Function at 0x140076820
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov dword [rax + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov r15, rcx
xor ebx, ebx
mov qword [rax - 0x68], rbx
mov qword [rax - 0x80], rbx
mov dword [rax + 0x18], ebx
lea rax, [rax - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [0x1401ad298]
xor edx, edx
lea r8d, [rbx + 0x17]
lea rcx, [0x1401ad288]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov r13d, eax
test eax, eax
js 0x140076cfb
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r9, [rsp + 0x48]
lea edx, [rbx + 1]
mov r8d, 0x1000000f
call qword [rax + 0x18]
mov r13d, eax
test eax, eax
js 0x140076cfb
call fcn.14013e120
mov rcx, rax
mov eax, ebx
test rcx, rcx
setne al
test eax, eax
jne 0x1400768c6
mov ecx, 0x80004005
call fcn.140001c70
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, [0x14019bd68]
or rbp, 0xffffffffffffffff
test rdx, 0xffffffffffff0000
jne 0x14007690a
movzx edi, dx
mov ecx, edi
call fcn.14014c5c0
test rax, rax
je 0x140076927
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140005140
jmp 0x140076927
xor eax, eax
mov rcx, rbp
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x30]
call fcn.1400038f0
nop
lea rcx, [rsp + 0x80]
mov rax, qword [0x1401ad2a8]
mov qword [rcx], rax
mov rax, qword [0x1401ad2b0]
mov qword [rcx + 8], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x68]
call fcn.140073220
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x30]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x1400769b6
cmp dword [rdi + 0x10], 0
jl 0x1400769a7
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400769a7
call fcn.1400035b0
mov rsi, rax
mov eax, ebp
lock xadd dword [rdi + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14007699c
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x30], rax
jmp 0x1400769b6
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.1400038f0
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400769d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0xe0]
call qword [rax + 0x18]
mov r13d, eax
test eax, eax
js 0x140076cdd
mov r14d, ebx
cmp dword [rsp + 0xe0], ebx
jbe 0x140076c9d
mov r12d, ebx
call fcn.14013e120
mov rcx, rax
mov eax, ebx
test rcx, rcx
setne al
test eax, eax
je 0x140076c92
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rbx
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
mov edx, r14d
call qword [rax + 0x20]
mov r13d, eax
test eax, eax
jns 0x140076a71
lea rdx, [rdi - 0x18]
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140076c10
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140076c10
mov ecx, 0x450
call fcn.14013c710
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140076a92
mov rcx, rax
call fcn.14005b530
mov rsi, rax
jmp 0x140076a95
mov rsi, rbx
mov rax, qword [rsi]
mov r8, r15
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call qword [rax + 0x60]
test eax, eax
je 0x140076b80
call fcn.14013e120
mov rcx, rax
mov eax, ebx
test rcx, rcx
setne al
test eax, eax
je 0x140076c23
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov rax, qword [rsi]
lea rdx, [rsp + 0x38]
mov rcx, rsi
call qword [rax + 0x70]
test eax, eax
je 0x140076b54
mov rax, qword [rsp + 0x38]
cmp dword [rax - 0x10], 0
jl 0x140076b59
lea rdx, str.rtstereomixwave
mov rcx, rax
call fcn.14015d110
mov rdx, rax
test rax, rax
je 0x140076b54
mov rax, qword [rsp + 0x38]
sub rdx, rax
sar rdx, 1
cmp edx, 0xffffffff
je 0x140076b59
mov r12d, 1
mov rdx, qword [rsi + 0x118]
test rdx, rdx
jne 0x140076b2f
mov ecx, ebx
jmp 0x140076b40
xor eax, eax
mov rcx, rbp
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
sub rcx, r12
mov r8d, ecx
lea rcx, [rsp + 0x58]
call fcn.1400038f0
mov rax, qword [rsp + 0x38]
jmp 0x140076b59
mov rax, qword [rsp + 0x38]
lea rdx, [rax - 0x18]
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140076b7b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x58]
jmp 0x140076b80
mov rdi, qword [rsp + 0x58]
mov rax, qword [rsi]
mov edx, 1
mov rcx, rsi
call qword [rax]
mov qword [rsp + 0x50], rbx
test r12d, r12d
je 0x140076bf5
mov qword [rsp + 0x40], rbx
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x1401a6570]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1401a6560]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov r13d, eax
test eax, eax
jns 0x140076c2e
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140076bd8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rdx, [rdi - 0x18]
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140076c10
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140076c10
lea rdx, [rdi - 0x18]
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140076c10
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add r14d, 1
cmp r14d, dword [rsp + 0xe0]
jae 0x140076c88
jmp 0x140076a04
mov ecx, 0x80004005
call fcn.140001c70
nop
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov r12d, dword [rsp + 0xd8]
mov r8d, r12d
mov rdx, rdi
call qword [rax + 0x68]
mov r13d, eax
mov esi, ebx
test eax, eax
mov eax, 1
cmovns esi, eax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140076c67
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rdx, [rdi - 0x18]
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140076c82
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test esi, esi
jne 0x140076cdd
jmp 0x140076ca5
mov r12d, dword [rsp + 0xd8]
jmp 0x140076ca5
mov ecx, 0x80004005
call fcn.140001c70
int3
mov r12d, dword [rsp + 0xd8]
test r12d, r12d
je 0x140076cdd
mov dword [rsp + 0xe8], ebx
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, r15
lea r8, [0x140076e60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r15 + 0x1d50], rax
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebp
add ebp, 0xffffffff
test ebp, ebp
jg 0x140076cfb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r13d, r13d
setns bl
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140076d12
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140076d22
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebx
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret