Function at 0x1400b7630
Capabilities:
Create thread

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rbx, r8
mov r14, rdx
mov rdi, rcx
mov eax, dword [0x141dd33d0]
sub eax, dword [0x141dd33d4]
imul eax, eax, 0x75525701
xor eax, 0x800a54c4
and eax, 0xad2bd6dc
cmp eax, 0x25a4f9ef
jae 0x1400b7670
movzx eax, byte [0x141dda6b8]
nop dword [rax]
mov eax, dword [0x141dd33d8]
or eax, dword [0x141dd33dc]
or eax, 0x973f73b7
and eax, 0xb7ff7bf7
movzx ecx, byte [0x141dda6b8]
cmp eax, 0x218e8bcf
jb 0x1400b7670
mov edx, 0x10
xor ecx, ecx
call fcn.1400bf230
test rax, rax
je 0x1400b7849
mov rsi, rax
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10000
lea r8, [0x1400b8340]
xor ebx, ebx
xor ecx, ecx
mov rdx, rdi
mov r9, rax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdx, rax
test rax, rax
jne 0x1400b7970
mov eax, dword [0x141dd33e0]
xor ecx, ecx
xor edx, edx
div dword [0x141dd33e4]
nop word [rax + rax]
test cl, cl
jne 0x1400b7700
mov rdi, qword [rsi]
mov rbx, qword [rsi + 8]
mov rax, qword [rbx]
test rax, rax
je 0x1400b7748
mov rcx, rdi
call rax
nop dword [rax + rax]
mov eax, dword [0x141dd33e8]
and eax, dword [0x141dd33ec]
add eax, 0xad6d46eb
imul rax, rax, 0x6339fbf1
shr rax, 0x3d
add eax, 0xc0ea9846
cmp eax, 0xc567d540
ja 0x1400b7720
mov eax, 0xa895f5c7
nop dword [rax]
mov ecx, dword [0x141dd33f0]
sub ecx, dword [0x141dd33f4]
and ecx, 0xc0200900
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xc3444f4a
je 0x1400b7750
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
mov edx, 0x8ed3e17d
nop
mov r8d, dword [0x141dd33f8]
sub r8d, dword [0x141dd33fc]
and r8d, 0x765b6d74
imul r8, rdx
shr r8, 0x3c
cmp r8d, 0x58dd8725
je 0x1400b7780
mov edx, 0xa8cd5827
nop dword [rax + rax]
mov r8d, dword [0x141dd3400]
or r8d, dword [0x141dd3404]
imul r8d, r8d, 0x8c288a6a
add r8d, 0x995bec16
imul r8, rdx
shr r8, 0x3e
cmp r8d, 0xf3e02b6e
je 0x1400b77b0
test rcx, rcx
je 0x1400b7893
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x1400b77f0
cmp rax, 0x11
jb 0x1400b781d
mov rdi, qword [rdi - 8]
nop
mov eax, dword [0x141dd3408]
and eax, dword [0x141dd340c]
or eax, 0xc9b4eea2
add eax, 0x72d06358
cmp eax, 0x883bfe90
ja 0x1400b7800
mov eax, dword [0x141dd3410]
imul eax, dword [0x141dd3414]
imul eax, eax, 0x41b7f72c
and eax, 0xec1cb92c
imul rax, rax, 0x65efe8f5
shr rax, 0x3e
cmp eax, 0xeabd8eae
jbe 0x1400b784b
jmp 0x1400b787f
ud2
mov eax, dword [0x141dd3418]
xor edx, edx
div dword [0x141dd341c]
imul ebx, eax, 0x9846f612
add ebx, 0xf3293202
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebx, 0xbfa29f0c
jbe 0x1400b7893
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400b784b
mov eax, dword [0x141dd3420]
sub eax, dword [0x141dd3424]
imul eax, eax, 0x1839b6ce
add eax, 0x89746d72
cmp eax, 0x9a55afcf
jbe 0x1400b78c0
mov rax, qword [0x141dda6a0]
nop dword [rax + rax]
mov eax, dword [0x141dd3428]
or eax, dword [0x141dd342c]
or eax, 0xb734bfff
and eax, 0xbf34ffff
mov rdi, qword [0x141dda6a0]
cmp eax, 0xcb470ea8
ja 0x1400b78c0
mov eax, dword [0x141dd3430]
or eax, dword [0x141dd3434]
imul rax, rax, 0x5f7ed06b
shr rax, 0x3c
imul eax, eax, 0x7558534c
cmp eax, 0xc3b2e3b1
ja 0x1400b7940
mov eax, dword [0x141dd3438]
or eax, dword [0x141dd343c]
or eax, 0xf7765fdd
imul rbx, rax, 0x1797bb2d
shr rbx, 0x39
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, 0x4170fdf5
jne 0x1400b7956
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400b7908
movsxd rdx, eax
shl rdx, 0x20
or rdx, 2
mov ebx, 1
nop word cs:[rax + rax]
mov eax, dword [0x141dd3440]
add eax, dword [0x141dd3444]
imul eax, eax, 0x673d8a11
add eax, 0x5fa83047
imul rax, rax, 0x6d330811
shr rax, 0x3d
cmp eax, 0x485692c2
ja 0x1400b7970
mov rax, rbx
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret