Function at 0x180033ad0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x198]
sub rsp, 0x298
movdqa xmm0, xmmword [0x18006bb00]
xor r13d, r13d
movdqu xmmword [rbp + 0x3a], xmm0
mov r12, rcx
mov r14, r9
movdqu xmmword [rbp - 0xe], xmm0
mov qword [rbp + 0x20], r13
lea ecx, [r13 + 0x30]
xorps xmm0, xmm0
mov word [rbp + 0x28], r13w
mov r15, r8
mov byte [rbp + 0x2a], r13b
mov rdi, rdx
mov qword [rbp - 0x28], r13
mov word [rbp - 0x20], r13w
mov byte [rbp - 0x1e], r13b
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x60], r13
call fcn.18004738c
mov esi, dword [rbp + 0x200]
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ebx, 1
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x58], rax
xor eax, eax
mov qword [rbp + 0x120], rax
mov byte [rbp + 0x128], al
mov word [rbp + 0x170], ax
movsd qword [rbp + 0x70], xmm2
movsd qword [rbp + 0x168], xmm2
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], r13
mov dword [rbp + 0x88], ebx
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
movdqa xmmword [rbp + 0xb0], xmm0
movdqa xmmword [rbp + 0xc0], xmm1
mov qword [rbp + 0xd0], 0xffffffffffffffff
mov dword [rbp + 0xd8], r13d
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0x138], r13
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x140], 0xf
movups xmmword [rbp + 0x100], xmm0
mov word [rbp + 0x148], r13w
movups xmmword [rbp + 0x110], xmm0
mov dword [rbp + 0x14c], r13d
mov qword [rbp + 0x150], r13
movups xmmword [rbp + 0x158], xmm0
mov byte [rbp + 0x172], al
lea eax, [rsi - 9]
mov dword [rsp + 0x70], eax
cmp esi, eax
jbe 0x1800341d4
add esi, 0xffffffa0
lea rdx, [0x180000000]
movabs r8, 0x1fffffffffffffff
lea r10, [0x1800826d8]
mov r9d, 0x1bb
mov ecx, eax
cmp esi, 0xb
ja case.default.0x180033c95
mov ecx, dword [rdx + rsi*4 + 0x34454]
add rcx, rdx
jmp rcx
mov r14, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x70]
cmp r14, rcx
je 0x180033cc0
lea rax, [rbp + 0x20]
mov qword [r14], rax
mov r14, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x70]
add r14, 8
mov rdi, qword [rbp - 0x80]
jmp 0x180033df4
mov rax, qword [rbp - 0x80]
mov r13, r14
sub r13, rax
sar r13, 3
cmp r13, r8
je 0x18003443f
sub rcx, rax
lea r12, [r13 + 1]
sar rcx, 3
mov rax, r8
mov rdx, rcx
shr rdx, 1
sub rax, rdx
cmp rcx, rax
jbe 0x180033cf8
mov rax, r12
jmp 0x180033d03
lea rax, [rdx + rcx]
cmp rax, r12
cmovb rax, r12
cmp rax, r8
ja 0x18003444b
lea r15, [rax*8]
cmp r15, 0x1000
jb 0x180033d46
lea rcx, [r15 + 0x27]
cmp rcx, r15
jbe 0x18003444b
call fcn.18004738c
test rax, rax
je 0x180034445
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180033d5a
test r15, r15
je 0x180033d58
mov rcx, r15
call fcn.18004738c
mov rdi, rax
jmp 0x180033d5a
xor edi, edi
lea rax, [rbp + 0x20]
mov rcx, rdi
mov qword [rdi + r13*8], rax
mov r8, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x80]
cmp r14, r8
jne 0x180033d77
sub r8, rdx
jmp 0x180033d94
mov r8, r14
sub r8, rdx
call fcn.180048580
mov r8, qword [rbp - 0x78]
lea rcx, [r13 + 1]
sub r8, r14
lea rcx, [rdi + rcx*8]
mov rdx, r14
call fcn.180048580
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x180033dd7
mov rdx, qword [rbp - 0x70]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x180033dd2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
call fcn.1800473c8
lea rcx, [r15 + rdi]
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], rcx
lea r14, [rdi + r12*8]
xor r13d, r13d
movabs r8, 0x1fffffffffffffff
mov qword [rbp - 0x78], r14
cmp r14, rcx
je 0x180033e0e
lea rax, [rbp - 0x28]
mov qword [r14], rax
add qword [rbp - 0x78], 8
jmp 0x180033f38
mov r13, r14
sub r13, rdi
sar r13, 3
cmp r13, r8
je 0x18003443f
sub rcx, rdi
lea r12, [r13 + 1]
sar rcx, 3
mov rax, r8
mov rdx, rcx
shr rdx, 1
sub rax, rdx
cmp rcx, rax
jbe 0x180033e42
mov rax, r12
jmp 0x180033e4d
lea rax, [rdx + rcx]
cmp rax, r12
cmovb rax, r12
cmp rax, r8
ja 0x18003444b
lea r15, [rax*8]
cmp r15, 0x1000
jb 0x180033e90
lea rcx, [r15 + 0x27]
cmp rcx, r15
jbe 0x18003444b
call fcn.18004738c
test rax, rax
je 0x180034445
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180033ea4
test r15, r15
je 0x180033ea2
mov rcx, r15
call fcn.18004738c
mov rdi, rax
jmp 0x180033ea4
xor edi, edi
lea rax, [rbp - 0x28]
mov rcx, rdi
mov qword [rdi + r13*8], rax
mov r8, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x80]
cmp r14, r8
jne 0x180033ec1
sub r8, rdx
jmp 0x180033ede
mov r8, r14
sub r8, rdx
call fcn.180048580
mov r8, qword [rbp - 0x78]
lea rcx, [r13 + 1]
sub r8, r14
lea rcx, [rdi + rcx*8]
mov rdx, r14
call fcn.180048580
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x180033f21
mov rdx, qword [rbp - 0x70]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x180033f1c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
call fcn.1800473c8
lea rax, [rdi + r12*8]
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rax
xor r13d, r13d
lea rax, [r15 + rdi]
mov qword [rbp - 0x70], rax
mov eax, dword [0x180082700]
lea r9, [rsp + 0x78]
mov dword [rsp + 0x78], eax
xor r8d, r8d
lea rax, [rbp - 0x80]
mov dword [rsp + 0x30], 0x120
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r13
call fcn.18000c4d0
mov rdi, qword [rbp + 0x1e8]
mov r14, qword [rbp + 0x1f8]
mov r15, qword [rbp + 0x1f0]
mov r12, qword [rbp + 0x1e0]
jmp 0x1800341a5
xor r8d, r8d
lea rcx, [0x180082670]
mov edx, DAD_DragLeave
call fcn.180016540
lea r9, [0x180082678]
mov qword [rsp + 0x20], r13
xor r8d, r8d
xor edx, edx
mov ecx, 0x10f
call fcn.180043830
test al, al
je 0x1800341d8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.18004c03c
mov eax, 0x1bb
lea r8, [rbp + 0x20]
mov r9d, 0xd6
mov word [rsp + 0x78], ax
lea rdx, [0x1800826b8]
lea rcx, [rsp + 0x78]
call fcn.18000e760
jmp 0x1800341a5
mov rcx, qword [rbp - 0x30]
movzx eax, byte [r14]
or byte [rcx], al
jmp case.0x180033c95.3
mov eax, dword [r15]
cdq
and edx, 3
lea ecx, [rdx + rax]
mov eax, dword [r12]
sar ecx, 2
cdq
imul ecx, dword [rdi + 0x4986c]
and edx, 3
add eax, edx
sar eax, 2
add ecx, eax
movsxd rcx, ecx
add rcx, qword [rdi + 0x49850]
mov qword [rbp - 0x30], rcx
jmp 0x1800341bc
mov rax, qword [rbp - 0x30]
and byte [rax], 0xfc
jmp case.0x180033c95.3
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], r13
mov qword [rbp + 0x10], rax
lea r9, [rbp + 0x180]
mov eax, dword [0x180082700]
lea r8, [0x1800100d0]
mov dword [rbp + 0x18], eax
xor edx, edx
mov eax, dword [0x180082704]
xor ecx, ecx
mov dword [rbp + 0x1c], eax
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x180], xmm0
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x1800341d8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
lea rax, [0x180008a80]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], rax
lea edx, [r8 + 0x5b]
call fcn.18002ced0
jmp 0x1800341a5
mov qword [rsp + 0x60], r13
lea rax, [rbp - 0x28]
mov dword [rsp + 0x58], 0xa2
lea r8, [rsp + 0x78]
mov qword [rsp + 0x50], r13
xor edx, edx
mov qword [rsp + 0x48], r13
xor ecx, ecx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov word [rsp + 0x78], r9w
xor r9d, r9d
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x20], rax
call fcn.180032470
xor r8d, r8d
lea rcx, [rbp - 0x80]
mov edx, 0x88
call fcn.18002ced0
jmp 0x1800341a5
lea rax, [rbp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x58], rax
lea r8, [0x180082670]
mov qword [rsp + 0x50], r13
lea rax, [rbp - 0x80]
mov qword [rsp + 0x48], r13
xor edx, edx
mov dword [rsp + 0x40], 0x5b
xor ecx, ecx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
call fcn.180023330
mov qword [rsp + 0x50], r13
lea rax, [rbp + 0x50]
mov qword [rsp + 0x48], r13
mov r9d, 0x28
mov qword [rsp + 0x40], r13
xor r8d, r8d
mov qword [rsp + 0x38], r13
xor edx, edx
mov qword [rsp + 0x30], r13
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
call fcn.18002b3c0
lea r10, [0x1800826d8]
mov r9d, 0x1bb
movabs r8, 0x1fffffffffffffff
lea rdx, [0x180000000]
mov ecx, dword [rsp + 0x70]
dec esi
lea eax, [rsi + 0x60]
cmp eax, ecx
ja 0x180033c82
mov ebx, dword [rsp + 0x70]
lea rcx, [rbp + 0xd0]
call fcn.180004aa0
mov rdi, qword [rbp + 0xb8]
test rdi, rdi
je 0x180034265
mov rsi, qword [rbp + 0xc0]
cmp rdi, rsi
je 0x180034218
nop dword [rax]
mov rcx, rdi
call fcn.18001b890
add rdi, 0x20
cmp rdi, rsi
jne 0x180034200
mov rdi, qword [rbp + 0xb8]
mov rdx, qword [rbp + 0xc8]
mov rax, rdi
sub rdx, rdi
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x18003424b
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
mov rcx, rdi
call fcn.1800473c8
xorps xmm0, xmm0
mov qword [rbp + 0xb8], r13
movdqa xmmword [rbp + 0xc0], xmm0
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x1800342bb
mov rdx, qword [rbp + 0xb0]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff0
cmp rdx, 0x1000
jb 0x1800342a4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
call fcn.1800473c8
xorps xmm0, xmm0
mov qword [rbp + 0xb0], r13
movdqa xmmword [rbp + 0xa0], xmm0
lea rcx, [rbp + 0x58]
call fcn.180004a40
mov rdi, qword [rbp - 0x68]
test rdi, rdi
je 0x180034358
mov rsi, qword [rbp - 0x60]
cmp rdi, rsi
je 0x1800342f5
nop word [rax + rax]
mov rcx, rdi
call fcn.1800049e0
add rdi, 0x28
cmp rdi, rsi
jne 0x1800342e0
mov rdi, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x58]
movabs rax, 0x6666666666666667
sub rcx, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rdi
lea rdx, [rdx + rdx*4]
shl rdx, 3
cmp rdx, 0x1000
jb 0x180034344
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
mov rcx, rdi
call fcn.1800473c8
xorps xmm0, xmm0
mov qword [rbp - 0x68], r13
movdqa xmmword [rbp - 0x60], xmm0
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1800343a2
mov rdx, qword [rbp - 0x70]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x180034391
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
call fcn.1800473c8
xorps xmm0, xmm0
mov qword [rbp - 0x70], r13
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rbp - 6]
cmp rdx, 0x10
jb 0x1800343d9
mov rcx, qword [rbp - 0x1e]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800343d4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
call fcn.1800473c8
mov rdx, qword [rbp + 0x42]
movdqa xmm0, xmmword [0x18006bb00]
mov byte [rbp - 0x1e], 0
movdqu xmmword [rbp - 0xe], xmm0
cmp rdx, 0x10
jb 0x180034421
mov rcx, qword [rbp + 0x2a]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003441c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180034445
call fcn.1800473c8
mov eax, ebx
add rsp, 0x298
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ebx, r13d
jmp 0x1800341d8
call fcn.18001bd00
int3
call fcn.18004b4d4
int3
call fcn.18001b740
int3