Function at 0x1800129e0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20a0]
mov eax, 0x21a0
call fcn.180040ee0
sub rsp, rax
mov ebx, edx
lea r14d, [rdx - 0x10]
mov esi, edx
lea r11, [0x180000000]
xor edx, edx
mov r10, r9
mov r15, r8
cmp ebx, r14d
jbe 0x180012cdf
mov rax, qword [rsp + 0x40]
mov edi, dword [rbp + 0x20e8]
mov qword [rsp + 0x40], rax
mov r8, qword [rsp + 0x40]
mov qword [rsp + 0x30], r8
nop dword [rax]
lea eax, [rbx - 0x80]
cmp eax, 0x42
ja case.0x180012a70.144
movzx eax, byte [r11 + rax + 0x12fac]
mov ecx, dword [r11 + rax*4 + 0x12f68]
add rcx, r11
jmp rcx
cmp qword [r10], 0
jne 0x180012ac2
mov eax, 0x8f
nop dword [rax]
cmp eax, 0x8f
je 0x180012ab1
cmp eax, 0x10c2
jne 0x180012ab6
mov rbx, qword [rsp + 0x48]
mov rax, rbx
mov rbx, qword [rsp + 0x21f0]
add rsp, 0x21a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x48], 0
add eax, 0x1033
cmp eax, 0x2066
jbe 0x180012a80
mov r8d, 0x81
mov dword [rsp + 0x38], 1
mov rdx, r10
lea rcx, [rsp + 0x38]
call fcn.180016100
mov r10, qword [rbp + 0x20f8]
jmp case.0x180012a70.144
mov r8d, 5
lea rdx, [0x1800644ca]
lea rcx, [rbp - 0x70]
call fcn.1800470dc
mov r10, qword [rbp + 0x20f8]
jmp case.0x180012a70.144
mov eax, dword [0x18006452a]
mov dword [rbp - 0x70], eax
movzx eax, word [0x18006452e]
mov word [rbp - 0x6c], ax
mov word [rbp - 0x6a], dx
jmp case.0x180012a70.144
mov eax, dword [rbp + 0x20e8]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x50], rax
xor ecx, ecx
lea edx, [r8 + 0x1a]
call fcn.18003ea40
mov r12, rax
mov qword [rsp + 0x40], rax
mov r9, rax
mov edx, dword [0x18007de24]
lea rax, [rbp + 0x20e8]
mov rcx, qword [0x18007de28]
mov r8d, 0x4000000c
mov qword [rsp + 0x20], rax
call qword [sym.imp.CRYPT32.dll_CryptBinaryToStringW]
mov r10, qword [rbp + 0x20f8]
jmp case.0x180012a70.144
mov word [rbp - 0x5c], dx
lea r9, [rbp - 0x70]
lea rdx, [rbp - 0x80]
mov r8d, 0xf5
lea rcx, [rbp - 8]
call fcn.180024590
mov r10, qword [rbp + 0x20f8]
mov r8, qword [rax]
mov qword [rsp + 0x30], r8
jmp 0x180012cba
mov dword [rbp + 0x20e8], edx
jmp case.0x180012a70.144
mov edi, 0x1388
jmp case.0x180012a70.144
mov ebx, 0x8b
mov eax, ebx
sub eax, 0x8b
je 0x180012c06
cmp eax, 1
jne 0x180012c35
mov rcx, qword [r10]
mov edx, edi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r10, qword [rbp + 0x20f8]
cmp eax, 0x102
je 0x180012c35
mov ebx, 0x80
jmp case.0x180012a70.144
mov r9, qword [0x18007d6b8]
xor r8d, r8d
mov edx, 0x92
xor ecx, ecx
call fcn.1800129e0
mov rcx, qword [0x18007d6b8]
xor edx, edx
lea r8d, [rdx + 0x3c]
call fcn.180038030
mov r10, qword [rbp + 0x20f8]
inc ebx
cmp ebx, 0x8d
jb 0x180012bd5
jmp case.0x180012a70.129
movsd xmm0, qword [0x1800645d8]
movzx eax, word [0x1800645e0]
movsd qword [rsp + 0x60], xmm0
mov word [rsp + 0x68], ax
jmp case.0x180012a70.144
mov dword [rbp - 0x60], 0x6c006c
jmp case.0x180012a70.144
mov qword [rsp + 0x28], rdx
lea r8, [0x180011b60]
mov dword [rsp + 0x20], edx
mov r9, r10
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r10, qword [rbp + 0x20f8]
mov qword [r10], rax
jmp case.0x180012a70.144
xor r9d, r9d
jmp 0x180012b51
mov byte [rsp + 0x48], 1
jmp case.0x180012a70.144
movsd xmm0, qword [str.shutdown]
movzx eax, byte [0x180064600]
movsd qword [rbp - 0x80], xmm0
mov byte [rbp - 0x78], al
mov r8, qword [rsp + 0x30]
dec ebx
lea r11, [0x180000000]
mov edx, 0
cmp ebx, r14d
ja 0x180012a50
mov rdx, qword [rsp + 0x40]
lea r11, [0x180000000]
jmp 0x180012cf3
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdx
mov r8, qword [rsp + 0x40]
mov qword [rsp + 0x30], r8
lea edi, [rsi + 0x564]
mov dword [rsp + 0x38], edi
cmp esi, edi
jae case.0x180012a70.140
mov rbx, qword [rsp + 0x48]
movabs r9, 0x2e003200330079
mov r12d, dword [rbp + 0x20e8]
mov r13, qword [rsp + 0x58]
cmp esi, 0x1b6
ja 0x180012dc7
je 0x180012dba
lea eax, [rsi - 0x92]
cmp eax, 0xc8
ja case.0x180012d57.153
movzx eax, byte [r11 + rax + 0x13010]
mov ecx, dword [r11 + rax*4 + 0x12ff0]
add rcx, r11
jmp rcx
xor eax, eax
mov word [rsp + 0x72], ax
jmp case.0x180012d57.153
mov rcx, qword [r10]
mov edx, 2
call r8
jmp case.0x180012d57.153
mov r9d, 0x57
mov r8, r10
xor edx, edx
xor ecx, ecx
call fcn.180024e10
test al, al
je case.0x180012d57.151
jmp case.0x180012d57.153
mov qword [rsp + 0x6a], r9
jmp case.0x180012d57.153
xor eax, eax
mov dword [rsp + 0x72], 0x6c0064
mov word [rsp + 0x76], ax
jmp case.0x180012d57.153
mov rbx, rdx
jmp case.0x180012d57.153
mov dword [rsp + 0x76], 0x6c
jmp case.0x180012d57.153
cmp esi, 0x326
ja 0x180012f0b
je 0x180012e20
mov eax, esi
sub eax, 0x212
je 0x180012dfd
sub eax, 0x5c
je case.0x180012d57.153
cmp eax, 0x5c
jne case.0x180012d57.153
mov dword [rsp + 0x50], 0x14
jmp case.0x180012d57.153
lea r9, [rsp + 0x60]
mov edx, 0x4e
mov r8d, 0xf5
lea rcx, [rbp + 0x48]
call fcn.180024590
mov r13, qword [rax]
jmp case.0x180012d57.153
mov r14d, 0xde
cmp r14d, 0xde
je 0x180012ea7
cmp r14d, 0x4d2e
jne 0x180012eeb
test r12d, r12d
jle 0x180012f2a
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
movsxd rsi, r12d
cmp rsi, rax
ja 0x180012e8b
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x180012e6f
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp + 0xa0]
call fcn.180042e20
mov byte [rdi + rsi], 0
jmp 0x180012eeb
lea r9, [rbp + 0xa0]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180002730
jmp 0x180012eeb
mov eax, dword [rsp + 0x50]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x48], eax
lea r8, [rsp + 0x48]
mov rax, qword [r10]
mov edx, 0x52
xor ecx, ecx
mov qword [rsp + 0x58], rax
call fcn.180027fc0
cmp al, 2
jne 0x180012f2a
mov rcx, qword [rbp + 0x20e0]
lea rdx, [rbp + 0xa0]
mov r8d, 0x2000
call r13
mov r12d, eax
mov r10, qword [rbp + 0x20f8]
add r14d, 0x4c50
cmp r14d, 0x98a0
jbe 0x180012e26
jmp 0x180012e20
mov eax, esi
sub eax, 0x382
je 0x180012f2e
sub eax, 0x5c
je 0x180012f24
cmp eax, 0x5c
je case.0x180012d57.151
jmp case.0x180012d57.153
mov rbx, qword [r15 + 0x10]
jmp case.0x180012d57.153
mov edi, dword [rsp + 0x38]
mov esi, 0x382
mov r10, qword [rbp + 0x20f8]
lea r11, [0x180000000]
mov rdx, qword [rsp + 0x40]
add esi, 0x5c
mov r8, qword [rsp + 0x30]
movabs r9, 0x2e003200330079
cmp esi, edi
jb 0x180012d20
jmp case.0x180012d57.151