Function at 0x140069690
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140164030]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rsi, r9
mov rbx, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], r9
mov rdi, qword [rsp + 0x98]
mov qword [rsp + 0x40], rdi
mov qword [rcx], rdx
mov byte [rcx + 8], r8b
mov byte [rcx + 0xa], 3
mov eax, dword [rsp + 0x90]
mov dword [rcx + 0x18], eax
xor ebp, ebp
mov dword [rcx + 0x20], ebp
mov qword [rcx + 0x28], 0xffffffffffffffff
mov qword [rcx + 0x30], 0xffffffffffffffff
mov qword [rcx + 0x38], rbp
add rcx, 0x40
mov rdx, rdi
call fcn.140013730
nop
mov rax, qword [rsp + 0xa0]
mov qword [rbx + 0x60], rax
lea rcx, [rbx + 0x68]
mov rdx, rsi
call fcn.140013730
nop
lea rcx, [rbx + 0x88]
mov qword [rcx], rbp
mov qword [rcx + 0x10], rbp
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rcx], bpl
mov byte [rbx + 0xd0], 0xff
mov word [rbx + 0xd1], bp
mov dword [rbx + 0xd3], ebp
mov word [rbx + 0xd7], bp
mov dword [rbx + 0xd9], ebp
mov qword [rbx + 0xdd], rbp
mov byte [rbx + 0xe5], 0xff
mov word [rbx + 0xe6], bp
mov dword [rbx + 0xe8], ebp
mov word [rbx + 0xec], bp
mov dword [rbx + 0xee], ebp
mov qword [rbx + 0xf2], rbp
mov byte [rbx + 0xfa], 0xff
mov word [rbx + 0xfb], bp
mov dword [rbx + 0xfd], ebp
mov word [rbx + 0x101], bp
mov dword [rbx + 0x103], ebp
mov qword [rbx + 0x107], rbp
mov byte [rbx + 0x10f], 0xff
mov word [rbx + 0x110], bp
mov dword [rbx + 0x112], ebp
mov word [rbx + 0x116], bp
mov dword [rbx + 0x118], ebp
mov qword [rbx + 0x11c], rbp
mov byte [rbx + 0x124], 0xff
mov word [rbx + 0x125], bp
mov dword [rbx + 0x127], ebp
mov word [rbx + 0x12b], bp
mov dword [rbx + 0x12d], ebp
mov qword [rbx + 0x131], rbp
mov byte [rbx + 0x139], 0xff
mov word [rbx + 0x13a], bp
mov dword [rbx + 0x13c], ebp
mov word [rbx + 0x140], bp
mov dword [rbx + 0x142], ebp
mov qword [rbx + 0x146], rbp
mov byte [rbx + 0x14e], 0xff
mov word [rbx + 0x14f], bp
mov dword [rbx + 0x151], ebp
mov word [rbx + 0x155], bp
mov dword [rbx + 0x157], ebp
mov qword [rbx + 0x15b], rbp
mov qword [rbx + 0x168], rbp
mov qword [rbx + 0x170], rbp
mov word [rbx + 0x178], bp
xor r8d, r8d
lea rdx, [0x140111ac0]
call fcn.140028190
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount64]
mov qword [rbx + 0x10], rax
lea rcx, [rbx + 0xa8]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx + 0xd0], xmm0
movups xmmword [rbx + 0xe0], xmm0
movups xmmword [rbx + 0xf0], xmm0
movups xmmword [rbx + 0x100], xmm0
movups xmmword [rbx + 0x110], xmm0
movups xmmword [rbx + 0x120], xmm0
movups xmmword [rbx + 0x130], xmm0
movups xmmword [rbx + 0x140], xmm0
movups xmmword [rbx + 0x150], xmm0
mov word [rbx + 0x160], ax
mov byte [rbx + 0x162], al
lea ecx, [rbp + 0x18]
call fcn.1400c2704
mov qword [rax], rbp
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbp
mov qword [rbx + 0x168], rax
cmp byte [rbx + 9], bpl
jne 0x140069932
mov byte [rbx + 9], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov qword [rbx + 0x30], rax
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], ebp
mov r9, rbx
lea r8, [0x14006a280]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rbx + 0x28], rax
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x14006996d
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140069968
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400699e3
mov rcx, r8
call fcn.1400c2470
mov qword [rsi + 0x10], rbp
mov qword [rsi + 0x18], 7
mov word [rsi], bp
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x1400699b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400699b2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400699e9
mov rcx, r8
call fcn.1400c2470
mov qword [rdi + 0x10], rbp
mov qword [rdi + 0x18], 7
mov word [rdi], bp
mov rax, rbx
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400c2450
mov rbx, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
call fcn.1400c8b64
nop
call fcn.1400c8b64
int3