Function at 0x14008b50c
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3a0
mov bl, byte [rsp + 0x410]
mov rbp, qword [rsp + 0x420]
xor edi, edi
mov r12b, bl
and bl, 0xf
mov rax, r9
and r12b, 0xc0
mov rsi, rdx
mov r14, rcx
mov byte [rsp + 0x410], bl
cmp dword [rbp + 0x10], edi
je 0x14008b568
cmp rdx, rdi
je 0x14008b568
mov r13, qword [rdx + 0x20]
jmp 0x14008b579
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov r13, rax
mov rax, qword [rsp + 0x3f8]
cmp r13, rdi
jne 0x14008b581
mov dword [rbp + 0x10], edi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r15d, eax
mov eax, 0xb4
cmp r15d, eax
cmovg r15d, eax
cmp r12b, 0x80
jne 0x14008b6ed
lea rcx, [0x1400f2808]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x34]
xor edx, edx
mov r8d, 0x364
mov dword [rsp + 0x30], edi
call fcn.1400b93b0
mov eax, dword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f0]
mov edi, dword [rsp + 0x408]
mov dword [rsp + 0x2dc], eax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x2d0], rax
mov eax, dword [rsp + 0x428]
mov byte [rsp + 0x2c8], bl
mov dword [rsp + 0xfc], eax
mov eax, dword [rsp + 0x430]
mov qword [rsp + 0x2c0], rdx
mov rdx, qword [rsp + 0x3f8]
movsxd rbx, r15d
lea rcx, [rsp + 0x124]
lea r8, [rbx + rbx]
mov dword [rsp + 0x100], eax
mov dword [rsp + 0x2b4], r15d
mov dword [rsp + 0x120], edi
call fcn.1400177f8
lea rax, [0x1400f23dc]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x30]
lea r8, [0x14008acbc]
xor r15d, r15d
mov edx, 0x20000
xor ecx, ecx
mov dword [rsp + 0x20], 0x10000
mov word [rsp + rbx*2 + 0x124], r15w
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rsi, rax
cmp rax, r15
je 0x14008b6c4
mov ebx, 0x270f
cmp dword [rsp + 0x120], edi
jne 0x14008b6bb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, 1
jns 0x14008b68f
jmp 0x14008b6b2
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [rsp + 0x120], edi
je 0x14008b6a7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x1400f23dc]
lea r8, str.__LastTID
mov rcx, r14
call fcn.14004ed18
lea rcx, [0x1400f2808]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
jmp 0x14008b911
mov rbx, r13
mov r14d, edi
mov qword [rsp + 0x420], rbx
cmp r13, rdi
jne 0x14008b711
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rbx, rax
mov qword [rsp + 0x420], rax
cmp r12b, 0x40
je 0x14008b728
cmp rsi, rdi
je 0x14008b728
mov rbx, qword [rsi + 0x20]
mov qword [rsp + 0x420], rbx
mov ecx, 0x360
call fcn.1400b9688
cmp rax, rdi
je 0x14008b74b
mov r8d, 0x2720
mov rdx, rbx
mov rcx, rax
call fcn.140001000
mov rdi, rax
mov eax, dword [rsp + 0x400]
mov rdx, qword [rsp + 0x3f0]
lea rcx, [rdi + 0x288]
mov dword [rdi + 0x2ac], eax
mov dword [rdi + 0x284], r15d
call fcn.1400589a0
mov al, byte [rsp + 0x410]
mov r11d, dword [rsp + 0x408]
mov rdx, qword [rsp + 0x3f8]
mov byte [rdi + 0x298], al
mov rax, qword [rdi + 0x288]
movsxd rbx, r15d
mov qword [rdi + 0x290], rax
mov rax, qword [rsp + 0x418]
lea rcx, [rdi + 0xf4]
mov qword [rdi + 0x2a0], rax
mov eax, dword [rsp + 0x428]
lea r8, [rbx + rbx]
mov dword [rdi + 0xcc], eax
mov eax, dword [rsp + 0x430]
mov dword [rdi + 0xf0], r11d
mov dword [rdi + 0xd0], eax
call fcn.1400177f8
xor r15d, r15d
mov rcx, rsi
mov word [rdi + rbx*2 + 0xf4], r15w
call fcn.1400451f0
mov rcx, rdi
mov rbx, rax
call fcn.140001160
cmp rsi, r15
je 0x14008b80f
mov rcx, qword [rsi + 0x20]
call qword [sym.imp.USER32.dll_SetFocus]
mov rdx, qword [rbp + 0x18]
cmp rdx, r15
je 0x14008b824
lea rcx, [rdi + 0xb8]
call fcn.1400589a0
mov byte [rdi + 0xb1], r15b
mov qword [rdi + 0xe0], r13
mov byte [rdi + 0xb0], r15b
cmp r12b, 0xc0
jne 0x14008b876
cmp rbx, r15
je 0x14008b869
cmp rsi, r15
je 0x14008b869
lea rcx, [0x1400f2c58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [rsi + 0x150]
lea rcx, [0x1400f2c58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rdi + 0xb0], 1
mov qword [rdi + 0x70], rsi
jmp 0x14008b87d
mov byte [rdi + 0xb0], 0x10
cmp rsi, r15
je 0x14008b895
cmp dword [rbp + 0x10], r15d
je 0x14008b895
mov rax, qword [rsi + 0x20]
mov qword [rdi + 0xe0], rax
jmp 0x14008b899
mov dword [rbp + 0x10], r15d
mov r8, qword [rsp + 0x420]
and dword [rbp + 0x14], 0xfffffff3
and dword [rbp + 0x10], 0xfffffff3
mov r9, rbp
xor edx, edx
mov rcx, rdi
call fcn.140047a90
cmp r12b, 0x40
jne 0x14008b8c8
xor edx, edx
mov rcx, rdi
call fcn.1400ab508
jmp 0x14008b8ed
cmp r12b, 0xc0
jne 0x14008b8e5
mov rcx, qword [rdi + 0x20]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x110
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14008b8f4
mov rcx, rdi
call fcn.1400ab864
mov r14d, dword [rdi + 0x2b0]
cmp rbx, r15
je 0x14008b90e
xor r9d, r9d
mov edx, 0x451
mov rcx, rbx
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, r14d
mov rbx, qword [rsp + 0x3e0]
add rsp, 0x3a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret