Function at 0x14000c4b0
Capabilities:
Create thread

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
mov qword [rbp], 0xfffffffffffffffe
mov r14d, r8d
mov rbx, rdx
mov rdi, rcx
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rsi, rax
mov qword [rbx + 8], rax
test rax, rax
jne 0x14000c56c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
mov rax, qword [rbx]
mov rcx, rbx
mov edx, 1
call qword [rax]
mov qword [rbp - 0x18], 0
mov rax, qword [0x1400325d0]
shr rax, 1
movabs rcx, 0x595588bd12bf6fe8
cmp rax, rcx
jne 0x14000c536
test r15d, r15d
setne al
jmp 0x14000c54a
mov rax, qword [0x1400325c8]
lea rcx, [0x1400325c8]
mov edx, r15d
call qword [rax + 0x30]
movzx eax, al
or rax, 2
mov qword [rbp - 8], rax
mov dword [rbp - 0x18], r15d
lea rcx, [0x1400325c8]
mov qword [rbp - 0x10], rcx
test al, 1
jne 0x14000c6f8
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rdi + 0x10], rax
mov qword [rbx + 0x10], rax
cmp qword [rdi + 0x10], 0
jne 0x14000c603
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
mov rax, qword [rbx]
mov rcx, rbx
mov edx, 1
call qword [rax]
mov qword [rbp - 0x18], 0
mov rax, qword [0x1400325d0]
shr rax, 1
movabs rcx, 0x595588bd12bf6fe8
cmp rax, rcx
jne 0x14000c5cd
test r15d, r15d
setne al
jmp 0x14000c5e1
mov rax, qword [0x1400325c8]
lea rcx, [0x1400325c8]
mov edx, r15d
call qword [rax + 0x30]
movzx eax, al
or rax, 2
mov qword [rbp - 8], rax
mov dword [rbp - 0x18], r15d
lea rcx, [0x1400325c8]
mov qword [rbp - 0x10], rcx
test al, 1
jne 0x14000c717
mov dword [rbp - 0x1c], 0
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000c820]
xor ecx, ecx
mov edx, r14d
mov r9, rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rdi + 8], rax
test rax, rax
jne 0x14000c6cb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
mov rax, qword [rbx]
mov rcx, rbx
mov edx, 1
call qword [rax]
test rsi, rsi
je 0x14000c661
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14000c670
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x18], 0
mov rax, qword [0x1400325d0]
shr rax, 1
movabs rcx, 0x595588bd12bf6fe8
cmp rax, rcx
jne 0x14000c699
test r14d, r14d
setne al
jmp 0x14000c6ad
mov rax, qword [0x1400325c8]
lea rcx, [0x1400325c8]
mov edx, r14d
call qword [rax + 0x30]
movzx eax, al
or rax, 2
mov qword [rbp - 8], rax
mov dword [rbp - 0x18], r14d
lea rcx, [0x1400325c8]
mov qword [rbp - 0x10], rcx
test al, 1
jne 0x14000c736
test rsi, rsi
je 0x14000c6e7
mov rcx, rsi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
lea r8, str.thread.entry_event
lea rsi, [rbp - 0x50]
lea rdx, [rbp - 0x18]
mov rcx, rsi
call fcn.140005680
mov rcx, rsi
call fcn.140005750
lea r8, str.thread.exit_event
lea rsi, [rbp - 0x50]
lea rdx, [rbp - 0x18]
mov rcx, rsi
call fcn.140005680
mov rcx, rsi
call fcn.140005750
lea r8, str.thread
lea rsi, [rbp - 0x50]
lea rdx, [rbp - 0x18]
mov rcx, rsi
call fcn.140005680
mov rcx, rsi
call fcn.140005750
int3