Function at 0x1400a8ee4
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x140
mov r15, rcx
lea rcx, [rsp + 0x80]
mov rbx, rdx
call fcn.140061940
lea rcx, [rsp + 0x90]
call fcn.140061e04
lea rcx, [rsp + 0xa8]
mov rdx, rbx
call fcn.14006d8b0
lea rdx, [rsp + 0xa8]
xor r8d, r8d
mov rcx, r15
call fcn.14000395c
mov r11, qword [rsp + 0xa8]
lea rcx, [rsp + 0x188]
mov qword [rsp + 0x188], r11
call fcn.140059340
xor edi, edi
mov dword [rsp + 0x198], edi
mov dword [rsp + 0x60], edi
lea r13d, [rdi + 0x2d]
lea r12d, [rdi + 0x20]
jmp 0x1400a906d
cmp r13w, word [rbx + 2]
jne 0x1400a9089
lea rdx, [rsp + 0x188]
lea rcx, [0x14012105c]
mov r8d, 2
call fcn.1400593c4
cmp eax, edi
jne 0x1400a9081
lea rdx, [rsp + 0x188]
lea rcx, [0x140121050]
mov r8d, 5
call fcn.140061370
cmp al, dil
je 0x1400a8fd1
mov dword [rsp + 0x198], 1
jmp 0x1400a906d
lea rdx, [rsp + 0x188]
lea rcx, [0x140121040]
mov r8d, 6
call fcn.140061370
cmp al, dil
je 0x1400a8ffd
mov dword [rsp + 0x198], 2
jmp 0x1400a906d
lea rdx, [rsp + 0x188]
lea rcx, [0x140121030]
mov r8d, 7
call fcn.140061370
cmp al, dil
je 0x1400a9026
mov dword [rsp + 0x60], 1
jmp 0x1400a906d
mov rcx, qword [rsp + 0x188]
movzx eax, word [rcx]
cmp ax, di
je 0x1400a9060
mov edx, 9
cmp dx, ax
ja 0x1400a9046
cmp ax, 0xd
jbe 0x1400a9058
cmp r12w, ax
je 0x1400a9058
add rcx, 2
mov ax, word [rcx]
cmp ax, di
jne 0x1400a9036
mov qword [rsp + 0x188], rcx
lea rcx, [rsp + 0x188]
call fcn.140059340
mov rbx, qword [rsp + 0x188]
cmp r13w, word [rbx]
je 0x1400a8f75
jmp 0x1400a9089
mov rbx, qword [rsp + 0x188]
lea rcx, [rsp + 0x68]
mov edx, 0x2c
mov qword [rsp + 0x68], rbx
call fcn.14000a884
mov rdx, qword [rsp + 0x68]
cmp word [rdx], di
je 0x1400a90bf
mov word [rdx], di
add qword [rsp + 0x68], 2
lea rcx, [rsp + 0x68]
call fcn.140059340
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x80]
call fcn.14006d930
lea rcx, [rsp + 0xb8]
mov rdx, rbx
call fcn.14006d8b0
mov r11, qword [rsp + 0xb8]
lea rcx, [rsp + 0xc8]
mov qword [rsp + 0xc8], r11
call fcn.140059340
mov r14, qword [rsp + 0xc8]
cmp word [r14], di
je 0x1400a9522
lea rcx, [rsp + 0xd8]
call fcn.140061e04
mov rbp, qword [rsp + 0xa0]
cmp word [r14], di
je 0x1400a9510
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xf0]
mov r8d, 0xcd
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xd0], rdi
call fcn.140024cbc
mov rbx, qword [rsp + 0xf0]
mov r14, rax
mov rdx, rbx
cmp word [rbx], di
je 0x1400a919b
movzx ecx, word [rdx]
cmp cx, 0x61
jb 0x1400a9180
cmp cx, 0x7a
ja 0x1400a9180
sub cx, r12w
mov word [rdx], cx
jmp 0x1400a9192
mov eax, 0x5c
cmp ax, cx
jne 0x1400a9192
mov eax, 0x2f
mov word [rdx], ax
add rdx, 2
cmp word [rdx], di
jne 0x1400a9168
mov r12d, edi
mov dword [rsp + 0x88], edi
cmp word [rbx], r13w
jne 0x1400a91ea
lea rax, [rbx + 2]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
call fcn.14006608c
mov rbx, qword [rsp + 0x50]
mov r11d, 0x3a
cmp r11w, word [rbx]
jne 0x1400a91db
add rbx, 2
mov r12d, dword [rsp + 0x88]
cmp r12d, edi
cmovl r12d, edi
cmp word [rbx], di
je 0x1400a94f8
mov rcx, rbx
mov r13, rbx
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp rbp, rdi
mov esi, edi
movsxd rcx, eax
mov qword [rsp + 0xd0], rcx
jle 0x1400a9251
mov rax, rdi
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0xd8]
mov r9d, 8
mov rcx, rax
call fcn.140061da0
mov rcx, rbx
mov rdx, qword [rax]
call qword [sym.imp.KERNEL32.DLL_lstrcmpW]
cmp eax, edi
je 0x1400a924e
inc esi
movsxd rax, esi
cmp rax, rbp
jl 0x1400a9214
jmp 0x1400a9251
mov rbx, rdi
cmp rbx, rdi
je 0x1400a94f2
movsxd r11, dword [rsp + 0x60]
mov rsi, r11
cmp r11, rdi
je 0x1400a9278
mov eax, 0x23
cmp ax, word [rbx]
je 0x1400a9278
sub rbx, 2
mov word [rbx], ax
lea rcx, [0x140121028]
mov rdx, rbx
call fcn.14005aa28
cmp al, dil
je 0x1400a92ba
call fcn.140003838
call fcn.14005fafc
mov al, byte [r15 + 0x12]
test al, 1
jne 0x1400a94f2
or al, 1
lea rcx, [0x140135110]
mov byte [r15 + 0x12], al
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
jmp 0x1400a94f2
lea rcx, [0x140121020]
mov rdx, rbx
call fcn.14005aa28
cmp al, dil
je 0x1400a930e
call fcn.140003838
call fcn.14005fafc
test byte [r15 + 0x12], 2
jne 0x1400a94f2
lea rcx, [0x1401350e8]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
or byte [r15 + 0x12], 2
mov rax, qword [0x1401347b8]
cmp rax, rdi
je 0x1400a94f2
xor ecx, ecx
call rax
jmp 0x1400a94f2
lea rcx, [0x140121018]
mov rdx, rbx
call fcn.14005aa28
cmp al, dil
jne 0x1400a9429
lea rcx, [0x140121010]
mov r8d, 5
mov rdx, rbx
call fcn.14005a9ec
cmp al, dil
jne 0x1400a9429
or dword [rsp + 0x58], 0xffffffff
mov eax, r11d
mov rcx, rbx
neg eax
lea rax, [rsp + 0x58]
sbb r8, r8
xor edx, edx
and r8, rax
call fcn.1400a8e40
mov rbx, rax
cmp rsi, rdi
je 0x1400a937f
mov r8, qword [rsp + 0x80]
mov edx, dword [rsp + 0x58]
mov rcx, r15
call fcn.140064c5c
cmp rbx, rdi
je 0x1400a94f2
lea r9, [rsp + 0x100]
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xd8]
mov qword [rsp + 0x28], 1
mov dword [rbx + 0x14], r12d
mov qword [rsp + 0x100], r13
mov dword [rsp + 0x20], 8
call fcn.140061c90
lea r9, [rsp + 0xf8]
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x28], 1
mov qword [rsp + 0xf8], rbx
mov dword [rsp + 0x20], 8
call fcn.140061c90
mov rdx, rbx
mov rcx, r15
call fcn.14006c8e0
cmp rsi, rdi
jne 0x1400a9509
mov rbp, qword [rsp + 0xa0]
jmp 0x1400a94f2
mov r12d, 3
mov dword [rsp + 0x78], edi
mov esi, 0xfffffc18
mov dword [rsp + 0x70], r12d
cmp word [rbx + 8], di
je 0x1400a949a
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
add rbx, 0xa
mov qword [rsp + 0x50], rbx
call fcn.140065f58
mov r11, qword [rsp + 0x50]
cmp word [r11], di
je 0x1400a949a
add r11, 2
lea rdx, [rsp + 0x74]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x74], edi
mov qword [rsp + 0x50], r11
call fcn.14006d7d8
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.14006d7d8
mov esi, dword [rsp + 0x74]
mov r12d, dword [rsp + 0x70]
call fcn.140003838
call fcn.14005fafc
mov al, byte [r15 + 0x12]
test al, 4
jne 0x1400a94f2
or al, 4
mov byte [r15 + 0x12], al
mov rax, qword [0x1401347c8]
cmp rax, rdi
je 0x1400a94f2
mov edx, dword [rsp + 0x78]
xor ecx, ecx
call rax
cmp esi, edi
jl 0x1400a94f2
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
xor ecx, ecx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], esi
call qword [0x1401347e0]
mov r13d, 0x2d
cmp word [r14], di
je 0x1400a9510
mov r12d, 0x20
jmp 0x1400a912a
movsxd rdi, dword [rsp + 0x58]
jmp 0x1400a9515
cmp rbp, rdi
jg 0x1400a955e
lea rcx, [rsp + 0xd8]
call fcn.140059370
lea rcx, [rsp + 0xb8]
call fcn.140059370
lea rcx, [rsp + 0xa8]
call fcn.140059370
lea rcx, [rsp + 0x90]
call fcn.140059370
lea rcx, [rsp + 0x80]
call fcn.140059370
mov rax, rdi
jmp 0x1400a9888
lea rdx, [rbp*8 + 8]
lea rcx, [rsp + 0xc0]
call fcn.1400616c8
cmp rbp, rdi
mov r12, qword [rsp + 0xc0]
movsxd rsi, ebp
mov r13d, edi
jle 0x1400a95cb
mov rax, rdi
mov rbx, r12
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x90]
mov r9d, 8
mov rcx, rax
call fcn.140061da0
mov rbp, qword [rsp + 0xa0]
inc r13d
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
mov qword [rbx], rax
movsxd rax, r13d
add rbx, 8
cmp rax, rbp
jl 0x1400a958c
mov eax, dword [rsp + 0x198]
cmp esi, 1
mov r14d, edi
setne r14b
mov r13d, 1
mov qword [rsp + 0xb0], rdi
mov ebx, 0xffffffff
cmp r14d, edi
je 0x1400a96d3
cmp eax, edi
jne 0x1400a96d3
lea edx, [r13 + 0x2f]
lea rcx, [rsp + 0x60]
call fcn.1400616c8
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
call fcn.1400592d4
mov eax, 0xffffffff
lea r8, [0x14005ffac]
mov qword [rbx + 0x18], rax
lea rax, [0x14013396c]
mov r9, rbx
mov qword [rsp + 0x28], rax
mov eax, 0x10000
xor ecx, ecx
mov rdx, rax
mov qword [rbx], rdi
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x20], 3
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.DLL_CreateThread]
mov qword [rsp + 0xb0], rax
cmp rax, rdi
jne 0x1400a96aa
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_Sleep]
lea rax, [0x14013396c]
mov edx, 0x10000
mov qword [rsp + 0x28], rax
lea r8, [0x14005ffac]
mov r9, rbx
xor ecx, ecx
mov dword [rsp + 0x20], edx
call qword [sym.imp.KERNEL32.DLL_CreateThread]
mov qword [rsp + 0xb0], rax
cmp rax, rdi
je 0x1400a96bd
mov qword [rsp + 0x60], rdi
lea r12, [rsp + 0xb0]
mov r14d, edi
mov esi, r13d
lea rcx, [rsp + 0x60]
call fcn.140059370
mov eax, dword [rsp + 0x198]
mov ebx, 0xffffffff
cmp eax, 2
jne 0x1400a96e0
mov r13d, edi
jmp 0x1400a9801
cmp eax, edi
je 0x1400a97a7
xor r9d, r9d
mov r8d, r13d
mov rdx, r12
mov ecx, esi
call qword [sym.imp.KERNEL32.DLL_WaitForMultipleObjects]
cmp eax, esi
jb 0x1400a97c0
jmp 0x1400a9801
cmp r14d, edi
jne 0x1400a972d
xor r9d, r9d
mov r8, r12
mov edx, esi
mov rcx, r15
mov dword [rsp + 0x28], 0x4ff
mov dword [rsp + 0x20], 0x3e8
call fcn.14001b604
jmp 0x1400a9741
mov r9d, 0x64
mov r8d, r13d
mov rdx, r12
mov ecx, esi
call qword [sym.imp.KERNEL32.DLL_WaitForMultipleObjects]
cmp eax, esi
jb 0x1400a97b8
cmp eax, ebx
jne 0x1400a9752
mov ecx, r13d
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov ebx, 0x7cf
mov al, byte [0x14013124f]
cmp al, dil
jle 0x1400a97a2
lea rcx, [rsp + 0x108]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.DLL_PeekMessageW]
cmp eax, edi
je 0x1400a97a2
lea rcx, [rsp + 0x108]
call qword [sym.imp.USER32.DLL_TranslateMessage]
lea rcx, [rsp + 0x108]
call qword [sym.imp.USER32.DLL_DispatchMessageW]
sub ebx, r13d
jns 0x1400a9757
mov ebx, 0xffffffff
mov al, byte [0x14013124f]
cmp al, dil
jg 0x1400a9706
jmp 0x1400a9801
mov rbp, qword [rsp + 0xa0]
cmp rbp, rdi
mov r13d, edi
mov ebx, edi
jle 0x1400a9801
mov rax, rdi
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x90]
mov r9d, 8
mov rcx, rax
call fcn.140061da0
inc ebx
mov rcx, qword [rax]
movsxd rax, ebx
cmp rax, qword [rsp + 0xa0]
mov byte [rcx + 0x10], 1
jl 0x1400a97cd
mov r8, qword [rsp + 0x80]
cmp word [r8], di
je 0x1400a981a
mov edx, r13d
mov rcx, r15
call fcn.140064c5c
mov rcx, qword [rsp + 0xb0]
cmp rcx, rdi
je 0x1400a982d
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
xor edx, edx
mov rcx, r15
call fcn.14009d79c
lea rcx, [rsp + 0xc0]
call fcn.140059370
lea rcx, [rsp + 0xd8]
call fcn.140059370
lea rcx, [rsp + 0xb8]
call fcn.140059370
lea rcx, [rsp + 0xa8]
call fcn.140059370
lea rcx, [rsp + 0x90]
call fcn.140059370
lea rcx, [rsp + 0x80]
call fcn.140059370
movsxd rax, r13d
mov rbx, qword [rsp + 0x180]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret