Function at 0x14008ab50
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x130
mov rax, qword [0x14029a130]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov rdi, rcx
xor esi, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x14008c6b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rdi + 0x20]
lea rcx, [0x140306e18]
cmp rcx, rdx
je 0x14008abba
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14008abb4
mov rdx, qword [rdx]
call fcn.14000c480
nop
cmp dword [0x140306df8], 0
jne 0x14008b239
lea rcx, [rsp + 0x48]
call fcn.140092810
nop
mov qword [rsp + 0x100], rsi
movdqa xmm0, xmmword [0x14027f7e0]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
mov ecx, 8
call fcn.1400c4ba8
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14008ac10
mov rcx, rax
call fcn.140093840
nop
call fcn.1400874e0
mov byte [0x140306ca0], 0
xor r8d, r8d
lea rdx, [0x14010eb90]
lea rcx, [0x140306ca8]
call fcn.14000c480
mov r8d, 0x20
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x30]
call fcn.140085900
nop
cmp qword [rax + 0x18], 0x10
jb 0x14008ac55
mov rax, qword [rax]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14008ac60
mov rdx, rax
lea rcx, [0x140306da0]
call fcn.14000c480
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14008acbd
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008acb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b3d2
call fcn.1400c4ba0
lea rdx, str.nullptr
lea rcx, [rsp + 0x48]
call fcn.1400936b0
lea rcx, [rsp + 0x48]
call fcn.140092b80
test al, al
je 0x14008b3d8
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xf0], rsi
mov qword [rsp + SafeArrayGetLBound8], 0xf
mov byte [rsp + 0xe0], 0
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xd0], 6
mov qword [rsp + 0xd8], SafeArrayGetLBound
mov eax, dword [str.active]
mov dword [rsp + 0xc0], eax
movzx eax, word [0x140101184]
mov word [rsp + 0xc4], ax
mov byte [rsp + 0xc6], 0
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xa0]
call fcn.140091da0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14008ad68
mov rax, qword [rax]
mov r8, rax
lea rdx, str.action
lea rcx, [rsp + 0x100]
call fcn.140092840
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14008adc3
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008adbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b3e0
call fcn.1400c4ba0
movdqa xmm0, xmmword [0x14027f7e0]
movdqu xmmword [rsp + 0xb0], xmm0
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0x10
jb 0x14008ae1f
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ae1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b3e6
call fcn.1400c4ba0
lea rdx, [rdi + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.14000c300
mov r8, rax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x30]
call fcn.140082e50
nop
cmp qword [rax + 0x18], 0x10
jb 0x14008ae50
mov rax, qword [rax]
mov r8, rax
lea rdx, str.application_id
lea rcx, [rsp + 0x100]
call fcn.140092840
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14008aeab
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008aea6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b3ec
call fcn.1400c4ba0
lea rdx, [0x140306ce0]
lea rcx, [rsp + 0xc0]
call fcn.14000c300
mov r8, rax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x30]
call fcn.140082e50
nop
cmp qword [rax + 0x18], 0x10
jb 0x14008aedf
mov rax, qword [rax]
mov r8, rax
lea rdx, str.mhwpd
lea rcx, [rsp + 0x100]
call fcn.140092840
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14008af3a
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008af35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b3f2
call fcn.1400c4ba0
lea rcx, str.username
call fcn.1400da374
mov qword [rsp + 0xa0], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xb0], xmm0
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14008af60
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140008a00
nop
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x80]
call fcn.14000c300
mov r8, rax
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x30]
call fcn.140082e50
nop
cmp qword [rax + 0x18], 0x10
jb 0x14008afb2
mov rax, qword [rax]
mov r8, rax
lea rdx, str.royal_user
lea rcx, [rsp + 0x100]
call fcn.140092840
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0x10
jb 0x14008b00e
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b008
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b3f8
call fcn.1400c4ba0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14008b051
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b04c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b3fe
call fcn.1400c4ba0
lea rdx, [0x140306da0]
lea rcx, [rsp + 0xa0]
call fcn.140091da0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14008b070
mov rax, qword [rax]
mov r8, rax
lea rdx, str.royal
lea rcx, [rsp + 0x100]
call fcn.140092840
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14008b0cb
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b0c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b404
call fcn.1400c4ba0
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xb8], rsi
mov r8d, 0x23
lea rdx, str.https:__bratvapubgm.com_api_new.php
lea rcx, [rsp + 0xa0]
call fcn.1400862e0
lea r9, [rsp + 0x100]
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x48]
call fcn.140092f30
test al, al
je 0x14008b40a
lea rdx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0x10
cmovae rdx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xf0]
lea rcx, [0x140306dc0]
call fcn.14000c480
mov rcx, rdi
call fcn.140088d40
lea rcx, [rsp + 0x48]
call fcn.140092850
inc dword [0x140306df8]
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0x10
jb 0x14008b1b0
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b1ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b415
call fcn.1400c4ba0
mov qword [rsp + 0xf0], rsi
mov qword [rsp + SafeArrayGetLBound8], 0xf
mov byte [rsp + 0xe0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14008b20f
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b20a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b41b
call fcn.1400c4ba0
movdqa xmm0, xmmword [0x14027f7e0]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
lea rcx, [rsp + 0x48]
call fcn.14002e510
mov al, 1
jmp 0x14008b3ad
lea rax, [rsp + 0x100]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x110], 0xa
mov qword [rsp + 0x118], SafeArrayGetLBound
movsd xmm0, qword [str.Not_Needed]
movsd qword [rsp + 0x100], xmm0
movzx eax, word [0x140101210]
mov word [rsp + 0x108], ax
mov byte [rsp + 0x10a], 0
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0xf0], 0xa
mov qword [rsp + SafeArrayGetLBound8], 0xf
movsd qword [rsp + 0xe0], xmm0
mov word [rsp + 0xe8], ax
mov byte [rsp + 0xea], 0
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0xb0], SafeArrayGetLBound
mov qword [rsp + 0xb8], SafeArrayGetLBound
movsd xmm0, qword [str.Report_Catch]
movsd qword [rsp + 0xa0], xmm0
mov eax, dword [0x140101220]
mov dword [rsp + 0xa8], eax
mov byte [rsp + 0xac], 0
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xd8], SafeArrayGetLBound
mov edx, 0x20
lea rcx, [rsp + 0xc0]
call fcn.14000c420
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xd0], SafeArrayPutElement
mov qword [rsp + 0xd8], 0x1f
movups xmm0, xmmword [str.Double_Authentication]
movups xmmword [rax], xmm0
mov ecx, dword [0x140101238]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x14010123c]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0xc0]
mov rcx, rdi
call fcn.14008cd30
mov al, 1
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.1400c4b80
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
call fcn.1400cbc18
int3
xor ecx, ecx
call fcn.1400cf8d8
nop
call fcn.1400cbc18
nop
call fcn.1400cbc18
int3
call fcn.1400cbc18
int3
call fcn.1400cbc18
nop
call fcn.1400cbc18
nop
call fcn.1400cbc18
int3
call fcn.1400cbc18
int3
mov ecx, 0x2b
call fcn.1400cf8d8
nop
call fcn.1400cbc18
nop
call fcn.1400cbc18
int3