Function at 0x140007b64
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov rdi, qword [rcx]
xor ebp, ebp
mov rsi, qword [rcx + 8]
mov r13, rcx
mov eax, dword [0x140202cac]
mov ebx, ebp
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rsi
lea r14d, [rbp + 1]
test eax, eax
je 0x140007bd5
mov r15d, 0xc8
cmp ebx, r15d
jge 0x140007bcd
mov ecx, 0x32
add ebx, r14d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x140202cac]
test eax, eax
jne 0x140007bab
cmp ebx, r15d
jl 0x140007bd5
test eax, eax
jne 0x140007fa5
cmp dword [0x140202cdc], ebp
mov dword [0x140202cac], r14d
mov dword [0x140200120], ebp
mov dword [0x140202cbc], ebp
jne 0x140007c0d
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x140200128], rax
call fcn.1400092a4
test ax, ax
je 0x140007fa5
mov rdx, rsi
mov rcx, rdi
call fcn.1400077d0
cmp dword [0x140202cdc], ebp
jne 0x140007c51
mov qword [rsp + 0x28], rbp
lea r8, [0x140007a58]
mov r9, r13
mov dword [rsp + 0x20], ebp
xor edx, edx
mov dword [0x140200120], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x140202cec]
test eax, eax
jle 0x140007c93
mov rcx, qword [0x140202cd0]
mov r8d, eax
mov r10d, dword [0x140202cf4]
test r10d, r10d
jle 0x140007c8a
mov rdx, rbp
mov r9, r10
mov rax, qword [rcx]
mov dword [rdx + rax], 0xff
lea rdx, [rdx + 8]
sub r9, r14
jne 0x140007c77
add rcx, 8
sub r8, r14
jne 0x140007c6c
mov rdx, rsi
mov rcx, rdi
call fcn.140006b9c
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x140200120], ebp
jne 0x140007eef
mov eax, dword [0x140202cec]
test eax, eax
jle 0x140007cf5
mov rcx, qword [0x140202cd0]
mov r8d, eax
mov r10d, dword [0x140202cf4]
test r10d, r10d
jle 0x140007cec
mov rdx, rbp
mov r9, r10
mov rax, qword [rcx]
lea rdx, [rdx + 8]
mov byte [rax + rdx - 4], bpl
sub r9, r14
jne 0x140007cdb
add rcx, 8
sub r8, r14
jne 0x140007cd0
mov r8, rsi
mov rdx, rdi
mov ecx, r14d
call fcn.140006d4c
cmp dword [0x140200120], ebp
jne 0x140007eef
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.140008f2c
cmp eax, r14d
je 0x140007ee8
cmp dword [0x140202cec], ebp
mov ebx, ebp
mov r12, qword [rsp + 0xc8]
jle 0x140007e81
mov r13, qword [rsp + 0xb8]
mov r15, rbp
cmp dword [0x140202cf4], ebp
mov edi, ebp
jle 0x140007e56
mov r14, rbp
mov esi, dword [0x140202cc4]
mov ebp, dword [0x140202ce8]
imul esi, ebx
imul ebp, edi
cmp dword [0x140200120], 0
jne 0x140007e50
cmp dword [0x140202cbc], 0
je 0x140007d98
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x140200120], 0
je 0x140007d7b
cmp dword [0x140200120], 0
jne 0x140007e50
mov eax, dword [0x140200130]
cmp dword [0x140200134], eax
jne 0x140007e50
mov rax, qword [0x140202cd0]
mov r8, qword [r15 + rax]
mov al, byte [r8 + r14 + 4]
dec al
test al, 0xfd
je 0x140007e3e
mov dword [rsp + 0x30], edi
lea r9, [rsp + 0x48]
mov dword [rsp + 0x28], ebx
lea r8, [rsp + 0x40]
mov edx, esi
mov qword [rsp + 0x20], r12
mov ecx, ebp
call fcn.140008ab8
cmp eax, 1
je 0x140007e3e
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x140007e3e
cmp dword [0x140200120], 0
jne 0x140007e3e
mov r8, qword [rsp + 0xc0]
mov rcx, rsi
mov edx, dword [rsp + 0x48]
call r13
cmp eax, 0xfffffffc
je 0x140007e2c
test eax, eax
jne 0x140007e36
mov dword [0x140202cbc], 1
jmp 0x140007e36
mov dword [0x140200120], 1
mov rcx, rsi
call fcn.140163938
inc edi
add r14, 8
cmp edi, dword [0x140202cf4]
jl 0x140007d5c
xor ebp, ebp
lea r14d, [rbp + 1]
add ebx, r14d
add r15, 8
cmp ebx, dword [0x140202cec]
jl 0x140007d4b
mov r13, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0xc0]
test r12, r12
je 0x140007e8e
mov rcx, r12
call fcn.140163938
cmp dword [0x140200120], ebp
mov ebx, dword [0x140202cd8]
mov qword [rsp + 0xc8], rbp
mov qword [rsp + 0x50], rbp
jne 0x140007eef
test ebx, ebx
jle 0x140007ca9
cmp ebx, 0x32
jle 0x140007ec6
sub ebx, 0x32
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140007ed0
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, ebp
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SleepEx]
cmp dword [0x140200120], ebp
je 0x140007ea9
jmp 0x140007ca9
mov dword [0x140200120], r14d
cmp qword [0x140202cd0], rbp
je 0x140007f37
cmp dword [0x140202cec], ebp
mov ebx, ebp
jle 0x140007f24
mov rdi, rbp
mov rcx, qword [0x140202cd0]
mov rcx, qword [rdi + rcx]
call fcn.140163938
add ebx, r14d
lea rdi, [rdi + 8]
cmp ebx, dword [0x140202cec]
jl 0x140007f05
mov rcx, qword [0x140202cd0]
call fcn.140163938
mov qword [0x140202cd0], rbp
mov rcx, qword [0x140202d08]
test rcx, rcx
je 0x140007f48
call fcn.140163938
mov rcx, qword [0x140202db8]
mov dword [0x140202d18], ebp
mov qword [0x140202d08], rbp
call qword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov rcx, qword [0x140202d48]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [0x140202db0]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rdx, qword [0x140202d10]
test rdx, rdx
je 0x140007f90
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, r13
mov qword [0x140202d10], rbp
mov dword [0x140202cac], ebp
call fcn.140163938
xor eax, eax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret