Function at 0x14001fc80
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x14006b030]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r12, rcx
mov byte [rcx], 0
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [r12 + 8]
call fcn.140021c10
lea rcx, [r12 + 8]
call fcn.140023aa0
xor esi, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
mov r9, r12
lea r8, [0x14001f950]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
mov qword [rbp - 0x71], rax
lea rcx, [rbp - 0x41]
call fcn.14001f2f0
nop
lea edx, [rsi + 0x1b]
lea rcx, [rbp - 0x61]
call fcn.1400140b0
nop
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.14001ef60
cmp eax, 1
jne 0x14001fdc9
xor r8d, r8d
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.14001f140
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x14001fd77
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fd71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207fe
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14001fdb2
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fdad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f8
call fcn.140027bac
call fcn.140020830
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x6e]
call fcn.14001bff0
jmp 0x14001fe40
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x14001fe05
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fdff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207fe
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14001fe40
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fe3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f8
call fcn.140027bac
mov ebx, 0x493e0
movzx eax, byte [r12]
test al, al
jne 0x14001fe6e
nop
test ebx, ebx
jle 0x14001fe6e
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, 0x1f4
movzx eax, byte [r12]
test al, al
je 0x14001fe50
mov dword [rbp - 0x75], esi
test al, al
jne 0x14001fea5
mov edi, 0x80098
nop word [rax + rax]
mov ebx, 0x493e0
test ebx, ebx
jle 0x14001ff00
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, 0x1f4
cmp byte [r12], 0
je 0x14001fe85
mov rdi, qword [rbp - 0x71]
mov rdx, qword [r12 + 0x10]
mov rcx, qword [r12 + 8]
call fcn.14001ee20
mov rax, qword [r12 + 8]
mov qword [r12 + 0x10], rax
test rdi, rdi
je 0x14001fed1
mov edx, 0xffffffff
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140027b60
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov eax, 0x2aaaaaab
imul dword [rbp - 0x75]
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rdx + rdx*2]
add ecx, ecx
cmp dword [rbp - 0x75], ecx
jne 0x14001ff3a
cmp byte [r12 + 0x3c], 0
jne 0x14001ff3a
call fcn.140021550
cmp eax, 0xffffffff
je 0x14001ff3a
lea rcx, [r12 + 8]
call fcn.140023ba0
mov byte [r12 + 0x3c], al
lea rcx, [rbp - 0x41]
call fcn.14001f2f0
nop
mov edx, 0x1d
lea rcx, [rbp - 0x61]
call fcn.1400140b0
nop
mov ebx, dword [r12 + 0x38]
test ebx, ebx
jne 0x14001ff6b
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.14001ef60
mov ebx, eax
xor ecx, ecx
call fcn.14003ac28
sub eax, ebx
mov rdx, qword [rbp - 0x49]
cmp eax, 0x2a30
jbe 0x14001fff6
cmp rdx, 0x10
jb 0x14001ffb7
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ffb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020804
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14001fff2
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ffed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f8
call fcn.140027bac
mov al, 1
jmp 0x14002006b
cmp rdx, 0x10
jb 0x14002002e
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020028
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020804
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x140020069
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f8
call fcn.140027bac
xor al, al
test al, al
je 0x1400207df
mov edx, 0xc
lea rcx, [rbp - 0x61]
call fcn.1400140b0
cmp qword [rax + 0x18], 0x10
jb 0x14002008b
mov rax, qword [rax]
lea rcx, [rbp - 0x69]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20219
xor r8d, r8d
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ebx, eax
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x1400200ea
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400200e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002080a
call fcn.140027bac
mov qword [rbp - 0x51], rsi
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
test ebx, ebx
jne 0x1400201e1
mov rcx, qword [rbp - 0x69]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x61]
call fcn.14001f2f0
nop
mov edx, 0x1c
lea rcx, [rbp - 0x41]
call fcn.1400140b0
nop
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 0x61]
call fcn.14001ef60
mov ebx, eax
test eax, eax
je 0x14002021e
xor ecx, ecx
call fcn.14003ac28
sub eax, ebx
cmp eax, 0x14997000
jbe 0x14002021e
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14002018c
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020810
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x1400201c7
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400201c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f8
call fcn.140027bac
call fcn.140020830
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x72]
call fcn.14001bff0
jmp 0x140020295
cmp ebx, 2
jne 0x14002010c
mov dword [rbp - 0x79], esi
lea rdx, [rbp - 0x79]
lea rcx, [r12 + 8]
call fcn.140022b30
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rbp - 0x79]
lea ecx, [rbx + 0x6f]
call fcn.14001bff0
test al, al
je 0x1400207e2
call fcn.140021850
jmp 0x14001fea1
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14002025a
inc rdx
mov rcx, qword [rbp - 0x41]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140020254
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020810
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140020295
inc rdx
mov rcx, qword [rbp - 0x61]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140020290
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f8
call fcn.140027bac
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x21], xmm1
mov qword [rbp - 0x11], rsi
xor eax, eax
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
movups xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0x27], rax
lea rcx, [rbp - 9]
call fcn.140016570
nop
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 9]
call fcn.140019c10
nop
mov rcx, qword [rbp + 0x17]
test rcx, rcx
je 0x140020325
mov rdx, qword [rbp + 0x1f]
call fcn.14001a490
mov rdx, qword [rbp + 0x27]
mov rcx, qword [rbp + 0x17]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020314
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020816
call fcn.140027bac
mov qword [rbp + 0x17], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f], xmm0
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x140020360
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002035b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020816
call fcn.140027bac
mov qword [rbp + 7], rsi
mov qword [rbp + 0xf], 0xf
mov byte [rbp - 9], 0
mov rbx, qword [rbp - 0x19]
mov r15, qword [rbp - 0x21]
sub rbx, r15
cmp rbx, 4
jae 0x140020393
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x70]
call fcn.14001bff0
jmp 0x1400203d0
mov r14, rbx
sar r14, 2
test r14, r14
je 0x1400203ce
mov rdi, r15
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rdi]
lea ecx, [r9 + 0x70]
call fcn.14001bff0
inc esi
lea rdi, [rdi + 4]
movsxd rax, esi
cmp rax, r14
jb 0x1400203a2
sar rbx, 2
xor esi, esi
mov edi, 0x80098
jmp 0x1400203d9
xor esi, esi
sar rbx, 2
test rbx, rbx
je 0x1400203fa
mov rcx, r15
mov edx, esi
nop
mov eax, dword [rcx]
cmp eax, 0x13
ja 0x1400203ec
bt edi, eax
jb 0x140020453
inc edx
add rcx, 4
movsxd rax, edx
cmp rax, rbx
jb 0x1400203e0
mov dword [rbp - 0x79], esi
lea rdx, [rbp - 0x79]
lea rcx, [r12 + 8]
call fcn.140022b30
mov ebx, esi
call fcn.140021550
cmp eax, 0xffffffff
je 0x140020494
call fcn.140023040
test eax, eax
je 0x140020427
mov edx, eax
call fcn.1400232b0
movzx eax, al
lea ebx, [rax*2 + 1]
movzx eax, byte [r12 + 0x3c]
test al, al
jne 0x14002044e
lea rcx, [r12 + 8]
call fcn.140023ba0
mov byte [r12 + 0x3c], al
test al, al
je 0x140020488
or ebx, 4
jmp 0x140020494
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x6f]
call fcn.14001bff0
test al, al
je 0x14002079a
mov byte [r12 + 0x3c], 0
lea rcx, [r12 + 8]
call fcn.140023aa0
mov rcx, r12
call fcn.140020910
jmp 0x14002079a
call fcn.140023d20
test al, al
je 0x140020494
or ebx, 8
xor r9d, r9d
mov r8d, ebx
mov edi, dword [rbp - 0x79]
mov edx, edi
lea ecx, [r9 + 0x6f]
call fcn.14001bff0
test al, al
je 0x1400204c4
mov byte [r12 + 0x3c], 0
lea rcx, [r12 + 8]
call fcn.140023aa0
mov rcx, r12
call fcn.140020910
lea rcx, [rbp - 0x41]
call fcn.14001f2f0
nop
mov edx, 0x21
lea rcx, [rbp - 0x61]
call fcn.1400140b0
nop
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.14001ef60
test eax, eax
setne sil
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x14002052c
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020526
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002081c
call fcn.140027bac
nop
mov rax, qword [rbp - 0x29]
cmp rax, 0x10
jb 0x140020568
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020563
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f2
call fcn.140027bac
test sil, sil
je 0x140020793
test bl, 1
je 0x140020793
mov ecx, edi
and ecx, 0x1000
and edi, 0x200
test bl, 4
ja 0x140020596
test bl, 8
ja 0x140020596
xor al, al
jmp 0x140020598
mov al, 1
test ecx, ecx
je 0x1400205a8
test edi, edi
je 0x1400205a8
test al, al
jne 0x140020793
lea rcx, [rbp - 0x41]
call fcn.14001f2f0
nop
mov edx, 0x1f
lea rcx, [rbp - 0x61]
call fcn.1400140b0
nop
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.14001ef60
mov ebx, eax
test eax, eax
jne 0x140020652
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140020610
inc rdx
mov rcx, qword [rbp - 0x61]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14002060a
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020822
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14002064b
inc rdx
mov rcx, qword [rbp - 0x41]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140020646
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f2
call fcn.140027bac
mov al, 1
jmp 0x1400206df
xor ecx, ecx
call fcn.14003ac28
sub eax, ebx
mov rdx, qword [rbp - 0x49]
cmp eax, 0xa8c0
ja 0x1400205d8
cmp rdx, 0x10
jb 0x1400206a2
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002069c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020822
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x1400206dd
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400206d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f2
call fcn.140027bac
xor al, al
test al, al
je 0x140020793
lea rcx, [rbp - 0x41]
call fcn.14001f2f0
nop
mov edx, 0x1f
lea rcx, [rbp - 0x61]
call fcn.1400140b0
nop
xor ecx, ecx
call fcn.14003ac28
mov r8d, eax
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.14001f140
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140020754
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002074e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020828
call fcn.140027bac
nop
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14002078b
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020786
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f2
call fcn.140027bac
mov rcx, r12
call fcn.140020a00
xor esi, esi
mov edi, 0x80098
test r15, r15
je 0x1400207df
mov rdx, qword [rbp - 0x11]
sub rdx, r15
and rdx, 0xfffffffffffffffc
mov rax, r15
cmp rdx, 0x1000
jb 0x1400207cb
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400207f8
mov rcx, r15
call fcn.140027bac
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], rsi
inc dword [rbp - 0x75]
cmp byte [r12], 0
jne 0x14001fea1
jmp 0x14001fe80
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
nop
call fcn.14002e4f8
int3