Function at 0x402f50
Capabilities:
Create thread

Disassembly:
push rbp
mov eax, 0xd60c0
mov rbp, rsp
push rsi
push rbx
and rsp, 0xfffffffffffffff0
call fcn.00402ae0
lea rdx, str.ffffffff000000000000000000a0101e3308000010c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005300530043004300a300930043002300e200430053002300e200130023002300e200430023001300f200f200a300070036004700000000000000000000000000000000efc930d7bf919f81b3f85a192a7fdb56503aa908652a5b0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea00da8fda0fda8eda0eda8dda0dda8cda8bda0bda8ada0ada89da09da88da08da87da07aa848a817a006a8f6a0c6a8b6a0b6a896a866a846a826a805a8e5a0a5a804a8e4a0e4a8c4a0c4a0a4a894a884a874a864a854a844a834a824a814a803a8f3a0f3a8e3a0e3a8d3a0d3a8c3a0c3a8b3a0b1a0a1a891a091a881a081a871a071a861a061a851a051a841a041a831a030a80000000c900300700ea0eea81da05ca88ba0caa8faa039a869a859a059a849a049a839a039a829a029a819a019a809a008a8f8a0f8a8e8a0e8a8d8a0d8a8c8a0c8a8b8a0b8a8a8a0a8a898a098a888a088a878a078a868a068a858a058a848a048a838a038a828a028a818a018a808a007a8f7a0f7a8e7a0e7a8d7a0d7a8c7a0c7a8b7a0b7a8a7a0a7a897a097a887a087a877a077a867a067a857a057a847a047a837a037a827a027a817a017a807a006a8f6a0f6a8e6a0e6a8d6a0d6a8c6a0c6a8b6a0b6a8a6a0a6a896a096a886a086a876a076a866a066a856a056a846a046a836a036a826a026a816a016a806a005a8f5a0f5a0e0a870000008f00300600fa0bea0eea81da85ca09ba8cba00aa039a868a0a7a8d7a016a845a084a8b3a0f3a822a8b2a061a891a820a0d0a060a80000000830030050000000a830a030a810000000100300100fa89fa09000000c000300000aa07aa06aa05aa04aa03aa02aa01aa009a0f9a0e9a0d9a0c9a0b9a0a9a099a089a079a069a059a049a039a029a019a008a0f8a0e8a0d8a0c8a0b8a0a8a098a088a078a068a058a048a038a028a018a007a0f7a0e7a0d7a0c7a0b7a0a7a097a087a077a067a057a047a037a027a017a006a0f6a0e6a0d6a0c6a0b6a0a6a096a086a076a066a056a046a036a026a016a005a0f5a0e5a0d5a0c5a0b5a0a5a095a085a075a065a055a045a035a025a015a004a0f4a0e4a0d4a0c4a0b4a0a4a094a084a074a064a054a044a034a024a014a003a0f3a0e3a0d3a0c3a0b3a0a3a093a083a073a063a053a043a033a023a013a002a0f2a0e2a0d2a0c2a0b2a0a2a092a082a072a062a052a042a032a022a012a001a0f1a0e1a0d1a0c1a0b1a0a1a091a081a071a061a051a041a031a021a011a000a0f0a0e0a0d0a0c0a0b0a0a0a090a080a070a060a050a040a030a020a010a000000108500200e00fa0ffa0efa0dfa0cfa0bfa0afa09fa08fa07fa06fa05fa04fa03fa02fa01fa00ea0fea0eea0dea0cea0b
mov r8d, 0x7208d
sub rsp, rax
lea rsi, [rsp + 0x64030]
lea rbx, [rsp + 0x30]
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call qword [sym.imp.msvcrt.dll__strrev]
mov r8d, 0x64000
mov rcx, rbx
xor edx, edx
call sub.msvcrt.dll_memset
mov rdx, rbx
mov rcx, rsi
call fcn.00402e70
xor r8d, r8d
xor edx, edx
mov ecx, 0x40000
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov r8d, 0x64000
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdx, rbx
mov r8d, 0x64000
mov rcx, rax
call sub.msvcrt.dll_memmove
lea r8, [0x00402f40]
mov r9, rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rsp, [rbp - 0x10]
pop rbx
pop rsi
pop rbp
ret