Function at 0x140091b90
Capabilities:
Create thread

Disassembly:
push rbp
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov qword [rbp - 8], rcx
mov eax, dword [0x14010afe0]
xor eax, dword [0x14010afe4]
and eax, 0x88f02a9b
and eax, 0xec26e056
imul eax, eax, 0xaa4b2b4d
cmp eax, 0x2c270045
jbe 0x140091faf
mov rdx, qword [rbp - 8]
mov eax, dword [0x14010afe8]
mov ecx, dword [0x14010afec]
sub eax, ecx
imul eax, eax, 0x36560a70
shr eax, 1
mov ecx, 0x8d42a3bf
imul rax, rcx
shr rax, 0x3b
imul eax, eax, 0xab02e8e9
mov dword [rbp - 0x10], eax
mov eax, 0x10
mov qword [rbp - 0x28], rax
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov rcx, rsp
mov qword [rbp - 0x30], rcx
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov rcx, rsp
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov r8, rsp
mov qword [rbp - 0x20], r8
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x20]
mov r8, rsp
mov qword [rbp - 0x18], r8
mov qword [rcx], rdx
mov rdx, qword [0x140117de0]
mov dword [rdx + 0x6c], 1
mov rdx, qword [0x140117de0]
mov edx, dword [rdx + 0x68]
add edx, 0x4000
mov r9, qword [rcx]
xor ecx, ecx
lea r8, [0x140090c50]
xor r10d, r10d
sub rsp, 0x30
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], rax
call qword [sym.imp.msvcrt.dll__beginthreadex]
mov rcx, qword [rbp - 0x18]
add rsp, 0x30
mov rdx, rax
mov eax, dword [rbp - 0x10]
mov qword [rcx], rdx
cmp qword [rcx], 0
setne cl
mov byte [rbp - 9], cl
cmp eax, 0x17c7606c
jbe 0x140091bc5
mov al, byte [rbp - 9]
test al, 1
jne 0x140091cc3
jmp 0x140091d39
mov eax, dword [0x14010aff0]
xor edx, edx
div dword [0x14010aff4]
add eax, 0xcbac8dd8
imul eax, eax, 0xed73e0f5
sub eax, 0x3843a06d
cmp eax, 0x86dabbb7
ja 0x140092057
mov eax, dword [0x14010aff8]
add eax, dword [0x14010affc]
imul eax, eax, 0x172f642c
xor eax, 0x2f60552f
mov ecx, 0x6ea6663d
xor edx, edx
div ecx
mov ecx, eax
mov rax, qword [rbp - 0x18]
mov dword [rbp - 0x34], ecx
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov eax, dword [rbp - 0x34]
cmp eax, 0xe12249f6
je 0x140092057
jmp 0x140091d39
jmp 0x140091d3e
mov eax, dword [0x14010b000]
imul eax, dword [0x14010b004]
add eax, 0xc0a0ef85
add eax, 0x42233b12
add eax, 0x6f24e0b0
cmp eax, 0xc1886e15
jae 0x140092071
mov eax, dword [0x14010b008]
or eax, dword [0x14010b00c]
mov ecx, 0xd64d62ba
xor edx, edx
div ecx
add eax, 0x953449f5
or eax, 0x130b5f76
mov rcx, qword [0x140117de0]
cmp dword [rcx + 0x6c], 0
setne cl
mov byte [rbp - 0x35], cl
cmp eax, 0xfcdc4ebc
je 0x140091d65
mov al, byte [rbp - 0x35]
test al, 1
jne 0x140091db0
jmp 0x140091dc8
mov ecx, 1
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
add rsp, 0x20
jmp 0x140091d3e
mov eax, dword [0x14010b010]
xor edx, edx
div dword [0x14010b014]
and eax, 0x9d86f582
imul eax, eax, 0x5932837f
sub eax, 0x7096e869
cmp eax, 0x587ed725
jb 0x140092076
mov eax, dword [0x14010b018]
and eax, dword [0x14010b01c]
mov ecx, 0xf38ea0bd
xor edx, edx
div ecx
imul eax, eax, 0xbfb77b55
mov ecx, 0x7b9ea94f
xor edx, edx
div ecx
cmp dword [0x140124640], 0
setne cl
mov byte [rbp - 0x36], cl
cmp eax, 0xbd763868
jae 0x140091df1
mov al, byte [rbp - 0x36]
test al, 1
jne 0x140091e3d
jmp 0x140091eeb
mov eax, dword [0x14010b020]
add eax, dword [0x14010b024]
xor eax, 0x2b6a6835
xor eax, 0x6715916f
or eax, 0xda9abfd4
cmp eax, 0x9020c147
jbe 0x14009207b
mov eax, dword [0x14010b028]
sub eax, dword [0x14010b02c]
sub eax, 0x7e0f734d
imul eax, eax, 0xa88ac96f
and eax, 0xfd1720d7
mov dword [rbp - 0x3c], eax
mov ecx, 2
sub rsp, 0x20
call qword [fcn.1400f8860]
add rsp, 0x20
mov rcx, rax
mov r8d, dword [0x140124644]
mov edx, dword [0x140124640]
lea r9, [0x14011697c]
lea rax, [0x140109c64]
cmp edx, 2
cmove r9, rax
sub rsp, 0x20
lea rdx, [0x140109c41]
call fcn.1400920f0
mov rcx, qword [rbp - 0x30]
add rsp, 0x20
mov eax, dword [rbp - 0x3c]
mov dword [rcx], 0x28
cmp eax, 0xd029a5e7
ja 0x140091e63
jmp 0x140091f49
mov eax, dword [0x14010b030]
sub eax, dword [str.9__fv]
add eax, 0xb39e111
or eax, 0x43b719a
xor eax, 0x3c50f309
cmp eax, 0x35bca30
je 0x1400920d6
mov rcx, qword [rbp - 0x30]
mov eax, dword [0x14010b038]
xor edx, edx
div dword [0x14010b03c]
xor eax, 0x4a754b30
imul eax, eax, 0x61cf3ba2
or eax, 0x357e9729
mov dword [rcx], 0
cmp eax, 0xe5160acb
jae 0x1400920d6
jmp 0x140091f49
mov eax, dword [0x14010b040]
xor edx, edx
div dword [0x14010b044]
mov ecx, 0x4807b70b
xor edx, edx
div ecx
sub eax, 0xcdf807c9
add eax, 0xb8b33b14
cmp eax, 0xe9ad97f6
jb 0x1400920e5
mov rcx, qword [rbp - 0x30]
mov eax, dword [0x14010b048]
xor edx, edx
div dword [0x14010b04c]
and eax, 0x26dcfe3b
add eax, 0x6077fd7a
imul eax, eax, 0xfb89092c
mov ecx, dword [rcx]
mov dword [rbp - 0x40], ecx
cmp eax, 0xa5bd38ce
je 0x140091f75
mov eax, dword [rbp - 0x40]
mov rsp, rbp
pop rbp
ret
mov rdx, qword [rbp - 8]
mov eax, 0x10
mov qword [rbp - 0x58], rax
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x58]
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x58]
mov rcx, rsp
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x58]
mov r8, rsp
mov qword [rbp - 0x50], r8
call fcn.1400ec140
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp - 0x48], r8
mov qword [rcx], rdx
mov rdx, qword [0x140117de0]
mov dword [rdx + 0x6c], 1
mov rdx, qword [0x140117de0]
mov edx, dword [rdx + 0x68]
add edx, 0x4000
mov r9, qword [rcx]
xor ecx, ecx
lea r8, [0x140090c50]
xor r10d, r10d
sub rsp, 0x30
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], rax
call qword [sym.imp.msvcrt.dll__beginthreadex]
add rsp, 0x30
mov rcx, rax
mov rax, qword [rbp - 0x48]
mov qword [rax], rcx
jmp 0x140091bc5
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x140091cec
jmp 0x140091d65
jmp 0x140091df1
mov ecx, 2
sub rsp, 0x20
call qword [fcn.1400f8860]
add rsp, 0x20
mov rcx, rax
mov r8d, dword [0x140124644]
mov edx, dword [0x140124640]
lea r9, [0x14011697c]
lea rax, [0x140109c64]
cmp edx, 2
cmove r9, rax
sub rsp, 0x20
lea rdx, [0x140109c41]
call fcn.1400920f0
add rsp, 0x20
mov rax, qword [rbp - 0x30]
mov dword [rax], 0x28
jmp 0x140091e63
mov rax, qword [rbp - 0x30]
mov dword [rax], 0
jmp 0x140091f11
jmp 0x140091f75