Function at 0x140063204
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 0x10], rdx
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
mov r13, r9
mov r14, r8
mov esi, ebx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x28], rbx
mov r15d, ebx
mov qword [rbp - 0x10], rbx
mov rdi, rcx
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x14006327e
test byte [rcx + 0x1c], 1
je 0x14006327e
cmp byte [rcx + 0x19], 4
jb 0x14006327e
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x219
call fcn.14001dd24
mov rcx, qword [0x14017d3a8]
mov r12, qword [rbp + 0x80]
test r12, r12
jne 0x140063297
mov ebx, 0x80004003
mov dil, sil
jmp 0x140063548
test r13, r13
je 0x14006328a
lea rcx, [0x14017e4d8]
mov qword [r12], rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rbp - 0x30], 1
cmp qword [rdi + 0x10], rbx
jne 0x1400632c1
mov ebx, 0x8078000a
jmp 0x14006353d
test r14, r14
cmove r14, qword [rdi + 0x10]
cmp byte [rdi + 0x18], bl
je 0x140063322
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x140063314
test byte [rcx + 0x1c], 1
je 0x140063314
cmp byte [rcx + 0x19], 2
jb 0x140063314
mov eax, dword [rdi + 8]
mov r9d, dword [rdi + 0x38]
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x21a
mov dword [rsp + 0x20], eax
call fcn.1400285b4
mov rcx, qword [0x14017d3a8]
mov ebx, 0x80780017
mov dil, byte [rbp - 0x30]
jmp 0x14006354f
lea rcx, [rbp - 0x20]
call fcn.140067b20
mov ebx, eax
test eax, eax
jns 0x14006337b
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x140063375
test byte [rcx + 0x1c], 1
je 0x140063375
cmp byte [rcx + 0x19], 2
jb 0x140063375
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x21b
mov r9d, eax
call fcn.14001de24
mov rsi, qword [rbp - 0x20]
mov rcx, qword [0x14017d3a8]
jmp 0x140063319
mov rsi, qword [rbp - 0x20]
jmp 0x140063319
mov rsi, qword [rbp - 0x20]
lea r15, [rsi + 0x88]
mov rcx, r15
mov rax, qword [r15]
call qword [rax + reloc.ole32.dll_CoTaskMemAlloc]
mov rdx, r14
mov rcx, rsi
call fcn.14001eb1c
mov rdx, qword [rbp + 0x70]
mov rcx, rsi
call fcn.14001e718
mov ebx, eax
test eax, eax
js 0x140063539
mov rax, qword [r15]
lea r8, [rbp - 0x28]
lea rdx, [0x140002ed0]
mov rcx, r15
call qword [rax]
mov ebx, eax
test eax, eax
jns 0x140063410
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x140063407
test byte [rcx + 0x1c], 1
je 0x140063407
cmp byte [rcx + 0x19], 2
jb 0x140063407
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x21c
mov r9d, eax
call fcn.14001de24
mov rcx, qword [0x14017d3a8]
mov r15, qword [rbp - 0x10]
jmp 0x140063319
mov rax, qword [rbp + 0x38]
lea r8, [rbp - 0x20]
mov r9, r13
mov rdx, rdi
mov rcx, rsi
movups xmm0, xmmword [rax]
mov eax, dword [rbp + 0x78]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0x60]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x68]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.140087070
mov ebx, eax
test eax, eax
js 0x140063539
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
lea r8, [0x140088e10]
mov r9, rsi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15, rax
test rax, rax
jne 0x1400634d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x1400634c3
test byte [rcx + 0x1c], 1
je 0x1400634c3
cmp byte [rcx + 0x19], 2
jb 0x1400634c3
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x21d
mov r9d, eax
call fcn.14001de24
mov rcx, qword [0x14017d3a8]
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
jmp 0x140063319
cmp qword [rdi + 0x28], 0
mov byte [rdi + 0x18], 1
jne 0x1400634e8
cmp qword [rdi + 0x30], 0
je 0x140063500
lea r8, [0x140005878]
lea rcx, [0x140005730]
mov edx, 0x2bd6
call fcn.1400a8be8
mov rcx, qword [rbp - 0x28]
mov qword [rdi + 0x28], rsi
xor esi, esi
mov qword [rdi + 0x30], rcx
mov rax, qword [rcx]
call qword [rax + reloc.ole32.dll_CoTaskMemAlloc]
mov rax, qword [rbp - 0x28]
and qword [rbp - 0x28], rsi
mov dword [rdi + 0x38], 6
lea rcx, [0x14017e4d8]
mov qword [r12], rax
xor dil, dil
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x140063541
mov r15, qword [rbp - 0x10]
mov dil, byte [rbp - 0x30]
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
mov rdx, qword [rbp - 0x28]
test rdx, rdx
je 0x140063568
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + CoRevokeClassObject]
mov rcx, qword [0x14017d3a8]
test r15, r15
je 0x14006357d
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14017d3a8]
test rsi, rsi
je 0x140063596
lea rcx, [rsi + 0x88]
mov rax, qword [rcx]
call qword [rax + CoRevokeClassObject]
mov rcx, qword [0x14017d3a8]
test ebx, ebx
jns 0x1400635ca
cmp rcx, r14
je 0x1400635f0
test byte [rcx + 0x1c], 1
je 0x1400635ca
cmp byte [rcx + 0x19], 2
jb 0x1400635ca
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x21e
mov r9d, ebx
call fcn.14001de24
mov rcx, qword [0x14017d3a8]
cmp rcx, r14
je 0x1400635f0
test byte [rcx + 0x1c], 1
je 0x1400635f0
cmp byte [rcx + 0x19], 4
jb 0x1400635f0
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x21f
call fcn.14001dd24
test dil, dil
je 0x140063602
lea rcx, [0x14017e4d8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r11, [rsp + 0x70]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret