Function at 0x140019f80
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rbx
push rdi
push r14
sub rsp, 0x900
cmp byte [rcx + 0x74], 0
mov r14, rdx
mov rbx, rcx
jne 0x14001a304
mov qword [rax + 8], rbp
lea rcx, [rsp + 0x30]
mov qword [rax + 0x18], r15
call fcn.140011260
xor r15d, r15d
mov r8, qword [rax]
mov r9, qword [rax + 8]
lea ebp, [r15 - 1]
mov qword [rax], r15
mov qword [rax + 8], r15
mov rdi, qword [rbx + 8]
mov qword [rbx], r8
mov qword [rbx + 8], r9
test rdi, rdi
je 0x14001a00c
mov eax, ebp
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14001a00c
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x140036618]
mov eax, ebp
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14001a00c
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x140036618]
mov rdi, qword [rsp + 0x38]
test rdi, rdi
je 0x14001a04d
mov eax, ebp
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14001a04d
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x140036618]
mov eax, ebp
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14001a04d
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x140036618]
mov rcx, qword [rbx]
mov qword [rsp + 0x928], rsi
test rcx, rcx
jne 0x14001a067
mov edi, 0x80004005
jmp 0x14001a295
xor eax, eax
mov dword [rsp + 0x28], reloc.OLEAUT32.dll_SafeArrayAccessData
mov r8d, 0x22f
mov qword [rsp + 0x4c], rax
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x40], 1
lea r9d, [rax + 1]
mov dword [rsp + 0x48], SafeArrayGetLBound
mov dword [rsp + 0x20], r15d
call fcn.1400113f0
mov edi, eax
test eax, eax
js 0x14001a295
cmp dword [rsp + 0x4c], r15d
mov edi, r15d
movsd xmm0, qword [rsp + 0x4c]
mov eax, dword [rsp + 0x54]
sete dil
movsd qword [rbx + 0x20], xmm0
mov dword [rbx + 0x28], eax
test edi, edi
js 0x14001a293
cmp dword [rbx + 0x20], r15d
je 0x14001a0e3
mov dword [rbx + 0x80], 1
mov edi, r15d
lea rsi, [rbx + 0x30]
nop word [rax + rax]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsi], rax
test rax, rax
je 0x14001a05d
inc edi
add rsi, 8
cmp edi, 6
jl 0x14001a0f0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbx + 0x60], rax
test rax, rax
jne 0x14001a13a
mov edi, 0x80004005
jmp 0x14001a295
mov esi, r15d
nop dword [rax]
mov rcx, qword [rbx + 0x38]
mov dword [rsp + 0x270], r15d
mov dword [rsp + 0x278], reloc.OLEAUT32.dll_SafeArrayGetDim
test rcx, rcx
jne 0x14001a163
mov edi, 0x80004005
jmp 0x14001a1ae
mov rax, qword [rbx + 0x58]
test rax, rax
jne 0x14001a173
mov edi, 0x80004005
jmp 0x14001a1ae
mov qword [rsp + 0x27c], rcx
lea rdx, [rsp + 0x270]
mov rcx, qword [rbx]
xor r9d, r9d
mov dword [rsp + 0x28], reloc.OLEAUT32.dll_SafeArrayAccessData
mov r8d, 0x22f
mov qword [rsp + 0x284], rax
mov dword [rsp + 0x20], 1
call fcn.1400113f0
mov edi, eax
test edi, edi
jns 0x14001a20e
mov rcx, qword [rbx]
mov dword [rsp + 0x4a0], 4
mov dword [rsp + 0x4a8], 4
test rcx, rcx
je 0x14001a1f3
mov dword [rsp + 0x28], reloc.OLEAUT32.dll_SafeArrayAccessData
lea rdx, [rsp + 0x4a0]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
mov r8d, 0x22f
call fcn.1400113f0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0xa
jl 0x14001a140
jmp 0x14001a295
mov qword [rsp + 0x28], r15
lea r8, [0x14001add0]
mov r9, rbx
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbx + 0x68], rax
test rax, rax
jne 0x14001a23c
mov edi, 0x80004005
jmp 0x14001a295
call fcn.140008040
mov qword [rbx + 0x18], rax
test rax, rax
jne 0x14001a28d
mov rcx, qword [rbx]
mov dword [rsp + 0x6d0], 4
mov dword [rsp + 0x6d8], 4
test rcx, rcx
je 0x14001a291
mov dword [rsp + 0x28], reloc.OLEAUT32.dll_SafeArrayAccessData
lea rdx, [rsp + 0x6d0]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
mov r8d, 0x22f
call fcn.1400113f0
jmp 0x14001a291
mov byte [rbx + 0x74], 1
test edi, edi
je 0x14001a2da
mov rsi, qword [rbx + 8]
mov qword [rbx], r15
mov qword [rbx + 8], r15
test rsi, rsi
je 0x14001a2da
mov eax, ebp
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x14001a2da
mov rax, qword [rsi]
mov rcx, rsi
mov rax, qword [rax]
call qword [0x140036618]
lock xadd dword [rsi + 0xc], ebp
cmp ebp, 1
jne 0x14001a2da
mov rdx, qword [rsi]
mov rcx, rsi
mov rax, qword [rdx + 8]
call qword [0x140036618]
mov r15, qword [rsp + 0x930]
mov rsi, qword [rsp + 0x928]
mov rbp, qword [rsp + 0x920]
test edi, edi
jns 0x14001a304
mov eax, edi
add rsp, 0x900
pop r14
pop rdi
pop rbx
ret
mov rcx, qword [rbx + 0x10]
test rcx, rcx
jne 0x14001a31e
mov eax, 0x80070057
add rsp, 0x900
pop r14
pop rdi
pop rbx
ret
mov rdx, r14
add rsp, 0x900
pop r14
pop rdi
pop rbx
jmp fcn.140012dd0