Function at 0x140029f70
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x140065738]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov r14, rdx
mov rdi, rcx
mov rsi, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0xf0]
mov r12, qword [rsp + 0x100]
mov r13d, 1
lock xadd dword [0x14006956c], r13d
inc r13d
mov qword [rcx], r8
mov qword [rcx + 8], r9
mov rax, qword [rsp + 0xd0]
mov qword [rcx + 0x10], rax
xor ecx, ecx
mov qword [rdi + 0x80], rcx
mov qword [rdi + 0x88], rcx
mov qword [rdi + 0x90], rcx
mov qword [rdi + 0x98], rcx
mov qword [rdi + 0xa0], rcx
mov eax, dword [rsp + 0xe0]
mov dword [rdi + 0xa8], eax
mov qword [rdi + 0xb0], rcx
mov qword [rdi + 0xb8], rcx
mov r15d, dword [rsp + 0xd8]
mov dword [rdi + 0xc0], r15d
mov qword [rdi + 0xc8], rcx
mov qword [rdi + 0xd0], rcx
mov qword [rdi + 0xd8], rcx
mov qword [rdi + 0xe0], rcx
mov byte [rdi + 0xe8], cl
mov qword [rdi + 0x118], rcx
mov qword [rdi + 0x120], rcx
mov dword [rdi + 0x128], ecx
mov qword [rdi + 0x130], rcx
mov qword [rdi + 0x138], rcx
mov word [rdi + 0x140], cx
mov byte [rdi + 0x142], cl
mov ebx, ecx
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x14002a08f
xor r12d, r12d
jmp 0x14002a10c
test rsi, rsi
je 0x14002a0ca
mov ecx, 0x370
call fcn.140043ba0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14002a0c2
mov r9, r12
mov r8d, dword [rdi + 0xa8]
mov rdx, rsi
mov rcx, rax
call fcn.14002aba0
xor r12d, r12d
jmp 0x14002a0c8
xor r12d, r12d
mov eax, r12d
jmp 0x14002a107
test rbp, rbp
je 0x14002a159
mov ecx, 0x370
call fcn.140043ba0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14002a101
mov r9, r12
mov r8d, dword [rdi + 0xa8]
mov rdx, rbp
mov rcx, rax
call fcn.14002ab20
xor r12d, r12d
jmp 0x14002a107
xor r12d, r12d
mov eax, r12d
test rax, rax
je 0x14002a15c
mov rbx, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14002a15c
mov rcx, rax
call fcn.14002ad90
test al, al
je 0x14002a15c
mov rbp, rbx
mov rbx, r12
mov qword [rsp + 0x30], rbx
mov rsi, qword [rdi + 0x18]
cmp rbp, rsi
je 0x14002a15c
test rsi, rsi
je 0x14002a153
mov rcx, rsi
call fcn.14002ac50
mov edx, 0x370
mov rcx, rsi
call fcn.140043bdc
mov qword [rdi + 0x18], rbp
jmp 0x14002a15c
xor r12d, r12d
cmp qword [rdi + 0x18], 0
jne 0x14002a27b
lea rcx, [rdi + 0xf0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [rdi + 0x118], rax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [rdi + 0x120], rax
test rax, rax
je 0x14002a1e0
cmp qword [rdi + 0x118], 0
je 0x14002a1e0
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rdi
lea r8, [0x140029800]
mov edx, 0x10000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi + 0xe0], rax
lea rcx, str.dbghelp.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rdi + 0x98], rax
test rax, rax
je 0x14002a210
lea rdx, str.MiniDumpWriteDump
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0xa0], rax
lea rcx, str.rpcrt4.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rdi + 0xb0], rax
test rax, rax
je 0x14002a240
lea rdx, str.UuidCreate
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0xb8], rax
lea rsi, [rdi + 0x20]
cmp rsi, r14
je 0x14002a262
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x14002a256
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rsi
call fcn.140028d90
cmp qword [rsi + 0x18], 8
jb 0x14002a26c
mov rsi, qword [rsi]
mov qword [rdi + 0x80], rsi
mov rcx, rdi
call fcn.14002a490
mov qword [rsp + 0x58], r12
mov dword [rsp + 0x60], r12d
lea rsi, [rdi + 0x148]
mov rbp, qword [rsi]
movabs rax, 0x7ffffffffffffff
cmp qword [rsi + 8], rax
je 0x14002a3ef
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r12
mov ecx, 0x20
call fcn.140043ba0
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rax + 0x10], xmm0
inc qword [rsi + 8]
mov rcx, qword [rbp + 8]
mov qword [rax], rbp
mov qword [rax + 8], rcx
mov qword [rbp + 8], rax
mov qword [rcx], rax
cmp r13d, 1
jne 0x14002a2e9
lea rcx, [0x140069570]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
test r15d, r15d
je 0x14002a3b0
lea rcx, [0x140069570]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x140069560]
test rax, rax
jne 0x14002a32f
lea ecx, [rax + 0x18]
call fcn.140043ba0
test rax, rax
je 0x14002a325
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
jmp 0x14002a328
mov rax, r12
mov qword [0x140069560], rax
mov qword [rsp + 0x38], rdi
mov rdx, qword [rax + 8]
cmp rdx, qword [rax + 0x10]
je 0x14002a348
mov qword [rdx], rdi
add qword [rax + 8], 8
jmp 0x14002a355
lea r8, [rsp + 0x38]
mov rcx, rax
call fcn.140029140
test r15b, 1
je 0x14002a36f
lea rcx, [0x140029910]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov qword [rdi + 0xc8], rax
test r15b, 2
je 0x14002a389
lea rcx, [0x140029a80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__set_invalid_parameter_handler]
mov qword [rdi + 0xd0], rax
test r15b, 4
je 0x14002a3a2
lea rcx, [0x140029c70]
call sub.VCRUNTIME140.dll__set_purecall_handler
mov qword [rdi + 0xd8], rax
lea rcx, [0x140069570]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
test rbx, rbx
je 0x14002a3ca
mov rcx, rbx
call fcn.14002ac50
mov edx, 0x370
mov rcx, rbx
call fcn.140043bdc
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400441e0
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.list_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3