Function at 0x14004ea60
Capabilities:
Create process on windows
Resume thread
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x14057b900]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rdi, rdx
mov rbx, rcx
xor r15d, r15d
cmp qword [rdx + 0x10], r15
jne 0x14004eaec
call fcn.14002c3f0
mov r10, qword [rax]
lea rcx, str.Invalid_path
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
lea r9d, [r15 + 0x23]
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call qword [r10 + 0x18]
mov eax, 0xe0001002
jmp 0x14004f670
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea r8, [rbp + 0x20]
mov edx, dword [rcx + 8]
call fcn.140029130
test al, al
jne 0x14004eb6b
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov ecx, dword [rbx + 8]
mov dword [rsp + 0x38], ecx
lea rcx, str.Invalid_ID__u
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x2b
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
mov ebx, 0xe0001005
jmp 0x14004f632
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov rcx, rbx
call fcn.140029240
mov rsi, rax
lea r12, vtable.mb::common::system::ScopedAny_void____ptr64__int____cdecl___void____ptr64___int___cdecl_CloseHandle_void____ptr64___2__0__0_.0
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x14004ebfc
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Failed__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x33
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0004007
jmp 0x14004f61e
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov rcx, qword [rdi + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 1
jb 0x14004f6a1
cmp qword [rdi + 0x18], 7
jbe 0x14004ec2b
mov rdi, qword [rdi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
lea r9, [0x1404df774]
lea rcx, [rbp - 0x28]
call fcn.14001d800
nop
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x14004ec8b
lea rax, [rcx + 2]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x28]
cmp rdx, 7
cmova rax, qword [rbp - 0x28]
mov dword [rax + rcx*2], 0x200022
mov word [rax + rcx*2 + 4], r15w
lea rax, [rbp - 0x28]
jmp 0x14004ecaf
mov qword [rsp + 0x20], 2
lea r9, [0x1404df778]
movzx r8d, byte [rsp + 0x50]
mov edx, 2
lea rcx, [rbp - 0x28]
call fcn.14001da20
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp]
call fcn.14001dc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rcx, qword [rsp + 0x58]
call qword [sym.imp.SHLWAPI.dll_StrDupW]
mov r14, rax
lea rax, vtable.mb::common::system::ScopedAny_wchar_t____ptr64__void____ptr64____cdecl___void____ptr64___void____ptr64___cdecl_LocalFree_void____ptr64___0__0__4_.0
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r14
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14004ed9b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ed96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6a7
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14004edef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004edea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6ad
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rbp + 0x10], xmm0
mov word [rbp], r15w
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x14004ee41
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ee3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6b3
call fcn.14014f510
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r15
xorps xmm1, xmm1
movups xmmword [rbp + 0xd0], xmm1
movups xmmword [rbp + 0xe0], xmm1
movups xmmword [rbp + 0xf0], xmm1
movups xmmword [rbp + 0x100], xmm1
movups xmmword [rbp + 0x110], xmm1
movups xmmword [rbp + 0x120], xmm1
movups xmmword [rbp + 0x130], xmm1
mov dword [rbp + 0xd0], 0x70
xor eax, eax
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
mov eax, 0xc
cmp dword [rbx + 0x10], 0
je 0x14004efa2
lea rcx, [rbp + 0x160]
call fcn.140094050
nop
lea rcx, [rbp + 0x160]
call fcn.140094a10
cmp eax, 0xc
jb 0x14004f03f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.140099050
test al, al
jne 0x14004f03f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
xor edx, edx
call fcn.140092260
test al, al
je 0x14004f03f
mov dword [rbp - 0x30], 3
mov qword [rbp - 0x28], 4
lea rax, [rbp - 0x30]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0x2000b
lea rax, [rbp - 0x28]
mov qword [rbp], rax
lea rax, [rbp - 0x10]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rsp + 0x58]
call fcn.140029a40
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xd0]
call fcn.140029900
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14004ef9d
mov rax, qword [rsp + 0x68]
sub rax, rcx
sar rax, 3
movabs rdx, 0xaaaaaaaaaaaaaaab
imul rax, rdx
lea rdx, [rax + rax*2]
shl rdx, 3
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ef98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6b9
call fcn.14014f510
mov eax, 0xc000c
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14004f090
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.CreateProcess_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x51
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0003001
jmp 0x14004f5e3
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x18]
lea rcx, str.Protection_unsupported
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x43
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
nop
mov ebx, 0xe0001001
jmp 0x14004f5e3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [rax + 6]
lea rdx, str.Local_
lea rcx, [rsp + 0x58]
call fcn.14001fb40
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
xor r8d, r8d
lea rdx, [0x1404e3f68]
lea rcx, [rsp + 0x78]
call fcn.14001fb40
nop
mov edi, dword [rbp - 0x38]
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r15
lea rax, vtable.mb::common::system::ScopedAny_struct_IPC_RESUMEPROCESS____ptr64__int____cdecl___void_const____ptr64___int___cdecl_UnmapViewOfFile_void_const____ptr64___0__0__4_.0
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqa xmmword [rbp + 0x70], xmm1
mov word [rbp + 0x60], r15w
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x80]
call fcn.1400223f0
nop
mov qword [rbp + 0xa0], r15
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqu xmmword [rbp + 0x10], xmm1
mov word [rbp], r15w
cmp qword [rsp + 0x68], 0
je 0x14004f264
lea r8, [rbp]
mov edx, edi
lea rcx, [rbp + 0x40]
call fcn.14004de90
test al, al
je 0x14004f264
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqu xmmword [rbp - 0x18], xmm1
mov word [rbp - 0x28], r15w
lea r8, [rbp - 0x28]
lea rdx, [rbp]
lea rcx, [rsp + 0x58]
call fcn.140089510
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400223f0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x14004f204
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f1ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6bf
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x60]
call fcn.14001f2e0
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14004f264
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f25e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6bf
call fcn.14014f510
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14004f2a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f29f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6c5
call fcn.14014f510
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x14004f2e7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f2e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6cb
call fcn.14014f510
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14004f329
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f324
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6d1
call fcn.14014f510
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
mov dl, 1
lea rcx, [rbp + 0x40]
call fcn.14004e840
test al, al
je 0x14004f573
mov rcx, qword [rbp + 0x58]
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov eax, dword [rbx + 0x30]
mov dword [rcx + 0x30], eax
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x14004f3ea
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Resume_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x61
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0003002
jmp 0x14004f5d9
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
test eax, eax
je 0x14004f462
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov dword [rsp + 0x38], edi
lea rcx, str.Wait_failed:__u
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x6a
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0003003
jmp 0x14004f5d9
mov rcx, rsi
call fcn.14002ad30
mov rax, qword [rbp + 0x58]
test rax, rax
jne 0x14004f52d
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x14004f4d1
mov rax, qword [rcx]
mov r10, qword [rax + 0x18]
lea rax, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rax, qword [rbp + 0x80]
lea rdx, str.Not_initialized
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 2
mov r9d, 0x59
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesmbcommon_vs2022.4.2.0.62_build_nativeincludeIPCMapping.h
lea rdx, str.mb::common::ipc::IPCMapping_struct_IPC_RESUMEPROCESS_::GetStruct
call r10
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Read_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x75
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0004001
jmp 0x14004f5d9
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbx + 0x20], xmm0
mov eax, dword [rax + 0x30]
mov dword [rbx + 0x30], eax
cmp dword [rbx + 0xc], 0xffffffff
jne 0x14004f56e
mov dword [rbp - 0x30], 0xffffffff
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x14004f56e
mov eax, dword [rbp - 0x30]
mov dword [rbx + 0xc], eax
mov ebx, dword [rbx + 0xc]
jmp 0x14004f5d9
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Create_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x59
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0004000
lea rcx, [rbp + 0x40]
call fcn.14004e7d0
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14004f5f2
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14004f602
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0xd0]
call fcn.140029580
nop
test r14, r14
je 0x14004f61e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
lea rax, [rsi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14004f632
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x14004f66e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f669
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f69b
call fcn.14014f510
mov eax, ebx
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14014f4f0
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14015fa1c
nop
call fcn.14001cc60
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3