Function at 0x180006120
Capabilities:
Create thread

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x340]
sub rsp, 0x440
mov qword [rbp - 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x488], rbx
mov rax, qword [0x1800a4088]
xor rax, rsp
mov qword [rbp + 0x338], rax
mov r13d, r9d
mov dword [rsp + 0x58], r9d
mov rsi, r8
mov qword [rsp + 0x60], rdx
mov r14, rcx
mov qword [rsp + 0x70], rcx
movdqa xmm0, xmmword [0x180097c30]
movdqa xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0x90], 0
movdqa xmmword [rbp + 0xc0], xmm0
mov byte [rbp + 0xb0], 0
mov word [rbp + 0xd0], 0
xor edi, edi
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], 0xf
mov byte [rbp + 0xd8], dil
mov dword [rbp + 0xf8], edi
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x118], rdi
mov qword [rbp + 0x120], 0xf
mov byte [rbp + 0x108], dil
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
lea rcx, [rbp + 0x130]
call fcn.180006b60
nop
mov r12d, r13d
imul eax, r13d, 0x2e9
mov dword [rsp + 0x50], eax
mov r15, qword [rsp + 0x60]
cmp r13d, eax
ja 0x180006571
lea ecx, [rdi + 0x53]
movzx r13d, byte [rsp + 0x30]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x60]
nop dword [rax]
nop dword [rax + rax]
mov eax, r12d
sub eax, 0x90
je 0x180006519
sub eax, 0x35
je 0x180006510
sub eax, 0x539b
je 0x1800063a0
sub eax, 0x1f0e
je 0x18000633c
cmp eax, 0x34c2
jne 0x180006554
cmp dword [r15], 0xfffffffe
je 0x1800065e3
mov ecx, 0x11a
mov eax, ecx
sub eax, 0x11a
je 0x1800062c4
sub eax, 1
je 0x1800062af
cmp eax, 1
jne 0x18000631e
mov r15, rbx
jmp 0x18000631e
test r13b, r13b
je 0x180006331
cmp rbx, r15
je 0x180006331
cmp dword [rbx], 0xfffffffe
je 0x180006619
jmp 0x18000631e
mov r13b, 1
xor ebx, ebx
mov rdx, rsi
lea ecx, [rbx + 0x67]
call fcn.180046a00
mov rax, qword [rsi]
movzx ecx, byte [rax]
cmp cl, 0x28
je 0x180006303
cmp cl, 0x5b
je 0x1800062e9
xor r13b, r13b
jmp 0x180006319
mov qword [rsp + 0x20], r15
mov r9, r14
xor r8d, r8d
mov rdx, rsi
mov ecx, 0xa9
call fcn.180037610
jmp 0x180006316
mov r9, r14
mov r8, r15
mov rdx, rsi
mov ecx, 0x2f
call fcn.18003a480
mov rbx, rax
mov ecx, 0x11a
inc ecx
cmp ecx, 0x11d
jb 0x180006297
jmp 0x180006292
mov r12d, 0xa830
jmp 0x18000654f
mov r8d, 4
lea rdx, [0x18008fa64]
lea rcx, [rbp + 0x321]
call fcn.1800613d0
lea rdx, [0x18008f1c0]
lea rcx, [rbp + 0x320]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov r8d, 1
lea rdx, [0x18008fa68]
lea rcx, [rbp + 0x320]
call fcn.1800620d0
mov r8d, 5
lea rdx, str.Memor
lea rcx, [rbp + 0x320]
call fcn.1800620d0
jmp 0x18000654f
mov rdx, rsi
mov ecx, 0x67
call fcn.180046a00
mov rax, qword [rsi]
movsx ecx, byte [rax]
call fcn.18005d7f8
test eax, eax
jne 0x1800064f3
mov rcx, qword [rsi]
movzx eax, byte [rcx]
cmp al, 0x2e
je 0x1800064f3
cmp al, 0x28
jne 0x180006408
lea rax, [rcx + 1]
mov qword [rsi], rax
mov byte [rsp + 0x40], 0x29
mov byte [rsp + 0x38], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0x47
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.180015940
mov r15, rax
jmp 0x18000654f
cmp al, 0x3c
jne 0x18000642e
lea rax, [rcx + 1]
mov qword [rsi], rax
mov r9d, 0x5f
mov r8, r14
mov rdx, rsi
xor ecx, ecx
call fcn.180018ab0
mov r15, rax
jmp 0x18000654f
cmp al, 0x7c
jne 0x1800064c3
mov r14d, 0x9c
nop dword [rax]
mov eax, r14d
sub eax, 0x9c
je 0x18000646a
cmp eax, 1
jne 0x1800064ad
mov r8, rdi
lea rdx, str.ICANN_50
lea rcx, [0x1800a7d28]
call fcn.180019ba0
mov r15, rax
jmp 0x1800064ad
inc qword [rsi]
mov byte [rsp + 0x30], 0x7c
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0x47
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x30]
mov rcx, qword [rsp + 0x70]
call fcn.180015940
mov rdi, rax
cmp dword [rax], 0xfffffffe
je 0x180006951
mov qword [0x1800a7d28], 0
inc r14d
cmp r14d, 0x9e
jb 0x180006440
mov r14, qword [rsp + 0x70]
jmp 0x18000654f
cmp al, 0x40
jne 0x1800064d6
mov rdx, qword [r14 + 8]
mov rcx, rsi
call qword [r14]
mov r15, rax
jmp 0x18000654f
mov dword [rsp + 0x20], 0xb1
mov r9, rsi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.180045f80
mov r15, rax
jmp 0x18000654f
mov dword [rsp + 0x20], 0x28
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
xor ecx, ecx
call fcn.1800031e0
mov r15, rax
jmp 0x18000654f
mov word [rbp + 0x320], cx
jmp 0x180006554
mov rdx, rsi
mov ecx, 0x67
call fcn.180046a00
mov rcx, qword [rsi]
mov rax, qword [rsp + 0x60]
movzx eax, byte [rax]
cmp byte [rcx], al
je 0x18000660a
mov edx, 0xd2
mov rcx, rsi
call fcn.180034bb0
cmp eax, 0xffffffff
je 0x1800065ee
mov ecx, 0x53
imul eax, dword [rsp + 0x58], 0x95
add r12d, eax
cmp r12d, dword [rsp + 0x50]
jbe 0x180006250
mov r13d, dword [rsp + 0x58]
xor edi, edi
mov ebx, r13d
lea r14d, [r13 + 3]
cmp r13d, r14d
jae 0x180006686
mov eax, ebx
sub eax, 0x90
je 0x180006621
sub eax, 1
je 0x18000694c
cmp eax, 0x34
jne 0x18000667c
lea rcx, [rbp + 0x320]
dec rcx
nop word [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1800065b0
movzx eax, word [0x18008fa84]
mov word [rcx], ax
mov r8d, 2
lea rdx, [0x18008fa88]
lea rcx, [rbp + 0x32c]
call fcn.1800613d0
inc ebx
cmp ebx, r14d
jmp 0x18000657b
mov rbx, r15
mov rdi, rbx
jmp 0x180006951
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x3c]
xor ecx, ecx
call fcn.180010820
mov rbx, rax
mov rdi, rax
jmp 0x180006951
mov edx, 0x12
xor ecx, ecx
call fcn.18000ba80
mov rbx, rax
mov rdi, rbx
jmp 0x180006951
mov rax, qword [rsi]
cmp byte [rax], 0x21
jne 0x180006677
nop dword [rax]
inc qword [rsi]
mov rdx, rsi
mov ecx, 0x67
call fcn.180046a00
mov dword [rsp + 0x50], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0xe8
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.1800128d0
mov rdx, rax
mov ecx, 0x102
call fcn.18000f140
mov r15, rax
mov rax, qword [rsi]
cmp byte [rax], 0x21
je 0x180006630
mov qword [rsp + 0x58], r15
inc ebx
cmp ebx, r14d
jmp 0x18000657b
mov ebx, r13d
lea esi, [r13 - 3]
mov rdi, qword [rsp + 0x60]
cmp r13d, esi
jbe 0x1800068ae
mov eax, ebx
sub eax, 0xc3
je 0x180006819
sub eax, 1
je 0x180006700
cmp eax, 1
jne 0x180006898
lea rdx, str.rivilege
lea rcx, [rbp + 0x32d]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
xor r8d, r8d
mov edx, 0x119
lea rcx, [0x1800a4de0]
call fcn.180032d30
lea r9, [0x1800a4de8]
xor edx, edx
mov r8d, 0x88
lea rcx, [rsp + 0x60]
call fcn.180016850
mov eax, dword [rax]
test al, al
jmp 0x180006896
mov edx, 0x4a
lea rcx, [0x1800a4de0]
call fcn.1800404f0
lea rdx, [rbp + 0x320]
mov ecx, 0x1d
call fcn.1800103d0
test al, al
jne 0x180006736
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x28]
call fcn.180019ee0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.18005825c
xor r15d, r15d
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], r15b
xor r8d, r8d
lea rdx, [0x18008f168]
lea rcx, [rbp - 0x20]
call fcn.180047660
nop
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 0xf
mov byte [rbp], r15b
xor r8d, r8d
lea rdx, [0x18008f168]
lea rcx, [rbp]
call fcn.180047660
nop
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], r15b
xor r8d, r8d
lea rdx, [0x18008f168]
lea rcx, [rbp + 0x20]
call fcn.180047660
nop
mov word [rbp + 0x40], 1
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], r15b
xor r8d, r8d
lea rdx, [0x18008f168]
lea rcx, [rbp + 0x48]
call fcn.180047660
nop
mov dword [rsp + 0x50], 0x1bb
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 0x13]
lea r8, [rbp - 0x20]
lea rdx, [0x1800a4e28]
lea rcx, [rbp + 0x70]
call fcn.180041e00
nop
lea rcx, [rbp - 0x20]
call fcn.180006e30
dec ebx
cmp ebx, esi
jmp 0x180006695
mov eax, dword [0x1800a4f14]
mov dword [rsp + 0x50], eax
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x70]
lea rdx, [rbp - 0x70]
mov ecx, 0xf1
call fcn.180037b50
lea rax, [rbp - 0x70]
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0x70]
mov qword [rbp - 0x80], rax
mov eax, dword [0x1800a4f14]
mov dword [rbp - 0x78], eax
mov eax, dword [0x1800a4f18]
mov dword [rbp - 0x74], eax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rbp - 0x40], xmm0
movsd xmm1, qword [rbp - 0x78]
movsd qword [rbp - 0x30], xmm1
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x40]
lea r8, [0x18000c700]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
je 0x1800068a1
dec ebx
cmp ebx, esi
jmp 0x180006695
mov dword [rsp + 0x58], 1
jmp 0x18000694c
cmp r13d, r14d
jae 0x18000694c
lea rbx, [0x18001cfa0]
nop
mov eax, r13d
sub eax, 0xc5
je 0x1800068f3
sub eax, 1
je 0x1800068d6
cmp eax, 1
je 0x18000694c
jmp 0x180006940
xor r8d, r8d
lea rdx, [rbp + 0x130]
lea ecx, [r8 + 0x45]
call fcn.1800164e0
mov dword [rsp + 0x58], 0
jmp 0x180006940
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x60], rbx
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov ecx, 0xc0
call fcn.180015ff0
lea r9, [0x1800a4de0]
lea r8, [rbp - 0x70]
mov edx, 0x107
lea rcx, [rbp + 0x130]
call fcn.180033360
lea rdx, [rbp + 0x130]
mov ecx, 0x123
call fcn.18000e6e0
inc r13d
cmp r13d, r14d
jb 0x1800068c0
mov rdi, qword [rsp + 0x58]
lea rcx, [rbp + 0x2b0]
call fcn.1800071b0
lea rcx, [rbp + 0x210]
call fcn.180006ff0
mov rdx, qword [rbp + 0x208]
cmp rdx, 0x10
jb 0x1800069aa
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800069a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006abf
call fcn.1800534b4
movdqa xmm0, xmmword [0x180097c30]
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
lea rcx, [rbp + 0x148]
call fcn.180047220
mov rcx, qword [rbp + 0x138]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x180006a14
nop
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x138]
call fcn.180048f90
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x38
call fcn.1800534b4
cmp byte [rbx + 0x19], 0
je 0x1800069e0
mov rcx, qword [rbp + 0x138]
mov edx, 0x38
call fcn.1800534b4
nop
lea rcx, [rbp - 0x70]
call fcn.180047920
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x180006a66
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006a61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006ab9
call fcn.1800534b4
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x120], 0xf
mov byte [rbp + 0x108], 0
lea rcx, [rbp + 0x70]
call fcn.180006e30
mov rax, rdi
mov rcx, qword [rbp + 0x338]
xor rcx, rsp
call fcn.180053490
mov rbx, qword [rsp + 0x488]
add rsp, 0x440
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800627dc
nop
call fcn.1800627dc
nop
int3