Function at 0x18001c360
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x90
cmp byte [rcx + 0x2f], 0
mov rdi, rcx
jne 0x18001c891
mov qword [rax + 0x18], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], r12
mov qword [rax - 0x28], r13
mov qword [rax - 0x30], r14
xor r14d, r14d
mov byte [rcx + 0x2f], 1
mov esi, r14d
mov qword [rax - 0x38], r15
lea ecx, [r14 + 0x20]
call fcn.180020be8
mov rbx, rax
lea r8, [0x18001bb20]
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rax + 9], r14d
mov word [rax + 0xd], r14w
mov byte [rax + 0xf], sil
mov qword [rax], rdi
lea rax, [0x18001bac0]
mov qword [rbx + 0x10], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov qword [rbx + 0x18], rdi
mov byte [rbx + 8], 1
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbp, rax
test rax, rax
jne 0x18001c40e
lea edx, [rax + 0x20]
mov rcx, rbx
call fcn.180020be0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rdi + 0x50], rbp
cmp byte [rdi + 0x28], r14b
je 0x18001c4cf
mov ecx, 0x20
mov esi, r14d
call fcn.180020be8
mov rbx, rax
lea r8, [0x18001bb20]
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rax + 9], r14d
mov word [rax + 0xd], r14w
mov byte [rax + 0xf], sil
mov qword [rax], rdi
lea rax, [0x18001bad0]
mov qword [rbx + 0x10], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov qword [rbx + 0x18], rdi
mov byte [rbx + 8], 1
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18001c4b2
lea rcx, [rdi + 0xa0]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x18001c4a3
mov eax, dword [rsp + 0xa0]
mov dword [rdx], eax
add qword [rcx + 8], 4
jmp 0x18001c4c7
lea r8, [rsp + 0xa0]
call fcn.18001d3a0
jmp 0x18001c4c7
mov edx, 0x20
mov rcx, rbx
call fcn.180020be0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rdi]
lea rdx, str.Started
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
mov rcx, qword [rdi + 0x68]
lea rdx, str.Failed_to_connect_to__s_n
mov rax, qword [rdi]
mov r8d, 2
mov r9, qword [rcx + 0x20]
cmp byte [rcx + 0x3d], r14b
mov rcx, rdi
mov r10, qword [rax + 0x10]
jne 0x18001c511
lea rdx, str.Successfully_connected_to__s_n
call r10
mov rsi, qword [rdi + 0x60]
lea rdx, str.filename
xorps xmm0, xmm0
mov qword [rsp + 0xa0], rsi
mov r8d, 8
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x58], r14
movups xmmword [rsp + 0x40], xmm0
call fcn.180009780
mov r12, qword [rsi + 0x48]
mov r13, qword [rsp + 0x58]
mov r14, r12
mov rbp, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
mov rbx, qword [r12 + 8]
cmp byte [rbx + 0x19], 0
jne 0x18001c5c1
nop word [rax + rax]
cmp r13, 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rbx + 0x20]
cmovae rdx, r15
cmp qword [rbx + 0x38], 0x10
jb 0x18001c58c
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rbp, rsi
mov r8, rsi
cmovb r8, rbp
call fcn.180023690
test eax, eax
je 0x18001c7cb
js 0x18001c7d4
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x18001c570
mov rsi, qword [rsp + 0xa0]
cmp byte [r14 + 0x19], 0
jne 0x18001c605
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x18001c5d7
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rsp + 0x40]
cmp r13, 0x10
mov r8, rbp
cmovae rcx, r15
cmp rbx, rbp
cmovb r8, rbx
call fcn.180023690
test eax, eax
je 0x18001c7dd
jns 0x18001c7e6
xor al, al
test al, al
cmove r14, r12
cmp r13, 0x10
jb 0x18001c644
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18001c63c
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c89a
mov rcx, r15
call fcn.180020be0
cmp r14, qword [rsi + 0x48]
je 0x18001c80f
mov rax, qword [r14 + 0x40]
lea rdx, str.fileversion
mov rsi, qword [rdi + 0x60]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xa8], rax
xorps xmm0, xmm0
xor eax, eax
mov qword [rsp + 0xa0], rsi
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea r8d, [rax + 0xb]
call fcn.180009780
mov r12, qword [rsi + 0x48]
mov r13, qword [rsp + 0x58]
mov r14, r12
mov rbp, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
mov rbx, qword [r12 + 8]
cmp byte [rbx + 0x19], 0
jne 0x18001c701
cmp r13, 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rbx + 0x20]
cmovae rdx, r15
cmp qword [rbx + 0x38], 0x10
jb 0x18001c6cc
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rbp, rsi
mov r8, rsi
cmovb r8, rbp
call fcn.180023690
test eax, eax
je 0x18001c7ed
js 0x18001c7f6
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x18001c6b0
mov rsi, qword [rsp + 0xa0]
cmp byte [r14 + 0x19], 0
jne 0x18001c745
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x18001c717
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rsp + 0x40]
cmp r13, 0x10
mov r8, rbp
cmovae rcx, r15
cmp rbx, rbp
cmovb r8, rbx
call fcn.180023690
test eax, eax
je 0x18001c7ff
jns 0x18001c808
xor al, al
test al, al
cmove r14, r12
cmp r13, 0x10
jb 0x18001c784
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18001c77c
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c89a
mov rcx, r15
call fcn.180020be0
cmp r14, qword [rsi + 0x48]
je 0x18001c80f
mov rax, qword [rdi]
lea rdx, str.filename:__s
mov r9, qword [rsp + 0xa8]
mov r8d, 2
mov rbx, qword [r14 + 0x40]
mov rcx, rdi
call qword [rax + 0x10]
mov rax, qword [rdi]
lea rdx, str.fileversion__s
mov r9, rbx
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x18001c825
cmp rsi, rbp
jae 0x18001c5ad
mov rbx, qword [rbx + 0x10]
jmp 0x18001c5b3
cmp rbp, rbx
jb 0x18001c605
mov al, 1
jmp 0x18001c607
cmp rsi, rbp
jae 0x18001c6ed
mov rbx, qword [rbx + 0x10]
jmp 0x18001c6f3
cmp rbp, rbx
jb 0x18001c745
mov al, 1
jmp 0x18001c747
mov rax, qword [rdi]
lea rdx, str.Could_not_find_fileversion_and_filename
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
cmp byte [rdi + 0x29], 0
je 0x18001c865
xor ecx, ecx
call fcn.18001d530
mov r10, qword [rdi]
lea rdx, str.dllloaded
mov rbx, rax
xor r9d, r9d
xor eax, eax
mov r8b, 1
mov qword [rsp + 0x30], rax
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call qword [r10 + 0x20]
mov rcx, rbx
call fcn.180020be0
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x88]
mov rbx, qword [rsp + 0xb0]
mov r15, qword [rsp + 0x60]
add rsp, 0x90
pop rdi
ret
call fcn.180027c8c
int3