Function at 0x38a092679
Capabilities:
Terminate process

Disassembly:
add rcx, 0x2098
mov rax, qword [rcx]
mov qword [rdx + 0x18], rax
mov rax, qword [rdx + 0x18]
lock cmpxchg qword [rcx], rdx
je 0x38a0915a1
mov qword [rdx + 0x18], rax
jmp 0x38a091589
ret
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rax, qword [rdx]
mov rbp, qword [rdx + 8]
add qword [rcx + 0x2080], rbp
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rsi, rcx
mov rbx, rdx
lea r12, [rcx + 0x20a0]
je 0x38a09256f
mov rdi, rdx
mov rcx, r12
sub rdi, rax
mov rdx, rdi
sar rdx, 0xc
call fcn.38a0918e1
test al, al
je 0x38a09256f
test byte [rdi], 1
jne 0x38a09256f
mov r13, qword [rdi + 8]
lea rax, [r13 - 0xfb1]
cmp rax, 0x3efff04e
ja 0x38a09256f
mov rdx, rdi
mov rcx, rsi
add rbp, r13
sar rbx, 0xc
call fcn.38a0923e6
mov qword [rdi + 8], rbp
mov rdx, rbx
mov rcx, r12
mov rbx, rdi
call fcn.38a092487
cmp rbp, 0x3f000000
jle 0x38a09256f
mov rdx, rdi
mov rcx, rsi
mov r8d, 0x3f000000
call fcn.38a091af5
mov rdx, rdi
mov rcx, rsi
mov rbx, rax
call fcn.38a091b75
mov rdi, qword [rbx + 8]
mov rcx, r12
lea r9, [rbx + rdi]
mov rbp, r9
sar rbp, 0xc
mov rdx, rbp
call fcn.38a0918e1
test al, al
je 0x38a0925eb
test byte [r9], 1
jne 0x38a0925eb
mov r13, qword [r9 + 8]
cmp r13, 0xfb0
jle 0x38a0925eb
cmp rdi, 0x3effffff
jg 0x38a0925eb
mov rdx, r9
mov rcx, rsi
add rdi, r13
call fcn.38a0923e6
mov qword [rbx + 8], rdi
mov rdx, rbp
mov rcx, r12
call fcn.38a092487
cmp rdi, 0x3f000000
jle 0x38a0925eb
mov rdx, rbx
mov rcx, rsi
mov r8d, 0x3f000000
call fcn.38a091af5
mov rcx, rsi
mov rdx, rax
call fcn.38a091b75
mov rdx, rbx
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp fcn.38a091b75
push rbx
sub rsp, 0x20
mov rbx, qword [rdx + 8]
mov r10, rcx
mov r11, rdx
lea rcx, [rcx + 0x20a0]
sar rdx, 0xc
call fcn.38a092487
mov rax, qword [r10 + 0x2070]
mov rdx, qword [r10 + 0x2078]
mov rcx, r11
mov r8d, 0x8000
cmp rdx, rax
cmovl rdx, rax
sub rax, rbx
mov qword [r10 + 0x2070], rax
mov qword [r10 + 0x2078], rdx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x38a092673
lea rcx, str.virtualFree_failing_
call fcn.38a09160d
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
nop
add rsp, 0x20
pop rbx
ret
mov rax, qword [rdx + 8]
sub qword [rcx + 0x2088], rax
cmp rax, 0x3f000000
jg 0x38a092691
jmp 0x38a0924c2
jmp 0x38a092602
sub rsp, 0x28
mov r8, rdx
mov r9, rcx
and r8, 0xfffffffffffff000
mov rax, qword [r8 + 8]
mov rcx, qword [r8 + 0x10]
cmp rax, 0xfb0
jle 0x38a0926cc
cmp r9, rcx
je 0x38a092759
mov rdx, r8
add rsp, 0x28
jmp 0x38a091582
cmp r9, rcx
je 0x38a0926dd
mov rcx, r8
add rsp, 0x28
jmp fcn.38a091568
mov r10, qword [r8 + 0x28]
sub qword [r9 + 0x2088], rax
mov qword [rdx], r10
mov qword [r8 + 0x28], rdx
mov rdx, qword [r8 + 0x30]
lea r10, [rdx + rax]
cmp rdx, rax
jl 0x38a092733
mov qword [r8 + 0x30], r10
cmp r10, 0xfb0
jne 0x38a092768
mov ecx, 0x10
cqo
idiv rcx
mov rdx, r8
lea rcx, [r9 + rax*8]
call fcn.38a0913bd
mov rcx, r9
mov qword [r8 + 8], 0x1000
add rsp, 0x28
jmp 0x38a0924c2
mov r9d, 0x10
cqo
idiv r9
mov rdx, qword [rcx + rax*8]
mov qword [r8 + 0x18], rdx
test rdx, rdx
je 0x38a09274f
mov qword [rdx + 0x20], r8
mov qword [rcx + rax*8], r8
mov qword [r8 + 0x30], r10
jmp 0x38a092768
mov rdx, r8
mov rcx, r9
add rsp, 0x28
jmp 0x38a092679
add rsp, 0x28
ret