Function at 0x7ff71efe03d0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x18], r8d
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xor r9d, r9d
mov rsi, rdx
mov r14, rcx
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.kernel32.dll_CreateEventW]
xor r12d, r12d
mov qword [rsi + 8], rax
lea r15, [0x7ff71f159410]
mov rbx, rax
lea r13, [0x7ff71f050a60]
test rax, rax
jne 0x7ff71efe04be
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
lea edx, [rbx + 1]
mov rcx, rsi
mov edi, eax
call qword [r8]
mov rdx, qword [0x7ff71f159418]
movabs rax, 0x4d54ee85da812030
add rdx, rax
mov dword [rbp - 0x14], r12d
cmp rdx, 1
jbe 0x7ff71efe0474
mov rcx, qword [0x7ff71f159410]
mov edx, edi
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x7ff71efe0479
test edi, edi
setne al
movzx eax, al
lea rcx, [0x7ff71f050a48]
add rax, 2
mov dword [rbp - 0x18], edi
mov qword [rbp - 8], rax
mov qword [rbp - 0x10], r15
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], rcx
mov dword [rbp - 0x20], 0x4c
mov dword [rbp - 0x1c], 0x1a
test al, 1
je 0x7ff71efe04be
cmp rax, 1
jne 0x7ff71efe0698
test edi, edi
jne 0x7ff71efe0698
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.kernel32.dll_CreateEventW]
mov qword [r14 + 0x10], rax
mov qword [rsi + 0x10], rax
cmp qword [r14 + 0x10], r12
jne 0x7ff71efe0575
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov edi, eax
call qword [r8]
mov rdx, qword [0x7ff71f159418]
movabs rax, 0x4d54ee85da812030
add rdx, rax
mov dword [rbp - 0x2c], r12d
cmp rdx, 1
jbe 0x7ff71efe052b
mov rcx, qword [0x7ff71f159410]
mov edx, edi
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x7ff71efe0530
test edi, edi
setne al
movzx eax, al
lea rcx, [0x7ff71f050a48]
add rax, 2
mov dword [rbp - 0x30], edi
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], rcx
mov dword [rbp - 8], 0x56
mov dword [rbp - 4], 0x1a
test al, 1
je 0x7ff71efe0575
cmp rax, 1
jne 0x7ff71efe06ad
test edi, edi
jne 0x7ff71efe06ad
lea rax, [rbp + 0x40]
mov dword [rbp + 0x40], r12d
mov qword [rsp + 0x28], rax
lea r8, [0x7ff71efe06d0]
mov r9, rsi
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [r14 + 8], rax
test rax, rax
jne 0x7ff71efe0649
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov edi, eax
call qword [r8]
test rbx, rbx
je 0x7ff71efe05cc
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x7ff71efe05db
call qword [sym.imp.kernel32.dll_CloseHandle]
movabs rcx, 0x4d54ee85da812030
mov dword [rbp - 0x2c], r12d
add rcx, qword [0x7ff71f159418]
cmp rcx, 1
jbe 0x7ff71efe0607
mov rax, qword [0x7ff71f159410]
mov edx, edi
mov rcx, r15
call qword [rax + 0x30]
jmp 0x7ff71efe060c
test edi, edi
setne al
movzx eax, al
lea rcx, [0x7ff71f050a48]
add rax, 2
mov dword [rbp - 0x30], edi
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], rcx
mov dword [rbp - 8], 0x66
mov dword [rbp - 4], 0x1a
test al, 1
je 0x7ff71efe0649
cmp rax, 1
jne 0x7ff71efe0683
test edi, edi
jne 0x7ff71efe0683
test rbx, rbx
je 0x7ff71efe0665
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp - 0x18]
lea rdx, [0x7ff71f050adc]
lea rcx, [rbp - 0x30]
call fcn.7ff71efdfe90
int3
lea r8, [rbp - 0x30]
lea rdx, [0x7ff71f050ab0]
lea rcx, [rbp - 0x18]
call fcn.7ff71efdfe90
int3
lea r8, [rbp - 0x18]
lea rdx, [0x7ff71f050ac8]
lea rcx, [rbp - 0x30]
call fcn.7ff71efdfe90
int3