{"type": "func", "start": 6443698768, "end": 6443698861, "name": "create_thread_parameter", "pseudocode": "// \n// create_thread_parameter from 0x180130a50 to 0x180130aad (93 bytes)\n// \n// 2 xrefs:\n// > _beginthreadex @ 0x180130ae6\n// > <???> @ 0x180202e70\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\nstruct __acrt_thread_parameter *__fastcall create_thread_parameter(LPCWSTR lpModuleName, void *const a2)\n{\n  void *v4; // rbx\n  struct __acrt_thread_parameter *result; // rax\n\n  v4 = calloc_base(1u, 0x28u);\n  free_base(nullptr);\n  result = nullptr;\n  if ( v4 )\n  {\n    *(_QWORD *)v4 = lpModuleName;\n    *((_QWORD *)v4 + 1) = a2;\n    GetModuleHandleExW(4u, lpModuleName, (HMODULE *)v4 + 3);\n    return (struct __acrt_thread_parameter *)v4;\n  }\n  return result;\n}", "assembly": "; \n; create_thread_parameter from 0x180130a50 to 0x180130aad (93 bytes)\n; \n; 2 xrefs:\n; > _beginthreadex @ 0x180130ae6\n; > <???> @ 0x180202e70\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov     [rsp+arg_0], rbx                                               ; +0x0, 0x180130a50\nmov     [rsp+arg_8], rsi                                               ; +0x5, 0x180130a55\npush    rdi                                                            ; +0xa, 0x180130a5a\nsub     rsp, 20h                                                       ; +0xb, 0x180130a5b\nmov     rsi, rdx                                                       ; +0xf, 0x180130a5f\nmov     rdi, rcx                                                       ; +0x12, 0x180130a62\nmov     edx, 28h ; '('; Size                                           ; +0x15, 0x180130a65\nlea     ecx, [rdx-27h]; Count                                          ; +0x1a, 0x180130a6a\ncall    _calloc_base                                                   ; +0x1d, 0x180130a6d\nxor     ecx, ecx; Block                                                ; +0x22, 0x180130a72\nmov     rbx, rax                                                       ; +0x24, 0x180130a74\ncall    _free_base                                                     ; +0x27, 0x180130a77\nxor     eax, eax                                                       ; +0x2c, 0x180130a7c\ntest    rbx, rbx                                                       ; +0x2e, 0x180130a7e\njz      short loc_180130A9D                                            ; +0x31, 0x180130a81\nlea     r8, [rbx+18h]; phModule                                        ; +0x33, 0x180130a83\nmov     [rbx], rdi                                                     ; +0x37, 0x180130a87\nmov     rdx, rdi; lpModuleName                                         ; +0x3a, 0x180130a8a\nmov     [rbx+8], rsi                                                   ; +0x3d, 0x180130a8d\nlea     ecx, [rax+4]; dwFlags                                          ; +0x41, 0x180130a91\ncall    cs:GetModuleHandleExW                                          ; +0x44, 0x180130a94\nmov     rax, rbx                                                       ; +0x4a, 0x180130a9a\nmov     rbx, [rsp+28h+arg_0]                                           ; +0x4d, 0x180130a9d\nmov     rsi, [rsp+28h+arg_8]                                           ; +0x52, 0x180130aa2\nadd     rsp, 20h                                                       ; +0x57, 0x180130aa7\npop     rdi                                                            ; +0x5b, 0x180130aab\nretn                                                                   ; +0x5c, 0x180130aac", "xrefs": ["_beginthreadex @ 0x180130ae6", "<???> @ 0x180202e70"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}