Function at 0x140078eb0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r9d, r9d
mov r14d, r8d
mov rsi, rdx
mov rbp, rcx
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
xor r12d, r12d
mov qword [rsi + 8], rax
lea r15, [0x14048a960]
mov rdi, rax
movabs r13, 0xb2ab117a257edf0d
test rax, rax
jne 0x140078f7a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
lea edx, [rdi + 1]
mov rcx, rsi
mov ebx, eax
call qword [r8]
mov rax, qword [0x14048a968]
movabs rcx, 0x8fafd21e25c5e09b
mov dword [rsp + 0x34], r12d
cmp rax, rcx
je 0x140078f4c
cmp rax, r13
je 0x140078f4c
mov rax, qword [0x14048a960]
mov edx, ebx
mov rcx, r15
call qword [rax + 0x30]
jmp 0x140078f51
test ebx, ebx
setne al
movzx eax, al
add eax, 2
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], r15
cmp eax, 1
jne 0x140078f70
test ebx, ebx
setne al
jmp 0x140078f72
and al, 1
test al, al
jne 0x140079125
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp + 0x10], rax
mov qword [rsi + 0x10], rax
cmp qword [rbp + 0x10], r12
jne 0x14007900f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov ebx, eax
call qword [r8]
mov rax, qword [0x14048a968]
movabs rcx, 0x8fafd21e25c5e09b
mov dword [rsp + 0x34], r12d
cmp rax, rcx
je 0x140078fe1
cmp rax, r13
je 0x140078fe1
mov rax, qword [0x14048a960]
mov edx, ebx
mov rcx, r15
call qword [rax + 0x30]
jmp 0x140078fe6
test ebx, ebx
setne al
movzx eax, al
add eax, 2
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], r15
cmp eax, 1
jne 0x140079005
test ebx, ebx
setne al
jmp 0x140079007
and al, 1
test al, al
jne 0x140079137
lea rax, [rsp + 0x88]
mov dword [rsp + 0x88], r12d
mov qword [rsp + 0x28], rax
lea r8, [0x140079150]
mov r9, rsi
mov dword [rsp + 0x20], r12d
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 8], rax
test rax, rax
jne 0x1400790d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov ebx, eax
call qword [r8]
test rdi, rdi
je 0x14007906f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x14007907e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [0x14048a968]
movabs rcx, 0x8fafd21e25c5e09b
mov dword [rsp + 0x34], r12d
cmp rax, rcx
je 0x1400790af
cmp rax, r13
je 0x1400790af
mov rax, qword [0x14048a960]
mov edx, ebx
mov rcx, r15
call qword [rax + 0x30]
jmp 0x1400790b4
test ebx, ebx
setne al
movzx eax, al
add eax, 2
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], r15
cmp eax, 1
jne 0x1400790d3
test ebx, ebx
setne al
jmp 0x1400790d5
and al, 1
test al, al
jne 0x140079113
test rdi, rdi
je 0x1400790f5
mov edx, 0xffffffff
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rdx, str.thread
lea rcx, [rsp + 0x30]
call fcn.1400786b0
int3
lea rdx, str.thread.entry_event
lea rcx, [rsp + 0x30]
call fcn.1400786b0
int3
lea rdx, str.thread.exit_event
lea rcx, [rsp + 0x30]
call fcn.1400786b0
int3