Function at 0x140010060
Capabilities:
Suspend thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov rax, qword [0x1401e3028]
xor rax, rsp
mov qword [rbp + 0x190], rax
xor eax, eax
mov rsi, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rax
xor edx, edx
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x58], rax
mov r8d, 0x230
call fcn.140130a00
mov eax, dword [0x1401e4088]
xor r12d, r12d
mov edx, dword [0x14022602c]
cmp edx, 5
mov dword [rsp + 0x34], r12d
cmovne eax, r12d
mov qword [rsp + 0x40], r12
cmp dword [0x1401e3e20], r12d
lea ebx, [r12 + 1]
mov dword [0x1401e4088], eax
je 0x1400100fc
cmp dword [0x1401e3e28], r12d
mov dword [rsp + 0x30], ebx
jne 0x140010101
mov dword [rsp + 0x30], r12d
cmp dword [0x1401e3e98], r12d
je 0x140010120
mov rax, qword [0x1401e3ea0]
test rax, rax
je 0x140010120
cmp byte [rax], r12b
mov qword [rsp + 0x38], rax
jne 0x140010125
mov qword [rsp + 0x38], r12
cmp dword [0x1401e3e48], r12d
je 0x140010139
cmp dword [0x1401e3e50], r12d
mov eax, ebx
jne 0x14001013c
mov eax, r12d
mov ecx, dword [0x14024b4ec]
mov dword [rdi + 0x6c], eax
cmp dword [0x1401e3e70], r12d
je 0x140010157
cmp dword [0x1401e3e78], r12d
jne 0x14001015e
mov eax, r12d
test ecx, ecx
je 0x140010160
mov eax, ebx
mov dword [rdi + 0x70], eax
lea r15, [rsi + 0x1138]
mov rax, qword [0x140245158]
cmp edx, 5
xorps xmm0, xmm0
cmovne rax, r12
movdqa xmmword [0x140245120], xmm0
mov qword [0x140245158], rax
lea rax, [rsi + 0x1178]
mov qword [0x140245168], rax
lea rax, [rsi + 0x11b0]
mov qword [0x140245170], rax
lea rax, [rsi + 0x11c8]
mov qword [0x140245178], rax
lea rax, [rsp + 0x30]
mov qword [0x140245180], rax
mov eax, dword [rsi + 0x1130]
mov dword [0x140245188], eax
mov dword [0x14024518c], r12d
mov rax, qword [rsi + 0x1120]
mov qword [0x1402451a0], rax
mov rax, qword [rsi + 0x1160]
mov qword [0x1402451a8], rax
mov rax, qword [rsi + 0x1168]
mov qword [0x1402451b0], rax
mov qword [0x1402451b8], rdi
mov qword [0x1402451c0], r15
mov rax, qword [rsi + 0x11f0]
mov qword [r15 + 0x20], rax
mov dword [0x1402451c8], r12d
test dword [rsi + 0x1170], 0x10000000
je 0x14001031b
test edx, edx
jne 0x1400102d1
cmp dword [0x1401e3e70], r12d
je 0x140010247
cmp dword [0x1401e3e78], r12d
jne 0x1400102a2
test ecx, ecx
jne 0x1400102a2
test byte [0x140226990], 0x20
jne 0x1400102a2
lea r8, [0x140230ae0]
lea rcx, [0x140230b00]
call fcn.14002409c
test byte [0x14022699c], 0x20
lea rcx, [0x14018a288]
lea rax, [0x14018a2a8]
cmovne rax, rcx
mov qword [rsi + 0x1168], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
or r9, 0xffffffffffffffff
mov rcx, rax
mov r8, r9
mov rdx, r9
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
jmp 0x1400102d1
cmp dword [0x1401e3f88], r12d
je 0x1400102d1
cmp dword [0x1401e3f90], r12d
je 0x1400102d1
cmp word [0x1402321a0], r12w
je 0x1400102d1
lea rdx, [0x1402321a0]
lea rcx, str.DW_not_requesting_heap_because_heap_second_level_data_is_denied._r_n
call fcn.140025aa4
lea rcx, [rsp + 0x60]
call fcn.14000d964
mov edx, ebx
lea rcx, [rsp + 0x60]
call fcn.14000df3c
test eax, eax
je 0x14001030c
lea r8, [rsp + 0x60]
mov rdx, rsi
mov rcx, rdi
call fcn.14000f2a4
mov ecx, dword [0x14024b090]
test eax, eax
cmovne ecx, ebx
mov dword [0x14024b090], ecx
lea rcx, [rsp + 0x60]
call fcn.14000cbc4
jmp 0x1400104f1
cmp dword [0x1401e3dd0], r12d
je 0x140010390
mov rax, qword [0x1401e3dd8]
test rax, rax
je 0x140010390
cmp word [rax], r12w
je 0x140010390
mov rax, qword [rsi + 0x1108]
test rax, rax
je 0x14001036e
cmp word [rax], r12w
je 0x14001036e
mov qword [0x1402313c8], rax
mov dword [0x1402451c8], ebx
cmp dword [rsi + 0x1130], r12d
je 0x140010490
xor ecx, ecx
call fcn.140016d30
jmp 0x1400104f1
mov rax, qword [0x14021eec0]
lea rcx, [0x14021eec0]
mov edx, 0x30303030
mov rax, qword [rax + 8]
call qword [case.0x14000c75c.0]
jmp 0x1400104f1
xorps xmm1, xmm1
mov dword [0x14022325c], r12d
xor edx, edx
movdqa xmmword [0x140223290], xmm1
mov r8d, 0x1004
movdqa xmmword [0x140223280], xmm0
lea rcx, [0x140223d50]
mov qword [0x1402232a0], r12
mov byte [0x140223be4], r12b
mov dword [0x140223ce8], r12d
mov qword [0x140223cf8], r12
mov dword [0x140223d00], r12d
call fcn.140130a00
xor edx, edx
mov qword [0x140224d58], r12
mov r8d, 0x120c
lea rcx, [0x140224d60]
call fcn.140130a00
lea rax, [rsi + 0x800]
mov dword [0x140225f6c], r12d
lea r8, [rsi + 0x1000]
mov qword [0x1402232d8], rax
or r9, 0xffffffffffffffff
mov dword [0x140225f74], r12d
mov edx, 0x104
mov qword [0x1402232d0], rsi
lea rcx, [0x1402232e0]
call fcn.14014f790
mov rax, qword [rsi + 0x1110]
cmp dword [0x14022602c], 5
mov qword [0x140223d08], rax
mov eax, dword [rsi + 0x1118]
mov dword [0x140223d10], eax
mov eax, dword [rsi + 0x1128]
mov dword [0x140225f78], eax
mov rax, qword [0x140245128]
cmove rax, qword [0x140245190]
mov qword [0x140245128], rax
cmp dword [rsi + 0x1130], r12d
je 0x140010490
xor ecx, ecx
call fcn.140015ee0
jmp 0x1400104f1
mov r8, qword [0x140226928]
lea r9, [0x14001d240]
mov rcx, qword [0x1401e3c58]
mov edx, 0x67
mov qword [rsp + 0x20], r12
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [0x140245158]
test rcx, rcx
je 0x1400104f1
mov edx, 0x4e20
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400104dd
mov rcx, qword [0x140245158]
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov rcx, qword [0x140245158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140245158], r12
cmp dword [rsp + 0x40], r12d
je 0x140010504
mov dword [rsi + 0x112c], ebx
mov dword [0x14024b090], ebx
mov rcx, qword [rsi + 0x1120]
test rcx, rcx
je 0x140010528
mov r8d, 0x18
mov dword [rsp + 0x54], ebx
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x50], ebx
call fcn.1400283e0
mov eax, dword [0x1401e4088]
cmp dword [0x14022602c], 5
cmovne eax, ebx
xor edx, edx
mov dword [0x1401e4088], eax
xor ecx, ecx
mov rax, qword [0x140225f98]
call qword [case.0x14000c75c.0]
test eax, eax
mov r14d, r12d
cmovns r14d, ebx
cmp dword [0x14022602c], 5
je 0x14001056d
cmp dword [rsi + 0x1130], r12d
jne 0x14001056d
mov ebx, r12d
mov r9d, ebx
lea rdx, [rsp + 0x30]
mov rcx, r15
call fcn.14001e074
test r14d, r14d
je 0x14001058f
mov rax, qword [0x140225f90]
call qword [case.0x14000c75c.0]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x14001059d
call fcn.140152ed8
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400105aa
call fcn.140152ed8
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400105b8
call fcn.140152ed8
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1400105c6
call fcn.140152ed8
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x1400105d4
call fcn.140152ed8
mov rcx, qword [rdi + 0x20]
test rcx, rcx
je 0x1400105e2
call fcn.140152ed8
mov rcx, qword [rdi + 0x60]
test rcx, rcx
je 0x1400105f0
call fcn.140152ed8
mov rcx, qword [rsp + 0x38]
cmp rcx, qword [0x1401e3ea0]
je 0x140010608
test rcx, rcx
je 0x140010608
call fcn.140152ed8
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.14012e400
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret