Function at 0x1400476e0
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x8b8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x820], xmm8
movdqa xmmword [rbp + 0x810], xmm7
movaps xmmword [rbp + 0x800], xmm6
and rsp, 0xffffffffffffff80
mov r15, rdx
mov qword [rsp + 0xf8], rcx
mov rsi, qword [rdx + 0x10]
test rsi, rsi
jne 0x140047bbd
lea rdx, str.RAYON_NUM_THREADSRAYON_RS_NUM_CPUS
lea rcx, [rsp + 0x200]
mov r8d, 0x11
call fcn.1400dc840
mov rcx, qword [rsp + 0x200]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1400479a1
cmp byte [rsp + 0x218], 0
mov r8, qword [rsp + 0x208]
mov r9, qword [rsp + 0x210]
je 0x1400477fd
test r9, r9
je 0x1400478e4
movzx eax, byte [r8]
cmp eax, 0x2b
je 0x14004789a
cmp eax, 0x2d
jne 0x1400477a6
cmp r9, 1
je 0x1400478e4
mov r10, r8
cmp r9, 0x10
jbe 0x1400478ad
xor r11d, r11d
mov edi, 0xa
xor esi, esi
nop dword [rax]
cmp r9, r11
je 0x1400478df
movzx ebx, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add ebx, 0xffffffd0
cmp ebx, 9
ja 0x1400478e4
test dl, dl
jne 0x1400478e4
mov rsi, rax
mov eax, ebx
inc r11
add rsi, rax
jae 0x1400477c0
jmp 0x1400478e4
test r9, r9
je 0x1400478e4
lea rax, [r8 + r9]
mov r10, r8
jmp 0x14004782c
add r10, 2
cmp rdx, rax
cmovne rdx, r10
nop word [rax + rax]
mov r10, rdx
cmp rdx, rax
je 0x140047781
lea rdx, [r10 + 1]
movzx r11d, byte [r10]
test r11b, r11b
jns 0x140047820
cmp r11b, 0xe0
jb 0x14004780f
cmp r11b, 0xed
jne 0x14004786f
cmp rdx, rax
je 0x140047781
lea rdx, [r10 + 2]
cmp rdx, rax
je 0x140047781
cmp byte [r10 + 1], 0x9f
ja 0x14004798b
add r10, 3
mov rdx, r10
jmp 0x140047820
add r10, 2
cmp rdx, rax
cmove r10, rdx
xor edx, edx
cmp r10, rax
setne dl
add rdx, r10
cmp r11b, 0xf0
jb 0x140047820
xor r10d, r10d
cmp rdx, rax
setne r10b
add rdx, r10
jmp 0x140047820
dec r9
je 0x1400478e4
lea r10, [r8 + 1]
cmp r9, 0x11
jae 0x1400477b3
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x1400478e4
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x1400478c0
mov dil, 1
jmp 0x1400478e6
xor edi, edi
test rcx, rcx
je 0x1400478f9
mov rcx, qword [0x14017a0c0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test dil, dil
je 0x1400479a1
test rsi, rsi
jne 0x140047bbd
call fcn.1400e2b60
test rax, rax
je 0x140047983
mov eax, edx
and eax, 3
mov esi, 1
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140047bbd
test rax, rax
je 0x140047bbd
mov rdi, rdx
dec rdi
mov rbx, qword [rdx - 1]
mov r14, qword [rdx + 7]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x14004796d
cmp qword [r14 + 0x10], 0x11
jb 0x14004795c
mov rbx, qword [rbx - 8]
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
jmp 0x140047bbd
mov rsi, rdx
jmp 0x140047bbd
shl rcx, 1
test rcx, rcx
je 0x1400479a1
mov rcx, qword [0x14017a0c0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
lea rdx, [0x140115fc1]
lea rcx, [rsp + 0x200]
mov r8d, 0x11
call fcn.1400dc840
mov rcx, qword [rsp + 0x200]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x140047b84
cmp byte [rsp + 0x218], 0
mov r8, qword [rsp + 0x208]
mov r9, qword [rsp + 0x210]
je 0x140047a80
mov dil, 1
test r9, r9
je 0x140047b66
movzx eax, byte [r8]
cmp eax, 0x2b
je 0x140047b1a
cmp eax, 0x2d
jne 0x140047a1c
cmp r9, 1
je 0x140047b66
mov r10, r8
cmp r9, 0x10
jbe 0x140047b2d
xor r11d, r11d
mov ebx, 0xa
xor esi, esi
nop word cs:[rax + rax]
cmp r9, r11
je 0x140047b5f
movzx r14d, byte [r10 + r11]
mov rax, rsi
mul rbx
seto dl
add r14d, 0xffffffd0
cmp r14d, 9
ja 0x140047b66
test dl, dl
jne 0x140047b66
mov rsi, rax
mov eax, r14d
inc r11
add rsi, rax
jae 0x140047a40
jmp 0x140047b66
test r9, r9
je 0x140047b63
lea rax, [r8 + r9]
mov r10, r8
jmp 0x140047aac
add r10, 2
cmp rdx, rax
cmovne rdx, r10
nop dword [rax]
mov r10, rdx
cmp rdx, rax
je 0x1400479f4
lea rdx, [r10 + 1]
movzx r11d, byte [r10]
test r11b, r11b
jns 0x140047aa0
cmp r11b, 0xe0
jb 0x140047a92
cmp r11b, 0xed
jne 0x140047aef
cmp rdx, rax
je 0x1400479f4
lea rdx, [r10 + 2]
cmp rdx, rax
je 0x1400479f4
