Function at 0x180002350
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
test rax, rax
jne 0x18000238b
lea r9d, [rax + 0x10]
xor ecx, ecx
lea r8, str.Failure
lea rdx, str.Failed_to_get_a_handle_for__ntdll.dll_
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.NtConvertBetweenAuxiliaryCounterAndPerformanceCounter
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180033118], rax
test rax, rax
jne 0x1800023d4
lea r9d, [rax + 0x10]
xor ecx, ecx
lea r8, str.Failure
lea rdx, str.Failed_to_find__NtConvertBetweenAuxiliaryCounterAndPerformanceCounter_
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_MessageBoxW]
mov qword [rsp + 0x30], rsi
lea rdx, str.NtOpenProcess
mov rcx, rbx
mov qword [rsp + 0x38], rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rsi, [0x180032100]
mov rdi, rax
test rax, rax
je 0x180002447
lea r8, [0x180033160]
mov rdx, rax
lea rcx, section..text
call fcn.1800032d0
test eax, eax
je 0x18000243e
mov eax, dword [0x180033100]
mov qword [rsi + rax*8], rdi
mov ecx, dword [0x180033100]
mov rax, qword [0x180033160]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002463
lea rdx, str.Failed_to_hook__NtOpenProcess_
jmp 0x18000244e
lea rdx, str.Failed_to_find__NtOpenProcess_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtSuspendProcess
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x1800024c5
lea r8, [0x1800331e0]
mov rdx, rax
lea rcx, [0x1800010b0]
call fcn.1800032d0
test eax, eax
je 0x1800024bc
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331e0]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x1800024e1
lea rdx, str.Failed_to_hook__NtSuspendProcess_
jmp 0x1800024cc
lea rdx, str.Failed_to_find__NtSuspendProcess_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtResumeProcess
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002543
lea r8, [0x180033168]
mov rdx, rax
lea rcx, [0x180001150]
call fcn.1800032d0
test eax, eax
je 0x18000253a
mov ecx, dword [0x180033100]
mov rax, qword [0x180033168]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x18000255f
lea rdx, str.Failed_to_hook__NtResumeProcess_
jmp 0x18000254a
lea rdx, str.Failed_to_find__NtResumeProcess_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtQuerySystemInformationEx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x1800025c1
lea r8, [0x180033158]
mov rdx, rax
lea rcx, [0x1800011f0]
call fcn.1800032d0
test eax, eax
je 0x1800025b8
mov ecx, dword [0x180033100]
mov rax, qword [0x180033158]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x1800025dd
lea rdx, str.Failed_to_hook__NtQuerySystemInformationEx_
jmp 0x1800025c8
lea rdx, str.Failed_to_find__NtQuerySystemInformationEx_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtQueryInformationProcess
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x18000263f
lea r8, [0x180033150]
mov rdx, rax
lea rcx, [0x1800012f0]
call fcn.1800032d0
test eax, eax
je 0x180002636
mov ecx, dword [0x180033100]
mov rax, qword [0x180033150]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x18000265b
lea rdx, str.Failed_to_hook__NtQueryInformationProcess_
jmp 0x180002646
lea rdx, str.Failed_to_find__NtQueryInformationProcess_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtSetInformationProcess
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x1800026bd
lea r8, [0x1800331b0]
mov rdx, rax
lea rcx, [0x1800013d0]
call fcn.1800032d0
test eax, eax
je 0x1800026b4
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331b0]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x1800026d9
lea rdx, str.Failed_to_hook__NtSetInformationProcess_
jmp 0x1800026c4
lea rdx, str.Failed_to_find__NtSetInformationProcess_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtFlushInstructionCache
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x18000273b
lea r8, [0x180033138]
mov rdx, rax
lea rcx, [0x180001490]
call fcn.1800032d0
test eax, eax
je 0x180002732
mov ecx, dword [0x180033100]
mov rax, qword [0x180033138]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002757
lea rdx, str.Failed_to_hook__NtFlushInstructionCache_
jmp 0x180002742
lea rdx, str.Failed_to_find__NtFlushInstructionCache_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtClose
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x1800027b9
lea r8, [0x180033190]
mov rdx, rax
lea rcx, [0x180001550]
call fcn.1800032d0
test eax, eax
je 0x1800027b0
mov ecx, dword [0x180033100]
mov rax, qword [0x180033190]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x1800027d5
lea rdx, str.Failed_to_hook__NtClose_
jmp 0x1800027c0
lea rdx, str.Failed_to_find__NtClose_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtAllocateVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002837
lea r8, [0x180033178]
mov rdx, rax
lea rcx, [0x180001570]
call fcn.1800032d0
test eax, eax
je 0x18000282e
mov ecx, dword [0x180033100]
mov rax, qword [0x180033178]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002853
lea rdx, str.Failed_to_hook__NtAllocateVirtualMemory_
jmp 0x18000283e
lea rdx, str.Failed_to_find__NtAllocateVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtFlushVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x1800028b5
lea r8, [0x1800331c8]
mov rdx, rax
lea rcx, [0x180001670]
call fcn.1800032d0
test eax, eax
je 0x1800028ac
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331c8]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x1800028d1
lea rdx, str.Failed_to_hook__NtFlushVirtualMemory_
jmp 0x1800028bc
lea rdx, str.Failed_to_find__NtFlushVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtFreeVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002933
lea r8, [0x180033120]
mov rdx, rax
lea rcx, [0x180001740]
call fcn.1800032d0
test eax, eax
je 0x18000292a
mov ecx, dword [0x180033100]
mov rax, qword [0x180033120]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x18000294f
lea rdx, str.Failed_to_hook__NtFreeVirtualMemory_
jmp 0x18000293a
lea rdx, str.Failed_to_find__NtFreeVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtLockVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x1800029b1
lea r8, [0x180033180]
mov rdx, rax
lea rcx, [0x180001810]
call fcn.1800032d0
test eax, eax
je 0x1800029a8
mov ecx, dword [0x180033100]
mov rax, qword [0x180033180]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x1800029cd
lea rdx, str.Failed_to_hook__NtLockVirtualMemory_
jmp 0x1800029b8
lea rdx, str.Failed_to_find__NtLockVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtUnlockVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002a2f
lea r8, [0x180033198]
mov rdx, rax
lea rcx, [0x1800018e0]
call fcn.1800032d0
test eax, eax
je 0x180002a26
mov ecx, dword [0x180033100]
mov rax, qword [0x180033198]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002a4b
lea rdx, str.Failed_to_hook__NtUnlockVirtualMemory_
jmp 0x180002a36
lea rdx, str.Failed_to_find__NtUnlockVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtProtectVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002aad
lea r8, [0x1800331a0]
mov rdx, rax
lea rcx, [0x1800019b0]
call fcn.1800032d0
test eax, eax
je 0x180002aa4
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331a0]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002ac9
lea rdx, str.Failed_to_hook__NtProtectVirtualMemory_
jmp 0x180002ab4
lea rdx, str.Failed_to_find__NtProtectVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtReadVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002b2b
lea r8, [0x180033188]
mov rdx, rax
lea rcx, [0x180001a90]
call fcn.1800032d0
test eax, eax
je 0x180002b22
mov ecx, dword [0x180033100]
mov rax, qword [0x180033188]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002b47
lea rdx, str.Failed_to_hook__NtReadVirtualMemory_
jmp 0x180002b32
lea rdx, str.Failed_to_find__NtReadVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtWriteVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002ba9
lea r8, [0x1800331c0]
mov rdx, rax
lea rcx, [0x180001b70]
call fcn.1800032d0
test eax, eax
je 0x180002ba0
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331c0]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002bc5
lea rdx, str.Failed_to_hook__NtWriteVirtualMemory_
jmp 0x180002bb0
lea rdx, str.Failed_to_find__NtWriteVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtQueryVirtualMemory
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002c27
lea r8, [0x180033140]
mov rdx, rax
lea rcx, [0x180001c50]
call fcn.1800032d0
test eax, eax
je 0x180002c1e
mov ecx, dword [0x180033100]
mov rax, qword [0x180033140]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002c43
lea rdx, str.Failed_to_hook__NtQueryVirtualMemory_
jmp 0x180002c2e
lea rdx, str.Failed_to_find__NtQueryVirtualMemory_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtOpenThread
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002ca5
lea r8, [0x180033128]
mov rdx, rax
lea rcx, [0x180001d50]
call fcn.1800032d0
test eax, eax
je 0x180002c9c
mov ecx, dword [0x180033100]
mov rax, qword [0x180033128]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002cc1
lea rdx, str.Failed_to_hook__NtOpenThread_
jmp 0x180002cac
lea rdx, str.Failed_to_find__NtOpenThread_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtQueryInformationThread
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002d23
lea r8, [0x1800331b8]
mov rdx, rax
lea rcx, [0x180001e10]
call fcn.1800032d0
test eax, eax
je 0x180002d1a
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331b8]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002d3f
lea rdx, str.Failed_to_hook__NtQueryInformationThread_
jmp 0x180002d2a
lea rdx, str.Failed_to_find__NtQueryInformationThread_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtSetInformationThread
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002da1
lea r8, [0x180033170]
mov rdx, rax
lea rcx, [0x180001ef0]
call fcn.1800032d0
test eax, eax
je 0x180002d98
mov ecx, dword [0x180033100]
mov rax, qword [0x180033170]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002dbd
lea rdx, str.Failed_to_hook__NtSetInformationThread_
jmp 0x180002da8
lea rdx, str.Failed_to_find__NtSetInformationThread_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtGetContextThread
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002e1f
lea r8, [0x180033130]
mov rdx, rax
lea rcx, [0x180001fb0]
call fcn.1800032d0
test eax, eax
je 0x180002e16
mov ecx, dword [0x180033100]
mov rax, qword [0x180033130]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002e3b
lea rdx, str.Failed_to_hook__NtGetContextThread_
jmp 0x180002e26
lea rdx, str.Failed_to_find__NtGetContextThread_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtSetContextThread
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002e9d
lea r8, [0x1800331a8]
mov rdx, rax
lea rcx, [0x180002070]
call fcn.1800032d0
test eax, eax
je 0x180002e94
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331a8]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002eb9
lea rdx, str.Failed_to_hook__NtSetContextThread_
jmp 0x180002ea4
lea rdx, str.Failed_to_find__NtSetContextThread_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtSuspendThread
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002f1b
lea r8, [0x180033148]
mov rdx, rax
lea rcx, [0x1800021f0]
call fcn.1800032d0
test eax, eax
je 0x180002f12
mov ecx, dword [0x180033100]
mov rax, qword [0x180033148]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002f37
lea rdx, str.Failed_to_hook__NtSuspendThread_
jmp 0x180002f22
lea rdx, str.Failed_to_find__NtSuspendThread_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtResumeThread
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180002f99
lea r8, [0x1800331d8]
mov rdx, rax
lea rcx, [0x180002130]
call fcn.1800032d0
test eax, eax
je 0x180002f90
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331d8]
mov qword [rsi + rcx*8], rdi
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
jmp 0x180002fb5
lea rdx, str.Failed_to_hook__NtResumeThread_
jmp 0x180002fa0
lea rdx, str.Failed_to_find__NtResumeThread_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, str.NtWaitForSingleObject
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, qword [rsp + 0x38]
mov rbx, rax
test rax, rax
je 0x180003025
lea r8, [0x1800331d0]
mov rdx, rax
lea rcx, [0x1800022b0]
call fcn.1800032d0
test eax, eax
je 0x18000301c
mov ecx, dword [0x180033100]
mov rax, qword [0x1800331d0]
mov qword [rsi + rcx*8], rbx
mov ecx, dword [0x180033100]
mov qword [rsi + rcx*8 + 0x800], rax
inc dword [0x180033100]
mov rsi, qword [rsp + 0x30]
add rsp, 0x20
pop rbx
ret
lea rdx, str.Failed_to_hook__NtWaitForSingleObject_
jmp 0x18000302c
lea rdx, str.Failed_to_find__NtWaitForSingleObject_
mov r9d, 0x10
lea r8, str.Failure
xor ecx, ecx
mov rsi, qword [rsp + 0x30]
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_MessageBoxW]