Function at 0x14026ee70
Capabilities:
Create thread
Resume thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rsi, r9
mov rbp, r8
mov r15, rdx
mov r14, rcx
call fcn.14026f5b0
xor r12d, r12d
mov rdi, rax
mov r9d, r12d
lea rax, [0x1404f7188]
nop
cmp qword [r9 + rax], rdi
je 0x14026ef2b
add r9, 0x90
cmp r9, 0x4800
jb 0x14026eeb0
call fcn.14026ed30
mov rbx, rax
mov ecx, r12d
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x38], r12
xor eax, eax
mov dword [rbx + 0x48], eax
xchg dword [rbx + 0x48], ecx
lock inc dword [rbx + 0x48]
lock inc dword [rbx + 0x48]
mov qword [rbx], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, [rbx + 0x4c]
mov r8d, 0x40
lea rdx, str.external
mov dword [rbx + 8], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + 0x8b], r12b
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 8]
mov qword [rbx + 0x40], rcx
cmp qword [r14], r12
je 0x14026ef38
mov rcx, qword [r14]
call fcn.14026fc90
call fcn.14026ed30
mov rdi, rax
mov ecx, r12d
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x38], r12
xor eax, eax
mov dword [rdi + 0x48], eax
xchg dword [rdi + 0x48], ecx
mov qword [r14], rdi
lock inc dword [rdi + 0x48]
lock inc dword [rdi + 0x48]
lock inc dword [rdi + 0x48]
mov rax, qword [rsp + 0x70]
mov rbx, 0xffffffffffffffff
mov qword [rdi], r12
mov qword [rdi + 0x38], rax
mov qword [rdi + 0x20], r15
mov qword [rdi + 0x28], rbp
test rsi, rsi
je 0x14026ef8f
mov rax, qword [rsi + 0x20]
jmp 0x14026ef92
mov rax, rbx
mov qword [rdi + 0x10], rax
test rsi, rsi
je 0x14026efa0
mov edx, dword [rsi + 8]
jmp 0x14026efa3
mov edx, r12d
lea rax, [rdi + 8]
mov r9, rdi
mov qword [rsp + 0x28], rax
lea r8, [0x14026fe20]
xor ecx, ecx
mov dword [rsp + 0x20], 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbp, rax
test rax, rax
je 0x14026f0db
mov qword [rdi], rax
test rsi, rsi
je 0x14026eff0
mov rdx, qword [rsi + 0x18]
cmp qword [r14], r12
je 0x14026eff0
test rdx, rdx
je 0x14026eff0
mov rcx, qword [r14]
call fcn.140270350
mov qword [rdi + 0x30], rbp
test rsi, rsi
je 0x14026f0bb
cmp dword [rsi + 0x10], r12d
je 0x14026f00e
mov edx, dword [rsi + 0x10]
mov rcx, r14
call fcn.140270140
movzx edx, byte [rsi + 0x28]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
cmp dword [rsi + 0x14], r12d
jl 0x14026f038
mov ebx, dword [rsi + 0x14]
mov eax, dword [0x14051e81c]
nop
cmp ebx, eax
jne 0x14026f09a
lock inc dword [0x14051e81c]
jmp 0x14026f09a
cmp dword [rsi + 0x14], 0xfffffffe
je 0x14026f09a
mov eax, dword [0x14051e820]
nop
test eax, eax
js 0x14026f052
mov ebx, dword [0x14051e820]
nop
jmp 0x14026f09a
mov eax, dword [0x14051e820]
nop
cmp eax, ebx
jne 0x14026f066
mov ebx, dword [0x14051e820]
nop
jmp 0x14026f09a
mov rcx, qword [0x14051e828]
nop
nop
mov ebx, 1
lock xadd dword [0x14051e81c], ebx
inc ebx
cmp ebx, 0x40
jne 0x14026f092
mov eax, ebx
lock cmpxchg dword [0x14051e81c], r12d
mov ebx, r12d
mov eax, ebx
bt rcx, rax
jae 0x14026f070
test rsi, rsi
je 0x14026f0bb
cmp dword [rsi + 0x14], 0xfffffffe
jne 0x14026f0bb
mov rax, qword [r14]
cmp qword [rax], r12
je 0x14026f0c5
mov rdx, qword [rsi + 0x20]
mov rcx, rax
call fcn.140270290
jmp 0x14026f0c5
mov edx, ebx
mov rcx, r14
call fcn.1402701f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rdi
call fcn.14026fc90
mov rax, rbp
jmp 0x14026f0f8
mov rcx, rdi
call fcn.14026fc90
mov rcx, rdi
call fcn.14026fc90
mov rcx, rdi
call fcn.14026fc90
xor eax, eax
mov qword [r14], r12
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop r12
ret