Function at 0x140002600
Capabilities:
Create thread
Resume thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x30
mov rbx, r8
mov edi, edx
mov rsi, rcx
lea rax, vtable.Thread_os.0
mov qword [rcx], rax
add rcx, 0x14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
lea rax, vtable.Thread.0
mov qword [rsi], rax
lea rax, str.Wave
mov qword [rsi + 0x3c], rax
mov dword [rsi + 0x44], reloc.WS2_32.dll_ntohs
mov dword [rsi + 0x48], 0x4e20
lea rcx, [rsi + 0x4d]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
nop
lea rax, vtable.Wave.0
mov qword [rsi], rax
xor ebp, ebp
mov qword [rsi + 0x95], rbp
mov qword [rsi + 0x9d], rbx
mov qword [rsi + 0xb7], rbp
mov dword [rsi + 0xbf], ebp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov qword [rsi + 0xc3], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov qword [rsi + 0xcb], rax
lea rcx, [rsi + 0xf3]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
nop
mov dword [rsi + 0x11b], edi
lea rax, [rsi + 0x135]
mov qword [rsi + 0x11f], rax
mov dword [rsi + 0x127], 6
mov word [rsi + 0x12b], 0x100
mov qword [rsi + 0x12d], rbp
mov byte [rsi + 0x27d5], bpl
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsi + 0xa5], xmm0
mov word [rsi + 0xb5], ax
xor edx, edx
mov r8d, 0x670
lea rcx, [rsi + 0x135]
call fcn.1400c5120
lea rax, [rsi + 0x165]
mov qword [rsi + 0x135], rax
mov dword [rsi + 0x13d], 0x640
lea rcx, [rsi + 0x7b1]
xor edx, edx
mov r8d, 0x664
call fcn.1400c5120
lea rax, [rsi + 0x7d5]
mov qword [rsi + 0x7a5], rax
mov dword [rsi + 0x7ad], 0x640
lea rcx, [rsi + 0xe21]
xor edx, edx
mov r8d, 0x664
call fcn.1400c5120
lea rax, [rsi + 0xe45]
mov qword [rsi + 0xe15], rax
mov dword [rsi + 0xe1d], 0x640
lea rcx, [rsi + 0x1491]
xor edx, edx
mov r8d, 0x664
call fcn.1400c5120
lea rax, [rsi + 0x14b5]
mov qword [rsi + 0x1485], rax
mov dword [rsi + 0x148d], 0x640
lea rcx, [rsi + 0x1b01]
xor edx, edx
mov r8d, 0x664
call fcn.1400c5120
lea rax, [rsi + 0x1b25]
mov qword [rsi + 0x1af5], rax
mov dword [rsi + 0x1afd], 0x640
lea rcx, [rsi + 0x2171]
xor edx, edx
mov r8d, 0x664
call fcn.1400c5120
lea rax, [rsi + 0x2195]
mov qword [rsi + 0x2165], rax
mov dword [rsi + 0x216d], 0x640
mov dword [rsi + 0xa5], 0x10001
mov dword [rsi + 0xa9], 0x1f40
mov dword [rsi + 0xad], 0x3e80
mov dword [rsi + 0xb1], 0x100002
cmp qword [rsi + 0xc3], rbp
je 0x140002850
cmp qword [rsi + 0xcb], rbp
jne 0x14000285c
lea rcx, str._AsusSync_Wave__Wave_____AirFoneError_InsufficientResources_CreateEvent___failed_n
call fcn.1400959a0
xorps xmm0, xmm0
movups xmmword [rsi + 0xd3], xmm0
movups xmmword [rsi + 0xe3], xmm0
mov byte [rsi + 0x4c], 0
movsxd rbx, dword [rsi + 0x44]
lea rdi, [rsi + 8]
mov dword [rdi], ebp
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 4
mov r9, rsi
lea r8, [0x140001f90]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rsi + 0xc], rax
lea rdx, [0x14010ebc0]
mov edx, dword [rdx + rbx*4]
mov rcx, rax
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_SetThreadPriority]
mov rcx, qword [rsi + 0xc]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_ResumeThread]
mov r8d, dword [rsi + 0x11b]
mov edx, dword [rdi]
lea rcx, str._AsusSync_Wave__Wave_____Thread_ID___d__Type:_d_n
call fcn.1400959a0
nop
mov rax, rsi
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret