Function at 0x140016de0
Capabilities:
Check if file exists
Create thread

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x398]
sub rsp, 0x470
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1400380f0]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov rdi, rcx
mov rdx, qword [rcx]
call fcn.1400173e0
test eax, eax
js 0x14001738b
cmp qword [rdi + 0x48], 0
jne 0x140016e3f
mov eax, 0x80004005
jmp 0x14001738b
xor r12d, r12d
mov word [rsp + 0x60], r12w
mov rdx, qword [rdi + 0x2f18]
test rdx, rdx
je 0x140016e69
lea r8, [rsp + 0x60]
mov rcx, 0xffffffff80000002
call fcn.1400162c0
test eax, eax
je 0x140016e86
mov rdx, qword [rdi + 0x2f18]
test rdx, rdx
je 0x140016e86
lea r8, [rsp + 0x60]
mov rcx, 0xffffffff80000001
call fcn.1400162c0
lea rcx, [rsp + 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x140016ee3
mov rbx, qword [rdi + 0x2f18]
xor edx, edx
lea r8d, [rdx + 8]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rdi + 0x2f38], rax
test rax, rax
je 0x140016ee3
lea rdx, str.CreateBoomerangClient
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rdi + 0x2f40], rax
test rax, rax
je 0x140016ee3
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8]
mov rcx, qword [rdi + 0x48]
mov rax, qword [rcx]
lea rdx, [rdi + 0x58]
mov r8d, 1
call qword [rax + 0x170]
mov rcx, qword [rdi + 0x48]
mov rax, qword [rcx]
lea rdx, [rdi + 0x488]
call qword [rax + 0x2b8]
mov rcx, qword [rdi + 0x48]
mov rax, qword [rcx]
mov rdx, qword [rdi + 0xca8]
call qword [rax + 0x2c8]
mov qword [rsp + 0x38], r12
mov rcx, qword [rdi + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
lea rdx, [0x140033fa8]
call qword [rax]
or rbx, 0xffffffffffffffff
test eax, eax
js 0x1400170ae
lea r8, [rdi + 0x260]
mov rax, rbx
inc rax
cmp word [r8 + rax*2], r12w
jne 0x140016f52
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r9, [rsp + 0x30]
mov edx, 6
call qword [rax + 0x18]
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x48], r12d
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x48]
mov edx, 0x20
call qword [rax + 0x18]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x48]
mov edx, 0x4009
call qword [rax + 0x18]
mov dword [rsp + 0x30], 4
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r8, [rdi + 0xcb0]
lea r9, [rsp + 0x30]
mov edx, 0x400a
call qword [rax + 0x18]
lea r8, [rdi + 0x690]
mov rax, rbx
inc rax
cmp word [r8 + rax*2], r12w
jne 0x140016fe4
mov dword [rsp + 0x30], eax
test eax, eax
je 0x14001700b
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r9, [rsp + 0x30]
mov edx, 0x400b
call qword [rax + 0x18]
lea r8, [rdi + 0x898]
mov rax, rbx
inc rax
cmp word [r8 + rax*2], r12w
jne 0x140017015
mov dword [rsp + 0x30], eax
test eax, eax
je 0x14001703c
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r9, [rsp + 0x30]
mov edx, 0x400c
call qword [rax + 0x18]
lea r8, [rdi + 0xaa0]
mov rax, rbx
inc rax
cmp word [r8 + rax*2], r12w
jne 0x140017046
mov dword [rsp + 0x30], eax
test eax, eax
je 0x14001706d
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r9, [rsp + 0x30]
mov edx, 0x400d
call qword [rax + 0x18]
mov rax, qword [rdi + 0x478]
test rax, rax
je 0x1400170a3
mov dword [rsp + 0x30], eax
lea r8, [rdi + 0x468]
cmp qword [r8 + 0x18], 8
jb 0x14001708e
mov r8, qword [r8]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r9, [rsp + 0x30]
mov edx, 0x4011
call qword [rax + 0x18]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x48], r12
mov rcx, qword [rdi + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x48]
lea rdx, [0x140033f78]
call qword [rax]
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140017109
mov r8, qword [rdi + 0x2f18]
test r8, r8
je 0x140017109
mov r10, qword [rcx]
mov r9, rbx
inc r9
cmp word [r8 + r9*2], 0
jne 0x1400170e4
lea rdx, [rdi + 0x2f20]
mov eax, dword [rdi + 0x2f2c]
mov dword [rsp + 0x20], eax
call qword [r10 + 0x20]
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140017114
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r14, qword [rdi + 0x2f60]
sub r14, qword [rdi + 0x2f58]
sar r14, 5
test r14, r14
je 0x14001723e
lea rcx, str.CESFontManager.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rdi + 0x2f48], rax
test rax, rax
je 0x14001716b
lea rdx, str.GetFontManagerHost
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140017161
call rax
jmp 0x140017164
mov rax, r12
mov qword [rdi + 0x2f50], rax
cmp qword [rdi + 0x2f50], 0
je 0x14001723e
mov eax, 8
mul r14
cmovo rax, rbx
mov rcx, rax
call fcn.14001ba3c
mov r15, rax
test rax, rax
je 0x14001723e
mov rbx, qword [rdi + 0x2f58]
cmp rbx, qword [rdi + 0x2f60]
je 0x1400171ef
mov rsi, rax
nop dword [rax]
mov ecx, 0x208
call fcn.14001ba3c
mov qword [rsi], rax
test rax, rax
je 0x1400171de
cmp qword [rbx + 0x18], 8
jb 0x1400171ce
mov r8, qword [rbx]
jmp 0x1400171d1
mov r8, rbx
mov edx, 0x104
mov rcx, rax
call fcn.14001c470
add rbx, 0x20
add rsi, 8
cmp rbx, qword [rdi + 0x2f60]
jne 0x1400171b0
mov rcx, qword [rdi + 0x2f50]
mov r9, qword [rcx]
mov rdx, qword [rdi + 0x2f60]
sub rdx, qword [rdi + 0x2f58]
sar rdx, 5
mov r8, r15
call qword [r9 + 0x28]
mov rbx, r12
test r14, r14
je 0x140017236
nop word [rax + rax]
mov rcx, qword [r15 + rbx*8]
test rcx, rcx
je 0x14001722e
call fcn.14001c174
inc rbx
cmp rbx, r14
jb 0x140017220
mov rcx, r15
call fcn.14001c174
lea rcx, str.GPUUtility.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rsi, rax
test rax, rax
je 0x1400172f3
lea rdx, str.GetGpuUtility4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400172ea
xor ecx, ecx
call rax
mov rbx, rax
test rax, rax
je 0x1400172ea
lea rdx, [rdi + 0x2f20]
mov r10, qword [rax]
mov r9d, dword [rdi + 0x2f28]
mov r8, qword [rdi + 0x2f18]
cmp qword [rdx], 0
jne 0x1400172a7
mov ecx, dword [rdi + 0x2f2c]
mov dword [rsp + 0x20], ecx
xor edx, edx
mov rcx, rax
jmp 0x1400172b4
mov eax, dword [rdi + 0x2f2c]
mov dword [rsp + 0x20], eax
mov rcx, rbx
call qword [r10 + 0x70]
test eax, eax
js 0x1400172d0
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax + 0x20]
mov dword [rdi + 0x2fa0], eax
lea rdx, str.ReleaseGpuUtility4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400172ea
mov rcx, rbx
call rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, rdi
call fcn.140018170
test eax, eax
js 0x14001738b
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rdi
lea r8, [0x1400188b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 0x27e0], rax
test rax, rax
jne 0x140017346
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x14001738b
movzx eax, ax
or eax, 0x80070000
jmp 0x14001738b
mov eax, dword [rsp + 0x40]
mov dword [rdi + 0x2f10], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rdi
lea r8, [0x140018e60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 0x27d8], rax
test rax, rax
je 0x140017332
mov eax, dword [rsp + 0x40]
mov dword [rdi + 0x2f14], eax
xor eax, eax
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.14001bab0
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret