Function at 0x14000d090
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x620]
sub rsp, 0x720
mov rax, qword [0x14005b040]
xor rax, rsp
mov qword [rbp + 0x610], rax
mov edi, edx
mov dword [rsp + 0x50], edx
mov r15, rcx
mov r14, qword [rcx + 0x6d8]
mov rbx, qword [rcx + 0x708]
mov edx, 0xffffffff
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
inc dword [rbx + 0xc]
cmp dword [rbx + 0xc], 1
jne 0x14000d106
mov edx, 0xffffffff
mov rcx, qword [rbx + 0x20]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, 0xffffffff
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, 0xffffffff
mov rcx, qword [r14 + 0x598]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [r14 + 0x588]
test rcx, rcx
je 0x14000d147
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
xor ebx, ebx
mov qword [r14 + 0x588], rbx
mov rcx, qword [r14 + 0x590]
test rcx, rcx
je 0x14000d166
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [r14 + 0x590], rbx
mov rcx, qword [r14 + 0x598]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov esi, ebx
mov r12d, ebx
lea r13, [r15 + 0x38]
lea rbx, [0x1400501f0]
nop word [rax + rax]
mov r8d, esi
lea rdx, str.SERVER__d
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfA]
mov dword [rsp + 0x28], 0x118
lea rax, [rbp + 0x170]
mov qword [rsp + 0x20], rax
mov r9, rbx
lea r8, [rsp + 0x70]
lea rdx, str.SERVERS
mov rcx, r14
call fcn.140019080
test eax, eax
je 0x14000d400
mov dword [r13 + 0x10], esi
mov r8d, esi
lea rdx, str.DISPLAYNAME__d
lea rcx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_wsprintfA]
movsxd rax, r12d
imul rbx, rax, 0xa8
add rbx, 0x50
add rbx, r15
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], rbx
lea r9, [0x1400501f0]
lea r8, [rbp - 0x40]
lea rdx, str.SERVERS
mov rcx, r14
call fcn.140019080
test eax, eax
jne 0x14000d23e
lea r8, [rsp + 0x70]
mov edx, 0x80
mov rcx, rbx
call fcn.1400270dc
lea rcx, [rbp + 0x170]
call qword [sym.imp.SHLWAPI.dll_PathIsRelativeA]
test eax, eax
je 0x14000d345
mov qword [rsp + 0x40], 0x50
lea rax, [rbp + 0x290]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0x104
lea rax, [rbp + 0x500]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x104
lea r9, [rbp + 0x3f0]
mov r8d, 0x50
lea rdx, [rbp + 0x10]
mov rcx, r14
call fcn.140033514
lea rax, [0x1400501f0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3f0]
lea r8, [rbp + 0x10]
mov edx, 0x104
lea rcx, [rbp + 0x60]
call fcn.140032d9c
lea rcx, [rbp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x14000d2d4
test eax, eax
jle 0x14000d2eb
movsxd rcx, eax
cmp byte [rbp + rcx + 0x5f], 0x5c
je 0x14000d300
lea r8, [0x140051e70]
mov edx, 0x104
lea rcx, [rbp + 0x60]
call fcn.14002dcb0
lea r8, [rbp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x2e0]
call fcn.1400270dc
lea r8, [rbp + 0x170]
mov edx, 0x104
lea rcx, [rbp + 0x2e0]
call fcn.14002dcb0
lea r8, [rbp + 0x2e0]
mov edx, 0x104
lea rcx, [rbp + 0x170]
call fcn.1400270dc
mov ecx, 0x5e0
call fcn.140021130
mov rbx, rax
mov qword [rsp + 0x60], rax
xor edx, edx
mov r8d, 0x5e0
mov rcx, rax
call fcn.140045990
mov rcx, rbx
call fcn.1400189a0
lea rdx, [rbp + 0x170]
mov rcx, rbx
call fcn.140018b50
nop
mov qword [r13 + 8], r15
mov qword [r13], rbx
mov dword [r13 + 0x14], edi
mov ecx, 0x2070
call fcn.140021130
mov rbx, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x2070
mov rcx, rax
call fcn.140045990
lea rdx, [r13 - 8]
mov rcx, rbx
call fcn.140006650
nop
mov qword [r13 - 8], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r9, [r13 - 8]
lea r8, [0x14000d070]
xor edx, edx
xor ecx, ecx
call fcn.14002dfa0
mov qword [r13 + 0x98], rax
inc r12d
add r13, 0xa8
mov edi, dword [rsp + 0x50]
lea rbx, [0x1400501f0]
inc esi
cmp esi, 0xa
jl 0x14000d190
test r12d, r12d
jne 0x14000d555
xor r14d, r14d
mov dword [r15 + 0x48], r14d
lea rcx, [r15 + 0x50]
lea r8, str.SERVER_0
mov edx, 0x80
call fcn.1400270dc
mov ecx, 0x5e0
call fcn.140021130
mov rsi, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x5e0
mov rcx, rax
call fcn.140045990
mov rbx, qword [r15 + 0x6d8]
mov rcx, rsi
call fcn.1400189a0
mov ecx, dword [rbx + 0x580]
mov dword [rsi + 0x580], ecx
mov ecx, dword [rbx + 0x57c]
mov dword [rsi + 0x57c], ecx
lea rdi, [rsi + 0x118]
lea r8, [rbx + 0x118]
mov edx, 0x118
mov rcx, rdi
call fcn.1400270dc
mov r8, rbx
mov edx, 0x118
mov rcx, rsi
call fcn.1400270dc
lea r8, [rbx + 0x230]
lea rcx, [rsi + 0x230]
mov edx, 0x118
call fcn.1400270dc
mov rax, rsi
sub rdi, rsi
movzx edx, byte [rax]
movzx ecx, byte [rax + rdi]
sub edx, ecx
jne 0x14000d4d4
inc rax
test ecx, ecx
jne 0x14000d4c2
mov eax, r14d
test edx, edx
setne al
mov dword [rsi + 0x5a0], eax
mov qword [r15 + 0x40], r15
mov qword [r15 + 0x38], rsi
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x4c], eax
mov ecx, 0x2070
call fcn.140021130
mov rbx, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x2070
mov rcx, rax
call fcn.140045990
lea rdx, [r15 + 0x30]
mov rcx, rbx
call fcn.140006650
nop
mov qword [r15 + 0x30], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
lea r9, [r15 + 0x30]
lea r8, [0x14000d070]
xor edx, edx
xor ecx, ecx
call fcn.14002dfa0
mov qword [r15 + 0xd0], rax
mov r12d, 1
mov dword [r15 + 0x6c0], r12d
mov rbx, qword [r15 + 0x708]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0xffffffff
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add dword [rbx + 0xc], 0xffffffff
jne 0x14000d58c
mov rcx, qword [rbx + 0x20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbp + 0x610]
xor rcx, rsp
call fcn.140020e70
lea r11, [rsp + 0x720]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret