Function at 0x14002a8b0
Capabilities:
Resume thread
Suspend thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
movzx r15d, r9b
mov rdi, r8
mov r14, rdx
xor ebx, ebx
mov dword [rbp + 0x270], ebx
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x48]
cmp qword [r8 + 0x48], rax
jne 0x14002a940
mov dword [r8 + 0x70], ebx
lea r8, [rbp + 0x270]
mov edx, 0x4d0
lea rcx, [rdi + 0x10]
call fcn.1400274e0
mov byte [rdi + 8], 1
mov rcx, qword [rdi + 0x10]
add rcx, qword [rdi]
call fcn.140046c40
mov al, 1
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov esi, eax
cmp eax, 0xffffffff
jne 0x14002a9af
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0xf3
lea r8, str.D:JenkinsworkspaceN_SentryNativeSDKexternalcrashpad_snapshotwinprocess_reader_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits64__void__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea rcx, [rbp + 0x138]
call fcn.14004b920
nop
mov dword [rbp + 0x270], 4
lea rdx, [0x14009db70]
mov rcx, rax
call fcn.1400012e0
nop
lea rcx, [rbp + 0x138]
call fcn.14004bbf0
xor al, al
jmp 0x14002a923
test esi, esi
jne 0x14002aa2b
cmp r15b, 1
jne 0x14002aa2b
mov dword [rsp + 0x20], 1
mov r9d, 0xf8
lea r8, str.D:JenkinsworkspaceN_SentryNativeSDKexternalcrashpad_snapshotwinprocess_reader_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits64__void__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea rcx, [rbp + 0x38]
call fcn.14004b780
nop
mov dword [rbp + 0x270], 8
lea rdx, str.Thread
mov rcx, rax
call fcn.1400012e0
mov rdx, qword [rdi + 0x48]
mov rcx, rax
call fcn.140004600
mov rcx, rax
lea rdx, str._should_be_suspended__but_previous_suspend_count_is
call fcn.1400012e0
mov edx, esi
mov rcx, rax
call fcn.14000ddd0
nop
lea rcx, [rbp + 0x38]
call fcn.14004b9a0
mov esi, ebx
jmp 0x14002aa34
sub esi, r15d
mov ebx, dword [rbp + 0x270]
mov dword [rdi + 0x70], esi
cmp byte [rbp + 0x280], 0
je 0x14002aaf7
lea r8, [rbp + 0x270]
mov edx, 0x2cc
lea rcx, [rdi + 0x10]
call fcn.1400274e0
mov byte [rdi + 8], 1
test bl, bl
jns 0x14002aa6e
btr ebx, 7
lea rcx, [rbp + 0x38]
call fcn.14004b9a0
mov rcx, qword [rdi + 0x10]
mov rax, qword [rdi]
mov dword [rcx + rax], 0x10001f
bt ebx, 8
jae 0x14002aa92
btr ebx, 8
lea rcx, [rbp + 0x138]
call fcn.14004b9a0
mov rdx, qword [rdi + 0x10]
add rdx, qword [rdi]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Wow64GetThreadContext]
test eax, eax
jne 0x14002ab1e
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x13f
lea r8, str.D:JenkinsworkspaceN_SentryNativeSDKexternalcrashpad_snapshotwinprocess_reader_win.cc
lea rdx, str.bool___cdecl_crashpad::ProcessReaderWin::ThreadContext::InitializeWow64_void__
lea rcx, [rsp + 0x30]
call fcn.14004b920
nop
or ebx, 0x40
mov dword [rbp + 0x270], ebx
lea rdx, [0x14009d418]
mov rcx, rax
call fcn.1400012e0
nop
test bl, 0x40
jmp 0x14002ab7b
mov ecx, 0x800
call fcn.140033180
test al, al
je 0x14002ab8e
mov r8d, 0x800
mov rdx, r14
mov rcx, rdi
call fcn.14002bfe0
test al, al
je 0x14002ab87
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ResumeThread]
test eax, eax
jne 0x14002a921
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x11b
lea r8, str.D:JenkinsworkspaceN_SentryNativeSDKexternalcrashpad_snapshotwinprocess_reader_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits64__void__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea rcx, [rsp + 0x30]
call fcn.14004b920
nop
or ebx, 0x10
mov dword [rbp + 0x270], ebx
lea rdx, [0x14009dbc0]
mov rcx, rax
call fcn.1400012e0
nop
test bl, 0x10
je 0x14002ab87
lea rcx, [rsp + 0x30]
call fcn.14004bbf0
xor al, al
jmp 0x14002a923
lea r8, [rbp + 0x270]
mov edx, 0x4d0
lea rcx, [rdi + 0x10]
call fcn.1400274e0
mov byte [rdi + 8], 1
bt ebx, 0xa
jae 0x14002abbd
btr ebx, 0xa
lea rcx, [rbp + 0x138]
call fcn.14004b9a0
mov rcx, qword [rdi + 0x10]
mov rax, qword [rdi]
mov dword [rcx + rax + 0x30], 0x10001f
bt ebx, 0xb
jae 0x14002abdf
btr ebx, 0xb
lea rcx, [rbp + 0x38]
call fcn.14004b9a0
mov rdx, qword [rdi + 0x10]
add rdx, qword [rdi]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
jne 0x14002ab1e
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x133
lea r8, str.D:JenkinsworkspaceN_SentryNativeSDKexternalcrashpad_snapshotwinprocess_reader_win.cc
lea rdx, str.bool___cdecl_crashpad::ProcessReaderWin::ThreadContext::InitializeNative_void__
lea rcx, [rsp + 0x30]
call fcn.14004b920
nop
bts ebx, 9
mov dword [rbp + 0x270], ebx
lea rdx, [0x14009d348]
mov rcx, rax
call fcn.1400012e0
nop
test ebx, 0x200
jmp 0x14002ab7b