Function at 0x1400b6b50
Capabilities:
Create thread
Resume thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rsi, r9
mov rbp, r8
mov r15, rdx
mov r14, rcx
call fcn.1400b72a0
xor r12d, r12d
mov rdi, rax
mov r9d, r12d
lea rax, [0x140650a18]
nop
cmp qword [r9 + rax], rdi
je 0x1400b6c0b
add r9, 0x90
cmp r9, 0x4800
jb 0x1400b6b90
call fcn.1400b6a10
mov rbx, rax
mov ecx, r12d
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x38], r12
xor eax, eax
mov dword [rbx + 0x48], eax
xchg dword [rbx + 0x48], ecx
lock inc dword [rbx + 0x48]
lock inc dword [rbx + 0x48]
mov qword [rbx], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, [rbx + 0x4c]
mov r8d, 0x40
lea rdx, str.external
mov dword [rbx + 8], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + 0x8b], r12b
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 8]
mov qword [rbx + 0x40], rcx
cmp qword [r14], r12
je 0x1400b6c18
mov rcx, qword [r14]
call fcn.1400b7980
call fcn.1400b6a10
mov rdi, rax
mov ecx, r12d
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x38], r12
xor eax, eax
mov dword [rdi + 0x48], eax
xchg dword [rdi + 0x48], ecx
mov qword [r14], rdi
lock inc dword [rdi + 0x48]
lock inc dword [rdi + 0x48]
lock inc dword [rdi + 0x48]
mov rax, qword [rsp + 0x70]
mov rbx, 0xffffffffffffffff
mov qword [rdi], r12
mov qword [rdi + 0x38], rax
mov qword [rdi + 0x20], r15
mov qword [rdi + 0x28], rbp
test rsi, rsi
je 0x1400b6c6f
mov rax, qword [rsi + 0x20]
jmp 0x1400b6c72
mov rax, rbx
mov qword [rdi + 0x10], rax
test rsi, rsi
je 0x1400b6c80
mov edx, dword [rsi + 8]
jmp 0x1400b6c83
mov edx, r12d
lea rax, [rdi + 8]
mov r9, rdi
mov qword [rsp + 0x28], rax
lea r8, [0x1400b7b10]
xor ecx, ecx
mov dword [rsp + 0x20], 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbp, rax
test rax, rax
je 0x1400b6dbb
mov qword [rdi], rax
test rsi, rsi
je 0x1400b6cd0
mov rdx, qword [rsi + 0x18]
cmp qword [r14], r12
je 0x1400b6cd0
test rdx, rdx
je 0x1400b6cd0
mov rcx, qword [r14]
call fcn.1400b8040
mov qword [rdi + 0x30], rbp
test rsi, rsi
je 0x1400b6d9b
cmp dword [rsi + 0x10], r12d
je 0x1400b6cee
mov edx, dword [rsi + 0x10]
mov rcx, r14
call fcn.1400b7e30
movzx edx, byte [rsi + 0x28]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
cmp dword [rsi + 0x14], r12d
jl 0x1400b6d18
mov ebx, dword [rsi + 0x14]
mov eax, dword [0x14068e12c]
nop
cmp ebx, eax
jne 0x1400b6d7a
lock inc dword [0x14068e12c]
jmp 0x1400b6d7a
cmp dword [rsi + 0x14], 0xfffffffe
je 0x1400b6d7a
mov eax, dword [0x14068e130]
nop
test eax, eax
js 0x1400b6d32
mov ebx, dword [0x14068e130]
nop
jmp 0x1400b6d7a
mov eax, dword [0x14068e130]
nop
cmp eax, ebx
jne 0x1400b6d46
mov ebx, dword [0x14068e130]
nop
jmp 0x1400b6d7a
mov rcx, qword [0x14068e138]
nop
nop
mov ebx, 1
lock xadd dword [0x14068e12c], ebx
inc ebx
cmp ebx, 0x40
jne 0x1400b6d72
mov eax, ebx
lock cmpxchg dword [0x14068e12c], r12d
mov ebx, r12d
mov eax, ebx
bt rcx, rax
jae 0x1400b6d50
test rsi, rsi
je 0x1400b6d9b
cmp dword [rsi + 0x14], 0xfffffffe
jne 0x1400b6d9b
mov rax, qword [r14]
cmp qword [rax], r12
je 0x1400b6da5
mov rdx, qword [rsi + 0x20]
mov rcx, rax
call fcn.1400b7f80
jmp 0x1400b6da5
mov edx, ebx
mov rcx, r14
call fcn.1400b7ee0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rdi
call fcn.1400b7980
mov rax, rbp
jmp 0x1400b6dd8
mov rcx, rdi
call fcn.1400b7980
mov rcx, rdi
call fcn.1400b7980
mov rcx, rdi
call fcn.1400b7980
xor eax, eax
mov qword [r14], r12
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop r12
ret