Function at 0x14009b280
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x110
mov r15, rcx
lea rcx, [rsp + 0x48]
mov rbx, rdx
call fcn.14005bf04
lea rcx, [rsp + 0x58]
call fcn.14005c3c8
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.140066ba4
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, r15
call fcn.140003940
mov r11, qword [rsp + 0x70]
lea rcx, [rsp + 0x158]
mov qword [rsp + 0x158], r11
call fcn.140054140
xor edi, edi
mov dword [rsp + 0x168], edi
mov dword [rsp + 0x38], edi
lea ebp, [rdi + 0x20]
lea r14d, [rdi + 0x2d]
jmp 0x14009b3f8
cmp r14w, word [rbx + 2]
jne 0x14009b414
lea rdx, [rsp + 0x158]
lea rcx, [0x14010844c]
mov r8d, 2
call fcn.140054194
cmp eax, edi
jne 0x14009b40c
lea rdx, [rsp + 0x158]
lea rcx, str.__try
mov r8d, 5
call fcn.14005b97c
cmp al, dil
je 0x14009b35d
mov dword [rsp + 0x168], 1
jmp 0x14009b3f8
lea rdx, [rsp + 0x158]
lea rcx, [0x140108430]
mov r8d, 6
call fcn.14005b97c
cmp al, dil
je 0x14009b389
mov dword [rsp + 0x168], 2
jmp 0x14009b3f8
lea rdx, [rsp + 0x158]
lea rcx, [0x140108420]
mov r8d, 7
call fcn.14005b97c
cmp al, dil
je 0x14009b3b2
mov dword [rsp + 0x38], 1
jmp 0x14009b3f8
mov rcx, qword [rsp + 0x158]
movzx eax, word [rcx]
cmp ax, di
je 0x14009b3eb
mov edx, 9
cmp dx, ax
ja 0x14009b3d2
cmp ax, 0xd
jbe 0x14009b3e3
cmp bp, ax
je 0x14009b3e3
add rcx, 2
mov ax, word [rcx]
cmp ax, di
jne 0x14009b3c2
mov qword [rsp + 0x158], rcx
lea rcx, [rsp + 0x158]
call fcn.140054140
mov rbx, qword [rsp + 0x158]
cmp r14w, word [rbx]
je 0x14009b301
jmp 0x14009b414
mov rbx, qword [rsp + 0x158]
lea rcx, [rsp + 0x40]
mov edx, 0x2c
mov qword [rsp + 0x40], rbx
call fcn.140066ae0
mov rdx, qword [rsp + 0x40]
cmp word [rdx], di
je 0x14009b44a
mov word [rdx], di
add qword [rsp + 0x40], 2
lea rcx, [rsp + 0x40]
call fcn.140054140
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140066c24
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.140066ba4
mov r11, qword [rsp + 0x80]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x88], r11
call fcn.140054140
mov r13, qword [rsp + 0x88]
cmp word [r13], di
je 0x14009b78c
lea rcx, [rsp + 0x98]
call fcn.14005c3c8
mov rsi, qword [rsp + 0x68]
cmp word [r13], di
je 0x14009b77a
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xc0]
mov r8d, 0xcd
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xb8], rdi
call fcn.1400237d0
mov rbx, qword [rsp + 0xc0]
mov r13, rax
mov rdx, rbx
cmp word [rbx], di
je 0x14009b521
movzx ecx, word [rdx]
cmp cx, 0x61
jb 0x14009b506
cmp cx, 0x7a
ja 0x14009b506
sub cx, bp
mov word [rdx], cx
jmp 0x14009b518
mov eax, 0x5c
cmp ax, cx
jne 0x14009b518
mov eax, 0x2f
mov word [rdx], ax
add rdx, 2
cmp word [rdx], di
jne 0x14009b4ef
mov ebp, edi
mov dword [rsp + 0x50], edi
cmp word [rbx], r14w
jne 0x14009b56c
lea rax, [rbx + 2]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0xb0], rax
call fcn.140060294
mov rbx, qword [rsp + 0xb0]
mov r11d, 0x3a
cmp r11w, word [rbx]
jne 0x14009b563
add rbx, 2
mov ebp, dword [rsp + 0x50]
cmp ebp, edi
cmovl ebp, edi
cmp word [rbx], di
je 0x14009b762
mov rcx, rbx
mov r14, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp rsi, rdi
mov r12d, edi
movsxd rcx, eax
mov qword [rsp + 0xb8], rcx
jle 0x14009b5d5
mov rax, rdi
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
mov r9d, 8
mov rcx, rax
call fcn.14005c364
mov rcx, rbx
mov rdx, qword [rax]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
cmp eax, edi
je 0x14009b5d2
inc r12d
movsxd rax, r12d
cmp rax, rsi
jl 0x14009b597
jmp 0x14009b5d5
mov rbx, rdi
cmp rbx, rdi
je 0x14009b75c
movsxd r9, dword [rsp + 0x38]
mov r12, r9
cmp r9, rdi
je 0x14009b5fc
mov eax, 0x23
cmp ax, word [rbx]
je 0x14009b5fc
sub rbx, 2
mov word [rbx], ax
lea rcx, str..thread
mov rdx, rbx
call fcn.140055690
cmp al, dil
je 0x14009b632
test byte [r15 + 0x12], 1
jne 0x14009b75c
lea rcx, [0x14011bf08]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or byte [r15 + 0x12], 1
jmp 0x14009b75c
lea rcx, str..ole
mov rdx, rbx
call fcn.140055690
cmp al, dil
je 0x14009b690
test byte [r15 + 0x12], 1
jne 0x14009b65f
lea rcx, [0x14011bf08]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or byte [r15 + 0x12], 1
mov al, byte [r15 + 0x12]
test al, 2
jne 0x14009b75c
or al, 2
mov byte [r15 + 0x12], al
call fcn.14005a678
mov r11, qword [0x14011b600]
cmp r11, rdi
je 0x14009b75c
xor ecx, ecx
call r11
jmp 0x14009b75c
or dword [rsp + 0x30], 0xffffffff
mov eax, r9d
mov rcx, rbx
neg eax
lea rax, [rsp + 0x30]
sbb r8, r8
xor edx, edx
and r8, rax
call fcn.14009b1dc
mov rbx, rax
cmp r12, rdi
je 0x14009b6c8
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov rcx, r15
call fcn.14005efbc
cmp rbx, rdi
je 0x14009b75c
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], 1
mov dword [rbx + 0x14], ebp
mov qword [rsp + 0xc8], r14
mov dword [rsp + 0x20], 8
call fcn.14005c254
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], 1
mov qword [rsp + 0xd0], rbx
mov dword [rsp + 0x20], 8
call fcn.14005c254
mov rdx, rbx
mov rcx, r15
call fcn.140065744
cmp r12, rdi
jne 0x14009b773
mov rsi, qword [rsp + 0x68]
mov r14d, 0x2d
cmp word [r13], di
je 0x14009b77a
mov ebp, 0x20
jmp 0x14009b4b1
movsxd rdi, dword [rsp + 0x30]
jmp 0x14009b77f
cmp rsi, rdi
jg 0x14009b7bf
lea rcx, [rsp + 0x98]
call fcn.140054110
lea rcx, [rsp + 0x80]
call fcn.140054110
lea rcx, [rsp + 0x70]
call fcn.140054110
lea rcx, [rsp + 0x58]
call fcn.140054110
lea rcx, [rsp + 0x48]
call fcn.140054110
mov rax, rdi
jmp 0x14009bab9
lea rdx, [rsi*8 + 8]
lea rcx, [rsp + 0x90]
call fcn.14005bc8c
cmp rsi, rdi
mov r12, qword [rsp + 0x90]
movsxd rbp, esi
mov r13d, edi
jle 0x14009b823
mov rax, rdi
mov rbx, r12
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005c364
mov rsi, qword [rsp + 0x68]
inc r13d
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
mov qword [rbx], rax
movsxd rax, r13d
add rbx, 8
cmp rax, rsi
jl 0x14009b7ed
mov eax, dword [rsp + 0x168]
cmp ebp, 1
mov r14d, edi
setne r14b
mov r13d, 1
mov qword [rsp + 0x78], rdi
mov ebx, 0xffffffff
cmp r14d, edi
je 0x14009b91f
cmp eax, edi
jne 0x14009b91f
lea edx, [r13 + 0x2f]
lea rcx, [rsp + 0x38]
call fcn.14005bc8c
mov rbx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.1400540f4
mov eax, 0xffffffff
lea r8, [0x14005a970]
mov qword [rbx + 0x18], rax
lea rax, [0x14011a8e4]
mov r9, rbx
mov qword [rsp + 0x28], rax
mov eax, 0x10000
xor ecx, ecx
mov rdx, rax
mov qword [rbx], rdi
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x20], 3
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
jne 0x14009b8f9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [0x14011a8e4]
mov edx, 0x10000
mov qword [rsp + 0x28], rax
lea r8, [0x14005a970]
mov r9, rbx
xor ecx, ecx
mov dword [rsp + 0x20], edx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
je 0x14009b909
mov qword [rsp + 0x38], rdi
lea r12, [rsp + 0x78]
mov r14d, edi
mov ebp, r13d
lea rcx, [rsp + 0x38]
call fcn.140054110
mov eax, dword [rsp + 0x168]
mov ebx, 0xffffffff
cmp eax, 2
jne 0x14009b92c
mov r13d, edi
jmp 0x14009ba41
cmp eax, edi
je 0x14009b9f3
xor r9d, r9d
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, ebp
jb 0x14009ba09
jmp 0x14009ba41
cmp r14d, edi
jne 0x14009b979
xor r9d, r9d
mov r8, r12
mov edx, ebp
mov rcx, r15
mov dword [rsp + 0x28], 0x4ff
mov dword [rsp + 0x20], 0x3e8
call fcn.140019b98
jmp 0x14009b98d
mov r9d, 0x64
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, ebp
jb 0x14009ba04
cmp eax, ebx
jne 0x14009b99e
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, 0x7cf
mov al, byte [0x14011821f]
cmp al, dil
jle 0x14009b9ee
lea rcx, [rsp + 0xd8]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, edi
je 0x14009b9ee
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.dll_DispatchMessageW]
sub ebx, r13d
jns 0x14009b9a3
mov ebx, 0xffffffff
mov al, byte [0x14011821f]
cmp al, dil
jg 0x14009b952
jmp 0x14009ba41
mov rsi, qword [rsp + 0x68]
cmp rsi, rdi
mov r13d, edi
mov ebx, edi
jle 0x14009ba41
mov rax, rdi
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005c364
inc ebx
mov rcx, qword [rax]
movsxd rax, ebx
cmp rax, qword [rsp + 0x68]
mov byte [rcx + 0x10], 1
jl 0x14009ba16
mov r8, qword [rsp + 0x48]
cmp word [r8], di
je 0x14009ba57
mov edx, r13d
mov rcx, r15
call fcn.14005efbc
mov rcx, qword [rsp + 0x78]
cmp rcx, rdi
je 0x14009ba67
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov rcx, r15
call fcn.14008ff50
lea rcx, [rsp + 0x90]
call fcn.140054110
lea rcx, [rsp + 0x98]
call fcn.140054110
lea rcx, [rsp + 0x80]
call fcn.140054110
lea rcx, [rsp + 0x70]
call fcn.140054110
lea rcx, [rsp + 0x58]
call fcn.140054110
lea rcx, [rsp + 0x48]
call fcn.140054110
movsxd rax, r13d
mov rbx, qword [rsp + 0x150]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret