Function at 0x1400f7c60
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov qword [rsp + 0x30], rcx
lea rcx, [0x140d89530]
test cl, 0xf
jne 0x1400f7cb4
lea rax, [0x140d89540]
lea rdx, [0x140d96d50]
cmp rdx, rax
cmova rax, rdx
mov rdx, rcx
not rdx
lea r8, [rdx + rax]
add r8, 0x10
and r8, 0xfffffffffffffff0
xor edx, edx
call sub.msvcrt.dll_memset
jmp 0x1400f7d0c
xor eax, eax
nop word cs:[rax + rax]
mov byte [rax + rcx], 0
mov byte [rax + rcx + 1], 0
mov byte [rax + rcx + 2], 0
mov byte [rax + rcx + 3], 0
mov byte [rax + rcx + 4], 0
mov byte [rax + rcx + 5], 0
mov byte [rax + rcx + 6], 0
mov byte [rax + rcx + 7], 0
mov byte [rax + rcx + 8], 0
mov byte [rax + rcx + 9], 0
mov byte [rax + rcx + 0xa], 0
mov byte [rax + rcx + 0xb], 0
mov byte [rax + rcx + 0xc], 0
add rax, 0xd
cmp rax, 0xd820
jne 0x1400f7cc0
mov al, byte [0x140e17dc0]
test al, al
jne 0x1400f7d51
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f8f94
cmp byte [0x140e17dc0], 0
jne 0x1400f7d4a
lea rcx, [0x140d96d80]
mov edx, 0xffffffff
xor r8d, r8d
call fcn.14011f8f0
mov byte [0x140e17dc0], 1
mov byte [0x140e17dc1], 0
movabs rsi, 0x1000000000000000
lea rcx, [0x140d89530]
lea rdx, [0x140e17d88]
call fcn.140122ff0
mov r10, qword [rsp + 0x30]
mov rax, qword [r10 + 0xa00028]
lea rcx, [r10 + 0xa00030]
mov qword [rsp + 0x38], rcx
mov rdx, 0xffffffffffffffff
xor ecx, ecx
lea rdi, [rsi + 0xfffff]
movabs r14, 0x10000000000
lea r12, [rsp + 0x58]
movabs r15, 0xdfffffffffffffff
movabs rbx, 0x2000000000000000
nop dword [rax]
test rax, rdi
jne 0x1400f7de3
mov rbp, rax
or rbp, rsi
and rbp, rdx
lock cmpxchg qword [r10 + 0xa00028], rbp
je 0x1400f7e79
add rcx, 1
jmp 0x1400f7dc0
cmp rcx, 0x5dc
jbe 0x1400f7e3e
lea r8, [rax + r14]
and r8, rdx
lock cmpxchg qword [r10 + 0xa00028], r8
jne 0x1400f7ddd
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7e2b
mov dword [rsp + 0x58], 0
mov r8d, 4
mov rdx, r12
mov r9d, 0xffffffff
call sub.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress
mov rcx, qword [rsp + 0x38]
mov r10, qword [rsp + 0x30]
mov eax, dword [rcx]
test eax, eax
je 0x1400f7e05
lea edx, [rax - 1]
lock cmpxchg dword [rcx], edx
jne 0x1400f7e2d
xor ecx, ecx
jmp 0x1400f7e56
bt rax, 0x3d
jb 0x1400f7e69
mov r8, rax
or r8, rbx
lock cmpxchg qword [r10 + 0xa00028], r8
jne 0x1400f7ddd
mov rax, qword [r10 + 0xa00028]
add rcx, 1
mov rdx, r15
jmp 0x1400f7dc0
mov rax, qword [r10 + 0xa00028]
add rcx, 1
jmp 0x1400f7dc0
mov rax, qword [r10 + 0xa00040]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1400f8cb3
lea rcx, [0x140dd6dd0]
lea rax, [0x140dd7b40]
cmp rax, rcx
cmova rcx, rax
lea rbx, [0x140d96d80]
sub rcx, rbx
add rcx, 0xfffffffffffbffcf
and rcx, 0xffffffffffffffd0
mov qword [rsp + 0x40], rcx
xor r14d, r14d
jmp 0x1400f7edf
add r14, 1
cmp r14, qword [rsp + 0x50]
je 0x1400f8cb3
xor r15d, r15d
test r14, r14
sete r15b
mov qword [rsp + 0x48], r14
jmp 0x1400f7f1d
mov r10, qword [rsp + 0x30]
mov r8, rdi
lea rax, [r8 + r12]
add rax, 0x48
mov qword [rax], 0
mov dword [r8 + r12 + 0x20], 0x3fffff00
add r15, 1
cmp r15, 0x400
je 0x1400f7ed0
mov r8, qword [r10 + r14*8 + 0x200028]
imul r12, r15, 0x58
mov r13, qword [r8 + r12 + 0x50]
test r13, r13
je 0x1400f844c
mov al, byte [0x140e17dc0]
test al, al
je 0x1400f7f60
movabs rax, 0x7fffffffffff
cmp r13, rax
jbe 0x1400f81ce
jmp 0x1400f8320
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f8292
cmp byte [0x140e17dc0], 0
jne 0x1400f81b4
mov rsi, r8
mov byte [0x140e17d88], 0
mov byte [0x140e17d89], 0
mov byte [0x140e17d8a], 0
mov byte [0x140e17d8b], 0
mov byte [0x140e17d8c], 0
mov byte [0x140e17d8d], 0
mov byte [0x140e17d8e], 0
mov byte [0x140e17d8f], 0
mov byte [0x140e17d90], 0
mov byte [0x140e17d91], 0
mov byte [0x140e17d92], 0
mov byte [0x140e17d93], 0
mov byte [0x140e17d94], 0
mov byte [0x140e17d95], 0
mov byte [0x140e17d96], 0
mov byte [0x140e17d97], 0
mov byte [0x140e17d98], 0
mov byte [0x140e17d99], 0
mov byte [0x140e17d9a], 0
mov byte [0x140e17d9b], 0
mov byte [0x140e17d9c], 0
mov byte [0x140e17d9d], 0
mov byte [0x140e17d9e], 0
mov byte [0x140e17d9f], 0
mov byte [0x140e17da0], 0
mov byte [0x140e17da1], 0
mov byte [0x140e17da2], 0
mov byte [0x140e17da3], 0
mov byte [0x140e17da4], 0
mov byte [0x140e17da5], 0
mov byte [0x140e17da6], 0
mov byte [0x140e17da7], 0
mov byte [0x140e17da8], 0
mov byte [0x140e17da9], 0
mov byte [0x140e17daa], 0
mov byte [0x140e17dab], 0
mov byte [0x140e17dac], 0
mov byte [0x140e17dad], 0
mov byte [0x140e17dae], 0
mov byte [0x140e17daf], 0
mov byte [0x140d96d80], 0
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
mov byte [rax + rbx + 8], 0
mov byte [rax + rbx + 9], 0
mov byte [rax + rbx + 0xa], 0
mov byte [rax + rbx + 0xb], 0
mov byte [rax + rbx + 0xc], 0
mov byte [rax + rbx + 0xd], 0
mov byte [rax + rbx + 0xe], 0
mov byte [rax + rbx + 0xf], 0
add rax, 8
cmp rax, 0x40000
jne 0x1400f80b0
lea rcx, [0x140dd6dc0]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.msvcrt.dll_memset
mov rax, 0xfffffffffffbfdb8
nop
mov byte [rax + rbx + 0x81008], 0
mov byte [rax + rbx + 0x81009], 0
mov byte [rax + rbx + 0x8100a], 0
mov byte [rax + rbx + 0x8100b], 0
mov byte [rax + rbx + 0x8100c], 0
mov byte [rax + rbx + 0x8100d], 0
mov byte [rax + rbx + 0x8100e], 0
mov byte [rax + rbx + 0x8100f], 0
mov byte [rax + rbx + 0x81010], 0
mov byte [rax + rbx + 0x81011], 0
mov byte [rax + rbx + 0x81012], 0
mov byte [rax + rbx + 0x81013], 0
add rax, 0xc
jne 0x1400f8100
mov rax, qword [0x140e17de8]
test rax, rax
mov r10, qword [rsp + 0x30]
mov r8, rsi
jne 0x1400f8198
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r8, rsi
mov r10, qword [rsp + 0x30]
mov eax, dword [rsp + 0x5c]
mov qword [0x140e17de8], rax
mov qword [0x140dd7b40], rax
lea rax, [0x140dd7b50]
mov qword [0x140dd7b48], rax
mov byte [0x140e17dc0], 1
mov byte [0x140e17dc1], 0
movabs rax, 0x7fffffffffff
cmp r13, rax
ja 0x1400f8320
mov rbp, r13
shr rbp, 0x20
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f8320
mov rsi, r13
shr rsi, 0x14
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f82ed
and esi, 0xfff
cmp byte [rax + rsi], 0
je 0x1400f8320
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f8f1a
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f8a1d
movzx r9d, byte [rax + rsi]
test r9, r9
je 0x1400f8f1a
cmp r9b, 0x36
jae 0x1400f8f3e
mov rbp, r9
shl rbp, 0xa
lea rax, [0x140d89530]
lea r14, [rax + rbp]
mov rcx, qword [rbp + rax + 8]
test rcx, rcx
je 0x1400f8a46
mov rax, qword [r14]
cmp rax, rcx
je 0x1400f8b67
lea rcx, [rax + 1]
mov qword [r14], rcx
mov qword [r14 + rax*8 + 0x20], r13
lea rax, [0x140d89530]
mov rax, qword [rbp + rax + 0x10]
xor ecx, ecx
sub rcx, rax
lock add qword [0x140d96d40], rcx
jmp 0x1400f8438
xor esi, esi
jmp 0x1400f82a3
add esi, 1
cmp esi, 0x63
ja 0x1400f82c0
pause
cmp byte [0x140e17dc1], 0
jne 0x1400f82a0
jmp 0x1400f82dc
xor ecx, ecx
mov rdi, r8
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
mov r8, rdi
mov r10, qword [rsp + 0x30]
cmp byte [0x140e17dc1], 0
jne 0x1400f82a0
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f82a0
jmp 0x1400f7f70
mov rcx, rbx
mov rdx, rbp
mov rdi, r8
call fcn.140129530
mov r8, rdi
mov r10, qword [rsp + 0x30]
and esi, 0xfff
cmp byte [rax + rsi], 0
jne 0x1400f8208
nop word cs:[rax + rax]
nop dword [rax]
mov rax, qword [0x140dd7b40]
lea rcx, [rax - 1]
test rcx, r13
jne 0x1400f8e8e
sub r13, rax
mov al, 1
xchg byte [0x140e17d80], al
test al, al
jne 0x1400f87b7
mov r9, qword [r13 + 0x18]
mov rcx, qword [0x140dd7b48]
mov rax, qword [rcx + r9*8]
cmp rax, r13
jne 0x1400f8ecf
mov rax, qword [0x140e17b50]
cmp r9, rax
jae 0x1400f8eb2
lea rdx, [rax - 1]
mov qword [0x140e17b50], rdx
mov rax, qword [rcx + rax*8 - 8]
mov qword [rcx + r9*8], rax
mov rax, qword [0x140dd7b48]
mov rax, qword [rax + r9*8]
mov qword [rax + 0x18], r9
mov byte [0x140e17b58], 0
add qword [0x140e17b68], 1
mov rax, qword [r13 + 8]
sub qword [0x140e17b70], rax
neg rax
lock add qword [0x140e17d98], rax
mov rax, qword [r13 + 8]
xor ecx, ecx
sub rcx, rax
lock add qword [0x140e17da0], rcx
mov byte [0x140e17d80], 0
mov rbp, qword [r13]
test rbp, rbp
je 0x1400f8438
mov r14, qword [r13 + 8]
test r14, r14
je 0x1400f8438
mov rsi, r8
mov r8d, 0x30
mov rcx, rbp
lea rdx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x1400f8ef6
mov rcx, rbp
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x1400f8430
mov rcx, rbp
mov rdx, r14
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x1400f902a
mov r10, qword [rsp + 0x30]
mov r8, rsi
lea rax, [r8 + r12]
add rax, 0x50
mov qword [rax], 0
mov r14, qword [rsp + 0x48]
mov rdi, qword [r8 + r12 + 0x48]
test rdi, rdi
je 0x1400f7f07
mov al, byte [0x140e17dc0]
test al, al
je 0x1400f8480
movabs rax, 0x7fffffffffff
cmp rdi, rax
jbe 0x1400f86ee
jmp 0x1400f88a0
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f880d
cmp byte [0x140e17dc0], 0
jne 0x1400f86d4
mov rsi, r8
mov byte [0x140e17d88], 0
mov byte [0x140e17d89], 0
mov byte [0x140e17d8a], 0
mov byte [0x140e17d8b], 0
mov byte [0x140e17d8c], 0
mov byte [0x140e17d8d], 0
mov byte [0x140e17d8e], 0
mov byte [0x140e17d8f], 0
mov byte [0x140e17d90], 0
mov byte [0x140e17d91], 0
mov byte [0x140e17d92], 0
mov byte [0x140e17d93], 0
mov byte [0x140e17d94], 0
mov byte [0x140e17d95], 0
mov byte [0x140e17d96], 0
mov byte [0x140e17d97], 0
mov byte [0x140e17d98], 0
mov byte [0x140e17d99], 0
mov byte [0x140e17d9a], 0
mov byte [0x140e17d9b], 0
mov byte [0x140e17d9c], 0
mov byte [0x140e17d9d], 0
mov byte [0x140e17d9e], 0
mov byte [0x140e17d9f], 0
mov byte [0x140e17da0], 0
mov byte [0x140e17da1], 0
mov byte [0x140e17da2], 0
mov byte [0x140e17da3], 0
mov byte [0x140e17da4], 0
mov byte [0x140e17da5], 0
mov byte [0x140e17da6], 0
mov byte [0x140e17da7], 0
mov byte [0x140e17da8], 0
mov byte [0x140e17da9], 0
mov byte [0x140e17daa], 0
mov byte [0x140e17dab], 0
mov byte [0x140e17dac], 0
mov byte [0x140e17dad], 0
mov byte [0x140e17dae], 0
mov byte [0x140e17daf], 0
mov byte [0x140d96d80], 0
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
mov byte [rax + rbx + 8], 0
mov byte [rax + rbx + 9], 0
mov byte [rax + rbx + 0xa], 0
mov byte [rax + rbx + 0xb], 0
mov byte [rax + rbx + 0xc], 0
mov byte [rax + rbx + 0xd], 0
mov byte [rax + rbx + 0xe], 0
mov byte [rax + rbx + 0xf], 0
add rax, 8
cmp rax, 0x40000
jne 0x1400f85d0
lea rcx, [0x140dd6dc0]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.msvcrt.dll_memset
mov rax, 0xfffffffffffbfdb8
nop
mov byte [rax + rbx + 0x81008], 0
mov byte [rax + rbx + 0x81009], 0
mov byte [rax + rbx + 0x8100a], 0
mov byte [rax + rbx + 0x8100b], 0
mov byte [rax + rbx + 0x8100c], 0
mov byte [rax + rbx + 0x8100d], 0
mov byte [rax + rbx + 0x8100e], 0
mov byte [rax + rbx + 0x8100f], 0
mov byte [rax + rbx + 0x81010], 0
mov byte [rax + rbx + 0x81011], 0
mov byte [rax + rbx + 0x81012], 0
mov byte [rax + rbx + 0x81013], 0
add rax, 0xc
jne 0x1400f8620
mov rax, qword [0x140e17de8]
test rax, rax
mov r10, qword [rsp + 0x30]
mov r8, rsi
jne 0x1400f86b8
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r8, rsi
mov r10, qword [rsp + 0x30]
mov eax, dword [rsp + 0x5c]
mov qword [0x140e17de8], rax
mov qword [0x140dd7b40], rax
lea rax, [0x140dd7b50]
mov qword [0x140dd7b48], rax
mov byte [0x140e17dc0], 1
mov byte [0x140e17dc1], 0
movabs rax, 0x7fffffffffff
cmp rdi, rax
ja 0x1400f88a0
mov rbp, rdi
shr rbp, 0x20
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f88a0
mov rsi, rdi
shr rsi, 0x14
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f886d
and esi, 0xfff
cmp byte [rax + rsi], 0
je 0x1400f88a0
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f8f1a
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x1400f8b27
movzx r9d, byte [rax + rsi]
test r9, r9
je 0x1400f8f1a
cmp r9b, 0x36
jae 0x1400f8f3e
mov rbp, r9
shl rbp, 0xa
lea rax, [0x140d89530]
lea r14, [rax + rbp]
mov rcx, qword [rbp + rax + 8]
test rcx, rcx
je 0x1400f8b8c
mov rax, qword [r14]
cmp rax, rcx
je 0x1400f8c8e
lea rcx, [rax + 1]
mov qword [r14], rcx
mov qword [r14 + rax*8 + 0x20], rdi
lea rax, [0x140d89530]
mov rax, qword [rbp + rax + 0x10]
xor ecx, ecx
sub rcx, rax
lock add qword [0x140d96d40], rcx
mov r14, qword [rsp + 0x48]
jmp 0x1400f7ef8
xor esi, esi
jmp 0x1400f87c3
add esi, 1
cmp esi, 0x63
ja 0x1400f87e0
pause
cmp byte [0x140e17d80], 0
jne 0x1400f87c0
jmp 0x1400f87fc
xor ecx, ecx
mov rdi, r8
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
mov r8, rdi
mov r10, qword [rsp + 0x30]
cmp byte [0x140e17d80], 0
jne 0x1400f87c0
mov al, 1
xchg byte [0x140e17d80], al
test al, al
jne 0x1400f87c0
jmp 0x1400f8347
xor esi, esi
jmp 0x1400f8823
add esi, 1
cmp esi, 0x63
ja 0x1400f8840
pause
cmp byte [0x140e17dc1], 0
jne 0x1400f8820
jmp 0x1400f885c
xor ecx, ecx
mov rbp, r8
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
mov r8, rbp
mov r10, qword [rsp + 0x30]
cmp byte [0x140e17dc1], 0
jne 0x1400f8820
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f8820
jmp 0x1400f8490
mov rcx, rbx
mov rdx, rbp
mov r13, r8
call fcn.140129530
mov r8, r13
mov r10, qword [rsp + 0x30]
and esi, 0xfff
cmp byte [rax + rsi], 0
jne 0x1400f8728
nop word cs:[rax + rax]
nop dword [rax]
mov rax, qword [0x140dd7b40]
lea rcx, [rax - 1]
test rcx, rdi
jne 0x1400f8e8e
sub rdi, rax
mov al, 1
xchg byte [0x140e17d80], al
test al, al
jne 0x1400f89c0
mov r9, qword [rdi + 0x18]
mov rcx, qword [0x140dd7b48]
mov rax, qword [rcx + r9*8]
cmp rax, rdi
jne 0x1400f8ed6
mov rax, qword [0x140e17b50]
cmp r9, rax
jae 0x1400f8eb2
lea rdx, [rax - 1]
mov qword [0x140e17b50], rdx
mov rax, qword [rcx + rax*8 - 8]
mov qword [rcx + r9*8], rax
mov rax, qword [0x140dd7b48]
mov rax, qword [rax + r9*8]
mov qword [rax + 0x18], r9
mov byte [0x140e17b58], 0
add qword [0x140e17b68], 1
mov rax, qword [rdi + 8]
sub qword [0x140e17b70], rax
neg rax
lock add qword [0x140e17d98], rax
mov rax, qword [rdi + 8]
xor ecx, ecx
sub rcx, rax
lock add qword [0x140e17da0], rcx
mov byte [0x140e17d80], 0
mov rbp, qword [rdi]
test rbp, rbp
je 0x1400f7ef8
mov rsi, qword [rdi + 8]
test rsi, rsi
je 0x1400f7ef8
mov rdi, r8
mov r8d, 0x30
mov rcx, rbp
lea rdx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x1400f8ef6
mov rcx, rbp
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x1400f7ef0
mov rcx, rbp
mov rdx, rsi
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x1400f7ef0
jmp 0x1400f9052
xor esi, esi
jmp 0x1400f89d3
add esi, 1
cmp esi, 0x63
ja 0x1400f89f0
pause
cmp byte [0x140e17d80], 0
jne 0x1400f89d0
jmp 0x1400f8a0c
xor ecx, ecx
mov rbp, r8
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
mov r8, rbp
mov r10, qword [rsp + 0x30]
cmp byte [0x140e17d80], 0
jne 0x1400f89d0
mov al, 1
xchg byte [0x140e17d80], al
test al, al
jne 0x1400f89d0
jmp 0x1400f88c7
mov rcx, rbx
mov rdx, rbp
mov rdi, r8
call fcn.140129530
mov r8, rdi
mov r10, qword [rsp + 0x30]
movzx r9d, byte [rax + rsi]
test r9, r9
jne 0x1400f8232
jmp 0x1400f8f1a
mov rsi, r8
lea rax, [0x140d89530]
lea rdi, [rax + rbp]
add rdi, 8
mov r10d, 0x10
mov r11, 0xfffffffffffffff1
lea r8, [0x140d89948]
jmp 0x1400f8a8c
mov qword [r8], rax
add r10, 0x10
add r11, 1
add r8, 0x400
cmp r11, 0x26
je 0x1400f8b50
mov ecx, 0x200
cmp r11, 0x25
je 0x1400f8ac7
lea rax, [r11 + 0x10]
mov rcx, r10
cmp rax, 0x11
jb 0x1400f8ac7
mov rcx, r11
shr rcx, 2
mov edx, 0x100
shl rdx, cl
mov rcx, rdx
shr rcx, 2
and eax, 3
imul rax, rcx
add rax, rdx
mov rcx, rax
mov eax, 0x4000
xor edx, edx
div ecx
cmp eax, 0x40
jae 0x1400f8b10
test rax, rax
je 0x1400f8b1a
cmp rax, 0x3e
jb 0x1400f8ae5
mov eax, 0x3e
lea rdx, [rax + rax]
mov qword [r8 - 0x10], rdx
mov qword [r8 - 8], rcx
lea rdx, [rax*8 + 0x10]
mov eax, 0x14
cmp rcx, rdx
jb 0x1400f8a70
xor eax, eax
jmp 0x1400f8a70
mov eax, 0x40
test rax, rax
jne 0x1400f8ada
mov eax, 1
cmp rax, 0x3e
jae 0x1400f8ae0
jmp 0x1400f8ae5
mov rcx, rbx
mov rdx, rbp
mov rbp, r8
call fcn.140129530
mov r8, rbp
mov r10, qword [rsp + 0x30]
movzx r9d, byte [rax + rsi]
test r9, r9
jne 0x1400f8752
jmp 0x1400f8f1a
mov rcx, qword [rdi]
mov r10, qword [rsp + 0x30]
mov r8, rsi
mov rax, qword [r14]
cmp rax, rcx
jne 0x1400f8268
lea rcx, [0x140d89530]
mov rdx, r14
mov rsi, r8
mov r8, rbx
call fcn.1401231a0
mov r8, rsi
mov r10, qword [rsp + 0x30]
mov rax, qword [r14]
jmp 0x1400f8268
mov r13, r8
lea rax, [0x140d89530]
lea rsi, [rax + rbp]
add rsi, 8
mov r10d, 0x10
mov r11, 0xfffffffffffffff1
lea r8, [0x140d89948]
jmp 0x1400f8bdc
mov qword [r8], rax
add r10, 0x10
add r11, 1
add r8, 0x400
cmp r11, 0x26
je 0x1400f8c77
mov ecx, 0x200
cmp r11, 0x25
je 0x1400f8c17
lea rax, [r11 + 0x10]
mov rcx, r10
cmp rax, 0x11
jb 0x1400f8c17
mov rcx, r11
shr rcx, 2
mov edx, 0x100
shl rdx, cl
mov rcx, rdx
shr rcx, 2
and eax, 3
imul rax, rcx
add rax, rdx
mov rcx, rax
mov eax, 0x4000
xor edx, edx
div ecx
cmp eax, 0x40
jae 0x1400f8c60
test rax, rax
je 0x1400f8c6a
cmp rax, 0x3e
jb 0x1400f8c35
mov eax, 0x3e
lea rdx, [rax + rax]
mov qword [r8 - 0x10], rdx
mov qword [r8 - 8], rcx
lea rdx, [rax*8 + 0x10]
mov eax, 0x14
cmp rcx, rdx
jb 0x1400f8bc0
xor eax, eax
jmp 0x1400f8bc0
mov eax, 0x40
test rax, rax
jne 0x1400f8c2a
mov eax, 1
cmp rax, 0x3e
jae 0x1400f8c30
jmp 0x1400f8c35
mov rcx, qword [rsi]
mov r10, qword [rsp + 0x30]
mov r8, r13
mov rax, qword [r14]
cmp rax, rcx
jne 0x1400f8788
lea rcx, [0x140d89530]
mov rdx, r14
mov rsi, r8
mov r8, rbx
call fcn.1401231a0
mov r8, rsi
mov r10, qword [rsp + 0x30]
mov rax, qword [r14]
jmp 0x1400f8788
mov rax, qword [r10 + 0xa00028]
movabs r11, 0xefffffffffffffff
movabs r14, 0x6000000000000000
movabs r12, 0xfffff0000000000
movabs rbx, 0xffffff0000000000
xor r8d, r8d
movabs r9, 0xbfffff00000fffff
movabs r10, 0x4000000000000000
lea r15, [0x140d89530]
movabs rbp, 0x2000000000000000
jmp 0x1400f8d44
mov rsi, rax
shr rsi, 0x14
and esi, 0xfffff
test rax, rbp
cmovne rsi, r8
mov rcx, rdi
and rcx, r9
or rcx, r10
test rsi, rsi
cmove rcx, rdi
mov rdx, qword [rsp + 0x30]
lock cmpxchg qword [rdx + 0xa00028], rcx
je 0x1400f8d85
mov rsi, rax
and rsi, r11
test rax, r14
sete cl
test rax, r12
setne dl
lea rdi, [rsi + rbx]
or rdi, rbp
test cl, dl
cmove rdi, rsi
je 0x1400f8d10
mov rcx, qword [rsp + 0x30]
lock cmpxchg qword [rcx + 0xa00028], rdi
jne 0x1400f8d44
mov rcx, qword [rsp + 0x38]
lock add dword [rcx], 1
call sub.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle
jmp 0x1400f8d8e
test rsi, rsi
jne 0x1400f8fc9
mov al, byte [0x140e17dc0]
test al, al
jne 0x1400f8dd3
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f8feb
cmp byte [0x140e17dc0], 0
jne 0x1400f8dcc
lea rcx, [0x140d96d80]
mov edx, 0xffffffff
xor r8d, r8d
call fcn.14011f8f0
mov byte [0x140e17dc0], 1
mov byte [0x140e17dc1], 0
mov ebp, 1
lea rbx, [0x140d96d80]
jmp 0x1400f8dfa
add rbp, 1
cmp rbp, 0x36
je 0x1400f8e29
mov rsi, rbp
shl rsi, 0xa
cmp qword [rsi + r15], 0
je 0x1400f8df0
add rsi, r15
nop dword [rax + rax]
mov rcx, r15
mov rdx, rsi
mov r8, rbx
mov r9, rbp
call fcn.1401231a0
cmp qword [rsi], 0
jne 0x1400f8e10
jmp 0x1400f8df0
mov al, 1
xchg byte [0x140e17da8], al
test al, al
jne 0x1400f8f5f
mov rax, qword [0x140d96d30]
mov rcx, qword [0x140d96d38]
mov qword [rcx], rax
mov rax, qword [0x140d96d30]
mov qword [rax + 8], rcx
mov rax, qword [0x140d96d40]
lock add qword [0x140e17d98], rax
mov rax, qword [0x140d96d48]
lock add qword [0x140e17da0], rax
mov byte [0x140e17da8], 0
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_allocator_secondary.h
lea r8, str.__IsAligned_p__page_size________0_
mov edx, 0x129
xor r9d, r9d
call fcn.1400ca810
mov qword [rsp + 0x20], rax
lea rcx, str....._sanitizer_common_sanitizer_allocator_secondary.h
lea r8, str.__idx_______n_chunks___
mov edx, 0x8c
call fcn.1400ca810
mov qword [rsp + 0x20], r13
jmp 0x1400f8edb
mov qword [rsp + 0x20], rdi
lea rcx, str....._sanitizer_common_sanitizer_allocator_secondary.h
lea r8, str.__chunks__idx_______h__
mov edx, 0x8b
mov r9, rax
call fcn.1400ca810
mov qword [rsp + 0x20], 0
lea rcx, str.gotsan.cpp
lea r8, str.__VirtualQuery_addr__mbi__sizeof_mbi________0_
mov edx, 0x227f
xor r9d, r9d
call fcn.1400ca810
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_allocator_local_cache.h
lea r8, str.__class_id_______0UL__
mov edx, 0xaf
xor r9d, r9d
call fcn.1400ca810
mov qword [rsp + 0x20], 0x36
lea rcx, str....._sanitizer_common_sanitizer_allocator_local_cache.h
lea r8, str.__class_id_______kNumClasses__
mov edx, 0xb0
call fcn.1400ca810
xor esi, esi
mov rdi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
jmp 0x1400f8f6d
add esi, 1
cmp esi, 0x63
ja 0x1400f8f76
pause
jmp 0x1400f8f7a
xor ecx, ecx
call rdi
cmp byte [0x140e17da8], 0
jne 0x1400f8f6a
mov al, 1
xchg byte [0x140e17da8], al
test al, al
jne 0x1400f8f6a
jmp 0x1400f8e39
xor esi, esi
mov rdi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
jmp 0x1400f8fa2
add esi, 1
cmp esi, 0x63
ja 0x1400f8fab
pause
jmp 0x1400f8faf
xor ecx, ecx
call rdi
cmp byte [0x140e17dc1], 0
jne 0x1400f8f9f
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f8f9f
jmp 0x1400f7d26
mov rcx, qword [rsp + 0x30]
lock add dword [rcx + 0xa00034], esi
add rcx, 0xa00034
cmp esi, 1
jne 0x1400f9020
call sub.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle
jmp 0x1400f8d8e
xor esi, esi
mov rdi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
jmp 0x1400f8ff9
add esi, 1
cmp esi, 0x63
ja 0x1400f9002
pause
jmp 0x1400f9006
xor ecx, ecx
call rdi
cmp byte [0x140e17dc1], 0
jne 0x1400f8ff6
mov al, 1
xchg byte [0x140e17dc1], al
test al, al
jne 0x1400f8ff6
jmp 0x1400f8da8
call sub.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressAll
jmp 0x1400f8d8e
mov rsi, qword [str.SanitizerTool]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbp
lea rcx, str.ERROR:__s_failed_to_deallocate_0x_zx___zd__bytes_at_address__p__error_code:__d__n
mov rdx, rsi
mov r8, r14
mov r9, r14
jmp 0x1400f9078
mov rdi, qword [str.SanitizerTool]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbp
lea rcx, str.ERROR:__s_failed_to_deallocate_0x_zx___zd__bytes_at_address__p__error_code:__d__n
mov rdx, rdi
mov r8, rsi
mov r9, rsi
call fcn.1400fa2d0
mov qword [rsp + 0x20], 0
lea rcx, str.gotsan.cpp
lea r8, str.___unable_to_unmap___0______0_
mov edx, 0x2289
xor r9d, r9d
call fcn.1400ca810
int3