Function at 0x1400a8f90
Capabilities:
Create thread

Disassembly:
jmp 0x1400a8f90
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0xf8
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov rax, qword [0x14028c8d0]
xor rax, rsp
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x100]
cmp qword [rax + 0x150], 0
je 0x1400a902d
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x158], 1
mov rax, qword [rsp + 0x100]
add rax, 0x160
mov rcx, rax
call fcn.1400051f0
mov edx, 0xffffffff
mov rax, qword [rsp + 0x100]
mov rcx, qword [rax + 0x150]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [rsp + 0x100]
mov qword [rax + 0x150], 0
mov rax, qword [rsp + 0x100]
add rax, 0x60
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140003edb
nop
mov rax, qword [rsp + 0x100]
add rax, 0x48
mov rdx, qword [rsp + 0x108]
mov rcx, rax
call fcn.140004624
cmp dword [rsp + 0x110], 0xffffffff
jne 0x1400a909e
mov rax, qword [rsp + 0x100]
add rax, 0x48
mov rcx, rax
call fcn.140002b08
mov rdx, rax
mov rcx, qword [rsp + 0x100]
call fcn.1400040b6
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x50], eax
jmp 0x1400a90b0
mov rax, qword [rsp + 0x100]
mov ecx, dword [rsp + 0x110]
mov dword [rax + 0x50], ecx
cmp qword [rsp + 0x108], 0
jne 0x1400a90d3
mov rax, qword [rsp + 0x100]
add rax, 0x88
mov rcx, rax
call fcn.1400012f8
jmp 0x1400a9131
mov rax, qword [rsp + 0x100]
add rax, 0x48
mov rcx, rax
call fcn.140002b08
mov rcx, qword [rsp + 0x100]
add rcx, 0x88
mov rdx, rax
call fcn.140003927
test eax, eax
jne 0x1400a9131
mov rax, qword [rsp + 0x100]
add rax, 0x48
mov rcx, rax
call fcn.140002ae5
mov dword [rsp + 0x34], 0
lea rcx, [rsp + 0x40]
call fcn.1400053da
mov eax, dword [rsp + 0x34]
jmp 0x1400a95ed
lea rcx, [rsp + 0x68]
call fcn.14000312a
mov rax, qword [rsp + 0x100]
add rax, 8
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.140001a96
mov rax, qword [rsp + 0x100]
add rax, 8
mov rcx, rax
call fcn.14000434f
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x100]
mov rdx, qword [rax + 0xe8]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rsp + 0x58], rax
mov r8d, VarDateFromDisp
xor edx, edx
lea rcx, [rsp + 0x80]
call sub.MSVCR120D.dll_memset
lea r8, [rsp + 0x80]
mov edx, VarDateFromDisp
mov rax, qword [rsp + 0x100]
mov rcx, qword [rax + 0xe8]
call qword [sym.imp.GDI32.dll_GetObjectW]
mov rax, qword [rsp + 0x100]
mov ecx, dword [rsp + 0x84]
mov dword [rax + 0xf0], ecx
mov rax, qword [rsp + 0x100]
mov ecx, dword [rsp + 0x80]
mov dword [rax + 0xf4], ecx
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.GDI32.dll_SelectObject]
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x128], 0
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x12c], 0
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x120], 0
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x124], 0
mov rax, qword [rsp + 0x100]
add rax, 0x130
mov rcx, rax
call fcn.1400047e6
mov rax, qword [rsp + 0x100]
mov qword [rax + 0x108], 0
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x100], 0
mov rax, qword [rsp + 0x100]
add rax, 0x160
mov rcx, rax
call fcn.1400015af
mov rax, qword [rsp + 0x100]
add rax, 0x1a0
mov rcx, rax
call fcn.140002ec8
mov rax, qword [rsp + 0x100]
cmp dword [rax + 0x50], 0
jne 0x1400a9399
mov rax, qword [rsp + 0x100]
add rax, 0x88
mov rcx, rax
call fcn.140004732
test rax, rax
je 0x1400a9308
mov rax, qword [rsp + 0x100]
imul eax, dword [rax + 0x110], 3
mov rcx, qword [rsp + 0x100]
mov ecx, dword [rcx + 0x110]
lea eax, [rax + rcx + 0xb]
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x100], eax
mov rax, qword [rsp + 0x100]
add rax, 0x88
mov rcx, rax
call fcn.140004732
mov rcx, qword [rsp + 0x100]
movsxd rcx, dword [rcx + 0x110]
xor edx, edx
div rcx
mov rcx, qword [rsp + 0x100]
mov qword [rcx + 0x108], rax
mov rax, qword [rsp + 0x100]
add rax, 0x88
mov rcx, rax
call fcn.140004732
mov rcx, qword [rsp + 0x100]
movsxd rcx, dword [rcx + 0x110]
xor edx, edx
div rcx
mov rax, rdx
test rax, rax
je 0x1400a9394
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x108]
inc rax
mov rcx, qword [rsp + 0x100]
mov qword [rcx + 0x108], rax
jmp 0x1400a959d
mov rax, qword [rsp + 0x100]
cmp dword [rax + 0x50], 1
jne 0x1400a94cc
cmp dword [rsp + 0x118], 0xffffffff
jne 0x1400a93fc
mov rax, qword [rsp + 0x100]
add rax, 0x58
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x100]
add rcx, 0x48
call fcn.140002b08
mov rcx, qword [rsp + 0x50]
mov r8, rcx
mov rdx, rax
mov rcx, qword [rsp + 0x100]
call fcn.140002a72
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x54], eax
jmp 0x1400a945f
mov rax, qword [rsp + 0x100]
mov ecx, dword [rsp + 0x118]
mov dword [rax + 0x54], ecx
mov dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x100]
add rax, 0x48
mov rcx, rax
call fcn.140002b08
lea r8, [rsp + 0x30]
mov rdx, rax
mov rcx, qword [rsp + 0x100]
call fcn.140002a72
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
cmp dword [rsp + 0x118], eax
jne 0x1400a945f
mov rax, qword [rsp + 0x100]
mov ecx, dword [rsp + 0x30]
mov dword [rax + 0x58], ecx
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x158], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x100]
lea r8, [0x1400016ef]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsp + 0x100]
mov qword [rcx + 0x150], rax
xor r9d, r9d
mov r8d, 0xfa
xor edx, edx
mov rax, qword [rsp + 0x100]
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetTimer]
jmp 0x1400a959d
mov rax, qword [rsp + 0x100]
cmp dword [rax + 0x50], 2
jne 0x1400a9544
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x158], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x100]
lea r8, [0x1400016ef]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsp + 0x100]
mov qword [rcx + 0x150], rax
xor r9d, r9d
mov r8d, 0xfa
xor edx, edx
mov rax, qword [rsp + 0x100]
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetTimer]
jmp 0x1400a959d
mov rax, qword [rsp + 0x100]
cmp dword [rax + 0x50], 3
jne 0x1400a959d
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x158], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x100]
lea r8, [0x1400016ef]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsp + 0x100]
mov qword [rcx + 0x150], rax
mov rcx, qword [rsp + 0x100]
call fcn.140004fa7
mov rax, qword [rsp + 0x100]
add rax, 8
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140003693
mov rax, qword [rsp + 0x100]
add rax, 8
mov rcx, rax
call fcn.140002df6
mov dword [rsp + 0x3c], 1
lea rcx, [rsp + 0x40]
call fcn.1400053da
mov eax, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.1401b0dd0
add rsp, 0xf8
ret