Function at 0x180014140
Capabilities:
Allocate thread local storage
Create thread

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x680
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1801bc080]
xor rax, rsp
mov qword [rsp + 0x670], rax
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov eax, 1
xchg dword [0x1801c5798], eax
test eax, eax
jne 0x180014469
mov rax, qword [rcx + 8]
test rax, rax
jne 0x180014218
lea ecx, [rax + 8]
call fcn.1800ef434
mov qword [rsp + 0x30], rax
lea rcx, vtable.RCMinHookApiHook.0
mov qword [rax], rcx
mov qword [rdi + 8], rax
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x84]
call fcn.18010e5a0
mov dword [rsp + 0x80], 0x114
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [rsp + 0x84]
mov dword [0x1801c2988], eax
mov eax, dword [rsp + 0x88]
mov dword [0x1801c2968], eax
mov eax, dword [rsp + 0x8c]
mov dword [0x1801c296c], eax
call fcn.18009d1c0
mov rax, qword [rdi + 8]
test rax, rax
je 0x180014469
call fcn.180032d90
mov rsi, rax
mov qword [rsp + 0x30], rax
mov qword [0x1801c49a0], rax
test rax, rax
je 0x18001446b
mov rcx, qword [rdi + 8]
mov rax, qword [rcx]
call qword [rax]
call qword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [0x1801c298c], eax
mov edx, 0xc8
lea rcx, [0x180136a90]
call fcn.180137450
mov r9b, 1
lea r8, [0x180009a30]
mov rdx, rsi
lea rcx, [rdi + 0x10]
call fcn.1801368d0
test al, al
je 0x180014327
lea rcx, [rdi + 0x10]
call fcn.180136830
mov qword [0x1801c2980], rax
xor edx, edx
mov r8d, 0x4d0
lea rcx, [rsp + 0x1a0]
call fcn.18010e5a0
mov dword [rsp + 0x1d0], 0x10001f
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_RtlCaptureContext]
lea rcx, [rdi + 0x10]
call fcn.1801369c0
nop
mov rdx, qword [rsp + 0x298]
xor r8d, r8d
mov rcx, rdx
mov qword [rsp + 0x38], rdx
lea rax, [rdx + 0x28]
cmp rcx, rax
ja 0x1800142ec
cmp byte [rcx], 0xe8
jne 0x18001430a
mov eax, dword [rcx + 1]
lea r8, [rcx + 5]
add r8, rax
test r8, r8
je 0x1800142fe
mov edx, 0x14
mov rcx, r8
call fcn.180137450
lea rcx, [rdi + 0x10]
call fcn.1801369c0
nop
jmp 0x18001431e
inc rcx
mov qword [rsp + 0x38], rcx
jmp 0x1800142d4
lea rcx, [rsi - 8]
call fcn.180136b70
lea rdx, [rsi - 0x18]
mov r9b, 1
lea r8, [0x180009690]
lea rcx, [rdi + 0x78]
call fcn.1801368d0
lea rcx, [rdi + 0x78]
call fcn.180136830
mov qword [0x1801c2970], rax
lea rcx, [rdi + 0x78]
call fcn.1801369c0
mov rax, qword [0x1801c2970]
test rax, rax
je 0x180014390
mov qword [rsp + 0x30], rax
mov r9b, 1
lea r8, [0x180009650]
lea rdx, [rsp + 0x30]
lea rcx, [rdi + 0x38]
call fcn.180137200
lea rcx, [rdi + 0x38]
call fcn.1801371c0
mov qword [0x1801c2990], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9, rdi
lea r8, [0x180013fc0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.180015220
test al, al
je 0x18001445d
call fcn.180032e00
test rax, rax
je 0x18001445d
mov r9b, 1
lea r8, [0x18000a1b0]
mov rdx, rax
lea rcx, [rdi + 0xa0]
call fcn.1801368d0
test al, al
je 0x18001445d
lea rcx, [rdi + 0xa0]
call fcn.180136830
mov qword [0x1801c2978], rax
mov rcx, qword [rdi + 8]
test rcx, rcx
jne 0x180014417
lea rcx, [rdi + 0xa0]
call fcn.180136850
jmp 0x18001445d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov byte [rsp + 0x70], 0
mov rax, qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rax
lea rax, [0x18000a460]
mov qword [rsp + 0x68], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax + 8]
test al, al
je 0x180014409
mov rax, qword [rsp + 0x60]
mov qword [0x1801c2960], rax
mov rcx, qword [rdi + 8]
mov rax, qword [rcx]
mov dl, 1
call qword [rax + 0x18]
mov al, 1
mov rcx, qword [rsp + 0x670]
xor rcx, rsp
call fcn.1800ef410
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret