Function at 0x1400441f8
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140094940]
xor rax, rsp
mov qword [rbp - 8], rax
xor r14d, r14d
mov qword [rbp - 0x30], r14
mov rcx, qword [str.___t_]
lea r12, str.___t_
lea r13, [0x140082a68]
mov dil, 5
mov r15b, 4
cmp rcx, r12
je 0x140044268
test byte [rcx + 0x1c], r15b
je 0x140044268
cmp byte [rcx + 0x19], dil
jb 0x140044268
mov rcx, qword [rcx + 0x10]
lea edx, [r14 + 0x11]
mov r8, r13
call fcn.140001010
mov ebx, 0xea60
mov esi, 2
mov r8d, ebx
mov ecx, esi
call fcn.140022a68
call fcn.140067264
test eax, eax
jne 0x140044352
lea rcx, [rbp - 0x40]
call fcn.140067a94
test eax, eax
jne 0x14004431c
cmp dword [rbp - 0x40], r14d
je 0x140044348
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x1400442cb
test byte [rcx + 0x1c], r15b
je 0x1400442cb
cmp byte [rcx + 0x19], dil
jb 0x1400442cb
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x11]
mov r8, r13
call fcn.140001010
call fcn.140067bb8
test eax, eax
jne 0x1400442fd
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044348
test byte [rcx + 0x1c], r15b
je 0x140044348
cmp byte [rcx + 0x19], dil
jb 0x140044348
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0x14]
mov r8, r13
call fcn.140001010
jmp 0x140044348
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044348
test byte [rcx + 0x1c], r15b
je 0x140044348
cmp byte [rcx + 0x19], sil
jb 0x140044348
mov edx, 0x15
jmp 0x140044339
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044348
test byte [rcx + 0x1c], r15b
je 0x140044348
cmp byte [rcx + 0x19], sil
jb 0x140044348
mov edx, 0x16
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001030
mov r8d, ebx
mov ecx, esi
call fcn.140022a68
mov r8d, ebx
mov ecx, esi
call fcn.140022a68
lea rcx, [rbp - 0x30]
call fcn.14006268c
test eax, eax
jne 0x1400443a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x14004439d
test byte [rcx + 0x1c], r15b
je 0x14004439d
cmp byte [rcx + 0x19], sil
jb 0x14004439d
mov rcx, qword [rcx + 0x10]
mov edx, 0x17
mov r9d, eax
mov r8, r13
call fcn.140001030
mov eax, ebx
jmp 0x140044c06
mov r8d, ebx
mov ecx, esi
call fcn.140022a68
call fcn.140065614
mov ebx, eax
mov edi, 1
test eax, eax
je 0x1400443f9
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044bbe
test byte [rcx + 0x1c], r15b
je 0x140044bbe
cmp byte [rcx + 0x19], sil
jb 0x140044bbe
lea edx, [rdi + 0x17]
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001030
jmp 0x140044bbe
call fcn.14004be70
test eax, eax
jne 0x140044435
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044bbe
test byte [rcx + 0x1c], r15b
je 0x140044bbe
cmp byte [rcx + 0x19], sil
jb 0x140044bbe
mov edx, 0x19
jmp 0x1400443e5
mov r8d, 0xea60
mov ecx, esi
call fcn.140022a68
xor r9d, r9d
mov r8d, edi
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400983a0], rax
test rax, rax
jne 0x140044494
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044bbe
test byte [rcx + 0x1c], r15b
je 0x140044bbe
cmp byte [rcx + 0x19], sil
jb 0x140044bbe
mov edx, 0x1a
jmp 0x140044baf
mov r8d, 0xea60
mov ecx, esi
call fcn.140022a68
mov ecx, 0x3c
call fcn.1400625b8
mov qword [0x1400983b8], rax
test rax, rax
jne 0x140044502
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x1400444eb
test byte [rcx + 0x1c], r15b
je 0x1400444eb
cmp byte [rcx + 0x19], sil
jb 0x1400444eb
mov rcx, qword [rcx + 0x10]
mov edx, 0x1b
mov r9d, eax
mov r8, r13
call fcn.140001030
mov r9d, 0xc0007d72
xor r8d, r8d
mov edx, edi
mov ecx, edi
call fcn.140062ba4
jmp 0x14004439d
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x3c]
call sub.msvcrt.dll_memset
call fcn.140076420
test eax, eax
jns 0x140044547
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x1400444eb
test byte [rcx + 0x1c], r15b
je 0x1400444eb
cmp byte [rcx + 0x19], sil
jb 0x1400444eb
mov edx, 0x1c
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001030
jmp 0x1400444eb
call fcn.140076558
test eax, eax
jns 0x14004456f
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x1400444eb
test byte [rcx + 0x1c], r15b
je 0x1400444eb
cmp byte [rcx + 0x19], sil
jb 0x1400444eb
mov edx, 0x1d
jmp 0x140044536
mov rcx, qword [0x1400983b8]
lea rax, [rcx + 8]
lea r9, [rcx + 0xc]
mov qword [rsp + 0x20], rax
lea r8, [rcx + 4]
add rcx, 0x10
call fcn.1400767e8
test eax, eax
je 0x1400445cd
mov rax, qword [str.___t_]
cmp rax, r12
je 0x1400445cd
test byte [rax + 0x1c], r15b
je 0x1400445cd
cmp byte [rax + 0x19], sil
jb 0x1400445cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [str.___t_]
mov edx, 0x1e
mov r9d, eax
mov r8, r13
mov rcx, qword [rcx + 0x10]
call fcn.140001030
mov rcx, qword [0x1400983b8]
lea rax, [rcx + 0x1c]
lea r10, [rcx + 0x20]
mov qword [rsp + 0x28], rax
lea r9, [rcx + 0x18]
mov qword [rsp + 0x20], r10
lea r8, [rcx + 0x14]
lea rdx, [rcx + 0x28]
add rcx, 0x24
call fcn.140076a28
test eax, eax
je 0x140044638
mov rax, qword [str.___t_]
cmp rax, r12
je 0x140044638
test byte [rax + 0x1c], r15b
je 0x140044638
cmp byte [rax + 0x19], sil
jb 0x140044638
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [str.___t_]
mov edx, 0x1f
mov r9d, eax
mov r8, r13
mov rcx, qword [rcx + 0x10]
call fcn.140001030
mov rcx, qword [0x1400983b8]
lea r9, [rcx + 0x34]
lea r8, [rcx + 0x38]
lea rdx, [rcx + 0x30]
add rcx, 0x2c
call fcn.140076608
test eax, eax
je 0x140044691
mov rax, qword [str.___t_]
cmp rax, r12
je 0x140044691
test byte [rax + 0x1c], r15b
je 0x140044691
cmp byte [rax + 0x19], sil
jb 0x140044691
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [str.___t_]
mov edx, 0x20
mov r9d, eax
mov r8, r13
mov rcx, qword [rcx + 0x10]
call fcn.140001030
lea rcx, [0x140098378]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [0x1400983b8]
lea rcx, [0x140098378]
imul eax, dword [rdx + 0x20], 0x3c
mov dword [0x1400983c0], eax
imul eax, dword [rdx + 0x38], 0x3c
mov dword [0x1400983ac], eax
imul eax, dword [rdx + 0xc], 0x3c
mov dword [0x1400983c4], eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r8d, 0xea60
mov ecx, esi
call fcn.140022a68
lea rcx, [rbp - 0x30]
call fcn.140043f40
mov ebx, eax
test eax, eax
je 0x140044729
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x14004439d
test byte [rcx + 0x1c], r15b
je 0x14004439d
cmp byte [rcx + 0x19], sil
jb 0x14004439d
mov edx, 0x21
mov r9d, eax
mov rcx, qword [rcx + 0x10]
mov r8, r13
call fcn.140001030
jmp 0x14004439d
mov ebx, 0xea60
mov ecx, esi
mov r8d, ebx
call fcn.140022a68
call fcn.14004c088
test eax, eax
jne 0x140044800
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044779
test byte [rcx + 0x1c], r15b
je 0x140044779
cmp byte [rcx + 0x19], sil
jb 0x140044779
mov rcx, qword [rcx + 0x10]
mov edx, 0x22
mov r9d, eax
mov r8, r13
call fcn.140001030
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140080df0]
mov word [rbp - 0x24], r14w
mov edx, 0xc
lea rcx, [rbp - 0x24]
call fcn.1400028c0
test eax, eax
lea rcx, [rbp - 0x24]
mov rax, qword [0x140098448]
mov r9d, 0xc0007d68
cmovs rcx, r14
mov r8d, esi
mov qword [rsp + 0x28], rcx
mov edx, edi
mov rcx, qword [rax + 0x60]
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.140062ba4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044bbe
test byte [rcx + 0x1c], r15b
je 0x140044bbe
cmp byte [rcx + 0x19], sil
jb 0x140044bbe
mov edx, 0x23
jmp 0x140044baf
mov r8d, ebx
mov ecx, esi
call fcn.140022a68
call fcn.140026754
mov ebx, eax
test eax, eax
je 0x1400448cd
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044845
test byte [rcx + 0x1c], r15b
je 0x140044845
cmp byte [rcx + 0x19], sil
jb 0x140044845
mov rcx, qword [rcx + 0x10]
mov edx, 0x24
mov r9d, eax
mov r8, r13
call fcn.140001030
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140080df0]
mov word [rbp - 0x24], r14w
mov edx, 0xc
lea rcx, [rbp - 0x24]
call fcn.1400028c0
test eax, eax
lea rcx, [rbp - 0x24]
mov rax, qword [0x1400982c0]
mov r9d, 0xc0007d69
cmovs rcx, r14
mov r8d, esi
mov qword [rsp + 0x28], rcx
mov edx, edi
mov ecx, edi
mov qword [rsp + 0x20], rax
call fcn.140062ba4
lea rcx, [0x1400980a8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [0x1400980d8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [0x1400980d8]
mov qword [0x1400982b4], r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [0x1400980a8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r8d, 0xea60
mov ecx, esi
call fcn.140022a68
call fcn.140052f4c
mov ebx, eax
test eax, eax
je 0x14004493c
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044911
test byte [rcx + 0x1c], r15b
je 0x140044911
cmp byte [rcx + 0x19], sil
jb 0x140044911
mov rcx, qword [rcx + 0x10]
mov edx, 0x25
mov r9d, eax
mov r8, r13
call fcn.140001030
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140080df0]
mov word [rbp - 0x24], r14w
mov edx, 0xc
lea rcx, [rbp - 0x24]
call fcn.1400028c0
mov r9d, 0xc0007d2c
jmp 0x140044be4
mov r8d, 0xea60
mov ecx, esi
call fcn.140022a68
call fcn.14005609c
mov ebx, eax
test eax, eax
je 0x140044982
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044bbe
test byte [rcx + 0x1c], r15b
je 0x140044bbe
cmp byte [rcx + 0x19], sil
jb 0x140044bbe
mov edx, 0x26
jmp 0x140044baf
mov r8d, 0xea60
mov ecx, esi
call fcn.140022a68
mov r9, qword [rbp - 0x30]
lea rax, [rbp - 0x38]
mov qword [rsp + 0x28], rax
lea r8, [0x140045b10]
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
jne 0x1400449f5
mov rax, qword [str.___t_]
cmp rax, r12
je 0x14004439d
test byte [rax + 0x1c], r15b
je 0x14004439d
cmp byte [rax + 0x19], sil
jb 0x14004439d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [str.___t_]
lea edx, [rdi + 0x27]
mov ebx, eax
jmp 0x140044715
mov r8d, 0x4e20
mov ecx, esi
call fcn.140022a68
mov edx, 0x2710
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
test eax, eax
je 0x140044a9b
cmp eax, 0x102
jne 0x140044a52
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044a4a
test byte [rcx + 0x1c], r15b
je 0x140044a4a
cmp byte [rcx + 0x19], 5
jb 0x140044a4a
mov rcx, qword [rcx + 0x10]
mov edx, 0x29
mov r8, r13
call fcn.140001010
mov r8d, 0x7530
jmp 0x1400449fb
mov rax, qword [str.___t_]
cmp rax, r12
je 0x140044a8d
test byte [rax + 0x1c], r15b
je 0x140044a8d
cmp byte [rax + 0x19], sil
jb 0x140044a8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, 0x2a
mov rcx, qword [str.___t_]
mov r9d, eax
mov r8, r13
mov ebx, eax
mov rcx, qword [rcx + 0x10]
call fcn.140001030
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14004439d
lea rdx, [rbp - 0x3c]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
jne 0x140044ad1
mov rax, qword [str.___t_]
cmp rax, r12
je 0x140044a8d
test byte [rax + 0x1c], r15b
je 0x140044a8d
cmp byte [rax + 0x19], sil
jb 0x140044a8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, 0x28
jmp 0x140044a75
mov ebx, dword [rbp - 0x3c]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140044b12
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x14004439d
test byte [rcx + 0x1c], r15b
je 0x14004439d
cmp byte [rcx + 0x19], sil
jb 0x14004439d
mov edx, 0x2b
mov r9d, ebx
jmp 0x140044718
xor r8d, r8d
mov r9d, 0x40007d01
lea edx, [r8 + 3]
lea edi, [rdx - 2]
mov ecx, edi
call fcn.140062ba4
call fcn.1400232f8
mov ebx, eax
test eax, eax
je 0x140044b51
mov rcx, qword [str.___t_]
cmp rcx, r12
je 0x140044bbe
test byte [rcx + 0x1c], r15b
je 0x140044bbe
cmp byte [rcx + 0x19], sil
jb 0x140044bbe
lea edx, [rdi + 0x2b]
jmp 0x140044baf
lea rax, [rbp - 0x38]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea r8, [0x140046400]
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1400983b0], rax
test rax, rax
jne 0x140044c04
mov rax, qword [str.___t_]
cmp rax, r12
je 0x140044bbe
test byte [rax + 0x1c], r15b
je 0x140044bbe
cmp byte [rax + 0x19], sil
jb 0x140044bbe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [str.___t_]
mov edx, 0x2d
mov ebx, eax
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov r8, r13
call fcn.140001030
mov r9d, ebx
mov dword [rbp - 0x28], ebx
lea r8, [0x140080df0]
mov word [rbp - 0x24], r14w
mov edx, 0xc
lea rcx, [rbp - 0x24]
call fcn.1400028c0
mov r9d, 0xc0007d29
test eax, eax
lea rcx, [rbp - 0x24]
mov r8d, edi
mov edx, edi
cmovs rcx, r14
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.140062ba4
jmp 0x14004439d
xor eax, eax
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140077900
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret