Function at 0x14001a050
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x80
mov qword [rax - 0x40], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov rdi, rdx
mov esi, ecx
call fcn.140019b30
test al, al
jne 0x14001a083
mov eax, 1
jmp 0x14001a3a4
xor ebx, ebx
cmp qword [0x1400e5380], rbx
jne 0x14001a0f7
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x50]
call fcn.14001f680
test al, al
je 0x14001a0c1
lea rcx, [rsp + 0x50]
call fcn.14001f740
test al, al
je 0x14001a0c1
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14001a0f7
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x14001a0f7
cmp byte [0x1400e53b7], 0
jne 0x14001a0e5
mov ecx, 2
call fcn.14005a190
mov rcx, rax
lea rdx, str.warning:_PresentMon_requires_elevated_privilege_in_order_to_query_processes_n____started_on_another_account__so_these_processes_wont_be_targetted_by_name_n____and_will_be_listed_as__error_.__Further__there_may_be_tracking_errors_n____near_process_termination__and_if_they_are_targetted_n_____terminate_on_proc_exit_wont_work._n
call fcn.140007160
jmp 0x14001a0af
mov rdx, rdi
mov ecx, esi
call fcn.14001f850
mov ecx, eax
call fcn.140061890
nop
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400e4088], rax
cmp byte [0x1400e53b6], 0
je 0x14001a196
cmp byte [0x1400e53bb], 0
je 0x14001a14c
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
lea r9, [0x1400e4088]
lea r8, [0x140019470]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1400e40a0], rax
jmp 0x14001a196
mov r9d, dword [0x1400e53a0]
mov r8d, dword [0x1400e539c]
mov edx, 0x80
mov rcx, qword [0x1400e4090]
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
jne 0x14001a196
lea ecx, [rax + 2]
call fcn.14005a190
mov rcx, rax
lea rdx, str.error:_failed_to_register_hotkey._n
call fcn.140007160
call fcn.140019a40
mov eax, 5
jmp 0x14001a3a4
mov edx, 1
lea rcx, [0x1400196f0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rdx, [0x1400b92d0]
mov rcx, qword [0x1400e5388]
call fcn.14009b4e0
mov ecx, 0x18
test eax, eax
jne 0x14001a23b
call fcn.140051c3c
mov rdi, rax
mov qword [rsp + 0xa8], rax
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rcx, qword [rsp + 0x38]
mov qword [rdi + 0x10], rcx
cmp ebx, 0x1e
je 0x14001a21b
lea rdx, str.GlobalFVToolSharedMemory
mov rcx, rdi
call fcn.1400192a0
test eax, eax
je 0x14001a219
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x1e
jbe 0x14001a1f2
jmp 0x14001a294
mov dword [rsp + 0xa0], 1
lea rdx, [0x1400d6608]
lea rcx, [rsp + 0xa0]
call fcn.140058ab8
nop
call fcn.140051c3c
mov rdi, rax
mov qword [rsp + 0xa0], rax
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x40]
mov qword [rdi + 0x10], rax
cmp ebx, 0x1e
je 0x14001a384
lea rdx, str.GlobalFVSDKSharedMemory
mov rcx, rdi
call fcn.1400192a0
test eax, eax
je 0x14001a294
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x1e
jbe 0x14001a269
mov qword [0x1400e4080], rdi
test rdi, rdi
jne 0x14001a2a8
lea eax, [rdi + 9]
jmp 0x14001a3a4
xor eax, eax
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14001a2ce
mov rcx, qword [rdi + 8]
mov rax, qword [rsp + 0x30]
xchg qword [rcx + 0x14378], rax
mov rdx, qword [0x1400e5398]
test edx, edx
je 0x14001a2ea
mov rax, qword [0x1400e4080]
mov rcx, qword [rax + 8]
mov dword [rcx + 0x143c0], edx
mov r8, qword [0x1400e5394]
test r8d, r8d
je 0x14001a308
mov rax, qword [0x1400e4080]
mov rdx, qword [rax + 8]
mov dword [rdx + 0x143c0], r8d
call fcn.14002e800
test al, al
jne 0x14001a32c
xor edx, edx
lea rcx, [0x1400196f0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
call fcn.140019a40
mov eax, 6
jmp 0x14001a3a4
cmp byte [0x1400e53b0], 0
je 0x14001a349
movzx ecx, byte [0x1400e406d]
call fcn.140019510
mov byte [0x1400e406e], al
jmp 0x14001a350
mov byte [0x1400e406e], 0
cmp byte [0x1400e53b6], 0
jne 0x14001a380
mov r9d, dword [0x1400e539c]
mov eax, 0xffffbfff
and r9, rax
mov edx, 0x312
mov r8d, 0x80
mov rcx, qword [0x1400e4090]
call qword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
jmp 0x14001a3a4
mov dword [rsp + 0xa8], 1
lea rdx, [0x1400d6608]
lea rcx, [rsp + 0xa8]
call fcn.140058ab8
nop
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret