Function at 0x140003974
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r13
push r14
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x14001d008]
xor rax, rsp
mov qword [rbp - 8], rax
xor r9d, r9d
mov rsi, rdx
mov r14, rcx
xor r8d, r8d
xor ecx, ecx
lea r12d, [r9 + 1]
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsi + 8], rax
mov rbx, rax
lea r13, [0x14001d0d8]
test rax, rax
jne 0x140003a68
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, r12d
mov rcx, rsi
mov edi, eax
call qword [r8]
mov rdx, qword [0x14001d0e0]
movabs rax, 0x4d54ee85da812030
and dword [rbp - 0x24], ebx
add rdx, rax
cmp rdx, r12
jbe 0x140003a12
mov rcx, qword [0x14001d0d8]
mov edx, edi
mov r8, qword [rcx + 0x30]
mov rcx, r13
call r8
jmp 0x140003a17
test edi, edi
setne al
lea rcx, str.C:Users_ntoskrnlDesktopSDK_boost_asio_182_0_boost_asiodetailimplwin_thread.ipp
movzx eax, al
add rax, 2
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x18], rax
lea rcx, str.start_thread
mov qword [rbp - 0x38], rcx
mov dword [rbp - 0x28], edi
mov qword [rbp - 0x20], r13
mov dword [rbp - 0x30], 0x4c
mov dword [rbp - 0x2c], 0x1a
test r12b, al
je 0x140003a68
cmp rax, r12
jne 0x140003c59
test edi, edi
setne al
test al, al
jne 0x140003c59
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [r14 + 0x10], rax
mov qword [rsi + 0x10], rax
cmp qword [r14 + 0x10], 0
jne 0x140003b28
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, r12d
mov rcx, rsi
mov edi, eax
call qword [r8]
mov rdx, qword [0x14001d0e0]
movabs rax, 0x4d54ee85da812030
and dword [rbp - 0x3c], 0
add rdx, rax
cmp rdx, r12
jbe 0x140003ad2
mov rcx, qword [0x14001d0d8]
mov edx, edi
mov r8, qword [rcx + 0x30]
mov rcx, r13
call r8
jmp 0x140003ad7
test edi, edi
setne al
lea rcx, str.C:Users_ntoskrnlDesktopSDK_boost_asio_182_0_boost_asiodetailimplwin_thread.ipp
movzx eax, al
add rax, 2
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x30], rax
lea rcx, str.start_thread
mov qword [rbp - 0x20], rcx
mov dword [rbp - 0x40], edi
mov qword [rbp - 0x38], r13
mov dword [rbp - 0x18], 0x56
mov dword [rbp - 0x14], 0x1a
test r12b, al
je 0x140003b28
cmp rax, r12
jne 0x140003c6e
test edi, edi
setne al
test al, al
jne 0x140003c6e
and dword [rbp - 0x10], 0
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r8, [0x140003c84]
and dword [rsp + 0x20], 0
mov r9, rsi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r14 + 8], rax
test rax, rax
jne 0x140003c05
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rsi]
mov edx, r12d
mov rcx, rsi
mov edi, eax
call qword [r8]
test rbx, rbx
je 0x140003b7d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x140003b8c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [rbp - 0x3c], 0
movabs rcx, 0x4d54ee85da812030
add rcx, qword [0x14001d0e0]
cmp rcx, r12
jbe 0x140003bb7
mov rax, qword [0x14001d0d8]
mov edx, edi
mov rcx, r13
call qword [rax + 0x30]
jmp 0x140003bbc
test edi, edi
setne al
lea rcx, str.C:Users_ntoskrnlDesktopSDK_boost_asio_182_0_boost_asiodetailimplwin_thread.ipp
movzx eax, al
add rax, 2
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x30], rax
lea rcx, str.start_thread
mov qword [rbp - 0x20], rcx
mov dword [rbp - 0x40], edi
mov qword [rbp - 0x38], r13
mov dword [rbp - 0x18], 0x66
mov dword [rbp - 0x14], 0x1a
test r12b, al
je 0x140003c05
cmp rax, r12
jne 0x140003c44
test edi, edi
setne al
test al, al
jne 0x140003c44
test rbx, rbx
je 0x140003c1f
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140011270
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
lea r8, [rbp - 0x28]
lea rdx, str.thread
lea rcx, [rbp - 0x40]
call fcn.14000305c
int3
lea r8, [rbp - 0x40]
lea rdx, str.thread.entry_event
lea rcx, [rbp - 0x28]
call fcn.14000305c
int3
lea r8, [rbp - 0x28]
lea rdx, str.thread.exit_event
lea rcx, [rbp - 0x40]
call fcn.14000305c
int3