Function at 0x180092870
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push r13
push r15
lea rbp, [rax - 0x468]
sub rsp, 0x550
mov r15d, dword [rbp + 0x498]
mov r11, rdx
mov rdx, rcx
lea r13d, [r15 + 0xe]
cmp r15d, r13d
jae 0x1800929ad
mov qword [rax - 0x20], rbx
lea r10, [0x180000000]
mov ebx, dword [rbp + 0x498]
xor r8d, r8d
mov qword [rax - 0x28], rsi
mov qword [rax - 0x30], rdi
mov rdi, qword [rsp + 0x78]
mov qword [rax - 0x38], r12
mov r12, qword [rbp + 0x4a8]
mov qword [rax - 0x40], r14
mov r14, qword [rbp + 0x490]
nop word [rax + rax]
lea eax, [r15 - 0x12a]
cmp eax, 0x17
ja case.0x180092907.302
mov ecx, dword [r10 + rax*4 + 0x92d5c]
add rcx, r10
jmp rcx
mov eax, dword [rbp + 0x410]
mov r10d, 0x121
mov r11, qword [rbp + 0x480]
inc eax
mov dword [r12], eax
lea eax, [rax + rax*2]
movsxd rsi, eax
mov qword [rsp + 0x60], rsi
nop dword [rax]
cmp r10d, 0xba
je 0x1800929c0
cmp r10d, 0x1e1
jne 0x180092a10
mov rcx, rsi
call qword [r11 + 8]
mov rdi, rax
mov qword [r14], rdi
mov r11, qword [rbp + 0x478]
mov rdx, qword [rbp + 0x470]
lea r10, [0x180000000]
mov r9, qword [rbp + 0x488]
inc r15d
mov r8d, 0
cmp r15d, r13d
jb 0x1800928f0
mov r12, qword [rsp + 0x530]
mov rdi, qword [rsp + 0x538]
mov rsi, qword [rsp + 0x540]
mov rbx, qword [rsp + 0x548]
mov r14, qword [rsp + 0x528]
mov eax, dword [rbp + 0x498]
add rsp, 0x550
pop r15
pop r13
pop rbp
ret
cmp dword [0], 0
mov edx, r8d
jle 0x180092a10
mov r8, r11
lea r9, [rsp + 0x60]
neg r8
mov rcx, r11
add r9, r8
xor r12d, r12d
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r9 + rcx]
inc edx
sub eax, dword [rcx + r8]
mov dword [rcx], eax
lea rcx, [rcx + 4]
cmp edx, dword [r12]
jl 0x1800929f0
mov r12, qword [rbp + 0x4a8]
xor r8d, r8d
add r10d, 0xc0
cmp r10d, 0x361
jb 0x180092930
jmp 0x180092954
mov rax, qword [rbp + 0x4a0]
mov qword [rax + 0x88], r9
jmp case.0x180092907.302
mov r9, qword [rbp + 0x4a0]
xor edx, edx
mov qword [rsp + 0x28], r8
xor ecx, ecx
mov dword [rsp + 0x20], r8d
lea r8, [0x18001a2b0]
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
mov qword [0x180107070], rax
setne byte [rbp + 0x498]
jmp 0x180092957
mov qword [rsp + 0x20], r8
mov r9d, 0x79
lea r8, [rbp - 0x80]
xor edx, edx
xor ecx, ecx
call fcn.180084020
mov ebx, eax
bt eax, 0xc
jb 0x180092b37
mov eax, dword [rbp - 0x54]
lea r9, [rbp]
mov rcx, qword [rbp + 0x480]
lea r8, [rsp + 0x70]
mov dword [rsp + 0x70], eax
lea rdx, [rsp + 0x60]
xor eax, eax
mov dword [rsp + 0x68], 1
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x85
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x60], 1
call fcn.180087ca0
mov rbx, rax
jmp 0x180092957
bt ebx, 0xc
jb case.0x180092907.319
mov eax, dword [r9]
lea rcx, [rbp]
mov r9, qword [rbp + 0x480]
mov edx, 0x109
mov r8, qword [rbp + 0x4a0]
mov dword [rsp + 0x60], eax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.1800064f0
mov ebx, eax
bt eax, 0xc
jae 0x180092957
xor r8d, r8d
mov r9, qword [rbp + 0x480]
xor ecx, ecx
mov qword [rsp + 0x28], r8
mov r15d, 0x13f
mov qword [rsp + 0x20], r8
xor r8d, r8d
lea edx, [r8 + 0x36]
call fcn.18008b6e0
jmp 0x180092957
test r14, r14
jne 0x180092c0c
mov esi, 0xef
mov eax, esi
sub eax, 0xef
je 0x180092b8e
sub eax, 0x79
je 0x180092b87
cmp eax, 0x79
je 0x180092b37
jmp 0x180092bf3
mov ebx, 0x1101
jmp 0x180092bf3
mov r8, qword [rbp]
mov edx, 0x69
mov rcx, qword [rbp + 0x480]
call fcn.180017200
movzx ecx, word [0x1800e9058]
mov eax, 0x47
movups xmm0, xmmword [0x1800e9048]
movups xmm1, xmmword [0x1800e9038]
movups xmm2, xmmword [str.Unknown_event__u_received____ComCreator_goes_down.]
cmp eax, 0x47
jne 0x180092bec
movaps xmmword [0x1801070c0], xmm2
movaps xmmword [0x1801070d0], xmm1
movaps xmmword [0x1801070e0], xmm0
mov word [0x1801070f0], cx
mov byte [0x1801074bf], 0
dec eax
cmp eax, 0x45
ja 0x180092bc4
add esi, 0x79
cmp esi, 0x25a
jb 0x180092b72
mov r11, qword [rbp + 0x478]
xor r8d, r8d
cmp dword [r12], 0
mov r10d, r8d
jle 0x180092c70
lea r9, [rbp + 0x10]
nop word [rax + rax]
mov eax, 0xa
cmp eax, 0xa
je 0x180092c3d
cmp eax, 0x2a
jne 0x180092c57
mov rdx, qword [r14]
movzx ecx, byte [r9]
mov byte [r8 + rdx + 2], cl
jmp 0x180092c57
mov rdx, qword [r14]
movzx ecx, byte [r9 + 2]
mov byte [r8 + rdx], cl
mov edx, dword [r9]
mov rcx, qword [r14]
sar edx, 8
mov byte [r8 + rcx + 1], dl
add eax, 0x20
cmp eax, 0x4a
jb 0x180092c25
inc r10d
add r9, 4
add r8, 3
cmp r10d, dword [r12]
jl 0x180092c20
mov eax, dword [rbp + 8]
mov dword [r11], eax
jmp 0x18009295e
mov rax, qword [rbp]
mov ebx, r8d
mov qword [rdx], rax
jmp case.0x180092907.302
mov rax, qword [rbp + 0x4a0]
mov qword [0x180107068], rax
jmp case.0x180092907.302
mov rcx, qword [rbp + 0x480]
mov ebx, 0x1000
test rcx, rcx
je 0x180092cc2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
call fcn.1800917c0
jmp 0x180092957
lea rax, [rbp + 0x480]
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x48], r8
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov r9d, ILGetNext
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x38], rax
xor ecx, ecx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
mov qword [rsp + 0x78], r8
xor r8d, r8d
call fcn.18002a700
mov ebx, eax
bt eax, 0xc
jae 0x180092957
xor r8d, r8d
mov qword [rbp + 0x480], r8
jmp case.0x180092907.319
mov rcx, qword [rbp + 0x4b0]
mov eax, dword [rbp + 0xc]
mov dword [rcx], eax
jmp case.0x180092907.302
mov dword [rbp + 0x498], ebx
jmp case.0x180092907.302