Function at 0x7ff65ed41c30
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x50
movzx r14d, r8b
mov rdi, rdx
mov rsi, rcx
mov rbx, qword [rcx + 0x140]
cmp byte [rbx + 0x23], 0
je 0x7ff65ed41ed8
mov rbp, qword [rbx + 0x2b8]
mov rbx, qword [rbx + 0x2b0]
cmp rbx, rbp
je 0x7ff65ed41c95
nop word [rax + rax]
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 0x40]
add rbx, 8
cmp rbx, rbp
jne 0x7ff65ed41c80
mov eax, dword [rdi]
mov ebp, 0xff000000
and eax, ebp
mov ecx, ebp
mov r15d, 0xffff0000
cmp eax, 0x63000000
cmove ecx, r15d
and ecx, dword [rdi]
cmp ecx, 0x72000000
jne 0x7ff65ed41d0d
mov rcx, rdi
call fcn.7ff65ee16a30
test al, al
jne 0x7ff65ed41d0d
mov rcx, qword [rsi + 0x140]
mov eax, dword [rdi]
cmp dword [rcx], eax
je 0x7ff65ed41cdc
mov rcx, rsi
call fcn.7ff65ed41f40
jmp 0x7ff65ed41d0d
mov eax, 1
xchg byte [0x7ff65f191341], al
lea rcx, [0x7ff65f191358]
lea rax, [0x7ff65f191370]
nop word [rax + rax]
lock inc qword [rcx]
add rcx, 8
cmp rcx, rax
jne 0x7ff65ed41d00
mov rcx, qword [rsi + 0x140]
mov eax, dword [rdi]
mov dword [rcx], eax
lea rcx, [0x7ff65f42e2c0]
call fcn.7ff65efdef50
test eax, eax
jne 0x7ff65ed41f1c
mov rbx, qword [rsi + 0x140]
cmp byte [rbx + 0x258], 1
jne 0x7ff65ed41d77
test r14b, r14b
jne 0x7ff65ed41d77
mov r8, qword [rbx + 0x2d0]
cmp r8, qword [rdi + 0x50]
jne 0x7ff65ed41d77
mov rcx, qword [rbx + 0x2c8]
mov rax, qword [rdi + 0x48]
test rcx, rcx
je 0x7ff65ed41ef2
test rax, rax
je 0x7ff65ed41d77
mov rdx, rax
call fcn.7ff65efe2e30
test eax, eax
je 0x7ff65ed41efb
mov al, 1
mov byte [rbx + 0x28], al
mov rbx, qword [rsi + 0x140]
mov r8, qword [rbx + 0x58]
cmp r8, qword [rdi + 0x20]
jne 0x7ff65ed41dae
lea rdx, [rdi + 0x88]
lea rcx, [rbx + 0xc0]
call fcn.7ff65efe2e30
test eax, eax
jne 0x7ff65ed41dae
mov byte [rbx + 0x28], al
mov rbx, qword [rsi + 0x140]
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.7ff65ecba4f0
mov rax, qword [rsi + 0x140]
mov byte [rax + 0x258], r14b
test r14b, r14b
jne 0x7ff65ed41de4
lea rdx, [rdi + 0x48]
mov rcx, qword [rsi + 0x140]
add rcx, 0x2c8
call fcn.7ff65ecb03b0
mov r9, qword [rsi + 0x140]
mov rax, qword [r9 + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x1a0]
lea r8, [rcx + 8]
lea rdx, [rcx + 0x78]
lea rcx, [r9 + 0x38]
call fcn.7ff65ee167e0
movzx ebx, al
mov ecx, dword [rdi]
and ecx, ebp
cmp ecx, 0x63000000
cmove ebp, r15d
and ebp, dword [rdi]
cmp ebp, 0x6c000000
jne 0x7ff65ed41eb1
mov ecx, 1
xchg dword [0x7ff65f43bcb0], ecx
test ecx, ecx
jne 0x7ff65ed41eb1
mov ecx, 1
call fcn.7ff65efe06d0
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
xor edi, edi
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x7ff65ee360c0]
xor edx, edx
xor ecx, ecx
call fcn.7ff65efeeb2c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x7ff65ed41f0d
cmp dword [rsp + 0x38], edi
je 0x7ff65ed41f24
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x38], eax
je 0x7ff65ed41f2f
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.7ff65efdf3c0
test eax, eax
jne 0x7ff65ed41f02
lea rcx, [0x7ff65f42e2c0]
call fcn.7ff65efdef74
mov rax, qword [rsi + 0x140]
mov byte [rax + 0x20], 1
test bl, bl
je 0x7ff65ed41ed8
mov rcx, qword [rsi + 0x140]
call fcn.7ff65ed40180
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
test rax, rax
jne 0x7ff65ed41d77
xor al, al
jmp 0x7ff65ed41d79
mov ecx, 2
call fcn.7ff65efdec80
nop
mov dword [rsp + 0x38], edi
mov ecx, 6
call fcn.7ff65efdec80
nop
mov ecx, eax
call fcn.7ff65efdec44
nop
mov ecx, 1
call fcn.7ff65efdec80
int3
mov ecx, 5
call fcn.7ff65efdec80
int3