Function at 0x18001c190
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x90
cmp byte [rcx + 0x2f], 0
mov rdi, rcx
jne 0x18001c6c1
mov qword [rax + 0x18], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], r12
mov qword [rax - 0x28], r13
mov qword [rax - 0x30], r14
xor r14d, r14d
mov byte [rcx + 0x2f], 1
mov esi, r14d
mov qword [rax - 0x38], r15
lea ecx, [r14 + 0x20]
call fcn.180020a18
mov rbx, rax
lea r8, [0x18001b950]
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rax + 9], r14d
mov word [rax + 0xd], r14w
mov byte [rax + 0xf], sil
mov qword [rax], rdi
lea rax, [0x18001b8f0]
mov qword [rbx + 0x10], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov qword [rbx + 0x18], rdi
mov byte [rbx + 8], 1
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbp, rax
test rax, rax
jne 0x18001c23e
lea edx, [rax + 0x20]
mov rcx, rbx
call fcn.180020a10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rdi + 0x50], rbp
cmp byte [rdi + 0x28], r14b
je 0x18001c2ff
mov ecx, 0x20
mov esi, r14d
call fcn.180020a18
mov rbx, rax
lea r8, [0x18001b950]
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rax + 9], r14d
mov word [rax + 0xd], r14w
mov byte [rax + 0xf], sil
mov qword [rax], rdi
lea rax, [0x18001b900]
mov qword [rbx + 0x10], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov qword [rbx + 0x18], rdi
mov byte [rbx + 8], 1
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18001c2e2
lea rcx, [rdi + 0xa0]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x18001c2d3
mov eax, dword [rsp + 0xa0]
mov dword [rdx], eax
add qword [rcx + 8], 4
jmp 0x18001c2f7
lea r8, [rsp + 0xa0]
call fcn.18001d1d0
jmp 0x18001c2f7
mov edx, 0x20
mov rcx, rbx
call fcn.180020a10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rdi]
lea rdx, str.Started
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
mov rcx, qword [rdi + 0x68]
lea rdx, str.Failed_to_connect_to__s_n
mov rax, qword [rdi]
mov r8d, 2
mov r9, qword [rcx + 0x20]
cmp byte [rcx + 0x3d], r14b
mov rcx, rdi
mov r10, qword [rax + 0x10]
jne 0x18001c341
lea rdx, str.Successfully_connected_to__s_n
call r10
mov rsi, qword [rdi + 0x60]
lea rdx, str.filename
xorps xmm0, xmm0
mov qword [rsp + 0xa0], rsi
mov r8d, 8
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x58], r14
movups xmmword [rsp + 0x40], xmm0
call fcn.1800095b0
mov r12, qword [rsi + 0x48]
mov r13, qword [rsp + 0x58]
mov r14, r12
mov rbp, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
mov rbx, qword [r12 + 8]
cmp byte [rbx + 0x19], 0
jne 0x18001c3f1
nop word [rax + rax]
cmp r13, 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rbx + 0x20]
cmovae rdx, r15
cmp qword [rbx + 0x38], 0x10
jb 0x18001c3bc
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rbp, rsi
mov r8, rsi
cmovb r8, rbp
call fcn.1800234c0
test eax, eax
je 0x18001c5fb
js 0x18001c604
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x18001c3a0
mov rsi, qword [rsp + 0xa0]
cmp byte [r14 + 0x19], 0
jne 0x18001c435
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x18001c407
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rsp + 0x40]
cmp r13, 0x10
mov r8, rbp
cmovae rcx, r15
cmp rbx, rbp
cmovb r8, rbx
call fcn.1800234c0
test eax, eax
je 0x18001c60d
jns 0x18001c616
xor al, al
test al, al
cmove r14, r12
cmp r13, 0x10
jb 0x18001c474
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18001c46c
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c6ca
mov rcx, r15
call fcn.180020a10
cmp r14, qword [rsi + 0x48]
je 0x18001c63f
mov rax, qword [r14 + 0x40]
lea rdx, str.fileversion
mov rsi, qword [rdi + 0x60]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xa8], rax
xorps xmm0, xmm0
xor eax, eax
mov qword [rsp + 0xa0], rsi
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea r8d, [rax + 0xb]
call fcn.1800095b0
mov r12, qword [rsi + 0x48]
mov r13, qword [rsp + 0x58]
mov r14, r12
mov rbp, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
mov rbx, qword [r12 + 8]
cmp byte [rbx + 0x19], 0
jne 0x18001c531
cmp r13, 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rbx + 0x20]
cmovae rdx, r15
cmp qword [rbx + 0x38], 0x10
jb 0x18001c4fc
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rbp, rsi
mov r8, rsi
cmovb r8, rbp
call fcn.1800234c0
test eax, eax
je 0x18001c61d
js 0x18001c626
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x18001c4e0
mov rsi, qword [rsp + 0xa0]
cmp byte [r14 + 0x19], 0
jne 0x18001c575
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x18001c547
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rsp + 0x40]
cmp r13, 0x10
mov r8, rbp
cmovae rcx, r15
cmp rbx, rbp
cmovb r8, rbx
call fcn.1800234c0
test eax, eax
je 0x18001c62f
jns 0x18001c638
xor al, al
test al, al
cmove r14, r12
cmp r13, 0x10
jb 0x18001c5b4
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18001c5ac
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c6ca
mov rcx, r15
call fcn.180020a10
cmp r14, qword [rsi + 0x48]
je 0x18001c63f
mov rax, qword [rdi]
lea rdx, str.filename:__s
mov r9, qword [rsp + 0xa8]
mov r8d, 2
mov rbx, qword [r14 + 0x40]
mov rcx, rdi
call qword [rax + 0x10]
mov rax, qword [rdi]
lea rdx, str.fileversion__s
mov r9, rbx
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x18001c655
cmp rsi, rbp
jae 0x18001c3dd
mov rbx, qword [rbx + 0x10]
jmp 0x18001c3e3
cmp rbp, rbx
jb 0x18001c435
mov al, 1
jmp 0x18001c437
cmp rsi, rbp
jae 0x18001c51d
mov rbx, qword [rbx + 0x10]
jmp 0x18001c523
cmp rbp, rbx
jb 0x18001c575
mov al, 1
jmp 0x18001c577
mov rax, qword [rdi]
lea rdx, str.Could_not_find_fileversion_and_filename
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
cmp byte [rdi + 0x29], 0
je 0x18001c695
xor ecx, ecx
call fcn.18001d360
mov r10, qword [rdi]
lea rdx, str.dllloaded
mov rbx, rax
xor r9d, r9d
xor eax, eax
mov r8b, 1
mov qword [rsp + 0x30], rax
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call qword [r10 + 0x20]
mov rcx, rbx
call fcn.180020a10
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x88]
mov rbx, qword [rsp + 0xb0]
mov r15, qword [rsp + 0x60]
add rsp, 0x90
pop rdi
ret
call fcn.180027abc
int3