Function at 0x140064390
Capabilities:
Create thread

Disassembly:
sub rsp, 0x1a8
mov qword [rsp + 0x198], r8
mov qword [rsp + 0x190], rcx
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x80], rdx
call fcn.14006b7a0
mov rcx, qword [rsp + 0x190]
mov rcx, qword [rcx]
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0x160]
add rcx, 0x10
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x78], rax
call fcn.1400139a0
xor r9d, r9d
mov ecx, r9d
xor r9d, r9d
lea rdx, [rsp + 0x160]
mov qword [rsp + 0x70], rcx
mov r8, qword [rsp + 0x70]
mov qword [rsp + 0x68], rdx
mov rdx, r8
lea r8, [0x1400664b0]
mov r10, qword [rsp + 0x68]
mov dword [rsp + 0x64], r9d
mov r9, r10
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x158], rax
cmp qword [rsp + 0x158], 0
jne 0x1400644bc
lea rcx, [rsp + 0x138]
lea rdx, [0x1401212ab]
mov r8d, 0x44
call fcn.14002f4b0
mov rax, qword [rsp + 0x198]
add rax, 0xc0
mov rcx, rax
lea rdx, [rsp + 0x138]
call fcn.140015f40
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x50], rax
call fcn.140001770
mov byte [rsp + 0x1a7], 0
mov dword [rsp + 0x134], 1
jmp 0x1400646ec
mov edx, dword [0x140162aec]
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140064579
cmp qword [0x140162ad0], 0
je 0x1400644f6
mov rcx, qword [0x140162ad0]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x158]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, [0x140162970]
mov dword [rsp + 0x4c], eax
call fcn.140069830
lea rcx, [rsp + 0x110]
lea rdx, [0x1401212f0]
mov r8d, 0x42
call fcn.14002f4b0
mov rcx, qword [rsp + 0x198]
add rcx, 0xc0
lea rdx, [rsp + 0x110]
call fcn.140015f40
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x40], rax
call fcn.140001770
mov byte [rsp + 0x1a7], 0
mov dword [rsp + 0x134], 1
jmp 0x1400646ec
mov dword [rsp + 0x10c], 0
mov rcx, qword [rsp + 0x158]
lea rdx, [rsp + 0x10c]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp eax, 0
jne 0x14006464f
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xc8]
mov edx, eax
call fcn.140023990
lea rcx, [rsp + 0xa8]
lea rdx, [0x140121333]
mov r8d, 0x3c
call fcn.14002f4b0
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0xa8]
lea r8, [rsp + 0xc8]
call fcn.140013d00
mov rcx, qword [rsp + 0x198]
add rcx, 0xc0
lea rdx, [rsp + 0xe8]
call fcn.140015f40
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0x38], rax
call fcn.140001770
lea rcx, [rsp + 0xa8]
call fcn.140001770
lea rcx, [rsp + 0xc8]
call fcn.140001770
mov byte [rsp + 0x1a7], 0
mov dword [rsp + 0x134], 1
jmp 0x1400646ec
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x10c], 0
je 0x1400646cd
lea rcx, [rsp + 0x88]
lea rdx, [0x140121370]
mov r8d, 0x3d
call fcn.14002f4b0
mov rax, qword [rsp + 0x198]
add rax, 0xc0
mov rcx, rax
lea rdx, [rsp + 0x88]
call fcn.140015f40
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x30], rax
call fcn.140001770
mov byte [rsp + 0x1a7], 0
mov dword [rsp + 0x134], 1
jmp 0x1400646ec
cmp dword [rsp + 0x168], 0
setne al
and al, 1
mov byte [rsp + 0x1a7], al
mov dword [rsp + 0x134], 1
lea rcx, [rsp + 0x160]
call fcn.14006b7f0
mov rcx, qword [rsp + 0x80]
call fcn.140001770
mov al, byte [rsp + 0x1a7]
and al, 1
movzx eax, al
add rsp, 0x1a8
ret