Function at 0x14004c190
Capabilities:
Create process on windows
Resume thread
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x14057b900]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rdi, rdx
mov rbx, rcx
xor r15d, r15d
cmp qword [rdx + 0x10], r15
jne 0x14004c21c
call fcn.14002c3f0
mov r10, qword [rax]
lea rcx, str.Invalid_path
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
lea r9d, [r15 + 0x23]
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call qword [r10 + 0x18]
mov eax, 0xe0001002
jmp 0x14004cda0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea r8, [rbp + 0x20]
mov edx, dword [rcx + 8]
call fcn.140029130
test al, al
jne 0x14004c29b
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov ecx, dword [rbx + 8]
mov dword [rsp + 0x38], ecx
lea rcx, str.Invalid_ID__u
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x2b
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
mov ebx, 0xe0001005
jmp 0x14004cd62
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov rcx, rbx
call fcn.140029240
mov rsi, rax
lea r12, vtable.mb::common::system::ScopedAny_void____ptr64__int____cdecl___void____ptr64___int___cdecl_CloseHandle_void____ptr64___2__0__0_.0
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x14004c32c
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Failed__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x33
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0004007
jmp 0x14004cd4e
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov rcx, qword [rdi + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 1
jb 0x14004cdd1
cmp qword [rdi + 0x18], 7
jbe 0x14004c35b
mov rdi, qword [rdi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
lea r9, [0x1404df774]
lea rcx, [rbp - 0x28]
call fcn.14001d800
nop
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x14004c3bb
lea rax, [rcx + 2]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x28]
cmp rdx, 7
cmova rax, qword [rbp - 0x28]
mov dword [rax + rcx*2], 0x200022
mov word [rax + rcx*2 + 4], r15w
lea rax, [rbp - 0x28]
jmp 0x14004c3df
mov qword [rsp + 0x20], 2
lea r9, [0x1404df778]
movzx r8d, byte [rsp + 0x50]
mov edx, 2
lea rcx, [rbp - 0x28]
call fcn.14001da20
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp]
call fcn.14001dc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rcx, qword [rsp + 0x58]
call qword [sym.imp.SHLWAPI.dll_StrDupW]
mov r14, rax
lea rax, vtable.mb::common::system::ScopedAny_wchar_t____ptr64__void____ptr64____cdecl___void____ptr64___void____ptr64___cdecl_LocalFree_void____ptr64___0__0__4_.0
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r14
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14004c4cb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c4c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cdd7
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14004c51f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c51a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cddd
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rbp + 0x10], xmm0
mov word [rbp], r15w
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x14004c571
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c56c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cde3
call fcn.14014f510
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r15
xorps xmm1, xmm1
movups xmmword [rbp + 0xd0], xmm1
movups xmmword [rbp + 0xe0], xmm1
movups xmmword [rbp + 0xf0], xmm1
movups xmmword [rbp + 0x100], xmm1
movups xmmword [rbp + 0x110], xmm1
movups xmmword [rbp + 0x120], xmm1
movups xmmword [rbp + 0x130], xmm1
mov dword [rbp + 0xd0], 0x70
xor eax, eax
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
mov eax, 0xc
cmp dword [rbx + 0x10], 0
je 0x14004c6d2
lea rcx, [rbp + 0x160]
call fcn.140094050
nop
lea rcx, [rbp + 0x160]
call fcn.140094a10
cmp eax, 0xc
jb 0x14004c76f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.140099050
test al, al
jne 0x14004c76f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
xor edx, edx
call fcn.140092260
test al, al
je 0x14004c76f
mov dword [rbp - 0x30], 3
mov qword [rbp - 0x28], 4
lea rax, [rbp - 0x30]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0x2000b
lea rax, [rbp - 0x28]
mov qword [rbp], rax
lea rax, [rbp - 0x10]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rsp + 0x58]
call fcn.140029a40
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xd0]
call fcn.140029900
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14004c6cd
mov rax, qword [rsp + 0x68]
sub rax, rcx
sar rax, 3
movabs rdx, 0xaaaaaaaaaaaaaaab
imul rax, rdx
lea rdx, [rax + rax*2]
shl rdx, 3
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c6c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cde9
call fcn.14014f510
mov eax, 0xc000c
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14004c7c0
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.CreateProcess_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x51
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0003001
jmp 0x14004cd13
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x18]
lea rcx, str.Protection_unsupported
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x43
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
nop
mov ebx, 0xe0001001
jmp 0x14004cd13
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [rax + 6]
lea rdx, str.Local_
lea rcx, [rsp + 0x58]
call fcn.14001fb40
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
xor r8d, r8d
lea rdx, [0x1404e3f68]
lea rcx, [rsp + 0x78]
call fcn.14001fb40
nop
mov edi, dword [rbp - 0x38]
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r15
lea rax, vtable.mb::common::system::ScopedAny_struct_IPC_SUSPENDPROCESS____ptr64__int____cdecl___void_const____ptr64___int___cdecl_UnmapViewOfFile_void_const____ptr64___0__0__4_.0
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqa xmmword [rbp + 0x70], xmm1
mov word [rbp + 0x60], r15w
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x80]
call fcn.1400223f0
nop
mov qword [rbp + 0xa0], r15
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqu xmmword [rbp + 0x10], xmm1
mov word [rbp], r15w
cmp qword [rsp + 0x68], 0
je 0x14004c994
lea r8, [rbp]
mov edx, edi
lea rcx, [rbp + 0x40]
call fcn.14004b5c0
test al, al
je 0x14004c994
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqu xmmword [rbp - 0x18], xmm1
mov word [rbp - 0x28], r15w
lea r8, [rbp - 0x28]
lea rdx, [rbp]
lea rcx, [rsp + 0x58]
call fcn.140089510
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400223f0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x14004c934
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c92f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cdef
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x60]
call fcn.14001f2e0
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x14004c994
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c98e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cdef
call fcn.14014f510
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14004c9d5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c9cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cdf5
call fcn.14014f510
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x14004ca17
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ca11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cdfb
call fcn.14014f510
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14004ca59
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ca54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ce01
call fcn.14014f510
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
mov dl, 1
lea rcx, [rbp + 0x40]
call fcn.14004bf70
test al, al
je 0x14004cca3
mov rcx, qword [rbp + 0x58]
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov eax, dword [rbx + 0x30]
mov dword [rcx + 0x30], eax
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x14004cb1a
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Resume_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x61
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0003002
jmp 0x14004cd09
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
test eax, eax
je 0x14004cb92
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov dword [rsp + 0x38], edi
lea rcx, str.Wait_failed:__u
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x6a
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0003003
jmp 0x14004cd09
mov rcx, rsi
call fcn.14002ad30
mov rax, qword [rbp + 0x58]
test rax, rax
jne 0x14004cc5d
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x14004cc01
mov rax, qword [rcx]
mov r10, qword [rax + 0x18]
lea rax, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rax, qword [rbp + 0x80]
lea rdx, str.Not_initialized
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 2
mov r9d, 0x59
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesmbcommon_vs2022.4.2.0.62_build_nativeincludeIPCMapping.h
lea rdx, str.mb::common::ipc::IPCMapping_struct_IPC_SUSPENDPROCESS_::GetStruct
call r10
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Read_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x75
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0004001
jmp 0x14004cd09
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbx + 0x20], xmm0
mov eax, dword [rax + 0x30]
mov dword [rbx + 0x30], eax
cmp dword [rbx + 0xc], 0xffffffff
jne 0x14004cc9e
mov dword [rbp - 0x30], 0xffffffff
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x14004cc9e
mov eax, dword [rbp - 0x30]
mov dword [rbx + 0xc], eax
mov ebx, dword [rbx + 0xc]
jmp 0x14004cd09
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Create_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x59
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0004000
lea rcx, [rbp + 0x40]
call fcn.14004bf00
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14004cd22
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14004cd32
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0xd0]
call fcn.140029580
nop
test r14, r14
je 0x14004cd4e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
lea rax, [rsi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14004cd62
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x14004cd9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cd99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004cdcb
call fcn.14014f510
mov eax, ebx
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14014f4f0
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14015fa1c
nop
call fcn.14001cc60
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3