Function at 0x180003840
Capabilities:
Create thread

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x78
lea rbp, [rsp + 0x70]
mov qword [rbp], 0xfffffffffffffffe
mov eax, dword [0x180069308]
mov edi, dword [0x18006930c]
lea ebx, [rax - 1]
imul ebx, eax
test bl, 1
sete byte [rbp - 3]
cmp edi, 0xa
setl byte [rbp - 4]
mov qword [rbp - 0x68], rdx
cmp rdx, 0xffffffffffffffff
mov eax, 0xf69a6e1d
mov edx, 0x3c700295
cmove edx, eax
mov dword [rbp - 0x44], edx
mov r15, rcx
mov esi, 0x40cb1daf
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, 0x2724bce
mov r12d, 0xac52c04f
jmp 0x1800038ed
mov rcx, qword [rbp - 0x18]
cmp rax, qword [rcx + 8]
sete byte [rbp - 5]
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x3cb022a9
mov eax, 0xb3260524
nop word [rax + rax]
cmove esi, eax
cmp dword [0x18006930c], 0xa
cmovl esi, eax
cmp esi, 0xf21d0cc5
jg 0x180003950
cmp esi, 0xae8d1649
jg 0x180003a50
cmp esi, 0x9c93b4ad
jg 0x180003afc
cmp esi, 0x926c5057
jg 0x180003be1
cmp esi, 0x862ed43b
je 0x180003e94
cmp esi, 0x8db9ce15
jne 0x1800038ed
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.180004880
add rsp, 0x20
mov rax, qword [rbp - 0x38]
mov esi, 0x958057f5
jmp 0x1800038ed
cmp esi, 0x3c700294
jle 0x180003aa0
cmp esi, 0x40cb1dae
jg 0x180003b3e
cmp esi, 0x3d0dcb5e
jg 0x180003c2c
cmp esi, 0x3c700295
je 0x180003e9e
cmp esi, 0x3cb022a9
jne 0x1800038ed
mov eax, 0x20
call fcn.1800392c0
sub rsp, rax
mov rsi, rsp
sub rsp, 0x20
mov rcx, rsi
call fcn.180006e20
mov rcx, rsi
call fcn.180005d70
add rsp, 0x20
mov eax, dword [0x180069420]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp - 1]
mov ecx, dword [0x180069424]
mov eax, 0xaa2ecda2
cmove eax, r14d
cmp ecx, 0xa
setl byte [rbp - 2]
cmovl eax, r14d
mov ecx, 0x19506bfa
nop word cs:[rax + rax]
cmp ecx, 0x2724bcd
jg 0x180003a10
cmp ecx, 0xaa2ecda2
je 0x180003a3d
cmp ecx, 0xac52c04f
jne 0x1800039f0
mov qword [rbp - 0x18], rsi
mov ecx, eax
jmp 0x1800039f0
cmp ecx, 0x2724bce
je 0x180003ebc
cmp ecx, 0x19506bfa
jne 0x1800039f0
movzx edx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov ecx, 0xaa2ecda2
cmovne ecx, r12d
test dl, dl
cmovne ecx, r12d
jmp 0x1800039f0
mov ecx, 0xac52c04f
jmp 0x1800039f0
cmp esi, 0xcd139c52
jg 0x180003b6a
cmp esi, 0xb57d7135
jg 0x180003c64
cmp esi, 0xae8d164a
je 0x180003eca
cmp esi, 0xb3260524
jne 0x1800038ed
cmp byte [rbp - 5], 0
mov esi, 0x926c5058
mov eax, 0xa43f615c
cmovne esi, eax
jmp 0x1800038ed
cmp esi, 0x6b7c9b
jle 0x180003b9f
cmp esi, 0x29cb5ad3
jg 0x180003c9a
cmp esi, 0x6b7c9c
je 0x180003eda
cmp esi, 0x23d1a340
jne 0x1800038ed
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x4c], eax
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp - 0x58]
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x51b4ca69
mov eax, 0xb57d7136
jmp 0x1800038e0
cmp esi, 0xabffed15
jg 0x180003cc2
cmp esi, 0x9c93b4ae
je 0x180003f82
cmp esi, 0xa43f615c
