Function at 0x1400a3bec
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x110
mov r15, rcx
lea rcx, [rsp + 0x48]
mov rbx, rdx
call fcn.14005fa18
lea rcx, [rsp + 0x58]
call fcn.14005fedc
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.14006ac98
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, r15
call fcn.140003980
mov r11, qword [rsp + 0x70]
lea rcx, [rsp + 0x158]
mov qword [rsp + 0x158], r11
call fcn.140057738
xor edi, edi
mov dword [rsp + 0x168], edi
mov dword [rsp + 0x38], edi
lea ebp, [rdi + 0x20]
lea r14d, [rdi + 0x2d]
jmp 0x1400a3d64
cmp r14w, word [rbx + 2]
jne 0x1400a3d80
lea rdx, [rsp + 0x158]
lea rcx, [0x140119c3c]
mov r8d, 2
call fcn.1400577bc
cmp eax, edi
jne 0x1400a3d78
lea rdx, [rsp + 0x158]
lea rcx, [0x140119c30]
mov r8d, 5
call fcn.14005f44c
cmp al, dil
je 0x1400a3cc9
mov dword [rsp + 0x168], 1
jmp 0x1400a3d64
lea rdx, [rsp + 0x158]
lea rcx, [0x140119c20]
mov r8d, 6
call fcn.14005f44c
cmp al, dil
je 0x1400a3cf5
mov dword [rsp + 0x168], 2
jmp 0x1400a3d64
lea rdx, [rsp + 0x158]
lea rcx, [0x140119c10]
mov r8d, 7
call fcn.14005f44c
cmp al, dil
je 0x1400a3d1e
mov dword [rsp + 0x38], 1
jmp 0x1400a3d64
mov rcx, qword [rsp + 0x158]
movzx eax, word [rcx]
cmp ax, di
je 0x1400a3d57
mov edx, 9
cmp dx, ax
ja 0x1400a3d3e
cmp ax, 0xd
jbe 0x1400a3d4f
cmp bp, ax
je 0x1400a3d4f
add rcx, 2
mov ax, word [rcx]
cmp ax, di
jne 0x1400a3d2e
mov qword [rsp + 0x158], rcx
lea rcx, [rsp + 0x158]
call fcn.140057738
mov rbx, qword [rsp + 0x158]
cmp r14w, word [rbx]
je 0x1400a3c6d
jmp 0x1400a3d80
mov rbx, qword [rsp + 0x158]
lea rcx, [rsp + 0x40]
mov edx, 0x2c
mov qword [rsp + 0x40], rbx
call fcn.1400e7958
mov rdx, qword [rsp + 0x40]
cmp word [rdx], di
je 0x1400a3db6
mov word [rdx], di
add qword [rsp + 0x40], 2
lea rcx, [rsp + 0x40]
call fcn.140057738
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.14006ad18
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.14006ac98
mov r11, qword [rsp + 0x80]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x88], r11
call fcn.140057738
mov r13, qword [rsp + 0x88]
cmp word [r13], di
je 0x1400a40f8
lea rcx, [rsp + 0x98]
call fcn.14005fedc
mov rsi, qword [rsp + 0x68]
cmp word [r13], di
je 0x1400a40e6
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xc0]
mov r8d, 0xcd
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xb8], rdi
call fcn.140023f84
mov rbx, qword [rsp + 0xc0]
mov r13, rax
mov rdx, rbx
cmp word [rbx], di
je 0x1400a3e8d
movzx ecx, word [rdx]
cmp cx, 0x61
jb 0x1400a3e72
cmp cx, 0x7a
ja 0x1400a3e72
sub cx, bp
mov word [rdx], cx
jmp 0x1400a3e84
mov eax, 0x5c
cmp ax, cx
jne 0x1400a3e84
mov eax, 0x2f
mov word [rdx], ax
add rdx, 2
cmp word [rdx], di
jne 0x1400a3e5b
mov ebp, edi
mov dword [rsp + 0x50], edi
cmp word [rbx], r14w
jne 0x1400a3ed8
lea rax, [rbx + 2]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0xb0], rax
call fcn.140064074
mov rbx, qword [rsp + 0xb0]
mov r11d, 0x3a
cmp r11w, word [rbx]
jne 0x1400a3ecf
add rbx, 2
mov ebp, dword [rsp + 0x50]
cmp ebp, edi
cmovl ebp, edi
cmp word [rbx], di
je 0x1400a40ce
mov rcx, rbx
mov r14, rbx
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp rsi, rdi
mov r12d, edi
movsxd rcx, eax
mov qword [rsp + 0xb8], rcx
jle 0x1400a3f41
mov rax, rdi
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
mov r9d, 8
mov rcx, rax
call fcn.14005fe78
mov rcx, rbx
mov rdx, qword [rax]
call qword [sym.imp.KERNEL32.DLL_lstrcmpW]
cmp eax, edi
je 0x1400a3f3e
inc r12d
movsxd rax, r12d
cmp rax, rsi
jl 0x1400a3f03
jmp 0x1400a3f41
mov rbx, rdi
cmp rbx, rdi
je 0x1400a40c8
movsxd r9, dword [rsp + 0x38]
mov r12, r9
cmp r9, rdi
je 0x1400a3f68
mov eax, 0x23
cmp ax, word [rbx]
je 0x1400a3f68
sub rbx, 2
mov word [rbx], ax
lea rcx, [0x140119c08]
mov rdx, rbx
call fcn.140058df4
cmp al, dil
je 0x1400a3f9e
test byte [r15 + 0x12], 1
jne 0x1400a40c8
lea rcx, [0x14012e0b8]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
or byte [r15 + 0x12], 1
jmp 0x1400a40c8
lea rcx, [0x140119c00]
mov rdx, rbx
call fcn.140058df4
cmp al, dil
je 0x1400a3ffc
test byte [r15 + 0x12], 1
jne 0x1400a3fcb
lea rcx, [0x14012e0b8]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
or byte [r15 + 0x12], 1
mov al, byte [r15 + 0x12]
test al, 2
jne 0x1400a40c8
or al, 2
mov byte [r15 + 0x12], al
call fcn.14005dd40
mov r11, qword [0x14012d7a0]
cmp r11, rdi
je 0x1400a40c8
xor ecx, ecx
call r11
jmp 0x1400a40c8
or dword [rsp + 0x30], 0xffffffff
mov eax, r9d
mov rcx, rbx
neg eax
lea rax, [rsp + 0x30]
sbb r8, r8
xor edx, edx
and r8, rax
call fcn.1400a3b48
mov rbx, rax
cmp r12, rdi
je 0x1400a4034
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov rcx, r15
call fcn.140062c80
cmp rbx, rdi
je 0x1400a40c8
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], 1
mov dword [rbx + 0x14], ebp
mov qword [rsp + 0xc8], r14
mov dword [rsp + 0x20], 8
call fcn.14005fd68
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], 1
mov qword [rsp + 0xd0], rbx
mov dword [rsp + 0x20], 8
call fcn.14005fd68
mov rdx, rbx
mov rcx, r15
call fcn.140069d18
cmp r12, rdi
jne 0x1400a40df
mov rsi, qword [rsp + 0x68]
mov r14d, 0x2d
cmp word [r13], di
je 0x1400a40e6
mov ebp, 0x20
jmp 0x1400a3e1d
movsxd rdi, dword [rsp + 0x30]
jmp 0x1400a40eb
cmp rsi, rdi
jg 0x1400a412b
lea rcx, [rsp + 0x98]
call fcn.140057768
lea rcx, [rsp + 0x80]
call fcn.140057768
lea rcx, [rsp + 0x70]
call fcn.140057768
lea rcx, [rsp + 0x58]
call fcn.140057768
lea rcx, [rsp + 0x48]
call fcn.140057768
mov rax, rdi
jmp 0x1400a4425
lea rdx, [rsi*8 + 8]
lea rcx, [rsp + 0x90]
call fcn.14005f7a0
cmp rsi, rdi
mov r12, qword [rsp + 0x90]
movsxd rbp, esi
mov r13d, edi
jle 0x1400a418f
mov rax, rdi
mov rbx, r12
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005fe78
mov rsi, qword [rsp + 0x68]
inc r13d
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
mov qword [rbx], rax
movsxd rax, r13d
add rbx, 8
cmp rax, rsi
jl 0x1400a4159
mov eax, dword [rsp + 0x168]
cmp ebp, 1
mov r14d, edi
setne r14b
mov r13d, 1
mov qword [rsp + 0x78], rdi
mov ebx, 0xffffffff
cmp r14d, edi
je 0x1400a428b
cmp eax, edi
jne 0x1400a428b
lea edx, [r13 + 0x2f]
lea rcx, [rsp + 0x38]
call fcn.14005f7a0
mov rbx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.1400576cc
mov eax, 0xffffffff
lea r8, [0x14005e060]
mov qword [rbx + 0x18], rax
lea rax, [0x14012c9d0]
mov r9, rbx
mov qword [rsp + 0x28], rax
mov eax, 0x10000
xor ecx, ecx
mov rdx, rax
mov qword [rbx], rdi
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x20], 3
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.DLL_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
jne 0x1400a4265
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_Sleep]
lea rax, [0x14012c9d0]
mov edx, 0x10000
mov qword [rsp + 0x28], rax
lea r8, [0x14005e060]
mov r9, rbx
xor ecx, ecx
mov dword [rsp + 0x20], edx
call qword [sym.imp.KERNEL32.DLL_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
je 0x1400a4275
mov qword [rsp + 0x38], rdi
lea r12, [rsp + 0x78]
mov r14d, edi
mov ebp, r13d
lea rcx, [rsp + 0x38]
call fcn.140057768
mov eax, dword [rsp + 0x168]
mov ebx, 0xffffffff
cmp eax, 2
jne 0x1400a4298
mov r13d, edi
jmp 0x1400a43ad
cmp eax, edi
je 0x1400a435f
xor r9d, r9d
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_WaitForMultipleObjects]
cmp eax, ebp
jb 0x1400a4375
jmp 0x1400a43ad
cmp r14d, edi
jne 0x1400a42e5
xor r9d, r9d
mov r8, r12
mov edx, ebp
mov rcx, r15
mov dword [rsp + 0x28], 0x4ff
mov dword [rsp + 0x20], 0x3e8
call fcn.14001abec
jmp 0x1400a42f9
mov r9d, 0x64
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_WaitForMultipleObjects]
cmp eax, ebp
jb 0x1400a4370
cmp eax, ebx
jne 0x1400a430a
mov ecx, r13d
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov ebx, 0x7cf
mov al, byte [0x14012a25f]
cmp al, dil
jle 0x1400a435a
lea rcx, [rsp + 0xd8]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.DLL_PeekMessageW]
cmp eax, edi
je 0x1400a435a
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.DLL_TranslateMessage]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.DLL_DispatchMessageW]
sub ebx, r13d
jns 0x1400a430f
mov ebx, 0xffffffff
mov al, byte [0x14012a25f]
cmp al, dil
jg 0x1400a42be
jmp 0x1400a43ad
mov rsi, qword [rsp + 0x68]
cmp rsi, rdi
mov r13d, edi
mov ebx, edi
jle 0x1400a43ad
mov rax, rdi
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005fe78
inc ebx
mov rcx, qword [rax]
movsxd rax, ebx
cmp rax, qword [rsp + 0x68]
mov byte [rcx + 0x10], 1
jl 0x1400a4382
mov r8, qword [rsp + 0x48]
cmp word [r8], di
je 0x1400a43c3
mov edx, r13d
mov rcx, r15
call fcn.140062c80
mov rcx, qword [rsp + 0x78]
cmp rcx, rdi
je 0x1400a43d3
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
xor edx, edx
mov rcx, r15
call fcn.140098488
lea rcx, [rsp + 0x90]
call fcn.140057768
lea rcx, [rsp + 0x98]
call fcn.140057768
lea rcx, [rsp + 0x80]
call fcn.140057768
lea rcx, [rsp + 0x70]
call fcn.140057768
lea rcx, [rsp + 0x58]
call fcn.140057768
lea rcx, [rsp + 0x48]
call fcn.140057768
movsxd rax, r13d
mov rbx, qword [rsp + 0x150]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret