Function at 0x7ff65ee1dc10
Capabilities:
Create thread

Disassembly:
mov byte [rsp + 0x18], r8b
mov byte [rsp + 0x10], dl
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x78
movzx r12d, r8b
movzx r13d, dl
mov rdi, rcx
call fcn.7ff65efdefb8
call fcn.7ff65efdef9c
mov rsi, qword [rdi + 0x58]
mov r15, qword [rdi + 0x60]
xor ebp, ebp
cmp rsi, r15
je 0x7ff65ee1dd20
mov qword [rsp + 0xd8], rdi
lea rcx, [0x7ff65ee1e220]
mov ebp, dword [rsi]
mov dword [rsp + 0xc0], ebp
mov r14, qword [rdi + 0x48]
cmp r14, qword [rdi + 0x50]
je 0x7ff65ee1dcd3
mov ecx, 0x18
call fcn.7ff65efe06d0
mov byte [rax], r12b
mov byte [rax + 1], r13b
mov dword [rax + 4], ebp
mov qword [rax + 8], rdi
lea rcx, [0x7ff65ee1e220]
mov qword [rax + 0x10], rcx
mov qword [rsp + 0xc0], rax
lea rcx, [r14 + 8]
mov qword [rsp + 0x28], rcx
xor ebp, ebp
mov dword [rsp + 0x20], ebp
mov r9, rax
lea r8, [0x7ff65ee1ee30]
xor edx, edx
xor ecx, ecx
call fcn.7ff65efeeb2c
mov qword [r14], rax
test rax, rax
je 0x7ff65ee1df04
add qword [rdi + 0x48], 0x10
jmp 0x7ff65ee1dd13
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd8]
mov r8, rcx
mov rdx, r14
lea rcx, [rdi + 0x40]
call fcn.7ff65ee1e840
xor ebp, ebp
add rsi, 4
cmp rsi, r15
jne 0x7ff65ee1dc59
mov rcx, rdi
call fcn.7ff65ee1e430
cmp qword [rdi + 0x38], 0
je 0x7ff65ee1dda6
mov rax, qword [rdi + 0x30]
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x7ff65ee1dda6
nop dword [rax]
mov rcx, qword [rax + 0x28]
mov rdx, qword [rcx + 0x28]
test rdx, rdx
je 0x7ff65ee1dd5b
mov ecx, dword [rdx + 0x18]
shr ecx, 1
and cl, 1
jne 0x7ff65ee1de53
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x19], 0
je 0x7ff65ee1dd88
mov rcx, qword [rax + 8]
cmp byte [rcx + 0x19], 0
jne 0x7ff65ee1dd83
nop
cmp rax, qword [rcx + 0x10]
jne 0x7ff65ee1dd83
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], 0
je 0x7ff65ee1dd70
mov rax, rcx
jmp 0x7ff65ee1dda0
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
jne 0x7ff65ee1dda0
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x7ff65ee1dd94
cmp byte [rax + 0x19], 0
je 0x7ff65ee1dd40
mov rbx, qword [rdi + 0x58]
mov ecx, 0x18
call fcn.7ff65efe06d0
mov byte [rax], r13b
mov ecx, dword [rbx]
mov dword [rax + 4], ecx
mov qword [rax + 8], rdi
lea rcx, [0x7ff65ee1e310]
mov qword [rax + 0x10], rcx
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebp
mov r9, rax
lea r8, [0x7ff65ee1edd0]
xor edx, edx
xor ecx, ecx
call fcn.7ff65efeeb2c
mov qword [rsp + 0x40], rax
test rax, rax
je 0x7ff65ee1def5
cmp dword [rsp + 0x48], 0
je 0x7ff65ee1df13
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x48], eax
je 0x7ff65ee1df1e
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.7ff65efdf3c0
test eax, eax
jne 0x7ff65ee1deea
cmp qword [rdi + 8], 0
jne 0x7ff65ee1de53
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp qword [rdi + 0x38], 0
jne 0x7ff65ee1deb6
mov rbx, qword [rdi + 0x58]
mov ecx, 0x30
call fcn.7ff65efe06d0
mov qword [rsp + 0xc0], rax
mov rcx, qword [rdi + 8]
mov qword [rax], 1
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rbp
xor ecx, ecx
mov qword [rax + 0x20], rcx
mov qword [rax + 0x28], rbp
mov ecx, dword [rbx]
mov dword [rsp + 0x40], ecx
mov qword [rsp + 0x48], rax
lea rcx, [rdi + 0x30]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
call fcn.7ff65ee1ea80
mov byte [rdi], 1
mov al, 1
jmp 0x7ff65ee1de42
cmp qword [rdi + 8], 0
je 0x7ff65ee1ded3
mov rax, qword [rdi + 0x58]
mov edx, dword [rax]
mov rcx, rdi
call fcn.7ff65ee1db50
mov rcx, qword [rdi + 8]
mov qword [rax + 0x10], rcx
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.7ff65ee1e170
mov byte [rdi], 1
mov al, 1
jmp 0x7ff65ee1de42
mov ecx, 2
call fcn.7ff65efdec80
nop
mov dword [rsp + 0x48], ebp
mov ecx, 6
call fcn.7ff65efdec80
nop
mov dword [r14 + 8], ebp
mov ecx, 6
call fcn.7ff65efdec80
nop
mov ecx, 1
call fcn.7ff65efdec80
int3
mov ecx, 5
call fcn.7ff65efdec80
int3