Function at 0x140004785
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, qword [rdx + 8]
mov r11, rcx
lea rcx, [rsp + 0x20]
call fcn.1400038bf
mov rax, qword [rsp + 0x20]
xor edx, edx
mov rcx, qword [rsp + 0x28]
mov qword [rbx + 0x20], rdx
mov rdx, rax
shl rdx, 5
lea rdx, [rdx + rcx + 0x10c]
mov rdx, qword [r11 + rdx*8 + 8]
test rdx, rdx
mov qword [rbx + 0x18], rdx
je 0x14000403e
mov qword [rdx + 0x20], rbx
mov rdx, rax
shl rdx, 5
lea rdx, [rdx + rcx + 0x10c]
and ecx, 0x1f
mov qword [r11 + rdx*8 + 8], rbx
mov edx, 1
mov rbx, rdx
shl rbx, cl
mov ecx, eax
or dword [r11 + rax*4 + 0x804], ebx
and ecx, 0x1f
shl rdx, cl
or dword [r11 + 0x800], edx
add rsp, 0x30
pop rbx
ret
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rax, qword [rdx]
mov rbp, qword [rdx + 8]
add qword [rcx + 0x2080], rbp
and rax, 0xfffffffffffffffe
mov rsi, rcx
mov rbx, rdx
mov qword [rdx], rax
lea r12, [rcx + 0x20a0]
je 0x14000465e
mov rdi, rdx
mov rcx, r12
sub rdi, rax
mov rdx, rdi
sar rdx, 0xc
call fcn.140003d5d
test al, al
je 0x14000465e
test byte [rdi], 1
jne 0x14000465e
mov r13, qword [rdi + 8]
lea rax, [r13 - 0xfb1]
cmp rax, 0x3efff04e
ja 0x14000465e
sar rbx, 0xc
mov rdx, rdi
mov rcx, rsi
call fcn.1400044d5
add rbp, r13
mov rdx, rbx
mov rcx, r12
mov qword [rdi + 8], rbp
mov rbx, rdi
call fcn.140004576
cmp rbp, 0x3f000000
jle 0x14000465e
mov rdx, rdi
mov rcx, rsi
mov r8d, 0x3f000000
call fcn.140003f74
mov rdx, rdi
mov rcx, rsi
mov rbx, rax
call 0x140003ff4
mov rdi, qword [rbx + 8]
mov rcx, r12
lea r9, [rbx + rdi]
mov rbp, r9
sar rbp, 0xc
mov rdx, rbp
call fcn.140003d5d
test al, al
je 0x1400046da
test byte [r9], 1
jne 0x1400046da
mov r13, qword [r9 + 8]
cmp r13, 0xfb0
jle 0x1400046da
cmp rdi, 0x3effffff
jg 0x1400046da
mov rdx, r9
mov rcx, rsi
add rdi, r13
call fcn.1400044d5
mov qword [rbx + 8], rdi
mov rdx, rbp
mov rcx, r12
call fcn.140004576
cmp rdi, 0x3f000000
jle 0x1400046da
mov rdx, rbx
mov rcx, rsi
mov r8d, 0x3f000000
call fcn.140003f74
mov rcx, rsi
mov rdx, rax
call 0x140003ff4
mov rdx, rbx
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp 0x140003ff4
push rbx
sub rsp, 0x20
mov rbx, qword [rdx + 8]
mov r10, rcx
mov r11, rdx
sar rdx, 0xc
lea rcx, [rcx + 0x20a0]
call fcn.140004576
mov rax, qword [r10 + 0x2070]
mov r8d, 0x8000
mov rcx, r11
mov rdx, qword [r10 + 0x2078]
cmp rdx, rax
cmovl rdx, rax
sub rax, rbx
mov qword [r10 + 0x2070], rax
mov qword [r10 + 0x2078], rdx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140004762
lea rcx, str.virtualFree_failing_
call fcn.140003951
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
nop
add rsp, 0x20
pop rbx
ret
mov rax, qword [rdx + 8]
sub qword [rcx + 0x2088], rax
cmp rax, 0x3f000000
jg 0x140004780
jmp 0x1400045b1
jmp 0x1400046f1
sub rsp, 0x28
mov r8, rdx
mov r9, rcx
and r8, 0xfffffffffffff000
mov rax, qword [r8 + 8]
mov rcx, qword [r8 + 0x10]
cmp rax, 0xfb0
jle 0x1400047bb
cmp r9, rcx
je 0x140004848
mov rdx, r8
add rsp, 0x28
jmp fcn.140003923
cmp r9, rcx
je 0x1400047cc
mov rcx, r8
add rsp, 0x28
jmp fcn.140003909
mov r10, qword [r8 + 0x28]
sub qword [r9 + 0x2088], rax
mov qword [rdx], r10
mov qword [r8 + 0x28], rdx
mov rdx, qword [r8 + 0x30]
lea r10, [rdx + rax]
cmp rdx, rax
jl 0x140004822
cmp r10, 0xfb0
mov qword [r8 + 0x30], r10
jne 0x140004857
mov ecx, 0x10
cqo
idiv rcx
lea rcx, [r9 + rax*8]
mov rdx, r8
call fcn.14000383d
mov rcx, r9
mov qword [r8 + 8], 0x1000
add rsp, 0x28
jmp 0x1400045b1
cqo
mov r9d, 0x10
idiv r9
mov rdx, qword [rcx + rax*8]
test rdx, rdx
mov qword [r8 + 0x18], rdx
je 0x14000483e
mov qword [rdx + 0x20], r8
mov qword [rcx + rax*8], r8
mov qword [r8 + 0x30], r10
jmp 0x140004857
mov rdx, r8
mov rcx, r9
add rsp, 0x28
jmp 0x140004768
add rsp, 0x28
ret