Function at 0x140011790
Capabilities:
Create thread
Resume thread
Terminate thread

Disassembly:
mov eax, 0x1c68
call fcn.1401b24e0
sub rsp, rax
cmp dword [0x14037d40c], 0
mov qword [rsp + 0x1c60], rdi
je 0x140011aa5
mov qword [rsp + 0x1c70], rbx
mov qword [rsp + 0x1c78], rsi
call qword [sym.imp.WINMM.dll_timeGetTime]
mov edi, eax
mov rax, qword [0x1403872f8]
test rax, rax
je 0x1400117f1
mov rcx, qword [0x1403876f8]
xor r8d, r8d
lea edx, [r8 + 0x10]
call qword [0x1403872f0]
mov rax, qword [0x1403872f8]
mov rcx, qword [0x1403876f8]
mov rsi, qword [rcx]
test rax, rax
je 0x140011809
xor r8d, r8d
lea edx, [r8 + 0x10]
call rax
sub rdi, rsi
xor ebx, ebx
cmp rdi, 0x1388
jbe 0x140011937
cmp dword [0x14038b088], ebx
jne 0x140011828
lea eax, [rbx + 1]
jmp 0x14001185c
mov rcx, qword [0x140387308]
lea r8, str.freeze:___llu__r_n
mov r9, rdi
mov edx, 0x104
call fcn.140007b10
mov rcx, qword [0x140387308]
call fcn.140020970
mov eax, 1
mov dword [0x14036fbc0], eax
mov eax, ebx
mov dword [0x14038b088], eax
cmp rdi, 0x1770
jbe 0x140011937
dec dword [0x14036ccb4]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x14036ccb4], ebx
jne 0x140011937
lea rdi, [rsp + 0x30]
mov dword [0x14036ccb4], 0x1f4
lea rsi, [0x14037dc20]
mov ecx, 0x1c24
rep movsb byte [rdi], byte [rsi]
lea rcx, vtable.CAutoUpdater.0
lea r9, [rsp + 0x30]
lea r8, [0x140388130]
call fcn.14000a820
mov rcx, qword [0x140387308]
lea r9, [0x140388130]
lea r8, str._r_nMoss_Monitor_doesnt_answer:__s_r_n
mov edx, 0x104
call fcn.140007b10
mov rcx, qword [0x140387308]
call fcn.140020970
lea r8, [0x140388130]
lea rdx, [0x14037ec24]
call fcn.14000acd0
call qword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, eax
call fcn.140020db0
mov rcx, qword [0x140387308]
lea r9, [0x140388130]
lea r8, str._sms_r_n
mov edx, 0x104
call fcn.140007b10
mov rcx, qword [0x140387308]
call fcn.140020970
mov rcx, qword [0x14037fae8]
lea rdx, [0x14038812c]
mov dword [0x14038812c], ebx
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [0x14038812c], 0x103
mov rsi, qword [rsp + 0x1c78]
je 0x140011973
lea rcx, str.KRPQ
call fcn.140020970
jmp 0x1400119c9
mov rcx, qword [0x14037fae8]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [0x140388128], eax
cmp eax, 1
jne 0x1400119f1
lea rcx, [0x14025ae9c]
call fcn.140020970
mov edx, dword [0x14038812c]
mov rcx, qword [0x14037fae8]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [0x14037fae8]
mov edx, 0xbb8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14037fae8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x28], rbx
lea r9, [0x14037fad8]
lea r8, [0x140011b10]
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14037fae8], rax
mov rcx, qword [0x14037fae0]
lea rdx, [0x14038812c]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [0x14038812c], 0x103
je 0x140011a1f
lea rcx, [0x14025aea0]
call fcn.140020970
jmp 0x140011a75
mov rcx, qword [0x14037fae0]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [0x140388128], eax
cmp eax, 1
jne 0x140011a9d
lea rcx, [0x14025aea4]
call fcn.140020970
mov edx, dword [0x14038812c]
mov rcx, qword [0x14037fae0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [0x14037fae0]
mov edx, 0xbb8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14037fae0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x28], rbx
lea r9, [0x14037fad4]
lea r8, [0x140014590]
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14037fae0], rax
mov rbx, qword [rsp + 0x1c70]
call qword [sym.imp.WINMM.dll_timeGetTime]
mov edi, eax
mov rax, qword [0x1403872f8]
test rax, rax
je 0x140011ad4
mov rcx, qword [0x1403876f8]
xor r8d, r8d
lea edx, [r8 + 0x10]
call qword [0x1403872f0]
mov rax, qword [0x1403872f8]
mov rcx, qword [0x1403876f8]
test rdi, rdi
je 0x140011ae3
mov qword [rcx], rdi
mov rdi, qword [rsp + 0x1c60]
test rax, rax
je 0x140011af9
xor r8d, r8d
lea edx, [r8 + 0x10]
call rax
add rsp, 0x1c68
ret