Function at 0x75b80d508
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov r12d, r9d
mov r15, r8
mov r14, rdx
mov rbp, rcx
mov rcx, qword [0x75b91a090]
lea rsi, [0x75b91a090]
cmp rcx, rsi
je 0x75b80d55f
test byte [rcx + 0x1c], 4
je 0x75b80d55f
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e2ed8]
mov edx, 0x30
call fcn.75b803a00
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.75b806084
mov ebx, eax
test eax, eax
jns 0x75b80d5af
mov rcx, qword [0x75b91a090]
cmp rcx, rsi
je 0x75b80d5a5
mov esi, 1
test byte [rcx + 0x1c], sil
je 0x75b80d5a5
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x30]
mov r9d, eax
lea r8, [0x75b8e2ed8]
call fcn.75b803a20
mov rbp, qword [rsp + 0x30]
jmp 0x75b80d908
mov ebx, 0x70
mov ecx, ebx
call sym.mpclient.dll_MpAllocMemory
mov rdi, rax
test rax, rax
jne 0x75b80d5f2
mov ebx, 0x8007000e
mov rcx, qword [0x75b91a090]
cmp rcx, rsi
je 0x75b80d5a5
lea esi, [rax + 1]
test byte [rcx + 0x1c], sil
je 0x75b80d5a5
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0x32]
lea r8, [0x75b8e2ed8]
call fcn.75b803a00
jmp 0x75b80d5a5
mov r8, rbx
xor edx, edx
mov rcx, rdi
call fcn.75b8becf0
lea rax, [rdi + 0x38]
mov qword [rdi + 0x18], rbp
mov qword [rax + 8], rax
mov esi, 1
mov qword [rax], rax
lea rax, [rdi + 0x48]
mov qword [rax + 8], rax
mov qword [rax], rax
mov rax, qword [r14]
and qword [r14], 0
mov qword [rdi + 0x20], rax
mov rax, qword [rsp + 0x30]
mov dword [rdi], esi
lock add dword [rax], esi
mov r8, qword [rsp + 0x30]
lea rdx, [rdi + 8]
lea rcx, [r8 + 0x30]
mov rax, qword [rcx + 8]
mov qword [rdx], rcx
mov qword [rdx + 8], rax
mov qword [rax], rdx
mov qword [rcx + 8], rdx
test r8, r8
je 0x75b80d666
mov rcx, qword [r8 + 8]
test rcx, rcx
je 0x75b80d666
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ebp, ebp
lea ecx, [rbp + 0x18]
call sym.mpclient.dll_MpAllocMemory
mov qword [rdi + 0x28], rax
test rax, rax
jne 0x75b80d6b7
mov ebx, 0x8007000e
mov rcx, qword [0x75b91a090]
lea r14, [0x75b91a090]
cmp rcx, r14
je 0x75b80d900
test byte [rcx + 0x1c], sil
je 0x75b80d900
lea edx, [rbp + 0x33]
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e2ed8]
call fcn.75b803a00
jmp 0x75b80d900
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
xor r9d, r9d
mov qword [rax + 0x10], rcx
xor r8d, r8d
mov edx, esi
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rcx, qword [rdi + 0x28]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x28]
cmp qword [rax + 0x10], rbp
jne 0x75b80d718
call fcn.75b8998c4
mov ebx, eax
mov rcx, qword [0x75b91a090]
lea r14, [0x75b91a090]
cmp rcx, r14
je 0x75b80d900
test byte [rcx + 0x1c], sil
je 0x75b80d900
mov edx, 0x34
mov r9d, eax
jmp 0x75b80d8f0
lea rcx, [rdi + 0x58]
mov rdx, r15
call fcn.75b81ada8
mov ebx, eax
test eax, eax
jns 0x75b80d752
mov rcx, qword [0x75b91a090]
lea r14, [0x75b91a090]
cmp rcx, r14
je 0x75b80d900
test byte [rcx + 0x1c], sil
je 0x75b80d900
mov edx, 0x35
jmp 0x75b80d710
lea rcx, [rdi + 0x60]
mov r8, rdi
lea rdx, [0x75b80d4f0]
call fcn.75b81a4b0
mov ebx, eax
test eax, eax
jns 0x75b80d796
mov rcx, qword [0x75b91a090]
lea r14, [0x75b91a090]
cmp rcx, r14
je 0x75b80d900
test byte [rcx + 0x1c], sil
je 0x75b80d900
mov edx, 0x36
jmp 0x75b80d710
mov r14, qword [rsp + 0x80]
test r14, r14
je 0x75b80d800
mov ecx, 0x10
call sym.mpclient.dll_MpAllocMemory
mov qword [rdi + 0x30], rax
test rax, rax
jne 0x75b80d7e4
mov ebx, 0x8007000e
mov rcx, qword [0x75b91a090]
lea r14, [0x75b91a090]
cmp rcx, r14
je 0x75b80d900
test byte [rcx + 0x1c], sil
je 0x75b80d900
lea edx, [rax + 0x37]
jmp 0x75b80d6a2
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rcx, qword [rdi + 0x30]
mov rax, qword [r14]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x30]
mov rax, qword [r14 + 8]
mov qword [rcx + 8], rax
test r12d, r12d
je 0x75b80d870
mov rax, qword [rdi + 0x28]
lea r8, [fcn.75b80db10]
add rax, 8
mov r9, rdi
mov qword [rsp + 0x28], rax
xor edx, edx
and dword [rsp + 0x20], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rdi + 0x28]
mov qword [rcx], rax
mov rax, qword [rdi + 0x28]
cmp qword [rax], rbp
jne 0x75b80d91e
call fcn.75b8998c4
mov ebx, eax
mov rcx, qword [0x75b91a090]
lea r14, [0x75b91a090]
cmp rcx, r14
je 0x75b80d900
test byte [rcx + 0x1c], sil
je 0x75b80d900
mov edx, 0x38
jmp 0x75b80d710
mov rcx, qword [0x75b91a090]
lea r14, [0x75b91a090]
cmp rcx, r14
je 0x75b80d89e
test byte [rcx + 0x1c], 4
je 0x75b80d89e
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e2ed8]
mov edx, 0x39
call fcn.75b803a00
mov rcx, rdi
call fcn.75b80db10
mov ebx, eax
mov rcx, qword [0x75b91a090]
cmp rcx, r14
je 0x75b80d8d9
test byte [rcx + 0x1c], 4
je 0x75b80d8d9
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e2ed8]
mov edx, 0x3a
mov r9d, eax
call fcn.75b803a20
mov rcx, qword [0x75b91a090]
test ebx, ebx
jns 0x75b80d91e
cmp rcx, r14
je 0x75b80d900
test byte [rcx + 0x1c], sil
je 0x75b80d900
mov edx, 0x3b
mov r9d, ebx
mov rcx, qword [rcx + 0x10]
lea r8, [0x75b8e2ed8]
call fcn.75b803a20
mov rcx, rdi
call fcn.75b80d94c
test rbp, rbp
je 0x75b80d929
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x75b80d929
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x75b80d929
mov rax, qword [rsp + 0x88]
mov qword [rax], rdi
mov rbp, qword [rsp + 0x68]
mov eax, ebx
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop r12
ret