 0x1400b9600
cmp qword [rbx + 8], 0
je 0x1400b969f
cmp qword [rbx + 0x10], 0x11
jb 0x1400b968d
nop dword [rax]
mov eax, dword [0x141dd52d0]
and eax, dword [0x141dd52d4]
not eax
or eax, 0x820002
and eax, 0x82000f
cmp eax, 0xe8251913
je 0x1400b9640
mov rdi, qword [rdi - 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd52d8]
and eax, dword [0x141dd52dc]
and eax, 0x98028030
add eax, 0xc33c9e12
cmp eax, 0xbc5ed755
ja 0x1400b9670
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd52e0]
xor eax, dword [0x141dd52e4]
add eax, 0x46db8cdb
cmp eax, 0x99892c31
ja 0x1400b96eb
mov eax, dword [0x141dd52e8]
xor edx, edx
div dword [0x141dd52ec]
imul edi, eax, 0xd98af330
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0x6db0f7bf
jne 0x1400b9705
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400b96b7
mov edx, eax
shl rdx, 0x20
or rdx, 2
nop
mov eax, dword [0x141dd52f0]
or eax, dword [0x141dd52f4]
add eax, 0x6499fae6
and eax, 0x692b043
add eax, 0x218da957
cmp eax, 0xd8663865
ja 0x1400b9710
mov eax, 1
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret