Function at 0x180012f90
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rbp
mov rbp, rsp
sub rsp, 0x70
cmp edx, 1
jne 0x180013364
mov qword [rax - 0x18], r12
lea r8, [0x180007240]
mov qword [rax + 8], rbx
xor r12d, r12d
mov qword [rax + 0x10], rsi
xor r9d, r9d
mov qword [rax - 0x10], rdi
xor edx, edx
mov qword [rax - 0x20], r14
xor ecx, ecx
mov qword [rax - 0x50], r12
mov qword [rax - 0x28], r15
mov dword [rax - 0x58], r12d
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
jne 0x1800130e6
movdqa xmm1, xmmword [0x180037510]
mov cl, 0x2a
movdqu xmmword [rbp - 0x40], xmm1
movzx edx, cl
mov byte [rbp + 0x28], 0x58
movzx r9d, cl
mov byte [rbp - 0x26], r12b
xor cl, 0x58
xor r9b, 0x58
xor dl, 0x58
mov byte [rbp + 0x2a], cl
xor r10d, r10d
mov byte [rbp + 0x2d], r9b
mov al, 0x1d
mov byte [rbp + 0x2b], dl
movd edx, xmm1
xor al, 0x58
mov byte [rbp + 0x29], al
mov cl, 0x4d
movzx ebx, cl
mov byte [rbp + 0x2e], r10b
xor byte [rbp - 0x3e], dl
xor cl, dl
xor byte [rbp - 0x3d], dl
mov r9b, 0x5c
xor byte [rbp - 0x3c], dl
xor r9b, dl
xor byte [rbp - 0x3b], dl
xor bl, dl
xor byte [rbp - 0x3a], dl
mov r8b, 0x37
xor byte [rbp - 0x39], dl
xor r8b, 0x58
xor byte [rbp - 0x38], dl
movdqa xmm0, xmm1
xor byte [rbp - 0x37], dl
mov r10b, 0x40
xor byte [rbp - 0x36], dl
xor r10b, dl
xor byte [rbp - 0x35], dl
mov r11b, 0x5a
xor byte [rbp - 0x34], dl
xor r11b, dl
xor byte [rbp - 0x33], dl
mov dil, 0x49
xor byte [rbp - 0x32], dl
xor dil, dl
xor byte [rbp - 0x31], dl
mov sil, 0x4c
mov byte [rbp + 0x2c], r8b
xor sil, dl
mov r8b, 8
psrldq xmm0, 1
movzx r14d, r8b
movd eax, xmm0
xor r8b, dl
mov byte [rbp - 0x30], cl
xor r14b, dl
mov byte [rbp - 0x2f], r8b
xor al, dl
mov byte [rbp - 0x2e], r9b
mov r15b, 0x1b
mov byte [rbp - 0x3f], al
xor r15b, dl
mov byte [rbp - 0x2d], r10b
lea r9d, [r12 + 0x10]
mov byte [rbp - 0x2c], r11b
lea r8, [rbp + 0x29]
mov byte [rbp - 0x2b], bl
xor ecx, ecx
mov byte [rbp - 0x2a], dil
lea rdx, [rbp - 0x3f]
mov byte [rbp - 0x29], sil
mov byte [rbp - 0x28], r14b
mov byte [rbp - 0x27], r15b
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1800130ef
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x28], r12
lea r8, [0x180007220]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
jne 0x180013204
movdqa xmm1, xmmword [0x180037570]
mov cl, 0x29
movdqu xmmword [rbp - 0x40], xmm1
movzx edx, cl
mov byte [rbp + 0x28], 0x5b
movzx r9d, cl
mov byte [rbp - 0x28], r12b
xor dl, 0x5b
xor r9b, 0x5b
xor cl, 0x5b
mov byte [rbp + 0x2b], dl
xor r10d, r10d
mov byte [rbp + 0x2d], r9b
mov al, 0x1e
mov byte [rbp + 0x2a], cl
movd ecx, xmm1
xor al, 0x5b
mov dl, 0x7b
mov byte [rbp + 0x29], al
movzx ebx, dl
mov byte [rbp + 0x2e], r10b
xor byte [rbp - 0x3e], cl
xor dl, cl
xor byte [rbp - 0x3d], cl
mov r9b, 0x6a
xor byte [rbp - 0x3c], cl
xor r9b, cl
xor byte [rbp - 0x3b], cl
xor bl, cl
xor byte [rbp - 0x3a], cl
mov r8b, 0x34
xor byte [rbp - 0x39], cl
xor r8b, 0x5b
xor byte [rbp - 0x38], cl
movdqa xmm0, xmm1
xor byte [rbp - 0x37], cl
mov r10b, 0x76
xor byte [rbp - 0x36], cl
xor r10b, cl
xor byte [rbp - 0x35], cl
mov r11b, 0x6c
xor byte [rbp - 0x34], cl
xor r11b, cl
xor byte [rbp - 0x33], cl
mov dil, 0x7f
xor byte [rbp - 0x32], cl
xor dil, cl
xor byte [rbp - 0x31], cl
mov sil, 0x7a
mov byte [rbp + 0x2c], r8b
xor sil, cl
psrldq xmm0, 1
mov r8b, 0x3e
xor r8b, cl
movd eax, xmm0
mov byte [rbp - 0x30], dl
lea rdx, [rbp - 0x3f]
mov byte [rbp - 0x2f], r8b
lea r8, [rbp + 0x29]
xor al, cl
mov byte [rbp - 0x2e], r9b
mov r9d, 0x10
mov byte [rbp - 0x3f], al
xor ecx, ecx
mov byte [rbp - 0x2d], r10b
mov byte [rbp - 0x2c], r11b
mov byte [rbp - 0x2b], bl
mov byte [rbp - 0x2a], dil
mov byte [rbp - 0x29], sil
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x18001320d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x28], r12
lea r8, [0x1800071d0]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r12, qword [rsp + 0x60]
test rax, rax
jne 0x18001333c
movdqa xmm1, xmmword [0x180037420]
mov cl, 0x34
movdqu xmmword [rbp - 0x40], xmm1
movzx edx, cl
mov byte [rbp + 0x28], 0x46
movzx r9d, cl
mov byte [rbp - 0x26], 0
xor cl, 0x46
xor r9b, 0x46
xor dl, 0x46
mov byte [rbp + 0x2a], cl
xor r10d, r10d
mov byte [rbp + 0x2d], r9b
mov al, 3
mov byte [rbp + 0x2b], dl
movd edx, xmm1
xor al, 0x46
mov byte [rbp + 0x29], al
mov cl, 0x28
movzx ebx, cl
mov byte [rbp + 0x2e], r10b
xor byte [rbp - 0x3e], dl
xor cl, dl
xor byte [rbp - 0x3d], dl
mov r9b, 0x39
xor byte [rbp - 0x3c], dl
xor r9b, dl
xor byte [rbp - 0x3b], dl
xor bl, dl
xor byte [rbp - 0x3a], dl
mov r8b, 0x29
xor byte [rbp - 0x39], dl
xor r8b, 0x46
xor byte [rbp - 0x38], dl
movdqa xmm0, xmm1
xor byte [rbp - 0x37], dl
mov r10b, 0x25
xor byte [rbp - 0x36], dl
xor r10b, dl
xor byte [rbp - 0x35], dl
mov r11b, 0x3f
xor byte [rbp - 0x34], dl
xor r11b, dl
xor byte [rbp - 0x33], dl
mov dil, 0x2c
xor byte [rbp - 0x32], dl
xor dil, dl
xor byte [rbp - 0x31], dl
mov sil, 0x29
mov byte [rbp + 0x2c], r8b
xor sil, dl
mov r8b, 0x6d
psrldq xmm0, 1
movzx r14d, r8b
movd eax, xmm0
xor r8b, dl
mov byte [rbp - 0x30], cl
xor r14b, dl
mov byte [rbp - 0x2f], r8b
xor al, dl
mov byte [rbp - 0x2e], r9b
mov r15b, 0x7f
mov byte [rbp - 0x3f], al
xor r15b, dl
mov byte [rbp - 0x2d], r10b
mov r9d, 0x10
mov byte [rbp - 0x2c], r11b
lea r8, [rbp + 0x29]
mov byte [rbp - 0x2b], bl
xor ecx, ecx
mov byte [rbp - 0x2a], dil
lea rdx, [rbp - 0x3f]
mov byte [rbp - 0x29], sil
mov byte [rbp - 0x28], r14b
mov byte [rbp - 0x27], r15b
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x180013345
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
mov r15, qword [rsp + 0x50]
mov eax, 1
add rsp, 0x70
pop rbp
ret