Function at 0x14000721c
Capabilities:
Hide thread from debugger

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x1c8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x12c], 0x11
mov byte [rbp + 0x13f], 0
mov dword [rbp + 0xdc], 0
lea rax, [0x140042e2a]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rax
mov qword [rbp + 0x120], rax
cmp qword [rbp + 0x120], 0
jne 0x140007280
mov eax, 0
jmp 0x140007616
mov rax, qword [rbp + 0x120]
lea rdx, str.NtSetInformationThread
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x118], rax
mov rax, qword [rbp + 0x120]
lea rdx, str.NtQueryInformationThread
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x110], rax
cmp qword [rbp + 0x110], 0
je 0x140007336
lea rax, [rbp - 0x50]
mov r8d, 0x11c
mov edx, 0
mov rcx, rax
call sym.memset
mov dword [rbp - 0x50], 0x11c
mov dword [rbp - 0x4c], 6
mov r8d, 3
mov edx, 2
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
call rax
mov qword [rbp + 0x108], rax
mov rdx, qword [rbp + 0x108]
lea rax, [rbp - 0x50]
mov r8, rdx
mov edx, 2
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
call rax
mov byte [rbp + 0x13f], al
mov ebx, dword [rbp + 0x12c]
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call rax
mov rcx, rax
lea rdx, [rbp + 0xdc]
mov rax, qword [rbp + 0x118]
mov r9d, 0x3039
mov r8, rdx
mov edx, ebx
call rax
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0
jne 0x14000737c
mov eax, 1
jmp 0x140007616
mov eax, dword [rbp + 0x12c]
mov r10, qword [rbp + 0x118]
mov r9d, 0
mov r8d, 0
mov edx, eax
mov ecx, 0xffff
call r10
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0
jne 0x1400073b8
mov eax, 1
jmp 0x140007616
mov ebx, dword [rbp + 0x12c]
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call rax
mov rcx, rax
mov rax, qword [rbp + 0x118]
mov r9d, 0
mov r8d, 0
mov edx, ebx
call rax
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0
jne 0x14000760a
cmp byte [rbp + 0x13f], 0
je 0x140007611
mov ebx, dword [rbp + 0x12c]
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call rax
mov rcx, rax
lea rdx, [rbp + 0xdc]
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x110]
mov r9d, 4
mov r8, rdx
mov edx, ebx
call rax
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0xc0000004
jne 0x140007453
mov eax, 1
jmp 0x140007616
cmp dword [rbp + 0x104], 0
jne 0x140007611
mov rax, rsp
mov rdi, rax
mov dword [rbp + 0xd8], 0
mov ebx, dword [rbp + 0x12c]
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call rax
mov rcx, rax
lea rdx, [rbp + 0xd8]
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x110]
mov r9d, 4
mov r8, rdx
mov edx, ebx
call rax
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0xc0000004
je 0x1400074c2
mov eax, 1
jmp 0x140007605
mov qword [rbp + 0xf8], 8
mov rax, qword [rbp + 0xf8]
sub rax, 1
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0xf8]
mov r14, rax
mov r15d, 0
mov rax, qword [rbp + 0xf8]
mov r12, rax
mov r13d, 0
mov rax, qword [rbp + 0xf8]
shl rax, 2
add rax, 0xf
shr rax, 4
shl rax, 4
call fcn.140011910
sub rsp, rax
lea rax, [rsp + 0x30]
add rax, 3
shr rax, 2
shl rax, 2
mov qword [rbp + 0xe8], rax
mov dword [rbp + 0x138], 0
mov qword [rbp + 0xe0], 2
mov qword [rbp + 0x130], 0
jmp 0x1400075c2
mov rax, qword [rbp + 0x130]
lea rdx, [rax*4]
mov rax, qword [rbp + 0xe8]
lea rsi, [rdx + rax]
mov ebx, dword [rbp + 0x12c]
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call rax
mov rcx, rax
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x110]
mov r9d, 4
mov r8, rsi
mov edx, ebx
call rax
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0x80000002
jne 0x1400075ba
add dword [rbp + 0x138], 1
add qword [rbp + 0x130], 1
mov rax, qword [rbp + 0x130]
cmp rax, qword [rbp + 0xf8]
jb 0x140007558
mov rax, qword [rbp + 0xf8]
sub rax, qword [rbp + 0xe0]
mov rdx, rax
mov eax, dword [rbp + 0x138]
cdqe
cmp rdx, rax
jbe 0x1400075f7
mov eax, 1
jmp 0x140007605
mov eax, dword [rbp + 0xdc]
test eax, eax
sete al
movzx eax, al
mov rsp, rdi
jmp 0x140007616
mov eax, 1
jmp 0x140007616
mov eax, 0
lea rsp, [rbp + 0x148]
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret