Function at 0x14001b120
Capabilities:
Resume thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9a8]
sub rsp, 0xaa8
mov rax, qword [0x1402a2cf8]
xor rax, rsp
mov qword [rbp + 0x990], rax
mov qword [rbp + 0x18], r9
mov rdi, r8
mov qword [rbp + 0x10], r8
mov rbx, rdx
mov r13, rcx
mov qword [rbp + 0x30], rcx
mov r14, qword [rbp + 0xa10]
mov qword [rsp + 0x48], r14
xor edx, edx
mov r8d, 0x2cc
lea rcx, [rbp + 0x50]
call fcn.1400b6650
xor edx, edx
mov r8d, 0x670
lea rcx, [rbp + 0x320]
call fcn.1400b6650
cmp qword [r13 + 0x40], 0
jne 0x14001b1a4
mov eax, 0xc0000225
jmp 0x14001baa3
mov r8, rdi
mov rdx, rbx
mov rcx, r13
call fcn.14001cb60
test eax, eax
js 0x14001baa3
mov rcx, qword [r13 + 0x40]
test rcx, rcx
je 0x14001b1c9
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [r14]
call fcn.140037340
test al, al
jne 0x14001b1e9
mov rax, qword gs:[0x30]
mov eax, dword [rax + 0x1250]
jmp 0x14001baa3
xor edi, edi
mov qword [rbp + 0x40], rdi
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
mov edx, edi
cmp byte [rcx + 0x15], dl
sete dl
lea rcx, [rbp + 0x40]
call fcn.140001ae0
nop
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
mov rbx, qword [rbp + 0x40]
cmp byte [rcx + 0x15], dil
jne 0x14001b684
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1402aaff4], eax
jg 0x14001bb79
mov rdx, qword [r14]
mov dword [rbp + 0x350], 0x100001
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x320]
mov rdx, qword [rdx + 0x10]
call qword [rax + 0x58]
mov esi, eax
test eax, eax
js 0x14001b6ba
lea r14, [rbx + 0xa8]
movabs rax, 0xffffffff00000004
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], 0x78
mov rax, qword [r14]
lea r15, sym.loader.exe_struct_asmjit::Operand_const_asmjit::noOperand
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x20]
lea r8, [0x14011b0c0]
mov edx, 0x261
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1f5
mov rcx, r14
call qword [rax + 0x30]
mov esi, edi
lea r12, [0x1402ab000]
mov ebx, 0xffffffff
movabs r13, 0x400000003
nop dword [rax + rax]
lea ecx, [rsi*8]
mov qword [rbp + 0x20], r13
shl rcx, 0x20
add rcx, rbx
mov qword [rbp + 0x28], rcx
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r12
lea r8, [rbp + 0x20]
mov edx, 0x123
mov rcx, r14
call qword [rax + 0x30]
inc esi
add r12, 0x10
cmp esi, 0xf
jl 0x14001b2f0
mov rbx, qword [rbp + 0x40]
mov rax, qword [rbx]
mov rax, qword [rax + 0x18]
mov qword [rbp + 0x20], rax
mov r13, qword [rbp + 0x30]
mov rax, qword [r13 + 0x68]
test rax, rax
je 0x14001b351
mov rcx, qword [rax]
jmp 0x14001b354
mov rcx, rdi
mov qword [rbp - 0x40], 0xffffffffffff0001
mov qword [rbp - 0x38], 0xff
movabs rsi, 0xffffffff00000003
mov qword [rbp - 0x30], rsi
mov r12d, 0xffffffff
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov dword [rbp - 0x50], 2
mov qword [rbp - 0x48], 8
mov qword [rbp - 0x20], rcx
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
lea r8, [rbp + 8]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.14000a370
nop
mov rax, qword [r13 + 0x58]
test rax, rax
je 0x14001b3cb
mov rax, qword [rax]
jmp 0x14001b3ce
mov rax, rdi
mov qword [rsp + 0x60], 0xffffffffffff0001
mov qword [rsp + 0x68], 0xff
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov dword [rsp + 0x50], 2
mov qword [rsp + 0x58], 8
mov qword [rbp - 0x80], rax
mov r9d, 1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rbp + 0x20]
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14001b46c
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b45b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001bc75
call fcn.14009aa1c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x14001b549
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x20], rax
cmp r8, rax
je 0x14001b4e7
lea rsi, [r8 + 0x50]
nop dword [rax]
mov rcx, qword [rsi - 0x10]
test rcx, rcx
je 0x14001b4d4
mov rdx, qword [rsi]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14001b4c4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001bc7b
mov rcx, r8
call fcn.14009aa1c
mov qword [rsi - 0x10], rdi
mov qword [rsi - 8], rdi
mov qword [rsi], rdi
add rsi, 0x58
lea rax, [rsi - 0x50]
cmp rax, qword [rbp + 0x20]
jne 0x14001b490
mov r8, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
sub rcx, r8
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x58
mov rax, r8
cmp rdx, 0x1000
jb 0x14001b533
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001bc7b
mov rcx, r8
call fcn.14009aa1c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
lea r9, [fcn.140001a80]
mov edx, 0x58
lea r8d, [rdx - 0x57]
lea rcx, [rbp - 0x50]
call fcn.14009b0ac
mov dword [rsp + 0x20], 8
mov r8d, 2
mov rdx, rbx
mov rcx, r13
call fcn.14001cdb0
mov esi, edi
lea rbx, [0x1402ab000]
movabs r13, 0x400000003
nop
lea ecx, [rsi*8]
mov qword [rbp + 0x20], r13
shl rcx, 0x20
add rcx, r12
mov qword [rbp + 0x28], rcx
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x20]
mov r8, rbx
mov edx, 0x123
mov rcx, r14
call qword [rax + 0x30]
inc esi
add rbx, 0x10
cmp esi, 0xf
jl 0x14001b590
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1c9
mov rcx, r14
call qword [rax + 0x30]
movabs rax, 0xffffffff00000004
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], 0x78
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x20]
lea r8, [0x14011b0c0]
mov edx, 2
mov rcx, r14
call qword [rax + 0x30]
mov eax, 0x25ff
mov word [rbp + 0x20], ax
mov rax, qword [r14]
mov r8d, 2
lea rdx, [rbp + 0x20]
mov rcx, r14
call qword [rax + 0x18]
mov dword [rbp + 0x20], edi
mov rax, qword [r14]
mov r8d, 4
lea rdx, [rbp + 0x20]
mov rcx, r14
call qword [rax + 0x18]
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x20], rax
mov rax, qword [r14]
mov r8d, 8
lea rdx, [rbp + 0x20]
mov rcx, r14
call qword [rax + 0x18]
mov rbx, qword [rbp + 0x40]
mov r13, qword [rbp + 0x30]
jmp 0x14001ba19
mov rsi, qword [r14]
xor edx, edx
mov r8d, 0x2c8
lea rcx, [rbp + 0x54]
call fcn.1400b6650
mov dword [rbp + 0x50], 0x100001
mov rax, qword [rsi]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x50]
mov rdx, qword [rsi + 0x10]
call qword [rax + 0x50]
mov esi, eax
test eax, eax
jns 0x14001b6db
mov rdi, qword [r14]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [rdi + 8], eax
je 0x14001ba8a
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x14001ba8a
lea r14, [rbx + 0xa8]
mov rax, qword [r14]
lea r15, sym.loader.exe_struct_asmjit::Operand_const_asmjit::noOperand
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1f4
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1f5
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [rbx]
mov rax, qword [rax + 0x18]
mov qword [rbp + 0x30], rax
mov rax, qword [r13 + 0x68]
test rax, rax
je 0x14001b73e
mov rax, qword [rax]
jmp 0x14001b741
mov rax, rdi
mov qword [rbp - 0x40], 0xffffffffffff0001
mov qword [rbp - 0x38], 0xff
movabs rsi, 0xffffffff00000003
mov qword [rbp - 0x30], rsi
mov r12d, 0xffffffff
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov dword [rbp - 0x50], 2
mov qword [rbp - 0x48], 8
mov qword [rbp - 0x20], rax
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
lea r8, [rbp + 8]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.14000a370
nop
mov rax, qword [r13 + 0x58]
test rax, rax
je 0x14001b7b8
mov rax, qword [rax]
jmp 0x14001b7bb
mov rax, rdi
mov qword [rsp + 0x60], 0xffffffffffff0001
mov qword [rsp + 0x68], 0xff
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov dword [rsp + 0x50], 2
mov qword [rsp + 0x58], 8
mov qword [rbp - 0x80], rax
mov r9d, 1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rbp + 0x30]
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14001b859
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b848
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001bc81
call fcn.14009aa1c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x14001b92d
mov r12, qword [rsp + 0x38]
cmp r8, r12
je 0x14001b8cb
lea rsi, [r8 + 0x50]
mov rcx, qword [rsi - 0x10]
test rcx, rcx
je 0x14001b8b9
mov rdx, qword [rsi]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14001b8a9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001bb73
mov rcx, r8
call fcn.14009aa1c
mov qword [rsi - 0x10], rdi
mov qword [rsi - 8], rdi
mov qword [rsi], rdi
add rsi, 0x58
lea rax, [rsi - 0x50]
cmp rax, r12
jne 0x14001b875
mov r8, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
sub rcx, r8
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x58
mov rax, r8
cmp rdx, 0x1000
jb 0x14001b917
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001bb73
mov rcx, r8
call fcn.14009aa1c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
lea r9, [fcn.140001a80]
mov edx, 0x58
lea r8d, [rdx - 0x57]
lea rcx, [rbp - 0x50]
call fcn.14009b0ac
movabs rsi, 0xffffffff00000004
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 4
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x30]
lea r8, [0x14011afc0]
mov edx, 2
mov rcx, r14
call qword [rax + 0x30]
mov dword [rsp + 0x20], edi
xor r8d, r8d
mov rdx, rbx
mov rcx, r13
call fcn.14001cdb0
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1c9
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1c7
mov rcx, r14
call qword [rax + 0x30]
mov qword [rbp + 0x30], rsi
movsxd rax, dword [rbp + 0x108]
mov qword [rbp + 0x38], rax
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
lea r8, [rbp + 0x30]
mov edx, 0x1f3
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x21c
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + VariantCopy]
mov r8, rax
mov r9d, dword [r14 + 0x60]
sub r9, qword [r14 + 0x48]
add r9, qword [r14 + 0x58]
mov rax, qword [r13 + 0x58]
test rax, rax
jne 0x14001bac6
mov esi, 0xc00000a0
mov rdi, qword [rsp + 0x48]
mov rdi, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [rdi + 8], eax
je 0x14001ba60
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
test esi, esi
js 0x14001ba8a
mov edx, 0x4e20
mov rcx, qword [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9, qword [rbp + 0x18]
mov edx, 8
mov r8d, edx
lea rcx, [r13 + 0x68]
call fcn.14001a230
mov esi, eax
test rbx, rbx
je 0x14001baa1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rbx
call r8
nop
mov eax, esi
mov rcx, qword [rbp + 0x990]
xor rcx, rsp
call fcn.14009a9c0
add rsp, 0xaa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax]
mov r14, qword [rbp + 0x10]
add rdx, r14
mov rax, qword [rcx + 0x70]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
call qword [rax + 0x20]
mov esi, eax
test eax, eax
js 0x14001ba43
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
mov rax, qword [r13 + 0x58]
cmp byte [rcx + 0x15], 0
je 0x14001bb39
test rax, rax
je 0x14001bb0b
mov rdi, qword [rax]
lea eax, [r14 + rdi]
mov dword [rbp + 0x108], eax
mov rdi, qword [rsp + 0x48]
mov rdx, qword [rdi]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x50]
mov rdx, qword [rdx + 0x10]
call qword [rax + 0x60]
mov esi, eax
jmp 0x14001ba48
test rax, rax
je 0x14001bb41
mov rdi, qword [rax]
lea rax, [r14 + rdi]
mov qword [rbp + 0x418], rax
mov rdi, qword [rsp + 0x48]
mov rdx, qword [rdi]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x320]
mov rdx, qword [rdx + 0x10]
call qword [rax + 0x68]
mov esi, eax
jmp 0x14001ba48
call fcn.1400c88c8
nop
lea rcx, [0x1402aaff4]
call fcn.14009acc4
cmp dword [0x1402aaff4], 0xffffffff
jne 0x14001b23f
movaps xmm0, xmmword [0x14011b080]
movaps xmmword [0x1402ab000], xmm0
movaps xmm1, xmmword [0x14011b0b0]
movaps xmmword [0x1402ab010], xmm1
movaps xmm0, xmmword [0x14011b090]
movaps xmmword [0x1402ab020], xmm0
movaps xmm1, xmmword [0x14011b0a0]
movaps xmmword [0x1402ab030], xmm1
movaps xmm0, xmmword [0x14011b0e0]
movaps xmmword [0x1402ab040], xmm0
movaps xmm1, xmmword [0x14011b0f0]
movaps xmmword [0x1402ab050], xmm1
movaps xmm0, xmmword [0x14011b100]
movaps xmmword [0x1402ab060], xmm0
movaps xmm1, xmmword [0x14011b110]
movaps xmmword [0x1402ab070], xmm1
movaps xmm0, xmmword [0x14011b120]
movaps xmmword [0x1402ab080], xmm0
movaps xmm1, xmmword [0x14011b130]
movaps xmmword [0x1402ab090], xmm1
movaps xmm0, xmmword [0x14011b140]
movaps xmmword [0x1402ab0a0], xmm0
movaps xmm1, xmmword [0x14011b150]
movaps xmmword [0x1402ab0b0], xmm1
movaps xmm0, xmmword [0x14011b160]
movaps xmmword [0x1402ab0c0], xmm0
movaps xmm1, xmmword [0x14011b170]
movaps xmmword [0x1402ab0d0], xmm1
movaps xmm0, xmmword [0x14011b0d0]
movaps xmmword [0x1402ab0e0], xmm0
lea rcx, [0x1402aaff4]
call fcn.14009ac64
jmp 0x14001b23f
call fcn.1400c88c8
nop
call fcn.1400c88c8
nop
call fcn.1400c88c8
int3