Function at 0x140006fd0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x140257908]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rbp, rcx
call fcn.140015c70
mov r9, qword [rbp + 0x368]
mov edx, 0x80
mov rcx, qword [rbp + 0x40]
lea r8d, [rdx - 0x7f]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, qword [rbp + 0x368]
xor r8d, r8d
mov rcx, qword [rbp + 0x40]
mov edx, 0x80
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x9a6f
mov rcx, rbp
call fcn.140014930
mov edx, 0x403
mov rcx, rbp
mov rdi, rax
call fcn.140014930
mov rcx, qword [rbp + 0x40]
lea rdx, [rsp + 0x58]
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm0
mov rsi, rax
movdqu xmmword [rsp + 0x48], xmm1
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [rdi + 0x40]
lea rdx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [rsp + 0x54]
lea rcx, [rbp + 0x258]
sub edx, dword [rsp + 0x4c]
xor r9d, r9d
mov eax, dword [rsp + 0x60]
add edx, 0xa
sub eax, dword [rsp + 0x58]
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x28], edx
xor edx, edx
mov dword [rsp + 0x20], eax
call fcn.140014d84
mov ecx, dword [rsp + 0x60]
xor ebx, ebx
sub ecx, dword [rsp + 0x50]
xor edx, edx
sub ecx, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x48]
add r8d, 0xffffffec
mov dword [rsp + 0x30], 5
add r8d, ecx
mov dword [rsp + 0x28], ebx
mov rcx, rdi
mov dword [rsp + 0x20], ebx
lea r9d, [rbx + 0xa]
call fcn.140014d84
mov r9d, dword [rsp + 0x54]
xor r8d, r8d
sub r9d, dword [rsp + 0x4c]
xor edx, edx
mov dword [rsp + 0x30], 5
add r9d, 0xb
mov dword [rsp + 0x28], ebx
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.140014d84
mov rcx, qword [rbp + 0x40]
xor edx, edx
call qword [sym.imp.USER32.dll_GetSystemMenu]
mov rcx, rax
call fcn.14001cc9c
test rax, rax
je 0x140007144
mov rcx, qword [rax + 8]
lea r8d, [rbx + 3]
mov edx, 0xf060
call qword [sym.imp.USER32.dll_EnableMenuItem]
cmp qword [rbp + 0x240], rbx
jne 0x140007188
mov byte [rbp + 0x250], bl
lea rcx, [rbp + 0x238]
mov rdx, qword [rbp + 0x138]
call fcn.14001a0c0
mov ecx, 0xffffff
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rbp + 0x230], rax
mov dword [rbp + 0x248], ebx
mov dword [rbp + 0x24c], 2
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x28], rax
lea r8, [0x140007680]
mov r9, rbp
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rax, qword [0x140265fe0]
cmp qword [0x140265fd8], rax
je 0x14000724a
mov rcx, qword [rbp + 0x40]
lea rdx, [0x140004d10]
xor r8d, r8d
call qword [sym.imp.USER32.dll_EnumChildWindows]
mov r8, qword [0x140265fd8]
mov r9, qword [0x140265fe0]
cmp r8, r9
je 0x14000724a
mov rcx, r9
movabs r10, 0x6666666666666667
sub rcx, r8
mov rax, r10
imul rcx
mov rcx, rdx
sar rcx, 4
mov rax, rcx
shr rax, 0x3f
add rcx, rax
je 0x14000724a
sub r9, r8
mov rax, r10
imul r9
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
nop dword [rax]
cmp rdx, rbx
jbe 0x14000728f
cmp dword [r8], 0xe424
je 0x140007272
inc rbx
add r8, 0x28
cmp rbx, rcx
jb 0x140007230
mov eax, 1
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1401943d0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
cmp qword [r8 + 0x20], 8
lea rdx, [r8 + 8]
jb 0x140007280
mov rdx, qword [rdx]
test rdx, rdx
je 0x14000724a
mov rcx, rbp
call fcn.140014de8
jmp 0x14000724a
call fcn.140004360
int3