Function at 0x140047fc4
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x14009b940]
xor rax, rsp
mov qword [rbp - 8], rax
xor r14d, r14d
mov qword [rbp - 0x30], r14
mov rcx, qword [0x14009b028]
lea r12, [0x14009b028]
lea r13, [0x140089c68]
mov dil, 5
mov r15b, 4
cmp rcx, r12
je 0x140048034
test byte [rcx + 0x1c], r15b
je 0x140048034
cmp byte [rcx + 0x19], dil
jb 0x140048034
mov rcx, qword [rcx + 0x10]
lea edx, [r14 + 0x11]
mov r8, r13
call fcn.140001024
mov ebx, 0xea60
mov esi, 2
mov r8d, ebx
mov ecx, esi
call fcn.1400246c0
call fcn.14006c74c
test eax, eax
jne 0x14004811e
lea rcx, [rbp - 0x40]
call fcn.14006d044
test eax, eax
jne 0x1400480e8
cmp dword [rbp - 0x40], r14d
je 0x140048114
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048097
test byte [rcx + 0x1c], r15b
je 0x140048097
cmp byte [rcx + 0x19], dil
jb 0x140048097
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x11]
mov r8, r13
call fcn.140001024
call fcn.14006d17c
test eax, eax
jne 0x1400480c9
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048114
test byte [rcx + 0x1c], r15b
je 0x140048114
cmp byte [rcx + 0x19], dil
jb 0x140048114
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0x14]
mov r8, r13
call fcn.140001024
jmp 0x140048114
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048114
test byte [rcx + 0x1c], r15b
je 0x140048114
cmp byte [rcx + 0x19], sil
jb 0x140048114
mov edx, 0x15
jmp 0x140048105
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048114
test byte [rcx + 0x1c], r15b
je 0x140048114
cmp byte [rcx + 0x19], sil
jb 0x140048114
mov edx, 0x16
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001050
mov r8d, ebx
mov ecx, esi
call fcn.1400246c0
mov r8d, ebx
mov ecx, esi
call fcn.1400246c0
lea rcx, [rbp - 0x30]
call fcn.140067208
test eax, eax
jne 0x140048176
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x14004816f
test byte [rcx + 0x1c], r15b
je 0x14004816f
cmp byte [rcx + 0x19], sil
jb 0x14004816f
mov rcx, qword [rcx + 0x10]
mov edx, 0x17
mov r9d, eax
mov r8, r13
call fcn.140001050
mov eax, ebx
jmp 0x140048a83
mov r8d, ebx
mov ecx, esi
call fcn.1400246c0
call fcn.14006a8f4
mov ebx, eax
mov edi, 1
test eax, eax
je 0x1400481cb
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048a3b
test byte [rcx + 0x1c], r15b
je 0x140048a3b
cmp byte [rcx + 0x19], sil
jb 0x140048a3b
lea edx, [rdi + 0x17]
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001050
jmp 0x140048a3b
call fcn.140050158
test eax, eax
jne 0x14004820d
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048a3b
test byte [rcx + 0x1c], r15b
je 0x140048a3b
cmp byte [rcx + 0x19], sil
jb 0x140048a3b
mov edx, 0x19
jmp 0x1400481b7
mov r8d, 0xea60
mov ecx, esi
call fcn.1400246c0
xor r9d, r9d
mov r8d, edi
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
nop dword [rax + rax]
mov qword [0x14009f380], rax
test rax, rax
jne 0x140048278
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048a3b
test byte [rcx + 0x1c], r15b
je 0x140048a3b
cmp byte [rcx + 0x19], sil
jb 0x140048a3b
mov edx, 0x1a
jmp 0x140048a2c
mov r8d, 0xea60
mov ecx, esi
call fcn.1400246c0
mov ecx, 0x3c
call fcn.140067108
mov qword [0x14009f398], rax
test rax, rax
jne 0x1400482ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x1400482d5
test byte [rcx + 0x1c], r15b
je 0x1400482d5
cmp byte [rcx + 0x19], sil
jb 0x1400482d5
mov rcx, qword [rcx + 0x10]
mov edx, 0x1b
mov r9d, eax
mov r8, r13
call fcn.140001050
mov r9d, 0xc0007d72
xor r8d, r8d
mov edx, edi
mov ecx, edi
call fcn.140067590
jmp 0x14004816f
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov qword [rax + 0x30], rcx
mov dword [rax + 0x38], ecx
call fcn.14007d55c
test eax, eax
jns 0x14004833a
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x1400482d5
test byte [rcx + 0x1c], r15b
je 0x1400482d5
cmp byte [rcx + 0x19], sil
jb 0x1400482d5
mov edx, 0x1c
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001050
jmp 0x1400482d5
call fcn.14007d6ac
test eax, eax
jns 0x140048366
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x1400482d5
test byte [rcx + 0x1c], r15b
je 0x1400482d5
cmp byte [rcx + 0x19], sil
jb 0x1400482d5
mov edx, 0x1d
jmp 0x140048329
mov rcx, qword [0x14009f398]
lea rax, [rcx + 8]
lea r9, [rcx + 0xc]
mov qword [rsp + 0x20], rax
lea r8, [rcx + 4]
add rcx, 0x10
call fcn.14007d988
test eax, eax
je 0x1400483ca
mov rax, qword [0x14009b028]
cmp rax, r12
je 0x1400483ca
test byte [rax + 0x1c], r15b
je 0x1400483ca
cmp byte [rax + 0x19], sil
jb 0x1400483ca
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [0x14009b028]
mov edx, 0x1e
mov r9d, eax
mov r8, r13
mov rcx, qword [rcx + 0x10]
call fcn.140001050
mov rcx, qword [0x14009f398]
lea rax, [rcx + 0x1c]
lea r10, [rcx + 0x20]
mov qword [rsp + 0x28], rax
lea r9, [rcx + 0x18]
mov qword [rsp + 0x20], r10
lea r8, [rcx + 0x14]
lea rdx, [rcx + 0x28]
add rcx, 0x24
call fcn.14007dc0c
test eax, eax
je 0x14004843b
mov rax, qword [0x14009b028]
cmp rax, r12
je 0x14004843b
test byte [rax + 0x1c], r15b
je 0x14004843b
cmp byte [rax + 0x19], sil
jb 0x14004843b
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [0x14009b028]
mov edx, 0x1f
mov r9d, eax
mov r8, r13
mov rcx, qword [rcx + 0x10]
call fcn.140001050
mov rcx, qword [0x14009f398]
lea r9, [rcx + 0x34]
lea r8, [rcx + 0x38]
lea rdx, [rcx + 0x30]
add rcx, 0x2c
call fcn.14007d770
test eax, eax
je 0x14004849a
mov rax, qword [0x14009b028]
cmp rax, r12
je 0x14004849a
test byte [rax + 0x1c], r15b
je 0x14004849a
cmp byte [rax + 0x19], sil
jb 0x14004849a
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [0x14009b028]
mov edx, 0x20
mov r9d, eax
mov r8, r13
mov rcx, qword [rcx + 0x10]
call fcn.140001050
lea rcx, [0x14009f358]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rdx, qword [0x14009f398]
lea rcx, [0x14009f358]
imul eax, dword [rdx + 0x20], 0x3c
mov dword [0x14009f3a0], eax
imul eax, dword [rdx + 0x38], 0x3c
mov dword [0x14009f38c], eax
imul eax, dword [rdx + 0xc], 0x3c
mov dword [0x14009f3a4], eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r8d, 0xea60
mov ecx, esi
call fcn.1400246c0
lea rcx, [rbp - 0x30]
call fcn.140047cf4
mov ebx, eax
test eax, eax
je 0x14004853e
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x14004816f
test byte [rcx + 0x1c], r15b
je 0x14004816f
cmp byte [rcx + 0x19], sil
jb 0x14004816f
mov edx, 0x21
mov r9d, eax
mov rcx, qword [rcx + 0x10]
mov r8, r13
call fcn.140001050
jmp 0x14004816f
mov ebx, 0xea60
mov ecx, esi
mov r8d, ebx
call fcn.1400246c0
call fcn.140050390
test eax, eax
jne 0x140048621
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048594
test byte [rcx + 0x1c], r15b
je 0x140048594
cmp byte [rcx + 0x19], sil
jb 0x140048594
mov rcx, qword [rcx + 0x10]
mov edx, 0x22
mov r9d, eax
mov r8, r13
call fcn.140001050
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140087fd0]
mov word [rbp - 0x24], r14w
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rbp - 0x24]
call fcn.140002ac0
test eax, eax
lea rcx, [rbp - 0x24]
mov rax, qword [0x14009f428]
mov r9d, 0xc0007d68
cmovs rcx, r14
mov r8d, esi
mov qword [rsp + 0x28], rcx
mov edx, edi
mov rcx, qword [rax + 0x60]
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.140067590
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048a3b
test byte [rcx + 0x1c], r15b
je 0x140048a3b
cmp byte [rcx + 0x19], sil
jb 0x140048a3b
mov edx, 0x23
jmp 0x140048a2c
mov r8d, ebx
mov ecx, esi
call fcn.1400246c0
call fcn.1400286fc
mov ebx, eax
test eax, eax
je 0x140048706
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048666
test byte [rcx + 0x1c], r15b
je 0x140048666
cmp byte [rcx + 0x19], sil
jb 0x140048666
mov rcx, qword [rcx + 0x10]
mov edx, 0x24
mov r9d, eax
mov r8, r13
call fcn.140001050
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140087fd0]
mov word [rbp - 0x24], r14w
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rbp - 0x24]
call fcn.140002ac0
test eax, eax
lea rcx, [rbp - 0x24]
mov rax, qword [0x14009f2a0]
mov r9d, 0xc0007d69
cmovs rcx, r14
mov r8d, esi
mov qword [rsp + 0x28], rcx
mov edx, edi
mov ecx, edi
mov qword [rsp + 0x20], rax
call fcn.140067590
lea rcx, [0x14009f088]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop dword [rax + rax]
lea rcx, [0x14009f0b8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop dword [rax + rax]
lea rcx, [0x14009f0b8]
mov qword [0x14009f294], r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop dword [rax + rax]
lea rcx, [0x14009f088]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r8d, 0xea60
mov ecx, esi
call fcn.1400246c0
call fcn.1400575d8
mov ebx, eax
test eax, eax
je 0x140048775
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x14004874a
test byte [rcx + 0x1c], r15b
je 0x14004874a
cmp byte [rcx + 0x19], sil
jb 0x14004874a
mov rcx, qword [rcx + 0x10]
mov edx, 0x25
mov r9d, eax
mov r8, r13
call fcn.140001050
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140087fd0]
mov word [rbp - 0x24], r14w
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rbp - 0x24]
call fcn.140002ac0
mov r9d, 0xc0007d2c
jmp 0x140048a61
mov r8d, 0xea60
mov ecx, esi
call fcn.1400246c0
call fcn.14005a900
mov ebx, eax
test eax, eax
je 0x1400487bb
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048a3b
test byte [rcx + 0x1c], r15b
je 0x140048a3b
cmp byte [rcx + 0x19], sil
jb 0x140048a3b
mov edx, 0x26
jmp 0x140048a2c
mov r8d, 0xea60
mov ecx, esi
call fcn.1400246c0
mov r9, qword [rbp - 0x30]
lea rax, [rbp - 0x38]
mov qword [rsp + 0x28], rax
lea r8, [0x140049980]
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14004883a
mov rax, qword [0x14009b028]
cmp rax, r12
je 0x14004816f
test byte [rax + 0x1c], r15b
je 0x14004816f
cmp byte [rax + 0x19], sil
jb 0x14004816f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [0x14009b028]
lea edx, [rdi + 0x27]
mov ebx, eax
jmp 0x14004852a
mov r8d, 0x4e20
mov ecx, esi
call fcn.1400246c0
mov edx, 0x2710
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
je 0x1400488f2
cmp eax, 0x102
jne 0x14004889d
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048895
test byte [rcx + 0x1c], r15b
je 0x140048895
cmp byte [rcx + 0x19], 5
jb 0x140048895
mov rcx, qword [rcx + 0x10]
mov edx, 0x29
mov r8, r13
call fcn.140001024
mov r8d, 0x7530
jmp 0x140048840
mov rax, qword [0x14009b028]
cmp rax, r12
je 0x1400488de
test byte [rax + 0x1c], r15b
je 0x1400488de
cmp byte [rax + 0x19], sil
jb 0x1400488de
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edx, 0x2a
mov rcx, qword [0x14009b028]
mov r9d, eax
mov r8, r13
mov ebx, eax
mov rcx, qword [rcx + 0x10]
call fcn.140001050
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
jmp 0x14004816f
lea rdx, [rbp - 0x3c]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
nop dword [rax + rax]
test eax, eax
jne 0x140048934
mov rax, qword [0x14009b028]
cmp rax, r12
je 0x1400488de
test byte [rax + 0x1c], r15b
je 0x1400488de
cmp byte [rax + 0x19], sil
jb 0x1400488de
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edx, 0x28
jmp 0x1400488c6
mov ebx, dword [rbp - 0x3c]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
test ebx, ebx
je 0x14004897b
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x14004816f
test byte [rcx + 0x1c], r15b
je 0x14004816f
cmp byte [rcx + 0x19], sil
jb 0x14004816f
mov edx, 0x2b
mov r9d, ebx
jmp 0x14004852d
xor r8d, r8d
mov r9d, 0x40007d01
lea edx, [r8 + 3]
lea edi, [rdx - 2]
mov ecx, edi
call fcn.140067590
call fcn.140024fdc
mov ebx, eax
test eax, eax
je 0x1400489c2
mov rcx, qword [0x14009b028]
cmp rcx, r12
je 0x140048a3b
test byte [rcx + 0x1c], r15b
je 0x140048a3b
cmp byte [rcx + 0x19], sil
jb 0x140048a3b
lea edx, [rdi + 0x2b]
jmp 0x140048a2c
lea rax, [rbp - 0x38]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea r8, [0x14004a300]
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop dword [rax + rax]
mov qword [0x14009f390], rax
test rax, rax
jne 0x140048a81
mov rax, qword [0x14009b028]
cmp rax, r12
je 0x140048a3b
test byte [rax + 0x1c], r15b
je 0x140048a3b
cmp byte [rax + 0x19], sil
jb 0x140048a3b
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [0x14009b028]
mov edx, 0x2d
mov ebx, eax
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001050
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140087fd0]
mov word [rbp - 0x24], r14w
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rcx, [rbp - 0x24]
call fcn.140002ac0
mov r9d, 0xc0007d29
test eax, eax
lea rcx, [rbp - 0x24]
mov r8d, edi
mov edx, edi
cmovs rcx, r14
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.140067590
jmp 0x14004816f
xor eax, eax
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14007ec30
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret