Function at 0x140007b34
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov rdi, qword [rcx]
xor ebp, ebp
mov rsi, qword [rcx + 8]
mov r13, rcx
mov eax, dword [0x140202cec]
mov ebx, ebp
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rsi
lea r14d, [rbp + 1]
test eax, eax
je 0x140007ba5
mov r15d, 0xc8
cmp ebx, r15d
jge 0x140007b9d
mov ecx, gethostbyname
add ebx, r14d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x140202cec]
test eax, eax
jne 0x140007b7b
cmp ebx, r15d
jl 0x140007ba5
test eax, eax
jne 0x140007f75
cmp dword [0x140202d1c], ebp
mov dword [0x140202cec], r14d
mov dword [0x140200120], ebp
mov dword [0x140202cfc], ebp
jne 0x140007bdd
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x140200128], rax
call fcn.140009274
test ax, ax
je 0x140007f75
mov rdx, rsi
mov rcx, rdi
call fcn.1400077a0
cmp dword [0x140202d1c], ebp
jne 0x140007c21
mov qword [rsp + 0x28], rbp
lea r8, [0x140007a28]
mov r9, r13
mov dword [rsp + 0x20], ebp
xor edx, edx
mov dword [0x140200120], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x140202d2c]
test eax, eax
jle 0x140007c63
mov rcx, qword [0x140202d10]
mov r8d, eax
mov r10d, dword [0x140202d34]
test r10d, r10d
jle 0x140007c5a
mov rdx, rbp
mov r9, r10
mov rax, qword [rcx]
mov dword [rdx + rax], 0xff
lea rdx, [rdx + 8]
sub r9, r14
jne 0x140007c47
add rcx, 8
sub r8, r14
jne 0x140007c3c
mov rdx, rsi
mov rcx, rdi
call fcn.140006b6c
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x140200120], ebp
jne 0x140007ebf
mov eax, dword [0x140202d2c]
test eax, eax
jle 0x140007cc5
mov rcx, qword [0x140202d10]
mov r8d, eax
mov r10d, dword [0x140202d34]
test r10d, r10d
jle 0x140007cbc
mov rdx, rbp
mov r9, r10
mov rax, qword [rcx]
lea rdx, [rdx + 8]
mov byte [rax + rdx - 4], bpl
sub r9, r14
jne 0x140007cab
add rcx, 8
sub r8, r14
jne 0x140007ca0
mov r8, rsi
mov rdx, rdi
mov ecx, r14d
call fcn.140006d1c
cmp dword [0x140200120], ebp
jne 0x140007ebf
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.140008efc
cmp eax, r14d
je 0x140007eb8
cmp dword [0x140202d2c], ebp
mov ebx, ebp
mov r12, qword [rsp + 0xc8]
jle 0x140007e51
mov r13, qword [rsp + 0xb8]
mov r15, rbp
cmp dword [0x140202d34], ebp
mov edi, ebp
jle 0x140007e26
mov r14, rbp
mov esi, dword [0x140202d04]
mov ebp, dword [0x140202d28]
imul esi, ebx
imul ebp, edi
cmp dword [0x140200120], 0
jne 0x140007e20
cmp dword [0x140202cfc], 0
je 0x140007d68
mov ecx, gethostbyname
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x140200120], 0
je 0x140007d4b
cmp dword [0x140200120], 0
jne 0x140007e20
mov eax, dword [0x140200130]
cmp dword [0x140200134], eax
jne 0x140007e20
mov rax, qword [0x140202d10]
mov r8, qword [r15 + rax]
mov al, byte [r8 + r14 + 4]
dec al
test al, 0xfd
je 0x140007e0e
mov dword [rsp + 0x30], edi
lea r9, [rsp + 0x48]
mov dword [rsp + 0x28], ebx
lea r8, [rsp + 0x40]
mov edx, esi
mov qword [rsp + 0x20], r12
mov ecx, ebp
call fcn.140008a88
cmp eax, 1
je 0x140007e0e
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x140007e0e
cmp dword [0x140200120], 0
jne 0x140007e0e
mov r8, qword [rsp + 0xc0]
mov rcx, rsi
mov edx, dword [rsp + 0x48]
call r13
cmp eax, 0xfffffffc
je 0x140007dfc
test eax, eax
jne 0x140007e06
mov dword [0x140202cfc], 1
jmp 0x140007e06
mov dword [0x140200120], 1
mov rcx, rsi
call fcn.1401630c0
inc edi
add r14, 8
cmp edi, dword [0x140202d34]
jl 0x140007d2c
xor ebp, ebp
lea r14d, [rbp + 1]
add ebx, r14d
add r15, 8
cmp ebx, dword [0x140202d2c]
jl 0x140007d1b
mov r13, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0xc0]
test r12, r12
je 0x140007e5e
mov rcx, r12
call fcn.1401630c0
cmp dword [0x140200120], ebp
mov ebx, dword [0x140202d18]
mov qword [rsp + 0xc8], rbp
mov qword [rsp + 0x50], rbp
jne 0x140007ebf
test ebx, ebx
jle 0x140007c79
cmp ebx, 0x32
jle 0x140007e96
sub ebx, 0x32
mov ecx, gethostbyname
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140007ea0
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, ebp
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SleepEx]
cmp dword [0x140200120], ebp
je 0x140007e79
jmp 0x140007c79
mov dword [0x140200120], r14d
cmp qword [0x140202d10], rbp
je 0x140007f07
cmp dword [0x140202d2c], ebp
mov ebx, ebp
jle 0x140007ef4
mov rdi, rbp
mov rcx, qword [0x140202d10]
mov rcx, qword [rdi + rcx]
call fcn.1401630c0
add ebx, r14d
lea rdi, [rdi + 8]
cmp ebx, dword [0x140202d2c]
jl 0x140007ed5
mov rcx, qword [0x140202d10]
call fcn.1401630c0
mov qword [0x140202d10], rbp
mov rcx, qword [0x140202d48]
test rcx, rcx
je 0x140007f18
call fcn.1401630c0
mov rcx, qword [0x140202df8]
mov dword [0x140202d58], ebp
mov qword [0x140202d48], rbp
call qword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov rcx, qword [0x140202d88]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [0x140202df0]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rdx, qword [0x140202d50]
test rdx, rdx
je 0x140007f60
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, r13
mov qword [0x140202d50], rbp
mov dword [0x140202cec], ebp
call fcn.1401630c0
xor eax, eax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret