Function at 0x140022bc0
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0xa8
xor r15d, r15d
mov rsi, rcx
cmp qword [rcx + 0x118], r15
jne 0x140022c84
cmp byte [rcx + 0xd8], r15b
jne 0x140022c84
cmp byte [rcx + 0xd9], r15b
jne 0x140022c84
movzx ebx, byte [rcx + 0xe3]
mov r14b, 1
mov rdi, qword [rcx + 0x128]
lea rcx, [0x14009bbb0]
mov byte [0x14009c248], bl
mov dword [0x14009babc], r15d
mov dword [0x14009bbd8], r15d
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [0x1400d1314], r14b
test rdi, rdi
je 0x140022c69
test bl, bl
jne 0x140023079
lea rdx, [0x14008b198]
mov rcx, rdi
call fcn.140015c40
mov qword [0x14009bba8], rax
test rax, rax
je 0x140023069
jmp 0x140022c6d
test bl, bl
je 0x140022c87
mov edx, 4
mov dword [rbp + 0x67], 0x2ad1ffe
lea rcx, [rbp + 0x67]
call fcn.140025590
jmp 0x140022c87
xor r14b, r14b
cmp byte [0x14009bbec], r15b
je 0x140022ce6
lea rax, str.DriverInitData
mov dword [rbp - 0x11], r15d
xorps xmm0, xmm0
mov qword [rbp - 9], rax
lea rcx, [rbp + 0x6f]
mov dword [rbp + 0x17], 0x32
movdqu xmmword [rbp - 1], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140023086
mov rax, qword [rbp + 0x6f]
xor edx, edx
sub rax, qword [0x14009c1f8]
imul rax, rax, 0xf4240
div qword [0x14009c1f0]
add rax, qword [0x14009c200]
mov qword [rbp + 0xf], rax
mov rcx, rsi
call fcn.14003bc70
test al, al
jne 0x140022d0d
lea rcx, [rbp - 0x11]
call fcn.140001370
xor al, al
add rsp, 0xa8
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
test r14b, r14b
je 0x140022dd8
cmp byte [rsi + 0xe6], r15b
jne 0x140022d45
mov rdx, qword [rsi + 0xb8]
mov eax, r15d
add rdx, 0x98
sub eax, dword [rdx]
movsxd rcx, dword [rdx]
add rcx, rdx
neg eax
sbb rax, rax
and rcx, rax
call fcn.140015070
mov rax, qword [rsi + 0xb8]
mov r8d, dword [rsi + 0xf4]
inc r8d
mov edx, dword [rax + 8]
call fcn.140025990
mov rcx, qword [rsi + 0xb8]
mov eax, r15d
add rcx, 0x78
sub eax, dword [rcx]
movsxd rbx, dword [rcx]
add rbx, rcx
lea rcx, [rbp - 0x49]
neg eax
sbb rax, rax
and rbx, rax
mov rdx, rbx
call fcn.140028f20
movsd xmm0, qword [rax + 0x10]
mov eax, dword [rax]
movsd qword [rbp - 0x21], xmm0
test al, 1
je 0x140022dc0
mov rax, qword [rsi + 0xb8]
mov rcx, rbx
sub rax, 0xffffffffffffff80
movsxd rdx, dword [rax]
add rdx, rax
cmp dword [rax], r15d
cmove rdx, r15
call fcn.140015b30
test al, al
je 0x140023093
mov rcx, qword [rsi + 0xb8]
mov eax, r15d
sub rcx, 0xffffffffffffff80
movsxd r9, dword [rcx]
add r9, rcx
sub eax, dword [rcx]
jmp 0x140022dee
mov rdx, qword [rsi + 0xb8]
mov eax, r15d
add rdx, 0x78
movsxd r9, dword [rdx]
add r9, rdx
sub eax, dword [rdx]
neg eax
lea r8, [rsi + 0xc8]
lea rdx, [rsi + 0x78]
sbb rax, rax
and r9, rax
mov rcx, r9
call fcn.140024530
mov rcx, qword [rsi + 0xb8]
mov eax, r15d
add rcx, 0x8c
sub eax, dword [rcx]
movsxd rdx, dword [rcx]
add rdx, rcx
lea rcx, [rsi + 0x230]
neg eax
sbb rax, rax
and rdx, rax
call fcn.140021020
mov rcx, qword [rsi + 0xb8]
mov eax, r15d
add rcx, 0x84
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], r15
sub eax, dword [rcx]
movsxd rdi, dword [rcx]
add rdi, rcx
lea rcx, [rbp - 0x31]
neg eax
sbb rax, rax
and rdi, rax
mov rdx, rdi
call fcn.14003d170
mov rbx, qword [rbp - 0x31]
mov r8, rdi
mov ecx, 8
test rbx, rbx
je 0x140022f2c
mov r14, qword [rbp - 0x29]
lea rdx, str._s:_successfully_mapped_at__p___d_bytes_
mov r9, rbx
mov dword [rsp + 0x20], r14d
call fcn.140014f80
cmp r14, 0x18
jae 0x140022ec7
mov r9d, r14d
mov dword [rsp + 0x20], 0x18
mov r8, rdi
lea rdx, str._s:_Bad_mmap_size__d___need_at_least__d_bytes
mov ecx, 2
call fcn.140014f80
jmp 0x140022f38
cmp dword [rbx], 0x6d072211
je 0x140022ef0
mov r9d, dword [rbx]
lea rdx, str._s:_Bad_magic_number__08x___current_is__08x
mov r8, rdi
mov dword [rsp + 0x20], 0x6d072211
mov ecx, 8
call fcn.140014f80
jmp 0x140022f38
cmp dword [rbx + 0x14], 0x6d072211
je 0x140022f0a
mov r8, rdi
lea rdx, str.Did_not_find_expected_magic_number_marker_at_the_end_of__s._This_most_likely_means_data_writing_code_for_that_file_is_writing_too_much_or_too_little_data
mov ecx, 1
jmp 0x140022f33
movups xmm0, xmmword [rbp - 0x31]
mov qword [rsi + 0xd0], rbx
movups xmm1, xmmword [rbp - 0x21]
movups xmmword [rsi + 0x98], xmm0
movups xmmword [rsi + 0xa8], xmm1
jmp 0x140022fe6
lea rdx, str._s:_mmap_failed
call fcn.140014f80
lea rcx, [rbp + 0x77]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400230b6
mov rax, qword [rbp + 0x77]
xor edx, edx
sub rax, qword [0x14009c1f8]
imul rax, rax, 0xf4240
div qword [0x14009c1f0]
mov rdi, rax
add rdi, qword [0x14009c200]
test rbx, rbx
je 0x140022fa0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
test eax, eax
je 0x1400230c3
mov rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax]
lea rcx, [rbp + 0x7f]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14002305c
mov rax, qword [rbp + 0x7f]
xor edx, edx
sub rax, qword [0x14009c1f8]
imul rax, rax, 0xf4240
div qword [0x14009c1f0]
sub rax, rdi
add rax, qword [0x14009c200]
lock inc dword [0x14009baf0]
lock add qword [0x14009baf8], rax
mov r14, qword [rsi + 0xd0]
mov qword [rsi + 0x178], r14
test r14, r14
je 0x140023041
movsxd rdi, dword [r14 + 4]
mov rbx, qword [rsi + 0x188]
lea rcx, [rdi + 8]
call fcn.14005a7bc
mov qword [rax], rdi
lock add qword [rbx], rdi
lea rbx, [rax + 8]
mov r8, rdi
mov rcx, rbx
xor edx, edx
call fcn.140050400
mov qword [rsi + 0x1b0], rbx
lea rdx, str.Scan_cache_initialized_from_frozen_data____u_entries
mov r8d, dword [r14 + 4]
mov ecx, 8
call fcn.140014f80
lea rcx, [rbp - 0x11]
call fcn.140001370
mov al, 1
add rsp, 0xa8
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, str.QueryPerformanceCounter_failed
call fcn.140014f00
int3
mov rdx, rdi
lea rcx, str.failed_to_open_binlog_file_at__s
call fcn.140014e80
int3
lea rcx, str.If_you_pass___ipc__you_cannot_pass_a_binglog_path
call fcn.140014e80
int3
lea rcx, str.QueryPerformanceCounter_failed
call fcn.140014f00
int3
mov rcx, qword [rsi + 0xb8]
sub rcx, 0xffffffffffffff80
call fcn.140003440
mov r8, rax
lea rcx, str.Unable_to_rename_state_file__s____s
mov rdx, rbx
call fcn.140014e80
int3
lea rcx, str.QueryPerformanceCounter_failed
call fcn.140014f00
int3
lea rcx, str.UnMapViewOfFile___failed
call fcn.140014f00
int3