Function at 0x1400ff1c0
Capabilities:
Allocate or change rwx memory

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
movdqa xmmword [rsp + 0xe0], xmm11
movdqa xmmword [rsp + 0xd0], xmm10
movdqa xmmword [rsp + 0xc0], xmm9
movdqa xmmword [rsp + 0xb0], xmm8
movdqa xmmword [rsp + 0xa0], xmm7
movdqa xmmword [rsp + 0x90], xmm6
mov rbx, r9
mov ebp, r8d
mov rdi, rdx
mov rsi, rcx
mov r12, qword [rsp + 0x168]
mov r13, qword [rsp + 0x160]
mov rax, qword [0x140287028]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov byte [r12], 0
cmp byte [rcx + 0x1c], 0
je 0x1400ffa17
cmp r13, 0x4000
ja 0x1400ff60d
mov r15, qword [rsi]
call fcn.140100250
cmp r15, rax
je 0x1400ff582
test r15, r15
je 0x1400ff57a
xor eax, eax
xor r14d, r14d
mov rcx, r15
mov rdx, qword [r15]
mov r15, qword [r15 + 8]
mov r8d, dword [rcx + 0x18]
test r8d, 0x3ffe
je 0x1400ff310
test rdx, rdx
jne 0x1400ff2f0
mov r9d, r8d
and r9d, 0x7ffc000
jne 0x1400ff2f0
or r8d, 1
mov dword [rcx + 0x18], r8d
mov edx, dword [rsi + 0x1c]
movzx r8d, dl
and edx, 0xffffff00
add r8d, edx
add r8d, 0x100
mov dword [rsi + 0x1c], r8d
add edx, 0x100
je 0x1400fffe4
mov qword [rcx + 8], 0
mov rcx, rax
mov rax, rcx
test r15, r15
jne 0x1400ff276
jmp 0x1400ff571
test rdx, rdx
jne 0x1400ff327
test r14, r14
cmove r14, rcx
test rax, rax
jne 0x1400ff786
mov qword [rcx + 8], 0
jmp 0x1400ff2dc
test rdx, rdx
je 0x1400ff76c
mov rdx, qword [rsi + 8]
mov qword [rcx + 8], rdx
mov qword [rsi + 8], rcx
jmp 0x1400ff2d9
test r14, r14
jne 0x1400ff78f
mov r14, rcx
mov qword [rsi], r14
mov rax, rsi
mov qword [rax], r14
mov ecx, dword [r14 + 0x18]
test ecx, 0x8000000
jne 0x1400ff77d
mov rbx, qword [r14]
test rbx, rbx
je 0x1400ff405
mov rdx, qword [rbx]
test rdx, rdx
je 0x1400ff606
bswap rdx
mov esi, dword [rax + 0x18]
mov rax, rdx
xor rax, rbx
cmp rax, 0x1fffff
ja 0x1400fffb3
mov eax, edx
and eax, 0x1fc000
je 0x1400fffb3
prefetcht0 byte [rdx]
mov qword [r14], rdx
lea eax, [rcx + 2]
and eax, 0x3ffe
and ecx, 0xffffc001
or ecx, eax
mov dword [r14 + 0x18], ecx
mov qword [rbx], 0
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.1401756e0
mov rax, rbx
movaps xmm6, xmmword [rsp + 0x90]
movaps xmm7, xmmword [rsp + 0xa0]
movaps xmm8, xmmword [rsp + 0xb0]
movaps xmm9, xmmword [rsp + 0xc0]
movaps xmm10, xmmword [rsp + 0xd0]
movaps xmm11, xmmword [rsp + 0xe0]
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, r14
and rax, 0xffffffffffe00000
mov edx, r14d
shl edx, 9
and edx, 0x3fffc000
mov ebp, dword [rsi + 0x18]
mov r8d, ecx
shr r8d, 1
and r8d, 0x1fff
imul r8d, ebp
add rdx, rax
mov r9, rsi
lea rsi, [rdx + r8]
lea rbx, [r8 + rdx]
add rbx, 0xffffffffffe00000
lea r15, [r8 + rdx]
add r15, 0xffffffffffe00fff
and r15, 0xfffffffffffff000
lea r13, [rsi + rbp]
add r13, 0xffffffffffe00fff
and r13, 0xfffffffffffff000
lea eax, [rcx + 2]
and eax, 0x3ffe
mov r8d, ecx
and r8d, 0xffffc001
or r8d, eax
mov dword [r14 + 0x18], r8d
mov rax, r13
sub rax, rbx
mov qword [rsp + 0x20], r9
mov r9d, dword [r9 + 0x18]
xor edx, edx
div r9
shl eax, 0xe
sub ecx, eax
and ecx, 0x7ffc000
and r8d, 0xf8003fff
or r8d, ecx
mov dword [r14 + 0x18], r8d
mov r12, r13
sub r12, r15
lock inc qword [rdi + 0x14a8]
mov rcx, r15
mov rdx, r12
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x1400fffe7
mov rdx, r12
lock xadd qword [rdi + 0x1478], rdx
lea rcx, [rsi + rbp]
add rcx, 0xffffffffffe00000
add rdx, r12
mov rax, qword [rdi + 0x1480]
cmp rax, rdx
mov r8, rdx
cmova r8, rax
lock cmpxchg qword [rdi + 0x1480], r8
jne 0x1400ff4fd
mov r9, qword [rsp + 0x20]
mov eax, dword [r9 + 0x18]
add rax, rcx
cmp rax, r13
ja 0x1400ff567
xor r8d, r8d
nop word cs:[rax + rax]
mov rdx, rax
mov qword [rcx], 0
cmp qword [r14], 0
je 0x1400ff55d
mov rax, rcx
bswap rax
mov qword [r8], rax
mov eax, dword [r9 + 0x18]
add rax, rdx
mov r8, rcx
mov rcx, rdx
cmp rax, r13
jbe 0x1400ff530
jmp 0x1400ff567
mov qword [r14], rcx
and byte [r14 + 0x1b], 0xef
jmp 0x1400ff549
or byte [r14 + 0x1b], 0x10
jmp 0x1400ff3aa
test r14, r14
jne 0x1400ff333
call fcn.140100250
mov qword [rsi], rax
mov r14, qword [rsi + 8]
test r14, r14
jne 0x1401001c0
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1400ff60d
xor r14d, r14d
test r14, r14
jne 0x1401001c0
test bpl, 0x20
jne 0x14010008c
mov rcx, qword [rax + 8]
mov qword [rsi + 0x10], rcx
mov rcx, qword [rax + 0x10]
mov edx, dword [rcx + 0x1c]
movzx edx, dl
shl rdx, 0xc
imul rdx, qword [rcx + 0x20]
shr rdx, 0x1c
mov ecx, 0xf8003fff
and ecx, dword [rax + 0x18]
and edx, 0x7ffc000
or ecx, edx
mov dword [rax + 0x18], ecx
mov rcx, rax
and rcx, 0xffffffffffe00000
inc word [rcx + 0x1012]
mov qword [rax + 8], 0
mov byte [r12], 1
mov r14, rax
jmp 0x1400ff336
xor edx, edx
jmp 0x1400ff38c
test bpl, 0x20
jne 0x14010008c
mov eax, dword [rsi + 0x1c]
movzx r15d, al
shl r15d, 0xc
add r15d, 0x3000
and r15d, 0x1fc000
mov rcx, qword [rdi + 0x14f0]
lea rax, [rcx + r13]
dec rax
mov r14, r13
neg r14
and rax, r14
lea rdx, [rax + r15]
mov qword [rsp + 0x28], rdi
cmp rdx, qword [rdi + 0x14f8]
ja 0x1400ff79c
mov r13, 0xffffffffffe00000
mov rdx, rcx
and rdx, r13
shr ecx, 0xe
movzx ecx, cl
shl rcx, 5
or rcx, rdx
mov edi, 0x1000
or rcx, rdi
and r13, rax
mov ebp, eax
shr ebp, 0xe
and ebp, 0x7f
shl rbp, 5
lea r14, [rbp + 0x1000]
add r14, r13
cmp rcx, r14
jb 0x140100005
add rax, r15
mov rcx, qword [rsp + 0x28]
mov qword [rcx + 0x14f0], rax
mov rcx, r14
mov rdx, rsi
call fcn.140100260
mov rax, qword [r14 + 0x10]
mov ecx, dword [rax + 0x1c]
movzx ecx, cl
shl rcx, 0xc
imul rcx, qword [rax + 0x20]
shr rcx, 0x1c
mov eax, 0xf8003fff
and eax, dword [r14 + 0x18]
and ecx, 0x7ffc000
or eax, ecx
mov dword [r14 + 0x18], eax
mov rax, r14
and rax, 0xffffffffffe00000
inc word [rax + 0x1012]
mov qword [r14 + 8], 0
mov ecx, dword [rsi + 0x1c]
mov eax, ecx
and eax, 0xff
je 0x1400ff740
or r13, rdi
add eax, 3
shr eax, 2
lea rcx, [r13 + 0x1e]
add rcx, rbp
xor edx, edx
mov r8b, byte [rcx]
and r8b, 0x80
or r8b, dl
or r8b, 0x40
mov byte [rcx], r8b
inc edx
add rcx, 0x20
cmp eax, edx
jne 0x1400ff722
mov ecx, dword [rsi + 0x1c]
movzx eax, cl
shl eax, 0xc
imul rax, qword [rsi + 0x20]
shr rax, 0x2a
cmp eax, 0x400
ja 0x140100012
mov byte [r12], 1
mov rax, rsi
mov rdi, qword [rsp + 0x28]
jmp 0x1400ff339
mov rdx, qword [rsi + 0x10]
mov qword [rcx + 8], rdx
mov qword [rsi + 0x10], rcx
jmp 0x1400ff2d9
mov qword [r14 + 0x20], rbx
jmp 0x1400ff34c
mov qword [rax + 8], rcx
jmp 0x1400ff305
mov qword [rcx + 8], r14
mov qword [rax + 8], r15
jmp 0x1400ff330
mov eax, dword [rsi + 0x18]
lea rcx, [rsp + 0x70]
mov qword [rcx + 8], rax
movabs rdi, 0x657a69736e617073
lea rax, [rdi + 0x60dfc00]
mov qword [rcx], rax
call fcn.140028ac0
lea rcx, [rsp + 0x60]
mov qword [rcx + 8], r15
mov qword [rcx], rdi
call fcn.140028ac0
mov rdi, qword [rsp + 0x28]
mov rdx, qword [rdi + 0x14e8]
cmp byte [rdi + 8], 0
jne 0x1400fff9c
cmp byte [rdi + 6], 1
mov eax, 2
sbb rax, 0
mov ecx, 0xffffffff
add eax, ecx
imul rax, rax, 0x420
lea rcx, [0x1402a1af0]
add rcx, rax
test rdx, rdx
jne 0x1400ffec3
mov edx, 0x200000
call fcn.140005c80
mov rdx, rax
test rax, rax
je 0x140100056
mov rax, rdx
sub rax, 0xffffffffffe00000
mov qword [rsp + 0x38], rax
jae 0x1400ff9d5
lea rax, [rdi + 0x1508]
mov qword [rsp + 0x58], rax
mov r8, rdx
mov qword [rsp + 0x20], rdx
mov rax, qword [0x14028a598]
and rax, r8
cmp rax, qword [0x14028a580]
jne 0x1400ff98b
xor ecx, ecx
mov rdx, r8
sub rdx, rax
shl rcx, 0xe
lea rax, [0x14028a6a8]
add rcx, rax
shr rdx, 0x15
mov word [rcx + rdx*2], 0xfffe
lock add qword [rdi + 0x1488], 0x200000
lea rax, [r8 + 0x200000]
mov qword [rsp + 0x48], rax
mov qword [rdi + 0x14e8], rax
xor eax, eax
cmp byte [rdi], 0
setne al
shl rax, 0xf
mov qword [rsp + 0x50], rax
add rax, r8
mov ecx, 0x4000
add rax, rcx
mov qword [rdi + 0x14f0], rax
lea rax, [r8 + 0x1fc000]
mov qword [rdi + 0x14f8], rax
lock inc qword [rdi + 0x14a8]
mov qword [rsp + 0x30], r8
lea rcx, [r8 + 0x1000]
mov edx, 0x1000
mov qword [rsp + 0x40], rcx
mov r8d, 2
call fcn.140005bb0
cmp byte [rdi + 8], 0
jne 0x1400ff914
cmp byte [rdi + 6], 0
jne 0x1400ff9ac
mov r8, qword [rsp + 0x30]
mov qword [r8 + 0x1000], rdi
mov dword [r8 + 0x1010], 0
mov qword [r8 + 0x1008], 0
mov rax, qword [rdi + 0x1500]
test r8, r8
je 0x140100015
lea rcx, [rax + 8]
test rax, rax
cmove rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rdi + 0x1500], rax
mov word [rax + 0x10], 1
mov rdx, qword [rsp + 0x20]
cmp byte [rdi], 2
je 0x14010001e
mov rax, qword [rsp + 0x48]
mov r8, rax
cmp rax, qword [rsp + 0x38]
jb 0x1400ff854
jmp 0x1400ff9d5
mov rax, qword [0x14028a5a0]
and rax, r8
mov ecx, 1
cmp rax, qword [0x14028a588]
je 0x1400ff86d
jmp 0x1400fff6c
lock inc qword [rdi + 0x14a8]
mov rax, qword [rsp + 0x30]
lea rcx, [rax + 0x2000]
mov edx, 0x1000
mov r8d, 2
call fcn.140005bb0
jmp 0x1400ff914
xor eax, eax
cmp byte [rdi], 0
setne al
shl rax, 0xf
or rax, 0x4000
add rax, rdx
je 0x14010007d
dec r13
mov rcx, qword [rdi + 0x14f0]
add r13, rcx
mov rax, r13
and rax, r14
lea rdx, [rax + r15]
cmp rdx, qword [rdi + 0x14f8]
jbe 0x1400ff65d
int3
test bpl, 0x20
jne 0x14010008c
lea rcx, [rdi + 0x40]
cmp rbx, 0x7fe00001
mov qword [rsp + 0x28], rdi
jae 0x140100073
mov qword [rsp + 0x38], rcx
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
lea r14, [rbx + r13]
add r14, 0x203fff
and r14, 0xffffffffffe00000
cmp byte [rdi + 8], 0
jne 0x1400fff62
cmp byte [rdi + 6], 1
mov eax, 2
sbb eax, 0
mov qword [rsp + 0x40], rax
dec eax
imul rax, rax, 0x420
lea rcx, [0x1402a1af0]
add rcx, rax
mov rdx, r14
call fcn.140005c80
test rax, rax
je 0x140100093
lock add qword [rdi + 0x1490], r14
lock inc qword [rdi + 0x14a8]
lea rcx, [rax + 0x1000]
mov edx, 0x1000
mov qword [rsp + 0x20], rcx
mov r8d, 2
mov r15, rax
call fcn.140005bb0
mov rax, qword [rsp + 0x40]
cmp eax, 2
je 0x1400fff3e
mov r11, r14
lea rax, [r15 + r14]
mov rdx, qword [0x14028a598]
and rdx, r15
cmp rdx, qword [0x14028a580]
jne 0x1400ffef4
xor ecx, ecx
lea r10, [r15 + r13]
cmp r15, rax
jae 0x1400ffd49
mov r8, r15
sub r8, rdx
lea rdx, [r15 + 0x200000]
cmp rax, rdx
cmova rdx, rax
mov rax, r15
not rax
add rax, rdx
movq xmm0, rax
shr rax, 0x15
add rax, 8
and rax, 0xfffffffffffffff8
pshufd xmm0, xmm0, 0x44
psrlq xmm0, 0x15
shl rcx, 0xe
shr r8, 0x15
lea rcx, [rcx + r8*2]
lea rdx, [0x14028a6a8]
add rcx, rdx
add rcx, 0xe
xor edx, edx
movdqa xmm1, xmmword [0x14026ad20]
movdqa xmm2, xmmword [0x14026ad30]
movdqa xmm3, xmmword [0x14026ad40]
movdqa xmm4, xmmword [0x140267910]
movdqa xmm5, xmmword [0x14024e5d0]
pxor xmm0, xmm5
pcmpeqd xmm6, xmm6
movq xmm7, rdx
pshufd xmm7, xmm7, 0x44
movdqa xmm8, xmm7
por xmm8, xmm4
pxor xmm8, xmm5
movdqa xmm9, xmm8
pcmpgtd xmm9, xmm0
pcmpeqd xmm8, xmm0
pshufd xmm10, xmm8, 0xf5
pand xmm10, xmm9
pshufd xmm8, xmm9, 0xf5
por xmm8, xmm10
movd r8d, xmm8
not r8d
test r8b, 1
je 0x1400ffbd2
mov word [rcx + rdx*2 - 0xe], dx
pxor xmm8, xmm6
psrldq xmm8, 6
movd r8d, xmm8
shr r8d, 0x10
test r8b, 1
je 0x1400ffbf6
lea r8d, [rdx + 1]
mov word [rcx + rdx*2 - 0xc], r8w
movdqa xmm8, xmm7
por xmm8, xmm3
pxor xmm8, xmm5
movdqa xmm9, xmm8
pcmpgtd xmm9, xmm0
pcmpeqd xmm8, xmm0
pshufd xmm10, xmm8, 0xf5
pand xmm10, xmm9
pshufd xmm8, xmm9, 0xf5
por xmm8, xmm10
pxor xmm8, xmm6
pextrw r8d, xmm8, 0
test r8b, 1
je 0x1400ffc45
lea r8d, [rdx + 2]
mov word [rcx + rdx*2 - 0xa], r8w
pextrw r8d, xmm8, 4
test r8b, 1
je 0x1400ffc5b
lea r8d, [rdx + 3]
mov word [rcx + rdx*2 - 8], r8w
movdqa xmm8, xmm7
por xmm8, xmm2
pxor xmm8, xmm5
movdqa xmm9, xmm8
pcmpgtd xmm9, xmm0
pshufd xmm10, xmm9, 0x44
pcmpeqd xmm8, xmm0
pshufd xmm11, xmm8, 0x55
pand xmm11, xmm10
pshufd xmm10, xmm9, 0x55
por xmm10, xmm11
pxor xmm10, xmm6
pextrw r8d, xmm10, 4
test r8b, 1
je 0x1400ffcb0
lea r8d, [rdx + 4]
mov word [rcx + rdx*2 - 6], r8w
pshufd xmm8, xmm8, 0xf5
pand xmm8, xmm9
pshufd xmm9, xmm9, 0xf5
por xmm9, xmm8
pxor xmm9, xmm6
pextrw r8d, xmm9, 4
test r8b, 1
je 0x1400ffce1
lea r8d, [rdx + 5]
mov word [rcx + rdx*2 - 4], r8w
por xmm7, xmm1
pxor xmm7, xmm5
movdqa xmm8, xmm7
pcmpgtd xmm8, xmm0
pcmpeqd xmm7, xmm0
pshufd xmm9, xmm7, 0xf5
pand xmm9, xmm8
pshufd xmm7, xmm8, 0xf5
por xmm7, xmm9
pxor xmm7, xmm6
pextrw r8d, xmm7, 0
test r8b, 1
je 0x1400ffd27
lea r8d, [rdx + 6]
mov word [rcx + rdx*2 - 2], r8w
pextrw r8d, xmm7, 4
test r8b, 1
je 0x1400ffd3c
lea r8d, [rdx + 7]
mov word [rcx + rdx*2], r8w
add rdx, 8
cmp rax, rdx
jne 0x1400ffb81
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r11
mov r8, qword [rsp + 0x20]
mov qword [r8], rdi
lea rdx, [r8 + 0x20]
mov rax, r10
and rax, 0xffffffffffe00000
mov ecx, r10d
shr ecx, 0xe
and ecx, 0x7f
shl rcx, 5
lea r14, [rax + rcx]
add r14, 0x1000
cmp r14, rdx
mov qword [rsp + 0x30], r10
jne 0x1401000aa
or rax, 0x1000
or byte [rax + rcx + 0x1e], 0x40
lea r15, [rbx + 0xfff]
and r15, 0xfffffffffffff000
mov al, byte [r14 + 0x3e]
and al, 0xc0
or al, 1
mov byte [r14 + 0x3e], al
lea rdx, [r14 + 0x40]
mov dword [r14 + 0x58], r15d
mov rcx, r14
mov qword [rsp + 0x58], rdx
call fcn.140100260
lock inc qword [rdi + 0x14a8]
mov rcx, qword [rsp + 0x30]
mov rdx, r15
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x1401000d5
mov rcx, r15
lock xadd qword [rdi + 0x1478], rcx
add r13, 0xffffffffffffc000
add rcx, r15
mov rax, qword [rdi + 0x1480]
cmp rax, rcx
mov rdx, rcx
cmova rdx, rax
lock cmpxchg qword [rdi + 0x1480], rdx
jne 0x1400ffe10
mov rax, qword [rsp + 0x30]
mov qword [rax], 0
mov qword [r14], rax
and byte [r14 + 0x1b], 0xef
lea rdi, [r14 + 0x68]
mov rax, qword [rsp + 0x48]
mov qword [r14 + 0x80], rax
mov qword [r14 + 0x88], r13
mov rax, qword [rsp + 0x58]
mov qword [r14 + 0x78], rax
mov r15b, 1
mov r13, qword [rsp + 0x38]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
test al, al
je 0x1400fffa6
test r15b, r15b
je 0x14010007d
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0x1510]
mov qword [rdi], rax
test rax, rax
je 0x1400ffe93
mov qword [rax + 8], rdi
mov qword [rdi + 8], 0
mov rax, qword [rsp + 0x28]
mov qword [rax + 0x1510], rdi
test r14, r14
je 0x14010007d
mov rax, qword [r14 + 0x10]
mov byte [r12], 1
mov rdi, qword [rsp + 0x28]
jmp 0x1400ff339
mov r8d, 0x200000
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
call fcn.140027e20
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x20]
test al, al
jne 0x1400ff82c
jmp 0x1400ff816
mov rdx, qword [0x14028a5a0]
and rdx, r15
mov ecx, 1
cmp rdx, qword [0x14028a588]
je 0x1400ffaf0
mov rcx, qword [0x14028a5a8]
and rcx, r15
mov r8, qword [0x14028a590]
xor edx, edx
cmp rcx, r8
cmove rdx, r8
mov r8d, 2
mov ecx, 0xffffffff
cmove rcx, r8
jmp 0x1400ffaf0
lock inc qword [rdi + 0x14a8]
lea rcx, [r15 + 0x2000]
mov edx, 0x1000
mov r8d, 2
call fcn.140005bb0
jmp 0x1400ffad0
mov eax, 3
jmp 0x1400ffa6a
mov rcx, qword [0x14028a5a8]
and rcx, r8
mov rax, qword [0x14028a590]
cmp rcx, rax
mov ecx, 0
cmovne rax, rcx
mov ecx, 0xffffffff
mov edx, 2
cmove rcx, rdx
jmp 0x1400ff86d
mov eax, 3
jmp 0x1400ff7f5
mov rcx, r13
call fcn.1400ff150
jmp 0x1400ffe72
movaps xmm0, xmmword [0x140261350]
lea rdi, [rsp + 0x70]
movaps xmmword [rdi], xmm0
mov r8, qword [rbx]
lea rdx, str.first
mov rcx, rdi
call fcn.1401d32e0
mov rcx, rdi
call fcn.140028ac0
mov rcx, rsi
call fcn.1401d3350
int3
mov rcx, rdi
call fcn.1401df9d0
mov rcx, r15
mov rdx, r12
mov r8d, 2
call fcn.140005bb0
jmp 0x1400ff4dc
or byte [rcx + 0x1e], 0x80
add rcx, 0x20
jmp 0x1400ff699
int3
inc word [rax + 0x10]
jmp 0x1400ff968
mov eax, 0x4000
lea rcx, [r8 + rax]
lock inc qword [rdi + 0x14a8]
mov rdx, qword [rsp + 0x50]
mov r8d, 2
call fcn.140005bb0
mov rcx, rdi
mov rdx, qword [rsp + 0x30]
call fcn.1401df960
mov rdx, qword [rsp + 0x20]
jmp 0x1400ff976
test bpl, 1
jne 0x14010007d
lea rcx, [rdi + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov edx, 0x200000
mov rcx, rdi
call fcn.1401dfdf0
test bpl, 1
je 0x140100195
mov byte [r12], 1
test bpl, 1
je 0x14010017b
xor ebx, ebx
jmp 0x1400ff3aa
test bpl, 1
je 0x1401001a3
xor edi, edi
xor r14d, r14d
xor r15d, r15d
jmp 0x1400ffe5c
test byte [r8 + 0x3e], 0x40
jne 0x1401001b0
mov r8d, r14d
sub r8d, edx
shr r8d, 5
and r8b, 0x3f
or r8b, 0x80
mov rdx, qword [rsp + 0x20]
mov byte [rdx + 0x3e], r8b
jmp 0x1400ffd8e
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
test al, al
jne 0x1401000f3
mov rcx, qword [rsp + 0x38]
call fcn.1400ff150
mov rdi, qword [rsp + 0x28]
mov rcx, rdi
call fcn.1401df9d0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rsp + 0x30]
mov rdx, r15
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
mov rsi, qword [rsp + 0x20]
jne 0x1400ffdf3
test bpl, 1
je 0x1401001b3
mov rsi, qword [rsp + 0x28]
lock inc qword [rsi + 0x14a8]
lea rcx, [0x1402a1af0]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x48]
mov r9, rdi
call fcn.140005d90
lock sub qword [rsi + 0x1490], rdi
xor edi, edi
xor r15d, r15d
mov rsi, qword [rsp + 0x20]
jmp 0x1400ffe5c
mov rsi, qword [rsp + 0x28]
lea rcx, [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rcx, rsi
mov rdx, rbx
call fcn.1401dfa40
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rcx, rbx
call fcn.1401eda40
mov rcx, qword [rsp + 0x28]
mov rdx, r14
call fcn.1401dfdf0
int3
mov rcx, qword [rsp + 0x28]
mov rdx, r15
call fcn.1401dfe20
mov rax, qword [r14 + 8]
mov qword [rsi + 8], rax
cmp qword [r14], 0
jne 0x1401001ec
mov rax, qword [rsi + 0x10]
mov qword [r14 + 8], rax
mov qword [rsi + 0x10], r14
mov rax, r14
mov r14, qword [rsi + 8]
test r14, r14
je 0x1400ff5a4
jmp 0x1401001c0
mov qword [r14 + 8], 0
mov rax, r14
and rax, 0xffffffffffe00000
inc word [rax + 0x1012]
mov rax, qword [r14 + 0x10]
mov ecx, dword [rax + 0x18]
mov edx, dword [rax + 0x1c]
movzx edx, dl
shl rdx, 0xc
imul rdx, qword [rax + 0x20]
shr rdx, 0x2a
mov eax, dword [r14 + 0x18]
shr eax, 0xe
and eax, 0x1fff
sub rdx, rax
imul rcx, rdx
add rcx, 0xfff
and rcx, 0xfffffffffffff000
sub qword [rdi + 0x14d8], rcx
jmp 0x1400ff336