Function at 0x441d10
Capabilities:
Create thread
Get thread local storage value
Resume thread

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rdi, rcx
mov rsi, rdx
mov rbx, r8
mov rbp, r9
call sym.pop_pthread_mem
mov r12, rax
test rax, rax
je 0x441f7d
test rdi, rdi
je 0x441d4a
mov rax, qword [rax + 0x1d8]
mov qword [rdi], rax
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [r12 + 8], rbp
mov dword [r12 + 0x44], 1
mov rbp, qword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [r12 + 0xbc], 0
mov r14, r13
mov qword [r12 + 0x28], 0xffffffffffffffff
mov qword [r12 + 0x10], rbx
xor ebx, ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call rbp
mov qword [r12 + 0x30], rax
test rax, rax
jne 0x441db7
add ebx, 1
cmp ebx, 1
je 0x441ec0
mov ecx, 0x14
call r14
cmp ebx, 5
jne 0x441d85
mov qword [r12 + 0x38], 0xffffffffffffffff
lea r14, [r12 + 0x68]
mov rcx, r14
call dbg.pthread_spin_destroy
cmp eax, 1
je 0x441fe7
cmp qword [r12 + 0x30], 0
mov qword [r12 + 0x68], 0xffffffffffffffff
mov dword [r12], 0xbab1f00d
mov dword [r12 + 0xc0], 0
mov dword [r12 + 0xb8], 0
je 0x441f66
xor r13d, r13d
test rsi, rsi
je 0x441e31
mov eax, dword [rsi]
mov r13d, dword [rsi + 0x10]
mov dword [r12 + 0x44], eax
test al, 8
jne 0x441f98
mov eax, dword [rsi + 0x18]
mov dword [r12 + 0xc0], eax
lea r8, [dbg.pthread_create_wrapper]
mov edx, r13d
mov r9, r12
xor ecx, ecx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 4
call qword [sym.imp.msvcrt.dll__beginthreadex]
mov r13, rax
lea rax, [rax - 1]
cmp rax, 0xfffffffffffffffd
ja 0x441f20
mov eax, dword [r12 + 0xc0]
mov edx, 0xfffffff1
cmp eax, 0xfffffff2
jge 0x441ef0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov rcx, qword [r12 + 0x30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test byte [r12 + 0x44], 4
jne 0x441ed0
mov qword [r12 + 0x28], r13
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ResumeThread]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
xor ecx, ecx
call r13
jmp 0x441d85
mov qword [r12 + 0x28], 0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x441ea4
mov edx, 0xfffffffe
cmp eax, 0xffffffff
jl 0x441e7a
mov edx, 0xf
cmp eax, 0xe
jg 0x441e7a
cmp eax, 2
mov edx, 2
cmovle edx, eax
jmp 0x441e7a
mov rcx, qword [r12 + 0x30]
test rcx, rcx
je 0x441f30
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [r12 + 0x38]
call dbg.pthread_mutex_destroy
mov rcx, r14
call dbg.pthread_spin_destroy
cmp eax, 1
je 0x441fe7
mov qword [r12 + 0x68], 0xffffffffffffffff
mov qword [r12 + 0x30], 0
mov qword [r12 + 0x28], 0
test rdi, rdi
je 0x441f72
mov qword [rdi], 0
cmp qword [r12 + 0x1d0], 0
je 0x441fd0
mov eax, 0xb
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
cmp dword [0x005cfea0], 1
je 0x441fa6
call sym._pthread_once_raw.part.0.constprop.0.isra.0
mov ecx, dword [0x004fd338]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x441fe0
mov eax, dword [rax + 0xc0]
mov dword [r12 + 0xc0], eax
jmp 0x441e31
mov rcx, r12
call sym.push_pthread_mem.part.0
jmp 0x441f7d
call sym.__pthread_self_lite.part.0
jmp 0x441fb7
call sym.replace_spin_keys.part.0
nop
nop dword [rax]