cmp byte [r10 + 1], 0x9f
ja 0x1400497ba
add r10, 3
mov rdx, r10
jmp 0x140047aa0
add r10, 2
cmp rdx, rax
cmove r10, rdx
xor edx, edx
cmp r10, rax
setne dl
add rdx, r10
cmp r11b, 0xf0
jb 0x140047aa0
xor r10d, r10d
cmp rdx, rax
setne r10b
add rdx, r10
jmp 0x140047aa0
dec r9
je 0x140047b66
lea r10, [r8 + 1]
cmp r9, 0x11
jae 0x140047a29
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x140047b66
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x140047b40
xor edi, edi
jmp 0x140047b66
mov dil, 1
test rcx, rcx
je 0x140047b79
mov rcx, qword [0x14017a0c0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test rsi, rsi
sete al
or dil, al
je 0x140047bbd
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x220], xmm0
movdqa xmmword [rsp + 0x210], xmm0
movdqa xmmword [rsp + 0x200], xmm0
lea rcx, [rsp + 0x200]
call sub.KERNEL32.dll_GetSystemInfo
mov esi, dword [rsp + 0x220]
cmp esi, 1
adc esi, 0
cmp rsi, 0xffff
mov edi, 0xffff
cmovb rdi, rsi
mov qword [rsp + 0x98], r15
movzx r13d, byte [r15 + 0x59]
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 8
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], 8
mov qword [rsp + 0x228], 0
test rsi, rsi
mov qword [rsp + 0x88], rdi
jne 0x14004912f
mov rbx, qword [rsp + 0x220]
mov r14, qword [rsp + 0x228]
mov rcx, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xa8], rax
mov r15, qword [rsp + 0x218]
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 8
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], 8
mov qword [rsp + 0x228], 0
test rsi, rsi
mov qword [rsp + 0x108], rcx
jne 0x140049305
mov r13d, 8
xor eax, eax
mov qword [rsp + 0x90], rax
xor eax, eax
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xc0], rax
movdqu xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0xb0], xmm0
mov rdi, r14
shl rdi, 4
add rdi, rbx
test r14, r14
mov r12, qword [rsp + 0x98]
je 0x140047e60
movabs rax, 0x333333333333333
cmp r14, rax
ja 0x1400497ff
lea rax, [r14*8]
lea rdx, [rax + rax*4]
movzx eax, byte [0x14017a148]
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov qword [rsp + 0x200], r14
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], 0
xor ecx, ecx
mov rdx, rbx
nop word cs:[rax + rax]
mov r8, qword [rdx]
movzx r9d, byte [rdx + 8]
mov dword [rax], 0
mov word [rax + 4], 0
mov dword [rax + 8], 0
mov word [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], r8
mov byte [rax + 0x20], r9b
inc rcx
add rax, 0x28
add rdx, 0x10
cmp rdx, rdi
jne 0x140047d70
mov qword [rsp + 0x210], rcx
test r15, r15
je 0x140047dcf
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x140], rax
movdqu xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x130], xmm0
test rsi, rsi
je 0x140047ea7
mov rdi, qword [rsp + 0x88]
mov rdx, rdi
shl rdx, 7
movzx eax, byte [0x14017a148]
sub rdx, 0xffffffffffffff80
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov rcx, rax
and rcx, 0xffffffffffffff80
mov qword [rcx + 0x78], rax
sub rcx, 0xffffffffffffff80
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x208], rcx
mov qword [rsp + 0x210], 0
cmp rsi, 1
jne 0x140047ee0
xor edx, edx
jmp 0x140047f2f
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 8
mov qword [rsp + 0x210], 0
cmp rdi, rbx
jne 0x140047e94
jmp 0x140047db9
add rbx, 0x10
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x140047e90
mov rcx, rbx
call fcn.14004af80
jmp 0x140047e90
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], pe_nt_image_headers64
mov qword [rsp + 0x210], 0
mov rdx, qword [rsp + 0x88]
test rdx, rdx
jne 0x14004978b
xor edx, edx
jmp 0x140047f4d
mov edx, eax
and edx, 0x7f
mov r8d, edi
and r8d, 0xfffe
sub rax, rdx
add rax, 0x105
xor edx, edx
nop word [rax + rax]
mov dword [rax - 0x85], 0
mov word [rax - 0x81], 0
mov dword [rax - 5], 0
mov word [rax - 1], 0
add rdx, 2
add rax, 0x100
cmp r8, rdx
jne 0x140047f00
test dil, 1
je 0x140047f4d
mov rax, rdx
shl rax, 7
mov dword [rcx + rax], 0
mov word [rcx + rax + 4], 0
inc rdx
movdqu xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], rdx
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], 0
movdqu xmmword [rsp + 0x218], xmm0
mov qword [rsp + 0x228], 0
movdqa xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], 0
movdqu xmmword [rsp + 0x248], xmm0
mov qword [rsp + 0x258], 0
movdqa xmmword [rsp + 0x260], xmm0
mov qword [rsp + 0x270], 0
movdqu xmmword [rsp + 0x278], xmm0
mov qword [rsp + 0x288], 0
movdqa xmmword [rsp + 0x290], xmm0
mov qword [rsp + 0x2a0], 0
movdqu xmmword [rsp + 0x2a8], xmm0
mov qword [rsp + 0x2b8], 0
movdqa xmmword [rsp + 0x2c0], xmm0
mov qword [rsp + 0x2d0], 0
movdqu xmmword [rsp + 0x2d8], xmm0
mov qword [rsp + 0x2e8], 0
movdqa xmmword [rsp + 0x2f0], xmm0
mov qword [rsp + 0x300], 0
movdqu xmmword [rsp + 0x308], xmm0
mov qword [rsp + 0x318], 0
movdqa xmmword [rsp + 0x320], xmm0
mov qword [rsp + 0x330], 0
movdqu xmmword [rsp + 0x338], xmm0
mov qword [rsp + 0x348], 0
movdqa xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], 0
movdqu xmmword [rsp + 0x368], xmm0
mov qword [rsp + 0x378], 0
movdqa xmmword [rsp + 0x380], xmm0
mov qword [rsp + 0x390], 0
movdqu xmmword [rsp + 0x398], xmm0
mov qword [rsp + 0x3a8], 0
movdqa xmmword [rsp + 0x3b0], xmm0
mov qword [rsp + 0x3c0], 0
movdqu xmmword [rsp + 0x3c8], xmm0
mov qword [rsp + 0x3d8], 0
movdqa xmmword [rsp + 0x3e0], xmm0
mov qword [rsp + 0x3f0], 0
movdqu xmmword [rsp + 0x3f8], xmm0
mov qword [rsp + 0x408], 0
movdqa xmmword [rsp + 0x410], xmm0
mov qword [rsp + 0x420], 0
movdqu xmmword [rsp + 0x428], xmm0
mov qword [rsp + 0x438], 0
movdqa xmmword [rsp + 0x440], xmm0
mov qword [rsp + 0x450], 0
movdqu xmmword [rsp + 0x458], xmm0
mov qword [rsp + 0x468], 0
movdqa xmmword [rsp + 0x470], xmm0
mov qword [rsp + 0x480], 0
movdqu xmmword [rsp + 0x488], xmm0
mov qword [rsp + 0x498], 0
movdqa xmmword [rsp + 0x4a0], xmm0
mov qword [rsp + 0x4b0], 0
movdqu xmmword [rsp + 0x4b8], xmm0
mov qword [rsp + 0x4c8], 0
movdqa xmmword [rsp + 0x4d0], xmm0
mov qword [rsp + 0x4e0], 0
movdqu xmmword [rsp + 0x4e8], xmm0
mov qword [rsp + 0x4f8], 0
movdqa xmmword [rsp + 0x500], xmm0
mov qword [rsp + 0x510], 0
movdqu xmmword [rsp + 0x518], xmm0
mov qword [rsp + 0x528], 0
movdqa xmmword [rsp + 0x530], xmm0
mov qword [rsp + 0x540], 0
movdqu xmmword [rsp + 0x548], xmm0
mov qword [rsp + 0x558], 0
movdqa xmmword [rsp + 0x560], xmm0
mov qword [rsp + 0x570], 0
movdqu xmmword [rsp + 0x578], xmm0
mov qword [rsp + 0x588], 0
movdqa xmmword [rsp + 0x590], xmm0
mov qword [rsp + 0x5a0], 0
movdqu xmmword [rsp + 0x5a8], xmm0
mov qword [rsp + 0x5b8], 0
movdqa xmmword [rsp + 0x5c0], xmm0
mov qword [rsp + 0x5d0], 0
movdqu xmmword [rsp + 0x5d8], xmm0
mov qword [rsp + 0x5e8], 0
movdqa xmmword [rsp + 0x5f0], xmm0
mov qword [rsp + 0x600], 0
movdqu xmmword [rsp + 0x608], xmm0
mov qword [rsp + 0x618], 0
movdqa xmmword [rsp + 0x620], xmm0
mov qword [rsp + 0x630], 0
movdqu xmmword [rsp + 0x638], xmm0
mov qword [rsp + 0x648], 0
movdqa xmmword [rsp + 0x650], xmm0
mov qword [rsp + 0x660], 0
movdqu xmmword [rsp + 0x668], xmm0
mov qword [rsp + 0x678], 0
movdqa xmmword [rsp + 0x680], xmm0
mov qword [rsp + 0x690], 0
movdqu xmmword [rsp + 0x698], xmm0
mov qword [rsp + 0x6a8], 0
movdqa xmmword [rsp + 0x6b0], xmm0
mov qword [rsp + 0x6c0], 0
movdqu xmmword [rsp + 0x6c8], xmm0
mov qword [rsp + 0x6d8], 0
movdqa xmmword [rsp + 0x6e0], xmm0
mov qword [rsp + 0x6f0], 0
movdqu xmmword [rsp + 0x6f8], xmm0
mov qword [rsp + 0x708], 0
movdqa xmmword [rsp + 0x710], xmm0
mov qword [rsp + 0x720], 0
movdqu xmmword [rsp + 0x728], xmm0
mov qword [rsp + 0x738], 0
movdqa xmmword [rsp + 0x740], xmm0
mov qword [rsp + 0x750], 0
movdqu xmmword [rsp + 0x758], xmm0
mov qword [rsp + 0x768], 0
movdqa xmmword [rsp + 0x770], xmm0
mov qword [rsp + 0x780], 0
movdqu xmmword [rsp + 0x788], xmm0
mov qword [rsp + 0x798], 0
movdqa xmmword [rsp + 0x7a0], xmm0
mov qword [rsp + 0x7b0], 0
movdqu xmmword [rsp + 0x7b8], xmm0
mov qword [rsp + 0x7c8], 0
movdqa xmmword [rsp + 0x7d0], xmm0
mov qword [rsp + 0x7e0], 0
movzx eax, byte [0x14017a148]
mov edx, 0x5f0
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov rsi, rax
mov qword [rax], 0
mov rcx, rax
add rcx, 8
lea rdx, [rsp + 0x200]
mov r8d, 0x5e8
call sub.msvcrt.dll_memcpy
movdqa xmm0, xmmword [rsp + 0xb0]
movdqu xmmword [rsp + 0x868], xmm0
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x878], rax
movups xmm6, xmmword [r12 + 0x18]
movdqu xmm7, xmmword [r12 + 0x38]
movups xmm8, xmmword [r12 + 0x48]
mov qword [r12 + 0x18], 0
mov qword [r12 + 0x38], 0
mov qword [r12 + 0x48], 0
movzx eax, byte [0x14017a148]
mov edx, 0x300
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov rdx, rax
and rax, 0xffffffffffffff80
lea rcx, [rax + 0x80]
mov qword [rsp + 0x80], rcx
mov qword [rax + 0x78], rdx
mov qword [rax + 0x80], 1
mov qword [rax + 0x88], 1
mov qword [rax + 0x100], 0
mov qword [rax + 0x108], rsi
mov qword [rax + 0x180], 0
mov qword [rax + 0x188], rsi
mov byte [rax + 0x200], 0
movups xmm0, xmmword [rsp + 0x861]
movdqu xmm1, xmmword [rsp + 0x870]
movups xmmword [rax + 0x201], xmm0
movdqu xmmword [rax + 0x210], xmm1
movaps xmmword [rax + 0x220], xmm6
movdqa xmmword [rax + 0x230], xmm7
movaps xmmword [rax + 0x240], xmm8
mov qword [rax + 0x250], 1
movaps xmm0, xmmword [rsp + 0xd0]
movups xmmword [rax + 0x258], xmm0
mov rcx, qword [rsp + 0xe0]
mov qword [rax + 0x268], rcx
mov qword [rax + 0x270], 0
mov rcx, qword [rsp + 0x140]
mov qword [rax + 0x288], rcx
movdqa xmm0, xmmword [rsp + 0x130]
movdqu xmmword [rax + 0x278], xmm0
mov rcx, qword [rsp + 0xa8]
mov r14, rcx
shl r14, 5
mov rbx, qword [rsp + 0xa0]
add r14, rbx
mov r15, qword [rsp + 0x90]
shl r15, 4
add r15, r13
mov qword [rsp + 0xe8], r13
test rcx, rcx
je 0x140048f6d
add rax, 0x250
mov qword [rsp + 0x148], rax
xorps xmm6, xmm6
movdqa xmm7, xmmword [0x14010c2b0]
xor eax, eax
mov qword [rsp + 0x88], rax
mov r13, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0xa0]
mov qword [rsp + 0x90], r15
jmp 0x1400486b1
inc qword [rsp + 0x88]
cmp rbx, r14
je 0x140048f9c
mov rax, rbx
add rbx, 0x20
movzx esi, byte [rax + 0x18]
cmp sil, 2
je 0x140048f6d
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x210], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x200], xmm0
mov byte [rsp + 0x218], sil
mov ecx, dword [rax + 0x19]
mov edx, dword [rax + 0x1c]
lea r8, [rsp + 0x219]
mov dword [r8 + 3], edx
mov dword [r8], ecx
cmp r13, r15
je 0x140048f4f
lea rcx, [rax + 0x19]
mov rdi, qword [r13]
movzx r12d, byte [r13 + 8]
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0x1f0], rdx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1e0], xmm0
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rsp + 0xc8], eax
mov dword [rsp + 0xcb], ecx
mov r15, qword [rsp + 0x98]
mov rdx, qword [r15 + 0x28]
movabs r9, 0x8000000000000000
test rdx, rdx
je 0x140048788
mov rax, qword [r15 + 0x30]
lea rcx, [rsp + 0x200]
mov r8, qword [rsp + 0x88]
call qword [rax + 0x20]
mov r9, qword [rsp + 0x200]
lea rax, [rsp + 0x219]
movups xmm0, xmmword [rax - 0x11]
movaps xmmword [rsp + 0xd0], xmm0
mov r10, qword [r15]
mov r11, qword [r15 + 8]
mov rdx, qword [rsp + 0x80]
lock inc qword [rdx]
jle 0x1400497ff
add r13, 0x10
mov qword [rsp + 0x188], r9
movaps xmm0, xmmword [rsp + 0xd0]
lea r8, [rsp + 0x1b0]
movups xmmword [r8 - 0x20], xmm0
mov qword [rsp + 0x178], r10
mov qword [rsp + 0x180], r11
mov rax, qword [rsp + 0x1f0]
mov qword [r8 + 0x10], rax
movdqa xmm0, xmmword [rsp + 0x1e0]
movdqu xmmword [r8], xmm0
mov byte [rsp + 0x1c8], sil
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xcb]
mov dword [r8 + 0x1c], ecx
mov dword [r8 + 0x19], eax
mov qword [rsp + 0x1a0], rdi
mov byte [rsp + 0x1a8], r12b
mov qword [rsp + 0x1d0], rdx
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x1d8], rax
test rax, rax
mov r15, qword [rsp + 0x100]
mov qword [rsp + 0xa8], r9
jne 0x140048960
mov rax, qword [rsp + 0x98]
cmp byte [rax + 0x58], 0
je 0x140048960
xor ecx, ecx
call fcn.140047020
test rax, rax
je 0x1400497ff
cmp qword [rax], 0
mov r15, qword [rsp + 0x90]
lea rdi, [rsp + 0x200]
mov rcx, qword [rsp + 0xa8]
jne 0x1400494d6
mov rcx, rdi
lea rdx, [rsp + 0x178]
call fcn.1400462a0
movzx eax, byte [0x14017a148]
mov edx, 0x200
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov rsi, rax
and rsi, 0xffffffffffffff80
mov qword [rsi + 0x78], rax
sub rsi, 0xffffffffffffff80
mov r8d, 0x180
mov rcx, rsi
mov rdx, rdi
call sub.msvcrt.dll_memcpy
xor ecx, ecx
call fcn.140047020
test rax, rax
je 0x1400497ff
cmp qword [rax], 0
jne 0x1400497ff
mov qword [rax], rsi
mov rax, qword [rsp + 0x80]
cmp qword [rax + 0x208], 0
je 0x1400497ff
mov rdi, qword [rax + 0x200]
lea rsi, [rdi + 4]
xor eax, eax
mov cl, 1
lock cmpxchg byte [rdi + 4], cl
jne 0x140048afd
mov byte [rdi + 5], 1
lock inc dword [rdi]
mov rcx, rdi
call sub.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressAll
xor eax, eax
xchg byte [rdi + 4], al
cmp al, 2
jne 0x1400486a0
mov rcx, rsi
call fcn.140107f78
jmp 0x1400486a0
mov rsi, qword [rsp + 0x190]
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x1a0]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x230], xmm3
movabs rax, 0x8000000000000000
mov r12, rax
cmp r9, rax
mov rdi, qword [rsp + 0x158]
mov qword [rsp + 0x120], r10
mov qword [rsp + 0x118], r11
je 0x140048a38
mov r15, qword [rsp + 0x128]
test r15, r15
je 0x140048a12
js 0x1400497ff
movzx eax, byte [0x14017a148]
xor ecx, ecx
mov rdx, r15
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov rdi, rax
mov r12, r15
jmp 0x140048a1a
mov edi, 1
xor r12d, r12d
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call sub.msvcrt.dll_memcpy
mov r10, qword [rsp + 0x120]
mov r11, qword [rsp + 0x118]
mov rax, r11
test r10, r10
jne 0x140048a45
call fcn.1400e0be0
mov qword [rsp + 0x100], rax
movabs rax, 0x8000000000000000
cmp r12, rax
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x150], rsi
jne 0x140048a80
xor esi, esi
jmp 0x140048c80
cmp r15, 0x10
jae 0x140048ab7
test r15, r15
je 0x140048b62
xor eax, eax
nop word cs:[rax + rax]
cmp byte [rdi + rax], 0
je 0x1400497ff
inc rax
cmp r15, rax
jne 0x140048aa0
jmp 0x140048b62
lea rax, [rdi + 7]
and rax, 0xfffffffffffffff8
sub rax, rdi
jne 0x140048acc
lea rcx, [r15 - 0x10]
xor eax, eax
jmp 0x140048b10
cmp rax, r15
cmovae rax, r15
xor ecx, ecx
nop word cs:[rax + rax]
cmp byte [rdi + rcx], 0
je 0x1400497ff
inc rcx
cmp rax, rcx
jne 0x140048ae0
lea rcx, [r15 - 0x10]
cmp rax, rcx
jbe 0x140048b10
jmp 0x140048b5d
mov rcx, rsi
call fcn.1400e7c70
jmp 0x140048928
movdqu xmm0, xmmword [rdi + rax]
movdqa xmm1, xmm0
paddq xmm1, xmm7
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq rdx, xmm1
movabs r8, 0x8080808080808080
test rdx, r8
jne 0x140048b5d
add rax, 0x10
cmp rax, rcx
jbe 0x140048b10
jmp 0x140048b5d
cmp byte [rdi + rax], 0
je 0x1400497ff
inc rax
cmp r15, rax
jne 0x140048b50
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], r15
mov rsi, rdi
cmp r12, r15
jne 0x140048bfd
mov r12, r15
inc r12
je 0x1400497ff
test r15, r15
je 0x140048baa
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xe0], r15
mov eax, 1
jmp 0x140048bac
xor eax, eax
mov rdx, r12
not rdx
shr rdx, 0x3f
mov qword [rsp + 0xd8], rax
lea rcx, [rsp + 0x130]
mov r8, r12
lea r9, [rsp + 0xd0]
call fcn.140036e60
cmp qword [rsp + 0x130], 0
jne 0x1400497f6
mov rsi, qword [rsp + 0x138]
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xb0], r12
mov rdi, r15
cmp r15, r12
jne 0x140048c2d
lea rcx, [rsp + 0xb0]
mov rdx, r15
call fcn.140036f00
mov rdi, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xb8]
mov byte [rsi + rdi], 0
inc rdi
mov qword [rsp + 0xc0], rdi
cmp r12, rdi
jbe 0x140048c80
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rsi
test rdi, rdi
je 0x140048c67
mov r9, rdi
call sub.KERNEL32.dll_HeapReAlloc
mov rsi, rax
test rax, rax
jne 0x140048c80
jmp 0x1400497ff
call sub.KERNEL32.dll_HeapFree
mov esi, 1
nop word cs:[rax + rax]
movzx eax, byte [0x14017a148]
mov edx, 0x30
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov r12, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14017a0c8]
nop dword [rax]
mov rcx, rax
inc rcx
je 0x1400497ff
lock cmpxchg qword [0x14017a0c8], rcx
jne 0x140048cc0
mov qword [r12 + 0x10], rcx
mov byte [r12 + 0x28], 0
lock inc qword [r12]
jle 0x1400497ff
movzx eax, byte [0x14017a148]
mov edx, 0x30
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmmword [rax + 0x10], xmm6
mov qword [rsp + 0xd0], rax
lock inc qword [rax]
jle 0x1400497ff
movzx eax, byte [0x14017a0d8]
test al, al
je 0x140048da0
mov byte [0x14017a0d8], 1
call fcn.1400dd1c0
test rax, rax
je 0x1400497ff
mov rsi, qword [rax]
mov qword [rax], 0
test rsi, rsi
je 0x140048da0
lock inc qword [rsi]
jle 0x1400497ff
mov byte [0x14017a0d8], 1
call fcn.1400dd1c0
test rax, rax
je 0x1400497e6
mov rcx, qword [rax]
mov qword [rax], rsi
test rcx, rcx
mov qword [rsp + 0x110], rsi
jne 0x140048ddd
jmp 0x140048de8
movzx eax, byte [0x14017a0d8]
test al, al
je 0x140048f2b
mov byte [0x14017a0d8], 1
call fcn.1400dd1c0
test rax, rax
je 0x1400497ff
mov rcx, qword [rax]
mov qword [rax], 0
xor esi, esi
test rcx, rcx
mov qword [rsp + 0x110], rsi
je 0x140048de8
lock dec qword [rcx]
jne 0x140048de8
call fcn.14004b220
mov rsi, qword [rsp + 0xd0]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x140048e04
lock inc qword [rcx + 0x18]
jle 0x1400497d9
movzx eax, byte [0x14017a148]
mov edx, pe_nt_image_headers64
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov qword [rax], r12
mov qword [rax + 8], rdi
mov rcx, qword [rsp + 0x110]
mov qword [rax + 0x10], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x18], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 0x20], rcx
mov rcx, qword [rsp + 0xa8]
mov qword [rax + 0x28], rcx
mov rcx, qword [rsp + 0x150]
mov qword [rax + 0x30], rcx
mov rcx, qword [rsp + 0x128]
mov qword [rax + 0x38], rcx
movdqa xmm0, xmmword [rsp + 0x200]
movdqa xmm1, xmmword [rsp + 0x210]
movaps xmm2, xmmword [rsp + 0x220]
movaps xmm3, xmmword [rsp + 0x230]
movdqu xmmword [rax + 0x40], xmm0
movdqu xmmword [rax + 0x50], xmm1
movups xmmword [rax + 0x60], xmm2
movups xmmword [rax + 0x70], xmm3
mov rcx, qword [rsp + 0x100]
mov rdx, rax
lea r8, [0x140115fd8]
call fcn.1400dcf90
test rax, rax
jne 0x140049591
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], rsi
mov qword [rsp + 0x170], rdx
mov rcx, rdx
call sub.KERNEL32.dll_CloseHandle
lock dec qword [r12]
jne 0x140048eff
mov rcx, qword [rsp + 0x160]
call fcn.14004b270
mov rax, qword [rsp + 0x168]
lock dec qword [rax]
mov r15, qword [rsp + 0x90]
jne 0x1400486a0
lea rcx, [rsp + 0x168]
call fcn.14004b2d0
jmp 0x1400486a0
xor eax, eax
mov qword [rsp + 0x110], rax
mov rsi, qword [rsp + 0xd0]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
jne 0x140048df9
jmp 0x140048e04
mov rax, qword [rsp + 0x200]
lock dec qword [rax]
jne 0x140048f6a
lea rcx, [rsp + 0x200]
call fcn.14004af80
mov r13, r15
sub r14, rbx
je 0x140048f9c
shr r14, 5
jmp 0x140048f89
add rbx, 0x20
dec r14
je 0x140048f9c
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x140048f80
mov rcx, rbx
call fcn.14004af80
jmp 0x140048f80
cmp qword [rsp + 0x108], 0
je 0x140048fbd
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, qword [rsp + 0xa0]
call sub.KERNEL32.dll_HeapFree
sub r15, r13
je 0x140048fed
shr r15, 4
jmp 0x140048fd9
add r13, 0x10
dec r15
je 0x140048fed
mov rax, qword [r13]
lock dec qword [rax]
jne 0x140048fd0
mov rcx, r13
call fcn.14004af80
jmp 0x140048fd0
cmp qword [rsp + 0xf0], 0
je 0x14004900e
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, qword [rsp + 0xe8]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x80]
mov qword [rax + 8], rcx
mov qword [rax], 3
mov rbx, qword [rsp + 0x98]
mov rsi, qword [rbx + 0x18]
test rsi, rsi
je 0x140049066
mov rdi, qword [rbx + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140049066
cmp qword [rdi + 0x10], 0x11
jb 0x140049055
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rbx + 0x28]
test rsi, rsi
je 0x14004909b
mov rdi, qword [rbx + 0x30]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14004909b
cmp qword [rdi + 0x10], 0x11
jb 0x14004908a
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rbx + 0x38]
test rsi, rsi
je 0x1400490d0
mov rdi, qword [rbx + 0x40]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400490d0
cmp qword [rdi + 0x10], 0x11
jb 0x1400490bf
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rbx + 0x48]
test rsi, rsi
je 0x140049105
mov rdi, qword [rbx + 0x50]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140049105
cmp qword [rdi + 0x10], 0x11
jb 0x1400490f4
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
movaps xmm6, xmmword [rbp + 0x800]
movaps xmm7, xmmword [rbp + 0x810]
movaps xmm8, xmmword [rbp + 0x820]
lea rsp, [rbp + 0x838]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [rsp + 0x200]
xor edx, edx
mov r8, rdi
call fcn.14004dc90
mov rax, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x228]
sub rax, rdx
cmp rax, rdi
jb 0x1400497a5
xorps xmm6, xmm6
jmp 0x14004919c
mov rbx, qword [rsp + 0x220]
mov rax, r14
shl rax, 4
mov qword [rbx + rax], r15
mov byte [rbx + rax + 8], r12b
inc r14
mov qword [rsp + 0x228], r14
dec rdi
je 0x140047c38
mov ecx, 0x40
call fcn.14004a9e0
mov rbx, rax
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
mov r14, rax
test r13b, r13b
je 0x140049210
test r14, r14
je 0x1400497ff
mov qword [r14], rbx
mov qword [r14 + 8], 0x40
movzx eax, byte [0x14017a148]
mov edx, 0x200
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov r15, rax
and r15, 0xffffffffffffff80
sub r15, 0xffffffffffffff80
xor r12d, r12d
jmp 0x14004924e
test r14, r14
je 0x1400497ff
mov qword [r14], rbx
mov qword [r14 + 8], 0x40
movzx eax, byte [0x14017a148]
mov edx, 0x200
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov r15, rax
and r15, 0xffffffffffffff80
sub r15, 0xffffffffffffff80
mov r12b, 1
mov qword [r15 - 8], rax
mov qword [r15], 1
mov qword [r15 + 8], 1
mov qword [r15 + 0x80], r14
movaps xmmword [r15 + 0x100], xmm6
lock inc qword [r15]
jle 0x1400497ff
mov rdx, qword [rsp + 0x210]
cmp rdx, qword [rsp + 0x200]
jne 0x1400492a1
lea rcx, [rsp + 0x200]
call fcn.14004d830
mov rdx, qword [rsp + 0x210]
mov rax, qword [rsp + 0x208]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], r15
mov qword [rax + rcx + 8], rbx
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], r12b
inc rdx
mov qword [rsp + 0x210], rdx
mov r14, qword [rsp + 0x228]
cmp r14, qword [rsp + 0x218]
jne 0x140049170
lea rcx, [rsp + 0x218]
mov rdx, r14
call fcn.14004d8d0
mov r14, qword [rsp + 0x228]
jmp 0x140049170
mov qword [rsp + 0x80], r15
lea rcx, [rsp + 0x200]
xor edx, edx
mov r15, qword [rsp + 0x88]
mov r8, r15
call fcn.14004dc90
mov rax, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x228]
sub rax, rdx
mov rdi, r15
cmp rax, r15
jae 0x14004938c
lea rcx, [rsp + 0x218]
mov rdi, qword [rsp + 0x88]
mov r8, rdi
call fcn.1400d3b00
jmp 0x14004938c
mov rcx, qword [rsp + 0x220]
mov rax, rdx
shl rax, 4
mov qword [rcx + rax], r13
mov byte [rcx + rax + 8], 0
inc rdx
mov qword [rsp + 0x228], rdx
dec rdi
je 0x1400494ae
mov ecx, 0x40
call fcn.14004a9e0
mov r15, rax
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov r12, rax
mov qword [rax], r15
mov qword [rax + 8], 0x40
movzx eax, byte [0x14017a148]
mov edx, 0x200
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400497ff
mov r13, rax
and r13, 0xffffffffffffff80
mov qword [r13 + 0x78], rax
mov qword [r13 + 0x80], 1
mov qword [r13 + 0x88], 1
mov qword [r13 + 0x100], r12
pxor xmm0, xmm0
movdqa xmmword [r13 + 0x180], xmm0
lock inc qword [r13 + 0x80]
jle 0x1400497ff
mov rdx, qword [rsp + 0x210]
cmp rdx, qword [rsp + 0x200]
jne 0x140049449
lea rcx, [rsp + 0x200]
call fcn.14004d830
mov rdx, qword [rsp + 0x210]
sub r13, 0xffffffffffffff80
mov rax, qword [rsp + 0x208]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], r13
mov qword [rax + rcx + 8], r15
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], 0
inc rdx
mov qword [rsp + 0x210], rdx
mov rdx, qword [rsp + 0x228]
cmp rdx, qword [rsp + 0x218]
jne 0x140049360
lea rcx, [rsp + 0x218]
call fcn.14004d8d0
mov rdx, qword [rsp + 0x228]
jmp 0x140049360
mov r13, rcx
mov qword [rsp + 0x90], rdx
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0xf0], rax
mov r15, qword [rsp + 0x80]
jmp 0x140047cd0
mov rax, qword [rsp + 0xf8]
mov qword [rax], 1
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x14004950f
test rcx, rcx
je 0x14004950f
mov r8, qword [rsp + 0x190]
mov rcx, qword [0x14017a0c0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x1b0]
lock dec qword [rax]
jne 0x140049561
lea rcx, [rsp + 0x1b0]
call fcn.14004af80
mov rax, qword [rsp + 0x1a0]
lock dec qword [rax]
je 0x14004956f
mov rax, qword [rsp + 0x1d0]
lock dec qword [rax]
jne 0x14004958a
mov rcx, qword [rsp + 0x1d0]
call fcn.14004aff0
sub r14, rbx
jne 0x1400495df
jmp 0x14004960c
mov rax, qword [rsp + 0x1a0]
lock dec qword [rax]
jne 0x140049538
lea rcx, [rsp + 0x1a0]
call fcn.14004af80
mov rax, qword [rsp + 0x1d0]
lock dec qword [rax]
je 0x140049546
sub r14, rbx
jne 0x1400495df
jmp 0x14004960c
lock dec qword [rsi]
jne 0x1400495aa
lea rcx, [rsp + 0xd0]
mov rsi, rdx
call fcn.14004b2d0
mov rdx, rsi
lock dec qword [r12]
jne 0x1400495bf
mov rcx, r12
mov rsi, rdx
call fcn.14004b270
mov rdx, rsi
mov rax, qword [rsp + 0xf8]
mov qword [rax], 2
mov qword [rax + 8], rdx
mov r15, qword [rsp + 0x90]
sub r14, rbx
je 0x14004960c
shr r14, 5
jmp 0x1400495f9
add rbx, 0x20
dec r14
je 0x14004960c
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x1400495f0
mov rcx, rbx
call fcn.14004af80
jmp 0x1400495f0
cmp qword [rsp + 0x108], 0
je 0x14004962d
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, qword [rsp + 0xa0]
call sub.KERNEL32.dll_HeapFree
sub r15, r13
mov rsi, qword [rsp + 0x148]
je 0x14004965d
shr r15, 4
jmp 0x140049649
add r13, 0x10
dec r15
je 0x14004965d
mov rax, qword [r13]
lock dec qword [rax]
jne 0x140049640
mov rcx, r13
call fcn.14004af80
jmp 0x140049640
cmp qword [rsp + 0xf0], 0
je 0x14004967e
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, qword [rsp + 0xe8]
call sub.KERNEL32.dll_HeapFree
lock dec qword [rsi]
mov r15, qword [rsp + 0x80]
jne 0x14004976c
mov rax, qword [r15 + 0x208]
test rax, rax
je 0x14004976c
mov rdi, qword [r15 + 0x200]
shl rax, 3
lea rbx, [rax + rax*4]
mov r14d, 4
xor r12d, r12d
xor r13d, r13d
jmp 0x1400496d4
add r12, 0x28
sub r14, 0xffffffffffffff80
inc r13
cmp rbx, r12
je 0x14004976c
mov eax, 3
xchg qword [rdi + r12 + 0x10], rax
cmp rax, 2
jne 0x1400496c0
cmp qword [r15 + 0x1e8], r13
jbe 0x1400497ff
mov r15, qword [r15 + 0x1e0]
lea rsi, [r15 + r14]
xor eax, eax
mov cl, 1
lock cmpxchg byte [r15 + r14], cl
jne 0x14004975a
cmp byte [r15 + r14 + 1], 0
je 0x140049739
lea rcx, [r15 + r14]
add rcx, 0xfffffffffffffffc
mov byte [r15 + r14 + 1], 0
lock inc dword [r15 + r14 - 4]
call fcn.140107f78
mov rax, qword [rsp + 0x80]
lock dec qword [rax + 0x1f0]
xor eax, eax
xchg byte [rsi], al
cmp al, 2
mov r15, qword [rsp + 0x80]
jne 0x1400496c0
mov rcx, rsi
call fcn.140107f78
jmp 0x1400496c0
mov rcx, rsi
call fcn.1400e7c70
cmp byte [r15 + r14 + 1], 0
jne 0x140049710
jmp 0x140049739
lock dec qword [r15]
mov rbx, qword [rsp + 0x98]
jne 0x140049031
mov rcx, r15
call fcn.14004aff0
jmp 0x140049031
lea rcx, [rsp + 0x200]
call fcn.14004a950
mov rdx, qword [rsp + 0x210]
jmp 0x140047f4d
lea rcx, [rsp + 0x218]
mov r8, rdi
call fcn.1400d3b00
jmp 0x14004915d
shl rcx, 1
test rcx, rcx
je 0x140047b84
mov rcx, qword [0x14017a0c0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140047b84
add rcx, 0x10
xor edx, edx
call fcn.1400e3890
ud2
lock dec qword [rsi]
jne 0x1400497ff
mov rcx, rsi
call fcn.1400e6cf0
ud2
cmp qword [rsp + 0x138], 0
ud2