Function at 0x1400c399d
Capabilities:
Suspend thread

Disassembly:
mov qword [rsp + 0x18], rbx
cmc
mov qword [rsp + 0x20], rbp
sbb bl, r13b
push rsi
rcl bp, cl
push rdi
movzx rbp, r14w
push r14
not bp
sub rsp, 0x50
sbb ebx, ebp
btr rax, rdx
mov rax, qword [0x140013240]
or rbp, r15
shr rbx, cl
sar ebx, cl
xor rax, rsp
movsx ebp, ax
mov qword [rsp + 0x40], rax
btc r14w, r10w
movzx r14w, cl
movsx r14, ax
sub esi, esi
bts ebp, esi
mov r14d, edx
and rbx, 0x7d9a4b00
ror bpl, cl
cmc
mov rbx, rcx
mov qword [rcx], rsi
mov qword [rcx + 8], rsi
and cl, r8b
sub edx, edx
jmp 0x1400c3a1a
mov ebp, r8d
jmp 0x1400c3a25
lea ecx, [rsi + 4]
jmp 0x1400c3a2d
call fcn.140022dd2
mov rdi, rax
cmp rax, 0xffffffffb8a10ca9
clc
cmp rax, 0xffffffffffffffff
je 0x1400c3be2
lea rdx, [rsp + 0x20]
mov ecx, 0x29b5c9b6
movsx rcx, r15w
movzx rcx, sp
mov dword [rsp + 0x20], 0x1c
movsx rcx, si
mov rcx, rax
call fcn.14003ac0d
test eax, eax
jmp 0x1400c3a74
je 0x1400c3bd4
nop word [rax + rax]
cmc
cmp dil, 0xb
cmp dword [rsp + 0x20], 0x10
jmp 0x1400c3a92
jb 0x1400c3b9e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x2c], eax
jmp 0x1400c3aa7
jne 0x1400c3b9e
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [rsp + 0x28], eax
jmp 0x1400c3abc
je 0x1400c3b9e
mov rdx, qword [rbx]
cmp sp, 0xa3b
test rdx, rdx
jmp 0x1400c3ad2
jne 0x1400c3b1b
mov dword [rbx + 8], 0x80
cmovno r8, rbx
mov r8d, 0x200
bswap ecx
mov rcx, 0xffffffffc823fe35
xchg cl, cl
mov rcx, qword [0x140013388]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rbx], rax
sar dh, cl
clc
mov rdx, rax
test r9b, r9b
test rax, rax
je 0x1400c3bd4
jmp 0x1400c3b87
mov eax, dword [rbx + 8]
cmp sil, r14b
stc
cmp dword [rbx + 0xc], eax
jmp 0x1400c3b2a
jb 0x1400c3b87
mov rcx, qword [0x140013388]
rcr r9b, 0x17
movsx r9, bx
add r9w, 0x906
lea r9d, [rax + rax]
movzx r8d, r11w
mov r8, rdx
clc
shl r9, 2
cmc
xor edx, edx
jmp 0x1400c3b5d
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rdx, rax
clc
test rax, rax
je 0x1400c3bd4
mov eax, dword [rbx + 8]
add eax, eax
mov qword [rbx], rdx
movsxd rcx, ebx
bswap ecx
mov dword [rbx + 8], eax
bswap cx
cmovnp rcx, rcx
mov ecx, dword [rbx + 0xc]
mov eax, dword [rsp + 0x28]
jmp 0x1400c3b93
mov dword [rdx + rcx*4], eax
inc dword [rbx + 0xc]
mov ecx, 0x1ba54af
lea rdx, [rsp + 0x20]
movsx rcx, bp
movzx ecx, di
mov dword [rsp + 0x20], 0x1c
movsx ecx, ax
bswap rcx
xchg ch, ch
mov rcx, rdi
jmp 0x1400c3bc2
call fcn.140035388
test eax, eax
jmp 0x1400c3bce
jne 0x1400c3a88
mov rcx, rdi
jmp 0x1400c3bdc
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbx], rsi
jmp 0x1400c3bea
je 0x1400c3c79
cmp dword [rbx + 0xc], esi
jmp 0x1400c3bf8
jbe 0x1400c3c79
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [rbx]
shr cl, 0xb5
sub edx, edx
mov eax, esi
lea ecx, [rdx + 0x5a]
mov r8d, dword [r8 + rax*4]
jmp 0x1400c3c20
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rdi, rax
test dil, cl
clc
test rax, rax
jmp 0x1400c3c35
je 0x1400c3c69
mov rcx, rax
jmp 0x1400c3c43
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov r8d, ebp
mov edx, r14d
movzx rcx, r13w
mov rcx, rdi
call fcn.14000ced0
mov rcx, rdi
jmp 0x1400c3c63
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, dword [rbx + 0xc]
jmp 0x1400c3c73
jb 0x1400c3c0a
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
jmp 0x1400c3c86
call fcn.14000e010
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
movzx ebp, cx
jmp 0x1400c3c9c
mov rbp, qword [r11 + 0x38]
movsx r14, dx
mov rsp, r11
not r14b
pop r14
pop rdi
pop rsi
jmp 0x1400c3cb3
ret