Function at 0x14005f080
Capabilities:
Allocate or change rwx memory

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x118
movdqa xmmword [rsp + 0x100], xmm12
movdqa xmmword [rsp + 0xf0], xmm11
movdqa xmmword [rsp + 0xe0], xmm10
movdqa xmmword [rsp + 0xd0], xmm9
movdqa xmmword [rsp + 0xc0], xmm8
movdqa xmmword [rsp + 0xb0], xmm7
movdqa xmmword [rsp + 0xa0], xmm6
mov r14, r9
mov esi, r8d
mov r11, rdx
mov rdi, rcx
mov r15, qword [rsp + 0x188]
mov rbp, qword [rsp + 0x180]
mov rax, qword [0x14013b028]
xor rax, rsp
mov qword [rsp + 0x98], rax
mov byte [r15], 0
cmp byte [rcx + 0x1c], 0
je 0x14005fa73
cmp rbp, 0x4000
ja 0x14005f599
mov rcx, qword [rdi]
lea rax, [0x14012a330]
cmp rcx, rax
je 0x14005f1c2
test rcx, rcx
je 0x14005f1bf
xor edx, edx
xor ebx, ebx
mov r8, rcx
mov r9, qword [rcx]
mov rcx, qword [rcx + 8]
mov r10d, dword [r8 + 0x18]
test r10d, 0x3ffe
je 0x14005f240
test r10d, 0x7ffc000
jne 0x14005f320
test r9, r9
jne 0x14005f320
or r10d, 1
mov dword [r8 + 0x18], r10d
mov r9d, dword [rdi + 0x1c]
movzx r10d, r9b
and r9d, 0xffffff00
add r10d, r9d
add r10d, 0x100
mov dword [rdi + 0x1c], r10d
add r9d, 0x100
je 0x140060014
mov qword [r8 + 8], 0
mov r8, rdx
mov rdx, r8
test rcx, rcx
jne 0x14005f140
test rbx, rbx
jne 0x14005f331
mov qword [rdi], rax
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x14005f278
mov rax, qword [rbx + 8]
mov qword [rdi + 8], rax
cmp qword [rbx], 0
je 0x14005f25a
mov qword [rbx + 8], 0
mov rax, rbx
and rax, 0xffffffffffe00000
inc word [rax + 0x1012]
mov rax, qword [rbx + 0x10]
mov ecx, dword [rax + 0x18]
mov edx, dword [rax + 0x1c]
movzx edx, dl
shl edx, 0xc
imul rdx, qword [rax + 0x20]
shr rdx, 0x2a
mov eax, dword [rbx + 0x18]
shr eax, 0xe
and eax, 0x1fff
sub rdx, rax
imul rcx, rdx
add rcx, 0xfff
and rcx, 0xfffffffffffff000
sub qword [r11 + 0x14d8], rcx
jmp 0x14005f334
test r9, r9
je 0x14005f588
mov r9, qword [rdi + 8]
mov qword [r8 + 8], r9
mov qword [rdi + 8], r8
jmp 0x14005f1ab
mov rax, qword [rdi + 0x10]
mov qword [rbx + 8], rax
mov qword [rdi + 0x10], rbx
mov rax, rbx
mov rbx, qword [rdi + 8]
test rbx, rbx
jne 0x14005f1cf
jmp 0x14005f290
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x14005f599
xor ebx, ebx
test rbx, rbx
jne 0x14005f1cf
test sil, 0x20
jne 0x14005f30e
mov rcx, qword [rax + 8]
mov qword [rdi + 0x10], rcx
mov rcx, qword [rax + 0x10]
mov edx, dword [rcx + 0x1c]
movzx edx, dl
shl edx, 0xc
imul rdx, qword [rcx + 0x20]
shr rdx, 0x1c
mov ecx, 0xf8003fff
and ecx, dword [rax + 0x18]
and edx, 0x7ffc000
or ecx, edx
mov dword [rax + 0x18], ecx
mov rcx, rax
and rcx, 0xffffffffffe00000
inc word [rcx + 0x1012]
mov qword [rax + 8], 0
mov byte [r15], 1
mov rbx, rax
jmp 0x14005f334
test rbx, rbx
cmove rbx, r8
test rdx, rdx
jne 0x14005f302
mov qword [r8 + 8], 0
jmp 0x14005f1ae
mov qword [rdx + 8], r8
jmp 0x14005f2f5
mov qword [rbx + 0x20], r14
jmp 0x14005f345
xor r14d, r14d
jmp 0x14005f3a1
xor ecx, ecx
jmp 0x14005f384
test r9, r9
je 0x14005f2e9
test rbx, rbx
jne 0x14005f71b
mov rbx, r8
mov qword [rdi], rbx
mov rax, rdi
mov qword [rax], rbx
mov ebp, dword [rbx + 0x18]
test ebp, 0x8000000
jne 0x14005f308
mov r14, qword [rbx]
test r14, r14
je 0x14005f405
mov r8, qword [r14]
test r8, r8
je 0x14005f316
mov rcx, r8
bswap rcx
mov esi, dword [rax + 0x18]
mov rax, rcx
xor rax, r14
cmp rax, 0x1fffff
ja 0x140060017
mov eax, ecx
and eax, 0x1fc000
je 0x140060017
prefetcht0 byte [rcx]
mov qword [rbx], rcx
lea eax, [rbp + 2]
and eax, 0x3ffe
and ebp, 0xffffc001
or ebp, eax
mov dword [rbx + 0x18], ebp
mov qword [r14], 0
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.1400a1ff0
mov rax, r14
movaps xmm6, xmmword [rsp + 0xa0]
movaps xmm7, xmmword [rsp + 0xb0]
movaps xmm8, xmmword [rsp + 0xc0]
movaps xmm9, xmmword [rsp + 0xd0]
movaps xmm10, xmmword [rsp + 0xe0]
movaps xmm11, xmmword [rsp + 0xf0]
movaps xmm12, xmmword [rsp + 0x100]
add rsp, 0x118
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsp + 0x38], esi
mov rax, rbx
and rax, 0xffffffffffe00000
mov r12d, ebx
shl r12d, 9
and r12d, 0x3fffc000
mov qword [rsp + 0x58], rdi
mov edi, dword [rdi + 0x18]
shr ebp, 1
and ebp, 0x1fff
imul ebp, edi
add r12, rax
lea rax, [r12 + rbp]
lea r14, [r12 + rbp]
add r14, 0xffffffffffe00fff
and r14, 0xfffffffffffff000
mov qword [rsp + 0x28], rax
lea r13, [rdi + rax]
add r13, 0xffffffffffe00fff
and r13, 0xfffffffffffff000
mov r15, r13
sub r15, r14
lock inc qword [r11 + 0x14a8]
mov rcx, r14
mov rdx, r15
mov r8d, 0x1000
mov r9d, 4
mov rsi, r11
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x140060048
mov rdx, r15
lock xadd qword [rsi + 0x1478], rdx
lea r14, [r12 + rbp]
add r14, 0xffffffffffe00000
mov rax, qword [rsp + 0x28]
lea rcx, [rdi + rax]
add rcx, 0xffffffffffe00000
add rdx, r15
mov rax, qword [rsi + 0x1480]
cmp rax, rdx
mov r8, rdx
cmova r8, rax
lock cmpxchg qword [rsi + 0x1480], r8
jne 0x14005f4c6
mov r9d, dword [rbx + 0x18]
lea eax, [r9 + 2]
and eax, 0x3ffe
mov r8d, r9d
and r8d, 0xffffc001
or r8d, eax
mov dword [rbx + 0x18], r8d
mov rax, r13
sub rax, r14
mov r11, qword [rsp + 0x58]
mov r10d, dword [r11 + 0x18]
xor edx, edx
div r10
shl eax, 0xe
sub r9d, eax
and r9d, 0x7ffc000
and r8d, 0xf8003fff
or r8d, r9d
mov dword [rbx + 0x18], r8d
mov eax, dword [r11 + 0x18]
add rax, rcx
cmp rax, r13
ja 0x14005f56f
xor r8d, r8d
nop word [rax + rax]
mov rdx, rax
mov qword [rcx], 0
cmp qword [rbx], 0
je 0x14005f57f
mov rax, rcx
bswap rax
mov qword [r8], rax
mov eax, dword [r11 + 0x18]
add rax, rdx
mov r8, rcx
mov rcx, rdx
cmp rax, r13
jbe 0x14005f540
mov r8d, dword [rbx + 0x18]
or r8d, 0x10000000
mov dword [rbx + 0x18], r8d
jmp 0x14005f3a1
mov qword [rbx], rcx
and byte [rbx + 0x1b], 0xef
jmp 0x14005f559
mov r9, qword [rdi + 0x10]
mov qword [r8 + 8], r9
mov qword [rdi + 0x10], r8
jmp 0x14005f1ab
test sil, 0x20
jne 0x14005f30e
mov eax, dword [rdi + 0x1c]
movzx r13d, al
shl r13d, 0xc
add r13d, 0x3000
and r13d, 0x1fc000
mov r8, qword [r11 + 0x14f0]
lea r9, [r8 + rbp]
dec r9
mov r12, rbp
neg r12
and r9, r12
lea rax, [r9 + r13]
cmp rax, qword [r11 + 0x14f8]
ja 0x14005f760
mov rax, 0xffffffffffe00000
mov rcx, r8
and rcx, rax
shr r8d, 9
and r8d, 0xfe0
or r8, rcx
mov edx, 0x1000
or r8, 0x1000
and rax, r9
mov ecx, r9d
shr ecx, 0xe
and ecx, 0x7f
mov r10d, ecx
shl r10d, 5
lea rbx, [rax + r10]
add rbx, 0x1000
cmp r8, rbx
jb 0x140060099
add r9, r13
mov qword [r11 + 0x14f0], r9
pxor xmm0, xmm0
movdqa xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
xor r8d, r8d
cmp dword [rdi + 0x18], 0x10001
setae r8b
shl r8d, 0x1b
mov r9d, 0xf7ffffff
and r9d, dword [rbx + 0x18]
or r9d, r8d
mov dword [rbx + 0x18], r9d
mov r8d, dword [rdi + 0x1c]
movzx r8d, r8b
shl r8d, 0xc
imul r8, qword [rdi + 0x20]
shr r8, 0x1c
and r8d, 0x7ffc000
and r9d, 0xf8003fff
or r9d, r8d
mov dword [rbx + 0x18], r9d
mov r8, rbx
and r8, 0xffffffffffe00000
inc word [r8 + 0x1012]
mov qword [rbx + 8], 0
mov r8d, dword [rdi + 0x1c]
test r8b, r8b
je 0x14005f6f7
or rax, rdx
movzx edx, r8b
lea edx, [rdx*8 + 0x18]
and edx, 0xffffffe0
shl ecx, 5
add rax, rcx
add rax, 0x1e
mov cl, 0x40
xor r8d, r8d
movzx r9d, byte [rax + r8]
and r9b, 0x80
add r9b, cl
mov byte [rax + r8], r9b
add r8, 0x20
inc cl
cmp edx, r8d
jne 0x14005f6d8
mov r8d, dword [rdi + 0x1c]
movzx eax, r8b
shl eax, 0xc
imul rax, qword [rdi + 0x20]
shr rax, 0x2a
cmp eax, 0x400
ja 0x140060096
mov byte [r15], 1
jmp 0x14005f334
mov qword [r8 + 8], rbx
mov qword [rdx + 8], rcx
jmp 0x14005f32e
mov rax, qword [0x14013d518]
and rax, r8
mov ecx, 2
cmp rax, qword [0x14013d510]
je 0x14005f85f
jmp 0x1400600b3
mov eax, 3
jmp 0x14005f7bf
cmp rax, qword [0x14013d500]
jne 0x14005f728
xor ecx, ecx
jmp 0x14005f85f
mov ebx, esi
mov eax, dword [rdi + 0x18]
lea rcx, [rsp + 0x80]
mov qword [rcx + 8], rax
movabs rsi, 0x657a69736e617073
lea rax, [rsi + 0x60dfc00]
mov qword [rcx], rax
mov qword [rsp + 0x28], r11
call fcn.140001e40
lea rcx, [rsp + 0x70]
mov qword [rcx + 8], r13
mov qword [rcx], rsi
call fcn.140001e40
mov rax, qword [rsp + 0x28]
mov rdx, qword [rax + 0x14e8]
cmp byte [rax + 6], 0
jne 0x14005f749
cmp byte [rax + 5], 1
mov eax, 2
sbb rax, 0
dec eax
imul rax, rax, 0x420
lea rcx, [0x14014cf10]
add rcx, rax
test rdx, rdx
mov esi, ebx
je 0x14005f7fa
mov r8d, 0x200000
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x38]
mov rbx, rdx
call fcn.1400116f0
mov rcx, qword [rsp + 0x38]
test al, al
jne 0x14005f810
mov edx, 0x200000
call fcn.140001ef0
mov rbx, rax
test rax, rax
je 0x1400600e6
movabs rcx, 0xfffffffc00000000
mov rax, rbx
sub rax, 0xffffffffffe00000
mov qword [rsp + 0x38], rax
mov r11, qword [rsp + 0x28]
jae 0x14005f9ac
lea rax, [r11 + 0x1508]
mov qword [rsp + 0x68], rax
mov r8, rbx
mov qword [rsp + 0x30], rbx
mov rax, r8
and rax, rcx
mov ecx, 1
cmp rax, qword [0x14013d508]
jne 0x14005f750
mov rdx, r8
sub rdx, rax
shl ecx, 0xe
lea rax, [0x14013d5f4]
add rcx, rax
shr rdx, 0x15
mov word [rcx + rdx*2], 0xfffe
lock add qword [r11 + 0x1488], 0x200000
lea rax, [r8 + 0x200000]
mov qword [rsp + 0x40], rax
mov qword [r11 + 0x14e8], rax
mov eax, 0x4000
add rax, r8
xor ecx, ecx
cmp byte [r11], 0
setne cl
shl ecx, 0xf
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x50], rcx
add rax, rcx
mov qword [r11 + 0x14f0], rax
lea rax, [r8 + 0x1fc000]
mov qword [r11 + 0x14f8], rax
lock inc qword [r11 + 0x14a8]
mov rbx, r8
lea rcx, [r8 + 0x1000]
mov edx, 0x1000
mov qword [rsp + 0x48], rcx
mov r8d, 3
call fcn.140001e50
mov r11, qword [rsp + 0x28]
cmp byte [r11 + 6], 0
jne 0x14005f92f
cmp byte [r11 + 5], 0
je 0x14005f92f
lock inc qword [r11 + 0x14a8]
lea rcx, [rbx + 0x2000]
mov edx, 0x1000
mov r8d, 3
call fcn.140001e50
mov r11, qword [rsp + 0x28]
mov r8, rbx
mov qword [rbx + 0x1000], r11
mov dword [rbx + 0x1010], 0
mov qword [rbx + 0x1008], 0
mov rax, qword [r11 + 0x1500]
test rbx, rbx
je 0x1400600aa
lea rcx, [rax + 8]
test rax, rax
cmove rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x48]
mov qword [rcx], rax
mov qword [r11 + 0x1500], rax
mov word [rax + 0x10], 1
mov rbx, qword [rsp + 0x30]
movabs rcx, 0xfffffffc00000000
cmp byte [r11], 2
je 0x14006010b
mov rax, qword [rsp + 0x40]
mov r8, rax
cmp rax, qword [rsp + 0x38]
jb 0x14005f847
mov al, byte [r11]
and rcx, rbx
cmp rcx, qword [0x14013d508]
je 0x14005f9c4
cmp rcx, qword [0x14013d500]
jne 0x14005fa07
xor ecx, ecx
test al, al
setne cl
shl ecx, 0xf
or rcx, 0x4000
add rcx, rbx
je 0x1400600c0
dec rbp
mov r8, qword [r11 + 0x14f0]
add rbp, r8
mov r9, rbp
and r9, r12
lea rax, [r9 + r13]
cmp rax, qword [r11 + 0x14f8]
jbe 0x14005f5e4
jmp 0x1400600a7
mov rcx, qword [0x14013d518]
and rcx, rbx
cmp rcx, qword [0x14013d510]
je 0x14005f9c4
int3
cmp rax, qword [0x14013d500]
je 0x140060230
mov rax, qword [0x14013d518]
and rax, r13
cmp rax, qword [0x14013d510]
jne 0x14006022d
mov rcx, r13
sub rcx, rax
shr rcx, 0x15
lea rax, [0x14013d5f4]
lea rax, [rax + rcx*2]
add rax, 0x8000
mov rsi, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x40]
jmp 0x14005fb93
mov r12d, 3
jmp 0x14005fac9
test sil, 0x20
jne 0x14005f30e
cmp r14, 0x7fe00001
jae 0x1400600b6
lea rcx, [r11 + 0x40]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x28], r11
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rax, qword [rsp + 0x28]
lea rbx, [r14 + rbp]
add rbx, 0x203fff
and rbx, 0xffffffffffe00000
cmp byte [rax + 6], 0
jne 0x14005fa6b
cmp byte [rax + 5], 1
mov r12d, 2
sbb r12d, 0
mov dword [rsp + 0x38], esi
lea eax, [r12 - 1]
imul rax, rax, 0x420
lea rcx, [0x14014cf10]
add rcx, rax
mov rdx, rbx
call fcn.140001ef0
test rax, rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x58], rdi
je 0x14006021b
mov r13, rax
mov rsi, qword [rsp + 0x28]
lock add qword [rsi + 0x1490], rbx
lock inc qword [rsi + 0x14a8]
lea rcx, [rax + 0x1000]
mov edx, 0x1000
mov qword [rsp + 0x30], rcx
mov r8d, 3
call fcn.140001e50
cmp r12d, 2
jne 0x14005fb57
lock inc qword [rsi + 0x14a8]
lea rcx, [r13 + 0x2000]
mov edx, 0x1000
mov r8d, 3
call fcn.140001e50
movabs rax, 0xfffffffc00000000
and rax, r13
cmp rax, qword [0x14013d508]
jne 0x14005fa1d
mov rax, r13
shr rax, 0x15
and eax, 0x1fff
lea rcx, [0x14013d5f4]
lea rax, [rcx + rax*2]
add rax, 0x4000
mov rsi, qword [rsp + 0x28]
mov r11, qword [rsp + 0x30]
lea rdx, [r14 + 0xfff]
and rdx, 0xfffffffffffff000
mov rcx, r13
add rcx, rbp
add rbp, 0xffffffffffffc000
lea r8, [rbx - 1]
shr r8, 0x15
inc r8d
movzx r8d, r8w
cmp r8, 1
adc r8, 0
lea r9d, [r8 + 7]
and r9d, 0x1fff8
dec r8
movq xmm0, r8
pshufd xmm0, xmm0, 0x44
xor r10d, r10d
movdqa xmm1, xmmword [0x14012ab60]
movdqa xmm2, xmmword [0x14012ab70]
movdqa xmm3, xmmword [0x14012ab80]
movdqa xmm4, xmmword [0x14012ab90]
movdqa xmm5, xmmword [0x14012aba0]
pxor xmm0, xmm5
pcmpeqd xmm6, xmm6
movq xmm7, r10
pshufd xmm7, xmm7, 0x44
movdqa xmm8, xmm7
por xmm8, xmm4
pxor xmm8, xmm5
movdqa xmm10, xmm8
pcmpgtd xmm10, xmm0
pshufd xmm9, xmm10, 0xa0
pshuflw xmm11, xmm9, 0xe8
pcmpeqd xmm8, xmm0
pshufd xmm8, xmm8, 0xf5
pshuflw xmm12, xmm8, 0xe8
pand xmm12, xmm11
pshufd xmm10, xmm10, 0xf5
pshuflw xmm11, xmm10, 0xe8
por xmm11, xmm12
pxor xmm11, xmm6
packssdw xmm11, xmm11
movd r8d, xmm11
test r8b, 1
je 0x14005fc85
mov word [rax + r10*2], r10w
pand xmm8, xmm9
por xmm8, xmm10
packssdw xmm8, xmm8
pxor xmm8, xmm6
packssdw xmm8, xmm8
movd r8d, xmm8
shr r8d, 0x10
test r8b, 1
je 0x14005fcb7
lea r8d, [r10 + 1]
mov word [rax + r10*2 + 2], r8w
movdqa xmm9, xmm7
por xmm9, xmm3
pxor xmm9, xmm5
movdqa xmm10, xmm9
pcmpgtd xmm10, xmm0
pshufd xmm8, xmm10, 0xa0
pcmpeqd xmm9, xmm0
pshufd xmm9, xmm9, 0xf5
movdqa xmm11, xmm9
pand xmm11, xmm8
pshufd xmm10, xmm10, 0xf5
por xmm11, xmm10
packssdw xmm11, xmm11
pxor xmm11, xmm6
packssdw xmm11, xmm11
pextrw r8d, xmm11, 2
test r8b, 1
je 0x14005fd1b
lea r8d, [r10 + 2]
mov word [rax + r10*2 + 4], r8w
pshufhw xmm8, xmm8, 0x84
pshufhw xmm9, xmm9, 0x84
pand xmm9, xmm8
pshufhw xmm8, xmm10, 0x84
por xmm8, xmm9
pxor xmm8, xmm6
packssdw xmm8, xmm8
pextrw r8d, xmm8, 3
test r8b, 1
je 0x14005fd57
lea r8d, [r10 + 3]
mov word [rax + r10*2 + 6], r8w
movdqa xmm8, xmm7
por xmm8, xmm2
pxor xmm8, xmm5
movdqa xmm10, xmm8
pcmpgtd xmm10, xmm0
pshufd xmm9, xmm10, 0xa0
pshuflw xmm11, xmm9, 0xe8
pcmpeqd xmm8, xmm0
pshufd xmm8, xmm8, 0xf5
pshuflw xmm12, xmm8, 0xe8
pand xmm12, xmm11
pshufd xmm10, xmm10, 0xf5
pshuflw xmm11, xmm10, 0xe8
por xmm11, xmm12
pxor xmm11, xmm6
packssdw xmm11, xmm11
pextrw r8d, xmm11, 4
test r8b, 1
je 0x14005fdc3
lea r8d, [r10 + 4]
mov word [rax + r10*2 + 8], r8w
pand xmm8, xmm9
por xmm8, xmm10
packssdw xmm8, xmm8
pxor xmm8, xmm6
packssdw xmm8, xmm8
pextrw r8d, xmm8, 5
test r8b, 1
je 0x14005fdf2
lea r8d, [r10 + 5]
mov word [rax + r10*2 + 0xa], r8w
por xmm7, xmm1
pxor xmm7, xmm5
movdqa xmm9, xmm7
pcmpgtd xmm9, xmm0
pshufd xmm8, xmm9, 0xa0
pcmpeqd xmm7, xmm0
pshufd xmm7, xmm7, 0xf5
movdqa xmm10, xmm7
pand xmm10, xmm8
pshufd xmm9, xmm9, 0xf5
por xmm10, xmm9
packssdw xmm10, xmm10
pxor xmm10, xmm6
packssdw xmm10, xmm10
pextrw r8d, xmm10, 6
test r8b, 1
je 0x14005fe4d
lea r8d, [r10 + 6]
mov word [rax + r10*2 + 0xc], r8w
pshufhw xmm8, xmm8, 0x84
pshufhw xmm7, xmm7, 0x84
pand xmm7, xmm8
pshufhw xmm8, xmm9, 0x84
por xmm8, xmm7
pxor xmm8, xmm6
packssdw xmm7, xmm8
pextrw r8d, xmm7, 7
test r8b, 1
je 0x14005fe88
lea r8d, [r10 + 7]
mov word [rax + r10*2 + 0xe], r8w
add r10, 8
cmp r9, r10
jne 0x14005fc15
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r12
mov qword [r11], rsi
lea r10, [r11 + 0x20]
mov rax, rcx
and rax, 0xffffffffffe00000
mov r9d, ecx
shr r9d, 0xe
and r9d, 0x7f
mov r8d, r9d
shl r8d, 5
lea rbx, [rax + r8]
add rbx, 0x1000
cmp rbx, r10
jne 0x140060151
or rax, 0x1000
shl r9d, 5
or byte [rax + r9 + 0x1e], 0x40
mov al, byte [rbx + 0x3e]
and al, 0xc0
or al, 1
mov byte [rbx + 0x3e], al
lea r13, [rbx + 0x40]
mov dword [rbx + 0x58], edx
pxor xmm0, xmm0
movdqa xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
xor eax, eax
cmp edx, 0x10001
setae al
shl eax, 0x1b
mov r8d, 0xf7ffffff
and r8d, dword [rbx + 0x18]
or r8d, eax
mov dword [rbx + 0x18], r8d
lock inc qword [rsi + 0x14a8]
mov qword [rsp + 0x30], rcx
mov r8d, 0x1000
mov r9d, 4
mov r12, rdx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x140060181
mov rcx, r12
lock xadd qword [rsi + 0x1478], rcx
add rcx, r12
mov rax, qword [rsi + 0x1480]
cmp rax, rcx
mov rdx, rcx
cmova rdx, rax
lock cmpxchg qword [rsi + 0x1480], rdx
jne 0x14005ff62
mov r12, qword [rsp + 0x30]
mov qword [r12], 0
mov qword [rbx], r12
and byte [rbx + 0x1b], 0xef
lea rdi, [rbx + 0x68]
mov rax, qword [rsp + 0x40]
mov qword [rbx + 0x80], rax
mov qword [rbx + 0x88], rbp
mov qword [rbx + 0x78], r13
mov sil, 1
mov r13, qword [rsp + 0x48]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
test al, al
je 0x14006000a
test sil, sil
mov r11, qword [rsp + 0x28]
mov esi, dword [rsp + 0x38]
je 0x1400600c0
mov rax, qword [r11 + 0x1510]
mov qword [rdi], rax
test rax, rax
je 0x14005ffe0
mov qword [rax + 8], rdi
mov qword [rdi + 8], 0
mov qword [r11 + 0x1510], rdi
test rbx, rbx
je 0x1400600c0
mov rax, qword [rbx + 0x10]
mov byte [r15], 1
mov rdi, qword [rsp + 0x58]
jmp 0x14005f337
mov rcx, r13
call fcn.14005f010
jmp 0x14005ffbb
int3
movaps xmm0, xmmword [0x14011bb10]
lea rdi, [rsp + 0x80]
movaps xmmword [rdi], xmm0
lea rdx, str.first
mov rcx, rdi
call fcn.1400d64a0
mov rcx, rdi
call fcn.140001e40
mov rcx, rsi
call fcn.1400ff5d0
mov rcx, rsi
call fcn.1400f5f10
mov rcx, r14
mov rdx, r15
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14005f495
test byte [rsp + 0x38], 1
jne 0x14005f30e
lea rcx, [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rax, qword [rsp + 0x58]
mov edx, dword [rax + 0x18]
mov rcx, rsi
call fcn.1400ff640
int3
or byte [r8 + 0x1e], 0x80
add r8, 0x20
jmp 0x14005f629
int3
inc word [rax + 0x10]
jmp 0x14005f980
int3
test sil, 1
je 0x14006026d
mov byte [r15], 1
test sil, 1
jne 0x14005f30e
mov rsi, r11
lea rcx, [r11 + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rcx, rsi
mov rdx, r14
call fcn.1400f5e40
test sil, 1
mov r11, qword [rsp + 0x28]
jne 0x1400600c0
lea rcx, [r11 + 0x40]
mov rsi, r11
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov edx, 0x200000
mov rcx, rsi
call fcn.1400ff610
lock inc qword [r11 + 0x14a8]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rbx, r8
mov r8d, 3
call fcn.140001e50
mov rcx, qword [rsp + 0x28]
mov rdx, rbx
call fcn.1400f4340
movabs rcx, 0xfffffffc00000000
mov rbx, qword [rsp + 0x30]
mov r11, qword [rsp + 0x28]
jmp 0x14005f999
test byte [r11 + 0x3e], 0x40
jne 0x14006024c
mov r8d, ebx
sub r8d, r10d
shr r8d, 5
and r8b, 0x3f
or r8b, 0x80
mov r10, qword [rsp + 0x30]
mov byte [r10 + 0x3e], r8b
mov rsi, qword [rsp + 0x28]
jmp 0x14005fed5
mov qword [rsp + 0x50], r12
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
test al, al
jne 0x14006019f
mov rcx, qword [rsp + 0x48]
call fcn.14005f010
mov rsi, qword [rsp + 0x28]
mov rcx, rsi
call fcn.1400f5f10
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rsp + 0x30]
mov r12, qword [rsp + 0x50]
mov rdx, r12
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14005ff4c
test byte [rsp + 0x38], 1
je 0x14006025e
mov rsi, qword [rsp + 0x28]
lock inc qword [rsi + 0x14a8]
lea rcx, [0x14014cf10]
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x40]
mov r9, rdi
call fcn.140002b90
lock sub qword [rsi + 0x1490], rdi
jmp 0x140060224
test byte [rsp + 0x38], 1
je 0x14006024f
xor ebx, ebx
xor edi, edi
xor esi, esi
jmp 0x14005ffa9
int3
mov rax, r13
shr rax, 0x15
and eax, 0x1fff
lea rcx, [0x14013d5f4]
lea rax, [rcx + rax*2]
jmp 0x14005fa5c
int3
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x40]
call fcn.1400ff610
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x50]
call fcn.1400ff640
add r11, 0x40
mov rcx, r11
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rcx, r14
call fcn.1400ffd10
int3