Function at 0x7ff79016f630
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
xor r15d, r15d
mov dword [rbp + 0xa0], r15d
call fcn.7ff79016ec9c
lea rcx, [0x7ff7904d8478]
call fcn.7ff790170328
mov rbx, rax
lea rax, [0x7ff7904357e8]
mov qword [rsp + 0x30], rax
mov rcx, qword [rbx]
mov qword [rsp + 0x38], r15
lea rax, [rsp + 0x30]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x58], r15
test rcx, rcx
je 0x7ff79016f6a4
lea rcx, [rsp + 0x38]
call fcn.7ff7901abce0
nop
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov rax, qword [rbx + 8]
mov r14d, 1
test rax, rax
je 0x7ff79016f6c1
lock add dword [rax + 8], r14d
mov rax, qword [rbx]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x68], rax
mov r8b, 3
mov dl, r14b
lea rcx, [0x7ff7904da088]
call fcn.7ff7901ad0dc
lea rax, [0x7ff7904d8ea8]
mov qword [rbp - 0x50], rax
lock add qword [0x7ff7904d8ea8], r14
mov rcx, qword [0x7ff7904d8ea0]
test rcx, rcx
je 0x7ff79016f758
mov qword [rbp + 0xb0], r15
mov rax, qword [rcx]
movabs r10, 0xa2e90f7a36585b70
lea rdx, [rbp + 0xb0]
mov rax, qword [rax + 0x30]
call qword [0x7ff79045bf28]
test eax, eax
js 0x7ff79016f9aa
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0xa8], rax
mov dword [rbp + 0xa0], 0x1c
lock dec qword [0x7ff7904d8ea8]
mov ebx, dword [rbp + 0xa0]
jmp 0x7ff79016f786
lock dec qword [0x7ff7904d8ea8]
lea rax, [0x7ff7901b7a80]
mov qword [rbp + 0xb8], rax
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xa8]
call fcn.7ff79016d8a0
mov ebx, 4
or ebx, 2
or ebx, r14d
mov dword [rbp + 0xa0], ebx
cmp word [0x7ff79048445c], r15w
je 0x7ff79016f7a9
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_abort]
nop dword [rax + rax]
int3
mov dword [rsp + 0x78], r14d
mov dword [rsp + 0x7c], 0x2e
lea rax, str.WindowsUdk.UI.Shell.TaskbarControllerExtension
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], rax
mov dword [rbp - 0x68], r14d
mov dword [rbp - 0x64], 7
lea rax, [0x7ff790468e70]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
mov qword [rbp - 0x70], rax
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xa8]
call fcn.7ff79016ca38
test al, al
setne dil
test r14b, bl
je 0x7ff79016f81e
cmp qword [rbp + 0xa8], r15
je 0x7ff79016f81e
lea rcx, [rbp + 0xa8]
call fcn.7ff79016cb00
test dil, dil
je 0x7ff79016f859
call fcn.7ff79016ceb8
mov rcx, qword [rbp + 0x98]
test eax, eax
jns 0x7ff79016f88a
mov edx, 0x1c0
lea r8, [0x7ff7904636b0]
mov r9d, eax
call fcn.7ff790182a30
nop
lea rcx, [rsp + 0x30]
call fcn.7ff7901c399c
xor eax, eax
jmp 0x7ff79016f97e
lea rcx, [0x7ff7904d84d0]
call fcn.7ff790166790
lea r8, [0x7ff7904d84d0]
lea rcx, [0x7ff7904d8198]
call 0x7ff7902da68c
mov rcx, qword [rbp + 0x98]
test eax, eax
jns 0x7ff79016f88a
mov edx, 0x1c5
jmp 0x7ff79016f838
lea rcx, [0x7ff7901b0970]
mov rax, qword [0x7ff7904d7fd8]
test rax, rax
je 0x7ff79016f8a6
cmp rax, rcx
jne 0x7ff79016f98f
mov qword [0x7ff7904d7fd8], rcx
lea r9, [0x7ff790186db0]
mov r8d, 0x282a
lea rdx, [0x7ff7904d8160]
lea rcx, [0x7ff7901958f0]
call qword [sym.imp.api_ms_win_shcore_thread_l1_1_0.dll_SHCreateThread]
nop dword [rax + rax]
test eax, eax
je 0x7ff79016f8e4
cmp qword [0x7ff7904d8168], r15
mov sil, r14b
jne 0x7ff79016f8e7
mov sil, r15b
lea rcx, [0x7ff7904d8478]
call fcn.7ff790170328
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x7ff79016f901
lock add dword [rcx + 8], r14d
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rdi, qword [rax + 8]
mov qword [rsp + 0x28], rdi
lea rcx, [rbx + 8]
call fcn.7ff790176800
lea rax, [rbx + 0xb8]
mov ecx, 8
test rbx, rbx
cmove rax, rcx
mov byte [rax], sil
je 0x7ff79016f94b
lea rcx, [rbx + 8]
call fcn.7ff7901b5c4c
lea rcx, [rsp + 0x20]
call fcn.7ff79016ca0c
mov rdi, qword [rsp + 0x28]
test rdi, rdi
je 0x7ff79016f958
mov rcx, rdi
call fcn.7ff7901b765c
movzx ebx, sil
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x7ff79016f96b
call fcn.7ff7901b765c
cmp dword [rsp + 0x50], r15d
je 0x7ff79016f97c
lea rcx, [rsp + 0x38]
call fcn.7ff7901870b8
mov eax, ebx
add rsp, 0x168
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor edx, edx
mov r8d, 0x98
lea rcx, [rbp - 0x40]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
lea rcx, [rbp - 0x40]
call fcn.7ff790240808
nop
mov ecx, eax
call fcn.7ff790281380
int3