Function at 0x14008a570
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov r15, rcx
lea rcx, [rsp + 0x48]
mov rbx, rdx
call fcn.140057154
lea rcx, [rsp + 0x50]
call fcn.140057618
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.14006160c
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, r15
call fcn.140003728
mov r11, qword [rsp + 0x70]
lea rcx, [rsp + 0x148]
mov qword [rsp + 0x148], r11
call fcn.14004f534
xor edi, edi
mov dword [rsp + 0x158], edi
mov r14d, edi
lea esi, [rdi + 0x2d]
lea ebp, [rdi + 0x20]
jmp 0x14008a6e3
cmp si, word [rbx + 2]
jne 0x14008a6fe
lea rdx, [rsp + 0x148]
lea rcx, [0x1400f9634]
mov r8d, 2
call fcn.14004f5b8
cmp eax, edi
jne 0x14008a6f6
lea rdx, [rsp + 0x148]
lea rcx, str.__try
mov r8d, 5
call fcn.140056b74
cmp al, dil
je 0x14008a64a
mov dword [rsp + 0x158], 1
jmp 0x14008a6e3
lea rdx, [rsp + 0x148]
lea rcx, [0x1400f9618]
mov r8d, 6
call fcn.140056b74
cmp al, dil
je 0x14008a676
mov dword [rsp + 0x158], 2
jmp 0x14008a6e3
lea rdx, [rsp + 0x148]
lea rcx, [0x1400f9608]
mov r8d, 7
call fcn.140056b74
cmp al, dil
je 0x14008a69d
mov r14d, 1
jmp 0x14008a6e3
mov rcx, qword [rsp + 0x148]
movzx eax, word [rcx]
cmp ax, di
je 0x14008a6d6
mov edx, 9
cmp dx, ax
ja 0x14008a6bd
cmp ax, 0xd
jbe 0x14008a6ce
cmp bp, ax
je 0x14008a6ce
add rcx, 2
mov ax, word [rcx]
cmp ax, di
jne 0x14008a6ad
mov qword [rsp + 0x148], rcx
lea rcx, [rsp + 0x148]
call fcn.14004f534
mov rbx, qword [rsp + 0x148]
cmp si, word [rbx]
je 0x14008a5ef
jmp 0x14008a6fe
mov rbx, qword [rsp + 0x148]
lea rcx, [rsp + 0x40]
mov edx, 0x2c
mov qword [rsp + 0x40], rbx
call fcn.140045808
mov rdx, qword [rsp + 0x40]
cmp word [rdx], di
je 0x14008a734
mov word [rdx], di
add qword [rsp + 0x40], 2
lea rcx, [rsp + 0x40]
call fcn.14004f534
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.14006168c
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.14006160c
mov r11, qword [rsp + 0x78]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x98], r11
call fcn.14004f534
mov r12, qword [rsp + 0x98]
cmp word [r12], di
je 0x14008aa7b
lea rcx, [rsp + 0xa0]
call fcn.140057618
mov rsi, qword [rsp + 0x60]
cmp word [r12], di
je 0x14008aa69
movsxd r13, r14d
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xb8]
mov r8d, 0xcd
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0x88], rdi
call fcn.140023d48
mov rbx, qword [rsp + 0xb8]
mov r12, rax
mov rdx, rbx
cmp word [rbx], di
je 0x14008a812
mov r13d, 0x20
movzx ecx, word [rdx]
cmp cx, 0x61
jb 0x14008a7f4
cmp cx, 0x7a
ja 0x14008a7f4
sub cx, r13w
mov word [rdx], cx
jmp 0x14008a806
mov eax, 0x5c
cmp ax, cx
jne 0x14008a806
mov eax, 0x2f
mov word [rdx], ax
add rdx, 2
cmp word [rdx], di
jne 0x14008a7dc
movsxd r13, r14d
mov eax, 0x2d
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x38], edi
cmp word [rbx], ax
jne 0x14008a864
lea rax, [rbx + 2]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
call fcn.1400a911c
mov rbx, qword [rsp + 0x30]
mov r11d, 0x3a
cmp r11w, word [rbx]
jne 0x14008a857
add rbx, 2
mov qword [rsp + 0x30], rbx
mov eax, dword [rsp + 0x38]
cmp eax, edi
cmovl eax, edi
mov dword [rsp + 0x38], eax
cmp word [rbx], di
je 0x14008aa5e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp rsi, rdi
mov ebp, edi
movsxd rcx, eax
mov qword [rsp + 0x88], rcx
jle 0x14008a8c3
mov rax, rdi
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
mov r9d, 8
mov rcx, rax
call fcn.1400575b4
mov rcx, rbx
mov rdx, qword [rax]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
cmp eax, edi
je 0x14008a929
inc ebp
movsxd rax, ebp
cmp rax, rsi
jl 0x14008a88b
mov r9, qword [rsp + 0x30]
cmp r9, rdi
je 0x14008aa5e
cmp r13, rdi
je 0x14008a8f3
mov ebp, 0x23
cmp bp, word [r9]
je 0x14008a8f3
sub r9, 2
mov qword [rsp + 0x30], r9
mov word [r9], bp
mov r9, qword [rsp + 0x30]
lea rcx, str..thread
mov rdx, r9
call fcn.140050aa8
cmp al, dil
je 0x14008a933
test byte [r15 + 0x12], 1
jne 0x14008aa5e
lea rcx, [0x14010ce50]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or byte [r15 + 0x12], 1
jmp 0x14008aa5e
mov r9, rdi
mov qword [rsp + 0x30], rdi
jmp 0x14008a8c8
lea rcx, str..ole
mov rdx, r9
call fcn.140050aa8
cmp al, dil
je 0x14008a991
test byte [r15 + 0x12], 1
jne 0x14008a960
lea rcx, [0x14010ce50]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or byte [r15 + 0x12], 1
mov al, byte [r15 + 0x12]
test al, 2
jne 0x14008aa5e
or al, 2
mov byte [r15 + 0x12], al
call fcn.140055a3c
mov r11, qword [0x14010c540]
cmp r11, rdi
je 0x14008aa5e
xor ecx, ecx
call r11
jmp 0x14008aa5e
or dword [rsp + 0x3c], 0xffffffff
mov eax, r14d
mov rcx, r9
neg eax
lea rax, [rsp + 0x3c]
sbb r8, r8
xor edx, edx
and r8, rax
call fcn.14008a4cc
mov rbp, rax
cmp r13, rdi
je 0x14008a9c9
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x3c]
mov rcx, r15
call fcn.14005a1d0
cmp rbp, rdi
je 0x14008aa5e
mov ecx, dword [rsp + 0x38]
mov qword [rsp + 0xc0], rbx
lea r9, [rsp + 0xc0]
mov dword [rbp + 0x14], ecx
mov ebx, 1
lea r8, [rsp + 0xb0]
lea rcx, [rsp + 0xa0]
lea rdx, [rsp + 0xa8]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 8
call fcn.1400574a4
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0xc8], rbp
mov dword [rsp + 0x20], 8
call fcn.1400574a4
mov rdx, rbp
mov rcx, r15
call fcn.140060228
cmp r13, rdi
jne 0x14008aaab
mov rsi, qword [rsp + 0x60]
cmp word [r12], di
jne 0x14008a798
cmp rsi, rdi
jg 0x14008aab2
lea rcx, [rsp + 0xa0]
call fcn.14004f564
lea rcx, [rsp + 0x78]
call fcn.14004f564
lea rcx, [rsp + 0x70]
call fcn.14004f564
lea rcx, [rsp + 0x50]
call fcn.14004f564
lea rcx, [rsp + 0x48]
call fcn.14004f564
mov rax, rdi
jmp 0x14008adb5
movsxd rdi, dword [rsp + 0x3c]
jmp 0x14008aa6e
lea rdx, [rsi*8 + 8]
lea rcx, [rsp + 0x90]
call fcn.140056f64
cmp rsi, rdi
mov r12, qword [rsp + 0x90]
movsxd rbp, esi
mov r13d, edi
jle 0x14008ab16
mov rax, rdi
mov rbx, r12
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x50]
mov r9d, 8
mov rcx, rax
call fcn.1400575b4
mov rsi, qword [rsp + 0x60]
inc r13d
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
mov qword [rbx], rax
movsxd rax, r13d
add rbx, 8
cmp rax, rsi
jl 0x14008aae0
mov eax, dword [rsp + 0x158]
cmp ebp, 1
mov r14d, edi
setne r14b
mov r13d, 1
mov qword [rsp + 0x68], rdi
mov ebx, 0xffffffff
cmp r14d, edi
je 0x14008ac1e
cmp eax, edi
jne 0x14008ac1e
lea edx, [r13 + 0x2f]
lea rcx, [rsp + 0x80]
call fcn.140056f64
mov rbx, qword [rsp + 0x80]
mov rcx, rbx
call fcn.14004f518
mov eax, 0xffffffff
lea r8, [0x140055cc4]
mov qword [rbx + 0x18], rax
lea rax, [0x14010b958]
mov r9, rbx
mov qword [rsp + 0x28], rax
mov eax, 0x10000
xor ecx, ecx
mov rdx, rax
mov qword [rbx], rdi
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x20], 3
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x68], rax
cmp rax, rdi
jne 0x14008abf2
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [0x14010b958]
mov edx, 0x10000
mov qword [rsp + 0x28], rax
lea r8, [0x140055cc4]
mov r9, rbx
xor ecx, ecx
mov dword [rsp + 0x20], edx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x68], rax
cmp rax, rdi
je 0x14008ac05
mov qword [rsp + 0x80], rdi
lea r12, [rsp + 0x68]
mov r14d, edi
mov ebp, r13d
lea rcx, [rsp + 0x80]
call fcn.14004f564
mov eax, dword [rsp + 0x158]
mov ebx, 0xffffffff
cmp eax, 2
jne 0x14008ac2b
mov r13d, edi
jmp 0x14008ad40
cmp eax, edi
je 0x14008acf2
xor r9d, r9d
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, ebp
jb 0x14008ad08
jmp 0x14008ad40
cmp r14d, edi
jne 0x14008ac78
xor r9d, r9d
mov r8, r12
mov edx, ebp
mov rcx, r15
mov dword [rsp + 0x28], 0x4ff
mov dword [rsp + 0x20], 0x3e8
call fcn.140018d58
jmp 0x14008ac8c
mov r9d, 0x64
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, ebp
jb 0x14008ad03
cmp eax, ebx
jne 0x14008ac9d
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, 0x7cf
mov al, byte [0x14010921f]
cmp al, dil
jle 0x14008aced
lea rcx, [rsp + 0xd0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, edi
je 0x14008aced
lea rcx, [rsp + 0xd0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
sub ebx, r13d
jns 0x14008aca2
mov ebx, 0xffffffff
mov al, byte [0x14010921f]
cmp al, dil
jg 0x14008ac51
jmp 0x14008ad40
mov rsi, qword [rsp + 0x60]
cmp rsi, rdi
mov r13d, edi
mov ebx, edi
jle 0x14008ad40
mov rax, rdi
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x50]
mov r9d, 8
mov rcx, rax
call fcn.1400575b4
inc ebx
mov rcx, qword [rax]
movsxd rax, ebx
cmp rax, qword [rsp + 0x60]
mov byte [rcx + 0x10], 1
jl 0x14008ad15
mov r8, qword [rsp + 0x48]
cmp word [r8], di
je 0x14008ad56
mov edx, r13d
mov rcx, r15
call fcn.14005a1d0
mov rcx, qword [rsp + 0x68]
cmp rcx, rdi
je 0x14008ad66
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov rcx, r15
call fcn.140081ed8
lea rcx, [rsp + 0x90]
call fcn.14004f564
lea rcx, [rsp + 0xa0]
call fcn.14004f564
lea rcx, [rsp + 0x78]
call fcn.14004f564
lea rcx, [rsp + 0x70]
call fcn.14004f564
lea rcx, [rsp + 0x50]
call fcn.14004f564
lea rcx, [rsp + 0x48]
call fcn.14004f564
movsxd rax, r13d
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret