Function at 0x14009c34c
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x110
mov r15, rcx
lea rcx, [rsp + 0x48]
mov rbx, rdx
call fcn.14005c96c
lea rcx, [rsp + 0x58]
call fcn.14005ce30
lea rcx, [rsp + 0x70]
mov rdx, rbx
call fcn.1400671f0
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, r15
call fcn.14000396c
mov r11, qword [rsp + 0x70]
lea rcx, [rsp + 0x158]
mov qword [rsp + 0x158], r11
call fcn.140054c14
xor edi, edi
mov dword [rsp + 0x168], edi
mov dword [rsp + 0x38], edi
lea ebp, [rdi + 0x20]
lea r14d, [rdi + 0x2d]
jmp 0x14009c4c4
cmp r14w, word [rbx + 2]
jne 0x14009c4e0
lea rdx, [rsp + 0x158]
lea rcx, [0x1401097ec]
mov r8d, 2
call fcn.140054c98
cmp eax, edi
jne 0x14009c4d8
lea rdx, [rsp + 0x158]
lea rcx, str.__try
mov r8d, 5
call fcn.14005c3e4
cmp al, dil
je 0x14009c429
mov dword [rsp + 0x168], 1
jmp 0x14009c4c4
lea rdx, [rsp + 0x158]
lea rcx, [0x1401097d0]
mov r8d, 6
call fcn.14005c3e4
cmp al, dil
je 0x14009c455
mov dword [rsp + 0x168], 2
jmp 0x14009c4c4
lea rdx, [rsp + 0x158]
lea rcx, [0x1401097c0]
mov r8d, 7
call fcn.14005c3e4
cmp al, dil
je 0x14009c47e
mov dword [rsp + 0x38], 1
jmp 0x14009c4c4
mov rcx, qword [rsp + 0x158]
movzx eax, word [rcx]
cmp ax, di
je 0x14009c4b7
mov edx, 9
cmp dx, ax
ja 0x14009c49e
cmp ax, 0xd
jbe 0x14009c4af
cmp bp, ax
je 0x14009c4af
add rcx, 2
mov ax, word [rcx]
cmp ax, di
jne 0x14009c48e
mov qword [rsp + 0x158], rcx
lea rcx, [rsp + 0x158]
call fcn.140054c14
mov rbx, qword [rsp + 0x158]
cmp r14w, word [rbx]
je 0x14009c3cd
jmp 0x14009c4e0
mov rbx, qword [rsp + 0x158]
lea rcx, [rsp + 0x40]
mov edx, 0x2c
mov qword [rsp + 0x40], rbx
call fcn.1400da4f4
mov rdx, qword [rsp + 0x40]
cmp word [rdx], di
je 0x14009c516
mov word [rdx], di
add qword [rsp + 0x40], 2
lea rcx, [rsp + 0x40]
call fcn.140054c14
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140067270
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.1400671f0
mov r11, qword [rsp + 0x80]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x88], r11
call fcn.140054c14
mov r13, qword [rsp + 0x88]
cmp word [r13], di
je 0x14009c858
lea rcx, [rsp + 0x98]
call fcn.14005ce30
mov rsi, qword [rsp + 0x68]
cmp word [r13], di
je 0x14009c846
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xc0]
mov r8d, 0xcd
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xb8], rdi
call fcn.140023d04
mov rbx, qword [rsp + 0xc0]
mov r13, rax
mov rdx, rbx
cmp word [rbx], di
je 0x14009c5ed
movzx ecx, word [rdx]
cmp cx, 0x61
jb 0x14009c5d2
cmp cx, 0x7a
ja 0x14009c5d2
sub cx, bp
mov word [rdx], cx
jmp 0x14009c5e4
mov eax, 0x5c
cmp ax, cx
jne 0x14009c5e4
mov eax, 0x2f
mov word [rdx], ax
add rdx, 2
cmp word [rdx], di
jne 0x14009c5bb
mov ebp, edi
mov dword [rsp + 0x50], edi
cmp word [rbx], r14w
jne 0x14009c638
lea rax, [rbx + 2]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0xb0], rax
call fcn.140060ca8
mov rbx, qword [rsp + 0xb0]
mov r11d, 0x3a
cmp r11w, word [rbx]
jne 0x14009c62f
add rbx, 2
mov ebp, dword [rsp + 0x50]
cmp ebp, edi
cmovl ebp, edi
cmp word [rbx], di
je 0x14009c82e
mov rcx, rbx
mov r14, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp rsi, rdi
mov r12d, edi
movsxd rcx, eax
mov qword [rsp + 0xb8], rcx
jle 0x14009c6a1
mov rax, rdi
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
mov r9d, 8
mov rcx, rax
call fcn.14005cdcc
mov rcx, rbx
mov rdx, qword [rax]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
cmp eax, edi
je 0x14009c69e
inc r12d
movsxd rax, r12d
cmp rax, rsi
jl 0x14009c663
jmp 0x14009c6a1
mov rbx, rdi
cmp rbx, rdi
je 0x14009c828
movsxd r9, dword [rsp + 0x38]
mov r12, r9
cmp r9, rdi
je 0x14009c6c8
mov eax, 0x23
cmp ax, word [rbx]
je 0x14009c6c8
sub rbx, 2
mov word [rbx], ax
lea rcx, str..thread
mov rdx, rbx
call fcn.140056198
cmp al, dil
je 0x14009c6fe
test byte [r15 + 0x12], 1
jne 0x14009c828
lea rcx, [0x14011cf88]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or byte [r15 + 0x12], 1
jmp 0x14009c828
lea rcx, str..ole
mov rdx, rbx
call fcn.140056198
cmp al, dil
je 0x14009c75c
test byte [r15 + 0x12], 1
jne 0x14009c72b
lea rcx, [0x14011cf88]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or byte [r15 + 0x12], 1
mov al, byte [r15 + 0x12]
test al, 2
jne 0x14009c828
or al, 2
mov byte [r15 + 0x12], al
call fcn.14005aef0
mov r11, qword [0x14011c680]
cmp r11, rdi
je 0x14009c828
xor ecx, ecx
call r11
jmp 0x14009c828
or dword [rsp + 0x30], 0xffffffff
mov eax, r9d
mov rcx, rbx
neg eax
lea rax, [rsp + 0x30]
sbb r8, r8
xor edx, edx
and r8, rax
call fcn.14009c2a8
mov rbx, rax
cmp r12, rdi
je 0x14009c794
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov rcx, r15
call fcn.14005f9f4
cmp rbx, rdi
je 0x14009c828
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], 1
mov dword [rbx + 0x14], ebp
mov qword [rsp + 0xc8], r14
mov dword [rsp + 0x20], 8
call fcn.14005ccbc
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], 1
mov qword [rsp + 0xd0], rbx
mov dword [rsp + 0x20], 8
call fcn.14005ccbc
mov rdx, rbx
mov rcx, r15
call fcn.140066098
cmp r12, rdi
jne 0x14009c83f
mov rsi, qword [rsp + 0x68]
mov r14d, 0x2d
cmp word [r13], di
je 0x14009c846
mov ebp, 0x20
jmp 0x14009c57d
movsxd rdi, dword [rsp + 0x30]
jmp 0x14009c84b
cmp rsi, rdi
jg 0x14009c88b
lea rcx, [rsp + 0x98]
call fcn.140054c44
lea rcx, [rsp + 0x80]
call fcn.140054c44
lea rcx, [rsp + 0x70]
call fcn.140054c44
lea rcx, [rsp + 0x58]
call fcn.140054c44
lea rcx, [rsp + 0x48]
call fcn.140054c44
mov rax, rdi
jmp 0x14009cb85
lea rdx, [rsi*8 + 8]
lea rcx, [rsp + 0x90]
call fcn.14005c6f4
cmp rsi, rdi
mov r12, qword [rsp + 0x90]
movsxd rbp, esi
mov r13d, edi
jle 0x14009c8ef
mov rax, rdi
mov rbx, r12
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005cdcc
mov rsi, qword [rsp + 0x68]
inc r13d
mov rcx, qword [rax]
mov rax, qword [rcx + 8]
mov qword [rbx], rax
movsxd rax, r13d
add rbx, 8
cmp rax, rsi
jl 0x14009c8b9
mov eax, dword [rsp + 0x168]
cmp ebp, 1
mov r14d, edi
setne r14b
mov r13d, 1
mov qword [rsp + 0x78], rdi
mov ebx, 0xffffffff
cmp r14d, edi
je 0x14009c9eb
cmp eax, edi
jne 0x14009c9eb
lea edx, [r13 + 0x2f]
lea rcx, [rsp + 0x38]
call fcn.14005c6f4
mov rbx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.140054bf8
mov eax, 0xffffffff
lea r8, [0x14005b204]
mov qword [rbx + 0x18], rax
lea rax, [0x14011b960]
mov r9, rbx
mov qword [rsp + 0x28], rax
mov eax, 0x10000
xor ecx, ecx
mov rdx, rax
mov qword [rbx], rdi
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x20], 3
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
jne 0x14009c9c5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [0x14011b960]
mov edx, 0x10000
mov qword [rsp + 0x28], rax
lea r8, [0x14005b204]
mov r9, rbx
xor ecx, ecx
mov dword [rsp + 0x20], edx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x78], rax
cmp rax, rdi
je 0x14009c9d5
mov qword [rsp + 0x38], rdi
lea r12, [rsp + 0x78]
mov r14d, edi
mov ebp, r13d
lea rcx, [rsp + 0x38]
call fcn.140054c44
mov eax, dword [rsp + 0x168]
mov ebx, 0xffffffff
cmp eax, 2
jne 0x14009c9f8
mov r13d, edi
jmp 0x14009cb0d
cmp eax, edi
je 0x14009cabf
xor r9d, r9d
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, ebp
jb 0x14009cad5
jmp 0x14009cb0d
cmp r14d, edi
jne 0x14009ca45
xor r9d, r9d
mov r8, r12
mov edx, ebp
mov rcx, r15
mov dword [rsp + 0x28], 0x4ff
mov dword [rsp + 0x20], 0x3e8
call fcn.14001a0a8
jmp 0x14009ca59
mov r9d, 0x64
mov r8d, r13d
mov rdx, r12
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, ebp
jb 0x14009cad0
cmp eax, ebx
jne 0x14009ca6a
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, 0x7cf
mov al, byte [0x14011922f]
cmp al, dil
jle 0x14009caba
lea rcx, [rsp + 0xd8]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, edi
je 0x14009caba
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.USER32.dll_DispatchMessageW]
sub ebx, r13d
jns 0x14009ca6f
mov ebx, 0xffffffff
mov al, byte [0x14011922f]
cmp al, dil
jg 0x14009ca1e
jmp 0x14009cb0d
mov rsi, qword [rsp + 0x68]
cmp rsi, rdi
mov r13d, edi
mov ebx, edi
jle 0x14009cb0d
mov rax, rdi
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov r9d, 8
mov rcx, rax
call fcn.14005cdcc
inc ebx
mov rcx, qword [rax]
movsxd rax, ebx
cmp rax, qword [rsp + 0x68]
mov byte [rcx + 0x10], 1
jl 0x14009cae2
mov r8, qword [rsp + 0x48]
cmp word [r8], di
je 0x14009cb23
mov edx, r13d
mov rcx, r15
call fcn.14005f9f4
mov rcx, qword [rsp + 0x78]
cmp rcx, rdi
je 0x14009cb33
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov rcx, r15
call fcn.140090e78
lea rcx, [rsp + 0x90]
call fcn.140054c44
lea rcx, [rsp + 0x98]
call fcn.140054c44
lea rcx, [rsp + 0x80]
call fcn.140054c44
lea rcx, [rsp + 0x70]
call fcn.140054c44
lea rcx, [rsp + 0x58]
call fcn.140054c44
lea rcx, [rsp + 0x48]
call fcn.140054c44
movsxd rax, r13d
mov rbx, qword [rsp + 0x150]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret