Function at 0x140071fa0
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x40
cmp byte [rcx + 0xeca], 1
mov rbx, rcx
jne 0x14007266e
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rsi
mov byte [rcx + 0xeca], 0
mov ecx, 0x28
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], r14
call fcn.1400c26fc
mov ecx, 0x18
mov rsi, rax
call fcn.1400c2704
xor r14d, r14d
lea r8, [0x140083880]
mov qword [rsp + 0x28], r14
mov r9, rax
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
mov qword [rax], rbx
mov qword [rax + 8], 5
mov qword [rax + 0x10], r14
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
lea ecx, [r14 + 0x18]
mov qword [rsi], rax
call fcn.1400c2704
mov qword [rsp + 0x28], r14
lea r8, [0x140083880]
mov r9, rax
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
mov qword [rax], rbx
mov qword [rax + 8], 3
mov qword [rax + 0x10], r14
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
lea ecx, [r14 + 0x18]
mov qword [rsi + 8], rax
call fcn.1400c2704
mov qword [rsp + 0x28], r14
lea r8, [0x140083880]
mov r9, rax
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
mov qword [rax], rbx
mov qword [rax + 8], 1
mov qword [rax + 0x10], r14
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
lea ecx, [r14 + 0x18]
mov qword [rsi + 0x10], rax
call fcn.1400c2704
mov qword [rsp + 0x28], r14
lea r8, [0x140083880]
mov r9, rax
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
mov qword [rax], rbx
mov qword [rax + 8], 6
mov qword [rax + 0x10], r14
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rsi + 0x18], rax
mov r9d, 0x61a8
mov rax, qword [rbx + 0xe90]
lea r8d, [r14 + 1]
mov rdx, rsi
mov qword [rsi + 0x20], rax
lea ecx, [r14 + 5]
call qword [sym.imp.api_ms_win_core_synch_l1_2_1.dll_WaitForMultipleObjects]
mov edi, r14d
nop
mov rcx, qword [rsi + rdi*8]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
inc rdi
cmp rdi, 5
jl 0x1400720f0
mov edx, 8
mov rcx, rsi
call fcn.1400c2470
lea rcx, str._AsusSync_MdnsMgr__Stop___Wait_Finish._n
call fcn.140095ab0
mov dl, 1
mov rcx, rbx
call fcn.140082b90
mov rcx, qword [rbx + 0xf10]
cmp rcx, 0xffffffffffffffff
je 0x140072144
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0xf10], 0xffffffffffffffff
mov rcx, qword [rbx + 0xf18]
cmp rcx, 0xffffffffffffffff
je 0x140072162
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0xf18], 0xffffffffffffffff
mov rcx, qword [rbx + 0xf20]
cmp rcx, 0xffffffffffffffff
je 0x140072180
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0xf20], 0xffffffffffffffff
mov rcx, qword [rbx + 0xf28]
cmp rcx, 0xffffffffffffffff
je 0x14007219e
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0xf28], 0xffffffffffffffff
mov rcx, qword [rbx + 0xf30]
cmp rcx, 0xffffffffffffffff
je 0x1400721bc
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0xf30], 0xffffffffffffffff
mov rcx, qword [rbx + 0xf38]
cmp rcx, 0xffffffffffffffff
je 0x1400721da
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0xf38], 0xffffffffffffffff
mov rcx, qword [rbx + 0xf40]
cmp rcx, 0xffffffffffffffff
je 0x1400721f8
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0xf40], 0xffffffffffffffff
lea rdi, [rbx + 0xb23]
mov esi, 7
mov rcx, qword [rdi]
cmp rcx, 0xffffffffffffffff
je 0x140072223
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi], 0xffffffffffffffff
add rdi, 0x1d
sub rsi, 1
jne 0x140072204
lea rcx, [rbx + 0xe68]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
mov rdx, qword [rbx + 0xf50]
test rdx, rdx
je 0x14007231b
mov rax, qword [rdx + 8]
mov esi, r14d
sub rax, qword [rdx]
sar rax, 3
test rax, rax
je 0x1400722ac
mov rdi, r14
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
cmp rax, rdi
jbe 0x140072680
lfence
mov rax, qword [rdx]
mov rcx, qword [rax + rdi*8]
test rcx, rcx
je 0x14007228d
mov edx, 0x18
call fcn.1400c2470
mov rdx, qword [rbx + 0xf50]
inc esi
inc rdi
movsxd rax, esi
mov rcx, qword [rdx + 8]
sub rcx, qword [rdx]
sar rcx, 3
cmp rax, rcx
jb 0x140072260
mov rax, qword [rdx]
mov qword [rdx + 8], rax
mov rdi, qword [rbx + 0xf50]
test rdi, rdi
je 0x140072314
mov rcx, qword [rdi]
test rcx, rcx
je 0x140072307
mov rdx, qword [rdi + 0x10]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1400722f7
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007267a
mov rcx, r8
call fcn.1400c2470
mov qword [rdi], r14
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], r14
mov edx, 0x18
mov rcx, rdi
call fcn.1400c2470
mov qword [rbx + 0xf50], r14
lea rcx, [rbx + 0xe68]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
lea rcx, [rbx + 0xe18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
mov rcx, qword [rbx + 0xf90]
test rcx, rcx
je 0x140072410
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
sub eax, 1
movsxd rdi, eax
js 0x1400723a1
nop dword [rax + rax]
mov rcx, qword [rbx + 0xf90]
mov rax, qword [rcx + 8]
sub rax, qword [rcx]
sar rax, 3
cmp rax, rdi
jbe 0x140072686
lfence
mov rax, qword [rcx]
mov rcx, qword [rax + rdi*8]
test rcx, rcx
je 0x140072394
mov edx, 0x28
call fcn.1400c2470
sub rdi, 1
jns 0x140072360
mov rcx, qword [rbx + 0xf90]
mov rax, qword [rcx]
mov qword [rcx + 8], rax
mov rdi, qword [rbx + 0xf90]
test rdi, rdi
je 0x140072409
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400723fc
mov rdx, qword [rdi + 0x10]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1400723ec
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007267a
mov rcx, r8
call fcn.1400c2470
mov qword [rdi], r14
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], r14
mov edx, 0x18
mov rcx, rdi
call fcn.1400c2470
mov qword [rbx + 0xf90], r14
lea rcx, [rbx + 0xe18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
lea rcx, [rbx + 0xe18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xd78]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xda0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xdc8]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xdf0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xe40]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xe68]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
mov rcx, qword [rbx + 0x950]
test rcx, rcx
je 0x140072491
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx + 0x950], r14
mov rdi, qword [rbx + 0x1070]
test rdi, rdi
je 0x1400724f9
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400724e5
mov rdx, qword [rdi + 0x10]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1400724d5
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007267a
mov rcx, r8
call fcn.1400c2470
mov qword [rdi], r14
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], r14
mov edx, 0x18
mov rcx, rdi
call fcn.1400c2470
mov qword [rbx + 0x1070], r14
mov rdx, qword [rbx + 0x6e0]
mov rcx, rbx
call fcn.14007b670
lea rcx, [rbx + 0xfa0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
mov rdx, qword [rbx + 0x1068]
test rdx, rdx
je 0x14007258e
mov rax, qword [rdx + 8]
mov esi, r14d
sub rax, qword [rdx]
sar rax, 3
test rax, rax
je 0x140072587
mov rdi, r14
nop word [rax + rax]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 3
cmp rax, rdi
jbe 0x140072674
lfence
mov rax, qword [rdx]
mov rcx, qword [rax + rdi*8]
test rcx, rcx
je 0x140072568
call fcn.14007b590
mov rdx, qword [rbx + 0x1068]
inc esi
inc rdi
movsxd rax, esi
mov rcx, qword [rdx + 8]
sub rcx, qword [rdx]
sar rcx, 3
cmp rax, rcx
jb 0x140072540
mov rax, qword [rdx]
mov qword [rdx + 8], rax
lea rcx, [rbx + 0xfa0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov rdi, qword [rbx + 0x1068]
test rdi, rdi
je 0x140072603
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400725ef
mov rdx, qword [rdi + 0x10]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1400725df
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007267a
mov rcx, r8
call fcn.1400c2470
mov qword [rdi], r14
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], r14
mov edx, 0x18
mov rcx, rdi
call fcn.1400c2470
mov qword [rbx + 0x1068], r14
xor edx, edx
mov rcx, rbx
call fcn.140080b10
lea rcx, [rbx + 0x43e]
call fcn.140097330
lea rcx, [rbx + 0xfa0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xfc8]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0xff0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0x1018]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
lea rcx, [rbx + 0x1040]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_DeleteCriticalSection]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
mov r14, qword [rsp + 0x30]
add rsp, 0x40
pop rbx
ret
call fcn.14000a150
int3
call fcn.1400c8b64
int3
call fcn.14000a150
int3
call fcn.14000a150
int3