Function at 0x14000c448
Capabilities:
Create thread
Terminate thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xb0
mov rax, qword [0x140053010]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov rsi, rcx
mov ebx, 0x10000
mov ecx, ebx
mov r14, rdx
call fcn.1400214b4
xor r12d, r12d
mov rdi, rax
test rax, rax
je 0x14000c7a2
lea r15d, [r12 + 0x10]
xor r9d, r9d
mov ecx, r15d
mov r8d, ebx
mov rdx, rax
call qword [0x140055bc8]
mov r13d, 0xc0000004
jmp 0x14000c4df
lea eax, [rbx + rbx]
mov rcx, rdi
mov edx, eax
mov ebx, eax
call fcn.140021498
test rax, rax
je 0x14000c5c2
xor r9d, r9d
mov r8d, ebx
mov rdx, rax
mov ecx, r15d
mov rdi, rax
call qword [0x140055bc8]
cmp eax, r13d
je 0x14000c4b2
test eax, eax
js 0x14000c5c2
xorps xmm0, xmm0
mov qword [rbp - 9], r12
mov edx, 0x2000
lea rcx, [rbp - 0x19]
movdqu xmmword [rbp - 0x19], xmm0
call fcn.14000cfc0
mov r15d, r12d
mov rcx, qword [rbp - 0x19]
mov r13, rcx
cmp dword [rdi], r12d
jbe 0x14000c758
mov r8, qword [rbp - 0x11]
xor edx, edx
sub r8, rcx
call fcn.14001c6a0
mov eax, r15d
xor edx, edx
mov qword [rbp - 0x39], r12
lea rcx, [rax + rax*2]
movups xmm1, xmmword [rdi + rcx*8 + 8]
movsd xmm0, qword [rdi + rcx*8 + 0x18]
lea ecx, [rdx + 0x40]
movd r8d, xmm1
movups xmmword [rbp - 0x31], xmm1
movsd qword [rbp - 0x21], xmm0
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
test rax, rax
je 0x14000c744
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], 2
lea r9, [rbp - 0x39]
and dword [rsp + 0x28], 0
lea rdx, [rbp - 0x2b]
and dword [rsp + 0x20], 0
mov r8, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov rcx, r12
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r12d, r12d
test ebx, ebx
je 0x14000c747
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
je 0x14000c5cf
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000c747
mov rcx, rdi
call fcn.1400214a0
jmp 0x14000c7a2
mov rax, qword [rbp - 0x39]
mov rcx, qword [0x140055be0]
or dword [0x140055b98], 0xffffffff
mov qword [0x140055b80], rax
mov qword [0x140055b88], r13
mov qword [0x140055b90], 0x2000
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [0x140055bd8]
mov edx, 0x64
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x14000c662
mov rcx, qword [0x140055bd0]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [0x140055bd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14000be50]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140055bd0], rax
jmp 0x14000c5b3
cmp dword [0x140055b98], r12d
jl 0x14000c5b3
movups xmm0, xmmword [r13]
movd eax, xmm0
movups xmmword [rbp - 0x49], xmm0
test ax, ax
je 0x14000c5b3
movzx edx, ax
lea rcx, [rbp - 1]
shr rdx, 1
mov qword [rbp - 1], r12
mov qword [rbp + 0xf], r12
mov qword [rbp + 0x17], 7
cmp rdx, 7
ja 0x14000c6c1
lea rbx, [rdx + rdx]
mov qword [rbp + 0xf], rdx
mov rdx, qword [rbp - 0x41]
mov r8, rbx
call fcn.14001d5c0
mov word [rbp + rbx - 1], r12w
jmp 0x14000c6ca
mov r9, qword [rbp - 0x41]
call fcn.14000ab60
lea rcx, [rbp - 1]
call fcn.14000beb0
mov rbx, qword [rsi]
jmp 0x14000c730
lea rdx, [rbp - 1]
mov rcx, rbx
call fcn.14000c8b4
cmp rax, 0xffffffffffffffff
je 0x14000c72c
mov rcx, qword [r14]
jmp 0x14000c6fa
mov eax, dword [rbp - 0x31]
cmp dword [rcx], eax
je 0x14000c72c
add rcx, 4
cmp rcx, qword [r14 + 8]
jne 0x14000c6ef
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [rbp - 0x31]
cmp ecx, eax
je 0x14000c72c
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x14000c720
mov dword [rdx], ecx
add qword [r14 + 8], 4
jmp 0x14000c72c
lea r8, [rbp - 0x31]
mov rcx, r14
call fcn.14000cc34
add rbx, 0x20
cmp rbx, qword [rsi + 8]
jne 0x14000c6d8
lea rcx, [rbp - 1]
call fcn.140009a7c
jmp 0x14000c5b3
xor r12d, r12d
inc r15d
cmp r15d, dword [rdi]
jae 0x14000c758
mov rcx, qword [rbp - 0x19]
jmp 0x14000c519
mov rcx, rdi
call fcn.1400214a0
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x14000c7a2
mov rdx, qword [rbp - 9]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14000c791
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c7d1
call fcn.14001aa70
xorps xmm0, xmm0
mov qword [rbp - 9], r12
movdqu xmmword [rbp - 0x19], xmm0
mov rcx, rsi
call fcn.1400099b8
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.14001a2c0
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140022398
int3