Function at 0x140009dc0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov rdi, qword [rcx + 8]
mov rsi, rcx
mov r13, qword [rcx]
xor ebp, ebp
xor ecx, ecx
mov qword [rsp + 0xa8], rdi
mov edx, 0x7f00
mov ebx, ebp
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f8a
mov dword [0x1402f215c], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f03
mov dword [0x1402f2144], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f89
mov dword [0x1402f214c], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f8b
mov dword [0x1402f2168], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f01
mov dword [0x1402f2138], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f88
mov dword [0x1402f2150], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f86
mov dword [0x1402f2158], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f83
mov dword [0x1402f2160], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f85
mov dword [0x1402f2148], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f82
mov dword [0x1402f2140], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f84
mov dword [0x1402f216c], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f04
mov dword [0x1402f213c], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov edx, 0x7f02
mov dword [0x1402f2154], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call fcn.140008300
mov dword [0x1402f2164], eax
lea r14d, [rbp + 1]
mov eax, dword [0x1402cfb80]
test eax, eax
je 0x140009fa3
mov r15d, 0xc8
cmp ebx, r15d
jge 0x140009f9b
mov ecx, 0x32
add ebx, r14d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1402cfb80]
test eax, eax
jne 0x140009f79
cmp ebx, r15d
jl 0x140009fa3
test eax, eax
jne 0x14000a36d
cmp dword [0x1402cfbac], ebp
mov dword [0x1402cfb80], r14d
mov dword [0x1402cda70], ebp
mov dword [0x1402cfb8c], ebp
jne 0x140009fdb
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x1402cda78], rax
call fcn.14000b668
test ax, ax
je 0x14000a36d
mov rdx, rdi
mov rcx, r13
call fcn.140009a2c
cmp dword [0x1402cfbac], ebp
jne 0x14000a01f
mov qword [rsp + 0x28], rbp
lea r8, [0x140009cb4]
mov r9, rsi
mov dword [rsp + 0x20], ebp
xor edx, edx
mov dword [0x1402cda70], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x1402cfbbc]
test eax, eax
jle 0x14000a061
mov rcx, qword [0x1402cfba0]
mov r8d, eax
mov r10d, dword [0x1402cfbc4]
test r10d, r10d
jle 0x14000a058
mov rdx, rbp
mov r9, r10
mov rax, qword [rcx]
mov dword [rdx + rax], 0xff
lea rdx, [rdx + 8]
sub r9, r14
jne 0x14000a045
add rcx, 8
sub r8, r14
jne 0x14000a03a
mov rdx, rdi
mov rcx, r13
call fcn.140008e00
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x1402cda70], ebp
jne 0x14000a2b7
mov eax, dword [0x1402cfbbc]
test eax, eax
jle 0x14000a0c3
mov rcx, qword [0x1402cfba0]
mov r8d, eax
mov r10d, dword [0x1402cfbc4]
test r10d, r10d
jle 0x14000a0ba
mov rdx, rbp
mov r9, r10
mov rax, qword [rcx]
lea rdx, [rdx + 8]
mov byte [rdx + rax - 4], bpl
sub r9, r14
jne 0x14000a0a9
add rcx, 8
sub r8, r14
jne 0x14000a09e
mov r8, rdi
mov rdx, r13
mov ecx, r14d
call fcn.140008fb0
cmp dword [0x1402cda70], ebp
jne 0x14000a2af
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xb0]
call fcn.14000b2f0
cmp eax, r14d
je 0x14000a2a8
cmp dword [0x1402cfbbc], ebp
mov ebx, ebp
mov r12, qword [rsp + 0xb0]
jle 0x14000a23d
mov r15, rbp
cmp dword [0x1402cfbc4], ebp
mov edi, ebp
jle 0x14000a222
mov r14, rbp
mov esi, dword [0x1402cfb94]
mov ebp, dword [0x1402cfbb8]
imul esi, ebx
imul ebp, edi
cmp dword [0x1402cda70], 0
jne 0x14000a21c
cmp dword [0x1402cfb8c], 0
je 0x14000a15e
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x1402cda70], 0
je 0x14000a141
cmp dword [0x1402cda70], 0
jne 0x14000a21c
mov eax, dword [0x1402cda80]
cmp dword [0x1402cda84], eax
jne 0x14000a21c
mov rax, qword [0x1402cfba0]
mov r8, qword [r15 + rax]
mov al, byte [r8 + r14 + 4]
dec al
test al, 0xfd
je 0x14000a20a
mov dword [rsp + 0x30], edi
lea r9, [rsp + 0x40]
mov dword [rsp + 0x28], ebx
lea r8, [rsp + 0xb8]
mov edx, esi
mov qword [rsp + 0x20], r12
mov ecx, ebp
call fcn.14000af98
cmp eax, 1
je 0x14000a20a
mov rsi, qword [rsp + 0xb8]
test rsi, rsi
je 0x14000a20a
cmp dword [0x1402cda70], 0
jne 0x14000a20a
mov r8, qword [rsp + 0xa8]
mov rcx, rsi
mov edx, dword [rsp + 0x40]
call r13
cmp eax, 0xfffffffc
je 0x14000a1f8
test eax, eax
jne 0x14000a202
mov dword [0x1402cfb8c], 1
jmp 0x14000a202
mov dword [0x1402cda70], 1
mov rcx, rsi
call fcn.1401ad038
inc edi
add r14, 8
cmp edi, dword [0x1402cfbc4]
jl 0x14000a122
xor ebp, ebp
lea r14d, [rbp + 1]
add ebx, r14d
add r15, 8
cmp ebx, dword [0x1402cfbbc]
jl 0x14000a111
mov rdi, qword [rsp + 0xa8]
test r12, r12
je 0x14000a24a
mov rcx, r12
call fcn.1401ad038
cmp dword [0x1402cda70], ebp
mov ebx, dword [0x1402cfba8]
mov qword [rsp + 0xb0], rbp
mov qword [rsp + 0x48], rbp
jne 0x14000a2af
test ebx, ebx
jle 0x14000a29b
cmp ebx, 0x32
jle 0x14000a27e
sub ebx, 0x32
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000a288
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, ebp
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SleepEx]
cmp dword [0x1402cda70], ebp
je 0x14000a265
cmp dword [0x1402cda70], ebp
jne 0x14000a2af
jmp 0x14000a083
mov dword [0x1402cda70], r14d
mov rsi, qword [rsp + 0xa0]
cmp qword [0x1402cfba0], rbp
je 0x14000a2ff
cmp dword [0x1402cfbbc], ebp
mov ebx, ebp
jle 0x14000a2ec
mov rdi, rbp
mov rcx, qword [0x1402cfba0]
mov rcx, qword [rdi + rcx]
call fcn.1401ad038
add ebx, r14d
lea rdi, [rdi + 8]
cmp ebx, dword [0x1402cfbbc]
jl 0x14000a2cd
mov rcx, qword [0x1402cfba0]
call fcn.1401ad038
mov qword [0x1402cfba0], rbp
mov rcx, qword [0x1402cfbd8]
test rcx, rcx
je 0x14000a310
call fcn.1401ad038
mov rcx, qword [0x1402cfc88]
mov dword [0x1402cfbe8], ebp
mov qword [0x1402cfbd8], rbp
call qword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov rcx, qword [0x1402cfc18]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [0x1402cfc80]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rdx, qword [0x1402cfbe0]
test rdx, rdx
je 0x14000a358
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rsi
mov qword [0x1402cfbe0], rbp
mov dword [0x1402cfb80], ebp
call fcn.1401ad038
xor eax, eax
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret