Function at 0x1400c1c54
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r15, rdx
mov rdi, rcx
mov r12d, 1
lock xadd dword [0x1401ee404], r12d
mov rax, qword [rsp + 0xa0]
mov r14d, dword [rsp + 0xa8]
xor r13d, r13d
mov qword [rcx + 0x10], rax
mov eax, dword [rsp + 0xb0]
inc r12d
mov dword [rcx + 0xa8], eax
mov rax, qword [rsp + 0xc8]
mov qword [rcx], r8
mov qword [rcx + 8], r9
mov qword [rcx + 0x80], r13
mov qword [rcx + 0x88], r13
mov qword [rcx + 0x90], r13
mov qword [rcx + 0x98], r13
mov qword [rcx + 0xa0], r13
mov qword [rcx + 0xb0], r13
mov qword [rcx + 0xb8], r13
mov dword [rcx + 0xc0], r14d
mov qword [rcx + 0xc8], r13
mov qword [rcx + 0xd0], r13
mov qword [rcx + 0xd8], r13
mov qword [rcx + 0xe0], r13
mov qword [rcx + 0x118], r13
mov qword [rcx + 0x120], r13
mov byte [rcx + 0xe8], r13b
mov dword [rcx + 0x128], r13d
mov qword [rcx + 0x130], r13
mov qword [rcx + 0x138], r13
mov word [rcx + 0x140], r13w
mov ebx, r13d
test rax, rax
jne 0x1400c1db9
mov rsi, qword [rsp + 0xb8]
test rsi, rsi
je 0x1400c1d79
mov ecx, 0x370
call fcn.14009bbc0
test rax, rax
je 0x1400c1db1
mov r9, qword [rsp + 0xd0]
mov r8d, dword [rdi + 0xa8]
mov rdx, rsi
mov rcx, rax
call fcn.1400c26f0
jmp 0x1400c1db4
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
je 0x1400c1df5
mov ecx, 0x370
call fcn.14009bbc0
test rax, rax
je 0x1400c1db1
mov r9, qword [rsp + 0xd0]
mov r8d, dword [rdi + 0xa8]
mov rdx, rsi
mov rcx, rax
call fcn.1400c2670
jmp 0x1400c1db4
mov rax, r13
test rax, rax
je 0x1400c1df5
mov rbx, rax
test rax, rax
je 0x1400c1df5
mov rcx, rax
call fcn.1400c28fc
test al, al
je 0x1400c1df5
mov rsi, qword [rdi + 0x18]
mov rbp, rbx
mov rbx, r13
cmp rbp, rsi
je 0x1400c1df5
test rsi, rsi
je 0x1400c1df1
mov rcx, rsi
call fcn.1400c2798
mov rcx, rsi
call fcn.14009bc2c
mov qword [rdi + 0x18], rbp
cmp qword [rdi + 0x18], r13
jne 0x1400c1f0e
lea rcx, [rdi + 0xf0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
xor ecx, ecx
mov qword [rdi + 0x118], rax
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [rdi + 0x120], rax
test rax, rax
je 0x1400c1e7a
cmp qword [rdi + 0x118], r13
je 0x1400c1e7a
lea rax, [rsp + 0x80]
lea r8, [0x1400c182c]
mov r9, rdi
mov qword [rsp + 0x28], rax
mov edx, 0x10000
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 0xe0], rax
lea rcx, str.dbghelp.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rdi + 0x98], rax
test rax, rax
je 0x1400c1eaa
lea rdx, str.MiniDumpWriteDump
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0xa0], rax
lea rcx, str.rpcrt4.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rdi + 0xb0], rax
test rax, rax
je 0x1400c1eda
lea rdx, str.UuidCreate
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0xb8], rax
lea rsi, [rdi + 0x20]
cmp rsi, r15
je 0x1400c1ef5
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call fcn.1400093e4
cmp qword [rsi + 0x18], 8
jb 0x1400c1eff
mov rsi, qword [rsi]
mov rcx, rdi
mov qword [rdi + 0x80], rsi
call fcn.1400c207c
lea rcx, [rdi + 0x148]
lea r8, [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov rdx, qword [rcx]
mov dword [rsp + 0x38], r13d
call fcn.1400547b0
lea rsi, [0x1401ee408]
cmp r12d, 1
jne 0x1400c1f42
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
test r14d, r14d
je 0x1400c1ff1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1401ee3f8]
test rax, rax
jne 0x1400c1f84
lea ecx, [rax + 0x18]
call fcn.14009bbc0
test rax, rax
je 0x1400c1f7a
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
jmp 0x1400c1f7d
mov rax, r13
mov qword [0x1401ee3f8], rax
lea rdx, [rsp + 0x90]
mov rcx, rax
mov qword [rsp + 0x90], rdi
call fcn.140099fdc
test r14b, 1
je 0x1400c1fb6
lea rcx, [0x1400c1894]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov qword [rdi + 0xc8], rax
test r14b, 2
je 0x1400c1fcf
lea rcx, [0x1400c1964]
call fcn.14009bf5c
mov qword [rdi + 0xd0], rax
test r14b, 4
je 0x1400c1fe8
lea rcx, [0x1400c1b14]
call fcn.14009bb84
mov qword [rdi + 0xd8], rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400c2006
mov rcx, rbx
call fcn.1400c2798
mov rcx, rbx
call fcn.14009bc2c
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret