Function at 0x140022410
Capabilities:
Create restart manager session
Enumerate processes that use resource

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3a10]
mov eax, 0x3b10
call fcn.14005f310
sub rsp, rax
mov rax, qword [0x1400b5200]
xor rax, rsp
mov qword [rbp + 0x3a00], rax
mov rbx, rdx
mov r13, rcx
mov qword [rsp + 0x68], rcx
xor r15d, r15d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3590], xmm0
movups xmmword [rbp + 0x35a0], xmm0
movups xmmword [rbp + 0x35b0], xmm0
movups xmmword [rbp + 0x35c0], xmm0
mov word [rbp + 0x35d0], ax
lea r8, [rbp + 0x3590]
xor edx, edx
lea rcx, [rsp + 0x40]
call sub.RstrtMgr.DLL_RmStartSession
test eax, eax
je 0x1400225aa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp dword [0x1400b5010], 1
jl 0x140022599
mov edx, 1
lea rcx, [rbp - 0x60]
call fcn.140005990
nop
lea rdx, str.Cant_init_RmStartSession_for_file
lea rcx, [rbp - 0x50]
call fcn.140004350
mov r8, qword [rbx + 8]
mov rdx, qword [rbx]
lea rcx, [rbp - 0x50]
call fcn.140008590
lea rdx, str._last_error
lea rcx, [rbp - 0x50]
call fcn.140004350
mov edx, edi
lea rcx, [rbp - 0x50]
call fcn.14001a380
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.14000cfe0
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x140022514
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
mov rcx, qword [str._P_v_]
test rcx, rcx
je 0x140023446
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0x10]
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x140022590
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002258a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002344c
call fcn.14005e4dc
nop
lea rcx, [rbp - 0x60]
call fcn.140005200
mov qword [r13], r15
mov qword [r13 + 8], r15
mov qword [r13 + 0x10], r15
jmp 0x140022e6d
lea rax, [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov rax, qword [rbx]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp - 0x80]
mov edx, 1
mov ecx, dword [rsp + 0x40]
call sub.RstrtMgr.DLL_RmRegisterResources
test eax, eax
je 0x1400226d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp dword [0x1400b5010], 1
jl 0x1400226c8
mov edx, 1
lea rcx, [rbp - 0x60]
call fcn.140005990
nop
lea rdx, str.Error_on_RmRegisterResources__last_error_code:
lea rcx, [rbp - 0x50]
call fcn.140004350
mov edx, ebx
lea rcx, [rbp - 0x50]
call fcn.14001a380
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.14000cfe0
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x140022643
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
mov rcx, qword [str._P_v_]
test rcx, rcx
je 0x140023452
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0x10]
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x1400226bf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400226b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140023458
call fcn.14005e4dc
nop
lea rcx, [rbp - 0x60]
call fcn.140005200
mov qword [r13], r15
mov qword [r13 + 8], r15
mov qword [r13 + 0x10], r15
jmp 0x140022e64
mov dword [rsp + 0x48], 0x14
lea rax, [rsp + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x160]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x78]
mov ecx, dword [rsp + 0x40]
call sub.RstrtMgr.DLL_RmGetList
test eax, eax
je 0x140022807
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp dword [0x1400b5010], 1
jl 0x1400226c8
mov edx, 1
lea rcx, [rbp - 0x60]
call fcn.140005990
nop
lea rdx, str.Error_on_RmGetList
lea rcx, [rbp - 0x50]
call fcn.140004350
mov r8, qword [rbx + 8]
mov rdx, qword [rbx]
lea rcx, [rbp - 0x50]
call fcn.140008590
lea rdx, str._last_error_code:
lea rcx, [rbp - 0x50]
call fcn.140004350
mov edx, edi
lea rcx, [rbp - 0x50]
call fcn.14001a380
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.14000cfe0
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x140022786
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
mov rcx, qword [str._P_v_]
test rcx, rcx
je 0x14002345e
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0x10]
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x140022802
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400227fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140023464
call fcn.14005e4dc
nop
jmp 0x1400226bf
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xc0], xmm0
mov r14, r15
mov qword [rsp + 0x60], r15
mov qword [rbp + 0xd0], r15
mov ecx, dword [0x1400bf6f0]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x1400b7f90], ecx
jg 0x14002346a
lea rcx, [rbp + 0xa0]
call fcn.14002d870
nop
mov edi, r15d
mov dword [rsp + 0x44], r15d
mov esi, 7
mov r12, qword [rbp + 0xc8]
cmp dword [rsp + 0x48], r15d
jbe 0x140022df5
nop dword [rax]
nop dword [rax + rax]
mov eax, edi
imul rcx, rax, 0x29c
lea rax, [rbp + 0x160]
add rax, rcx
mov qword [rsp + 0x68], rax
mov r8d, dword [rax]
cmp r8d, dword [0x1400b7f8c]
je 0x1400232a5
xor edx, edx
mov ecx, 0x450
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
cmp rax, 0xffffffffffffffff
cmove rbx, r15
mov qword [rbp - 0x70], rbx
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140022dd2
mov rcx, rbx
call fcn.14002d820
test eax, eax
je 0x140023147
xor edx, edx
mov r8d, 0x412
lea rcx, [rbp + 0x35e0]
call fcn.140087b80
mov r9d, 0x208
lea r8, [rbp + 0x35e0]
xor edx, edx
mov rcx, rbx
call sub.KERNEL32.dll_K32GetModuleFileNameExW
mov ecx, eax
test eax, eax
je 0x140022dd0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r15
mov dword [rbp + 0xf8], r15d
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], rsi
mov word [rbp + 0x100], r15w
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], rsi
mov word [rbp + 0x120], r15w
lea rax, [rbp + 0x100]
mov rdx, qword [rbp + 0x100]
cmp rsi, 7
cmova rax, rdx
lea r9, [rax + r15*2]
mov r14d, ecx
lea rax, [rbp + 0x100]
cmova rax, rdx
sub r9, rax
sar r9, 1
cmp r15, r9
jb 0x1400234b2
mov rax, rsi
sub rax, r15
cmp rcx, rax
ja 0x140022a65
lea rax, [r15 + rcx]
mov qword [rbp + 0x110], rax
lea rcx, [rbp + 0x100]
cmp rsi, 7
cmova rcx, rdx
lea r15, [rcx + r9*2]
lea rax, [rbp + 0x35e0]
lea rax, [rax + r14*2]
xor edx, edx
cmp rax, r15
jbe 0x140022a12
lea rax, [rcx + rdx*2]
lea rcx, [rbp + 0x35e0]
cmp rcx, rax
ja 0x140022a12
lea rax, [rbp + 0x35e0]
cmp r15, rax
ja 0x140022a00
mov esi, edx
jmp 0x140022a15
lea rax, [rbp + 0x35e0]
mov rsi, r15
sub rsi, rax
sar rsi, 1
jmp 0x140022a15
mov rsi, r14
lea rcx, [r15 + r14*2]
sub rdx, r9
lea r8, [rdx*2 + 2]
mov rdx, r15
call fcn.1400874e0
lea rdi, [rsi + rsi]
mov r8, rdi
lea rdx, [rbp + 0x35e0]
mov rcx, r15
call fcn.1400874e0
lea rcx, [r15 + rdi]
mov r8, r14
sub r8, rsi
add r8, r8
lea rax, [rsi + r14]
lea rdx, [rbp + 0x35e0]
lea rdx, [rdx + rax*2]
call fcn.1400874e0
jmp 0x140022a88
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0x35e0]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp + 0x100]
call fcn.140020f20
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x140]
call fcn.140001ad0
nop
lea rcx, [rbp + 0x140]
call fcn.14001eb70
lea r11, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 7
cmova r11, qword [rbp + 0xa0]
lea rsi, [rbp + 0x140]
mov r15, qword [rbp + 0x140]
mov r9, qword [rbp + 0x158]
cmp r9, 7
cmova rsi, r15
mov rdi, qword [rbp + 0xb0]
mov rax, qword [rbp + 0x150]
cmp rdi, rax
ja 0x140022b75
sub rax, rdi
test rdi, rdi
je 0x140022ea1
inc rax
lea r14, [rsi + rax*2]
mov rax, rsi
movzx r10d, word [r11]
nop dword [rax]
mov rcx, r14
sub rcx, rax
sar rcx, 1
mov edx, 0
je 0x140022b3c
cmp word [rax], r10w
je 0x140022b39
cmp rcx, 1
je 0x140022b3c
dec rcx
add rax, 2
cmp word [rax], r10w
jne 0x140022b26
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x140022b75
mov r8, rdi
mov rdx, r11
test rdi, rdi
je 0x140022b69
mov r9, rax
sub r9, r11
movzx ecx, word [r9 + rdx]
cmp cx, word [rdx]
jne 0x140022bd4
add rdx, 2
sub r8, 1
jne 0x140022b55
sub rax, rsi
sar rax, 1
je 0x140022e9a
mov rdi, qword [rsp + 0x68]
cmp word [rdi + 0x20c], 0
je 0x140022bf3
mov rcx, qword [rbp + 0xe8]
cmp rcx, qword [rbp + 0xf0]
je 0x140022bdd
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor r15d, r15d
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdi + r8*2 + 0x20c], r15w
jne 0x140022bb0
lea rdx, [rdi + 0x20c]
call fcn.140004b90
add qword [rbp + 0xe8], 0x20
jmp 0x140022bf6
add rax, 2
jmp 0x140022b10
lea r8, [rdi + 0x20c]
mov rdx, rcx
lea rcx, [rbp + 0xe0]
call fcn.140020730
xor r15d, r15d
mov eax, dword [rdi]
mov dword [rbp + 0xf8], eax
mov r14, qword [rsp + 0x60]
cmp r12, r14
je 0x140022c24
lea rdx, [rbp + 0xe0]
mov rcx, r12
call fcn.1400215e0
add r12, 0x60
mov qword [rbp + 0xc8], r12
jmp 0x140022c4d
lea r8, [rbp + 0xe0]
mov rdx, r12
lea rcx, [rbp + 0xc0]
call fcn.140020940
mov r14, qword [rbp + 0xd0]
mov qword [rsp + 0x60], r14
mov r12, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0x158]
cmp rdx, 7
jbe 0x140022c93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022c8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234a6
call fcn.14005e4dc
mov qword [rbp + 0x150], r15
mov esi, 7
mov qword [rbp + 0x158], rsi
mov word [rbp + 0x140], r15w
mov rdx, qword [rbp + 0x138]
cmp rdx, rsi
jbe 0x140022cf3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022cee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234ac
call fcn.14005e4dc
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], rsi
mov word [rbp + 0x120], r15w
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x140022d4f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022d4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234ac
call fcn.14005e4dc
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], rsi
mov word [rbp + 0x100], r15w
mov rdi, qword [rbp + 0xe0]
test rdi, rdi
je 0x140022dcc
mov rsi, qword [rbp + 0xe8]
cmp rdi, rsi
je 0x140022d98
nop dword [rax]
mov rcx, rdi
call fcn.140001a60
add rdi, 0x20
cmp rdi, rsi
jne 0x140022d80
mov rdi, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rdi
sar r8, 5
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.140004300
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r15
mov esi, 7
mov edi, dword [rsp + 0x44]
jmp 0x140022ddc
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140022de5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc edi
mov dword [rsp + 0x44], edi
cmp edi, dword [rsp + 0x48]
jb 0x140022880
mov rax, qword [rbp + 0xc0]
mov qword [r13], rax
mov qword [r13 + 8], r12
mov qword [r13 + 0x10], r14
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x140022e4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022e49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234a0
call fcn.14005e4dc
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], rsi
mov word [rbp + 0xa0], r15w
mov ecx, dword [rsp + 0x40]
call sub.RstrtMgr.DLL_RmEndSession
mov rax, r13
mov rcx, qword [rbp + 0x3a00]
xor rcx, rsp
call fcn.14005e480
mov rbx, qword [rsp + 0x3b60]
add rsp, 0x3b10
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r9, qword [rbp + 0x158]
xor r14d, r14d
mov qword [r13], r14
mov qword [r13 + 8], r14
mov qword [r13 + 0x10], r14
cmp r9, 7
jbe 0x140022eeb
lea rdx, [r9*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140022ee3
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234a6
mov rcx, r15
call fcn.14005e4dc
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], 7
mov word [rbp + 0x140], r14w
mov rdx, qword [rbp + 0x138]
cmp rdx, 7
jbe 0x140022f4b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022f46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234ac
call fcn.14005e4dc
mov qword [rbp + 0x130], r14
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r14w
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x140022fab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022fa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234ac
call fcn.14005e4dc
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x118], 7
mov word [rbp + 0x100], r14w
mov rdi, qword [rbp + 0xe0]
test rdi, rdi
je 0x140023045
mov rsi, qword [rbp + 0xe8]
cmp rdi, rsi
je 0x140022ff8
nop dword [rax]
mov rcx, rdi
call fcn.140001a60
add rdi, 0x20
cmp rdi, rsi
jne 0x140022fe0
mov rdi, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xf0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x14002302b
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400234ac
mov rcx, rdi
call fcn.14005e4dc
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r14
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x140023095
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023090
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002343a
call fcn.14005e4dc
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], r14w
mov rsi, qword [rbp + 0xc0]
test rsi, rsi
je 0x140022e64
mov rdi, rsi
cmp rsi, r12
je 0x1400230ea
lea rcx, [rdi + 0x40]
call fcn.140001a60
lea rcx, [rdi + 0x20]
call fcn.140001a60
mov rcx, rdi
call fcn.140004200
add rdi, 0x60
cmp rdi, r12
jne 0x1400230c7
mov rcx, qword [rsp + 0x60]
sub rcx, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 5
cmp rdx, 0x1000
mov rax, rsi
jb 0x14002313a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140023440
mov rcx, rsi
call fcn.14005e4dc
jmp 0x140022e64
mov qword [r13], r15
mov qword [r13 + 8], r15
mov qword [r13 + 0x10], r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x1400231a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002319e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002343a
call fcn.14005e4dc
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], rsi
mov word [rbp + 0xa0], r15w
mov rsi, qword [rbp + 0xc0]
test rsi, rsi
je 0x140022e64
cmp rsi, r12
je 0x140023290
lea rbx, [rsi + 0x58]
mov rdx, qword [rbx]
cmp rdx, 7
jbe 0x140023215
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140023210
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140023440
mov rcx, r8
call fcn.14005e4dc
mov qword [rbx - 8], r15
mov qword [rbx], 7
mov word [rbx - 0x18], r15w
mov rdx, qword [rbx - 0x20]
cmp rdx, 7
jbe 0x140023265
mov rcx, qword [rbx - 0x38]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140023260
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140023440
mov rcx, r8
call fcn.14005e4dc
mov qword [rbx - 0x28], r15
mov qword [rbx - 0x20], 7
mov word [rbx - 0x38], r15w
lea rcx, [rbx - 0x58]
call fcn.140004200
add rbx, 0x60
lea rax, [rbx - 0x58]
cmp rax, r12
jne 0x1400231d6
sub r14, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul r14
jmp 0x1400230ff
mov qword [r13], r15
mov qword [r13 + 8], r15
mov qword [r13 + 0x10], r15
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x1400232f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400232f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002343a
call fcn.14005e4dc
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], rsi
mov word [rbp + 0xa0], r15w
mov rsi, qword [rbp + 0xc0]
test rsi, rsi
je 0x140022e64
cmp rsi, r12
je 0x1400233ea
lea rbx, [rsi + 0x58]
nop word [rax + rax]
mov rdx, qword [rbx]
cmp rdx, 7
jbe 0x14002336f
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14002336a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140023440
mov rcx, r8
call fcn.14005e4dc
mov qword [rbx - 8], r15
mov qword [rbx], 7
mov word [rbx - 0x18], r15w
mov rdx, qword [rbx - 0x20]
cmp rdx, 7
jbe 0x1400233bf
mov rcx, qword [rbx - 0x38]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400233ba
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140023440
mov rcx, r8
call fcn.14005e4dc
mov qword [rbx - 0x28], r15
mov qword [rbx - 0x20], 7
mov word [rbx - 0x38], r15w
lea rcx, [rbx - 0x58]
call fcn.140004200
add rbx, 0x60
lea rax, [rbx - 0x58]
cmp rax, r12
jne 0x140023330
sub r14, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul r14
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 5
mov rax, rsi
cmp rdx, 0x1000
jb 0x14002313a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140023440
jmp 0x14002313a
call fcn.1400645e4
nop
call fcn.1400645e4
nop
call fcn.14003ad30
nop
call fcn.1400645e4
nop
call fcn.14003ad30
nop
call fcn.1400645e4
nop
call fcn.14003ad30
nop
call fcn.1400645e4
nop
lea rcx, [0x1400b7f90]
call fcn.14005e5b8
cmp dword [0x1400b7f90], 0xffffffff
jne 0x140022848
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x1400b7f8c], eax
lea rcx, [0x1400b7f90]
call fcn.14005e54c
jmp 0x140022848
call fcn.1400645e4
nop
call fcn.1400645e4
nop
call fcn.1400645e4
nop
call fcn.1400025b0
int3