Function at 0x1400203b0
Capabilities:
Create thread

Disassembly:
jmp 0x1400203b0
sub rsp, 0x38
lea r9, str.PHType12Thread
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400d44f8], rax
test rax, rax
jne 0x1400203ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type12_event.___d__n
call fcn.140003224
xor eax, eax
add rsp, 0x38
ret
mov rcx, qword [0x1400d4518]
xor edx, edx
mov r9, rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x20], 1
lea r8d, [rdx + 4]
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
lea rax, [rsp + 0x40]
xor ebx, ebx
mov qword [rsp + 0x28], rax
lea r8, [0x140003f12]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
mov dword [rsp + 0x40], ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1400d44e8], rax
test rax, rax
jne 0x140020466
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type12_thread.___d__n
call fcn.140003224
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x38
ret
lea r9, str.PHType12OverrideThread
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400d4500], rax
test rax, rax
jne 0x1400204a6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type12OverrideEvent.___d__n
call fcn.140003224
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x38
ret
mov rcx, qword [0x1400d4520]
xor edx, edx
mov r9, rax
mov dword [rsp + 0x20], 1
lea r8d, [rdx + 4]
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
lea rax, [rsp + 0x48]
mov dword [rsp + 0x48], ebx
mov qword [rsp + 0x28], rax
lea r8, [0x14000233d]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1400d44f0], rax
test rax, rax
jne 0x140020516
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type12_Override_thread.___d__n
call fcn.140003224
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x38
ret
lea r9, str.PHType13Thread
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400d4540], rax
test rax, rax
jne 0x140020556
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type13_event.___d__n
call fcn.140003224
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x38
ret
mov rcx, qword [0x1400d4560]
xor edx, edx
mov r9, rax
mov dword [rsp + 0x20], 1
lea r8d, [rdx + 4]
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x28], rax
lea r8, [0x140001631]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1400d4530], rax
test rax, rax
jne 0x1400205c6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type13_thread.___d__n
call fcn.140003224
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x38
ret
lea r9, str.PHType13OverrideThread
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400d4548], rax
test rax, rax
jne 0x140020601
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type13_Override_event.___d__n
call fcn.140003224
mov rax, qword [0x1400d4548]
mov rcx, qword [0x1400d4568]
xor edx, edx
mov r9, rax
mov dword [rsp + 0x20], 1
lea r8d, [rdx + 4]
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
lea rax, [rsp + 0x58]
mov dword [rsp + 0x58], ebx
mov qword [rsp + 0x28], rax
lea r8, [0x1400010cd]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1400d4538], rax
test rax, rax
jne 0x140020671
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Error:_Initialize_PH_Ex_Thread__:_fail_to_create_Type13_Override_thread.___d__n
call fcn.140003224
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x38
ret
mov rbx, qword [rsp + 0x30]
mov eax, 1
add rsp, 0x38
ret