Function at 0x14009916c
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x110
mov r15, rcx
lea rcx, [rsp + 0x48]
mov rbx, rdx
call fcn.14005a150
lea rcx, [rsp + 0x58]
call fcn.14005a614
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.140064d14
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, r15
call fcn.14000397c
mov r11, qword [rsp + 0x70]
lea rcx, [rsp + 0x158]
mov qword [rsp + 0x158], r11
call fcn.140052130
xor edi, edi
mov dword [rsp + 0x168], edi
mov dword [rsp + 0x38], edi
lea ebp, [rdi + 0x20]
lea r14d, [rdi + 0x2d]
jmp 0x1400992e4
cmp r14w, word [rbx + 2]
jne 0x140099300
lea rdx, [rsp + 0x158]
lea rcx, [0x1401051cc]
mov r8d, 2
call fcn.1400521b4
cmp eax, edi
jne 0x1400992f8
lea rdx, [rsp + 0x158]
lea rcx, [0x1401051c0]
mov r8d, 5
call fcn.140059abc
cmp al, dil
je 0x140099249
mov dword [rsp + 0x168], 1
jmp 0x1400992e4
lea rdx, [rsp + 0x158]
lea rcx, [0x1401051b0]
mov r8d, 6
call fcn.140059abc
cmp al, dil
je 0x140099275
mov dword [rsp + 0x168], 2
jmp 0x1400992e4
lea rdx, [rsp + 0x158]
lea rcx, [0x1401051a0]
mov r8d, 7
call fcn.140059abc
cmp al, dil
je 0x14009929e
mov dword [rsp + 0x38], 1
jmp 0x1400992e4
mov rcx, qword [rsp + 0x158]
movzx eax, word [rcx]
cmp ax, di
je 0x1400992d7
mov edx, 9
cmp dx, ax
ja 0x1400992be
cmp ax, 0xd
jbe 0x1400992cf
cmp bp, ax
je 0x1400992cf
add rcx, 2
mov ax, word [rcx]
cmp ax, di
jne 0x1400992ae
mov qword [rsp + 0x158], rcx
lea rcx, [rsp + 0x158]
call fcn.140052130
mov rbx, qword [rsp + 0x158]
cmp r14w, word [rbx]
je 0x1400991ed
jmp 0x140099300
mov rbx, qword [rsp + 0x158]
lea rcx, [rsp + 0x40]
mov edx, 0x2c
mov qword [rsp + 0x40], rbx
call fcn.1400cb7a8
mov rdx, qword [rsp + 0x40]
cmp word [rdx], di
je 0x140099336
mov word [rdx], di
add qword [rsp + 0x40], 2
lea rcx, [rsp + 0x40]
call fcn.140052130
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140064d94
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.140064d14
mov r11, qword [rsp + 0x80]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x88], r11
call fcn.140052130
mov r13, qword [rsp + 0x88]
cmp word [r13], di
je 0x140099678
lea rcx, [rsp + 0x98]
call fcn.14005a614
mov rsi, qword [rsp + 0x68]
cmp word [r13], di
je 0x140099666
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xc0]
mov r8d, 0xcd
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xb8], rdi
call fcn.1400256a8
mov rbx, qword [rsp + 0xc0]
mov r13, rax
mov rdx, rbx
cmp word [rbx], di
je 0x14009940d
movzx ecx, word [rdx]
cmp cx, 0x61
jb 0x1400993f2
cmp cx, 0x7a
ja 0x1400993f2
sub cx, bp
mov word [rdx], cx
jmp 0x140099404
mov eax, 0x5c
cmp ax, cx
jne 0x140099404
mov eax, 0x2f
mov word [rdx], ax
add rdx, 2
cmp word [rdx], di
jne 0x1400993db
mov ebp, edi
mov dword [rsp + 0x50], edi
cmp word [rbx], r14w
jne 0x140099458
lea rax, [rbx + 2]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0xb0], rax
call fcn.14005e4b0
mov rbx, qword [rsp + 0xb0]
mov r11d, 0x3a
cmp r11w, word [rbx]
jne 0x14009944f
add rbx, 2
mov ebp, dword [rsp + 0x50]
cmp ebp, edi
cmovl ebp, edi
cmp word [rbx], di
je 0x14009964e
mov rcx, rbx
mov r14, rbx
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp rsi, rdi
mov r12d, edi
movsxd rcx, eax
mov qword [rsp + 0xb8], rcx
jle 0x1400994c1
mov rax, rdi
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
mov r9d, 8
mov rcx, rax
call fcn.14005a5b0
mov rcx, rbx
mov rdx, qword [rax]
call qword [sym.imp.KERNEL32.DLL_lstrcmpW]
cmp eax, edi
je 0x1400994be
inc r12d
movsxd rax, r12d
cmp rax, rsi
jl 0x140099483
jmp 0x1400994c1
mov rbx, rdi
cmp rbx, rdi
je 0x140099648
movsxd r9, dword [rsp + 0x38]
mov r12, r9
cmp r9, rdi
je 0x1400994e8
mov eax, 0x23
cmp ax, word [rbx]
je 0x1400994e8
sub rbx, 2
mov word [rbx], ax
lea rcx, [0x140105198]
mov rdx, rbx
call fcn.1400536b0
cmp al, dil
je 0x14009951e
test byte [r15 + 0x12], 1
jne 0x140099648
lea rcx, [0x140118f08]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
or byte [r15 + 0x12], 1
jmp 0x140099648
lea rcx, [0x140105190]
mov rdx, rbx
call fcn.1400536b0
cmp al, dil
je 0x14009957c
test byte [r15 + 0x12], 1
jne 0x14009954b
lea rcx, [0x140118f08]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
or byte [r15 + 0x12], 1
mov al, byte [r15 + 0x12]
test al, 2
jne 0x140099648
or al, 2
mov byte [r15 + 0x12], al
call fcn.1400587b8
mov r11, qword [0x140118600]
cmp r11, rdi
je 0x140099648
xor ecx, ecx
call r11
jmp 0x140099648
or dword [rsp + 0x30], 0xffffffff
mov eax, r9d
mov rcx, rbx
neg eax
lea rax, [rsp + 0x30]
sbb r8, r8
xor edx, edx
and r8, rax
call fcn.1400990c8
mov rbx, rax
cmp r12, rdi
je 0x1400995b4
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov rcx, r15
call fcn.14005d1d8
cmp rbx, rdi
je 0x140099648
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], 1
mov dword [rbx + 0x14], ebp
mov qword [rsp + 0xc8], r14
mov dword [rsp + 0x20], 8
call fcn.14005a4a0
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], 1
mov qword [rsp + 0xd0], rbx
mov dword [rsp + 0x20], 8
call fcn.14005a4a0
mov rdx, rbx
mov rcx, r15
call fcn.140063900
cmp r12, rdi
jne 0x14009965f
mov rsi, qword [rsp + 0x68]
mov r14d, 0x2d
cmp word [r13], di
je 0x140099666
mov ebp, 0x20
jmp 0x14009939d
movsxd rdi, dword [rsp + 0x30]
jmp 0x14009966b
cmp rsi, rdi
jg 0x1400996ab
lea rcx, [rsp + 0x98]
call fcn.140052160
lea rcx, [rsp + 0x80]
call fcn.140052160
lea rcx, [rsp + 0x70]
call fcn.140052160
lea rcx, [rsp + 0x58]
call fcn.140052160
lea rcx, [rsp + 0x48]
call fcn.140052160
mov rax, rdi
jmp 0x1400999a5
lea rdx, [rsi*8 + 8]
lea rcx, [rsp + 0x90]
call fcn.140059ed8
cmp rsi, rdi
mov r12, qword [rsp + 0x90]
movsxd rbp, esi
mov r13d, edi
jle 0x14009970f
mov rax, rdi
mov rbx, r12
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005a5b0
mov rsi, qword [rsp + 0x68]
inc r13d
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
mov qword [rbx], rax
movsxd rax, r13d
add rbx, 8
cmp rax, rsi
jl 0x1400996d9
mov eax, dword [rsp + 0x168]
cmp ebp, 1
mov r14d, edi
setne r14b
mov r13d, 1
mov qword [rsp + 0x78], rdi
mov ebx, 0xffffffff
cmp r14d, edi
je 0x14009980b
cmp eax, edi
jne 0x14009980b
lea edx, [r13 + 0x2f]
lea rcx, [rsp + 0x38]
call fcn.140059ed8
mov rbx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.140052114
mov eax, 0xffffffff
lea r8, [0x140058ab0]
mov qword [rbx + 0x18], rax
lea rax, [0x1401178e4]
mov r9, rbx
mov qword [rsp + 0x28], rax
mov eax, 0x10000
xor ecx, ecx
mov rdx, rax
mov qword [rbx], rdi
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x20], 3
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.DLL_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
jne 0x1400997e5
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_Sleep]
lea rax, [0x1401178e4]
mov edx, 0x10000
mov qword [rsp + 0x28], rax
lea r8, [0x140058ab0]
mov r9, rbx
xor ecx, ecx
mov dword [rsp + 0x20], edx
call qword [sym.imp.KERNEL32.DLL_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
je 0x1400997f5
mov qword [rsp + 0x38], rdi
lea r12, [rsp + 0x78]
mov r14d, edi
mov ebp, r13d
lea rcx, [rsp + 0x38]
call fcn.140052160
mov eax, dword [rsp + 0x168]
mov ebx, 0xffffffff
cmp eax, 2
jne 0x140099818
mov r13d, edi
jmp 0x14009992d
cmp eax, edi
je 0x1400998df
xor r9d, r9d
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_WaitForMultipleObjects]
cmp eax, ebp
jb 0x1400998f5
jmp 0x14009992d
cmp r14d, edi
jne 0x140099865
xor r9d, r9d
mov r8, r12
mov edx, ebp
mov rcx, r15
mov dword [rsp + 0x28], 0x4ff
mov dword [rsp + 0x20], 0x3e8
call fcn.140019ad0
jmp 0x140099879
mov r9d, 0x64
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_WaitForMultipleObjects]
cmp eax, ebp
jb 0x1400998f0
cmp eax, ebx
jne 0x14009988a
mov ecx, r13d
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov ebx, 0x7cf
mov al, byte [0x14011521f]
cmp al, dil
jle 0x1400998da
lea rcx, [rsp + 0xd8]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.DLL_PeekMessageW]
cmp eax, edi
je 0x1400998da
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.DLL_TranslateMessage]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.DLL_DispatchMessageW]
sub ebx, r13d
jns 0x14009988f
mov ebx, 0xffffffff
mov al, byte [0x14011521f]
cmp al, dil
jg 0x14009983e
jmp 0x14009992d
mov rsi, qword [rsp + 0x68]
cmp rsi, rdi
mov r13d, edi
mov ebx, edi
jle 0x14009992d
mov rax, rdi
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005a5b0
inc ebx
mov rcx, qword [rax]
movsxd rax, ebx
cmp rax, qword [rsp + 0x68]
mov byte [rcx + 0x10], 1
jl 0x140099902
mov r8, qword [rsp + 0x48]
cmp word [r8], di
je 0x140099943
mov edx, r13d
mov rcx, r15
call fcn.14005d1d8
mov rcx, qword [rsp + 0x78]
cmp rcx, rdi
je 0x140099953
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
xor edx, edx
mov rcx, r15
call fcn.14008df1c
lea rcx, [rsp + 0x90]
call fcn.140052160
lea rcx, [rsp + 0x98]
call fcn.140052160
lea rcx, [rsp + 0x80]
call fcn.140052160
lea rcx, [rsp + 0x70]
call fcn.140052160
lea rcx, [rsp + 0x58]
call fcn.140052160
lea rcx, [rsp + 0x48]
call fcn.140052160
movsxd rax, r13d
mov rbx, qword [rsp + 0x150]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret