Function at 0x14002e6b0
Capabilities:
Create thread
Get thread local storage value
Resume thread

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rbp, rcx
mov rdi, rdx
mov rsi, r8
mov r12, r9
call fcn.14002c8c0
mov rbx, rax
test rax, rax
je 0x14002e8e4
test rbp, rbp
je 0x14002e6eb
mov rax, qword [rax + 0x1d8]
mov qword [rbp], rax
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbx + 0x44], 1
mov dword [rbx + 0xbc], 0
mov qword [rbx + 0x28], 0xffffffffffffffff
mov r14, r13
mov qword [rbx + 8], r12
mov r12, qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rbx + 0x10], rsi
xor esi, esi
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call r12
mov qword [rbx + 0x30], rax
test rax, rax
jne 0x14002e760
test esi, esi
jne 0x14002e750
xor ecx, ecx
mov esi, 1
call r14
jmp 0x14002e71f
add esi, 1
mov ecx, 0x14
call r13
cmp esi, 5
jne 0x14002e71f
mov qword [rbx + 0x38], 0xffffffffffffffff
lea r12, [rbx + 0x68]
mov rcx, r12
call fcn.1400303f0
cmp eax, 1
je 0x14002e92f
cmp qword [rbx + 0x30], 0
mov dword [rbx], 0xbab1f00d
mov qword [rbx + 0x68], 0xffffffffffffffff
mov dword [rbx + 0xc0], 0
mov dword [rbx + 0xb8], 0
je 0x14002e8cd
xor edx, edx
test rdi, rdi
je 0x14002e7cd
mov eax, dword [rdi]
mov rsi, qword [rdi + 0x10]
mov dword [rbx + 0x44], eax
test al, 8
jne 0x14002e8f0
mov eax, dword [rdi + 0x18]
mov dword [rbx + 0xc0], eax
mov edx, esi
lea r8, [0x14002ce90]
mov r9, rbx
xor ecx, ecx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 4
call qword [sym.imp.msvcrt.dll__beginthreadex]
mov rsi, rax
lea rax, [rax - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14002e898
mov eax, dword [rbx + 0xc0]
mov edx, 0xfffffff1
cmp eax, 0xfffffff2
jge 0x14002e870
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test byte [rbx + 0x44], 4
jne 0x14002e850
mov qword [rbx + 0x28], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResumeThread]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rcx, rsi
mov qword [rbx + 0x28], 0
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14002e837
mov edx, 0xfffffffe
cmp eax, 0xffffffff
jl 0x14002e811
mov edx, 2
cmp eax, edx
cmovle edx, eax
cmp eax, 0xf
mov eax, 0xf
cmovge edx, eax
jmp 0x14002e811
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14002e8a7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbx + 0x38]
call fcn.14002c210
mov rcx, r12
call fcn.1400303f0
cmp eax, 1
je 0x14002e92f
mov qword [rbx + 0x68], 0xffffffffffffffff
pxor xmm0, xmm0
movups xmmword [rbx + 0x28], xmm0
test rbp, rbp
je 0x14002e8da
mov qword [rbp], 0
cmp qword [rbx + 0x1d0], 0
je 0x14002e918
mov eax, 0xb
jmp 0x14002e841
call fcn.14002cb30
mov ecx, dword [0x1400322c8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x14002e928
mov eax, dword [rax + 0xc0]
jmp 0x14002e7c5
mov rcx, rbx
call fcn.14002c990
jmp 0x14002e8e4
call fcn.14002cbe0
jmp 0x14002e906
call fcn.14002c680
nop
nop word cs:[rax + rax]
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rbp, qword [0x1400366f0]
mov rax, qword [rbp]
mov qword [rsp + 0x28], rax
xor eax, eax
mov rsi, rcx
mov rdi, rdx
test rcx, rcx
je 0x14002ea70
lea r12, [0x1400322b8]
mov rcx, r12
call fcn.14002bdb0
mov rcx, rsi
call fcn.14002c390
mov rcx, r12
mov rbx, rax
call fcn.14002c080
test rbx, rbx
je 0x14002ea70
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x14002ea70
lea rdx, [rsp + 0x24]
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
test eax, eax
je 0x14002ea70
test byte [rbx + 0x44], 4
jne 0x14002ea90
call fcn.14002cb30
mov ecx, dword [0x1400322c8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x14002eab0
cmp rsi, qword [rax + 0x1d8]
je 0x14002eae0
mov eax, dword [rbx + 0xbc]
mov rcx, qword [rbx + 0x28]
test eax, eax
je 0x14002e9ff
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14002ea0e
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbx + 0x28]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14002ea22
call rsi
mov qword [rbx + 0x30], 0
test rdi, rdi
je 0x14002eac8
mov rax, qword [rbx + 8]
lea rcx, [rbx + 0x38]
mov qword [rdi], rax
call fcn.14002c210
lea rcx, [rbx + 0x68]
call fcn.1400303f0
cmp eax, 1
je 0x14002eaec
cmp qword [rbx + 0x1d0], 0
mov qword [rbx + 0x68], 0xffffffffffffffff
je 0x14002eaa0
xor eax, eax
jmp 0x14002ea75
mov eax, 3
mov rdx, qword [rsp + 0x28]
sub rdx, qword [rbp]
jne 0x14002eae7
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov eax, 0x16
jmp 0x14002ea75
mov rcx, rbx
call fcn.14002c990
xor eax, eax
jmp 0x14002ea75
call fcn.14002cbe0
test rax, rax
jne 0x14002e9da
jmp 0x14002e9e7
lea rcx, [rbx + 0x38]
call fcn.14002c210
lea rcx, [rbx + 0x68]
jmp 0x14002ea47
mov eax, 0x24
jmp 0x14002ea75
call fcn.140031980
call fcn.14002c680
nop
nop word cs:[rax + rax]
nop dword [rax]
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rbp, qword [0x1400366f0]
lea r12, [0x1400322b8]
mov rax, qword [rbp]
mov qword [rsp + 0x28], rax
xor eax, eax
mov rsi, rcx
mov rcx, r12
mov rdi, rdx
call fcn.14002bdb0
mov rcx, rsi
call fcn.14002c390
mov rbx, rax
test rax, rax
je 0x14002ec40
mov rcx, qword [rax + 0x28]
test rcx, rcx
je 0x14002ec40
lea rdx, [rsp + 0x24]
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
test eax, eax
je 0x14002ec40
test byte [rbx + 0x44], 4
jne 0x14002ec50
call fcn.14002cb30
mov ecx, dword [0x1400322c8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x14002ec80
mov rdx, qword [rax + 0x1d8]
cmp rsi, rdx
je 0x14002ecc0
mov edx, dword [rbx + 0xbc]
mov rcx, qword [rbx + 0x28]
test edx, edx
jne 0x14002ebbb
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14002ec60
mov rcx, qword [rbx + 0x28]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14002ebcf
call rsi
mov qword [rbx + 0x30], 0
test rdi, rdi
je 0x14002ec98
mov rax, qword [rbx + 8]
lea rcx, [rbx + 0x38]
mov qword [rdi], rax
call fcn.14002c210
lea rcx, [rbx + 0x68]
call fcn.1400303f0
cmp eax, 1
je 0x14002ecd7
cmp qword [rbx + 0x1d0], 0
mov qword [rbx + 0x68], 0xffffffffffffffff
je 0x14002ecb0
mov rcx, r12
call fcn.14002c080
xor eax, eax
mov rdx, qword [rsp + 0x28]
sub rdx, qword [rbp]
jne 0x14002ecd2
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov rcx, r12
call fcn.14002c080
mov eax, 3
jmp 0x14002ec22
mov rcx, r12
call fcn.14002c080
mov eax, 0x16
jmp 0x14002ec22
mov eax, dword [rbx + 0xbc]
test eax, eax
jne 0x14002ebb7
mov rcx, r12
call fcn.14002c080
mov eax, 0x10
jmp 0x14002ec22
call fcn.14002cbe0
xor edx, edx
test rax, rax
jne 0x14002eb89
jmp 0x14002eb90
lea rcx, [rbx + 0x38]
call fcn.14002c210
lea rcx, [rbx + 0x68]
jmp 0x14002ebf4
mov rcx, rbx
call fcn.14002c990
jmp 0x14002ec18
mov rcx, r12
call fcn.14002c080
mov eax, 0x24
jmp 0x14002ec22
call fcn.140031980
call fcn.14002c680
nop
nop dword [rax]