Function at 0x1400e7190
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
movaps xmmword [rsp + 0xa0], xmm6
mov r13, rdx
mov rsi, rcx
mov rax, qword [0x1402cf018]
xor rax, rsp
mov qword [rsp + 0x98], rax
call fcn.1401309f0
mov r15, rax
lea rax, [rsi + 0x50]
mov qword [rsp + 0x30], rax
lea rbx, [rsi + 0x48]
mov rdi, qword [rsi + 0x38]
cmp rdi, 0xffffffffffffffff
jne 0x1400e723d
mov rcx, rsi
mov dl, 1
call fcn.1400cfb60
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400e7245
lea rdx, [0x1402b30d0]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov r8d, 0x13b
call fcn.1401f1960
mov rcx, rdi
call fcn.1401f1890
lea rdx, str.CreateNamedPipe
mov r8d, 0xf
mov rcx, rax
call fcn.140124730
mov rcx, rdi
call fcn.1401f18a0
mov rdi, 0xffffffffffffffff
jmp 0x1400e7245
mov qword [rsi + 0x38], 0xffffffffffffffff
mov ecx, 0x40
call fcn.140142708
mov rcx, qword [rsi + 0x20]
mov qword [rax], rcx
lea r14, [0x140292418]
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov byte [rax + 0x18], 0
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], rbx
mov rcx, qword [rsp + 0x30]
mov qword [rax + 0x30], rcx
mov qword [rax + 0x38], r15
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x1400e7690]
xor ecx, ecx
xor edx, edx
mov r9, rax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbp, rax
test rax, rax
je 0x1400e7597
mov rdi, qword [rsi + 0x38]
cmp rdi, 0xffffffffffffffff
jne 0x1400e7314
mov rcx, rsi
xor edx, edx
call fcn.1400cfb60
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400e731c
lea rdx, [0x1402b30d0]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov r8d, 0x13b
call fcn.1401f1960
mov rcx, rdi
call fcn.1401f1890
lea rdx, str.CreateNamedPipe
mov r8d, 0xf
mov rcx, rax
call fcn.140124730
mov rcx, rdi
call fcn.1401f18a0
mov rdi, 0xffffffffffffffff
jmp 0x1400e731c
mov qword [rsi + 0x38], 0xffffffffffffffff
mov qword [rsp + 0x40], rbp
mov ecx, 0x40
call fcn.140142708
mov rcx, qword [rsi + 0x20]
mov qword [rax], rcx
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov byte [rax + 0x18], 0
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], rbx
mov rcx, qword [rsp + 0x30]
mov qword [rax + 0x30], rcx
mov qword [rsp + 0x48], r15
mov qword [rax + 0x38], r15
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x1400e7690]
xor ecx, ecx
xor edx, edx
mov r9, rax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1400e75db
mov rcx, r13
call fcn.140171b60
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_GetQueuedCompletionStatus]
mov r13, qword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
lea rdi, [rsp + 0x88]
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x50], r14
mov dword [rsp + 0x94], 0
mov rcx, qword [rsi + 0x20]
mov dword [rsp + 0x20], 0xffffffff
lea rdx, [rsp + 0x94]
lea r8, [rsp + 0x50]
lea r9, [rsp + 0x60]
call r15
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x1400e7582
mov qword [rsp + 0x88], rax
mov rbp, rbx
mov rcx, rbx
call r13
test al, al
je 0x1400e758a
mov rcx, qword [rsp + 0x30]
mov rdx, rdi
call fcn.1400e8270
mov r12, qword [rsp + 0x88]
test r12, r12
je 0x1400e7433
mov rcx, r12
call fcn.1400e77a0
mov rcx, r12
call fcn.140142744
cmp byte [rsi + 0x68], 0
jne 0x1400e7440
cmp qword [rsi + 0x60], 0
je 0x1400e7451
mov rbx, rbp
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x1400e73ac
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
xorps xmm6, xmm6
lea rdi, [rsp + 0x60]
movups xmmword [rdi + 0xc], xmm6
xor eax, eax
mov qword [rdi + 0x1c], rax
mov r15d, 1
mov dword [rdi], r15d
mov r14, qword [rsp + 0x48]
mov qword [rdi + 4], r14
movabs r12, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x50]
mov qword [rbx], r12
mov r13d, 0xaaaaaaaa
mov dword [rbx + 8], r13d
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call fcn.1400cf840
xor eax, eax
mov qword [rdi + 0x1c], rax
movups xmmword [rdi + 0xc], xmm6
mov dword [rdi], r15d
mov qword [rdi + 4], r14
mov qword [rbx], r12
mov dword [rbx + 8], r13d
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call fcn.1400cf840
mov r14, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
mov edx, 0xffffffff
call r14
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
mov edx, 0xffffffff
call r14
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
test al, al
mov r14, rbp
je 0x1400e761f
mov r15, qword [rsi + 0x50]
lea rbp, [rsi + 0x58]
cmp r15, rbp
jne 0x1400e762c
mov rdx, qword [rsi + 0x58]
mov rcx, qword [rsp + 0x30]
call fcn.1400dbde0
mov qword [rsi + 0x50], rbp
xorps xmm0, xmm0
movups xmmword [rsi + 0x58], xmm0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
test rdi, rdi
je 0x1400e7549
mov rcx, rdi
call fcn.1400d1da0
test rbx, rbx
je 0x1400e7556
mov rcx, rbx
call fcn.1400d1da0
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.140143020
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rbp, rbx
jmp 0x1400e745a
mov rcx, rbp
call fcn.140130a60
jmp 0x1400e7409
lea rdx, [0x1402b30d0]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov r8d, 0x14a
call fcn.1401f1960
mov rcx, rdi
call fcn.1401f1890
lea rdx, [0x1402a3292]
mov r8d, ntohl
mov rcx, rax
call fcn.140124730
mov rcx, rdi
call fcn.1401f18a0
jmp 0x1400e72af
lea rdx, [0x1402b30d0]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov r8d, 0x14a
call fcn.1401f1960
mov rcx, rdi
call fcn.1401f1890
lea rdx, [0x1402a3292]
mov r8d, ntohl
mov rcx, rax
call fcn.140124730
mov rcx, rdi
call fcn.1401f18a0
jmp 0x1400e738b
mov rcx, r14
call fcn.140130a60
jmp 0x1400e7509
mov rbx, qword [rsp + 0x40]
mov rdi, qword [r15 + 0x20]
test rdi, rdi
je 0x1400e764a
mov rcx, rdi
call fcn.1400e77a0
mov rcx, rdi
call fcn.140142744
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x1400e7671
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400e7653
mov r15, rax
cmp rax, rbp
mov rdi, qword [rsp + 0x38]
je 0x1400e751a
jmp 0x1400e7631
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x1400e765e
add r15, 0x10
mov rcx, qword [r15]
lea r15, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x1400e767e
jmp 0x1400e765e