Function at 0x140028fa0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x50
mov rsi, rcx
xor r14d, r14d
mov qword [rcx + 0x348], r14
mov qword [rcx + 0x350], r14
mov rax, qword [rcx + 0x358]
cmp rax, qword [rcx + 0x360]
je 0x140028fdd
mov qword [rcx + 0x360], rax
mov rax, qword [rcx + 0x370]
cmp rax, qword [rcx + 0x378]
je 0x140028ff4
mov qword [rcx + 0x378], rax
mov rax, qword [rcx + 0x388]
cmp rax, qword [rcx + 0x390]
je 0x14002900b
mov qword [rcx + 0x390], rax
mov rax, qword [rcx + 0x3a0]
cmp rax, qword [rcx + 0x3a8]
je 0x140029022
mov qword [rcx + 0x3a8], rax
mov rax, qword [rcx + 0x3b8]
cmp rax, qword [rcx + 0x3c0]
je 0x140029039
mov qword [rcx + 0x3c0], rax
mov rax, qword [rcx + 0x3d0]
cmp rax, qword [rcx + 0x3d8]
je 0x140029050
mov qword [rcx + 0x3d8], rax
mov rbx, qword [rcx]
mov r8, qword [rbx + 8]
mov rdx, rsi
call fcn.1400298c0
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [rsi + 8], r14
mov dword [rsi + 0x194], 0x4cbebc20
mov dword [rsi + 0x184], 0x4cbebc20
mov dword [rsi + 0x180], 0x4cbebc20
mov dword [rsi + 0x17c], 0x4cbebc20
mov dword [rsi + 0x178], 0x4cbebc20
mov dword [rsi + 0x174], 0x4cbebc20
mov dword [rsi + 0x170], 0x4cbebc20
mov dword [rsi + 0x190], 0x4cbebc20
mov dword [rsi + 0x18c], 0x4cbebc20
mov dword [rsi + 0x188], 0x4cbebc20
mov qword [rsi + 0x1b0], r14
mov qword [rsi + 0x1a8], r14
mov qword [rsi + 0x1a0], r14
mov qword [rsi + 0x198], r14
mov qword [rsi + 0x1d0], r14
mov qword [rsi + 0x1c8], r14
mov qword [rsi + 0x1c0], r14
mov qword [rsi + 0x1b8], r14
lea rbp, [rsi + 0x218]
mov rcx, rbp
call fcn.140031260
mov qword [rsi + 0xf0], r14
mov rdx, qword [0x14007a330]
test rdx, rdx
je 0x14002913b
add rdx, 0x478
mov rcx, rsi
call fcn.140025210
lea rcx, [rsi + 0x150]
call fcn.14002ef10
lea rdx, [rsi + 0x80]
lea rcx, [rsi + 0x150]
call fcn.14002edc0
mov rcx, rax
lea rdx, [rsi + 0x80]
call fcn.140004da0
lea rbx, [rsi + 0xf8]
mov byte [rbx + 0x68], r14b
mov ecx, 0x10
call fcn.1400333c4
mov qword [rax], rbx
lea rcx, [0x14002ea00]
mov qword [rax + 8], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14002f610]
xor edx, edx
xor ecx, ecx
call fcn.14003e3d8
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140029281
cmp dword [rsp + 0x38], 0
je 0x140029276
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.14003296c
test eax, eax
jne 0x140029276
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
lea ecx, [rax + 0x10]
call fcn.1400333c4
mov qword [rax], rbp
lea rcx, [0x140031620]
mov qword [rax + 8], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14002f610]
xor edx, edx
xor ecx, ecx
call fcn.14003e3d8
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14002929c
cmp dword [rsp + 0x38], 0
je 0x140029291
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.14003296c
test eax, eax
jne 0x140029291
mov rcx, rsi
mov rbx, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x80]
add rsp, 0x50
pop r14
pop rdi
pop rsi
jmp 0x14002a7a0
mov ecx, 1
call fcn.1400328d0
nop
mov dword [rsp + 0x38], r14d
mov ecx, 6
call fcn.1400328d0
nop
mov ecx, 1
call fcn.1400328d0
nop
mov dword [rsp + 0x38], r14d
mov ecx, 6
call fcn.1400328d0
int3
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x140077048]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rbx, rcx
mov byte [rcx + 0x2c1], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], 2
mov qword [rbp - 1], reloc.OLEAUT32.dll_SafeArrayDestroy
mov eax, 0x3443
mov word [rbp - 0x19], ax
mov byte [rbp - 0x17], 0
lea rdx, [rbp - 0x19]
call fcn.1400292b0
mov dword [rax], 5
mov dword [rax + 0x3c], 0x3e8
mov dword [rax + 0x40], 0x3e8
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x14002a858
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a853
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002aaf4
call fcn.140033390
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], 4
mov qword [rbp + 0x1f], reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rbp + 7], 0x312e3543
mov byte [rbp + 0xb], 0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], 2
mov qword [rbp - 1], reloc.OLEAUT32.dll_SafeArrayDestroy
mov eax, 0x3543
mov word [rbp - 0x19], ax
mov byte [rbp - 0x17], 0
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.1400292b0
lea r13, [rax + 0x90]
mov rax, qword [r13]
mov qword [rbp - 0x39], rax
mov rbx, qword [rax + 8]
mov qword [rbp - 0x31], rbx
mov dword [rbp - 0x29], 0
mov r14, rax
mov r15, qword [rbp + 0x1f]
mov rsi, qword [rbp + 0x17]
mov r12, qword [rbp + 7]
cmp byte [rbx + 0x19], 0
jne 0x14002a951
nop word [rax + rax]
mov qword [rbp - 0x31], rbx
lea rdx, [rbp + 7]
cmp r15, 0x10
cmovae rdx, r12
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 0x10
jb 0x14002a8ff
mov rcx, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x30]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call fcn.140035f60
test eax, eax
jne 0x14002a92a
cmp rdi, rsi
jae 0x14002a922
mov eax, 0xffffffff
jmp 0x14002a92a
xor eax, eax
cmp rdi, rsi
seta al
shr eax, 0x1f
test al, al
je 0x14002a93e
mov dword [rbp - 0x29], 0
mov rbx, qword [rbx + 0x10]
jmp 0x14002a94b
mov dword [rbp - 0x29], 1
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14002a8e0
cmp byte [r14 + 0x19], 0
jne 0x14002a9a5
lea rdx, [r14 + 0x20]
cmp qword [r14 + 0x38], 0x10
jb 0x14002a967
mov rdx, qword [r14 + 0x20]
lea rcx, [rbp + 7]
cmp r15, 0x10
cmovae rcx, r12
mov rbx, qword [r14 + 0x30]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call fcn.140035f60
test eax, eax
jne 0x14002a99e
cmp rsi, rbx
jae 0x14002a996
mov eax, 0xffffffff
jmp 0x14002a99e
xor eax, eax
cmp rsi, rbx
seta al
shr eax, 0x1f
test al, al
je 0x14002aa16
movabs rax, 0x38e38e38e38e38e
cmp qword [r13 + 8], rax
je 0x14002aafa
mov qword [rbp - 0x49], r13
mov qword [rbp - 0x41], 0
mov ecx, 0x48
call fcn.1400333c4
mov rdi, rax
mov qword [rbp - 0x41], rax
lea rdx, [rbp + 7]
lea rcx, [rax + 0x20]
call fcn.140001ea0
mov byte [rdi + 0x40], 0
mov rax, qword [rbp - 0x39]
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov word [rdi + 0x18], 0
movups xmm0, xmmword [rbp - 0x31]
movaps xmmword [rbp - 0x49], xmm0
mov r8, rdi
lea rdx, [rbp - 0x49]
mov rcx, r13
call fcn.1400057e0
mov r14, rax
mov byte [r14 + 0x40], 1
mov rcx, qword [0x14007a330]
test rcx, rcx
je 0x14002aa3b
add rcx, 0x10
lea rdx, [rbp + 7]
call fcn.140004220
mov byte [rax + 0xec], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x14002aa76
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002aa71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002ab00
call fcn.140033390
mov qword [rbp - 9], 0
mov qword [rbp - 1], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rbp - 0x19], 0
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0x10
jb 0x14002aac1
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002aabc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002aaee
call fcn.140033390
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140033370
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140039de4
int3
call fcn.140039de4
nop
call fcn.140001320
nop
call fcn.140039de4
int3