Function at 0x1401b7bd8
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x120
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x140334860]
xor rax, rsp
mov qword [rbp + 0x18], rax
mov rdi, rcx
mov r12d, 1
mov byte [rcx + 0xa0], r12b
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rdi + 0x70], eax
xor edx, edx
lea r8d, [r12 + 0x4b]
lea rcx, [rsp + 0x74]
call fcn.1401380c0
mov dword [rsp + 0x70], 0x50
mov dword [rsp + 0x74], 0x20000
lea rax, [0x1401b82c0]
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x7c], 8
mov rax, qword [0x140364230]
mov qword [rbp - 0x78], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea edx, [r12 + 0x64]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp - 0x70], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp - 0x68], rax
mov ecx, 0x3ceb
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rbp - 0x60], rax
lea rax, str.Click2RunSplashScreen
mov qword [rbp - 0x50], rax
lea rcx, [rsp + 0x70]
call fcn.1400c7094
xor r15d, r15d
test ax, ax
jne 0x1401b7cd2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x582
je 0x1401b7cd2
xor edx, edx
xor ecx, ecx
call fcn.1401377ec
int3
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
xor r9d, r9d
lea r8, [rbp - 0x38]
xor edx, edx
lea ecx, [rdx + 0x30]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [rbp - 0x30]
sub eax, dword [0x140364360]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov eax, dword [rbp - 0x2c]
sub eax, dword [0x140364364]
cdq
sub eax, edx
sar eax, 1
mov r14d, eax
call fcn.1401b9254
mov sil, al
xor r8d, r8d
mov edx, 0xbd5
lea rcx, [rbp - 8]
call fcn.1401b94e0
mov r8, rax
cmp qword [rax + 0x18], 8
jb 0x1401b7d33
mov r8, qword [rax]
mov al, sil
neg al
sbb ecx, ecx
and ecx, 0x400000
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov rax, qword [rdi + 0x88]
mov qword [rsp + 0x40], rax
mov eax, dword [0x140364364]
mov dword [rsp + 0x38], eax
mov eax, dword [0x140364360]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], ebx
mov r9d, 0x80000000
lea rdx, str.Click2RunSplashScreen
call fcn.1400aa8e8
mov qword [rdi + 0x78], rax
xor r8d, r8d
mov dl, r12b
lea rcx, [rbp - 8]
call fcn.14000b190
xor ecx, ecx
call fcn.1401b91d0
mov ebx, eax
mov ecx, dword [0x140364378]
mov dword [rdi + 0x94], ecx
mov edx, dword [0x14036437c]
mov dword [rdi + 0x90], edx
mov ecx, dword [0x140364360]
sub ecx, edx
mov dword [rdi + 0x98], ecx
mov dword [rsp + 0x64], r15d
lea rdx, [rdi + 0x18]
lea r8, [rsp + 0x64]
lea rcx, [rbp - 0x28]
call fcn.1401b7690
nop
lea r8, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae r8, qword [rbp - 0x28]
mov edx, dword [rdi + 0x90]
mov ecx, dword [rdi + 0x98]
sub ecx, edx
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], 0x64
mov rax, qword [rdi + 0x78]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ecx
mov eax, dword [rdi + 0x94]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
mov r9d, 0x50000081
lea rdx, str.STATIC
xor ecx, ecx
call fcn.1400aa8e8
mov qword [rdi + 0x80], rax
call fcn.1401b9128
mov r8, rax
mov r9, r12
mov edx, 0x30
mov rcx, qword [rdi + 0x80]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x60], 0xffeb3c00
lea rdx, [rdi + 0xa8]
lea r8, [rsp + 0x60]
lea rcx, [0x1402824c0]
call fcn.1401b87a0
lea rdx, [rdi + 0xb0]
lea rax, [0x1402824e0]
lea rcx, [0x140282508]
test sil, sil
cmovne rcx, rax
lea r8, [rsp + 0x60]
call fcn.1401b87a0
xor r9d, r9d
lea r8d, [r9 + 0x21]
mov rdx, r12
mov rcx, qword [rdi + 0x78]
call qword [sym.imp.USER32.dll_SetTimer]
mov rcx, qword [rdi + 0x78]
xor edx, edx
test rcx, rcx
jne 0x1401b7ed5
call fcn.1401377ec
int3
mov r8, rdi
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
cmp qword [rdi + 0x40], r15
je 0x1401b7f99
mov ecx, 0x48
call fcn.14000e5ac
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1401b7f0c
xor r8d, r8d
mov dl, r12b
mov rcx, rax
call fcn.14018d27c
jmp 0x1401b7f0f
mov rax, r15
lea rbx, [rdi + 0x50]
test rax, rax
je 0x1401b7f1d
lock add dword [rax + 0x18], r12d
mov rcx, qword [rbx]
mov qword [rsp + 0x68], rcx
mov qword [rbx], rax
test rcx, rcx
je 0x1401b7f4c
add rcx, 0x10
or eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1401b7f4c
test rcx, rcx
je 0x1401b7f4c
mov rax, qword [rcx]
mov edx, r12d
call qword [rax]
nop
lea rax, [rdi + 0x74]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rdi
lea r8, [0x1401b7b30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
jne 0x1401b7f7d
xor edx, edx
xor ecx, ecx
call fcn.1401377ec
int3
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call fcn.1401d47f4
or edx, 0xffffffff
mov rcx, rax
call fcn.14018f1cc
lea rcx, [rdi + 0x60]
cmp qword [rcx], r15
je 0x1401b7faf
call fcn.1401d47f4
mov rcx, rax
call fcn.140194e40
mov edx, r12d
mov rcx, qword [rdi + 0x78]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rdi + 0x78]
call qword [sym.imp.USER32.dll_BringWindowToTop]
mov rcx, qword [rdi + 0x78]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rcx, qword [rdi + 0x78]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [rdi + 0x78]
call fcn.1401b7ad4
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rbp - 0x28]
call fcn.14000b190
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140135130
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret