Function at 0x1400adff0
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x478]
sub rsp, 0x578
mov qword [rbp + 0x370], 0xfffffffffffffffe
mov rax, qword [0x14016bb40]
xor rax, rsp
mov qword [rbp + 0x460], rax
mov r13, qword [rbp + 0x4c0]
mov rdi, qword [rbp + 0x4c8]
mov qword [rsp + 0x50], rdi
mov rsi, qword [rbp + 0x4d0]
mov qword [rbp + 0x50], rsi
mov rax, qword [rbp + 0x4d8]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x4f0]
mov qword [rbp - 0x10], rax
mov rbx, qword [rbp + 0x4f8]
mov qword [rsp + 0x48], rbx
mov qword [rbp + 0x3b0], rbx
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x2b8], rax
mov rax, qword [rbp + 0x508]
mov qword [rbp + 0x58], rax
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r15d, r15d
mov dword [rsp + 0x40], r15d
mov r12, rdi
mov eax, 0x10
mov r14d, 1
cmp byte [rbp + 0x510], r15b
cmovne r14d, eax
mov qword [rsp + 0x58], r14
cmp byte [rbp + 0x4e8], r15b
je 0x1400af53a
mov rbx, qword [r13 + 0x190]
mov qword [rbp - 0x48], rbx
sub rdi, rsi
mov qword [rbp - 0x50], rdi
or esi, 0xffffffff
cmp r12, rdi
jl 0x1400af51b
lea r10, [r13 + 0xb0]
lea rax, [r13 + 0x1b0]
mov r9, rax
xor r8d, r8d
lea edx, [r8 + 3]
mov rcx, r10
call fcn.1400c7cc0
test al, al
je 0x1400af4c5
cmp r12, rbx
jle 0x1400af51b
mov rdx, r12
mov rcx, r13
call fcn.1400549e0
test al, al
je 0x1400ae159
dec r12
jmp 0x1400ae13c
cmp r12, rbx
jle 0x1400af51b
cmp r12, rdi
jle 0x1400af51b
mov r8, r12
lea rdx, [rbp + 0x30]
mov rcx, qword [r13 + 0x100]
call fcn.140054260
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x1400ae18e
add rcx, 0xffffffffffffffef
mov rax, qword [rbp + 0x30]
cmp rax, qword [rcx + 8]
je 0x1400af47b
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov rdi, qword [rax + 0x10]
mov qword [rsp + 0x70], rdi
lea rdx, [rax + 0x18]
mov qword [rbp + 0x68], rdx
mov rcx, qword [rdx]
mov qword [rsp + 0x78], rcx
mov rcx, qword [rdx + 8]
mov qword [rbp - 0x80], rcx
test rcx, rcx
je 0x1400ae1e0
lock inc dword [rcx + 8]
mov rax, qword [rbp + 0x30]
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rax + 0x28]
mov qword [rbp - 0x78], rcx
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, 0x104
or ecx, edx
jge 0x1400ae224
mov edx, 0x104
lea rcx, [rbp - 0x70]
call fcn.14001e8d0
lea rdx, [rbp + 0x258]
mov rcx, qword [r13 + 0x98]
call fcn.140001bd0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.14001ddb0
nop
mov rdx, qword [rbp + 0x258]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400ae26a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rsp + 0x78]
mov qword [rbp + 0x300], rax
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x308], rax
test rax, rax
je 0x1400ae28a
lock inc dword [rax + 8]
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x148]
call fcn.140031db0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.14001ddb0
nop
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400ae2d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r9, qword [rsp + 0x60]
lea rax, [r9 - 1]
mov rcx, qword [rbp - 0x10]
mov qword [rcx], rax
lea rax, [0x1401198d8]
mov qword [rbp + reloc.SHELL32.dll_IsUserAnAdmin], rax
mov dword [rbp + 0x2b0], 0xac5
mov dword [rbp + 0x2b4], 3
mov qword [rsp + 0x38], r12
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov rbx, qword [rbp - 0x70]
mov r8, rbx
lea rdx, [0x14011b210]
lea rcx, [rbp + reloc.SHELL32.dll_IsUserAnAdmin]
call fcn.14000b5d0
lea rdx, [rsp + 0x60]
mov rcx, r13
call fcn.1400aaf10
test al, al
je 0x1400af372
lea rdx, [rsp + 0x78]
mov rcx, qword [rbp + 0x58]
call fcn.14003c6f0
test al, al
je 0x1400af372
mov qword [rbp + 0xe0], 0
mov eax, 0x2000
cmp rdi, rax
cmovl rax, rdi
mov rcx, r14
cmp rax, r14
cmovg rcx, rax
mov qword [rbp - 0x68], rcx
mov rdx, qword [r13 + 0x180]
mov qword [rbp + 0x3c0], rdx
mov rcx, qword [r13 + 0x188]
mov qword [rbp + 0x3c8], rcx
mov byte [rbp + 0x3d0], 1
mov rax, qword [r13 + 0x190]
mov qword [rbp + 0x3d8], rax
mov qword [rbp + 0x3e0], rdx
mov byte [rbp + 0x3e8], 0
mov qword [rbp + 0x3f0], rcx
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0x3f8], rax
mov byte [rbp + 0x400], 1
call fcn.14001dd30
cmp dword [rax], 4
jl 0x1400ae479
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc0], rax
lea rdx, [0x14011a098]
lea rcx, [rbp + 0xc0]
call fcn.14001e360
lea rax, [0x14011a188]
mov qword [rbp + 0x158], rax
mov dword [rbp + 0x160], 0xb01
mov dword [rbp + 0x164], 3
mov rbx, qword [rbp + 0xc0]
mov rdx, rbx
lea rcx, [rbp + 0x158]
call fcn.14000b5d0
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400ae475
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp - 0x70]
cmp qword [r13 + 0x180], 0
jle 0x1400ae62b
cmp qword [r13 + 0x188], 0
jle 0x1400ae62b
lea rdx, [r13 + 0x160]
lea rcx, [rsp + 0x60]
call fcn.140038c90
test al, al
jne 0x1400ae62b
mov rdi, qword [rsp + 0x78]
mov rdx, qword [rdi + 0x20]
cmp rdx, 0x20
jg 0x1400ae62b
mov qword [rbp + 0xd0], 0
lea rcx, [r13 + 0xf0]
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 1
mov r9, qword [rbp + 0x3e0]
mov r8, qword [rbp + 0x3d8]
call fcn.1400aa1e0
mov r8, rax
mov rcx, qword [rdi + 0x20]
cmp qword [rbp + 0xd0], rcx
jl 0x1400ae62b
mov qword [rbp + 0x280], 0
lea rcx, [r13 + 0x1a0]
movsd xmm0, qword [rcx]
mov qword [rbp + 0x320], rcx
movsd qword [rbp + 0x328], xmm0
movaps xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x3a0], xmm0
mov qword [rbp + 0x340], rdi
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x348], rax
test rax, rax
je 0x1400ae56a
lock inc dword [rax + 8]
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x48], rax
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x280]
lea rdx, [rbp + 0x340]
mov rcx, r13
call fcn.1400acc50
test eax, eax
js 0x1400ae633
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400ae5b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
mov rbx, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x50]
lea rax, [r13 + 0x1b0]
lea r10, [r13 + 0xb0]
je 0x1400ae122
lock dec dword [rcx + 8]
lea rax, [r13 + 0x1b0]
lea r10, [r13 + 0xb0]
jne 0x1400ae122
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
mov rbx, qword [rbp - 0x48]
lea rax, [r13 + 0x1b0]
lea r10, [r13 + 0xb0]
jne 0x1400ae122
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1400ae114
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x48], rax
xor edi, edi
xor r9d, r9d
mov qword [rbp - 0x58], r9
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r15d, r15d
lea r14, [rbp + 0x3c8]
mov r9, qword [r14]
mov r8, qword [r14 - 8]
cmp r8, r9
jge 0x1400ae6b6
lea rcx, [r13 + 0xf0]
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x28], rax
movzx eax, byte [r14 + 8]
mov byte [rsp + 0x20], al
mov rdx, qword [rbp - 0x68]
call fcn.1400aa1e0
mov rcx, qword [rbp + 0xe0]
cmp rcx, rdi
jle 0x1400ae6a4
mov rdi, rcx
mov qword [rbp - 0x58], rax
mov rax, qword [rsp + 0x58]
cmp rdi, qword [rbp + 0x50]
jl 0x1400ae6bb
cmp rdi, rax
jge 0x1400ae6d1
jmp 0x1400ae6bb
mov rax, qword [rsp + 0x58]
inc r15
add r14, 0x18
cmp r15, 3
jb 0x1400ae660
cmp rdi, rax
jl 0x1400af2e3
mov rax, qword [rsp + 0x50]
sub rax, r12
mov rcx, qword [rbp - 0x68]
cmp rcx, rdi
jle 0x1400ae6eb
cmp rdi, rax
jl 0x1400aea4b
lea rax, [0x14011abe8]
mov qword [rbp + 0x2c0], rax
mov dword [rbp + 0x2c8], 0xb5f
mov dword [rbp + 0x2cc], 3
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdi
mov r9, qword [rbp - 0x58]
mov r8, r15
lea rdx, [0x14011b430]
lea rcx, [rbp + 0x2c0]
call fcn.14000b5d0
xor edx, edx
mov r14d, edx
mov qword [rbp + 0x38], rdx
mov qword [rbp + 0x40], rdx
mov rax, qword [rbp + 0x68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x48]
cmp rax, qword [rcx]
jne 0x1400ae776
lea rcx, [rbp + 0x38]
mov rax, qword [rbp + 0x2b8]
cmp rcx, rax
je 0x1400ae769
mov r14, qword [rax]
mov qword [rax], rdx
mov qword [rbp + 0x38], r14
mov rax, qword [rax + 8]
mov qword [rbp + 0x40], rax
test r14, r14
jne 0x1400ae792
lea rdx, [rbp + 0x38]
lea rcx, [rbp - 0x70]
call fcn.1400d8c10
mov r15d, eax
mov rbx, qword [rbp - 0x70]
mov r14, qword [rbp + 0x38]
xor edx, edx
jmp 0x1400ae797
mov r15d, dword [rsp + 0x40]
test r15d, r15d
js 0x1400af138
mov byte [rbp - 8], 0
mov qword [rbp - 7], rdx
mov qword [rbp + 1], rdx
mov qword [rbp + 9], rdx
lea rcx, [rbp + 0x11]
call fcn.140028bf0
nop
mov rax, rdi
cqo
mov r8, qword [rsp + 0x58]
idiv r8
imul rax, r8
mov rdx, qword [rbp - 0x78]
mov rcx, rdx
sub rcx, rax
mov r15, qword [rsp + 0x68]
add rcx, r15
xor edi, edi
test rcx, rcx
cmovg rdi, rcx
cmp rax, rdx
cmovl rdx, rax
mov rax, r8
cmp rdx, r8
cmovg rax, rdx
mov qword [rbp - 0x68], rax
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea r11, [r13 + 0x1a0]
movsd xmm0, qword [r11]
mov qword [rbp + 0x360], r11
movsd qword [rbp + 0x368], xmm0
movaps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x380], xmm0
lea rax, [rbp - 8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
lea rax, [rbp + 0x380]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov rdi, qword [rbp - 0x58]
mov r8, rdi
mov rdx, r14
mov rcx, r13
call fcn.1400ab2a0
mov dword [rsp + 0x40], eax
mov rcx, qword [r13 + 0xf0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0x40]
cmp eax, 0x80070057
je 0x1400aef75
cmp eax, 0x80070005
je 0x1400aedaf
mov rax, qword [rsp + 0x78]
mov qword [rbp + 0x350], rax
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x358], rax
test rax, rax
je 0x1400ae8cf
lock inc dword [rax + 8]
mov r15, qword [rsp + 0x68]
mov rbx, qword [rbp - 0x70]
mov r14, qword [rbp + 0x38]
lea r8, [rbp - 8]
lea rdx, [rbp + 0x350]
mov rcx, qword [r13 + 0x100]
call fcn.1400389d0
cmp dword [rsp + 0x40], 0x80004004
je 0x1400aed04
mov rdx, r12
mov rcx, r13
call fcn.1400549e0
test al, al
je 0x1400aeaf0
mov eax, dword [rsp + 0x40]
test eax, eax
jns 0x1400ae95d
lea rcx, [0x14011b578]
mov qword [rbp + 0x178], rcx
mov dword [rbp + 0x180], 0xbd9
mov dword [rbp + 0x184], 1
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9, rdi
mov r8, rbx
lea rdx, [0x14011b620]
lea rcx, [rbp + 0x178]
call fcn.14000b5d0
nop
mov rax, qword [rbp + 0x11]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x11]
mov qword [rax + 8], rax
mov qword [rbp + 0x19], 0
mov rax, qword [rbp + 0x11]
cmp rcx, rax
je 0x1400ae994
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x11]
cmp rdi, rax
jne 0x1400ae980
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400ae9b3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x38], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400ae9ce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
mov rbx, qword [rbp - 0x48]
mov r14, qword [rsp + 0x58]
mov r15d, dword [rsp + 0x40]
mov rdi, qword [rbp - 0x50]
lea rax, [r13 + 0x1b0]
lea r10, [r13 + 0xb0]
je 0x1400ae122
lock dec dword [rcx + 8]
lea rax, [r13 + 0x1b0]
lea r10, [r13 + 0xb0]
jne 0x1400ae122
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
mov rbx, qword [rbp - 0x48]
lea rax, [r13 + 0x1b0]
lea r10, [r13 + 0xb0]
jne 0x1400ae122
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1400ae114
lea rdx, [0x14011a5f8]
mov qword [rbp + 0xe8], rdx
mov dword [rbp + 0xf0], 0xb5a
mov dword [rbp + 0xf4], 3
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdi
mov r9, qword [rbp - 0x58]
mov r8, r15
lea rdx, [0x14011b370]
lea rcx, [rbp + 0xe8]
call fcn.14000b5d0
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400aeab2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400aeadf
lock dec dword [rcx + 8]
jne 0x1400aeadf
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400aeadf
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
lea rax, [0x14011b6f8]
mov qword [rbp + 0x198], rax
mov dword [rbp + 0x1a0], 0xbe0
mov dword [rbp + 0x1a4], 1
mov qword [rsp + 0x38], r12
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9, rdi
mov r8, rbx
lea rdx, [0x14011b730]
lea rcx, [rbp + 0x198]
call fcn.14000b5d0
mov r8, qword [rbp - 0x68]
mov rdx, rdi
mov rcx, r13
call fcn.140054a60
mov r9, qword [rsp + 0x60]
mov r8, rbx
test al, al
je 0x1400aebb8
lea rax, [0x14011b810]
mov qword [rbp + 0x2e8], rax
mov dword [rbp + 0x2f0], 0xbe6
mov dword [rbp + 0x2f4], 3
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea rdx, [0x14011b880]
lea rcx, [rbp + 0x2e8]
call fcn.14000b5d0
lea rcx, [r13 + 0x1c0]
lea rdx, [rsp + 0x60]
call fcn.140055300
jmp 0x1400aec0d
lea rax, [0x14011b848]
mov qword [rbp + 0x1b8], rax
mov dword [rbp + 0x1c0], 0xbeb
mov dword [rbp + 0x1c4], 3
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea rdx, [0x14011b970]
lea rcx, [rbp + 0x1b8]
call fcn.14000b5d0
lea rcx, [r13 + 0x1c0]
lea rdx, [rsp + 0x60]
call fcn.140055390
lea rax, [0x14011b938]
mov qword [rbp + 0x298], rax
mov dword [rbp + 0x2a0], 0xbef
mov dword [rbp + 0x2a4], 3
mov rax, qword [rsp + 0x50]
mov r9, rax
sub r9, r12
mov rcx, qword [rbp + 0x50]
mov qword [rsp + 0x20], rcx
mov r8, rax
lea rdx, [0x14011ba20]
lea rcx, [rbp + 0x298]
call fcn.14000b5d0
nop
mov rax, qword [rbp + 0x11]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x11]
mov qword [rax + 8], rax
mov qword [rbp + 0x19], 0
mov rax, qword [rbp + 0x11]
cmp rcx, rax
je 0x1400aec94
nop dword [rax]
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x11]
cmp rdi, rax
jne 0x1400aec80
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400aecac
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400aecc7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af516
lock dec dword [rcx + 8]
jne 0x1400af516
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af516
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1400af516
mov rax, qword [rbp + 0x11]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x11]
mov qword [rax + 8], rax
mov qword [rbp + 0x19], 0
mov rax, qword [rbp + 0x11]
cmp rcx, rax
je 0x1400aed3b
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x11]
cmp rdi, rax
jne 0x1400aed27
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400aed53
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400aed6e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400aed9b
lock dec dword [rcx + 8]
jne 0x1400aed9b
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400aed9b
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80004004
jmp 0x1400b0124
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
dec rcx
mov rax, qword [rbp - 0x10]
mov qword [rax], rcx
lea rax, [0x14011b338]
mov qword [rbp + 0x1d8], rax
mov dword [rbp + 0x1e0], 0xbbc
mov dword [rbp + 0x1e4], 3
mov r9, qword [rsp + 0x60]
mov r8, rbx
lea rdx, str.Moving_intruder_fragment__file:__s__at_lcn:__I64d__returned_E_ACCESSDENIED._Marking_fragment_as_unmovable
lea rcx, [rbp + 0x1d8]
call fcn.14000b580
lea rcx, [r13 + 0x1c0]
lea rdx, [rsp + 0x60]
call fcn.140055300
cmp qword [rsp + 0x50], r12
jne 0x1400aeec8
mov rax, qword [rbp + 0x11]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x11]
mov qword [rax + 8], rax
mov qword [rbp + 0x19], 0
mov rax, qword [rbp + 0x11]
cmp rcx, rax
je 0x1400aee54
nop dword [rax]
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x11]
cmp rdi, rax
jne 0x1400aee40
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400aee6c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400aee87
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400aeeb4
lock dec dword [rcx + 8]
jne 0x1400aeeb4
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400aeeb4
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80070005
jmp 0x1400b0124
mov rax, qword [rbp + 0x11]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x11]
mov qword [rax + 8], rax
mov qword [rbp + 0x19], 0
mov rax, qword [rbp + 0x11]
cmp rcx, rax
je 0x1400aef04
nop dword [rax + rax]
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x11]
cmp rdi, rax
jne 0x1400aeef0
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400aef1c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400aef37
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400aef64
lock dec dword [rcx + 8]
jne 0x1400aef64
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400aef64
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
dec rcx
mov rax, qword [rbp - 0x10]
mov qword [rax], rcx
lea rax, [0x14011b0f8]
mov qword [rbp + 0x2d0], rax
mov dword [rbp + 0x2d8], 0xba9
mov dword [rbp + 0x2dc], 3
mov r9, qword [rsp + 0x60]
mov r8, rbx
lea rdx, str.Moving_intruder_fragment__file:__s__at_lcn:__I64d__returned_E_INVALIDARG._Marking_fragment_as_unmovable
lea rcx, [rbp + 0x2d0]
call fcn.14000b580
lea rcx, [r13 + 0x1c0]
lea rdx, [rsp + 0x60]
call fcn.140055300
mov rax, qword [rsp + 0x50]
sub rax, r12
test rax, rax
jle 0x1400af08d
mov rax, qword [rbp + 0x11]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x11]
mov qword [rax + 8], rax
mov qword [rbp + 0x19], 0
mov rax, qword [rbp + 0x11]
cmp rcx, rax
je 0x1400af01c
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x11]
cmp rdi, rax
jne 0x1400af008
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400af034
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af04f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af07c
lock dec dword [rcx + 8]
jne 0x1400af07c
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af07c
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
mov rax, qword [rbp + 0x11]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x11]
mov qword [rax + 8], rax
mov qword [rbp + 0x19], 0
mov rax, qword [rbp + 0x11]
cmp rcx, rax
je 0x1400af0c4
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x11]
cmp rdi, rax
jne 0x1400af0b0
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400af0dc
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af0f7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af124
lock dec dword [rcx + 8]
jne 0x1400af124
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af124
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80070057
jmp 0x1400b0124
lea rax, [0x14011afd8]
mov qword [rbp + 0x1f8], rax
mov dword [rbp + 0x200], 0xb77
mov dword [rbp + 0x204], 1
mov r9d, r15d
mov r8, rbx
lea rdx, [0x14011b4b0]
lea rcx, [rbp + 0x1f8]
call fcn.14000b5d0
cmp r15d, 0x80070005
jne 0x1400af27c
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
dec rcx
mov rax, qword [rbp - 0x10]
mov qword [rax], rcx
lea rcx, [r13 + 0x1c0]
lea rdx, [rsp + 0x60]
call fcn.140055300
sub qword [rsp + 0x50], r12
jne 0x1400af214
test r14, r14
je 0x1400af1b8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af1d3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af200
lock dec dword [rcx + 8]
jne 0x1400af200
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af200
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80070005
jmp 0x1400b0124
test r14, r14
je 0x1400af223
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af23e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af26b
lock dec dword [rcx + 8]
jne 0x1400af26b
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af26b
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
test r14, r14
je 0x1400af28b
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af2a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af51b
lock dec dword [rcx + 8]
jne 0x1400af51b
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af51b
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1400af51b
lea rax, [0x14011a2e8]
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x268], 0xb4f
mov dword [rbp + 0x26c], 3
lea rdx, [0x14011a408]
lea rcx, [rbp + 0x260]
call fcn.14000b5d0
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af334
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af361
lock dec dword [rcx + 8]
jne 0x1400af361
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af361
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
mov rdi, qword [rsp + 0x50]
sub rdi, r12
mov r9, qword [rsp + 0x60]
dec r9
mov rax, qword [rbp - 0x10]
mov qword [rax], r9
lea rax, [0x140119ce8]
mov qword [rbp + 0x218], rax
mov dword [rbp + 0x220], 0xad2
mov dword [rbp + 0x224], 3
mov r8, rdi
lea rdx, str.Unmovable_fragment._Free_block_size:__I64d._Setting_skip_to:__I64d
lea rcx, [rbp + 0x218]
call fcn.14000b5d0
cmp rdi, r14
jl 0x1400af41f
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af3e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af40e
lock dec dword [rcx + 8]
jne 0x1400af40e
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af40e
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af43a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400af467
lock dec dword [rcx + 8]
jne 0x1400af467
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af467
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80070005
jmp 0x1400b0124
lea rax, [0x140119758]
mov qword [rbp + 0x270], rax
mov dword [rbp + 0x278], 0xab3
mov dword [rbp + 0x27c], 3
mov r8, r12
lea rdx, str.Found_unknown_cluster_at__I64d.
lea rcx, [rbp + 0x270]
call fcn.14000b5d0
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
lea rax, [0x1401195f8]
mov qword [rbp + 0x238], rax
mov dword [rbp + 0x240], 0xaa2
mov dword [rbp + 0x244], 1
mov r8, qword [r13 + 0x190]
lea rdx, [0x14011b190]
lea rcx, [rbp + 0x238]
call fcn.14000b5d0
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80004004
jmp 0x1400b0124
mov r15d, dword [rsp + 0x40]
sub qword [rsp + 0x50], r12
jne 0x1400b00ed
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80070005
jmp 0x1400b0124
add rdi, rsi
mov qword [rbp - 0x68], rdi
or esi, 0xffffffff
cmp r12, rdi
jge 0x1400b00d7
nop dword [rax]
mov rbx, qword [r13 + 0x198]
cmp r12, rbx
jge 0x1400b00cd
mov rdx, r12
mov rcx, r13
call fcn.1400549e0
test al, al
je 0x1400af574
inc r12
jmp 0x1400af557
cmp r12, rbx
jge 0x1400b00cd
cmp r12, rdi
jge 0x1400b00cd
mov r8, r12
lea rdx, [rbp + 0xc8]
mov rcx, qword [r13 + 0x100]
call fcn.140054260
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x1400af5ae
add rcx, 0xffffffffffffffef
jmp 0x1400af5b1
mov rcx, r15
mov rax, qword [rbp + 0xc8]
cmp rax, qword [rcx + 8]
je 0x1400b0086
mov rcx, qword [rax]
mov qword [rbp - 0x40], rcx
mov rcx, qword [rax + 8]
mov qword [rbp - 0x38], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x30], rbx
mov rcx, qword [rax + 0x18]
mov qword [rbp - 0x28], rcx
mov rcx, qword [rax + 0x20]
mov qword [rbp - 0x20], rcx
test rcx, rcx
je 0x1400af5fd
lock inc dword [rcx + 8]
mov rax, qword [rbp + 0xc8]
mov rbx, qword [rbp - 0x30]
mov rcx, qword [rax + 0x28]
mov qword [rbp - 0x18], rcx
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, 0x104
or ecx, edx
jge 0x1400af641
mov edx, 0x104
lea rcx, [rbp - 0x60]
call fcn.14001e8d0
lea rdx, [rbp + 0x108]
mov rcx, qword [r13 + 0x98]
call fcn.140001bd0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x60]
call fcn.14001ddb0
nop
mov rdx, qword [rbp + 0x108]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af687
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rbp - 0x28]
mov qword [rbp + 0x330], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp + 0x338], rax
test rax, rax
je 0x1400af6a6
lock inc dword [rax + 8]
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x150]
call fcn.140031db0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x60]
call fcn.14001ddb0
nop
mov rdx, qword [rbp + 0x150]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af6ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r9, qword [rbp - 0x40]
lea rax, [r9 + 1]
mov rcx, qword [rbp - 0x10]
mov qword [rcx], rax
lea rax, [0x14011ba98]
mov qword [rbp + 0x288], rax
mov dword [rbp + 0x290], 0xc27
mov dword [rbp + 0x294], 3
mov qword [rsp + 0x38], r12
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov r8, qword [rbp - 0x60]
lea rdx, str.Intruder_fragment____s____I64d___I64d___I64d__lcLeft:__I64d__detected_at__I64d.
lea rcx, [rbp + 0x288]
call fcn.14000b5d0
lea rdx, [rbp - 0x40]
mov rcx, r13
call fcn.1400aaf10
test al, al
je 0x1400b002c
lea rdx, [rbp - 0x28]
mov rcx, qword [rbp + 0x58]
call fcn.14003c6f0
test al, al
je 0x1400b002c
mov qword [rbp + 0x60], r15
mov eax, 0x2000
cmp rbx, rax
cmovl rax, rbx
mov r15, r14
cmp rax, r14
cmovg r15, rax
mov rcx, qword [r13 + 0x180]
mov qword [rbp + 0x410], rcx
mov rax, qword [r13 + 0x188]
mov qword [rbp + 0x418], rax
mov byte [rbp + 0x420], 1
mov qword [rbp + 0x428], rax
mov rax, qword [r13 + 0x198]
mov qword [rbp + 0x430], rax
mov byte [rbp + 0x438], 1
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0x440], rax
mov qword [rbp + 0x448], rcx
mov byte [rbp + 0x450], 0
call fcn.14001dd30
cmp dword [rax], 4
jl 0x1400af87e
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb8], rax
lea rdx, str.Free_block_info:
lea rcx, [rbp + 0xb8]
call fcn.14001e360
lea rax, [0x14011bc38]
mov qword [rbp + 0x120], rax
mov dword [rbp + 0x128], 0xc51
mov dword [rbp + 0x12c], 3
mov rbx, qword [rbp + 0xb8]
mov rdx, rbx
lea rcx, [rbp + 0x120]
call fcn.14000b5d0
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400af87e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor edi, edi
xor r9d, r9d
mov qword [rbp - 0x58], r9
xor r14d, r14d
lea rcx, [r13 + 0xf0]
lea rbx, [rbp + 0x418]
nop dword [rax + rax]
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
movzx eax, byte [rbx + 8]
mov byte [rsp + 0x20], al
mov r9, qword [rbx]
mov r8, qword [rbx - 8]
mov rdx, r15
call fcn.1400aa1e0
mov r11, rax
cmp rax, r12
jge 0x1400af8d2
mov qword [rbp + 0x60], 0
jmp 0x1400af8f4
mov rax, qword [rbp + 0x60]
cmp rax, rdi
jle 0x1400af8e2
mov rdi, rax
mov qword [rbp - 0x58], r11
cmp rdi, qword [rbp + 0x50]
jl 0x1400af8f4
mov rax, qword [rsp + 0x58]
cmp rdi, rax
jge 0x1400af916
jmp 0x1400af8f9
mov rax, qword [rsp + 0x58]
inc r14
add rbx, 0x18
cmp r14, 3
lea rcx, [r13 + 0xf0]
jb 0x1400af8a0
cmp rdi, rax
jl 0x1400aff96
mov rax, r12
sub rax, qword [rsp + 0x50]
cmp r15, rdi
jle 0x1400af92c
cmp rdi, rax
jl 0x1400afb9e
lea rax, [0x14011bd18]
mov qword [rbp + 0x138], rax
mov dword [rbp + 0x140], 0xc89
mov dword [rbp + 0x144], 3
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rdi
mov r9, qword [rbp - 0x58]
mov r8, r14
lea rdx, str.Found_free_block_in_zone__d_at__I64d:_I64d__requested:__I64d
lea rcx, [rbp + 0x138]
call fcn.14000b5d0
cmp r15, rdi
cmovl rdi, r15
xor ebx, ebx
mov qword [rbp + 0xa8], rbx
mov qword [rbp + 0xb0], rbx
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x60]
call fcn.1400d8c10
mov r15d, eax
test eax, eax
js 0x1400afeeb
mov byte [rbp + 0x70], bl
mov qword [rbp + 0x71], rbx
mov qword [rbp + 0x79], rbx
mov qword [rbp + 0x81], rbx
lea rcx, [rbp + 0x89]
call fcn.140028bf0
nop
mov rax, qword [rbp + 0x68]
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x390], xmm0
lea rax, [rbp + 0x70]
mov qword [rsp + 0x38], rax
mov rbx, qword [rbp - 0x60]
mov qword [rsp + 0x30], rbx
lea rax, [rbp + 0x390]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9, qword [rbp - 0x38]
mov r15, qword [rbp - 0x58]
mov r8, r15
mov r14, qword [rbp + 0xa8]
mov rdx, r14
mov rcx, r13
call fcn.1400ab2a0
mov dword [rsp + 0x40], eax
mov rcx, qword [r13 + 0xf0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r11, qword [rbp - 0x28]
mov qword [rbp + 0x310], r11
mov rax, qword [rbp - 0x20]
mov qword [rbp + 0x318], rax
test rax, rax
je 0x1400afa4c
lock inc dword [rax + 8]
mov rbx, qword [rbp - 0x60]
mov r14, qword [rbp + 0xa8]
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x310]
mov rcx, qword [r13 + 0x100]
call fcn.1400389d0
cmp dword [rsp + 0x40], 0x80004004
je 0x1400afe30
mov rdx, r12
mov rcx, r13
call fcn.1400549e0
test al, al
je 0x1400afc46
mov eax, dword [rsp + 0x40]
test eax, eax
jns 0x1400afada
lea rcx, [0x14011bec8]
mov qword [rbp + 0xf8], rcx
mov dword [rbp + 0x100], 0xcaa
mov dword [rbp + 0x104], 1
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdi
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov r9, r15
mov r8, rbx
lea rdx, str.MoveFileRegionWithMarking_for_file___s__to__I64d___I64d:_I64d_failed__hr0x_08x___but_cluster_was_freed.
lea rcx, [rbp + 0xf8]
call fcn.14000b5d0
nop
mov rax, qword [rbp + 0x89]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x89]
mov qword [rax + 8], rax
xor r15d, r15d
mov qword [rbp + 0x91], r15
mov rax, qword [rbp + 0x89]
cmp rcx, rax
je 0x1400afb1f
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x89]
cmp rdi, rax
jne 0x1400afb08
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400afb3d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0xa8], r15
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400afb58
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
mov rdi, qword [rbp - 0x68]
mov r14, qword [rsp + 0x58]
je 0x1400af550
lock dec dword [rcx + 8]
jne 0x1400af550
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400af550
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1400af550
lea rcx, [0x14011bce0]
mov qword [rbp + 0x110], rcx
mov dword [rbp + 0x118], 0xc84
mov dword [rbp + 0x11c], 3
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rdi
mov r9, qword [rbp - 0x58]
mov r8, r14
lea rdx, str.Found_free_block_in_zone__d_at__I64d:_I64d__requested:__I64d__freed_so_far:__I64d___canceling
lea rcx, [rbp + 0x110]
call fcn.14000b5d0
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400afc09
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x1400b00cd
lock dec dword [rcx + 8]
jne 0x1400b00cd
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400b00cd
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1400b00cd
lea rax, [0x14011c038]
mov qword [rbp + 0x168], rax
mov dword [rbp + 0x170], 0xcb1
mov dword [rbp + 0x174], 1
mov qword [rsp + 0x38], r12
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdi
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov r9, r15
mov r8, rbx
lea rdx, str.MoveFileRegionWithMarking_for_file___s__to__I64d___I64d:_I64d_finished__hr0x_08x_._Cluster__I64d_is_not_free.
lea rcx, [rbp + 0x168]
call fcn.14000b5d0
mov r8, rdi
mov rdx, r15
mov rcx, r13
call fcn.140054a60
mov r9, qword [rbp - 0x40]
mov r8, rbx
test al, al
je 0x1400afd0e
lea rax, [0x14011c150]
mov qword [rbp + 0x188], rax
mov dword [rbp + 0x190], 0xcb7
mov dword [rbp + 0x194], 3
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea rdx, str.Destination_block_is_still_free__marking_fragment____s____I64d___I64d___I64d__as_unmovable.
lea rcx, [rbp + 0x188]
call fcn.14000b5d0
lea rcx, [r13 + 0x1c0]
lea rdx, [rbp - 0x40]
call fcn.140055300
jmp 0x1400afd65
lea rax, [0x14011c188]
mov qword [rbp + 0x1a8], rax
mov dword [rbp + 0x1b0], 0xcbc
mov dword [rbp + 0x1b4], 3
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea rdx, str.Marking_fragment____s____I64d___I64d___I64d__as_suspicious.
lea rcx, [rbp + 0x1a8]
call fcn.14000b5d0
lea rcx, [r13 + 0x1c0]
lea rdx, [rbp - 0x40]
call fcn.140055390
lea rax, str.DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones
mov qword [rbp + 0x1c8], rax
mov dword [rbp + 0x1d0], 0xcc0
mov dword [rbp + 0x1d4], 3
mov r9, r12
mov rax, qword [rsp + 0x50]
sub r9, rax
mov rcx, qword [rbp + 0x50]
mov qword [rsp + 0x20], rcx
mov r8, rax
lea rdx, str.MakeFreeSpace_finished_for__I64d:_I64d__requested__I64d.
lea rcx, [rbp + 0x1c8]
call fcn.14000b5d0
nop
mov rax, qword [rbp + 0x89]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x89]
mov qword [rax + 8], rax
mov qword [rbp + 0x91], 0
mov rax, qword [rbp + 0x89]
cmp rcx, rax
je 0x1400afdf8
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x89]
cmp rdi, rax
jne 0x1400afde1
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400afe10
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400afe2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
jmp 0x1400afc09
mov rax, qword [rbp + 0x89]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rbp + 0x89]
mov qword [rax + 8], rax
mov qword [rbp + 0x91], 0
mov rax, qword [rbp + 0x89]
cmp rcx, rax
je 0x1400afe77
nop
mov rdi, qword [rcx]
call fcn.14005e094
mov rcx, rdi
mov rax, qword [rbp + 0x89]
cmp rdi, rax
jne 0x1400afe60
mov rcx, rax
call fcn.14005e094
nop
test r14, r14
je 0x1400afe8f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400afeaa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x1400afed7
lock dec dword [rcx + 8]
jne 0x1400afed7
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400afed7
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80004004
jmp 0x1400b0124
lea rax, [0x14011be90]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1f0], 0xc93
mov dword [rbp + 0x1f4], 1
mov r9d, r15d
mov rbx, qword [rbp - 0x60]
mov r8, rbx
lea rdx, [0x14011bf00]
lea rcx, [rbp + 0x1e8]
call fcn.14000b5d0
nop
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x1400aff3e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400aff59
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x1400b00d2
lock dec dword [rcx + 8]
jne 0x1400b00d2
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400b00d2
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x1400b00d2
lea rax, [0x14011bc70]
mov qword [rbp + 0x208], rax
mov dword [rbp + 0x210], 0xc79
mov dword [rbp + 0x214], 3
lea rdx, str.Didnt_find_a_free_block.
lea rcx, [rbp + 0x208]
call fcn.14000b5d0
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400affeb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x1400b0018
lock dec dword [rcx + 8]
jne 0x1400b0018
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock dec dword [rbx + 0xc]
jne 0x1400b0018
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
mov eax, 0x80070070
jmp 0x1400b0124
lea rax, [0x14011bbb0]
mov qword [rbp + 0x228], rax
mov dword [rbp + 0x230], 0xc31
mov dword [rbp + 0x234], 3
lea rdx, str.Unomvable_fragment.
lea rcx, [rbp + 0x228]
call fcn.14000b5d0
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400b0081
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
jmp 0x1400afc09
lea rax, [0x14011b9e8]
mov qword [rbp + 0x248], rax
mov dword [rbp + 0x250], 0xc0d
mov dword [rbp + 0x254], 3
mov r8, r12
lea rdx, str.Fount_unknown_cluster_at__I64d.
lea rcx, [rbp + 0x248]
call fcn.14000b5d0
nop
mov rcx, qword [rsp + 0x48]
call fcn.14002d430
xor eax, eax
jmp 0x1400b0124
mov r15d, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
sub qword [rsp + 0x50], r12
jne 0x1400b00ed
mov rcx, rbx
call fcn.14002d430
mov eax, 0x80070005
jmp 0x1400b0124
mov rax, qword [rsp + 0x48]
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x1400b0121
mov eax, esi
lock xadd dword [rbx + 8], eax
dec eax
jne 0x1400b0121
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lock xadd dword [rbx + 0xc], esi
dec esi
jne 0x1400b0121
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov eax, r15d
mov rcx, qword [rbp + 0x460]
xor rcx, rsp
call fcn.14005e0b0
add rsp, 0x578
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret