Function at 0x7ff670d90110
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x18], r8d
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xor r9d, r9d
mov rsi, rdx
mov r14, rcx
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.kernel32.dll_CreateEventW]
xor r12d, r12d
mov qword [rsi + 8], rax
lea r15, [0x7ff670e25130]
mov rbx, rax
lea r13, [0x7ff670e0ad50]
test rax, rax
jne 0x7ff670d901fe
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
lea edx, [rbx + 1]
mov rcx, rsi
mov edi, eax
call qword [r8]
mov rdx, qword [0x7ff670e25138]
movabs rax, 0x4d54ee85da812030
add rdx, rax
mov dword [rbp - 0x14], r12d
cmp rdx, 1
jbe 0x7ff670d901b4
mov rcx, qword [0x7ff670e25130]
mov edx, edi
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x7ff670d901b9
test edi, edi
setne al
movzx eax, al
lea rcx, [0x7ff670e0ad38]
add rax, 2
mov dword [rbp - 0x18], edi
mov qword [rbp - 8], rax
mov qword [rbp - 0x10], r15
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], rcx
mov dword [rbp - 0x20], 0x4c
mov dword [rbp - 0x1c], 0x1a
test al, 1
je 0x7ff670d901fe
cmp rax, 1
jne 0x7ff670d903d8
test edi, edi
jne 0x7ff670d903d8
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.kernel32.dll_CreateEventW]
mov qword [r14 + 0x10], rax
mov qword [rsi + 0x10], rax
cmp qword [r14 + 0x10], r12
jne 0x7ff670d902b5
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov edi, eax
call qword [r8]
mov rdx, qword [0x7ff670e25138]
movabs rax, 0x4d54ee85da812030
add rdx, rax
mov dword [rbp - 0x2c], r12d
cmp rdx, 1
jbe 0x7ff670d9026b
mov rcx, qword [0x7ff670e25130]
mov edx, edi
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x7ff670d90270
test edi, edi
setne al
movzx eax, al
lea rcx, [0x7ff670e0ad38]
add rax, 2
mov dword [rbp - 0x30], edi
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], rcx
mov dword [rbp - 8], 0x56
mov dword [rbp - 4], 0x1a
test al, 1
je 0x7ff670d902b5
cmp rax, 1
jne 0x7ff670d903ed
test edi, edi
jne 0x7ff670d903ed
lea rax, [rbp + 0x40]
mov dword [rbp + 0x40], r12d
mov qword [rsp + 0x28], rax
lea r8, [0x7ff670d90410]
mov r9, rsi
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [r14 + 8], rax
test rax, rax
jne 0x7ff670d90389
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov edi, eax
call qword [r8]
test rbx, rbx
je 0x7ff670d9030c
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x7ff670d9031b
call qword [sym.imp.kernel32.dll_CloseHandle]
movabs rcx, 0x4d54ee85da812030
mov dword [rbp - 0x2c], r12d
add rcx, qword [0x7ff670e25138]
cmp rcx, 1
jbe 0x7ff670d90347
mov rax, qword [0x7ff670e25130]
mov edx, edi
mov rcx, r15
call qword [rax + 0x30]
jmp 0x7ff670d9034c
test edi, edi
setne al
movzx eax, al
lea rcx, [0x7ff670e0ad38]
add rax, 2
mov dword [rbp - 0x30], edi
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], rcx
mov dword [rbp - 8], 0x66
mov dword [rbp - 4], 0x1a
test al, 1
je 0x7ff670d90389
cmp rax, 1
jne 0x7ff670d903c3
test edi, edi
jne 0x7ff670d903c3
test rbx, rbx
je 0x7ff670d903a5
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp - 0x18]
lea rdx, [0x7ff670e0adcc]
lea rcx, [rbp - 0x30]
call fcn.7ff670d8fbe0
int3
lea r8, [rbp - 0x30]
lea rdx, [0x7ff670e0ada0]
lea rcx, [rbp - 0x18]
call fcn.7ff670d8fbe0
int3
lea r8, [rbp - 0x18]
lea rdx, [0x7ff670e0adb8]
lea rcx, [rbp - 0x30]
call fcn.7ff670d8fbe0
int3