Function at 0x14008b299
Capabilities:
Create thread

Disassembly:
push rax
pushf
mov eax, 0x297ea94e
pushf
not eax
add eax, 0xc5e8157a
xor eax, 0xe1f35da7
rol eax, 0x58
popf
pushf
not eax
add eax, 0x8e8d9b67
xor eax, 0xaa00daeb
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xb78f3a29
xor eax, 0x80979024
rol eax, 0xf2
popf
cmp eax, 4
jne 0x14008b2e9
popf
pop rax
jmp 0x14008b74b
cmp eax, 0
jne 0x14008b2f8
popf
pop rax
jmp 0x14008b4ab
cmp eax, 3
jne 0x14008b307
popf
pop rax
jmp 0x14008b700
cmp eax, 1
jne 0x14008b316
popf
pop rax
jmp 0x14008b5c0
cmp eax, 0xd
jne 0x14008b325
popf
pop rax
jmp 0x14008bce5
cmp eax, 0x1a
jne 0x14008b334
popf
pop rax
jmp 0x14008c4a7
cmp eax, 0xe
jne 0x14008b343
popf
pop rax
jmp 0x14008bd79
cmp eax, 0xb
jne 0x14008b352
popf
pop rax
jmp 0x14008bb85
cmp eax, 0x19
jne 0x14008b361
popf
pop rax
jmp 0x14008c416
cmp eax, 8
jne 0x14008b370
popf
pop rax
jmp 0x14008b978
cmp eax, 0x1d
jne 0x14008b37f
popf
pop rax
jmp 0x14008c613
cmp eax, 0x17
jne 0x14008b38e
popf
pop rax
jmp 0x14008c2e1
cmp eax, 0x1c
jne 0x14008b39d
popf
pop rax
jmp 0x14008c5c0
cmp eax, 0x12
jne 0x14008b3ac
popf
pop rax
jmp 0x14008c026
cmp eax, 0x18
jne 0x14008b3bb
popf
pop rax
jmp 0x14008c373
cmp eax, 0x11
jne 0x14008b3ca
popf
pop rax
jmp 0x14008bfa3
cmp eax, 0x1b
jne 0x14008b3d9
popf
pop rax
jmp 0x14008c543
cmp eax, 0x16
jne 0x14008b3e8
popf
pop rax
jmp 0x14008c217
cmp eax, 0xa
jne 0x14008b3f7
popf
pop rax
jmp 0x14008bb27
cmp eax, 0x14
jne 0x14008b406
popf
pop rax
jmp 0x14008c15e
cmp eax, 0xf
jne 0x14008b415
popf
pop rax
jmp 0x14008be45
cmp eax, 0x13
jne 0x14008b424
popf
pop rax
jmp 0x14008c05f
cmp eax, 0x15
jne 0x14008b433
popf
pop rax
jmp 0x14008c1b9
cmp eax, 2
jne 0x14008b442
popf
pop rax
jmp 0x14008b6a2
cmp eax, 0x1e
jne 0x14008b451
popf
pop rax
jmp 0x14008c679
cmp eax, 0xc
jne 0x14008b460
popf
pop rax
jmp 0x14008bc3c
cmp eax, 7
jne 0x14008b46f
popf
pop rax
jmp 0x14008b8a0
cmp eax, 5
jne 0x14008b47e
popf
pop rax
jmp 0x14008b7ef
cmp eax, 9
jne 0x14008b48d
popf
pop rax
jmp 0x14008bab6
cmp eax, 0x10
jne 0x14008b49c
popf
pop rax
jmp 0x14008bf53
cmp eax, 6
jne 0x14008b4ab
popf
pop rax
jmp 0x14008b898
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140034010]
xor rax, rsp
mov qword [rbp - 8], rax
xor r9d, r9d
mov rsi, rdx
mov r14, rcx
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
jmp 0x14008b4e3
call qword [sym.imp.KERNEL32.dll_CreateEventW]
xor r12d, r12d
mov qword [rsi + 8], rax
lea r15, [0x18c9eb355]
pushf
sub r15, 0x4c99dd45
popf
mov rdi, rax
lea r13, [0x1ae0a48f1]
pushf
sub r13, 0x6e07f301
popf
test rax, rax
jne 0x14008b579
push rax
pushf
mov eax, 0x6d0c5be5
pushf
not eax
add eax, 0xcf7acf19
xor eax, 0x89e5f263
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xd3ab1c21
xor eax, 0x8683629c
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xa317eb9f
xor eax, 0xac504d1b
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xe92718ec
xor eax, 0xc97be874
rol eax, 0x47
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x941666f3
pushf
not eax
add eax, 0xce976c63
xor eax, 0x9176434d
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xd2f6a169
xor eax, 0xc85be21d
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xbec5688e
xor eax, 0xe9c9a759
rol eax, 0xb4
popf
jmp 0x14008b2da
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
lea edx, [rdi + 1]
mov rcx, rsi
mov ebx, eax
call qword [r8]
mov rdx, qword [0x14004d618]
movabs rax, 0x609aa8bf2ea7aac4
pushf
not rax
add rax, 0x40fcdcc5
xor rax, 0x49d07fbf
rol rax, 0xb5
popf
pushf
not rax
add rax, 0x61c4068f
xor rax, 0x4239e345
rol rax, 0xd2
popf
push rax
not rax
sub rdx, rax
pop rax
sub rdx, 1
mov dword [rbp - 0x24], r12d
cmp rdx, 1
jbe 0x14008b65c
push rax
pushf
mov eax, 0xb6c09b9a
pushf
not eax
add eax, 0x8ca97755
xor eax, 0xda3a5766
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xdf7afb28
xor eax, 0xc5c2db86
rol eax, 0x7f
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x42682fad
pushf
not eax
add eax, 0xcf760bce
xor eax, 0xdc208a1d
rol eax, 0x50
popf
pushf
not eax
add eax, 0x87986eb3
xor eax, 0x9ffc75b2
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xb3a111d7
xor eax, 0xbdcc3cd0
rol eax, 0x35
popf
jmp 0x14008b2da
mov rcx, qword [0x14004d610]
mov edx, ebx
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x14008b74b
test ebx, ebx
setne al
push rax
pushf
mov eax, 0x74d2a384
pushf
not eax
add eax, 0xc3133b39
xor eax, 0x8ebca4a8
rol eax, 0x31
popf
pushf
not eax
add eax, 0xb1386161
xor eax, 0xb543fc84
rol eax, 0x59
popf
pushf
not eax
add eax, 0xaa01604b
xor eax, 0xd001e602
rol eax, 0xe2
popf
jmp 0x14008b2da
movzx eax, al
lea rcx, [0x196bcc958]
pushf
sub rcx, 0x56ba72a0
popf
add rax, 2
mov dword [rbp - 0x28], ebx
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], rcx
mov dword [rbp - 0x30], 0x30
mov dword [rbp - 0x2c], 5
test al, 1
je 0x14008b7bc
push rax
pushf
mov eax, 0x9c956a97
pushf
not eax
add eax, 0xbe93da83
xor eax, 0xa0f33bef
rol eax, 0x22
popf
pushf
not eax
add eax, 0xf4e99dfe
xor eax, 0xf0be4deb
rol eax, 0x4f
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0xb3ab087e
pushf
not eax
add eax, 0xf878b877
xor eax, 0xb78c2238
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa0ac1ab8
xor eax, 0xd9cb9917
rol eax, 0xb5
popf
jmp 0x14008b2da
cmp rax, 1
jne 0x14008b852
push rax
pushf
mov eax, 0xf17d08b9
pushf
not eax
add eax, 0x92eb1bc3
xor eax, 0xc2f514d2
rol eax, 0x43
popf
pushf
not eax
add eax, 0x91779411
xor eax, 0xbcaded94
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x9e9e2677
xor eax, 0xaad71a4f
rol eax, 0x12
popf
pushf
not eax
add eax, 0xed903808
xor eax, 0xe3a6afcf
rol eax, 0x11
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x2dc5d6af
pushf
not eax
add eax, 0xa9d7225f
xor eax, 0x940c767d
rol eax, 0x23
popf
pushf
not eax
add eax, 0xcb58339c
xor eax, 0xa959bc80
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa2473274
xor eax, 0xad6629a6
rol eax, 0x69
popf
jmp 0x14008b2da
test ebx, ebx
jne 0x14008c613
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
jmp 0x14008b8ad
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [r14 + 0x10], rax
mov qword [rsi + 0x10], rax
cmp qword [r14 + 0x10], r12
jne 0x14008b91e
push rax
pushf
mov eax, 0x7183bd1d
pushf
not eax
add eax, 0x92da0577
xor eax, 0xdb4d010b
rol eax, 0x43
popf
pushf
not eax
add eax, 0xca7676dc
xor eax, 0xc62b06c9
rol eax, 0x16
popf
pushf
not eax
add eax, 0xc4e44736
xor eax, 0xa69ffdff
rol eax, 0x36
popf
pushf
not eax
add eax, 0xa5ccf3ef
xor eax, 0x80ab3145
rol eax, 0xdd
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x21ebcdc4
pushf
not eax
add eax, 0xf3fb0548
xor eax, 0xb1d4968f
rol eax, 0x10
popf
pushf
not eax
add eax, 0xbbbbb707
xor eax, 0xb4cfd5b0
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x808b1776
xor eax, 0x8fd05864
rol eax, 0x56
popf
pushf
not eax
add eax, 0xe7de9b84
xor eax, 0xf96a4e69
rol eax, 0x20
popf
jmp 0x14008b2da
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 0x2e24a2bc
pushf
not edx
add edx, 0xcd6095f3
xor edx, 0xf0450e63
rol edx, 0xe0
popf
pushf
not edx
add edx, 0xf9280cc3
xor edx, 0xc19c704c
rol edx, 0x15
popf
pushf
not edx
add edx, 0xdabbfbb6
xor edx, 0xf692f106
rol edx, 0x76
popf
mov rcx, rsi
mov ebx, eax
call qword [r8]
mov rdx, qword [0x14004d618]
movabs rax, 0xd4c445d1489f1af6
pushf
not rax
add rax, 0x5b0d416b
xor rax, 0x54ad92f9
rol rax, 0xc9
popf
pushf
not rax
add rax, 0x5a7c346d
xor rax, 0x6e004cfd
rol rax, 0x4d
popf
pushf
not rax
add rax, 0x560ab2b8
xor rax, 0x46dad4fe
rol rax, 0x30
popf
pushf
not rax
add rax, 0x4335a1a2
xor rax, 0x4edef228
rol rax, 0x3d
popf
push rax
not rax
sub rdx, rax
pop rax
sub rdx, 1
mov dword [rbp - 0x3c], r12d
cmp rdx, 1
jbe 0x14008ba83
push rax
pushf
mov eax, 0x731c0ad
pushf
not eax
add eax, 0xf519d0d2
xor eax, 0xfb9c8b09
rol eax, 4
popf
pushf
not eax
add eax, 0x81b850b5
xor eax, 0x8a6e9de3
rol eax, 0xc4
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0xb3259a73
pushf
not eax
add eax, 0xa5d82174
xor eax, 0xd4722c24
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xf743b854
xor eax, 0xa1ea971d
rol eax, 0xa5
popf
jmp 0x14008b2da
mov rcx, qword [0x14004d610]
mov edx, ebx
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x14008bb85
test ebx, ebx
setne al
push rax
pushf
mov eax, 0x6af0242d
pushf
not eax
add eax, 0x95d799f8
xor eax, 0x81326420
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x897c5b7e
xor eax, 0xb2b611e0
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xe94d904c
xor eax, 0xd3801766
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x8a1d1b61
xor eax, 0xb6237f71
rol eax, 0x7c
popf
jmp 0x14008b2da
movzx eax, al
lea rcx, [0x1b93cbbec]
pushf
sub rcx, 0x793a6534
popf
add rax, 2
mov dword [rbp - 0x40], ebx
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], rcx
mov dword [rbp - 0x18], 0x30
mov dword [rbp - 0x14], 5
test al, 1
je 0x14008bbf6
push rax
pushf
mov eax, 0xa7b4a77d
pushf
not eax
add eax, 0xb7a4a196
xor eax, 0xc34306e6
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xbc16d2a9
xor eax, 0xbe7d786f
rol eax, 0x3c
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x436fa39f
pushf
not eax
add eax, 0xd7b9a1bb
xor eax, 0xadc7de2c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xdc22189c
xor eax, 0xd7a3a550
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xb29ac085
xor eax, 0xda5e9613
rol eax, 0xd4
popf
jmp 0x14008b2da
cmp rax, 1
jne 0x14008bc9f
push rax
pushf
mov eax, 0x44a3f41e
pushf
not eax
add eax, 0x9e26c947
xor eax, 0xb228d0d6
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xe4697d29
xor eax, 0xd7f14035
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xd42b0f5a
xor eax, 0xd2ece1a9
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xa136ac8f
xor eax, 0xa3cbf06b
rol eax, 0x69
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0xc05f9128
pushf
not eax
add eax, 0xe62989a3
xor eax, 0xfb838971
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xea4db07a
xor eax, 0xd0b2d6c9
rol eax, 0x52
popf
pushf
not eax
add eax, 0xff95f83b
xor eax, 0xbdab4ea1
rol eax, 0x11
popf
jmp 0x14008b2da
test ebx, ebx
jne 0x14008bd33
push rax
pushf
mov eax, 0x2dad0f27
pushf
not eax
add eax, 0x908df392
xor eax, 0xfb933bce
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9b2fed8c
xor eax, 0xca1bbf78
rol eax, 0x54
popf
pushf
not eax
add eax, 0xc258fb8c
xor eax, 0xdd5cd9df
rol eax, 0x88
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x5fe7bffc
pushf
not eax
add eax, 0x8730d6dd
xor eax, 0xe17afb65
rol eax, 0x46
popf
pushf
not eax
add eax, 0xa2f532ab
xor eax, 0xdc11417a
rol eax, 0x55
popf
pushf
not eax
add eax, 0xe4d14fb1
xor eax, 0xdc57129e
rol eax, 0x71
popf
jmp 0x14008b2da
lea rax, [rbp - 0x10]
mov dword [rbp - 0x10], r12d
mov qword [rsp + 0x28], rax
lea r8, [0x19f1082e7]
pushf
sub r8, 0x5f101517
popf
mov r9, rsi
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
jmp 0x14008bda5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r14 + 8], rax
test rax, rax
jne 0x14008bdfe
push rax
pushf
mov eax, 0x2ebe05c
pushf
not eax
add eax, 0xf206456f
xor eax, 0xbd0d9c15
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xdfe8ca0e
xor eax, 0xead6df92
rol eax, 0xca
popf
pushf
not eax
add eax, 0xb8c90e8b
xor eax, 0xb951e7f3
rol eax, 0x93
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x9a97905c
pushf
not eax
add eax, 0xd8cde2da
xor eax, 0xa752d0b0
rol eax, 0x57
popf
pushf
not eax
add eax, 0xb93b918d
xor eax, 0xf67a6fe2
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x8615ed42
xor eax, 0xe754a237
rol eax, 0x49
popf
jmp 0x14008b2da
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 0xebb8ec31
pushf
not edx
add edx, 0x9c5b13fe
xor edx, 0xe1df6093
rol edx, 0xb8
popf
pushf
not edx
add edx, 0xe7d3e10c
xor edx, 0xcd677f48
rol edx, 0x2d
popf
pushf
not edx
add edx, 0x9f5696a3
xor edx, 0xa974b428
rol edx, 0xc2
popf
pushf
not edx
add edx, 0xde9c35e8
xor edx, 0x92d54eae
rol edx, 0xc8
popf
mov rcx, rsi
mov ebx, eax
call qword [r8]
test rdi, rdi
je 0x14008bf0d
push rax
pushf
mov eax, 0xed8c4737
pushf
not eax
add eax, 0xe14fd29b
xor eax, 0xbb1059db
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xd5e0aed5
xor eax, 0xb53e4b7c
rol eax, 0xde
popf
pushf
not eax
add eax, 0xc9532309
xor eax, 0xb0f0e2f1
rol eax, 0x65
popf
pushf
not eax
add eax, 0xf6a7e84a
xor eax, 0xb1eab10e
rol eax, 0x14
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x70c89709
pushf
not eax
add eax, 0x8590765d
xor eax, 0xc885fdd2
rol eax, 0x40
popf
pushf
not eax
add eax, 0x8c6907b4
xor eax, 0x914bd6a5
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x883413ad
xor eax, 0xcf2cea10
rol eax, 0x92
popf
jmp 0x14008b2da
mov rcx, rdi
jmp 0x14008bf57
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0xf505f22a
pushf
not eax
add eax, 0xfd59ee5d
xor eax, 0xe5563072
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xe00f8e30
xor eax, 0x8830b74c
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xb63f5080
xor eax, 0xccb2b2b3
rol eax, 0x56
popf
jmp 0x14008b2da
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x14008bff2
push rax
pushf
mov eax, 0xafdbf2fe
pushf
not eax
add eax, 0xfc22d477
xor eax, 0x827d1b2e
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xab87a130
xor eax, 0x961ddf9e
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xedce6888
xor eax, 0xcf7b7b0b
rol eax, 0xf2
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x115fe9cb
pushf
not eax
add eax, 0xff93f6e6
xor eax, 0xb0d5eca4
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x898b88a1
xor eax, 0x98a89930
rol eax, 0x12
popf
jmp 0x14008b2da
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x5069dc66
pushf
not eax
add eax, 0xf06f02b7
xor eax, 0x93e62652
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xbdca2343
xor eax, 0xbc0d2a82
rol eax, 0x6c
popf
jmp 0x14008b2da
movabs rcx, 0x17bbcd8ce8c9589b
pushf
not rcx
add rcx, 0x49280fcf
xor rcx, 0x5d4c085c
rol rcx, 0x25
popf
pushf
not rcx
add rcx, 0x65b36798
xor rcx, 0x59f857d8
rol rcx, 0x64
popf
mov dword [rbp - 0x3c], r12d
add rcx, qword [0x14004d618]
cmp rcx, 1
jbe 0x14008c105
push rax
pushf
mov eax, 0xab53761e
pushf
not eax
add eax, 0x823dba19
xor eax, 0xe5b23f98
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xd781a91f
xor eax, 0xc5f5733e
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xd5fd1897
xor eax, 0xad924f60
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x9b6060ad
xor eax, 0xa187d969
rol eax, 0x6c
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x7f52a15c
pushf
not eax
add eax, 0xd5baeb3a
xor eax, 0x98d1833b
rol eax, 0x99
popf
pushf
not eax
add eax, 0x9f3b9d58
xor eax, 0xca396eb8
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xc8d5f704
xor eax, 0xa5aa3e30
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xcc4394f4
xor eax, 0x97ad4ed2
rol eax, 0xbc
popf
jmp 0x14008b2da
mov rax, qword [0x14004d610]
mov edx, ebx
mov rcx, r15
jmp 0x14008c16b
call qword [rax + 0x30]
jmp 0x14008c217
test ebx, ebx
setne al
push rax
pushf
mov eax, 0xceafc0fa
pushf
not eax
add eax, 0xf024b3f2
xor eax, 0xf50abdc9
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xf87cc17c
xor eax, 0xb89ef40e
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xcc215da4
xor eax, 0xe5d128f2
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x8c38e698
xor eax, 0xed949645
rol eax, 0x4f
popf
jmp 0x14008b2da
movzx eax, al
lea rcx, [0x1b4fbbc95]
pushf
sub rcx, 0x74f965dd
popf
add rax, 2
mov dword [rbp - 0x40], ebx
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], rcx
mov dword [rbp - 0x18], 0x30
mov dword [rbp - 0x14], 5
test al, 1
je 0x14008c29b
push rax
pushf
mov eax, 0x664c8c84
pushf
not eax
add eax, 0xe8ffd5e0
xor eax, 0x874b5d37
rol eax, 0x11
popf
pushf
not eax
add eax, 0xb423f018
xor eax, 0x93d75898
rol eax, 0x72
popf
pushf
not eax
add eax, 0xe9e860ba
xor eax, 0xf79bfe47
rol eax, 0xcc
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x14b8aa56
pushf
not eax
add eax, 0x98436f7c
xor eax, 0xa641ca69
rol eax, 0x75
popf
pushf
not eax
add eax, 0xabf5395a
xor eax, 0x9fd3b50b
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x8b9bb2e1
xor eax, 0xf5b4f1d9
rol eax, 0x7a
popf
jmp 0x14008b2da
cmp rax, 1
jne 0x14008c340
push rax
pushf
mov eax, 0x81b6e9bd
pushf
not eax
add eax, 0xbcf864c7
xor eax, 0xfecab28a
rol eax, 0x85
popf
pushf
not eax
add eax, 0xecdb1791
xor eax, 0xdd0cb7ca
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb58690e1
xor eax, 0x9d418674
rol eax, 0x33
popf
pushf
not eax
add eax, 0xdde5dfc4
xor eax, 0xfd7f552d
rol eax, 0x2a
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0xa0762cfc
pushf
not eax
add eax, 0xf59adb25
xor eax, 0xab5b1ccd
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xe4eb1837
xor eax, 0xe9bf384f
rol eax, 0xb3
popf
jmp 0x14008b2da
test ebx, ebx
jne 0x14008c3d0
push rax
pushf
mov eax, 0xb189602
pushf
not eax
add eax, 0xa6740e32
xor eax, 0x8e5334d0
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xbe6ee638
xor eax, 0x83361f50
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xa4f81d94
xor eax, 0x869e5e29
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xfa907ec0
xor eax, 0xb9ecf76d
rol eax, 0xf5
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0x98e261d6
pushf
not eax
add eax, 0xa479f9a1
xor eax, 0xe49b9978
rol eax, 0x16
popf
pushf
not eax
add eax, 0x89ee4c19
xor eax, 0xda4cffbb
rol eax, 0x11
popf
pushf
not eax
add eax, 0xa0677804
xor eax, 0xbd0b6907
rol eax, 0xe9
popf
jmp 0x14008b2da
test rdi, rdi
je 0x14008c461
push rax
pushf
mov eax, 0x28948c1e
pushf
not eax
add eax, 0xb617a9b2
xor eax, 0xe13a281d
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xde6ad86d
xor eax, 0xd64fe1fe
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x835b719f
xor eax, 0xe18f97d5
rol eax, 0x5a
popf
jmp 0x14008b2da
push rax
pushf
mov eax, 0xf5fc1a8f
pushf
not eax
add eax, 0x945db5df
xor eax, 0x943cf19f
rol eax, 0x88
popf
pushf
not eax
add eax, 0xc48777d9
xor eax, 0xed369984
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xfd696575
xor eax, 0xd8fc5055
rol eax, 0x6d
popf
jmp 0x14008b2da
mov edx, 0x53fe6786
pushf
not edx
add edx, 0xdeac3e55
xor edx, 0xe199979c
rol edx, 0xa0
popf
pushf
not edx
add edx, 0x965f8b04
xor edx, 0xd4d4b64e
rol edx, 0xf7
popf
mov rcx, rdi
jmp 0x14008c4da
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rdi
jmp 0x14008c4e4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x9afdbeb5
pushf
not eax
add eax, 0x81a8705c
xor eax, 0x80457870
rol eax, 0x42
popf
pushf
not eax
add eax, 0x98ddd58f
xor eax, 0x9cd01155
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xf1cb24f6
xor eax, 0x90dbee8c
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x8a118249
xor eax, 0x8da52136
rol eax, 0xc9
popf
jmp 0x14008b2da
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400bc272
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, [rbp - 0x28]
lea rdx, [0x1868ad702]
pushf
sub rdx, 0x46887fde
popf
lea rcx, [rbp - 0x40]
call fcn.140081d78
int3
lea r8, [rbp - 0x40]
lea rdx, [0x1b04a1d84]
pushf
sub rdx, 0x7047c6bc
popf
lea rcx, [rbp - 0x28]
call fcn.140081d78
int3
lea r8, [rbp - 0x28]
lea rdx, [0x1a5c1c215]
pushf
sub rdx, 0x65bf6b05
popf
lea rcx, [rbp - 0x40]
call fcn.140081d78
int3