Function at 0x1801aa6d0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x18053d0c0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, rdx
mov rsi, rcx
mov qword [rsp + 0x48], rcx
xor r12d, r12d
xor r8d, r8d
lea edx, [r12 + 3]
mov rcx, r15
call fcn.1801aadf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], r12
mov qword [rbp - 1], r12
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x1801aa730
mov rdx, rax
lea rcx, [rbp - 0x19]
call fcn.1801411d0
nop
xor r8d, r8d
lea edx, [r8 + 4]
mov rcx, r15
call fcn.1801aadf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r12
mov qword [rbp - 0x21], r12
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1801aa770
mov rdx, rax
lea rcx, [rbp - 0x39]
call fcn.1801411d0
nop
mov ecx, 0x320
call fcn.1803e3278
mov qword [rsp + 0x48], rax
mov rcx, rax
call fcn.18015c370
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r12
mov qword [rbp - 0x61], r12
mov r8d, 0x20
lea rdx, str.fe6b40bde48a3e20c9732feaedf95efb
lea rcx, [rbp - 0x79]
call fcn.1801411d0
nop
lea rdx, [rbp - 0x79]
mov rcx, rdi
call fcn.18015f760
nop
mov rdx, qword [rbp - 0x61]
cmp rdx, 0x10
jb 0x1801aa813
inc rdx
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801aa80e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801aac30
call fcn.1803e3270
lea rdx, [rdi + 0x280]
lea rcx, [rbp - 0x79]
call fcn.180140640
nop
cmp qword [rbp - 0x69], 0
jne 0x1801aa94c
mov rcx, r15
call fcn.18019df70
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
xor r8d, r8d
lea rdx, [0x1804fee17]
mov rcx, rsi
call fcn.1801411d0
nop
mov rdx, qword [rbp - 0x61]
cmp rdx, 0x10
jb 0x1801aa894
inc rdx
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801aa88e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801aac30
call fcn.1803e3270
nop
test rdi, rdi
je 0x1801aa8af
mov rcx, rdi
call fcn.18015d060
mov edx, 0x320
mov rcx, rdi
call fcn.1803e3270
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x1801aa8eb
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801aa8e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801aac02
call fcn.1803e3270
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1801aa926
inc rdx
mov rcx, qword [rbp - 0x19]
mov r8, rcx
cmp rdx, 0x1000
jb 0x1801aa921
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x1801aac08
call fcn.1803e3270
mov rax, rsi
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1803e3250
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18012b710
nop
mov r15, rax
lea rcx, [rbp + 0x1f]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1f]
call qword [sym.imp.RPCRT4.dll_UuidToStringA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x41], r12
mov rdx, qword [rsp + 0x48]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1801aa982
mov r8, rbx
lea rcx, [rbp - 0x59]
call fcn.1801411d0
lea rcx, [rsp + 0x48]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeA]
nop
lea rcx, [r15 + 0x1e0]
lea rax, [rbp - 0x59]
cmp rcx, rax
je 0x1801aa9ca
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rdx, qword [rbp - 0x59]
mov r8, qword [rbp - 0x49]
call fcn.1801404c0
lea rdx, [rbp - 0x59]
call fcn.180175190
mov rbx, rax
mov dword [rax + 4], r12d
lea rcx, [rax + 8]
lea rax, [rbp - 0x79]
cmp rcx, rax
je 0x1801aa9fe
lea rdx, [rbp - 0x79]
cmp qword [rbp - 0x61], 0x10
cmovae rdx, qword [rbp - 0x79]
mov r8, qword [rbp - 0x69]
call fcn.1801404c0
lea rcx, [rbx + 0x88]
lea rax, [rbp - 0x39]
cmp rcx, rax
je 0x1801aaa25
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rdx, qword [rbp - 0x39]
mov r8, qword [rbp - 0x29]
call fcn.1801404c0
mov ecx, 0x68
call fcn.1803e3278
mov rbx, rax
mov qword [rbp + 7], rax
lea rdx, [rbp - 0x19]
mov rcx, rax
call fcn.180140640
nop
lea rcx, [rbx + 0x20]
lea rdx, [rbp - 0x79]
call fcn.180140640
nop
lea rcx, [rbx + 0x40]
lea rdx, [rbp - 0x59]
call fcn.180140640
nop
lea rax, [0x1801716a0]
mov qword [rbx + 0x60], rax
mov qword [rbp + 7], rbx
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x180175d00]
xor edx, edx
xor ecx, ecx
call fcn.1803f97c4
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1801aac0e
lea r8, [rbp - 0x59]
lea rdx, [rbp + 7]
lea rcx, [0x180542ef8]
call fcn.180175470
mov rcx, qword [rax]
cmp dword [rcx + 0x48], 0
jne 0x1801aac1e
xorps xmm0, xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm1
cmp dword [rsp + 0x38], 0
jne 0x1801aac24
lea rdx, [rbp - 0x59]
mov rcx, rsi
call fcn.180140640
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x1801aab24
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801aab1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801aac2a
call fcn.1803e3270
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x41], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x59], 0
mov rdx, qword [rbp - 0x61]
cmp rdx, 0x10
jb 0x1801aab70
inc rdx
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801aab6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801aac30
call fcn.1803e3270
nop
test rdi, rdi
je 0x1801aab8b
mov rcx, rdi
call fcn.18015d060
mov edx, 0x320
mov rcx, rdi
call fcn.1803e3270
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x1801aabc3
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801aabbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801aac02
call fcn.1803e3270
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1801aa926
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801aa921
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801aac08
jmp 0x1801aa921
call fcn.1803ea6d4
nop
call fcn.1803ea6d4
nop
mov dword [rsp + 0x38], r12d
mov ecx, 6
call fcn.1803e2b24
nop
call fcn.1803f9660
nop
call fcn.1803f9660
nop
call fcn.1803ea6d4
nop
call fcn.1803ea6d4
int3