Function at 0x140041230
Capabilities:
Resume thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9a8]
sub rsp, 0xaa8
mov rax, qword [0x1400ee020]
xor rax, rsp
mov qword [rbp + 0x990], rax
mov qword [rbp + 0x18], r9
mov rdi, r8
mov qword [rbp + 0x10], r8
mov rbx, rdx
mov r13, rcx
mov qword [rsp + 0x50], rcx
mov r14, qword [rbp + 0xa10]
mov qword [rsp + 0x48], r14
xor edx, edx
mov r8d, 0x2cc
lea rcx, [rbp + 0x50]
call fcn.140089760
xor edx, edx
mov r8d, 0x670
lea rcx, [rbp + 0x320]
call fcn.140089760
cmp qword [r13 + 0x40], 0
jne 0x1400412b5
mov eax, 0xc0000225
jmp 0x140041cba
mov r8, rdi
mov rdx, rbx
mov rcx, r13
call fcn.140042e30
test eax, eax
js 0x140041cba
mov rcx, qword [r13 + 0x40]
test rcx, rcx
je 0x1400412da
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [r14]
call fcn.1400572d0
test al, al
jne 0x1400412fa
mov rax, qword gs:[0x30]
mov eax, dword [rax + 0x1250]
jmp 0x140041cba
xor edi, edi
mov qword [rbp + 0x40], rdi
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
mov edx, edi
cmp byte [rcx + 0x15], dl
sete dl
lea rcx, [rbp + 0x40]
call fcn.140017dfc
nop
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
mov rbx, qword [rbp + 0x40]
cmp byte [rcx + 0x15], dil
jne 0x140041895
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400f3d48], eax
jle 0x140041447
lea rcx, [0x1400f3d48]
call fcn.14006a99c
cmp dword [0x1400f3d48], 0xffffffff
jne 0x140041447
movaps xmm0, xmmword [0x1400d12c0]
movaps xmmword [0x1400f3d50], xmm0
movaps xmm1, xmmword [0x1400d12f0]
movaps xmmword [0x1400f3d60], xmm1
movaps xmm0, xmmword [0x1400d12d0]
movaps xmmword [0x1400f3d70], xmm0
movaps xmm1, xmmword [0x1400d12e0]
movaps xmmword [0x1400f3d80], xmm1
movaps xmm0, xmmword [0x1400d1320]
movaps xmmword [0x1400f3d90], xmm0
movaps xmm1, xmmword [0x1400d1330]
movaps xmmword [0x1400f3da0], xmm1
movaps xmm0, xmmword [0x1400d1340]
movaps xmmword [0x1400f3db0], xmm0
movaps xmm1, xmmword [0x1400d1350]
movaps xmmword [0x1400f3dc0], xmm1
movaps xmm0, xmmword [0x1400d1360]
movaps xmmword [0x1400f3dd0], xmm0
movaps xmm1, xmmword [0x1400d1370]
movaps xmmword [0x1400f3de0], xmm1
movaps xmm0, xmmword [0x1400d1380]
movaps xmmword [0x1400f3df0], xmm0
movaps xmm1, xmmword [0x1400d1390]
movaps xmmword [0x1400f3e00], xmm1
movaps xmm0, xmmword [0x1400d13a0]
movaps xmmword [0x1400f3e10], xmm0
movaps xmm1, xmmword [0x1400d13b0]
movaps xmmword [0x1400f3e20], xmm1
movaps xmm0, xmmword [0x1400d1310]
movaps xmmword [0x1400f3e30], xmm0
lea rcx, [0x1400f3d48]
call fcn.14006a93c
mov rdx, qword [r14]
mov dword [rbp + 0x350], 0x100001
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x320]
mov rdx, qword [rdx + 0x10]
call qword [rax + 0x58]
mov esi, eax
test eax, eax
js 0x1400418cb
lea r14, [rbx + 0xa8]
movabs rax, 0xffffffff00000004
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 0x78
mov rax, qword [r14]
lea r15, sym.Br1tneySpears_Injector64.exe_struct_asmjit::Operand_const_asmjit::noOperand
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x30]
lea r8, [0x1400d1300]
mov edx, 0x261
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1f5
mov rcx, r14
call qword [rax + 0x30]
mov esi, edi
lea r12, [0x1400f3d50]
mov ebx, 0xffffffff
movabs r13, 0x400000003
nop dword [rax]
nop word [rax + rax]
lea ecx, [rsi*8]
mov qword [rbp + 0x30], r13
shl rcx, 0x20
add rcx, rbx
mov qword [rbp + 0x38], rcx
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r12
lea r8, [rbp + 0x30]
mov edx, 0x123
mov rcx, r14
call qword [rax + 0x30]
inc esi
add r12, 0x10
cmp esi, 0xf
jl 0x140041500
mov rbx, qword [rbp + 0x40]
mov rax, qword [rbx]
mov rax, qword [rax + 0x18]
mov qword [rbp + 0x30], rax
mov r13, qword [rsp + 0x50]
mov rax, qword [r13 + 0x68]
test rax, rax
je 0x140041562
mov rcx, qword [rax]
jmp 0x140041565
mov rcx, rdi
mov qword [rbp - 0x40], 0xffffffffffff0001
mov qword [rbp - 0x38], 0xff
movabs rsi, 0xffffffff00000003
mov qword [rbp - 0x30], rsi
mov r12d, 0xffffffff
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov dword [rbp - 0x50], 2
mov qword [rbp - 0x48], 8
mov qword [rbp - 0x20], rcx
lea rax, [rbp - 0x50]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 8]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.14001b9ac
nop
mov rax, qword [r13 + 0x58]
test rax, rax
je 0x1400415dd
mov rax, qword [rax]
jmp 0x1400415e0
mov rax, rdi
mov qword [rsp + 0x68], 0xffffffffffff0001
mov qword [rsp + 0x70], 0xff
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rdi
mov dword [rsp + 0x58], 2
mov qword [rsp + 0x60], 8
mov qword [rbp - 0x78], rax
mov r9d, 1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x58]
mov rcx, rbx
call qword [rbp + 0x30]
nop
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14004167d
mov rdx, qword [rbp - 0x58]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004166c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041d90
call fcn.14006a794
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rdi
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x140041759
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x30], rax
cmp r8, rax
je 0x1400416f7
lea rsi, [r8 + 0x50]
nop dword [rax]
mov rcx, qword [rsi - 0x10]
test rcx, rcx
je 0x1400416e4
mov rdx, qword [rsi]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1400416d4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140041d96
mov rcx, r8
call fcn.14006a794
mov qword [rsi - 0x10], rdi
mov qword [rsi - 8], rdi
mov qword [rsi], rdi
add rsi, 0x58
lea rax, [rsi - 0x50]
cmp rax, qword [rbp + 0x30]
jne 0x1400416a0
mov r8, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
sub rcx, r8
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x58
mov rax, r8
cmp rdx, 0x1000
jb 0x140041743
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041d96
mov rcx, r8
call fcn.14006a794
mov qword [rsp + 0x30], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
lea r9, [0x140017dc8]
mov edx, 0x58
lea r8d, [rdx - 0x57]
lea rcx, [rbp - 0x50]
call fcn.14006acfc
mov dword [rsp + 0x20], 8
mov r8d, 2
mov rdx, rbx
mov rcx, r13
call fcn.140043090
mov esi, edi
lea rbx, [0x1400f3d50]
movabs r13, 0x400000003
nop
lea ecx, [rsi*8]
mov qword [rbp + 0x20], r13
shl rcx, 0x20
add rcx, r12
mov qword [rbp + 0x28], rcx
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x20]
mov r8, rbx
mov edx, 0x123
mov rcx, r14
call qword [rax + 0x30]
inc esi
add rbx, 0x10
cmp esi, 0xf
jl 0x1400417a0
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1c9
mov rcx, r14
call qword [rax + 0x30]
movabs rax, 0xffffffff00000004
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], 0x78
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x20]
lea r8, [0x1400d1300]
mov edx, 2
mov rcx, r14
call qword [rax + 0x30]
mov eax, 0x25ff
mov word [rbp + 0x30], ax
mov rax, qword [r14]
mov r8d, 2
lea rdx, [rbp + 0x30]
mov rcx, r14
call qword [rax + 0x18]
mov dword [rbp + 0x30], edi
mov rax, qword [r14]
mov r8d, 4
lea rdx, [rbp + 0x30]
mov rcx, r14
call qword [rax + 0x18]
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x30], rax
mov rax, qword [r14]
mov r8d, 8
lea rdx, [rbp + 0x30]
mov rcx, r14
call qword [rax + 0x18]
mov rbx, qword [rbp + 0x40]
mov r13, qword [rsp + 0x50]
jmp 0x140041c34
mov rsi, qword [r14]
xor edx, edx
mov r8d, 0x2c8
lea rcx, [rbp + 0x54]
call fcn.140089760
mov dword [rbp + 0x50], 0x100001
mov rax, qword [rsi]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x50]
mov rdx, qword [rsi + 0x10]
call qword [rax + 0x50]
mov esi, eax
test eax, eax
jns 0x1400418ec
mov rdi, qword [r14]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [rdi + 8], eax
je 0x140041ca5
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x140041ca5
lea r14, [rbx + 0xa8]
mov rax, qword [r14]
lea r15, sym.Br1tneySpears_Injector64.exe_struct_asmjit::Operand_const_asmjit::noOperand
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1f4
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1f5
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [rbx]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x50], rax
mov rax, qword [r13 + 0x68]
test rax, rax
je 0x140041950
mov rax, qword [rax]
jmp 0x140041953
mov rax, rdi
mov qword [rbp - 0x40], 0xffffffffffff0001
mov qword [rbp - 0x38], 0xff
movabs rsi, 0xffffffff00000003
mov qword [rbp - 0x30], rsi
mov r12d, 0xffffffff
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov dword [rbp - 0x50], 2
mov qword [rbp - 0x48], 8
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x50]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 8]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.14001b9ac
nop
mov rax, qword [r13 + 0x58]
test rax, rax
je 0x1400419cb
mov rax, qword [rax]
jmp 0x1400419ce
mov rax, rdi
mov qword [rsp + 0x68], 0xffffffffffff0001
mov qword [rsp + 0x70], 0xff
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rdi
mov dword [rsp + 0x58], 2
mov qword [rsp + 0x60], 8
mov qword [rbp - 0x78], rax
mov r9d, 1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x58]
mov rcx, rbx
call qword [rsp + 0x50]
nop
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x140041a6c
mov rdx, qword [rbp - 0x58]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041a5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041d9c
call fcn.14006a794
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rdi
mov r8, qword [rsp + 0x30]
test r8, r8
je 0x140041b48
mov r12, qword [rsp + 0x38]
cmp r8, r12
je 0x140041ae6
lea rsi, [r8 + 0x50]
nop dword [rax + rax]
mov rcx, qword [rsi - 0x10]
test rcx, rcx
je 0x140041ad4
mov rdx, qword [rsi]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140041ac4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140041d8a
mov rcx, r8
call fcn.14006a794
mov qword [rsi - 0x10], rdi
mov qword [rsi - 8], rdi
mov qword [rsi], rdi
add rsi, 0x58
lea rax, [rsi - 0x50]
cmp rax, r12
jne 0x140041a90
mov r8, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
sub rcx, r8
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x58
mov rax, r8
cmp rdx, 0x1000
jb 0x140041b32
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041d8a
mov rcx, r8
call fcn.14006a794
mov qword [rsp + 0x30], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
lea r9, [0x140017dc8]
mov edx, 0x58
lea r8d, [rdx - 0x57]
lea rcx, [rbp - 0x50]
call fcn.14006acfc
movabs rsi, 0xffffffff00000004
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 4
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x20]
lea r8, [0x1400d1200]
mov edx, 2
mov rcx, r14
call qword [rax + 0x30]
mov dword [rsp + 0x20], edi
xor r8d, r8d
mov rdx, rbx
mov rcx, r13
call fcn.140043090
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1c9
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x1c7
mov rcx, r14
call qword [rax + 0x30]
mov qword [rbp + 0x20], rsi
movsxd rax, dword [rbp + 0x108]
mov qword [rbp + 0x28], rax
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
lea r8, [rbp + 0x20]
mov edx, 0x1f3
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, r15
mov r8, r15
mov edx, 0x21c
mov rcx, r14
call qword [rax + 0x30]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 8]
mov r8, rax
mov r9d, dword [r14 + 0x60]
sub r9, qword [r14 + 0x48]
add r9, qword [r14 + 0x58]
mov rax, qword [r13 + 0x58]
test rax, rax
jne 0x140041cdd
mov esi, 0xc00000a0
mov rdi, qword [rsp + 0x48]
mov rdi, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [rdi + 8], eax
je 0x140041c7b
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
test esi, esi
js 0x140041ca5
mov edx, 0x4e20
mov rcx, qword [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9, qword [rbp + 0x18]
mov edx, 8
mov r8d, edx
lea rcx, [r13 + 0x68]
call fcn.140040400
mov esi, eax
test rbx, rbx
je 0x140041cb8
mov r8, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [r8]
mov eax, esi
mov rcx, qword [rbp + 0x990]
xor rcx, rsp
call fcn.14006a770
add rsp, 0xaa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax]
mov r14, qword [rbp + 0x10]
add rdx, r14
mov rax, qword [rcx + 0x70]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
call qword [rax + 0x20]
mov esi, eax
test eax, eax
js 0x140041c5e
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
mov rax, qword [r13 + 0x58]
cmp byte [rcx + 0x15], 0
je 0x140041d50
test rax, rax
je 0x140041d22
mov rdi, qword [rax]
lea eax, [r14 + rdi]
mov dword [rbp + 0x108], eax
mov rdi, qword [rsp + 0x48]
mov rdx, qword [rdi]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x50]
mov rdx, qword [rdx + 0x10]
call qword [rax + 0x60]
mov esi, eax
jmp 0x140041c63
test rax, rax
je 0x140041d58
mov rdi, qword [rax]
lea rax, [rdi + r14]
mov qword [rbp + 0x418], rax
mov rdi, qword [rsp + 0x48]
mov rdx, qword [rdi]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea r8, [rbp + 0x320]
mov rdx, qword [rdx + 0x10]
call qword [rax + 0x68]
mov esi, eax
jmp 0x140041c63
call fcn.140095e24
nop
call fcn.140095e24
nop
call fcn.140095e24
nop
call fcn.140095e24
int3