Function at 0x140063700
Capabilities:
Create thread

Disassembly:
push rsi
sub rsp, 0x1c0
mov eax, dword [rsp + 0x1f8]
mov r10w, word [rsp + 0x1f0]
mov qword [rsp + 0x1b0], r8
mov qword [rsp + 0x1a8], rdx
mov qword [rsp + 0x1a0], rcx
lea rcx, [rsp + 0x168]
mov qword [rsp + 0x88], r9
mov dword [rsp + 0x84], eax
mov word [rsp + 0x82], r10w
call fcn.14006b820
mov rcx, qword [rsp + 0x1a0]
mov rcx, qword [rcx]
mov qword [rsp + 0x168], rcx
lea rcx, [rsp + 0x168]
add rcx, 0x10
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0x78], rax
call fcn.1400139a0
xor r11d, r11d
mov ecx, r11d
xor r11d, r11d
mov r10w, word [rsp + 0x1f0]
mov word [rsp + 0x198], r10w
mov esi, dword [rsp + 0x1f8]
mov dword [rsp + 0x19c], esi
lea rdx, [rsp + 0x168]
mov qword [rsp + 0x70], rcx
mov r8, qword [rsp + 0x70]
mov qword [rsp + 0x68], rdx
mov rdx, r8
lea r8, [0x1400663e0]
mov r9, qword [rsp + 0x68]
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x5c], r11d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x160], rax
cmp qword [rsp + 0x160], 0
jne 0x140063872
lea rcx, [rsp + 0x140]
lea rdx, [0x1401213ae]
mov r8d, 0x44
call fcn.14002f4b0
mov rax, qword [rsp + 0x1b0]
add rax, 0xc0
mov rcx, rax
lea rdx, [rsp + 0x140]
call fcn.140015f40
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x50], rax
call fcn.140001770
mov byte [rsp + 0x1bf], 0
mov dword [rsp + 0x13c], 1
jmp 0x140063ab1
mov edx, dword [0x140162ae8]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140063937
mov rax, qword [rsp + 0x1a0]
cmp qword [rax], 0
je 0x1400638b4
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x160]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, [0x140162970]
mov dword [rsp + 0x4c], eax
call fcn.140069830
lea rcx, [rsp + 0x118]
lea rdx, [0x1401213f3]
mov r8d, 0x42
call fcn.14002f4b0
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xc0
lea rdx, [rsp + 0x118]
call fcn.140015f40
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x40], rax
call fcn.140001770
mov byte [rsp + 0x1bf], 0
mov dword [rsp + 0x13c], 1
jmp 0x140063ab1
mov dword [rsp + 0x114], 0
mov rcx, qword [rsp + 0x160]
lea rdx, [rsp + 0x114]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp eax, 0
jne 0x140063a0d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xd0]
mov edx, eax
call fcn.140023990
lea rcx, [rsp + 0xb0]
lea rdx, [0x140121436]
mov r8d, 0x3c
call fcn.14002f4b0
lea rcx, [rsp + 0xf0]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0xd0]
call fcn.140013d00
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xc0
lea rdx, [rsp + 0xf0]
call fcn.140015f40
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0x38], rax
call fcn.140001770
lea rcx, [rsp + 0xb0]
call fcn.140001770
lea rcx, [rsp + 0xd0]
call fcn.140001770
mov byte [rsp + 0x1bf], 0
mov dword [rsp + 0x13c], 1
jmp 0x140063ab1
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x114], 0
je 0x140063a8b
lea rcx, [rsp + 0x90]
lea rdx, [0x140121473]
mov r8d, 0x3d
call fcn.14002f4b0
mov rax, qword [rsp + 0x1b0]
add rax, 0xc0
mov rcx, rax
lea rdx, [rsp + 0x90]
call fcn.140015f40
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x30], rax
call fcn.140001770
mov byte [rsp + 0x1bf], 0
mov dword [rsp + 0x13c], 1
jmp 0x140063ab1
mov rax, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x1a8]
mov qword [rcx], rax
mov byte [rsp + 0x1bf], 1
mov dword [rsp + 0x13c], 1
lea rcx, [rsp + 0x168]
call fcn.14006b880
mov rcx, qword [rsp + 0x88]
call fcn.140001770
mov al, byte [rsp + 0x1bf]
and al, 1
movzx eax, al
add rsp, 0x1c0
pop rsi
ret