Function at 0x140004be0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0xa8
mov rax, qword [0x140025008]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x5c], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x80], 0
cmp dword [rsp + 0xc0], 0xd
jbe 0x140004c79
xor eax, eax
jmp 0x1400051c8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x140004ca0
jmp 0x140005117
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x48]
lea r8, [0x140004af0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
jne 0x140004ce2
jmp 0x140005119
xor eax, eax
cmp eax, 1
je 0x140004d23
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, dword [rsp + 0x80]
mov ecx, eax
call fcn.140004a00
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0xffffffff
jne 0x140004d12
jmp 0x14000511b
cmp dword [rsp + 0x58], 5
jne 0x140004d1b
jmp 0x140004d23
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
jmp 0x140004ce2
mov rcx, qword [rsp + 0x40]
call fcn.140004b20
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x140004d44
jmp 0x14000511d
mov rax, qword [rsp + 0x60]
add rax, 0x28
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.140004070
test eax, eax
jne 0x140004d68
jmp 0x14000511f
mov rax, qword [rsp + 0x60]
add rax, 0x30
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.140004070
test eax, eax
jne 0x140004d8c
jmp 0x140005121
mov rax, qword [rsp + 0x68]
sub rax, 8
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x70]
cmp qword [rsp + 0x50], rax
jbe 0x140004e1f
mov qword [rsp + 0x88], 0
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x50]
call fcn.140004070
test eax, eax
jne 0x140004dd2
jmp 0x140005123
mov rax, qword [0x14002f9b0]
cmp qword [rsp + 0x88], rax
jbe 0x140004e0c
mov eax, dword [0x14002f988]
mov rcx, qword [0x14002f9b0]
add rcx, rax
mov rax, rcx
cmp qword [rsp + 0x88], rax
jae 0x140004e0c
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
jmp 0x140004e1f
mov rax, qword [rsp + 0x50]
sub rax, 8
mov qword [rsp + 0x50], rax
jmp 0x140004d9a
cmp qword [rsp + 0x30], 0
jne 0x140004e31
jmp 0x140005125
mov rdx, qword [0x14002f9d0]
mov rcx, qword [rsp + 0x30]
call fcn.1400040b0
test eax, eax
jne 0x140004e50
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0x28
mov rdx, qword [rsp + 0xb0]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x140004e77
jmp 0x140005125
cmp dword [rsp + 0xc0], 0
jbe 0x140004eb2
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x30]
add rcx, 0x30
mov rdx, qword [rsp + 0xb8]
mov rdx, qword [rdx + rax]
call fcn.1400040b0
test eax, eax
jne 0x140004eb2
jmp 0x140005125
cmp dword [rsp + 0xc0], 1
jbe 0x140004eed
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x30]
add rcx, 0x38
mov rdx, qword [rsp + 0xb8]
mov rdx, qword [rdx + rax]
call fcn.1400040b0
test eax, eax
jne 0x140004eed
jmp 0x140005125
cmp dword [rsp + 0xc0], 2
jbe 0x140004f28
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x30]
add rcx, 0x40
mov rdx, qword [rsp + 0xb8]
mov rdx, qword [rdx + rax]
call fcn.1400040b0
test eax, eax
jne 0x140004f28
jmp 0x140005125
cmp dword [rsp + 0xc0], 3
jbe 0x140004f63
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x30]
add rcx, 0x48
mov rdx, qword [rsp + 0xb8]
mov rdx, qword [rdx + rax]
call fcn.1400040b0
test eax, eax
jne 0x140004f63
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0x50
mov rdx, qword [0x14002f958]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x140004f89
jmp 0x140005125
mov dword [rsp + 0x38], 4
jmp 0x140004f9d
mov eax, dword [rsp + 0x38]
inc eax
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0xc0]
cmp dword [rsp + 0x38], eax
jae 0x140004fed
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
sub ecx, 4
mov ecx, ecx
lea rcx, [rcx*8 + 0x78]
mov ecx, ecx
mov rdx, qword [rsp + 0x30]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0xb8]
mov rdx, qword [rdx + rax*8]
call fcn.1400040b0
test eax, eax
jne 0x140004feb
jmp 0x140005125
jmp 0x140004f93
mov rax, qword [rsp + 0x30]
add rax, 0xc0
mov rdx, qword [0x14002f998]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x140005015
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0xc8
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x14000503b
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0xd0
mov rdx, qword [0x14002f9c8]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x140005063
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0xd8
mov rdx, qword [0x14002f9b8]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x14000508b
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0xe0
mov rdx, qword [0x14002f9d0]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x1400050ad
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0x108
mov rdx, qword [0x14002f970]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x1400050cf
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0x110
mov rdx, qword [rsp + 0x40]
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x1400050ef
jmp 0x140005125
mov rax, qword [rsp + 0x30]
add rax, 0x118
mov edx, 0x1337
mov rcx, rax
call fcn.1400040b0
test eax, eax
jne 0x14000510f
jmp 0x140005125
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
jmp 0x140005125
jmp 0x140005125
jmp 0x140005125
jmp 0x140005125
jmp 0x140005125
jmp 0x140005125
jmp 0x140005125
jmp 0x140005125
cmp qword [rsp + 0x48], 0
je 0x14000519e
cmp qword [rsp + 0x40], 0
je 0x14000519e
mov dword [rsp + 0x84], 0
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rsp + 0x84]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rsp + 0x84], 0x1337
jne 0x14000519e
cmp qword [rsp + 0xc8], 0
je 0x140005196
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x78]
mov qword [rax], rcx
mov dword [rsp + 0x5c], 1
cmp qword [rsp + 0x48], 0
je 0x1400051b1
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x40], 0
je 0x1400051c4
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x5c]
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140006fe0
add rsp, 0xa8
ret