jne 0x1800038ed
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x6fb6f869
mov eax, 0xc0de0f3a
jmp 0x1800038e0
cmp esi, 0x51b4ca68
jg 0x180003dd4
cmp esi, 0x40cb1daf
je 0x180003fa4
cmp esi, 0x50974115
jne 0x1800038ed
mov esi, dword [rbp - 0x44]
jmp 0x1800038ed
cmp esi, 0xd94ab80f
jle 0x180003df6
cmp esi, 0xd94ab810
je 0x180003fc2
cmp esi, 0xde3f7783
jne 0x1800038ed
mov esi, 0x23d1a340
mov dword [rbp - 0x1c], 0
jmp 0x1800038ed
cmp esi, 0xf21d0cc6
je 0x180003fd0
cmp esi, 0xf5ae0e80
je 0x180003fe6
cmp esi, 0xf69a6e1d
jne 0x1800038ed
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x29cb5ad4
mov eax, 0xabffed16
jmp 0x1800038e0
cmp esi, 0x926c5058
je 0x180004004
cmp esi, 0x958057f5
jne 0x1800038ed
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.180004880
add rsp, 0x20
mov rax, qword [rbp - 0x38]
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x8db9ce15
mov eax, 0xcd139c53
jmp 0x1800038e0
cmp esi, 0x3d0dcb5f
je 0x180004022
cmp esi, 0x3e27536f
jne 0x1800038ed
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.1800043c0
mov esi, 0x9c93b4ae
call rdi
add rsp, 0x20
mov r13d, eax
jmp 0x1800038ed
cmp esi, 0xb57d7136
je 0x1800040b4
cmp esi, 0xc0de0f3a
jne 0x1800038ed
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x6fb6f869
mov eax, 0x32aaf40a
jmp 0x1800038e0
cmp esi, 0x29cb5ad4
je 0x1800040d2
cmp esi, 0x32aaf40a
jne 0x1800038ed
mov esi, 0x9c93b4ae
mov r13d, 2
jmp 0x1800038ed
cmp esi, 0xabffed16
je 0x1800040e6
cmp esi, 0xadc0b7fe
jne 0x1800038ed
mov eax, 0x20
call fcn.1800392c0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov eax, 0x10
call fcn.1800392c0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov eax, 0x10
call fcn.1800392c0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.180006e20
add rsp, 0x20
mov rsi, qword [rbp - 0x10]
sub rsp, 0x20
mov rcx, rsi
call fcn.180005d70
add rsp, 0x20
mov rax, qword [rax]
mov ecx, dword [0x180069420]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete byte [rbp - 1]
mov edx, dword [0x180069424]
mov ecx, 0xaa2ecda2
cmove ecx, r14d
cmp edx, 0xa
setl byte [rbp - 2]
cmovl ecx, r14d
mov edx, 0x19506bfa
nop dword [rax]
cmp edx, 0x2724bcd
jg 0x180003da0
cmp edx, 0xaa2ecda2
je 0x180003dcd
cmp edx, 0xac52c04f
jne 0x180003d80
mov qword [rbp - 0x18], rsi
mov edx, ecx
jmp 0x180003d80
cmp edx, 0x2724bce
je 0x1800038b2
cmp edx, 0x19506bfa
jne 0x180003d80
movzx ebx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov edx, 0xaa2ecda2
cmovne edx, r12d
test bl, bl
cmovne edx, r12d
jmp 0x180003d80
mov edx, 0xac52c04f
jmp 0x180003d80
cmp esi, 0x51b4ca69
je 0x180004111
cmp esi, 0x6fb6f869
jne 0x1800038ed
mov esi, 0xc0de0f3a
jmp 0x1800038ed
cmp esi, 0xcef89081
jne 0x18000433b
mov rcx, qword [rbp - 0x10]
mov eax, dword [0x180069420]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 1]
mov edx, dword [0x180069424]
mov eax, 0xaa2ecda2
cmove eax, r14d
cmp edx, 0xa
setl byte [rbp - 2]
cmovl eax, r14d
mov edx, 0x19506bfa
nop dword [rax + rax]
cmp edx, 0x2724bcd
jg 0x180003e60
cmp edx, 0xaa2ecda2
je 0x180003e8d
cmp edx, 0xac52c04f
jne 0x180003e40
mov qword [rbp - 0x18], rcx
mov edx, eax
jmp 0x180003e40
cmp edx, 0x2724bce
je 0x18000411b
cmp edx, 0x19506bfa
jne 0x180003e40
movzx ebx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov edx, 0xaa2ecda2
cmovne edx, r12d
test bl, bl
cmovne edx, r12d
jmp 0x180003e40
mov edx, 0xac52c04f
jmp 0x180003e40
mov esi, 0xf5ae0e80
jmp 0x1800038ed
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x862ed43b
mov eax, 0xf5ae0e80
jmp 0x1800038e0
mov rax, qword [rbp - 0x18]
mov esi, 0xadc0b7fe
jmp 0x1800038ed
mov esi, 0x23d1a340
mov eax, dword [rbp - 0x48]
mov dword [rbp - 0x1c], eax
jmp 0x1800038ed
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.180004560
add rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov edx, dword [0x180069420]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete byte [rbp - 1]
mov ebx, dword [0x180069424]
mov edx, 0xaa2ecda2
cmove edx, r14d
cmp ebx, 0xa
setl byte [rbp - 2]
mov rsi, rax
cmovl edx, r14d
mov eax, 0x19506bfa
nop word cs:[rax + rax]
nop
cmp eax, 0x2724bcd
jg 0x180003f50
cmp eax, 0xaa2ecda2
je 0x180003f7b
cmp eax, 0xac52c04f
jne 0x180003f30
mov qword [rbp - 0x18], rcx
mov eax, edx
jmp 0x180003f30
cmp eax, 0x2724bce
je 0x180004184
cmp eax, 0x19506bfa
jne 0x180003f30
movzx ebx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov eax, 0xaa2ecda2
cmovne eax, r12d
test bl, bl
cmovne eax, r12d
jmp 0x180003f30
mov eax, 0xac52c04f
jmp 0x180003f30
mov dword [rbp - 0x50], r13d
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x8db9ce15
mov eax, 0x958057f5
jmp 0x1800038e0
mov al, byte [rbp - 3]
cmp byte [rbp - 4], 0
mov esi, 0x3cb022a9
mov ecx, 0xadc0b7fe
cmovne esi, ecx
test al, al
cmovne esi, ecx
jmp 0x1800038ed
mov esi, 0x9c93b4ae
mov r13d, dword [rbp - 0x4c]
jmp 0x1800038ed
cmp byte [rbp - 6], 0
mov esi, 0x6b7c9c
mov eax, 0x3e27536f
cmovne esi, eax
jmp 0x1800038ed
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x862ed43b
mov eax, 0xde3f7783
jmp 0x1800038e0
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x3d0dcb5f
mov eax, 0xcef89081
jmp 0x1800038e0
mov rcx, qword [rbp - 0x10]
mov eax, dword [0x180069420]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 1]
mov edx, dword [0x180069424]
mov eax, 0xaa2ecda2
cmove eax, r14d
cmp edx, 0xa
setl byte [rbp - 2]
cmovl eax, r14d
mov edx, 0x19506bfa
nop dword [rax + rax]
cmp edx, 0x2724bcd
jg 0x180004080
cmp edx, 0xaa2ecda2
je 0x1800040ad
cmp edx, 0xac52c04f
jne 0x180004060
mov qword [rbp - 0x18], rcx
mov edx, eax
jmp 0x180004060
cmp edx, 0x2724bce
je 0x180004260
cmp edx, 0x19506bfa
jne 0x180004060
movzx ebx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov edx, 0xaa2ecda2
cmovne edx, r12d
test bl, bl
cmovne edx, r12d
jmp 0x180004060
mov edx, 0xac52c04f
jmp 0x180004060
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x51b4ca69
mov eax, 0xd94ab810
jmp 0x1800038e0
sub rsp, 0x20
call rdi
add rsp, 0x20
mov esi, 0xabffed16
jmp 0x1800038ed
sub rsp, 0x20
call rdi
add rsp, 0x20
mov dword [rbp - 0x48], eax
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x29cb5ad4
mov eax, 0xae8d164a
jmp 0x1800038e0
mov esi, 0xb57d7136
jmp 0x1800038ed
mov rax, qword [rbp - 0x18]
mov rsi, qword [rax + 8]
sub rsp, 0x20
call fcn.180005d70
add rsp, 0x20
sub rsi, qword [rax]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov qword [r15], rax
cmp qword [rbp - 0x40], 0
sete byte [rbp - 6]
mov eax, dword [0x180069308]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0x3d0dcb5f
mov eax, 0xf21d0cc6
jmp 0x1800038e0
mov rax, qword [rbp - 0x18]
mov rbx, rdi
mov rdi, qword [rax + 8]
sub rsp, 0x20
call fcn.180005d70
add rsp, 0x20
sub rdi, qword [rax]
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
mov rdx, rsi
mov r8, rdi
mov rdi, rbx
call fcn.18003c760
add rsp, 0x20
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x58]
mov rax, qword [rbp - 0x28]
mov dword [rax], 0
mov rcx, qword [rbp - 0x10]
mov eax, dword [0x180069420]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 1]
mov edx, dword [0x180069424]
mov eax, 0xaa2ecda2
cmove eax, r14d
cmp edx, 0xa
setl byte [rbp - 2]
cmovl eax, r14d
mov edx, 0x19506bfa
nop word cs:[rax + rax]
nop
cmp edx, 0x2724bcd
jg 0x180004230
cmp edx, 0xaa2ecda2
je 0x180004259
cmp edx, 0xac52c04f
jne 0x180004210
mov qword [rbp - 0x18], rcx
mov edx, eax
jmp 0x180004210
cmp edx, 0x2724bce
je 0x1800042a4
cmp edx, 0x19506bfa
jne 0x180004210
movzx ebx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov edx, 0xaa2ecda2
cmovne edx, r12d
test bl, bl
cmovne edx, r12d
jmp 0x180004210
mov edx, 0xac52c04f
jmp 0x180004210
mov rax, qword [rbp - 0x18]
mov rsi, qword [rax + 8]
sub rsp, 0x20
call fcn.180005d70
add rsp, 0x20
sub rsi, qword [rax]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov qword [r15], rax
mov esi, 0xcef89081
jmp 0x1800038ed
mov rax, qword [rbp - 0x18]
mov rsi, qword [rax + 8]
sub rsp, 0x20
call fcn.180005d70
add rsp, 0x20
sub rsi, qword [rax]
mov rcx, qword [r15]
mov r9, qword [rbp - 0x28]
sub rsp, 0x20
mov rdx, rsi
mov r8d, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
add rsp, 0x20
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call fcn.1800043c0
add rsp, 0x20
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp - 0x30]
mov dword [rax], 0
mov r8, qword [r15]
mov rax, qword [rbp - 0x30]
sub rsp, 0x30
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateThread]
add rsp, 0x30
mov rcx, qword [rbp - 0x68]
mov qword [rcx], rax
mov esi, 0x50974115
jmp 0x1800038ed
cmp esi, 0xcd139c53
jne 0x1800038ed
mov eax, dword [rbp - 0x50]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret