Function at 0x14005aad8
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x20], r9
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3f]
sub rsp, 0x90
xor esi, esi
xor r15d, r15d
xor r14b, r14b
and qword [rbp - 0x19], rsi
and qword [rbp - 9], rsi
mov rbx, r9
mov rdi, rcx
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x21], r15
mov byte [rbp - 0x28], sil
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
cmp rcx, r12
je 0x14005ab5e
test byte [rcx + 0x1c], 1
je 0x14005ab5e
cmp byte [rcx + 0x19], 4
jb 0x14005ab5e
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x10a
call fcn.14001dd24
mov rcx, qword [0x14017d3a8]
test rbx, rbx
jne 0x14005ab6d
mov ebx, 0x80004003
jmp 0x14005afc0
mov r15, qword [rbp + 0x67]
test r15, r15
jne 0x14005ab83
mov ebx, 0x80004003
mov r15, rsi
jmp 0x14005afc0
mov r13, qword [rbp + 0x77]
test r13, r13
je 0x14005ab76
mov r12, qword [rbp + 0xaf]
test r12, r12
jne 0x14005aba5
mov ebx, 0x80004003
mov r15, rsi
jmp 0x14005afb9
and qword [r12], rsi
lea rcx, [0x14017e4d8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r14b, 1
mov byte [rbp - 0x29], r14b
cmp qword [rdi + 0x10], rsi
jne 0x14005abd0
mov ebx, 0x8078000a
mov r15, rsi
jmp 0x14005afb2
mov r14, qword [rbp + 0x97]
test r14, r14
cmove r14, qword [rdi + 0x10]
cmp byte [rdi + 0x18], sil
je 0x14005ac3c
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
cmp rcx, r12
je 0x14005ac2b
test byte [rcx + 0x1c], 1
je 0x14005ac2b
cmp byte [rcx + 0x19], 2
jb 0x14005ac2b
mov eax, dword [rdi + 8]
mov r9d, dword [rdi + 0x38]
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x10b
mov dword [rsp + 0x20], eax
call fcn.1400285b4
mov rcx, qword [0x14017d3a8]
mov ebx, 0x80780017
mov r15, rsi
mov r14b, byte [rbp - 0x29]
jmp 0x14005afc0
lea rcx, [rbp - 0x11]
call fcn.140066d70
mov ebx, eax
test eax, eax
jns 0x14005ac99
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
cmp rcx, r12
je 0x14005ac93
test byte [rcx + 0x1c], 1
je 0x14005ac93
cmp byte [rcx + 0x19], 2
jb 0x14005ac93
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x10c
mov r9d, eax
call fcn.14001de24
mov rsi, qword [rbp - 0x11]
mov rcx, qword [0x14017d3a8]
mov r15, qword [rbp - 0x21]
jmp 0x14005ac33
mov rsi, qword [rbp - 0x11]
jmp 0x14005ac8d
mov rsi, qword [rbp - 0x11]
mov rcx, rsi
mov rax, qword [rsi]
call qword [rax + reloc.ole32.dll_CoTaskMemAlloc]
lea rbx, [rsi + 0x10]
mov rdx, r14
mov rcx, rbx
mov qword [rbp - 0x11], rbx
call fcn.14001eb1c
mov rdx, qword [rbp + 0x9f]
mov rcx, rbx
call fcn.14001e718
mov ebx, eax
test eax, eax
js 0x14005afaa
mov rax, qword [rsi]
lea r8, [rbp - 0x19]
lea rdx, [0x140002f00]
mov rcx, rsi
call qword [rax]
mov ebx, eax
test eax, eax
jns 0x14005ad27
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
cmp rcx, r12
je 0x14005ac8d
test byte [rcx + 0x1c], 1
je 0x14005ac8d
cmp byte [rcx + 0x19], 2
jb 0x14005ac8d
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x10d
mov r9d, eax
call fcn.14001de24
jmp 0x14005ac86
lea rdx, [rbp - 9]
mov rcx, r15
call fcn.1400a97c0
mov r14, qword [rbp - 9]
xor r15d, r15d
mov ebx, eax
test eax, eax
jns 0x14005ad88
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
cmp rcx, r12
je 0x14005af8c
test byte [rcx + 0x1c], 1
je 0x14005af8c
cmp byte [rcx + 0x19], 2
jb 0x14005af8c
mov edx, 0x10e
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov r9d, eax
call fcn.14001de24
jmp 0x14005af85
mov rax, qword [rdi]
lea r9, [rbp - 0x28]
mov r8d, 5
mov rdx, r14
mov rcx, rdi
mov qword [rsp + 0x20], r15
call qword [rax + DeleteCriticalSection]
mov ebx, eax
test eax, eax
jns 0x14005ade8
cmp eax, 0x80780057
jne 0x14005aed3
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x14005ade8
test byte [rcx + 0x1c], 1
je 0x14005ade8
cmp byte [rcx + 0x19], 4
jb 0x14005ade8
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x10f
call fcn.14001dd24
mov rax, qword [rbp + 0x4f]
mov r9d, dword [rbp + 0x57]
lea r8, [rbp - 9]
mov rdx, rdi
mov rcx, rsi
movups xmm0, xmmword [rax]
mov eax, dword [rbp + 0xa7]
mov dword [rsp + 0x58], eax
mov al, byte [rbp + 0x8f]
movdqu xmmword [rbp - 9], xmm0
mov byte [rsp + 0x50], al
mov eax, dword [rbp + 0x87]
mov dword [rsp + 0x48], eax
mov al, byte [rbp + 0x7f]
mov byte [rsp + 0x40], al
mov al, byte [rbp + 0x6f]
mov qword [rsp + 0x38], r13
mov byte [rsp + 0x30], al
mov rax, qword [rbp + 0x5f]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
call fcn.140082f30
mov ebx, eax
test eax, eax
js 0x14005af7e
lea r8, [0x140085240]
mov r9, rsi
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15, rax
test rax, rax
jne 0x14005af08
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
cmp rcx, r12
je 0x14005aec0
test byte [rcx + 0x1c], 1
je 0x14005aec0
cmp byte [rcx + 0x19], 2
jb 0x14005aec0
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x111
mov r9d, eax
call fcn.14001de24
mov rcx, qword [0x14017d3a8]
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
jmp 0x14005af8c
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
cmp rcx, r12
je 0x14005af8c
test byte [rcx + 0x1c], 1
je 0x14005af8c
cmp byte [rcx + 0x19], 2
jb 0x14005af8c
mov edx, 0x110
jmp 0x14005ad70
cmp qword [rdi + 0x28], 0
mov byte [rdi + 0x18], 1
jne 0x14005af1a
cmp qword [rdi + 0x30], 0
je 0x14005af32
lea r8, [0x140005878]
lea rcx, [0x140005730]
mov edx, 0x163c
call fcn.1400a8be8
mov rcx, qword [rbp - 0x19]
mov rax, qword [rbp - 0x11]
xor esi, esi
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rcx
mov rax, qword [rcx]
call qword [rax + reloc.ole32.dll_CoTaskMemAlloc]
mov rax, qword [rbp - 0x19]
and qword [rbp - 0x19], rsi
mov dword [rdi + 0x38], 5
lea rcx, [0x14017e4d8]
mov byte [rbp - 0x29], sil
mov qword [r12], rax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
jmp 0x14005af8c
lea r12, [0x14017d3a8]
mov rcx, qword [0x14017d3a8]
test r14, r14
je 0x14005ac33
mov rcx, r14
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x14017d3a8]
jmp 0x14005ac33
mov r15, qword [rbp - 0x21]
mov r14b, byte [rbp - 0x29]
mov rcx, qword [0x14017d3a8]
lea r12, [0x14017d3a8]
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x14005afd9
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + CoRevokeClassObject]
mov rcx, qword [0x14017d3a8]
test r15, r15
je 0x14005afee
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14017d3a8]
test rsi, rsi
je 0x14005b003
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + CoRevokeClassObject]
mov rcx, qword [0x14017d3a8]
test ebx, ebx
jns 0x14005b037
cmp rcx, r12
je 0x14005b05d
test byte [rcx + 0x1c], 1
je 0x14005b037
cmp byte [rcx + 0x19], 2
jb 0x14005b037
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x112
mov r9d, ebx
call fcn.14001de24
mov rcx, qword [0x14017d3a8]
cmp rcx, r12
je 0x14005b05d
test byte [rcx + 0x1c], 1
je 0x14005b05d
cmp byte [rcx + 0x19], 4
jb 0x14005b05d
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400068c8]
mov edx, 0x113
call fcn.14001dd24
test r14b, r14b
je 0x14005b06f
lea rcx, [0x14017e4d8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, ebx
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret