Function at 0x100439120
Capabilities:
Create thread

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rdi
lea rax, [rbp - 0x28]
mov qword [rbp + 0x10], rax
xor edi, edi
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
lea r8d, [rdi + 0xe]
lea rdx, str.CoreEngineMask
lea rcx, [rbp - 0x28]
call fcn.10040da90
nop
call fcn.10044da70
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.100409ee0
test al, 0x10
jne 0x10043922e
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x100430a50]
mov edx, 0x80000
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, rax
test rax, rax
jne 0x1004391c3
xor eax, eax
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
add rsp, 0x60
pop rbp
ret
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test eax, eax
je 0x1004391ae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0xfa
mov rcx, qword [0x1004a9138]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x100439245
nop dword [rax]
nop dword [rax + rax]
xor edx, edx
mov rcx, qword [0x1004a90e0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1004391ae
mov edx, 0xfa
mov rcx, qword [0x1004a9138]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x100439200
jmp 0x100439245
lea r9, str.MailDispatcher
xor edx, edx
lea ecx, [rdx + 2]
mov r8d, 0x177
call fcn.100432180
lea rax, [rbp - 0x28]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
mov r8d, SQLFreeStmt
lea rdx, str.CoreEngineMask
lea rcx, [rbp - 0x28]
call fcn.10040da90
nop
call fcn.10044da70
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.100409ee0
test al, 1
jne 0x1004392d3
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x10041f090]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, rax
test rax, rax
je 0x1004391ae
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test eax, eax
je 0x1004391ae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1004392ea
lea r9, str.JobInvocationEngine
xor edx, edx
lea ecx, [rdx + 2]
mov r8d, 0x177
call fcn.100432180
cmp dword [0x1004a9180], 0
jne 0x100439392
cmp dword [0x1004a9184], 0
jne 0x100439392
lea rax, [rbp - 0x28]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
mov r8d, SQLFreeStmt
lea rdx, str.CoreEngineMask
lea rcx, [rbp - 0x28]
call fcn.10040da90
nop
call fcn.10044da70
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.100409ee0
test al, 2
jne 0x100439392
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x1004014a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, rax
test rax, rax
je 0x1004391ae
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test eax, eax
je 0x1004391ae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1004393a9
lea r9, str.AlertEngine
xor edx, edx
lea ecx, [rdx + 2]
mov r8d, 0x177
call fcn.100432180
lea rax, [rbp - 0x28]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
mov r8d, SQLFreeStmt
lea rdx, str.CoreEngineMask
lea rcx, [rbp - 0x28]
call fcn.10040da90
nop
call fcn.10044da70
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.100409ee0
test al, 4
jne 0x100439437
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x100446e50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, rax
test rax, rax
je 0x1004391ae
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test eax, eax
je 0x1004391ae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10043944e
lea r9, str.ExternalRequestorEngine
xor edx, edx
lea ecx, [rdx + 2]
mov r8d, 0x177
call fcn.100432180
lea rax, [rbp - 0x28]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
mov r8d, SQLFreeStmt
lea rdx, str.CoreEngineMask
lea rcx, [rbp - 0x28]
call fcn.10040da90
nop
call fcn.10044da70
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.100409ee0
test al, 8
jne 0x1004394dc
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x10040de10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, rax
test rax, rax
je 0x1004391ae
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test eax, eax
je 0x1004391ae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1004394f3
lea r9, str.AutoStartEngine
xor edx, edx
lea ecx, [rdx + 2]
mov r8d, 0x177
call fcn.100432180
lea rax, [rbp - 0x28]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
mov r8d, SQLFreeStmt
lea rdx, str.CoreEngineMask
lea rcx, [rbp - 0x28]
call fcn.10040da90
nop
call fcn.10044da70
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.100409ee0
test al, 0x20
jne 0x10043957e
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x100429e80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, rax
test rax, rax
je 0x1004391ae
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test eax, eax
je 0x1004391ae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10043958e
xor edx, edx
lea ecx, [rdx + 2]
mov r8d, 0x18c
call fcn.100432180
lea rax, [rbp - 0x28]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
mov r8d, SQLFreeStmt
lea rdx, str.CoreEngineMask
lea rcx, [rbp - 0x28]
call fcn.10040da90
nop
call fcn.10044da70
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.100409ee0
test al, 4
je 0x1004395e1
xor r9d, r9d
xor r8d, r8d
lea ecx, [r9 + 4]
call fcn.10044b960
mov eax, 1
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
add rsp, 0x60
pop rbp
ret