Function at 0x1800042c0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
movdqa xmm0, xmmword [0x180067880]
xor r14d, r14d
movdqu xmmword [rbp - 6], xmm0
mov rsi, rcx
mov edi, r9d
movdqu xmmword [rbp - 0x46], xmm0
mov qword [rbp - 0x20], r14
lea ecx, [r14 + 0x30]
xorps xmm0, xmm0
mov word [rbp - 0x18], r14w
mov r12, r8
mov byte [rbp - 0x16], r14b
mov r13, rdx
mov qword [rbp - 0x60], r14
mov word [rbp - 0x58], r14w
mov byte [rbp - 0x56], r14b
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x20], r14
call fcn.180031f30
xorps xmm0, xmm0
lea r15d, [rdi - 0xc]
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ebx, 1
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmmword [rbp + 0x70], xmm0
movsd qword [rbp + 0x30], xmm2
movsd qword [rbp + 0x1c0], xmm2
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x40], r14
mov dword [rbp + 0x48], ebx
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmmword [rbp + 0x80], xmm1
mov qword [rbp + 0x90], 0xffffffffffffffff
mov dword [rbp + 0x98], r14d
mov byte [rbp + 0xf0], r14b
mov word [rbp + 0x110], r14w
mov dword [rbp + 0x114], r14d
mov qword [rbp + 0x118], r14
mov dword [rbp + 0x130], r14d
mov qword [rbp + 0x148], r14
mov qword [rbp + 0x150], 0xf
mov byte [rbp + 0x138], r14b
mov qword [rbp + 0x168], r14
mov qword [rbp + 0x170], 0xf
mov byte [rbp + 0x158], r14b
mov qword [rbp + 0x188], r14
mov qword [rbp + 0x190], 0xf
mov byte [rbp + 0x178], r14b
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], 0xffffffffffffffff
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1b8], r14
mov word [rbp + 0x1c8], r14w
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movdqa xmm0, xmmword [0x180067880]
movdqa xmmword [rbp + 0x100], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x1ca], r14b
cmp edi, r15d
jbe case.0x1800044e2.0
lea r14d, [rdi - 0x100]
mov edi, 0x1bb
lea rdx, [0x18006ed00]
lea r9, [0x180025240]
lea r8, [0x180000000]
cmp r14d, 0x19
ja case.0x1800044e2.2
mov ecx, dword [r8 + r14*4 + 0x49dc]
add rcx, r8
jmp rcx
mov eax, dword [0x18006ed90]
lea r8, [rsp + 0x50]
xor r9d, r9d
mov dword [rbp + 0x238], eax
lea rdx, [rbp + 0x238]
mov ecx, 0x118
call fcn.1800247e0
lea rax, [rsp + 0x50]
xor edx, edx
mov qword [rbp - 0x30], rax
lea r9, [rbp + 0x1d0]
mov eax, dword [0x18006ed90]
lea r8, [0x180021f50]
mov dword [rbp - 0x28], eax
xor ecx, ecx
mov eax, dword [0x18006ed94]
mov dword [rbp - 0x24], eax
xor eax, eax
movaps xmm0, xmmword [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
movdqa xmmword [rbp + 0x1d0], xmm0
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x40], rax
cmp rax, 0
je 0x1800047b7
jmp 0x180004799
lea rax, [rbp - 0x20]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x58]
cmp rax, qword [rsp + 0x60]
je 0x180004593
lea rcx, [rbp - 0x20]
mov qword [rax], rcx
mov rdx, qword [rsp + 0x58]
add rdx, 8
mov qword [rsp + 0x58], rdx
jmp 0x1800045ac
mov rdx, qword [rsp + 0x58]
lea r8, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.180027e50
mov rdx, qword [rsp + 0x58]
lea rax, [rbp - 0x60]
mov qword [rsp + 0x38], rax
cmp rdx, qword [rsp + 0x60]
je 0x1800045ce
lea rax, [rbp - 0x60]
mov qword [rdx], rax
add qword [rsp + 0x58], 8
jmp 0x180004799
lea r8, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.180027e50
jmp 0x180004799
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180004799
mov dword [rsp + 0x30], 0
jmp case.0x1800044e2.2
mov r9, rdx
xor r8d, r8d
mov edx, 0xa9
xor ecx, ecx
call fcn.18001c710
lea r8, [0x18006ed08]
xor edx, edx
mov ecx, 0xb6
call fcn.180011bd0
test al, al
je 0x1800047b7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.1800362b4
lea r9, [0x18006ed48]
mov word [rbp + 0x238], di
lea r8, [rbp - 0x20]
mov ecx, 0xdf
lea rdx, [rbp + 0x238]
call fcn.180024fe0
jmp 0x180004799
lea r9, [rbp - 0x60]
mov word [rbp + 0x238], di
lea r8, [rbp + 0x238]
mov edx, 0x4b
lea rcx, [0x18006ed68]
call fcn.1800242a0
xor r8d, r8d
lea rcx, [rsp + 0x50]
mov edx, 0xf7
call fcn.180014150
jmp 0x180004799
xor edx, edx
mov qword [rsp + 0x38], r9
mov r8d, 0xbf
lea rcx, [rsp + 0x38]
call fcn.180013160
jmp 0x180004799
mov rax, qword [r13]
add rax, qword [r12]
mov qword [rsi], rax
mov rcx, qword [r13]
add rcx, qword [r12]
cmp qword [r12], rcx
seta byte [rsp + 0x30]
jmp 0x180004799
mov esi, 0x9a
nop dword [rax]
mov eax, esi
sub eax, 0x9a
je 0x180004734
sub eax, 0x35
je 0x18000475f
sub eax, 0x7b
je 0x1800046fa
cmp eax, 0x35
je 0x180004771
jmp 0x18000475f
mov edi, 0x10f
nop
mov eax, edi
sub eax, 0x10f
je 0x180004714
sub eax, ebx
je 0x180004758
cmp eax, 2
je 0x180004758
jmp 0x180004728
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rbp + 0x1a8], rax
inc edi
cmp edi, 0x112
jb 0x180004700
jmp 0x180004758
lea rax, [rsp + 0x50]
mov qword [rbp + 0x120], rdx
lea rdx, [rbp + 0x128]
mov qword [rbp + 0x10], rax
xor r8d, r8d
mov ecx, 0xe7
call fcn.180006410
lea rdx, [0x18006ed00]
add esi, 0xb0
cmp esi, 0x35a
jb 0x1800046e0
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
xor r8d, r8d
mov edx, 0xa3
xor ecx, ecx
call fcn.180014350
mov rsi, qword [rbp + 0x220]
mov edi, 0x1bb
lea rdx, [0x18006ed00]
dec r14d
lea eax, [r14 + 0x100]
cmp eax, r15d
ja 0x1800044bf
mov ebx, dword [rsp + 0x30]
lea rcx, [rbp + 0x138]
call fcn.1800041c0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x180004804
mov rcx, qword [rbp + 0xf0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800047ff
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800049d4
call fcn.180031f28
movdqa xmm0, xmmword [0x180067880]
lea rcx, [rbp + 0x78]
movdqa xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
call fcn.180026460
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x180004872
mov rdx, qword [rbp + 0x70]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff0
cmp rdx, 0x1000
jb 0x18000485d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800049d4
call fcn.180031f28
xorps xmm0, xmm0
mov qword [rbp + 0x70], 0
movdqa xmmword [rbp + 0x60], xmm0
mov rcx, qword [rbp + 0x18]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x1800048ab
mov r8, qword [rdi + 0x10]
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x18]
call fcn.180029a00
mov rcx, rdi
mov edx, 0x30
mov rdi, qword [rdi]
call fcn.180031f28
cmp byte [rdi + 0x19], 0
je 0x180004880
mov rcx, qword [rbp + 0x18]
mov edx, 0x30
call fcn.180031f28
lea rcx, [rsp + 0x68]
call fcn.1800264d0
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x180004911
mov rdx, qword [rsp + 0x60]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1800048fa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800049d4
call fcn.180031f28
xorps xmm0, xmm0
mov qword [rsp + 0x60], 0
movdqa xmmword [rsp + 0x50], xmm0
mov rdx, qword [rbp - 0x3e]
cmp rdx, 0x10
jb 0x18000494c
mov rcx, qword [rbp - 0x56]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004947
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800049d4
call fcn.180031f28
mov rdx, qword [rbp + 2]
movdqa xmm0, xmmword [0x180067880]
mov byte [rbp - 0x56], 0
movdqu xmmword [rbp - 0x46], xmm0
cmp rdx, 0x10
jb 0x180004994
mov rcx, qword [rbp - 0x16]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000498f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800049d4
call fcn.180031f28
mov eax, ebx
mov rbx, qword [rsp + 0x328]
add rsp, 0x2e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r9, r12
mov dword [rbp + 0x238], 0xf9
lea rdx, [rbp + 0x238]
mov rcx, r13
call fcn.18000a300
mov ebx, eax
jmp 0x1800047b7
call fcn.1800367d4
int3