Function at 0x18001b490
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x90
cmp byte [rcx + 0x2f], 0
mov rdi, rcx
jne 0x18001b9c1
mov qword [rax + 0x18], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], r12
mov qword [rax - 0x28], r13
mov qword [rax - 0x30], r14
xor r14d, r14d
mov byte [rcx + 0x2f], 1
mov esi, r14d
mov qword [rax - 0x38], r15
lea ecx, [r14 + 0x20]
call fcn.18001fd18
mov rbx, rax
lea r8, [0x18001ac50]
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rax + 9], r14d
mov word [rax + 0xd], r14w
mov byte [rax + 0xf], sil
mov qword [rax], rdi
lea rax, [0x18001abf0]
mov qword [rbx + 0x10], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov qword [rbx + 0x18], rdi
mov byte [rbx + 8], 1
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbp, rax
test rax, rax
jne 0x18001b53e
lea edx, [rax + 0x20]
mov rcx, rbx
call fcn.18001fd10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rdi + 0x50], rbp
cmp byte [rdi + 0x28], r14b
je 0x18001b5ff
mov ecx, 0x20
mov esi, r14d
call fcn.18001fd18
mov rbx, rax
lea r8, [0x18001ac50]
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rax + 9], r14d
mov word [rax + 0xd], r14w
mov byte [rax + 0xf], sil
mov qword [rax], rdi
lea rax, [0x18001ac00]
mov qword [rbx + 0x10], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov qword [rbx + 0x18], rdi
mov byte [rbx + 8], 1
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18001b5e2
lea rcx, [rdi + 0xa0]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x18001b5d3
mov eax, dword [rsp + 0xa0]
mov dword [rdx], eax
add qword [rcx + 8], 4
jmp 0x18001b5f7
lea r8, [rsp + 0xa0]
call fcn.18001c4d0
jmp 0x18001b5f7
mov edx, 0x20
mov rcx, rbx
call fcn.18001fd10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rdi]
lea rdx, str.Started
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
mov rcx, qword [rdi + 0x68]
lea rdx, str.Failed_to_connect_to__s_n
mov rax, qword [rdi]
mov r8d, 2
mov r9, qword [rcx + 0x20]
cmp byte [rcx + 0x3d], r14b
mov rcx, rdi
mov r10, qword [rax + 0x10]
jne 0x18001b641
lea rdx, str.Successfully_connected_to__s_n
call r10
mov rsi, qword [rdi + 0x60]
lea rdx, str.filename
xorps xmm0, xmm0
mov qword [rsp + 0xa0], rsi
mov r8d, 8
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x58], r14
movups xmmword [rsp + 0x40], xmm0
call fcn.1800090b0
mov r12, qword [rsi + 0x48]
mov r13, qword [rsp + 0x58]
mov r14, r12
mov rbp, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
mov rbx, qword [r12 + 8]
cmp byte [rbx + 0x19], 0
jne 0x18001b6f1
nop word [rax + rax]
cmp r13, 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rbx + 0x20]
cmovae rdx, r15
cmp qword [rbx + 0x38], 0x10
jb 0x18001b6bc
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rbp, rsi
mov r8, rsi
cmovb r8, rbp
call fcn.1800227b0
test eax, eax
je 0x18001b8fb
js 0x18001b904
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x18001b6a0
mov rsi, qword [rsp + 0xa0]
cmp byte [r14 + 0x19], 0
jne 0x18001b735
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x18001b707
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rsp + 0x40]
cmp r13, 0x10
mov r8, rbp
cmovae rcx, r15
cmp rbx, rbp
cmovb r8, rbx
call fcn.1800227b0
test eax, eax
je 0x18001b90d
jns 0x18001b916
xor al, al
test al, al
cmove r14, r12
cmp r13, 0x10
jb 0x18001b774
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18001b76c
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b9ca
mov rcx, r15
call fcn.18001fd10
cmp r14, qword [rsi + 0x48]
je 0x18001b93f
mov rax, qword [r14 + 0x40]
lea rdx, str.fileversion
mov rsi, qword [rdi + 0x60]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xa8], rax
xorps xmm0, xmm0
xor eax, eax
mov qword [rsp + 0xa0], rsi
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea r8d, [rax + 0xb]
call fcn.1800090b0
mov r12, qword [rsi + 0x48]
mov r13, qword [rsp + 0x58]
mov r14, r12
mov rbp, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
mov rbx, qword [r12 + 8]
cmp byte [rbx + 0x19], 0
jne 0x18001b831
cmp r13, 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rbx + 0x20]
cmovae rdx, r15
cmp qword [rbx + 0x38], 0x10
jb 0x18001b7fc
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rbp, rsi
mov r8, rsi
cmovb r8, rbp
call fcn.1800227b0
test eax, eax
je 0x18001b91d
js 0x18001b926
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x18001b7e0
mov rsi, qword [rsp + 0xa0]
cmp byte [r14 + 0x19], 0
jne 0x18001b875
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x18001b847
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rsp + 0x40]
cmp r13, 0x10
mov r8, rbp
cmovae rcx, r15
cmp rbx, rbp
cmovb r8, rbx
call fcn.1800227b0
test eax, eax
je 0x18001b92f
jns 0x18001b938
xor al, al
test al, al
cmove r14, r12
cmp r13, 0x10
jb 0x18001b8b4
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18001b8ac
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b9ca
mov rcx, r15
call fcn.18001fd10
cmp r14, qword [rsi + 0x48]
je 0x18001b93f
mov rax, qword [rdi]
lea rdx, str.filename:__s
mov r9, qword [rsp + 0xa8]
mov r8d, 2
mov rbx, qword [r14 + 0x40]
mov rcx, rdi
call qword [rax + 0x10]
mov rax, qword [rdi]
lea rdx, str.fileversion__s
mov r9, rbx
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x18001b955
cmp rsi, rbp
jae 0x18001b6dd
mov rbx, qword [rbx + 0x10]
jmp 0x18001b6e3
cmp rbp, rbx
jb 0x18001b735
mov al, 1
jmp 0x18001b737
cmp rsi, rbp
jae 0x18001b81d
mov rbx, qword [rbx + 0x10]
jmp 0x18001b823
cmp rbp, rbx
jb 0x18001b875
mov al, 1
jmp 0x18001b877
mov rax, qword [rdi]
lea rdx, str.Could_not_find_fileversion_and_filename
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
cmp byte [rdi + 0x29], 0
je 0x18001b995
xor ecx, ecx
call fcn.18001c660
mov r10, qword [rdi]
lea rdx, str.dllloaded
mov rbx, rax
xor r9d, r9d
xor eax, eax
mov r8b, 1
mov qword [rsp + 0x30], rax
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call qword [r10 + 0x20]
mov rcx, rbx
call fcn.18001fd10
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x88]
mov rbx, qword [rsp + 0xb0]
mov r15, qword [rsp + 0x60]
add rsp, 0x90
pop rdi
ret
call fcn.180026dac
int3