Function at 0x1400024f0
Capabilities:
Resume thread

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x538
movsxd r13, dword [rdx + 0x3c]
mov rbp, rcx
add r13, rdx
lea rcx, [0x14000b080]
mov rdi, rdx
mov edx, 0x1abedc6c
call sym.m_GetProcAddressEx
mov r8d, dword [r13 + 0x50]
mov rcx, qword [rbp]
xor edx, edx
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
call rax
mov r12, rax
test rax, rax
je 0x140002583
mov rax, qword [r13 + 0x30]
mov qword [r13 + 0x30], r12
mov edx, 0x11712a10
lea rcx, [0x14000b080]
mov qword [rsp + 0x30], rax
call sym.m_GetProcAddressEx
mov r9d, dword [r13 + 0x54]
mov rcx, qword [rbp]
mov r8, rdi
mov qword [rsp + 0x38], rax
mov rdx, r12
mov qword [rsp + 0x20], 0
call rax
test eax, eax
jne 0x1400025a0
xor eax, eax
add rsp, 0x538
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rdi
call sym.GetRelocAddress64_void_
mov r8, rax
mov esi, eax
shr r8, 0x20
cmp word [r13 + 6], 0
mov dword [rsp + 0x54], r8d
je 0x140002583
lea rbx, [r13 + 0x18]
mov qword [rsp + 0x40], r8
xor r15d, r15d
xor r14d, r14d
mov qword [rsp + 0x588], rdi
mov rdi, rbx
mov rbx, rbp
mov rbp, qword [rsp + 0x588]
jmp 0x1400025f6
movzx eax, word [r13 + 6]
add r15, 1
cmp eax, r15d
jle 0x140002648
movzx eax, word [r13 + 0x14]
lea rdx, [r15 + r15*4]
add rax, rdi
lea rdx, [rax + rdx*8]
mov eax, dword [rdx + 0xc]
cmp esi, eax
jb 0x140002618
mov ecx, dword [rdx + 8]
add ecx, eax
cmp esi, ecx
cmovb r14, rdx
mov r8d, dword [rdx + 0x14]
mov r9d, dword [rdx + 0x10]
lea rdx, [r12 + rax]
mov rcx, qword [rbx]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x20], 0
add r8, rbp
call rax
test eax, eax
jne 0x1400025e8
jmp 0x140002583
mov rdi, rbp
mov r8, qword [rsp + 0x40]
mov rbp, rbx
test r14, r14
je 0x140002583
mov rsi, qword [rsp + 0x30]
mov rax, r12
xor ebx, ebx
sub rax, rsi
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
test r8d, r8d
je 0x140002792
mov qword [rsp + 0x58], r13
mov esi, ebx
mov qword [rsp + 0x40], r12
nop dword [rax]
mov ecx, dword [r14 + 0x14]
mov eax, esi
lea r13d, [rsi + 8]
lea r8, [rdi + rcx]
lea r12, [r8 + rax]
mov eax, dword [r12 + 4]
sub rax, 8
shr rax, 1
test eax, eax
je 0x140002830
mov dword [rsp + 0x50], esi
xor r15d, r15d
mov rsi, rdi
mov rdi, r12
mov r12d, eax
mov rax, rcx
jmp 0x1400026d7
mov r15d, eax
mov eax, dword [r14 + 0x14]
mov ecx, r13d
add r13d, 2
add rcx, rsi
add rcx, rax
cmp byte [rcx + 1], 0xf
jbe 0x140002763
movzx ebx, word [rcx]
mov rax, qword [rsp + 0x40]
mov edx, 0x328cff03
lea rcx, [0x14000b080]
and ebx, 0xfff
add rbx, rax
mov eax, dword [rdi]
mov qword [rsp + 0x60], 0
add rbx, rax
call sym.m_GetProcAddressEx
mov rcx, qword [rbp]
mov r8, qword [rsp + 0x30]
mov rdx, rbx
mov qword [rsp + 0x20], 0
mov r9d, 8
call rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rbp]
mov rdx, rbx
add qword [rsp + 0x60], rax
mov r8, qword [rsp + 0x30]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov rax, qword [rsp + 0x38]
call rax
lea eax, [r15 + 1]
cmp r12d, eax
jne 0x1400026d0
mov rdi, rsi
mov esi, dword [rsp + 0x50]
lea esi, [rsi + r15*2 + 0xa]
mov eax, dword [rsp + 0x54]
cmp esi, eax
jb 0x140002690
mov r13, qword [rsp + 0x58]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x30]
xor eax, eax
mov ecx, 0x9a
lea rbx, [rsp + 0x60]
mov rdx, rbx
rep stosq qword [rdi], rax
mov rcx, qword [rbp + 8]
mov dword [rsp + 0x90], 0x10000b
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x140002583
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rbp]
mov r9d, 8
lea r8, [r13 + 0x30]
mov qword [rsp + 0x20], 0
lea rdx, [rax + 0x10]
mov rax, qword [rsp + 0x38]
call rax
test eax, eax
je 0x140002583
mov eax, dword [r13 + 0x28]
mov rcx, qword [rbp + 8]
mov rdx, rbx
add r12, rax
mov qword [rsp + 0xe0], r12
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
test eax, eax
je 0x140002583
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, 1
jmp 0x140002585
mov esi, r13d
jmp 0x14000277c