Function at 0x14008b640
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1403a8088]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r13, rcx
mov qword [rbp - 0x49], rcx
xor r14d, r14d
mov qword [rcx + 0xa80], r14
mov dword [rcx + 0xa78], r14d
mov qword [0x14045fff0], r14
lea rax, [0x14045ffe0]
cmp qword [0x14045fff8], 0x10
cmovae rax, qword [0x14045ffe0]
mov byte [rax], r14b
mov qword [0x140460030], r14
lea rbx, [0x140460020]
mov rax, rbx
cmp qword [0x140460038], 0x10
cmovae rax, qword [0x140460020]
mov byte [rax], r14b
call fcn.14008aad0
test eax, eax
je 0x14008ba90
cmp qword [0x140460030], r14
je 0x14008ba90
cmp qword [0x14045fff0], r14
je 0x14008ba90
cmp qword [0x140460038], 0x10
cmovae rbx, qword [0x140460020]
mov eax, 1
mov dword [rsp + 0x20], eax
xor edx, edx
lea r9d, [r14 + 2]
lea r8d, [r14 + 3]
mov rcx, rbx
call fcn.140262870
mov r15, rax
xor eax, eax
mov qword [rbp + 0x1f], rax
mov ecx, dword [r15 + 4]
add ecx, 8
lea rax, vtable.Gdiplus::Bitmap.0
mov qword [rbp + 0xf], rax
mov qword [rsp + 0x48], r14
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov r9d, 0x26200a
xor r8d, r8d
mov edx, ecx
call qword [sym.imp.gdiplus.dll_GdipCreateBitmapFromScan0]
mov esi, eax
mov r12, qword [rsp + 0x48]
mov qword [rbp + 0x17], r12
xor eax, eax
mov qword [rbp + 7], rax
mov qword [rsp + 0x48], r14
lea rdx, [rsp + 0x48]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImageGraphicsContext]
mov ebx, eax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 1], rax
or edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.gdiplus.dll_GdipGraphicsClear]
test eax, eax
cmovne ebx, eax
mov dword [rbp + 7], ebx
mov rdi, qword [r15 + 8]
mov eax, dword [r15 + 4]
test eax, eax
jle 0x14008b80d
xor r13d, r13d
nop dword [rax + rax]
mov ebx, r13d
test eax, eax
jle 0x14008b7fd
nop word [rax + rax]
test byte [rdi], 1
mov r9d, 0xffffff
cmovne r9d, r13d
lea r8d, [r14 + 4]
lea edx, [rbx + 4]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipBitmapSetPixel]
test eax, eax
cmovne esi, eax
inc rdi
inc ebx
cmp ebx, dword [r15 + 4]
jl 0x14008b7d0
inc r14d
mov eax, dword [r15 + 4]
cmp r14d, eax
jl 0x14008b7c0
mov r13, qword [rbp - 0x49]
xor ebx, ebx
mov dword [rbp - 0x51], ebx
lea rdx, [rbp - 0x51]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImageWidth]
test eax, eax
cmovne esi, eax
mov dword [rbp - 0x49], ebx
lea rdx, [rbp - 0x49]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImageHeight]
test eax, eax
cmovne esi, eax
mov qword [rbp - 0x79], rbx
xor eax, eax
mov qword [rbp - 0x2d], rax
mov qword [rbp - 0x1d], rax
mov qword [rbp - 0x15], rax
mov qword [rbp - 0xd], rax
mov dword [rbp - 0x31], Ordinal_46
mov ecx, dword [rbp - 0x51]
mov dword [rbp - 0x2d], ecx
mov edi, dword [rbp - 0x49]
mov eax, edi
neg eax
mov dword [rbp - 0x29], eax
mov qword [rbp - 0x25], 0x200001
imul edi, ecx
shl edi, 2
mov dword [rbp - 0x1d], edi
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x79]
xor r8d, r8d
lea rdx, [rbp - 0x31]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateDIBSection]
mov r14, rax
mov dword [rbp - 0x49], ebx
lea rdx, [rbp - 0x49]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImageHeight]
test eax, eax
cmovne esi, eax
mov ebx, dword [rbp - 0x49]
mov dword [rbp - 0x51], 0
lea rdx, [rbp - 0x51]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImageWidth]
test eax, eax
cmovne esi, eax
xor eax, eax
mov qword [rbp - 0x41], rax
mov eax, dword [rbp - 0x51]
mov dword [rbp - 0x39], eax
mov dword [rbp - 0x35], ebx
lea rdx, [rbp - 0x49]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImagePixelFormat]
test eax, eax
cmovne esi, eax
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x49]
mov r8d, 1
lea rdx, [rbp - 0x41]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipBitmapLockBits]
test eax, eax
cmovne esi, eax
movsxd r8, edi
mov rdx, qword [rbp - 0x61]
mov rcx, qword [rbp - 0x79]
call fcn.140278ed0
lea rdx, [rbp - 0x71]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipBitmapUnlockBits]
test eax, eax
cmovne esi, eax
mov rcx, r15
call fcn.140262970
mov r8b, 1
lea rdx, [0x140332870]
lea rcx, [r13 + 0x770]
call fcn.1400c8110
test rax, rax
je 0x14008b96d
mov rcx, rax
call fcn.140100700
lea rdx, [0x140332870]
lea rcx, [r13 + 0x770]
call fcn.1400c8420
xor edi, edi
mov dword [rbp - 0x49], edi
lea rdx, [rbp - 0x49]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImageHeight]
test eax, eax
cmovne esi, eax
mov ebx, dword [rbp - 0x49]
mov dword [rbp - 0x51], edi
lea rdx, [rbp - 0x51]
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipGetImageWidth]
test eax, eax
cmovne esi, eax
mov dword [rbp + 0x1f], esi
lea rcx, [r13 + 0x58]
mov byte [rsp + 0x28], dil
mov dword [rsp + 0x20], ebx
mov r9d, dword [rbp - 0x51]
mov r8, r14
lea rdx, [0x140332858]
call fcn.1400c5960
mov rbx, qword [r13 + 0xa68]
mov rdx, qword [rbx + 0x438]
lea r10, str.qrloginCode
mov ecx, edi
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
cmp ax, word [r10 + rcx*2]
jne 0x14008ba04
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r10 + rcx*2 + 2]
jne 0x14008ba04
add rcx, 2
cmp rcx, 0xc
jne 0x14008b9e0
jmp 0x14008ba1f
or r8d, 0xffffffff
mov rdx, r10
lea rcx, [rbx + 0x438]
call fcn.1400c76f0
mov rcx, rbx
call fcn.1400db070
mov rbx, qword [r13 + 0xa68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x200]
test al, al
je 0x14008ba55
mov byte [rbx + 0x178], 1
mov rcx, rbx
call fcn.1400db070
mov rax, qword [rbx + 0x58]
test rax, rax
je 0x14008ba55
mov byte [rax + 0x1dd], 1
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x14008bae0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r13 + 0xa80], rax
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
nop
mov rcx, r12
call qword [sym.imp.gdiplus.dll_GdipDisposeImage]
jmp 0x14008baa5
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [r13 + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14012a2b0
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret