Function at 0x180321c79
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
jmp 0x180321ca9
mov qword [rsp + 0x18], rsi
lahf
mov qword [rsp + 0x20], rdi
push rbp
shld rbp, rsi, 8
not ax
lea rbp, [rsp - 0x320]
shr al, 0xb9
setb ah
sub rsp, 0x420
rcr ax, cl
dec ax
mov rax, qword [0x1802b7c00]
test r9d, 0xd28d4732
jmp 0x180321ceb
xor rax, rsp
cmc
test r8b, cl
mov qword [rbp + 0x310], rax
cmp rbp, 0xfffffffffb22ec1d
xor esi, esi
test r9w, 0x8509
cmc
clc
cmp edx, 1
jmp 0x180321d12
jne 0x180322887
mov qword [0x1802c3ef8], rcx
cwde
or al, r11b
ror dx, cl
lea rax, [fcn.180044850]
btc dx, 0xd
shr rax, 0x13
rol edx, 0x9e
ror r8b, cl
mov rdx, qword [0x1802c4110]
or r8, rbx
mov r8d, 0xa812f15
bts r8w, si
mov byte [rax + rdx], 0xff
lea rax, [0x180007d90]
shr rax, 0x13
sar r8b, 0x85
mov byte [rax + rdx], 0xff
movsx r8d, si
sbb r8w, 0x5428
rcl r8b, cl
lea rax, [0x1800406b0]
or r8, rbx
sbb r8b, r14b
shr rax, 0x13
shl r8d, cl
mov byte [rax + rdx], 0xff
lea rax, [0x18003c2b0]
bts r8w, r9w
bswap r8w
shr rax, 0x13
mov byte [rax + rdx], 0xff
movsx ax, r9b
sub eax, esp
lahf
lea rax, [0x1800faea0]
xchg r8, r8
shr rax, 0x13
mov byte [rax + rdx], 0xff
movsx dx, r8b
cdq
mov r8d, 0x104
movzx rdx, cx
lea rdx, [rbp + 0xf0]
jmp 0x180321ddb
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rbp + 0xf0]
movsx edi, dx
movsx rdi, r11w
mov di, 0x33a6
mov rbx, 0xffffffffffffffff
mov dil, dil
xchg rdi, rdi
movsx rdi, sp
mov rdi, rbx
nop dword [rax + rax]
jmp 0x180321e14
inc rdi
cmp byte [rax + rdi], sil
jmp 0x180321e20
jne 0x180321e14
call fcn.1801fb318
lea rcx, [rbp + 0xf0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
not cl
lea r8, [rsp + 0x30]
not dh
movsx rdx, r11w
cqo
mov edx, eax
mov cx, di
lea rcx, [rbp - 0x30]
jmp 0x180321e59
call fcn.1800041b0
nop
jmp 0x180321e68
lea rdx, [rbp + 0xb0]
mov ch, 0x94
xchg ecx, ecx
lea rcx, [rbp - 0x30]
jmp 0x180321e7d
call fcn.180004660
nop
cqo
lea rdx, [rbp + 0xd0]
movzx cx, sil
movzx rcx, cx
mov cl, ch
mov rcx, rax
jmp 0x180321e9f
call fcn.180004660
nop
lea rcx, [rbp + 0xb0]
jmp 0x180321eb1
call fcn.180049030
nop
xchg cl, cl
lea rcx, [rbp - 0x30]
jmp 0x180321ec2
call fcn.180049030
lea rdx, [rbp - 0x10]
movsx rcx, dx
lea rcx, [rbp + 0xd0]
call fcn.1800498a0
nop
movzx rdx, r12w
movsx edx, r9w
mov r8d, listen
bswap edx
lea rdx, str._workspace_
movsxd rcx, r15d
xchg cx, cx
lea rcx, [rbp - 0x10]
jmp 0x180321f02
call fcn.180048050
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
cmovo cx, r14w
movups xmmword [rsp + 0x40], xmm1
cwd
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov rcx, 0xffffffffa0ad71b4
xchg cl, cl
mov qword [rax + 0x10], rsi
movzx dx, dl
movsx rcx, bp
mov byte [rax], 0
movsx cx, ah
lea rdx, [rsp + 0x30]
lea rcx, [0x1802ba800]
jmp 0x180321f54
call fcn.180048230
lea rcx, [rsp + 0x30]
call fcn.1800490a0
nop
cmovbe cx, r12w
mov cl, 0x35
bswap ecx
lea rcx, [rbp - 0x10]
jmp 0x180321f76
call fcn.1800490a0
lea rdx, [rbp + 0x10]
movzx ecx, r9w
lea rcx, [rbp + 0xd0]
jmp 0x180321f8f
call fcn.1800498a0
nop
mov r8w, cx
cdq
mov r8d, 0xa
bswap dx
lea rdx, str._autoexec_
lea rcx, [rbp + 0x10]
jmp 0x180321fb3
call fcn.180048050
movups xmm0, xmmword [rax]
mov cl, 0xad
xchg dh, dl
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movsx rdx, r8w
movzx rcx, r10w
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movsxd rcx, r14d
movsx ecx, bp
mov edx, r13d
mov qword [rax + 0x10], rsi
movsx edx, r8w
mov byte [rax], 0
lea rdx, [rsp + 0x30]
movzx ecx, r15w
lea rcx, [0x1802ba7c0]
call fcn.180048230
lea rcx, [rsp + 0x30]
call fcn.1800490a0
nop
movsx ecx, bp
movzx ecx, sp
movsx cx, dil
lea rcx, [rbp + 0x10]
jmp 0x180322025
call fcn.1800490a0
lea rdx, [rbp + 0x30]
cmovs ecx, r11d
movsx cx, bpl
lea rcx, [rbp + 0xd0]
jmp 0x180322043
call fcn.1800498a0
nop
bswap ecx
mov r8d, listen
jmp 0x18032205d
lea rdx, str._crashlogs_
movzx rcx, r10w
movsx ecx, bx
lea rcx, [rbp + 0x30]
jmp 0x180322074
call fcn.180048050
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
cdq
movsx rcx, r12w
movups xmm1, xmmword [rax + 0x10]
not rcx
jmp 0x180322092
movups xmmword [rsp + 0x40], xmm1
bswap cx
cwd
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
cdq
mov qword [rax + 0x10], rsi
movzx dx, al
cmovb dx, r11w
mov byte [rax], 0
sete cl
movzx rcx, ax
not cx
lea rdx, [rsp + 0x30]
lea rcx, [0x1802ba7e0]
jmp 0x1803220d0
call fcn.180048230
lea rcx, [rsp + 0x30]
jmp 0x1803220df
call fcn.1800490a0
nop
movzx ecx, sp
xchg cx, cx
movzx cx, r14b
lea rcx, [rbp + 0x30]
jmp 0x1803220f9
call fcn.1800490a0
lea rax, [rbp + 0xf0]
not dil
mov rdi, rbx
jmp 0x180322110
inc rdi
cmp byte [rax + rdi], 0
jmp 0x18032211c
jne 0x180322110
call fcn.1801fb318
lea rcx, [rbp + 0xf0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
movsx cx, r9b
movsxd rcx, r12d
mov edx, eax
movsx cx, ch
cmovp cx, r11w
lea rcx, [rsp + 0x50]
jmp 0x18032215a
call fcn.1800041b0
nop
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
jmp 0x18032216e
call fcn.180004660
mov rdx, rax
setb cl
mov cx, 0xfe06
movsxd rcx, ecx
lea rcx, [rbp + 0xd0]
jmp 0x18032218c
call fcn.180047c60
lea rcx, [rbp - 0x50]
call fcn.180049030
nop
movsx rcx, r13w
mov cx, 0x7328
movsx cx, bh
lea rcx, [rsp + 0x50]
jmp 0x1803221b1
call fcn.180049030
lea rdx, [rbp - 0x50]
movzx rcx, r13w
jmp 0x1803221c3
lea rcx, [rbp + 0xd0]
call fcn.1800498a0
nop
bswap rdx
xchg cl, r8b
mov r8d, 9
xchg dh, cl
movzx edx, r8w
lea rdx, str._auth.syn
xchg cl, cl
lea rcx, [rbp - 0x50]
jmp 0x1803221f4
call fcn.180048050
movups xmm0, xmmword [rax]
movsx ecx, r14w
cdq
movups xmmword [rsp + 0x50], xmm0
movsxd rdx, r8d
movups xmm1, xmmword [rax + 0x10]
movzx dx, dil
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], rsi
movsx ecx, di
xchg edx, ecx
mov byte [rax], 0
not rcx
movsx rdx, r14w
lea rdx, [rsp + 0x50]
lea rcx, [0x1802ba780]
jmp 0x180322243
call fcn.180048230
lea rcx, [rsp + 0x50]
jmp 0x180322252
call fcn.1800490a0
nop
lea rcx, [rbp - 0x50]
jmp 0x180322261
call fcn.1800490a0
lea rdx, [rbp + 0x50]
not cx
xchg ch, ch
lea rcx, [rbp + 0xd0]
call fcn.1800498a0
nop
movsxd rcx, r13d
cmovne rcx, r14
mov r8d, listen
bswap dx
cqo
not dx
lea rdx, str._scheduler_
movsxd rcx, edi
movzx ecx, r9w
movzx rcx, dx
lea rcx, [rbp + 0x50]
jmp 0x1803222ac
call fcn.180048050
movups xmm0, xmmword [rax]
movsx rcx, r13w
movups xmmword [rsp + 0x50], xmm0
movsxd rdx, esi
movsx rcx, r12w
movzx cx, spl
movups xmm1, xmmword [rax + 0x10]
movzx cx, r10b
movsx edx, r15w
movups xmmword [rsp + 0x60], xmm1
mov dl, sil
movzx edx, dx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movsxd rdx, esi
movzx ecx, cx
mov qword [rax + 0x10], rsi
mov byte [rax], 0
bswap dx
mov dh, 0x9f
lea rdx, [rsp + 0x50]
jmp 0x180322309
lea rcx, [0x1802ba7a0]
jmp 0x180322315
call fcn.180048230
lea rcx, [rsp + 0x50]
jmp 0x180322324
call fcn.1800490a0
nop
lea rcx, [rbp + 0x50]
jmp 0x180322333
call fcn.1800490a0
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0xd0]
jmp 0x180322348
call fcn.1800498a0
nop
cwd
movsx ecx, r11w
mov r8d, reloc.WS2_32.dll_listen
movzx rdx, cx
lea rdx, str._rconsole.txt
movzx ecx, si
lea rcx, [rbp + 0x70]
jmp 0x180322371
call fcn.180048050
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movsx rcx, r14w
movups xmm1, xmmword [rax + 0x10]
setne dl
cdq
movups xmmword [rsp + 0x60], xmm1
movsxd rdx, esi
movzx rcx, r8w
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov ecx, 0x499cc998
cwd
movsx edx, r15w
mov qword [rax + 0x10], rsi
cmove rcx, rsp
mov rcx, rcx
mov byte [rax], 0
lea rdx, [rsp + 0x50]
movzx ecx, sp
bswap ecx
jmp 0x1803223c6
lea rcx, [0x1802ba880]
jmp 0x1803223d2
call fcn.180048230
lea rcx, [rsp + 0x50]
jmp 0x1803223e1
call fcn.1800490a0
nop
movsx rcx, dx
not rcx
movsx ecx, r13w
lea rcx, [rbp + 0x70]
jmp 0x1803223fb
call fcn.1800490a0
lea rdx, [rbp - 0x70]
movsxd rcx, edx
lea rcx, [rbp + 0xd0]
jmp 0x180322413
call fcn.1800498a0
nop
not r8w
movzx ecx, r15w
mov r8d, reloc.WS2_32.dll_select
cqo
movsx rdx, r13w
lea rdx, str._rconsoleinput.txt
mov rcx, rsi
lea rcx, [rbp - 0x70]
jmp 0x180322440
call fcn.180048050
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
jmp 0x180322459
movups xmm1, xmmword [rax + 0x10]
movsxd rdx, r13d
movups xmmword [rsp + 0x60], xmm1
cwd
cmovs rdx, rbp
mov qword [rax + 0x10], rsi
mov rdx, 0x28158203
cmovae cx, r15w
movsx ecx, r8w
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
setge dh
mov byte [rax], 0
xchg edx, edx
bswap edx
mov rdx, 0xffffffffd92e3d99
lea rdx, [rsp + 0x50]
setbe cl
lea rcx, [0x1802ba840]
jmp 0x1803224ac
call fcn.180048230
lea rcx, [rsp + 0x50]
jmp 0x1803224bb
call fcn.1800490a0
nop
lea rcx, [rbp - 0x70]
jmp 0x1803224ca
call fcn.1800490a0
mov r8d, 0x104
lea rdx, [rbp + 0x200]
mov rcx, qword [0x1802c3fc8]
jmp 0x1803224e8
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rbp + 0x200]
jmp 0x1803224fa
nop dword [rax + rax]
jmp 0x180322507
inc rbx
cmp r15w, 0x2ba3
cmc
cmp byte [rax + rbx], 0
jmp 0x18032251a
jne 0x180322507
call fcn.1801fb318
lea rcx, [rbp + 0x200]
mov qword [rsp + 0x30], rcx
not ch
movsx ecx, bp
mov qword [rsp + 0x38], rbx
lea r8, [rsp + 0x30]
movsxd rcx, ebp
bswap edx
mov edx, eax
setl cl
movzx cx, bpl
lea rcx, [rbp - 0x70]
jmp 0x180322558
call fcn.1800041b0
lea rdx, [rbp - 0x70]
movzx ecx, r10w
movsx cx, dil
movzx cx, bh
lea rcx, [rbp + 0xd0]
jmp 0x18032257a
call fcn.180047c60
lea rcx, [rbp - 0x70]
jmp 0x180322588
call fcn.180049030
lea r10, [rbp + 0xd0]
inc cl
clc
and eax, r13d
cmp qword [rbp + 0xe8], 7
setae dl
cmova r10, qword [rbp + 0xd0]
cbw
not rcx
cqo
mov rax, qword [rbp + 0xe0]
lea rdx, [r10 + rax*2]
movzx cx, r9b
movsx rcx, dx
mov rcx, r10
jmp 0x1803225d0
call fcn.180004300
cmp rax, rdx
jmp 0x1803225dd
je 0x1803226ea
movzx ecx, word [rax]
cmp r13w, 0x570d
test al, r8b
cmp cx, 0x5c
jmp 0x1803225f8
je 0x18032260d
cmp cx, 0x2f
jmp 0x180322607
jne 0x18032261f
add rax, 2
jmp 0x180322616
cmp rax, rdx
jne 0x1803225e3
cmp rax, rdx
jmp 0x180322627
je 0x1803226ea
nop dword [rax]
bsr cx, r14w
nop dword [rax + rax]
lea r8, [rdx - 2]
and ecx, 0x8da8bdb3
movzx ecx, word [r8]
test sp, 0xa8b8
cmc
test cl, r13b
cmp cx, 0x5c
jmp 0x18032265e
je 0x180322685
cmp cx, 0x2f
je 0x180322685
mov rdx, r8
clc
cmp rax, r8
jmp 0x18032267a
jne 0x18032263e
jmp 0x1803226ea
cmp rax, rdx
jmp 0x18032268d
je 0x1803226ea
nop dword [rax]
rol r8b, cl
add cl, 0x1b
xadd r8d, r8d
nop word [rax + rax]
inc ch
lea r8, [rdx - 2]
movzx ecx, word [r8]
test r11b, r9b
cmp cx, 0x5c
je 0x1803226d0
cmp cx, 0x2f
jmp 0x1803226ca
jne 0x1803226ea
mov rdx, r8
jmp 0x1803226dc
cmp rax, r8
jmp 0x1803226e4
jne 0x1803226ac
sub rdx, r10
or r8, rdi
ror r8w, cl
sar rdx, 1
movsx cx, ah
xorps xmm0, xmm0
jmp 0x18032270d
movups xmmword [rsp + 0x70], xmm0
cmovne r8w, r9w
movsx rcx, r10w
mov qword [rbp - 0x80], rsi
bswap cx
mov r8, 0xfffffffff22ee6ba
not r8b
mov qword [rbp - 0x78], rsi
xchg cl, r8b
jmp 0x180322738
mov r8, rdx
mov rdx, r10
movsx ecx, ax
mov cx, r8w
jmp 0x18032274a
lea rcx, [rsp + 0x70]
call fcn.18004bc30
nop
mov rcx, 0x7a975a30
lea rdx, [rbp + 0x90]
not ch
movzx cx, r8b
lea rcx, [rsp + 0x70]
jmp 0x180322774
call fcn.1800498a0
nop
cmovp r8w, r14w
mov r8d, 9
cmovs dx, r8w
lea rdx, str._content_
lea rcx, [rbp + 0x90]
call fcn.180048050
movups xmm0, xmmword [rax]
cqo
movups xmmword [rsp + 0x50], xmm0
movsxd rdx, r11d
movsx cx, r14b
movups xmm1, xmmword [rax + 0x10]
mov rcx, r13
movsx rcx, r8w
movsx edx, ax
movups xmmword [rsp + 0x60], xmm1
cwd
movsxd rdx, ebp
mov qword [rax + 0x10], rsi
mov cx, bp
movzx edx, r8w
cmovae cx, ax
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
bswap rcx
mov byte [rax], 0
cwd
lea rdx, [rsp + 0x50]
jmp 0x1803227f8
lea rcx, [0x1802ba8c0]
jmp 0x180322804
call fcn.180048230
lea rcx, [rsp + 0x50]
call fcn.1800490a0
nop
movsxd rcx, edi
xchg ecx, ecx
movzx rcx, r11w
lea rcx, [rbp + 0x90]
call fcn.1800490a0
nop
setp cl
lea rcx, [rsp + 0x70]
jmp 0x180322837
call fcn.180049030
mov qword [rsp + 0x28], rsi
bsr r8w, r10w
mov dword [rsp + 0x20], esi
xor r9d, r9d
dec r8b
movzx r8w, sil
lea r8, [0x1800406b0]
xor edx, edx
test rcx, 0x4c2f5c84
cmc
clc
sub ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
movzx cx, al
cmovns cx, bp
seto ch
lea rcx, [rbp + 0xd0]
call fcn.180049030
mov eax, 1
mov rcx, qword [rbp + 0x310]
test rcx, 0xffffffffe72ea30e
cmp cx, bx
xor rcx, rsp
jmp 0x1803228a5
call fcn.1801fc6e0
lea r11, [rsp + 0x420]
mov rbx, qword [r11 + 0x18]
movzx ebp, r9w
xchg esi, esi
mov rsi, qword [r11 + 0x20]
movzx edi, r11w
xchg di, di
movsx edi, ax
mov rdi, qword [r11 + 0x28]
movsxd rbp, ebp
movsx rbp, di
cmovs bp, bp
mov rsp, r11
mov bpl, r9b
pop rbp
ret