Function at 0x140010390
Capabilities:
Create thread

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0x1b0
mov rax, qword [0x140195088]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov qword [r11 + 0x10], rbp
mov rbx, rcx
xor ebp, ebp
mov qword [r11 + 0x20], rdi
mov r8d, ebp
cmp dword [rcx + 0x10], ebp
jle 0x1400103ec
mov edx, ebp
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbx + 8]
lea rdx, [rdx + 8]
inc r8d
mov rcx, qword [rdx + rax - 8]
mov dword [rcx + 0xa8], ebp
cmp r8d, dword [rbx + 0x10]
jl 0x1400103d0
xor r9d, r9d
lea rcx, str.DISPLAY
xor r8d, r8d
xor edx, edx
call qword [sym.imp.GDI32.dll_CreateDCW]
mov rdi, rax
test rax, rax
je 0x14001043f
xor edx, edx
lea rcx, [rsp + 0x40]
lea r8d, [rdx + 0x5c]
call fcn.140061460
mov r9, rbx
mov byte [rsp + 0x57], 1
lea r8, [0x14000fbc0]
mov byte [rsp + 0x5b], bpl
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x20], ebp
mov rcx, rdi
call qword [sym.imp.GDI32.dll_EnumFontFamiliesExW]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rax, qword [0x1401a1610]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x14001055b
mov edx, 0x1d
call fcn.1400578b0
test eax, eax
je 0x14001055b
lea r9, [rsp + 0xa0]
mov qword [rsp + 0x1d0], rsi
lea r8, [0x14009c470]
mov dword [rsp + 0x20], 0x7f
lea rdx, str.device
lea rcx, str.windows
call qword [sym.imp.KERNEL32.dll_GetProfileStringW]
lea r8, [rsp + 0x30]
mov qword [rsp + 0x30], rbp
lea rdx, [0x14009c498]
lea rcx, [rsp + 0xa0]
call fcn.140066560
lea r8, [rsp + 0x30]
xor ecx, ecx
lea rdx, [0x14009c49c]
mov rsi, rax
call fcn.140066560
lea r8, [rsp + 0x30]
xor ecx, ecx
lea rdx, [0x14009c49c]
mov rdi, rax
call fcn.140066560
test rsi, rsi
je 0x140010553
test rdi, rdi
je 0x140010553
test rax, rax
je 0x140010553
xor r9d, r9d
mov r8, rax
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.GDI32.dll_CreateDCW]
mov rdi, rax
test rax, rax
je 0x140010553
xor edx, edx
lea rcx, [rsp + 0x40]
lea r8d, [rdx + 0x5c]
call fcn.140061460
mov r9, rbx
mov byte [rsp + 0x57], 1
lea r8, [0x14000fa60]
mov byte [rsp + 0x5b], bpl
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x20], ebp
mov rcx, rdi
call qword [sym.imp.GDI32.dll_EnumFontFamiliesExW]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rsi, qword [rsp + 0x1d0]
mov ecx, dword [rbx + 0x10]
mov r8d, ebp
mov rdi, qword [rsp + 0x1d8]
mov dword [rbx + 0x14], ebp
test ecx, ecx
jle 0x1400105c2
mov r9, rbp
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 8]
mov rdx, qword [r9 + rax]
mov eax, ecx
cmp dword [rdx + 0xa8], ebp
je 0x1400105b4
movsxd r10, dword [rbx + 0x14]
cmp ecx, r10d
jle 0x1400105b4
mov rax, qword [rbx]
mov qword [rax + r10*8], rdx
movsxd rcx, dword [rbx + 0x14]
mov rax, qword [rbx + 0x30]
mov qword [rax + rcx*8], rdx
inc dword [rbx + 0x14]
mov eax, dword [rbx + 0x10]
inc r8d
add r9, 8
mov ecx, eax
cmp r8d, eax
jl 0x140010580
mov rcx, qword [rbx + 0x20]
mov dword [rbx + 0x28], ebp
call fcn.14000f0b0
lea rax, [rsp + 0x30]
mov dword [rsp + 0x30], ebp
mov qword [rsp + 0x28], rax
lea r8, [0x14000fda0]
mov r9, rbx
mov dword [rsp + 0x20], ebp
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbp, qword [rsp + 0x1c8]
test rax, rax
je 0x14001060a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbx + 0x28], 1
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.14005d680
add rsp, 0x1b0
pop rbx
ret