Function at 0x14006e2a0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1403486d0]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r14, r9
movzx r15d, r8w
mov rsi, rdx
mov r13, qword [rbp + 0x2a8]
mov rbx, qword [rbp + 0x2b0]
mov qword [rsp + 0x40], rbx
mov rdi, qword [rbp + 0x2b8]
mov qword [rsp + 0x48], rdi
mov r12, qword [rbp + 0x2c0]
call fcn.1400c1f80
cmp dword [rax + 0x78], 7
jl 0x14006e34b
call fcn.1400c1f80
lea rcx, str.CProxyInfo::ShowProxyAuthDlg
mov qword [rsp + 0x30], rcx
lea rcx, [0x140273c80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], SafeArrayGetLBound
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________ENTER
mov edx, 7
mov rcx, rax
call fcn.1400c23b0
test rsi, rsi
je 0x14006e7e0
test r15w, r15w
je 0x14006e7e0
test r14, r14
je 0x14006e7e0
test r13, r13
je 0x14006e7e0
test rbx, rbx
je 0x14006e7e0
test rdi, rdi
je 0x14006e7e0
test r12, r12
je 0x14006e7e0
lea rcx, [rsp + 0x70]
call fcn.14006e890
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp word [rsi + r8*2], di
jne 0x14006e3b4
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.1400523d0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rcx, [rbp - 0x48]
call fcn.1400523d0
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14006e42c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e427
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006e57e
call fcn.1400e6a28
mov word [rbp - 0x28], r15w
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [r14 + r8*2], di
jne 0x14006e450
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.1400523d0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1400523d0
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14006e4c8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e4c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006e57e
call fcn.1400e6a28
cmp word [rbp + 0x290], di
setne byte [rbp + 1]
cmp word [rbp + 0x298], di
setne byte [rbp]
cmp word [rbp + 0x2a0], di
setne byte [rbp + 2]
mov byte [rbp + 3], 1
mov rdx, qword [r13]
test rdx, rdx
je 0x14006e58a
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
nop dword [rax]
inc rbx
cmp word [rdx + rbx*2], di
jne 0x14006e510
mov r8, rbx
lea rcx, [rsp + 0x50]
call fcn.1400523d0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rcx, [rbp + 8]
call fcn.1400523d0
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14006e58a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e585
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e585
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x50]
lea r8, [0x140072560]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14006e7ca
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14006e7ca
mov eax, dword [rsp + 0x64]
mov word [r12], ax
cmp eax, 1
jne 0x14006e7d4
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r14, qword [rbp + 0x18]
lea rsi, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rsi, qword [rbp + 8]
movabs r15, 0x7ffffffffffffffe
lea rcx, [rsp + 0x50]
cmp r14, 8
jae 0x14006e641
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], 7
jmp 0x14006e684
mov rbx, r14
or rbx, 7
cmp rbx, r15
cmova rbx, r15
lea rdx, [rbx + 1]
call fcn.1400521e0
mov qword [rsp + 0x50], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x68], rbx
lea rcx, [rsp + 0x50]
cmp rbx, 8
cmovae rcx, qword [rsp + 0x50]
mov qword [rsp + 0x60], r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [r13], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14006e6d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e6d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e6d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r14, qword [rbp + 0x38]
lea rsi, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rsi, qword [rbp + 0x28]
lea rcx, [rsp + 0x50]
cmp r14, 8
jae 0x14006e717
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], 7
jmp 0x14006e75a
mov rbx, r14
or rbx, 7
cmp rbx, r15
cmova rbx, r15
lea rdx, [rbx + 1]
call fcn.1400521e0
mov qword [rsp + 0x50], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x68], rbx
lea rcx, [rsp + 0x50]
cmp rbx, 8
cmovae rcx, qword [rsp + 0x50]
mov qword [rsp + 0x60], r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14006e7b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e7ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e7ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
movzx eax, byte [rbp + 3]
mov rcx, qword [rsp + 0x48]
mov word [rcx], ax
lea rcx, [rsp + 0x70]
call fcn.14006ebd0
jmp 0x14006e7e5
mov eax, 0xfffffffe
mov word [r12], ax
lea rcx, [rsp + 0x70]
call fcn.14006ebd0
jmp 0x14006e7e5
mov edi, 0x80070057
call fcn.1400c1f80
cmp dword [rax + 0x78], 7
jl 0x14006e831
call fcn.1400c1f80
lea rcx, str.CProxyInfo::ShowProxyAuthDlg
mov qword [rsp + 0x30], rcx
lea rcx, [0x140273c80]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayLock
lea r9, str.D:BWA29B6E26C_BE36_0MobileMeServices_237_srcrootCommonLogUtils.h
lea r8, str._________LEAVE
mov edx, 7
mov rcx, rax
call fcn.1400c23b0
nop
mov eax, edi
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1400e6b50
mov rbx, qword [rsp + 0x370]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret