Function at 0x1400af040
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rax, qword [0x14013d0a8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, r8
mov rsi, rcx
mov edx, 0x414
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call fcn.1400806f0
mov rdi, rax
mov rdx, qword [r15 + 0x20]
mov rcx, rax
call fcn.140080d00
test al, 0x20
jne 0x1400af351
mov rdx, qword [r15 + 0x20]
mov rcx, rdi
call fcn.140080ab0
mov r14, qword [rax + 8]
mov byte [rbp - 0x39], 0
mov eax, dword [r14 + 0x10]
inc eax
mov rbx, qword [rsi + 8]
mov dword [rbp - 0x29], eax
xor r12d, r12d
mov dword [rbp - 0x25], r12d
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp - 0x21], rax
lea rcx, str.Adding_items
call fcn.1400b0640
mov rdx, rax
lea rcx, str.Adding_items
call fcn.1400b0780
mov qword [rbp - 0x19], rax
lea rax, [rbp - 0x39]
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], r12
mov qword [rbp + 0xf], r12
cmp dword [rbp - 0x29], r12d
je 0x1400af1ce
test rbx, rbx
je 0x1400af133
lea rdx, [rbp + 0x1f]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x27]
add eax, dword [rbp + 0x1f]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp - 1], eax
mov eax, dword [rbp + 0x2b]
add eax, dword [rbp + 0x23]
jmp 0x1400af14e
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp - 1], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp + 3], eax
mov edx, 2
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetAncestor]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetParent]
mov rbx, rax
mov qword [rbp + 0xf], rax
test rax, rax
je 0x1400af1a7
nop dword [rax]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
cmp rbx, rax
je 0x1400af1a7
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov rbx, rax
test rax, rax
jne 0x1400af180
lea rax, [rbp + 0x17]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
lea r9, [rbp - 0x29]
lea r8, [0x1400219f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp + 7], rax
inc dword [rbp - 0x25]
mov rbx, qword [r14 + 8]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x1400af255
nop
lea r8, [rbx + 0x20]
lea r9, [rsi + 0xa8]
mov rdx, qword [r15 + 0x20]
mov rcx, rdi
call fcn.1400ae720
inc dword [rbp - 0x25]
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400af228
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400af223
nop
cmp rbx, qword [rax + 0x10]
jne 0x1400af223
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400af210
mov rbx, rax
jmp 0x1400af24f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400af24f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400af240
cmp byte [rbx + 0x19], 0
je 0x1400af1e0
mov rcx, rdi
cmp byte [rbp - 0x39], 0
je 0x1400af26c
xor r8d, r8d
mov rdx, qword [r15 + 0x20]
call fcn.1400804f0
jmp 0x1400af2b3
lea rdx, [rbp - 0x38]
call fcn.140080f90
test eax, eax
jns 0x1400af27e
mov eax, r12d
jmp 0x1400af28a
cdqe
lea rcx, [0x14010c710]
mov eax, dword [rcx + rax*4]
movsxd r9, eax
mov byte [rsp + 0x30], 0
movzx eax, byte [rbp - 0x38]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], r12
lea r8, [0x1400ae130]
mov rdx, qword [r15 + 0x20]
mov rcx, rdi
call fcn.140084a10
nop
cmp dword [rbp - 0x29], 0
je 0x1400af342
mov rcx, qword [rbp - 9]
test rcx, rcx
jne 0x1400af2e4
nop word [rax + rax]
mov ecx, gethostbyaddr
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x1400af2d0
xor r9d, r9d
mov edx, VarUI4FromDisp
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0xffffffff
mov rcx, qword [rbp + 7]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 7]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rbp + 0xf]
test rbx, rbx
je 0x1400af342
call qword [sym.imp.USER32.dll_GetDesktopWindow]
cmp rbx, rax
je 0x1400af342
mov edx, 1
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov rbx, rax
test rax, rax
jne 0x1400af318
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x1400af351
call fcn.1400b0810
nop
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400b5660
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret