Function at 0x140011302
Capabilities:
Enumerate threads

Disassembly:
jmp 0x140015c10
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x168
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x22
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x188]
mov rax, qword [0x140027040]
xor rax, rbp
mov qword [rbp + 0x138], rax
lea rcx, [0x14002e0f5]
call fcn.14001171c
nop
xor edx, edx
mov ecx, 4
call fcn.140011366
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0xffffffffffffffff
jne 0x140015cb3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x134], eax
lea rdx, str.Failed_to_create_thread_snapshot._Error:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110d2
mov ecx, dword [rbp + 0x134]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov dl, 0xa
mov rcx, rax
call fcn.140011582
nop
xor eax, eax
jmp 0x140015dbe
mov dword [rbp + 0x28], 0x1c
lea rdx, [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.1400114a1
test eax, eax
jne 0x140015d18
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x134], eax
lea rdx, str.Failed_to_get_first_thread._Error:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110d2
mov ecx, dword [rbp + 0x134]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov dl, 0xa
mov rcx, rax
call fcn.140011582
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xor eax, eax
jmp 0x140015dbe
mov qword [rbp + 0x68], 0
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
cmp dword [rbp + 0x34], eax
jne 0x140015d9a
mov r8d, dword [rbp + 0x30]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x140015d98
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x134], eax
lea rdx, str.Failed_to_open_thread._Error:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110d2
mov ecx, dword [rbp + 0x134]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov dl, 0xa
mov rcx, rax
call fcn.140011582
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xor eax, eax
jmp 0x140015dbe
jmp 0x140015daf
lea rdx, [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.1400110d7
test eax, eax
jne 0x140015d20
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rax, qword [rbp + 0x68]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140022380]
call fcn.140011627
mov rax, rdi
mov rcx, qword [rbp + 0x138]
xor rcx, rbp
call fcn.140011389
lea rsp, [rbp + 0x148]
pop rdi
pop rbp
ret