Function at 0x140022d3d
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
jmp 0x140022d49
push rbp
clc
test si, 0x6024
push rsi
sbb sil, 0x6d
bt rsi, 0xb
push rdi
inc dil
mov rsi, 0x52161a1c
sub rsp, 0x40
sub ebp, ebp
movsx si, dil
sub dil, 0x9d
mov rdi, rcx
or si, r14w
bsf rsi, rsi
mov esi, 0xc0000001
test rcx, rcx
jmp 0x140022d8c
je 0x1400230e1
call fcn.14002380a
mov rbx, rax
jmp 0x140022d9f
test rax, rax
jmp 0x140022da7
je 0x1400230e1
mov ecx, dword [rax + 0x50]
call fcn.140023318
mov rcx, rax
shr ax, 0x2e
mov rax, qword [0x14001fe10]
cmp r14w, si
test bpl, bl
mov qword [rax + 0x30], rcx
shl al, 0x25
mov rax, qword [0x14001fe10]
not rcx
mov rcx, qword [rax + 0x30]
test rcx, rcx
jmp 0x140022de7
je 0x1400230e1
mov r8d, dword [rbx + 0x50]
test r8, r8
jmp 0x140022df9
je 0x140022e0b
xor edx, edx
jmp 0x140022e06
call fcn.140024e7f
mov rax, qword [0x14001fe10]
mov edx, dword [rbx + 0x54]
movzx cx, sil
movsxd rcx, edx
mov rcx, qword [rax + 0x30]
clc
stc
test rdx, rdx
je 0x140022e51
mov r8, rdi
sub r8, rcx
not al
mov al, byte [r8 + rcx]
jmp 0x140022e3d
mov byte [rcx], al
jmp 0x140022e44
inc rcx
sub rdx, 1
jne 0x140022e34
movsxd r9, dword [rdi + 0x3c]
mov r8, rdx
cmp ebx, 0x6c115d36
shl r8w, cl
mov r8d, ebp
cmc
test bp, si
jmp 0x140022e6e
lea r9, [r9 + rdi]
jmp 0x140022e7a
cmp bp, word [rbx + 6]
jmp 0x140022e83
jae 0x140022f2e
mov eax, r8d
lea rcx, [rax + rax*4]
sar r11, 0x28
bts rax, rdx
adc r10b, al
mov rax, qword [0x14001fe10]
mov r10d, dword [r9 + rcx*8 + 0x11c]
bswap r11d
xchg dh, dl
mov edx, dword [r9 + rcx*8 + 0x114]
add r11b, r12b
clc
shrd r11w, r13w, 0xc5
add r10, rdi
mov r11w, r9w
rcr r11, cl
mov r11d, dword [r9 + rcx*8 + 0x118]
cmc
test edx, 0x777a29da
add rdx, qword [rax + 0x30]
test r11, r11
jmp 0x140022ee6
je 0x140022f10
sub r10, rdx
xchg al, al
not al
mov al, byte [r10 + rdx]
jmp 0x140022efc
mov byte [rdx], al
jmp 0x140022f03
inc rdx
sub r11, 1
jne 0x140022ef3
movzx eax, word [rbx + 6]
jmp 0x140022f19
inc r8d
test r9b, 0x51
cmp r8d, eax
jmp 0x140022f28
jb 0x140022e89
mov rcx, qword [0x14001fe10]
jmp 0x140022f3a
mov rcx, qword [rcx + 0x30]
jmp 0x140022f43
call fcn.140022b9a
test eax, eax
jmp 0x140022f4f
js 0x1400230e1
mov rcx, qword [0x14001fe10]
jmp 0x140022f61
mov rcx, qword [rcx + 0x30]
call fcn.140023108
test eax, eax
js 0x1400230e1
mov r8d, 8
movzx edx, r8w
lea rdx, [0x14001fe10]
lea rcx, [0x140002b70]
jmp 0x140022f8f
call fcn.140001ea0
mov esi, eax
stc
test eax, eax
jmp 0x140022f9e
js 0x1400230e1
mov ecx, dword [rbx + 0x28]
or r9, 0xffffffffffffffff
cwde
btr bx, 0x3c
test rdx, r8
mov rax, qword [0x14001fe10]
btc ebx, r14d
mov ebx, 0x1fffff
and edx, r9d
movsxd rdx, r12d
mov qword [rsp + 0x68], rbp
bswap rdx
shld rdx, rbp, 0x16
rcl rdx, 0x23
sub r8d, r8d
mov qword [rsp + 0x30], rbp
mov edx, ebx
add rcx, qword [rax + 0x30]
jmp 0x140022fee
mov qword [rsp + 0x28], rcx
seta ch
movsxd rcx, edi
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rbp
jmp 0x140023008
call qword [sym.imp.ntoskrnl.exe_PsCreateSystemThread]
mov esi, eax
test cl, bh
cmp ax, r8w
test eax, eax
jmp 0x14002301d
js 0x1400230e1
mov rcx, qword [rsp + 0x68]
test r11w, 0x35d3
shr ax, cl
movsxd rdx, edi
lea rax, [rsp + 0x60]
xchg dl, dl
mov edx, eax
cmp r11b, 0x74
mov qword [rsp + 0x28], rbp
shld dx, r11w, 0x5b
clc
cmc
xor r9d, r9d
not dl
sub r8d, r8d
xchg dl, dl
mov qword [rsp + 0x20], rax
mov edx, ebx
jmp 0x140023064
mov qword [rsp + 0x60], rbp
jmp 0x14002306e
call qword [sym.imp.ntoskrnl.exe_ObReferenceObjectByHandle]
test eax, eax
js 0x1400230c5
mov rcx, qword [rsp + 0x60]
cmp cl, spl
test rcx, 0x40854cc
test bp, bp
sub r9d, r9d
test r12b, bpl
sub r8d, r8d
stc
test dil, 0xfc
cmp r9, 0x736705b1
mov qword [rsp + 0x20], rbp
xor edx, edx
jmp 0x1400230af
call qword [sym.imp.ntoskrnl.exe_KeWaitForSingleObject]
mov rcx, qword [rsp + 0x60]
jmp 0x1400230bf
call qword [sym.imp.ntoskrnl.exe_ObfDereferenceObject]
mov rcx, qword [rsp + 0x68]
cmp cx, sp
cmp rax, 0x6fc95ce1
xor edx, edx
jmp 0x1400230db
call qword [sym.imp.ntoskrnl.exe_ObCloseHandle]
mov rbx, qword [rsp + 0x70]
movzx ebp, r8w
mov eax, esi
add rsp, 0x40
movsx rdi, si
pop rdi
pop rsi
seta bpl
movsx ebp, bp
movzx rbp, bx
pop rbp
jmp 0x140023107
ret