Function at 0x14004a570
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0xe0
mov rax, qword [0x14014ab80]
xor rax, rsp
mov qword [rsp + 0xd0], rax
xor ebp, ebp
lea r8, [0x14004a840]
mov rdi, rcx
mov qword [rsp + 0x28], rbp
xor r9d, r9d
mov dword [rsp + 0x20], ebp
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
lea rax, [0x14004ac90]
mov qword [rsp + 0x70], 0x50
mov edx, 0x7f00
mov qword [rsp + 0x78], rax
xor ecx, ecx
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x88], rbp
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rsp + 0x90], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
xorps xmm0, xmm0
lea rbx, [0x140052928]
mov edx, 0x7f00
mov qword [rsp + 0x98], rax
xor ecx, ecx
movdqa xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], rbx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xb8], rax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rsp + 0x88]
mov r9d, 0x80000000
mov qword [rsp + 0x58], rbp
mov r8, rbx
mov qword [rsp + 0x50], rax
mov rdx, rbx
mov eax, dword [rsp + 0x6c]
xor ecx, ecx
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], rbp
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
lea edx, [rbp - 0x14]
mov r8d, 0x80020
mov rcx, rax
mov qword [rdi + 0x50], rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [rdi + 0x50]
lea r9d, [rbp + 2]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140056c30]
lea rdx, [rsp + 0xc0]
mov rcx, qword [rdi + 0x50]
movdqu xmmword [rsp + 0xc0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [rdi + 0x50]
lea edx, [rbp + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rsi, qword [rdi + 0x50]
lea ecx, [rbp + 0x20]
mov rdx, rdi
call sub.d3d9.dll_Direct3DCreate9Ex
test eax, eax
js 0x14004a809
lea rdx, [rdi + 0x10]
mov qword [rsp + 0x108], r14
mov qword [rdi + 0x1c], rbp
lea r14, [rdi + 8]
mov qword [rdi + 0x28], 1
lea r8d, [rbp + 1]
mov qword [rdi + 0x44], rbp
mov r9, rsi
mov eax, dword [rdi + 0xe0]
mov rcx, qword [rdi]
mov dword [rdx], eax
mov eax, dword [rdi + 0xe4]
mov qword [rsp + 0x38], r14
mov dword [rdi + 0x38], 1
mov qword [rdi + 0x30], rsi
mov dword [rdi + 0x24], ebp
mov dword [rdi + 0x18], 0x15
mov dword [rdi + 0x14], eax
mov dword [rdi + 0x3c], 1
mov dword [rdi + 0x40], 0x50
mov dword [rdi + 0x4c], 0x80000000
mov rax, qword [rcx]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], 0x40
call qword [rax + 0xa0]
test eax, eax
jns 0x14004a7a7
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14004a801
xor ecx, ecx
call fcn.140021730
call fcn.140023ed0
mov rbx, qword [rax + 0x50]
mov rcx, rbx
mov qword [rax + 0x18], rbp
call fcn.140037a80
movss xmm3, dword [0x140056a98]
lea rdx, [0x1400615a0]
mov qword [rsp + 0x28], rax
mov r8d, 0xe959c
mov rcx, rbx
mov qword [rsp + 0x20], rbp
call fcn.140035310
mov rcx, rsi
mov qword [rdi + 0x118], rax
call fcn.140045120
mov rcx, qword [r14]
call fcn.140044430
mov r14, qword [rsp + 0x108]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
call fcn.14004a900
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.14004b770
mov rbx, qword [rsp + 0x110]
add rsp, 0xe0
pop rdi
pop rsi
pop rbp
ret