Function at 0x140011960
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x90
cmp byte [rcx + 0x2f], 0
mov rdi, rcx
jne 0x140011d97
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
xor ebp, ebp
mov qword [rax + 0x20], rsi
mov esi, ebp
mov qword [rax - 0x10], r12
mov qword [rax - 0x18], r13
mov byte [rcx + 0x2f], 1
lea ecx, [rbp + 0x20]
mov qword [rax - 0x20], r14
mov qword [rax - 0x28], r15
call fcn.14001bc28
mov rbx, rax
lea r8, [0x140011070]
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rax + 9], ebp
mov word [rax + 0xd], bp
mov byte [rax + 0xf], sil
mov qword [rax], rdi
lea rax, [0x140011010]
mov qword [rbx + 0x10], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebp
mov qword [rbx + 0x18], rdi
mov byte [rbx + 8], 1
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbp, rax
test rax, rax
jne 0x140011a08
lea edx, [rax + 0x20]
mov rcx, rbx
call fcn.14001bc64
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp byte [rdi + 0x28], 0
mov qword [rdi + 0x50], rbp
je 0x140011a33
mov byte [rsp + 0x38], 1
lea r9, [0x140011020]
mov rcx, rdi
mov qword [rsp + 0x20], rdi
call fcn.1400127e0
mov rax, qword [rdi]
lea rdx, str.Started
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
mov rcx, qword [rdi + 0x68]
lea rdx, str.Failed_to_connect_to__s_n
mov rax, qword [rdi]
mov r8d, 2
mov r9, qword [rcx + 0x20]
cmp byte [rcx + 0x3d], 0
mov rcx, rdi
mov r10, qword [rax + 0x10]
jne 0x140011a75
lea rdx, str.Successfully_connected_to__s_n
call r10
mov r13, qword [rdi + 0x60]
xorps xmm0, xmm0
mov r14, qword [str.filename]
mov r12d, 8
movups xmmword [rsp + 0x50], xmm0
mov esi, 0xf
mov qword [rsp + 0x60], r12
mov r15, qword [r13 + 0x48]
mov qword [rsp + 0x68], rsi
mov rbp, r15
mov qword [rsp + 0x50], r14
mov byte [rsp + 0x58], 0
mov rbx, qword [r15 + 8]
cmp byte [rbx + 0x19], 0
jne 0x140011b06
nop dword [rax + rax]
cmp qword [rbx + 0x38], 0x10
lea rdx, [rsp + 0x50]
lea rcx, [rbx + 0x20]
jb 0x140011ad4
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp r12, rsi
mov r8, rsi
cmovb r8, r12
call fcn.14001e770
test eax, eax
je 0x140011ccf
js 0x140011cd8
mov rbp, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140011ac0
mov esi, 0xf
cmp byte [rbp + 0x19], 0
jne 0x140011b49
cmp qword [rbp + 0x38], 0x10
lea rdx, [rbp + 0x20]
jb 0x140011b1b
mov rdx, qword [rbp + 0x20]
mov rbx, qword [rbp + 0x30]
lea rcx, [rsp + 0x50]
cmp rsi, 0x10
mov r8, r12
cmovae rcx, r14
cmp rbx, r12
cmovb r8, rbx
call fcn.14001e770
test eax, eax
je 0x140011ce1
jns 0x140011cea
xor al, al
test al, al
cmove rbp, r15
cmp rsi, 0x10
jb 0x140011b88
lea rdx, [rsi + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140011b80
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011da0
mov rcx, r14
call fcn.14001bc64
cmp rbp, qword [r13 + 0x48]
je 0x140011d0f
movzx eax, word [0x14004c0e0]
mov esi, 0xb
mov r13, qword [rdi + 0x60]
mov r8d, 0xf
movsd xmm0, qword [str.fileversion]
mov r12, qword [rbp + 0x40]
mov word [rsp + 0x58], ax
mov r15, qword [r13 + 0x48]
movzx eax, byte [0x14004c0e2]
mov rbp, r15
movsd qword [rsp + 0x50], xmm0
mov r14, qword [rsp + 0x50]
mov rbx, qword [r15 + 8]
mov dword [rsp + 0x5c], 0
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r8
cmp byte [rbx + 0x19], 0
mov byte [rsp + 0x5a], al
mov byte [rsp + 0x5b], 0
jne 0x140011c4e
mov r15d, esi
nop word [rax + rax]
cmp qword [rbx + 0x38], 0x10
lea rdx, [rsp + 0x50]
lea rcx, [rbx + 0x20]
jb 0x140011c14
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp r15, rsi
mov r8, rsi
cmovb r8, r15
call fcn.14001e770
test eax, eax
je 0x140011cf1
js 0x140011cfa
mov rbp, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140011c00
mov r15, qword [r13 + 0x48]
mov esi, 0xb
lea r8d, [rsi + 4]
cmp byte [rbp + 0x19], 0
jne 0x140011c89
cmp qword [rbp + 0x38], 0x10
lea rdx, [rbp + 0x20]
jb 0x140011c63
mov rdx, qword [rbp + 0x20]
mov rbx, qword [rbp + 0x30]
lea rcx, [rsp + 0x50]
cmp r8, 0x10
mov r8, rsi
cmovae rcx, r14
cmp rbx, rsi
cmovb r8, rbx
call fcn.14001e770
test eax, eax
je 0x140011d03
jns 0x140011d08
xor al, al
test al, al
cmove rbp, r15
cmp rbp, qword [r13 + 0x48]
je 0x140011d0f
mov rax, qword [rdi]
lea rdx, str.filename:__s
mov rbx, qword [rbp + 0x40]
mov r9, r12
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
mov rax, qword [rdi]
lea rdx, str.fileversion__s
mov r9, rbx
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x140011d25
cmp rsi, r12
jae 0x140011af5
mov rbx, qword [rbx + 0x10]
jmp 0x140011afb
cmp r12, rbx
jb 0x140011b49
mov al, 1
jmp 0x140011b4b
cmp rsi, r15
jae 0x140011c35
mov rbx, qword [rbx + 0x10]
jmp 0x140011c3b
cmp rsi, rbx
jb 0x140011c89
mov al, 1
jmp 0x140011c8b
mov rax, qword [rdi]
lea rdx, str.Could_not_find_fileversion_and_filename
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x10]
cmp byte [rdi + 0x29], 0
je 0x140011d65
xor ecx, ecx
call fcn.140012ad0
mov r10, qword [rdi]
lea rdx, str.dllloaded
mov rbx, rax
xor r9d, r9d
xor eax, eax
mov r8b, 1
mov qword [rsp + 0x30], rax
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call qword [r10 + 0x20]
mov rcx, rbx
call fcn.14001bc64
mov r14, qword [rsp + 0x78]
mov r13, qword [rsp + 0x80]
mov r12, qword [rsp + 0x88]
mov rsi, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xa8]
mov r15, qword [rsp + 0x70]
add rsp, 0x90
pop rdi
ret
call fcn.140022684
int3