Function at 0x1401f431f
Capabilities:
Create thread

Disassembly:
push rax
pushf
mov eax, 0x40fa80d5
pushf
not eax
add eax, 0x8e50cf0a
xor eax, 0xe9c1b9b1
rol eax, 3
popf
pushf
not eax
add eax, 0xe05d6834
xor eax, 0xcca500d8
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xd5a0e512
xor eax, 0xddb0b568
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xe78641c2
xor eax, 0xf85d22f1
rol eax, 0x6c
popf
cmp eax, 4
jne 0x1401f4382
popf
pop rax
jmp 0x1401f46c1
cmp eax, 0
jne 0x1401f4391
popf
pop rax
jmp 0x1401f4445
cmp eax, 3
jne 0x1401f43a0
popf
pop rax
jmp 0x1401f45f8
cmp eax, 1
jne 0x1401f43af
popf
pop rax
jmp 0x1401f44d7
cmp eax, 0xd
jne 0x1401f43be
popf
pop rax
jmp 0x1401f4a64
cmp eax, 7
jne 0x1401f43cd
popf
pop rax
jmp 0x1401f4850
cmp eax, 6
jne 0x1401f43dc
popf
pop rax
jmp 0x1401f47cd
cmp eax, 0xb
jne 0x1401f43eb
popf
pop rax
jmp 0x1401f4975
cmp eax, 0xc
jne 0x1401f43fa
popf
pop rax
jmp 0x1401f49ce
cmp eax, 8
jne 0x1401f4409
popf
pop rax
jmp 0x1401f489c
cmp eax, 5
jne 0x1401f4418
popf
pop rax
jmp 0x1401f4727
cmp eax, 2
jne 0x1401f4427
popf
pop rax
jmp 0x1401f4547
cmp eax, 9
jne 0x1401f4436
popf
pop rax
jmp 0x1401f4932
cmp eax, 0xa
jne 0x1401f4445
popf
pop rax
jmp 0x1401f496b
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov edi, edx
mov rsi, rcx
test r8, r8
jne 0x1401f4491
push rax
pushf
mov eax, 0xb569e1b0
pushf
not eax
add eax, 0xc6a9a990
xor eax, 0xef1a569d
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x9a446472
xor eax, 0x8e4b4e2c
rol eax, 0xf1
popf
jmp 0x1401f4373
push rax
pushf
mov eax, 0x33fb6200
pushf
not eax
add eax, 0xa0d12888
xor eax, 0xeb2771bb
rol eax, 0xde
popf
pushf
not eax
add eax, 0xd3e190d8
xor eax, 0xa7fbf4df
rol eax, 0x78
popf
pushf
not eax
add eax, 0xb4a1b7d8
xor eax, 0xdd8b98c8
rol eax, 0x3e
popf
jmp 0x1401f4373
call fcn.1402298c4
mov dword [rax], socket
call fcn.1402a5aaf
xor eax, eax
jmp 0x1401f4978
mov rdx, r9
mov rcx, r8
call fcn.14019a900
mov rbx, rax
test rax, rax
je 0x1401f459f
push rax
pushf
mov eax, 0x4a0d90d
pushf
not eax
add eax, 0xfdc40d9d
xor eax, 0xc7a595c7
rol eax, 0x33
popf
pushf
not eax
add eax, 0xb8e3fbb0
xor eax, 0x80c8c3f4
rol eax, 1
popf
pushf
not eax
add eax, 0x9bd005cf
xor eax, 0xfefa7cb2
rol eax, 0x62
popf
jmp 0x1401f4373
push rax
pushf
mov eax, 0xe430c80b
pushf
not eax
add eax, 0xfbea4b9a
xor eax, 0xadf3651f
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x87b59daa
xor eax, 0xd466816f
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xb69e9fd6
xor eax, 0xcca76e28
rol eax, 0x98
popf
pushf
not eax
add eax, 0xde115392
xor eax, 0xdc05a462
rol eax, 0x1a
popf
jmp 0x1401f4373
lea rax, [rsp + 0x50]
mov rdx, rdi
mov qword [rsp + 0x28], rax
lea r8, [0x187c7a067]
pushf
sub r8, 0x47c2408f
popf
mov eax, dword [rsp + 0x60]
mov r9, rbx
mov rcx, rsi
mov dword [rsp + 0x20], eax
jmp 0x1401f4626
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
test rax, rax
jne 0x1401f467a
push rax
pushf
mov eax, 0xe7f56a03
pushf
not eax
add eax, 0xe7bb7e98
xor eax, 0x80b47410
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x849adf9a
xor eax, 0xcc7e007d
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xc4530580
xor eax, 0xe4bb1aeb
rol eax, 0x61
popf
jmp 0x1401f4373
push rax
pushf
mov eax, 0x121109ba
pushf
not eax
add eax, 0xe124b78f
xor eax, 0xbccee99a
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xcf54f748
xor eax, 0x89040b3d
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xf4dcbcd3
xor eax, 0x956aa87b
rol eax, 0xe7
popf
jmp 0x1401f4373
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140231f91
push rax
pushf
mov eax, 0x8c37e295
pushf
not eax
add eax, 0xfb583370
xor eax, 0x89df6879
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xd35ee47c
xor eax, 0x80728e8d
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xe01122c6
xor eax, 0xcf02540c
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc1aa7d93
xor eax, 0x958fac38
rol eax, 0xfa
popf
jmp 0x1401f4373
xor ecx, ecx
test rbx, rbx
je 0x1401f4787
push rax
pushf
mov eax, 0x80374f42
pushf
not eax
add eax, 0xe7218669
xor eax, 0x9ab38721
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xb3caafe5
xor eax, 0xc186c01d
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xc2775ac3
xor eax, 0xa3fe4611
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x91376833
xor eax, 0xae6284b0
rol eax, 0x9c
popf
jmp 0x1401f4373
push rax
pushf
mov eax, 0x13181317
pushf
not eax
add eax, 0xdc6a35c9
xor eax, 0xd42058d2
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xacc5498e
xor eax, 0xef9330f7
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x9b77c862
xor eax, 0xb033cb75
rol eax, 0x57
popf
jmp 0x1401f4373
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1401f4809
push rax
pushf
mov eax, 0xf97401f0
pushf
not eax
add eax, 0xee45896b
xor eax, 0xe919b106
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xe545bc25
xor eax, 0xf74e9b4b
rol eax, 0xe9
popf
jmp 0x1401f4373
push rax
pushf
mov eax, 0x9bfff183
pushf
not eax
add eax, 0xeda6ba8e
xor eax, 0x8bade57e
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xe6d46c22
xor eax, 0xf39c3df4
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x98d6d95e
xor eax, 0xe1d81d67
rol eax, 0x79
popf
jmp 0x1401f4373
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x6519f92a
pushf
not eax
add eax, 0xf2530535
xor eax, 0xfd9d0723
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xbae526f1
xor eax, 0xe86d92ea
rol eax, 0x11
popf
pushf
not eax
add eax, 0xf1586ad9
xor eax, 0xe8fa701a
rol eax, 0x1e
popf
jmp 0x1401f4373
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1401f48eb
push rax
pushf
mov eax, 0xa3f9f3b2
pushf
not eax
add eax, 0xeb22c8ba
xor eax, 0xd0cac447
rol eax, 0x89
popf
pushf
not eax
add eax, 0xfe97d7d5
xor eax, 0xa78c8aa7
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x8048e99c
xor eax, 0xffe72a60
rol eax, 0xcf
popf
jmp 0x1401f4373
push rax
pushf
mov eax, 0x84a7d302
pushf
not eax
add eax, 0xc5e47342
xor eax, 0xb85f8641
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xd30280e3
xor eax, 0x8a4b0bca
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc7526134
xor eax, 0xeaa86da2
rol eax, 8
popf
jmp 0x1401f4373
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
push rax
pushf
mov eax, 0xc2ff203e
pushf
not eax
add eax, 0xd29c322d
xor eax, 0x9352c3ea
rol eax, 0x61
popf
pushf
not eax
add eax, 0xc1340264
xor eax, 0x87945e5f
rol eax, 0x21
popf
jmp 0x1401f4373
mov rcx, rbx
call fcn.14038d988
xor ecx, ecx
mov rax, rcx
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x1401f4a31
push rax
pushf
mov eax, 0x78140598
pushf
not eax
add eax, 0xfa37a38d
xor eax, 0xc103b1b4
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xd66e0228
xor eax, 0x92b76a38
rol eax, 0x91
popf
pushf
not eax
add eax, 0x84e240cb
xor eax, 0x94abf2b1
rol eax, 0x27
popf
pushf
not eax
add eax, 0xbd838d8d
xor eax, 0xb072bbe8
rol eax, 0x28
popf
jmp 0x1401f4373
push rax
pushf
mov eax, 0xd7460e81
pushf
not eax
add eax, 0xad23555b
xor eax, 0xa6e485a8
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xb0d932b5
xor eax, 0xf72a50fc
rol eax, 0x6f
popf
jmp 0x1401f4373
mov eax, dword [rsp + 0x50]
mov dword [rdx], eax
jmp 0x1401f4975