Function at 0x1401c59fd
Capabilities:
Create thread

Disassembly:
push rax
pushf
mov eax, 0x1a9154dc
pushf
not eax
add eax, 0xe5bcaff5
xor eax, 0x989b7bae
rol eax, 0x11
popf
pushf
not eax
add eax, 0x90758443
xor eax, 0xdd19047d
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x8512ec1e
xor eax, 0x8bf1ce94
rol eax, 0x3c
popf
cmp eax, 4
jne 0x1401c5a4d
popf
pop rax
jmp 0x1401c5d67
cmp eax, 0
jne 0x1401c5a5c
popf
pop rax
jmp 0x1401c5b10
cmp eax, 3
jne 0x1401c5a6b
popf
pop rax
jmp 0x1401c5c78
cmp eax, 1
jne 0x1401c5a7a
popf
pop rax
jmp 0x1401c5ba2
cmp eax, 0xd
jne 0x1401c5a89
popf
pop rax
jmp 0x1401c610a
cmp eax, 7
jne 0x1401c5a98
popf
pop rax
jmp 0x1401c5ef6
cmp eax, 6
jne 0x1401c5aa7
popf
pop rax
jmp 0x1401c5e73
cmp eax, 0xb
jne 0x1401c5ab6
popf
pop rax
jmp 0x1401c601b
cmp eax, 0xc
jne 0x1401c5ac5
popf
pop rax
jmp 0x1401c6074
cmp eax, 8
jne 0x1401c5ad4
popf
pop rax
jmp 0x1401c5f2f
cmp eax, 5
jne 0x1401c5ae3
popf
pop rax
jmp 0x1401c5dba
cmp eax, 2
jne 0x1401c5af2
popf
pop rax
jmp 0x1401c5bec
cmp eax, 9
jne 0x1401c5b01
popf
pop rax
jmp 0x1401c5fc5
cmp eax, 0xa
jne 0x1401c5b10
popf
pop rax
jmp 0x1401c6011
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov edi, edx
mov rsi, rcx
test r8, r8
jne 0x1401c5b6f
push rax
pushf
mov eax, 0xfb254765
pushf
not eax
add eax, 0xbdcb2a12
xor eax, 0x9d86dec9
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xe9e3ba5f
xor eax, 0xb0301587
rol eax, 0x43
popf
pushf
not eax
add eax, 0xdece0eda
xor eax, 0xcb952ef0
rol eax, 0x21
popf
jmp 0x1401c5a3e
push rax
pushf
mov eax, 0xb87b051d
pushf
not eax
add eax, 0xfefe6531
xor eax, 0xd2d62fdf
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xf1479534
xor eax, 0x9ff25621
rol eax, 0xdc
popf
jmp 0x1401c5a3e
call fcn.1401fa658
mov dword [rax], socket
call fcn.140273f4c
xor eax, eax
jmp 0x1401c601e
mov rdx, r9
mov rcx, r8
call fcn.14016e5e9
mov rbx, rax
test rax, rax
je 0x1401c5c45
push rax
pushf
mov eax, 0xb47dc050
pushf
not eax
add eax, 0xf7ae77da
xor eax, 0xce13f4aa
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xaf0b6244
xor eax, 0xfb35ff99
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xb3df379b
xor eax, 0xdaae412f
rol eax, 0x37
popf
jmp 0x1401c5a3e
push rax
pushf
mov eax, 0x9fcdec44
pushf
not eax
add eax, 0xfb3b9e17
xor eax, 0xa2f04fef
rol eax, 0x40
popf
pushf
not eax
add eax, 0xa583a63e
xor eax, 0xaaa5a800
rol eax, 0xaa
popf
jmp 0x1401c5a3e
lea rax, [rsp + 0x50]
mov rdx, rdi
mov qword [rsp + 0x28], rax
lea r8, [0x1b74bf1c2]
pushf
sub r8, 0x7746eeba
popf
mov eax, dword [rsp + 0x60]
mov r9, rbx
mov rcx, rsi
mov dword [rsp + 0x20], eax
jmp 0x1401c5ca6
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
test rax, rax
jne 0x1401c5d0d
push rax
pushf
mov eax, 0x69425a07
pushf
not eax
add eax, 0xd2334de1
xor eax, 0xee0b5345
rol eax, 0x26
popf
pushf
not eax
add eax, 0x93ff66cb
xor eax, 0xfdb52037
rol eax, 0x45
popf
pushf
not eax
add eax, 0xed09e798
xor eax, 0x95538663
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x85f7cd1d
xor eax, 0xc0d17346
rol eax, 0x2e
popf
jmp 0x1401c5a3e
push rax
pushf
mov eax, 0xdc408471
pushf
not eax
add eax, 0xb49268b0
xor eax, 0xd01292e0
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe4fac31a
xor eax, 0xba93418d
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x8ce6171f
xor eax, 0xeb085dec
rol eax, 0x32
popf
pushf
not eax
add eax, 0xac033d55
xor eax, 0xc7e5022f
rol eax, 0xd0
popf
jmp 0x1401c5a3e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140202b87
push rax
pushf
mov eax, 0x24ce4ee8
pushf
not eax
add eax, 0x8dad7c53
xor eax, 0x9d309efd
rol eax, 0x43
popf
pushf
not eax
add eax, 0xe186b819
xor eax, 0xf29e972e
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x89d7c45c
xor eax, 0xfb9fb16a
rol eax, 0xa
popf
jmp 0x1401c5a3e
xor ecx, ecx
test rbx, rbx
je 0x1401c5e1a
push rax
pushf
mov eax, 0xee47d48d
pushf
not eax
add eax, 0xda348b53
xor eax, 0xf9bd045e
rol eax, 0xea
popf
pushf
not eax
add eax, 0xcacd4b8c
xor eax, 0x866d093a
rol eax, 0x20
popf
pushf
not eax
add eax, 0x8bcb505f
xor eax, 0x8851ed54
rol eax, 0x42
popf
pushf
not eax
add eax, 0x8e4641e3
xor eax, 0x8a1bee9a
rol eax, 0xba
popf
jmp 0x1401c5a3e
push rax
pushf
mov eax, 0xff21386d
pushf
not eax
add eax, 0x85fde6a0
xor eax, 0x970a2c4b
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xde2bb26b
xor eax, 0xa26e6cbc
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xfdd0b325
xor eax, 0xecf41b2e
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb608fb9a
xor eax, 0xa7446054
rol eax, 0xdf
popf
jmp 0x1401c5a3e
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1401c5eaf
push rax
pushf
mov eax, 0xa31c6496
pushf
not eax
add eax, 0xf58dcc4f
xor eax, 0xb0f037e4
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xe68537da
xor eax, 0xce7ab4f2
rol eax, 6
popf
jmp 0x1401c5a3e
push rax
pushf
mov eax, 0x3c01c05b
pushf
not eax
add eax, 0xb9ae4233
xor eax, 0xfa786c08
rol eax, 0xab
popf
pushf
not eax
add eax, 0x9780062f
xor eax, 0x90e27842
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x808db586
xor eax, 0xc6b4850c
rol eax, 0x6b
popf
jmp 0x1401c5a3e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0xcd4778ba
pushf
not eax
add eax, 0xc32f92aa
xor eax, 0xbdbb0a4a
rol eax, 0x49
popf
pushf
not eax
add eax, 0x982eca0b
xor eax, 0xf2077f5a
rol eax, 0x1e
popf
jmp 0x1401c5a3e
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1401c5f91
push rax
pushf
mov eax, 0x359621f7
pushf
not eax
add eax, 0xb1875377
xor eax, 0xae280dff
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x8109a2a8
xor eax, 0x8f280ff7
rol eax, 0x65
popf
pushf
not eax
add eax, 0x8043c4a3
xor eax, 0x81f15f11
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xcd742613
xor eax, 0xb412fcdb
rol eax, 0x13
popf
jmp 0x1401c5a3e
push rax
pushf
mov eax, 0x75a17e0
pushf
not eax
add eax, 0x8da8e198
xor eax, 0xeacbfa59
rol eax, 0x74
popf
pushf
not eax
add eax, 0xdcb084b4
xor eax, 0x9dc9bc48
rol eax, 0xde
popf
jmp 0x1401c5a3e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
push rax
pushf
mov eax, 0xcdb9c4f
pushf
not eax
add eax, 0xe4e0cc7c
xor eax, 0xae5b272d
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xda4a1cae
xor eax, 0xc65b7ceb
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x8c9972a6
xor eax, 0xda6d99eb
rol eax, 0x24
popf
jmp 0x1401c5a3e
mov rcx, rbx
call fcn.14034ab66
xor ecx, ecx
mov rax, rcx
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x1401c60d7
push rax
pushf
mov eax, 0x3401a95c
pushf
not eax
add eax, 0xe912b642
xor eax, 0xd6fdc5e6
rol eax, 0x54
popf
pushf
not eax
add eax, 0x85890286
xor eax, 0xa7f91bc0
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xc4b927c9
xor eax, 0x92e53013
rol eax, 0x15
popf
pushf
not eax
add eax, 0xb84052a4
xor eax, 0xfa233508
rol eax, 0x80
popf
jmp 0x1401c5a3e
push rax
pushf
mov eax, 0x10327fd
pushf
not eax
add eax, 0xdfc561c8
xor eax, 0xb51c4ebf
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x8033d14a
xor eax, 0xc576e20e
rol eax, 0x10
popf
jmp 0x1401c5a3e
mov eax, dword [rsp + 0x50]
mov dword [rdx], eax
jmp 0x1401c601b