Function at 0x75b80d608
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov r12d, r9d
mov r15, r8
mov r14, rdx
mov rbp, rcx
mov rcx, qword [0x75b91c090]
lea rsi, [0x75b91c090]
cmp rcx, rsi
je 0x75b80d65f
test byte [rcx + 0x1c], 4
je 0x75b80d65f
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e43d8]
mov edx, 0x30
call fcn.75b803a40
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.75b806158
mov ebx, eax
test eax, eax
jns 0x75b80d6af
mov rcx, qword [0x75b91c090]
cmp rcx, rsi
je 0x75b80d6a5
mov esi, 1
test byte [rcx + 0x1c], sil
je 0x75b80d6a5
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x30]
mov r9d, eax
lea r8, [0x75b8e43d8]
call fcn.75b803a60
mov rbp, qword [rsp + 0x30]
jmp 0x75b80da08
mov ebx, 0x70
mov ecx, ebx
call sym.mpclient.dll_MpAllocMemory
mov rdi, rax
test rax, rax
jne 0x75b80d6f2
mov ebx, 0x8007000e
mov rcx, qword [0x75b91c090]
cmp rcx, rsi
je 0x75b80d6a5
lea esi, [rax + 1]
test byte [rcx + 0x1c], sil
je 0x75b80d6a5
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0x32]
lea r8, [0x75b8e43d8]
call fcn.75b803a40
jmp 0x75b80d6a5
mov r8, rbx
xor edx, edx
mov rcx, rdi
call fcn.75b8c0190
lea rax, [rdi + 0x38]
mov qword [rdi + 0x18], rbp
mov qword [rax + 8], rax
mov esi, 1
mov qword [rax], rax
lea rax, [rdi + 0x48]
mov qword [rax + 8], rax
mov qword [rax], rax
mov rax, qword [r14]
and qword [r14], 0
mov qword [rdi + 0x20], rax
mov rax, qword [rsp + 0x30]
mov dword [rdi], esi
lock add dword [rax], esi
mov r8, qword [rsp + 0x30]
lea rdx, [rdi + 8]
lea rcx, [r8 + 0x30]
mov rax, qword [rcx + 8]
mov qword [rdx], rcx
mov qword [rdx + 8], rax
mov qword [rax], rdx
mov qword [rcx + 8], rdx
test r8, r8
je 0x75b80d766
mov rcx, qword [r8 + 8]
test rcx, rcx
je 0x75b80d766
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ebp, ebp
lea ecx, [rbp + 0x18]
call sym.mpclient.dll_MpAllocMemory
mov qword [rdi + 0x28], rax
test rax, rax
jne 0x75b80d7b7
mov ebx, 0x8007000e
mov rcx, qword [0x75b91c090]
lea r14, [0x75b91c090]
cmp rcx, r14
je 0x75b80da00
test byte [rcx + 0x1c], sil
je 0x75b80da00
lea edx, [rbp + 0x33]
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e43d8]
call fcn.75b803a40
jmp 0x75b80da00
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
xor r9d, r9d
mov qword [rax + 0x10], rcx
xor r8d, r8d
mov edx, esi
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rcx, qword [rdi + 0x28]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x28]
cmp qword [rax + 0x10], rbp
jne 0x75b80d818
call fcn.75b89abc4
mov ebx, eax
mov rcx, qword [0x75b91c090]
lea r14, [0x75b91c090]
cmp rcx, r14
je 0x75b80da00
test byte [rcx + 0x1c], sil
je 0x75b80da00
mov edx, 0x34
mov r9d, eax
jmp 0x75b80d9f0
lea rcx, [rdi + 0x58]
mov rdx, r15
call fcn.75b81b168
mov ebx, eax
test eax, eax
jns 0x75b80d852
mov rcx, qword [0x75b91c090]
lea r14, [0x75b91c090]
cmp rcx, r14
je 0x75b80da00
test byte [rcx + 0x1c], sil
je 0x75b80da00
mov edx, 0x35
jmp 0x75b80d810
lea rcx, [rdi + 0x60]
mov r8, rdi
lea rdx, [0x75b80d5f0]
call fcn.75b81a870
mov ebx, eax
test eax, eax
jns 0x75b80d896
mov rcx, qword [0x75b91c090]
lea r14, [0x75b91c090]
cmp rcx, r14
je 0x75b80da00
test byte [rcx + 0x1c], sil
je 0x75b80da00
mov edx, 0x36
jmp 0x75b80d810
mov r14, qword [rsp + 0x80]
test r14, r14
je 0x75b80d900
mov ecx, 0x10
call sym.mpclient.dll_MpAllocMemory
mov qword [rdi + 0x30], rax
test rax, rax
jne 0x75b80d8e4
mov ebx, 0x8007000e
mov rcx, qword [0x75b91c090]
lea r14, [0x75b91c090]
cmp rcx, r14
je 0x75b80da00
test byte [rcx + 0x1c], sil
je 0x75b80da00
lea edx, [rax + 0x37]
jmp 0x75b80d7a2
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rcx, qword [rdi + 0x30]
mov rax, qword [r14]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x30]
mov rax, qword [r14 + 8]
mov qword [rcx + 8], rax
test r12d, r12d
je 0x75b80d970
mov rax, qword [rdi + 0x28]
lea r8, [fcn.75b80dc10]
add rax, 8
mov r9, rdi
mov qword [rsp + 0x28], rax
xor edx, edx
and dword [rsp + 0x20], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rdi + 0x28]
mov qword [rcx], rax
mov rax, qword [rdi + 0x28]
cmp qword [rax], rbp
jne 0x75b80da1e
call fcn.75b89abc4
mov ebx, eax
mov rcx, qword [0x75b91c090]
lea r14, [0x75b91c090]
cmp rcx, r14
je 0x75b80da00
test byte [rcx + 0x1c], sil
je 0x75b80da00
mov edx, 0x38
jmp 0x75b80d810
mov rcx, qword [0x75b91c090]
lea r14, [0x75b91c090]
cmp rcx, r14
je 0x75b80d99e
test byte [rcx + 0x1c], 4
je 0x75b80d99e
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e43d8]
mov edx, 0x39
call fcn.75b803a40
mov rcx, rdi
call fcn.75b80dc10
mov ebx, eax
mov rcx, qword [0x75b91c090]
cmp rcx, r14
je 0x75b80d9d9
test byte [rcx + 0x1c], 4
je 0x75b80d9d9
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e43d8]
mov edx, 0x3a
mov r9d, eax
call fcn.75b803a60
mov rcx, qword [0x75b91c090]
test ebx, ebx
jns 0x75b80da1e
cmp rcx, r14
je 0x75b80da00
test byte [rcx + 0x1c], sil
je 0x75b80da00
mov edx, 0x3b
mov r9d, ebx
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e43d8]
call fcn.75b803a60
mov rcx, rdi
call fcn.75b80da4c
test rbp, rbp
je 0x75b80da29
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x75b80da29
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x75b80da29
mov rax, qword [rsp + 0x88]
mov qword [rax], rdi
mov rbp, qword [rsp + 0x68]
mov eax, ebx
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop r12
ret