Function at 0x1800378e0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x180088280]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rdi, rcx
cmp edx, 1
jne 0x180037d08
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 1
call fcn.180042424
mov r9, rax
lea r8, [0x18006e1cc]
lea rdx, [0x18006e1d0]
lea rcx, [rsp + 0x40]
call fcn.18004f2d4
mov qword [0x180089b98], rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 0x18
lea r8, [rsp + 0x48]
mov rdx, rbx
call sub.KERNEL32.dll_K32GetModuleInformation
mov qword [0x180089ce0], rbx
mov eax, dword [rsp + 0x50]
add rax, rbx
mov qword [0x180089ce8], rax
lea rcx, str.48_8B___48_89_____55_56_57_41___41___41___41___48_8D___________48_81_EC_________0F_29_____0F_29_____48_8B___________48_33___48_89___________4C_8B___48_89_______4C_8B
call fcn.180030170
mov qword [0x180089cf0], rax
lea rcx, str.48_8B_C4_48_89_58___48_89_68___48_89_70___57_41_54_41_55_41_56_41_57_48_83_EC___44_0F_B7_BC_24
call fcn.180030170
mov qword [0x180089cf8], rax
lea rcx, str.__________55_56_57_48_83_EC_70_4C_8B_94_24_________48_8D_84_24________
call fcn.180030170
mov qword [0x180089d00], rax
lea rcx, str.48_83_______B6_C1_4C_8D_05_________89_54_24_20_88_4C_24_24_41_89_14_80
call fcn.180030170
mov qword [0x180089d08], rax
lea rcx, str.48_89_5C_24_08_48_89_74_24_10_57_48_83_EC_60_____74_24_50_49_8B_D8_____F3_48_8B_FA_48_8B_F1_E8_________F3_____03_48_8D_44_24_40
call fcn.180030170
mov qword [0x180089d10], rax
lea rcx, str.48_8B_C4_48_89_58_18_48_89_70_20_57_48_81_EC_____________70_E8_____78_D8_44_____40_C8_44_____48_B8_48_8B_05_________48_33_C4_48_89_44_24_48_41_____F0
call fcn.180030170
mov qword [0x180089d18], rax
lea rcx, str.41_0F_10_08_48_8B_C2_0F
call fcn.180030170
mov rbx, rax
mov qword [0x180089d20], rax
lea rcx, str.44_8B_C2_B8_________F7_EA
call fcn.180030170
mov qword [0x180089d28], rax
lea rcx, str.48_8B_C4_48_89_58_10_48_89_68_18_56_57_41_54_41_56_41_57_48_81_EC_____________70_C8_____78_B8_48_8B_05________
call fcn.180030170
mov qword [0x180089d30], rax
mov rdx, rbx
lea rcx, [0x18008a5c0]
call fcn.18002f3d0
mov rbx, rax
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rax, qword [rax + rbx + 0x40]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x38], rcx
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rsp + 0x30]
call fcn.18002e130
mov rcx, rax
mov rax, qword [rax]
mov dl, 0xa
call qword [rax + 0x40]
movzx esi, al
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x180037a9d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, rax
test rax, rax
je 0x180037a9d
mov rax, qword [rax]
mov edx, 1
call qword [rax]
movzx edx, sil
mov rcx, rbx
call fcn.180036960
mov rcx, rbx
call fcn.1800357e0
lea rcx, [0x180089bc8]
call fcn.180030470
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
mov r9, rdi
lea r8, [0x180030c40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x180088260]
mov rdx, qword [0x180088268]
mov rax, rdx
sub rax, rcx
lea rdi, [0x180088250]
cmp rax, 0x1d
jb 0x180037b35
lea rax, [rcx + 0x1d]
mov qword [0x180088260], rax
mov rbx, rdi
cmp rdx, 0x10
cmovae rbx, qword [0x180088250]
add rbx, rcx
mov r8d, 0x1d
lea rdx, str.Client_injected_successfully_
mov rcx, rbx
call fcn.18003d5b0
mov byte [rbx + 0x1d], 0
jmp 0x180037b54
mov qword [rsp + 0x20], 0x1d
lea r9, str.Client_injected_successfully_
xor r8d, r8d
lea edx, [r8 + 0x1d]
mov rcx, rdi
call fcn.18002db80
mov rcx, qword [0x180088260]
mov rdx, qword [0x180088268]
cmp rcx, rdx
jae 0x180037b89
lea rax, [rcx + 1]
mov qword [0x180088260], rax
mov rax, rdi
cmp rdx, 0x10
cmovae rax, qword [0x180088250]
mov word [rax + rcx], 0xa
jmp 0x180037b9b
mov r9b, 0xa
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rdi
call fcn.18002da10
mov rcx, qword [0x180088260]
mov rdx, qword [0x180088268]
mov rax, rdx
sub rax, rcx
cmp rax, 0x16
jb 0x180037bed
lea rax, [rcx + 0x16]
mov qword [0x180088260], rax
mov rbx, rdi
cmp rdx, 0x10
cmovae rbx, qword [0x180088250]
add rbx, rcx
mov r8d, 0x16
lea rdx, str.Press_DEL_to_uninject.
mov rcx, rbx
call fcn.18003d5b0
mov byte [rbx + 0x16], 0
jmp 0x180037c0c
mov qword [rsp + 0x20], 0x16
lea r9, str.Press_DEL_to_uninject.
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, rdi
call fcn.18002db80
mov rcx, qword [0x180088260]
mov rdx, qword [0x180088268]
cmp rcx, rdx
jae 0x180037c41
lea rax, [rcx + 1]
mov qword [0x180088260], rax
mov rax, rdi
cmp rdx, 0x10
cmovae rax, qword [0x180088250]
mov word [rax + rcx], 0xa
jmp 0x180037c53
mov r9b, 0xa
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rdi
call fcn.18002da10
mov rcx, qword [0x180088260]
mov rdx, qword [0x180088268]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1f
jb 0x180037ca5
lea rax, [rcx + 0x1f]
mov qword [0x180088260], rax
mov rbx, rdi
cmp rdx, 0x10
cmovae rbx, qword [0x180088250]
add rbx, rcx
mov r8d, 0x1f
lea rdx, str.Press_INSERT_to_show_hide_menu.
mov rcx, rbx
call fcn.18003d5b0
mov byte [rbx + 0x1f], 0
jmp 0x180037cc4
mov qword [rsp + 0x20], 0x1f
lea r9, str.Press_INSERT_to_show_hide_menu.
xor r8d, r8d
lea edx, [r8 + 0x1f]
mov rcx, rdi
call fcn.18002db80
mov rax, qword [0x180088260]
mov rdx, qword [0x180088268]
cmp rax, rdx
jae 0x180037cf6
lea rcx, [rax + 1]
mov qword [0x180088260], rcx
cmp rdx, 0x10
cmovae rdi, qword [0x180088250]
mov word [rdi + rax], 0xa
jmp 0x180037d08
mov r9b, 0xa
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rdi
call fcn.18002da10
mov eax, 1
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.180038000
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret