Function at 0x18003cd40
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
lea r13d, [r8 + 0x4bc]
movaps xmmword [rsp + 0x70], xmm6
mov dword [rsp + 0x48], r13d
mov rax, r9
mov edi, r8d
mov r15, rcx
cmp r8d, r13d
jae 0x18003cf02
mov r14, qword [rsp + 0x58]
xor ebx, ebx
mov r12d, dword [rsp + 0xd0]
xorps xmm6, xmm6
mov rbp, qword [rsp + 0x58]
lea r8, [0x1800438e0]
cmp edi, 0x186
ja 0x18003d130
je 0x18003d0f4
cmp edi, 0xdb
ja 0x18003ce56
je 0x18003ce3e
mov eax, edi
sub eax, 6
je 0x18003cdf5
sub eax, 0x65
je 0x18003d1c6
cmp eax, 0x51
jne 0x18003d1a5
xor r9d, r9d
lea edx, [rax - 0x45]
xor r8d, r8d
xor ecx, ecx
call fcn.18003cb90
mov qword [rsp + 0x58], rax
jmp 0x18003d1a5
mov qword [rsp + 0x28], rbx
lea r8, [0x180010e20]
mov r9, r15
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r15], rax
test rax, rax
je 0x18003cefe
xor edx, edx
mov dword [rsp + 0x40], 1
mov r9, r15
lea rcx, [rsp + 0x40]
lea r8d, [rdx + 0x2f]
call fcn.180013aa0
jmp 0x18003d1a5
mov r14, qword [rax + 0x20]
test r14, r14
je 0x18003cefe
mov r12d, ebx
mov rbp, rdx
jmp 0x18003d1ad
mov eax, edi
sub eax, 0x121
je 0x18003d08f
cmp eax, 0x1f
jne 0x18003d1a5
cmp qword [r14 + 0x10], rbx
je 0x18003d01d
mov r13d, 0x30
nop dword [rax]
mov eax, r13d
sub eax, 0x2d
je 0x18003cf27
sub eax, 1
je 0x18003ceca
sub eax, 1
je 0x18003cead
cmp eax, 1
jne 0x18003d002
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x68], ebx
jmp 0x18003d002
mov rcx, qword [rsp + 0xe0]
mov eax, dword [rcx + 4]
test eax, eax
je 0x18003d002
dec eax
mov dword [rcx + 4], eax
jmp 0x18003d002
mov rax, qword [rsp + 0xe0]
lea rdx, [rsp + 0xd0]
mov r9, qword [r14 + 0x10]
mov r8, rbp
mov dword [rsp + 0x28], 0xf5
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.180026e00
test al, al
jne 0x18003d002
mov byte [rsp + 0x50], bl
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0xc0]
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rbp, qword [rbp + 0x18]
inc r12d
test rbp, rbp
je 0x18003d002
nop word [rax + rax]
mov ecx, 0x49
mov eax, ecx
sub eax, 0x49
je 0x18003cf5e
cmp eax, 1
jne 0x18003cfee
mov rbp, qword [rbp + 0x18]
jmp 0x18003cfee
mov rax, qword [r14 + 0x10]
mov rsi, rbx
cmp qword [rax + 8], rbx
jbe 0x18003cfe4
mov rdi, rbx
nop
mov qword [rsp + 0x40], r8
lea rdx, [rsp + 0xd0]
mov byte [rsp + 0xd0], bl
mov r9, rbp
mov rcx, qword [rax]
xor r8d, r8d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov rcx, qword [rdi + rcx]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 0x58
call fcn.180025b00
lea r8, [0x1800438e0]
cmp byte [rsp + 0xd0], bl
jne 0x18003cfe1
mov rax, qword [r14 + 0x10]
inc rsi
add rdi, 0x18
cmp rsi, qword [rax + 8]
jb 0x18003cf70
lea r8, [0x1800438e0]
jmp 0x18003cfe4
inc r12d
mov ecx, 0x49
mov edi, 0x140
inc ecx
cmp ecx, 0x4b
jb 0x18003cf45
test rbp, rbp
jne 0x18003cf40
dec r13d
lea r8, [0x1800438e0]
cmp r13d, 0x2c
ja 0x18003ce80
mov r13d, dword [rsp + 0x48]
jmp 0x18003d03b
test rbp, rbp
je 0x18003d03b
mov rax, qword [rbp + 8]
dec rax
cmp rax, 1
jbe 0x18003d032
inc r12d
mov rbp, qword [rbp + 0x18]
test rbp, rbp
jne 0x18003d022
mov edx, dword [r14]
mov ecx, dword [r14 + 4]
test edx, edx
jne 0x18003d04b
cmp ecx, r12d
jmp 0x18003d080
mov eax, r12d
movd xmm0, edx
sub eax, ecx
cvtdq2pd xmm0, xmm0
movd xmm1, eax
cvtdq2pd xmm1, xmm1
divsd xmm1, xmm0
comisd xmm1, xmm6
jb 0x18003d086
cvttsd2si eax, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm1, xmm0
ucomisd xmm1, xmm6
jp 0x18003d086
je 0x18003d1c6
mov byte [rsp + 0x50], bl
jmp 0x18003d1a5
xor r9d, r9d
mov dword [rsp + 0x20], 0x84
xor r8d, r8d
xor edx, edx
mov rcx, r15
call fcn.18001f700
cmp eax, 0x70
jne 0x18003d0e2
xor r9d, r9d
lea ecx, [rax + 0x2c]
xor r8d, r8d
mov rdx, r15
call fcn.180023760
cmp eax, 3
jne 0x18003d0e2
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa4
mov rcx, r15
call fcn.18002cc00
mov rcx, qword [rsp + 0x58]
mov qword [rcx], rax
jmp 0x18003d1a5
mov dword [r15 + 0x14], 1
mov edi, 0x2b5
jmp 0x18003d1a5
mov edx, 0x7b
mov rcx, r15
call fcn.1800209e0
test eax, eax
jne 0x18003d199
lea edx, [rax + 0x26]
mov rcx, r15
call fcn.180040360
mov rcx, qword [rsp + 0x58]
mov edx, 0x7b
mov qword [rcx + 8], rax
mov rcx, r15
call fcn.1800209e0
test eax, eax
jne 0x18003d199
jmp 0x18003d1a5
mov eax, edi
sub eax, 0x1a5
je 0x18003cf02
sub eax, 0x46
je 0x18003d16d
sub eax, 0x65
je 0x18003cf02
sub eax, 0x65
je 0x18003d199
cmp eax, 0x65
jne 0x18003d1a5
mov rcx, qword [rsp + 0x58]
lea edx, [rax + 0x55]
xor r8d, r8d
call fcn.18003c980
mov rax, rbx
jmp 0x18003cf07
mov r9, r15
xor edx, edx
xor ecx, ecx
mov r8d, 0xdf
call fcn.18002d460
mov rsi, qword [rsp + 0x58]
mov edx, 0x7b
mov rcx, r15
mov qword [rsi + 0x10], rax
call fcn.1800209e0
test eax, eax
je 0x18003d1a0
mov edi, 0x2b5
jmp 0x18003d1a5
mov qword [rsp + 0x50], rsi
mov rax, qword [rsp + 0xd8]
add edi, 0x65
cmp edi, r13d
jae 0x18003cf02
mov rdx, qword [rsp + 0xc8]
jmp 0x18003cd9b
mov byte [rsp + 0x50], 1
jmp 0x18003cf02