Function at 0x7ff6baffa8e0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x7ff6bb0bb010]
xor rax, rsp
mov qword [rbp - 8], rax
xor r9d, r9d
mov rsi, rdx
mov r14, rcx
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.kernel32.dll_CreateEventW]
xor r12d, r12d
mov qword [rsi + 8], rax
lea r15, [0x7ff6bb0bb080]
mov rdi, rax
lea r13, [0x7ff6bb0a2500]
test rax, rax
jne 0x7ff6baffa9cf
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
lea edx, [rdi + 1]
mov rcx, rsi
mov ebx, eax
call qword [r8]
mov rdx, qword [0x7ff6bb0bb088]
movabs rax, 0x4d54ee85da812030
add rdx, rax
mov dword [rbp - 0x24], r12d
cmp rdx, 1
jbe 0x7ff6baffa985
mov rcx, qword [0x7ff6bb0bb080]
mov edx, ebx
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x7ff6baffa98a
test ebx, ebx
setne al
movzx eax, al
lea rcx, [0x7ff6bb0a24e8]
add rax, 2
mov dword [rbp - 0x28], ebx
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], rcx
mov dword [rbp - 0x30], 0x4c
mov dword [rbp - 0x2c], 0x1a
test al, 1
je 0x7ff6baffa9cf
cmp rax, 1
jne 0x7ff6baffabaf
test ebx, ebx
jne 0x7ff6baffabaf
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.kernel32.dll_CreateEventW]
mov qword [r14 + 0x10], rax
mov qword [rsi + 0x10], rax
cmp qword [r14 + 0x10], r12
jne 0x7ff6baffaa86
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov ebx, eax
call qword [r8]
mov rdx, qword [0x7ff6bb0bb088]
movabs rax, 0x4d54ee85da812030
add rdx, rax
mov dword [rbp - 0x3c], r12d
cmp rdx, 1
jbe 0x7ff6baffaa3c
mov rcx, qword [0x7ff6bb0bb080]
mov edx, ebx
mov r8, qword [rcx + 0x30]
mov rcx, r15
call r8
jmp 0x7ff6baffaa41
test ebx, ebx
setne al
movzx eax, al
lea rcx, [0x7ff6bb0a24e8]
add rax, 2
mov dword [rbp - 0x40], ebx
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], rcx
mov dword [rbp - 0x18], 0x56
mov dword [rbp - 0x14], 0x1a
test al, 1
je 0x7ff6baffaa86
cmp rax, 1
jne 0x7ff6baffabc4
test ebx, ebx
jne 0x7ff6baffabc4
lea rax, [rbp - 0x10]
mov dword [rbp - 0x10], r12d
mov qword [rsp + 0x28], rax
lea r8, [0x7ff6baffabe0]
mov r9, rsi
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [r14 + 8], rax
test rax, rax
jne 0x7ff6baffab5a
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
mov ebx, eax
call qword [r8]
test rdi, rdi
je 0x7ff6baffaadd
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x7ff6baffaaec
call qword [sym.imp.kernel32.dll_CloseHandle]
movabs rcx, 0x4d54ee85da812030
mov dword [rbp - 0x3c], r12d
add rcx, qword [0x7ff6bb0bb088]
cmp rcx, 1
jbe 0x7ff6baffab18
mov rax, qword [0x7ff6bb0bb080]
mov edx, ebx
mov rcx, r15
call qword [rax + 0x30]
jmp 0x7ff6baffab1d
test ebx, ebx
setne al
movzx eax, al
lea rcx, [0x7ff6bb0a24e8]
add rax, 2
mov dword [rbp - 0x40], ebx
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], rcx
mov dword [rbp - 0x18], 0x66
mov dword [rbp - 0x14], 0x1a
test al, 1
je 0x7ff6baffab5a
cmp rax, 1
jne 0x7ff6baffab9a
test ebx, ebx
jne 0x7ff6baffab9a
test rdi, rdi
je 0x7ff6baffab76
mov edx, 0xffffffff
mov rcx, rdi
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.7ff6bb030660
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, [rbp - 0x28]
lea rdx, [0x7ff6bb0a2584]
lea rcx, [rbp - 0x40]
call fcn.7ff6baffa1e0
int3
lea r8, [rbp - 0x40]
lea rdx, [0x7ff6bb0a2558]
lea rcx, [rbp - 0x28]
call fcn.7ff6baffa1e0
int3
lea r8, [rbp - 0x28]
lea rdx, [0x7ff6bb0a2570]
lea rcx, [rbp - 0x40]
call fcn.7ff6baffa1e0
int3