Function at 0x1402fcee0
Capabilities:
Create thread
Resume thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rsi, r9
mov rbp, r8
mov r15, rdx
mov r14, rcx
call fcn.1402fd620
xor r12d, r12d
mov rdi, rax
mov r9d, r12d
lea rax, [0x140604e18]
nop
cmp qword [r9 + rax], rdi
je 0x1402fcf9b
add r9, 0x90
cmp r9, 0x4800
jb 0x1402fcf20
call fcn.1402fcda0
mov rbx, rax
mov ecx, r12d
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x38], r12
xor eax, eax
mov dword [rbx + 0x48], eax
xchg dword [rbx + 0x48], ecx
lock inc dword [rbx + 0x48]
lock inc dword [rbx + 0x48]
mov qword [rbx], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, [rbx + 0x4c]
mov r8d, 0x40
lea rdx, str.external
mov dword [rbx + 8], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbx + 0x8b], r12b
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 8]
mov qword [rbx + 0x40], rcx
cmp qword [r14], r12
je 0x1402fcfa8
mov rcx, qword [r14]
call fcn.1402fdd60
call fcn.1402fcda0
mov rdi, rax
mov ecx, r12d
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x38], r12
xor eax, eax
mov dword [rdi + 0x48], eax
xchg dword [rdi + 0x48], ecx
mov qword [r14], rdi
lock inc dword [rdi + 0x48]
lock inc dword [rdi + 0x48]
lock inc dword [rdi + 0x48]
mov rax, qword [rsp + 0x70]
mov rbx, 0xffffffffffffffff
mov qword [rdi], r12
mov qword [rdi + 0x38], rax
mov qword [rdi + 0x20], r15
mov qword [rdi + 0x28], rbp
test rsi, rsi
je 0x1402fcfff
mov rax, qword [rsi + 0x20]
jmp 0x1402fd002
mov rax, rbx
mov qword [rdi + 0x10], rax
test rsi, rsi
je 0x1402fd010
mov edx, dword [rsi + 8]
jmp 0x1402fd013
mov edx, r12d
lea rax, [rdi + 8]
mov r9, rdi
mov qword [rsp + 0x28], rax
lea r8, [0x1402fdef0]
xor ecx, ecx
mov dword [rsp + 0x20], 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbp, rax
test rax, rax
je 0x1402fd14b
mov qword [rdi], rax
test rsi, rsi
je 0x1402fd060
mov rdx, qword [rsi + 0x18]
cmp qword [r14], r12
je 0x1402fd060
test rdx, rdx
je 0x1402fd060
mov rcx, qword [r14]
call fcn.1402fe420
mov qword [rdi + 0x30], rbp
test rsi, rsi
je 0x1402fd12b
cmp dword [rsi + 0x10], r12d
je 0x1402fd07e
mov edx, dword [rsi + 0x10]
mov rcx, r14
call fcn.1402fe210
movzx edx, byte [rsi + 0x28]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
cmp dword [rsi + 0x14], r12d
jl 0x1402fd0a8
mov ebx, dword [rsi + 0x14]
mov eax, dword [0x14062fdbc]
nop
cmp ebx, eax
jne 0x1402fd10a
lock inc dword [0x14062fdbc]
jmp 0x1402fd10a
cmp dword [rsi + 0x14], 0xfffffffe
je 0x1402fd10a
mov eax, dword [0x14062fdc0]
nop
test eax, eax
js 0x1402fd0c2
mov ebx, dword [0x14062fdc0]
nop
jmp 0x1402fd10a
mov eax, dword [0x14062fdc0]
nop
cmp eax, ebx
jne 0x1402fd0d6
mov ebx, dword [0x14062fdc0]
nop
jmp 0x1402fd10a
mov rcx, qword [0x14062fdc8]
nop
nop
mov ebx, 1
lock xadd dword [0x14062fdbc], ebx
inc ebx
cmp ebx, 0x40
jne 0x1402fd102
mov eax, ebx
lock cmpxchg dword [0x14062fdbc], r12d
mov ebx, r12d
mov eax, ebx
bt rcx, rax
jae 0x1402fd0e0
test rsi, rsi
je 0x1402fd12b
cmp dword [rsi + 0x14], 0xfffffffe
jne 0x1402fd12b
mov rax, qword [r14]
cmp qword [rax], r12
je 0x1402fd135
mov rdx, qword [rsi + 0x20]
mov rcx, rax
call fcn.1402fe360
jmp 0x1402fd135
mov edx, ebx
mov rcx, r14
call fcn.1402fe2c0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rdi
call fcn.1402fdd60
mov rax, rbp
jmp 0x1402fd168
mov rcx, rdi
call fcn.1402fdd60
mov rcx, rdi
call fcn.1402fdd60
mov rcx, rdi
call fcn.1402fdd60
xor eax, eax
mov qword [r14], r12
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop r12
ret