Function at 0x416b00
Capabilities:
Create thread

Disassembly:
push rbp
sub rsp, 0xa0
lea rbp, [rsp + 0x80]
mov rax, qword [rbp + 0x50]
mov rax, qword [0x00442300]
mov rax, qword [rax]
xor rax, rbp
mov qword [rbp + 0x18], rax
mov qword [rbp + 8], rcx
mov qword [rbp], rdx
mov dword [rbp - 4], r8d
mov qword [rbp - 0x10], r9
mov qword [rbp + 0x10], 0
cmp dword [rbp - 4], 2
je 0x416b77
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
lea r8, [rbp + 0x10]
call fcn.00411c40
test al, 1
jne 0x416b72
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
call fcn.00416fb0
jmp 0x416f7f
jmp 0x416b77
cmp dword [rbp - 4], 2
jne 0x416c1b
mov byte [rbp - 0x11], 0
test byte [0x00454c24], 1
jne 0x416bae
mov rcx, qword [rbp + 8]
xor edx, edx
call fcn.0040a040
test al, 1
jne 0x416ba9
mov byte [rbp - 0x11], 1
jmp 0x416bb2
mov byte [rbp - 0x11], 1
test byte [rbp - 0x11], 1
jne 0x416bce
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
call fcn.00416fb0
jmp 0x416f7f
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
lea r8, [rbp + 0x10]
call fcn.00417120
test al, 1
jne 0x416bec
jmp 0x416bff
mov rcx, qword [rbp + 8]
mov edx, 1
call fcn.0040a040
jmp 0x416c11
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
call fcn.00416fb0
jmp 0x416f7f
jmp 0x416c16
jmp 0x416c37
cmp dword [rbp - 4], 3
jne 0x416c32
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
call fcn.00416fb0
jmp 0x416c37
test byte [0x0045ab60], 1
je 0x416ce0
mov rax, qword [0x0045ab70]
add rax, qword [rbp + 0x50]
cmp rax, qword [0x0045ab68]
jbe 0x416c95
mov byte [0x0045ab60], 0
mov qword [0x0045ab68], 0
mov qword [0x0045ab70], 0
mov rcx, qword [0x0045ab78]
call fcn.0040c650
mov qword [0x0045ab78], 0
jmp 0x416f7f
mov rcx, qword [0x0045ab78]
add rcx, qword [0x0045ab70]
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp + 0x50]
call fcn.0041bba0
mov rax, qword [rbp + 0x50]
add rax, qword [0x0045ab70]
mov qword [0x0045ab70], rax
mov rax, qword [0x0045ab70]
cmp rax, qword [0x0045ab68]
jae 0x416cdb
jmp 0x416f7f
jmp 0x416da5
cmp dword [rbp - 4], 1
jne 0x416da0
mov rax, qword [rbp - 0x10]
movzx eax, byte [rax + 7]
cmp eax, 0xf6
jne 0x416d9b
cmp qword [rbp + 0x50], 8
jb 0x416d96
mov rax, qword [rbp - 0x10]
movzx eax, byte [rax]
cmp eax, 0xdd
jne 0x416d96
mov rcx, qword [rbp - 0x10]
add rcx, 8
xor eax, eax
mov edx, eax
mov r8d, 0xa
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
mov eax, eax
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x20], 0
jbe 0x416d91
cmp qword [rbp - 0x20], 0x3d09000
ja 0x416d91
mov rcx, qword [rbp - 0x20]
call fcn.0040afc0
mov qword [0x0045ab78], rax
mov rcx, qword [0x0045ab78]
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp + 0x50]
call fcn.0041bba0
mov qword [0x0045ab70], 0
mov rax, qword [rbp - 0x20]
mov qword [0x0045ab68], rax
mov byte [0x0045ab60], 1
jmp 0x416d96
jmp 0x416f7f
jmp 0x416da0
jmp 0x416da5
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x30], 0
test byte [0x0045ab60], 1
je 0x416e05
mov rax, qword [0x0045ab70]
mov qword [rbp - 0x30], rax
mov rax, qword [0x0045ab78]
mov qword [rbp - 0x28], rax
mov byte [0x0045ab60], 0
mov qword [0x0045ab68], 0
mov qword [0x0045ab70], 0
mov qword [0x0045ab78], 0
jmp 0x416e6e
mov rax, qword [rbp + 0x50]
mov qword [rbp - 0x30], rax
cmp qword [rbp + 0x50], 0
jbe 0x416e61
mov rax, qword [rbp + 8]
test byte [rax + 0x1858], 1
je 0x416e36
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x28], rax
jmp 0x416e5c
mov rcx, qword [rbp + 0x50]
call fcn.0040afc0
mov qword [rbp - 0x38], rax
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp + 0x50]
call fcn.0041bba0
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x28], rax
jmp 0x416e69
mov qword [rbp - 0x28], 0
jmp 0x416e6e
mov rax, qword [rbp + 8]
test byte [rax + 0x1858], 1
je 0x416ec9
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
mov r9, qword [rbp - 0x28]
mov r11, qword [rbp - 0x30]
mov r10, qword [0x0045ab58]
add r10, 1
mov qword [0x0045ab58], r10
mov eax, dword [rbp - 4]
mov qword [rsp + 0x20], r11
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x30], eax
call fcn.00417250
mov rcx, qword [rbp - 0x28]
call fcn.0040c650
jmp 0x416f7f
mov ecx, 0x38
call fcn.0040afc0
mov qword [rbp - 0x40], rax
mov rcx, qword [rbp + 8]
mov rax, qword [rbp - 0x40]
mov qword [rax], rcx
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x40]
mov qword [rax + 8], rcx
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x40]
mov qword [rax + 0x10], rcx
mov rcx, qword [0x0045ab58]
add rcx, 1
mov qword [0x0045ab58], rcx
mov rax, qword [rbp - 0x40]
mov qword [rax + 0x18], rcx
mov ecx, dword [rbp - 4]
mov rax, qword [rbp - 0x40]
mov dword [rax + 0x20], ecx
mov rcx, qword [rbp]
mov rax, qword [rbp - 0x40]
mov qword [rax + 0x28], rcx
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp - 0x40]
mov qword [rax + 0x30], rcx
mov r9, qword [rbp - 0x40]
xor eax, eax
mov edx, eax
lea r8, [0x004180c0]
xor eax, eax
mov rcx, rdx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x48], rax
cmp qword [rbp - 0x48], 0
je 0x416f7a
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x416f7f
mov rcx, qword [rbp + 0x18]
xor rcx, rbp
mov rax, qword [0x00442300]
mov rax, qword [rax]
sub rax, rcx
jne 0x416f9e
jmp 0x416fa3
call fcn.0041bf30
nop
add rsp, 0xa0
pop rbp
ret