Function at 0x1401ebeb0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x14032f0c0]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rdi, rdx
mov rbx, rcx
mov esi, 1
lock xadd dword [0x1403360c8], esi
xor ebp, ebp
mov dword [rcx + 0xd8], 7
inc esi
mov qword [rcx + 8], rbp
lea rax, [0x1400b8b70]
mov qword [rcx + 0x10], rbp
mov qword [rcx], rax
mov qword [rcx + 0x98], rbp
mov qword [rcx + 0xa0], rbp
mov qword [rcx + 0xa8], rbp
mov qword [rcx + 0xb0], rbp
mov qword [rcx + 0xb8], rbp
mov dword [rcx + 0xc0], ebp
mov qword [rcx + 0xc8], rbp
mov qword [rcx + 0xd0], rbp
mov qword [rcx + 0xe0], rbp
mov qword [rcx + 0xe8], rbp
mov qword [rcx + 0xf0], rbp
mov qword [rcx + 0xf8], rbp
mov byte [rcx + 0x100], bpl
mov qword [rcx + 0x130], rbp
mov qword [rcx + 0x138], rbp
mov dword [rcx + 0x140], ebp
mov qword [rcx + 0x148], rbp
mov qword [rcx + 0x150], rbp
mov word [rcx + 0x158], bp
mov byte [rcx + 0x15a], bpl
cmp qword [rcx + 0x18], rbp
jne 0x1401ec0a6
add rcx, 0x108
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor r9d, r9d
lea r8d, [rbp + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
xor r9d, r9d
lea r8d, [rbp + 1]
xor edx, edx
mov qword [rbx + 0x130], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [rbx + 0x138], rax
test rax, rax
je 0x1401ec009
cmp qword [rbx + 0x130], rbp
je 0x1401ec009
lea rax, [rsp + 0x30]
mov r9, rbx
mov qword [rsp + 0x28], rax
lea r8, [0x1401ecc20]
mov edx, 0x10000
mov dword [rsp + 0x20], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbx + 0xf8], rax
lea rcx, str.dbghelp.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 0xb0], rax
test rax, rax
je 0x1401ec039
lea rdx, str.MiniDumpWriteDump
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xb8], rax
lea rcx, str.rpcrt4.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 0xc8], rax
test rax, rax
je 0x1401ec069
lea rdx, str.UuidCreate
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xd0], rax
lea rcx, [rbx + 0x20]
cmp rcx, rdi
je 0x1401ec089
cmp qword [rdi + 0x20], 7
lea rdx, [rdi + 8]
jbe 0x1401ec080
mov rdx, qword [rdx]
mov r8, qword [rdi + 0x18]
call fcn.140036f30
cmp qword [rbx + 0x40], 7
lea rax, [rbx + 0x28]
jbe 0x1401ec097
mov rax, qword [rax]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.1401ee060
mov rdi, qword [rbx + 0x168]
movabs rax, 0x7ffffffffffffff
mov qword [rsp + 0x38], rbp
mov dword [rsp + 0x40], ebp
cmp qword [rbx + 0x170], rax
je 0x1401ec1ef
mov ecx, 0x20
call fcn.1401f4f50
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rax + 0x10], xmm0
inc qword [rbx + 0x170]
mov rcx, qword [rdi + 8]
mov qword [rax], rdi
mov qword [rax + 8], rcx
mov qword [rdi + 8], rax
mov qword [rcx], rax
cmp esi, 1
jne 0x1401ec10b
lea rcx, [0x140336170]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x140336170]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [0x140336198]
test rdi, rdi
jne 0x1401ec159
lea ecx, [rdi + 0x20]
call fcn.1401f4f50
mov ecx, reloc.WS2_32.dll_recv
mov rdi, rax
mov qword [rax], rbp
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rbp
call fcn.1401f4f50
mov qword [0x140336198], rdi
mov qword [rax + 8], rbp
mov qword [rdi], rax
mov qword [rax], rdi
mov rdx, qword [rdi + 0x10]
mov rcx, rdi
mov qword [rsp + 0x30], rbx
cmp rdx, qword [rdi + 0x18]
je 0x1401ec181
mov qword [rdx], rbx
mov rdx, qword [rdi + 0x10]
mov r8, rdx
call fcn.14017c2b0
add qword [rdi + 0x10], 8
jmp 0x1401ec18b
lea r8, [rsp + 0x30]
call fcn.1401ee720
lea rcx, [0x1401ece20]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea rcx, [0x1401ecf90]
mov qword [rbx + 0xe0], rax
call fcn.140204010
lea rcx, [0x1401ed170]
mov qword [rbx + 0xe8], rax
call fcn.1401f8650
lea rcx, [0x140336170]
mov qword [rbx + 0xf0], rax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1401f4d70
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.list_too_long
call fcn.1401f21f0
int3