Function at 0x180004870
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0xd8
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 8]
mov qword [0x180063c78], rax
mov dword [rsp + 0x44], 7
mov dword [rsp + 0x50], 0xd
cmp dword [rsp + 0x50], 0
jle 0x1800048f1
mov eax, dword [rsp + 0x50]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800048dd
mov dword [rsp + 0x44], 0
mov eax, dword [rsp + 0x50]
sub eax, 2
mov dword [rsp + 0x50], eax
jmp 0x1800048a9
mov dword [rsp + 0x44], 4
mov eax, dword [rsp + 0x50]
dec eax
mov dword [rsp + 0x50], eax
jmp 0x1800048a9
mov dword [rsp + 0x4c], 8
mov dword [rsp + 0x5c], 3
mov eax, dword [rsp + 0x5c]
test eax, eax
jle 0x18000494e
mov eax, dword [rsp + 0x5c]
cmp eax, 1
jle 0x18000492c
mov eax, dword [rsp + 0x4c]
and eax, 0x1fed
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x5c]
sub eax, 2
mov dword [rsp + 0x5c], eax
jmp 0x180004901
mov eax, dword [rsp + 0x4c]
cmp eax, 0x805
jle 0x180004942
mov eax, dword [rsp + 0x4c]
and eax, 0x7e
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x5c]
dec eax
mov dword [rsp + 0x5c], eax
jmp 0x180004901
mov dword [rsp + 0x54], 2
mov dword [rsp + 0x64], 0x10
cmp dword [rsp + 0x64], 0
jle 0x1800049a6
mov eax, dword [rsp + 0x64]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004991
mov dword [rsp + 0x54], 4
mov eax, dword [rsp + 0x64]
dec eax
mov dword [rsp + 0x64], eax
jmp 0x18000495e
mov dword [rsp + 0x54], 4
mov eax, dword [rsp + 0x64]
sub eax, 2
mov dword [rsp + 0x64], eax
jmp 0x18000495e
mov dword [rsp + 0x40], 5
mov dword [rsp + 0x48], 4
mov eax, dword [rsp + 0x48]
test eax, eax
jle 0x180004a03
mov eax, dword [rsp + 0x48]
cmp eax, 1
jle 0x1800049e1
mov eax, dword [rsp + 0x40]
and eax, 0x1952
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
sub eax, 2
mov dword [rsp + 0x48], eax
jmp 0x1800049b6
mov eax, dword [rsp + 0x40]
cmp eax, 0x806
jle 0x1800049f7
mov eax, dword [rsp + 0x40]
and eax, 0x7f
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
dec eax
mov dword [rsp + 0x48], eax
jmp 0x1800049b6
mov dword [rsp + 0x58], 3
mov dword [rsp + 0x60], 0xc
cmp dword [rsp + 0x60], 0
jle 0x180004a5c
mov eax, dword [rsp + 0x60]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004a47
mov dword [rsp + 0x58], 0
mov eax, dword [rsp + 0x60]
sub eax, 2
mov dword [rsp + 0x60], eax
jmp 0x180004a13
mov dword [rsp + 0x58], 4
mov eax, dword [rsp + 0x60]
sub eax, 2
mov dword [rsp + 0x60], eax
jmp 0x180004a13
mov r8d, 0x104
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x10]
lea rcx, [0x180063b70]
call qword [sym.imp.KERNEL32.dll_lstrcpynA]
mov dword [rsp + 0x84], 2
mov dword [rsp + 0x70], 0x13
cmp dword [rsp + 0x70], 0
jle 0x180004ada
mov eax, dword [rsp + 0x70]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004ac2
mov dword [rsp + 0x84], 4
mov eax, dword [rsp + 0x70]
sub eax, 2
mov dword [rsp + 0x70], eax
jmp 0x180004a8b
mov dword [rsp + 0x84], 4
mov eax, dword [rsp + 0x70]
sub eax, 2
mov dword [rsp + 0x70], eax
jmp 0x180004a8b
mov dword [rsp + 0x68], 5
mov dword [rsp + 0x78], 4
mov eax, dword [rsp + 0x78]
test eax, eax
jle 0x180004b37
mov eax, dword [rsp + 0x78]
cmp eax, 1
jle 0x180004b15
mov eax, dword [rsp + 0x68]
and eax, 0x1952
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x78]
sub eax, 2
mov dword [rsp + 0x78], eax
jmp 0x180004aea
mov eax, dword [rsp + 0x68]
cmp eax, 0x806
jle 0x180004b2b
mov eax, dword [rsp + 0x68]
and eax, 0x7f
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x78]
dec eax
mov dword [rsp + 0x78], eax
jmp 0x180004aea
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x74], 0x10
cmp dword [rsp + 0x74], 0
jle 0x180004b8f
mov eax, dword [rsp + 0x74]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004b7a
mov dword [rsp + 0x7c], 4
mov eax, dword [rsp + 0x74]
dec eax
mov dword [rsp + 0x74], eax
jmp 0x180004b47
mov dword [rsp + 0x7c], 0
mov eax, dword [rsp + 0x74]
sub eax, 2
mov dword [rsp + 0x74], eax
jmp 0x180004b47
mov dword [rsp + 0x80], 4
mov dword [rsp + 0x6c], 0x13
cmp dword [rsp + 0x6c], 0
jle 0x180004bf0
mov eax, dword [rsp + 0x6c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004bd8
mov dword [rsp + 0x80], 0
mov eax, dword [rsp + 0x6c]
dec eax
mov dword [rsp + 0x6c], eax
jmp 0x180004ba2
mov dword [rsp + 0x80], 0
mov eax, dword [rsp + 0x6c]
sub eax, 2
mov dword [rsp + 0x6c], eax
jmp 0x180004ba2
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x180004520]
xor edx, edx
xor ecx, ecx
call fcn.18004a0e4
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x18000508a
mov dword [rsp + 0x98], 4
mov dword [rsp + 0xa0], 0x11
cmp dword [rsp + 0xa0], 0
jle 0x180004c9b
mov eax, dword [rsp + 0xa0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004c7d
mov dword [rsp + 0x98], 4
mov eax, dword [rsp + 0xa0]
dec eax
mov dword [rsp + 0xa0], eax
jmp 0x180004c3b
mov dword [rsp + 0x98], 4
mov eax, dword [rsp + 0xa0]
sub eax, 2
mov dword [rsp + 0xa0], eax
jmp 0x180004c3b
mov dword [rsp + 0x94], 7
mov dword [rsp + 0x88], 0x10
cmp dword [rsp + 0x88], 0
jle 0x180004d11
mov eax, dword [rsp + 0x88]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004cf4
mov dword [rsp + 0x94], 0
mov eax, dword [rsp + 0x88]
sub eax, 2
mov dword [rsp + 0x88], eax
jmp 0x180004cb1
mov dword [rsp + 0x94], 0
mov eax, dword [rsp + 0x88]
dec eax
mov dword [rsp + 0x88], eax
jmp 0x180004cb1
mov dword [rsp + 0x9c], 1
mov dword [rsp + 0xa4], 3
mov eax, dword [rsp + 0xa4]
test eax, eax
jle 0x180004d95
mov eax, dword [rsp + 0xa4]
cmp eax, 1
jle 0x180004d64
mov eax, dword [rsp + 0x9c]
and eax, 0x1907
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0xa4]
sub eax, 2
mov dword [rsp + 0xa4], eax
jmp 0x180004d27
mov eax, dword [rsp + 0x9c]
cmp eax, 0x805
jle 0x180004d83
mov eax, dword [rsp + 0x9c]
and eax, 0x7e
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0xa4]
dec eax
mov dword [rsp + 0xa4], eax
jmp 0x180004d27
mov dword [rsp + 0x8c], 8
mov dword [rsp + 0x90], 0x12
cmp dword [rsp + 0x90], 0
jle 0x180004e0b
mov eax, dword [rsp + 0x90]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004ded
mov dword [rsp + 0x8c], 4
mov eax, dword [rsp + 0x90]
dec eax
mov dword [rsp + 0x90], eax
jmp 0x180004dab
mov dword [rsp + 0x8c], 0
mov eax, dword [rsp + 0x90]
sub eax, 2
mov dword [rsp + 0x90], eax
jmp 0x180004dab
mov dword [rsp + 0xcc], 4
mov dword [rsp + 0xb0], 0x13
cmp dword [rsp + 0xb0], 0
jle 0x180004e81
mov eax, dword [rsp + 0xb0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004e63
mov dword [rsp + 0xcc], 0
mov eax, dword [rsp + 0xb0]
dec eax
mov dword [rsp + 0xb0], eax
jmp 0x180004e21
mov dword [rsp + 0xcc], 0
mov eax, dword [rsp + 0xb0]
sub eax, 2
mov dword [rsp + 0xb0], eax
jmp 0x180004e21
mov dword [rsp + 0xb4], 4
mov dword [rsp + 0xa8], 0x15
cmp dword [rsp + 0xa8], 0
jle 0x180004ef8
mov eax, dword [rsp + 0xa8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180004eda
mov dword [rsp + 0xb4], 0
mov eax, dword [rsp + 0xa8]
sub eax, 2
mov dword [rsp + 0xa8], eax
jmp 0x180004e97
mov dword [rsp + 0xb4], 0
mov eax, dword [rsp + 0xa8]
sub eax, 2
mov dword [rsp + 0xa8], eax
jmp 0x180004e97
mov dword [rsp + 0xc0], 7
mov dword [rsp + 0xc8], 0xb
mov eax, dword [rsp + 0xc8]
test eax, eax
jle 0x180004f7e
mov eax, dword [rsp + 0xc8]
cmp eax, 1
jle 0x180004f4b
mov eax, dword [rsp + 0xc0]
and eax, 0x66b
mov dword [rsp + 0xc0], eax
mov eax, dword [rsp + 0xc8]
sub eax, 2
mov dword [rsp + 0xc8], eax
jmp 0x180004f0e
mov eax, dword [rsp + 0xc0]
cmp eax, 0x80d
jle 0x180004f6c
mov eax, dword [rsp + 0xc0]
and eax, 0x86
mov dword [rsp + 0xc0], eax
mov eax, dword [rsp + 0xc8]
dec eax
mov dword [rsp + 0xc8], eax
jmp 0x180004f0e
mov dword [rsp + 0xac], 4
mov dword [rsp + 0xbc], 3
mov eax, dword [rsp + 0xbc]
test eax, eax
jle 0x180005002
mov eax, dword [rsp + 0xbc]
cmp eax, 1
jle 0x180004fd1
mov eax, dword [rsp + 0xac]
and eax, 0x1891
mov dword [rsp + 0xac], eax
mov eax, dword [rsp + 0xbc]
sub eax, 2
mov dword [rsp + 0xbc], eax
jmp 0x180004f94
mov eax, dword [rsp + 0xac]
cmp eax, 0x805
jle 0x180004ff0
mov eax, dword [rsp + 0xac]
and eax, 0x7e
mov dword [rsp + 0xac], eax
mov eax, dword [rsp + 0xbc]
dec eax
mov dword [rsp + 0xbc], eax
jmp 0x180004f94
mov dword [rsp + 0xb8], 7
mov dword [rsp + 0xc4], 9
mov eax, dword [rsp + 0xc4]
test eax, eax
jle 0x180005088
mov eax, dword [rsp + 0xc4]
cmp eax, 1
jle 0x180005055
mov eax, dword [rsp + 0xb8]
and eax, 0x19b6
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0xc4]
sub eax, 2
mov dword [rsp + 0xc4], eax
jmp 0x180005018
mov eax, dword [rsp + 0xb8]
cmp eax, 0x80b
jle 0x180005076
mov eax, dword [rsp + 0xb8]
and eax, 0x84
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0xc4]
dec eax
mov dword [rsp + 0xc4], eax
jmp 0x180005018
jmp 0x180005095
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0xd8
ret