Function at 0x14004fb60
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xeb8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xe20], xmm8
movdqa xmmword [rbp + 0xe10], xmm7
movaps xmmword [rbp + 0xe00], xmm6
and rsp, 0xffffffffffffff80
mov r14, rcx
mov rsi, qword [rdx + 0x10]
test rsi, rsi
mov qword [rsp + 0x38], rdx
jne 0x14004ffbd
lea rdx, str.RAYON_NUM_THREADSRAYON_RS_NUM_CPUSbytes_remaining_on_stream
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1400f1b40
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x14004fda0
mov r8, qword [rsp + 0x180]
test al, al
je 0x14004fc2b
mov rcx, qword [rsp + 0x190]
test r8, r8
je 0x14004fda0
mov r9, qword [rsp + 0x188]
test rcx, rcx
je 0x14004fd5a
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x14004fcdc
cmp eax, 0x2b
jne 0x14004fce7
dec rcx
je 0x14004fd5a
lea r10, [r8 + 1]
jmp 0x14004fcea
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14004fcc6
lea rax, [r8 + rcx]
mov r9, r8
jmp 0x14004fc58
add r9, 2
cmp rdx, rax
cmovne rdx, r9
mov r9, rdx
cmp rdx, rax
je 0x14004fbe9
lea rdx, [r9 + 1]
movzx r10d, byte [r9]
test r10b, r10b
jns 0x14004fc50
cmp r10b, 0xe0
jb 0x14004fc45
cmp r10b, 0xed
jne 0x14004fc9b
cmp rdx, rax
je 0x14004fbe9
lea rdx, [r9 + 2]
cmp rdx, rax
je 0x14004fbe9
cmp byte [r9 + 1], 0x9f
ja 0x14004fd87
add r9, 3
mov rdx, r9
jmp 0x14004fc50
add r9, 2
cmp rdx, rax
cmove r9, rdx
xor edx, edx
cmp r9, rax
setne dl
add rdx, r9
cmp r10b, 0xf0
jb 0x14004fc50
xor r9d, r9d
cmp rdx, rax
setne r9b
add rdx, r9
jmp 0x14004fc50
test r8, r8
je 0x14004fda0
mov r9, qword [rsp + 0x188]
jmp 0x14004fd5a
mov r10, r8
cmp rcx, 1
jne 0x14004fcea
jmp 0x14004fd5a
mov r10, r8
cmp rcx, 0x11
jae 0x14004fd24
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x14004fd5a
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp rcx, rax
jne 0x14004fd00
mov dil, 1
jmp 0x14004fd5c
xor r11d, r11d
mov edi, 0xa
xor esi, esi
cmp rcx, r11
je 0x14004fd1f
movzx ebx, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add ebx, 0xffffffd0
cmp ebx, 9
ja 0x14004fd5a
test dl, dl
jne 0x14004fd5a
mov rsi, rax
mov eax, ebx
inc r11
add rsi, rax
jae 0x14004fd2e
xor edi, edi
test r9, r9
je 0x14004fd6f
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test dil, dil
je 0x14004fda0
test rsi, rsi
mov rdx, qword [rsp + 0x38]
jne 0x14004ffbd
jmp 0x14004ff7f
cmp qword [rsp + 0x188], 0
je 0x14004fda0
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
lea rdx, [0x14016f8a9]
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1400f1b40
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x14004ff7f
mov r8, qword [rsp + 0x180]
test al, al
je 0x14004fe20
mov rcx, qword [rsp + 0x190]
test r8, r8
je 0x14004ff7f
mov r9, qword [rsp + 0x188]
test rcx, rcx
je 0x14004ff5a
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x14004fedc
cmp eax, 0x2b
jne 0x14004fee7
dec rcx
je 0x14004ff5a
lea r10, [r8 + 1]
jmp 0x14004feea
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14004fec6
lea rax, [r8 + rcx]
mov r9, r8
jmp 0x14004fe58
add r9, 2
cmp rdx, rax
cmovne rdx, r9
nop word cs:[rax + rax]
mov r9, rdx
cmp rdx, rax
je 0x14004fdde
lea rdx, [r9 + 1]
movzx r10d, byte [r9]
test r10b, r10b
jns 0x14004fe50
cmp r10b, 0xe0
jb 0x14004fe3a
cmp r10b, 0xed
jne 0x14004fe9b
cmp rdx, rax
je 0x14004fdde
lea rdx, [r9 + 2]
cmp rdx, rax
je 0x14004fdde
cmp byte [r9 + 1], 0x9f
ja 0x140051dde
add r9, 3
mov rdx, r9
jmp 0x14004fe50
add r9, 2
cmp rdx, rax
cmove r9, rdx
xor edx, edx
cmp r9, rax
setne dl
add rdx, r9
cmp r10b, 0xf0
jb 0x14004fe50
xor r9d, r9d
cmp rdx, rax
setne r9b
add rdx, r9
jmp 0x14004fe50
test r8, r8
je 0x14004ff7f
mov r9, qword [rsp + 0x188]
jmp 0x14004ff5a
mov r10, r8
cmp rcx, 1
jne 0x14004feea
jmp 0x14004ff5a
mov r10, r8
cmp rcx, 0x11
jae 0x14004ff24
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x14004ff5a
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp rcx, rax
jne 0x14004ff00
mov dil, 1
jmp 0x14004ff5c
xor r11d, r11d
mov edi, 0xa
xor esi, esi
cmp rcx, r11
je 0x14004ff1f
movzx ebx, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add ebx, 0xffffffd0
cmp ebx, 9
ja 0x14004ff5a
test dl, dl
jne 0x14004ff5a
mov rsi, rax
mov eax, ebx
inc r11
add rsi, rax
jae 0x14004ff2e
xor edi, edi
test r9, r9
je 0x14004ff6f
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test rsi, rsi
setne al
test dil, al
mov rdx, qword [rsp + 0x38]
jne 0x14004ffbd
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmmword [rsp + 0x180], xmm0
lea rcx, [rsp + 0x180]
call sub.KERNEL32.dll_GetSystemInfo
mov rdx, qword [rsp + 0x38]
mov esi, dword [rsp + 0x1a0]
cmp esi, 1
adc esi, 0
cmp rsi, 0xffff
mov r12d, 0xffff
cmovb r12, rsi
movzx r13d, byte [rdx + 0x59]
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x188], xmm0
movdqu xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
test r12, r12
mov qword [rsp + 0x78], r14
jne 0x140051afe
mov rcx, qword [rsp + 0x198]
mov r14, qword [rsp + 0x1a8]
mov qword [rsp + 0x50], rcx
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x68], rax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x188], xmm0
movdqu xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
test r12, r12
jne 0x140051d81
xor eax, eax
xor edx, edx
mov qword [rsp + 0x48], r14
sub rax, rdx
cmp rax, r12
jb 0x140051db4
lea rsi, [rsp + 0x198]
lea r13, [rsp + 0x890]
lea r14, [rsp + 0x180]
mov qword [rsp + 0x40], r12
mov rdi, r12
jmp 0x1400500fc
mov rcx, qword [rsp + 0x198]
mov rax, r15
shl rax, 4
mov qword [rcx + rax], rbx
mov byte [rcx + rax + 8], r12b
inc r15
mov qword [rsp + 0x1a8], r15
dec rdi
je 0x1400501c6
mov rcx, r13
call fcn.140052bb0
mov rbx, qword [rsp + 0x890]
lock inc qword [rbx]
jle 0x140051e1d
movzx r12d, byte [rsp + 0x8a8]
movups xmm0, xmmword [rsp + 0x890]
movups xmm1, xmmword [rsp + 0x8a0]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm1
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x140050161
mov rcx, r14
call fcn.140053010
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
movdqa xmm0, xmmword [rsp + 0xa0]
movdqa xmm1, xmmword [rsp + 0xb0]
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmmword [rax + rcx], xmm0
inc rdx
mov qword [rsp + 0x190], rdx
mov r15, qword [rsp + 0x1a8]
cmp r15, qword [rsp + 0x1a0]
jne 0x1400500d0
mov rcx, rsi
mov rdx, r15
call fcn.140045e30
mov r15, qword [rsp + 0x1a8]
jmp 0x1400500d0
mov qword [rsp + 0x60], rcx
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0xb0], rax
movdqu xmm0, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0xa0], xmm0
mov rbx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x48]
mov r13, rcx
shl r13, 4
mov r14, qword [rsp + 0x50]
add r13, r14
test rcx, rcx
je 0x14005027d
movabs rax, 0x1c71c71c71c71c7
cmp rcx, rax
ja 0x140051e1d
lea rax, [rcx*8]
lea rsi, [rax + rax*8]
test rsi, rsi
je 0x1400502d2
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
mov r12, qword [rsp + 0x40]
jne 0x140050266
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov rcx, rax
mov qword [0x1401a4160], rax
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x1400502dc
jmp 0x140051e1d
mov esi, 8
sub r13, r14
je 0x140051868
shr r13, 4
xor edi, edi
mov r12, qword [rsp + 0x40]
jmp 0x1400502a9
add r14, 0x10
dec r13
je 0x1400502bc
mov rax, qword [r14]
lock dec qword [rax]
jne 0x1400502a0
mov rcx, r14
call fcn.140052d20
jmp 0x1400502a0
mov r14, qword [rsp + 0x50]
cmp qword [rsp + 0x68], 0
jne 0x140050375
jmp 0x140050386
mov esi, 8
mov r12, qword [rsp + 0x40]
lea rax, [rsp + 0x186]
lea rcx, [rsp + 0x896]
xor edi, edi
pxor xmm0, xmm0
mov rdx, rsi
mov r8, r14
nop dword [rax + rax]
mov r9, qword [r8]
movzx r10d, byte [r8 + 8]
movdqu xmmword [rax], xmm0
mov word [rax + 0x10], 0
movdqu xmmword [rcx], xmm0
mov qword [rdx], 0
mov word [rdx + 8], 0
movups xmm1, xmmword [rsp + 0x180]
movups xmmword [rdx + 0xa], xmm1
mov r11, qword [rsp + 0x190]
mov qword [rdx + 0x1a], r11
movdqu xmm1, xmmword [rsp + 0x890]
movdqu xmmword [rdx + 0x22], xmm1
mov r11, qword [rsp + 0x89e]
mov qword [rdx + 0x30], r11
mov qword [rdx + 0x38], r9
mov byte [rdx + 0x40], r10b
inc rdi
add rdx, 0x48
add r8, 0x10
cmp r8, r13
jne 0x140050300
cmp qword [rsp + 0x68], 0
je 0x140050386
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
test r12, r12
je 0x1400503eb
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x1400503b6
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8, r12
shl r8, 7
sub r8, 0xffffffffffffff80
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov r14, rax
and r14, 0xffffffffffffff80
mov qword [r14 + 0x78], rax
sub r14, 0xffffffffffffff80
cmp r12, 1
jne 0x1400503f9
xor r13d, r13d
jmp 0x140050466
mov r14d, pe_nt_image_headers64
xor r13d, r13d
jmp 0x14005048a
mov edx, eax
and edx, 0x7f
mov ecx, r12d
and ecx, 0xfffe
sub rax, rdx
add rax, 0x110
xor r13d, r13d
nop word cs:[rax + rax]
mov qword [rax - 0x90], 0
mov word [rax - 0x88], 0
mov qword [rax - 0x80], 0
add r13, 2
mov qword [rax - 0x10], 0
mov word [rax - 8], 0
mov qword [rax], 0
add rax, 0x100
cmp rcx, r13
jne 0x140050420
test r12b, 1
je 0x14005048a
lea rax, [r13 + 1]
shl r13, 7
mov qword [r14 + r13], 0
mov word [r14 + r13 + 8], 0
mov qword [r14 + r13 + 0x10], 0
mov r13, rax
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], 0
movdqu xmmword [rsp + 0x198], xmm0
mov qword [rsp + 0x1a8], 0
movdqa xmmword [rsp + 0x1b0], xmm0
mov qword [rsp + 0x1c0], 0
movdqu xmmword [rsp + 0x1c8], xmm0
mov qword [rsp + 0x1d8], 0
movdqa xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], 0
movdqu xmmword [rsp + 0x1f8], xmm0
mov qword [rsp + 0x208], 0
movdqa xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], 0
movdqu xmmword [rsp + 0x228], xmm0
mov qword [rsp + 0x238], 0
movdqa xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], 0
movdqu xmmword [rsp + 0x258], xmm0
mov qword [rsp + 0x268], 0
movdqa xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], 0
movdqu xmmword [rsp + 0x288], xmm0
mov qword [rsp + 0x298], 0
movdqa xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], 0
movdqu xmmword [rsp + 0x2b8], xmm0
mov qword [rsp + 0x2c8], 0
movdqa xmmword [rsp + 0x2d0], xmm0
mov qword [rsp + 0x2e0], 0
movdqu xmmword [rsp + 0x2e8], xmm0
mov qword [rsp + 0x2f8], 0
movdqa xmmword [rsp + 0x300], xmm0
mov qword [rsp + 0x310], 0
movdqu xmmword [rsp + 0x318], xmm0
mov qword [rsp + 0x328], 0
movdqa xmmword [rsp + 0x330], xmm0
mov qword [rsp + 0x340], 0
movdqu xmmword [rsp + 0x348], xmm0
mov qword [rsp + 0x358], 0
movdqa xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], 0
movdqu xmmword [rsp + 0x378], xmm0
mov qword [rsp + 0x388], 0
movdqa xmmword [rsp + 0x390], xmm0
mov qword [rsp + 0x3a0], 0
movdqu xmmword [rsp + 0x3a8], xmm0
mov qword [rsp + 0x3b8], 0
movdqa xmmword [rsp + 0x3c0], xmm0
mov qword [rsp + 0x3d0], 0
movdqu xmmword [rsp + 0x3d8], xmm0
mov qword [rsp + 0x3e8], 0
movdqa xmmword [rsp + 0x3f0], xmm0
mov qword [rsp + 0x400], 0
movdqu xmmword [rsp + 0x408], xmm0
mov qword [rsp + 0x418], 0
movdqa xmmword [rsp + 0x420], xmm0
mov qword [rsp + 0x430], 0
movdqu xmmword [rsp + 0x438], xmm0
mov qword [rsp + 0x448], 0
movdqa xmmword [rsp + 0x450], xmm0
mov qword [rsp + 0x460], 0
movdqu xmmword [rsp + 0x468], xmm0
mov qword [rsp + 0x478], 0
movdqa xmmword [rsp + 0x480], xmm0
mov qword [rsp + 0x490], 0
movdqu xmmword [rsp + 0x498], xmm0
mov qword [rsp + 0x4a8], 0
movdqa xmmword [rsp + 0x4b0], xmm0
mov qword [rsp + 0x4c0], 0
movdqu xmmword [rsp + 0x4c8], xmm0
mov qword [rsp + 0x4d8], 0
movdqa xmmword [rsp + 0x4e0], xmm0
mov qword [rsp + 0x4f0], 0
movdqu xmmword [rsp + 0x4f8], xmm0
mov qword [rsp + 0x508], 0
movdqa xmmword [rsp + 0x510], xmm0
mov qword [rsp + 0x520], 0
movdqu xmmword [rsp + 0x528], xmm0
mov qword [rsp + 0x538], 0
movdqa xmmword [rsp + 0x540], xmm0
mov qword [rsp + 0x550], 0
movdqu xmmword [rsp + 0x558], xmm0
mov qword [rsp + 0x568], 0
movdqa xmmword [rsp + 0x570], xmm0
mov qword [rsp + 0x580], 0
movdqu xmmword [rsp + 0x588], xmm0
mov qword [rsp + 0x598], 0
movdqa xmmword [rsp + 0x5a0], xmm0
mov qword [rsp + 0x5b0], 0
movdqu xmmword [rsp + 0x5b8], xmm0
mov qword [rsp + 0x5c8], 0
movdqa xmmword [rsp + 0x5d0], xmm0
mov qword [rsp + 0x5e0], 0
movdqu xmmword [rsp + 0x5e8], xmm0
mov qword [rsp + 0x5f8], 0
movdqa xmmword [rsp + 0x600], xmm0
mov qword [rsp + 0x610], 0
movdqu xmmword [rsp + 0x618], xmm0
mov qword [rsp + 0x628], 0
movdqa xmmword [rsp + 0x630], xmm0
mov qword [rsp + 0x640], 0
movdqu xmmword [rsp + 0x648], xmm0
mov qword [rsp + 0x658], 0
movdqa xmmword [rsp + 0x660], xmm0
mov qword [rsp + 0x670], 0
movdqu xmmword [rsp + 0x678], xmm0
mov qword [rsp + 0x688], 0
movdqa xmmword [rsp + 0x690], xmm0
mov qword [rsp + 0x6a0], 0
movdqu xmmword [rsp + 0x6a8], xmm0
mov qword [rsp + 0x6b8], 0
movdqa xmmword [rsp + 0x6c0], xmm0
mov qword [rsp + 0x6d0], 0
movdqu xmmword [rsp + 0x6d8], xmm0
mov qword [rsp + 0x6e8], 0
movdqa xmmword [rsp + 0x6f0], xmm0
mov qword [rsp + 0x700], 0
movdqu xmmword [rsp + 0x708], xmm0
mov qword [rsp + 0x718], 0
movdqa xmmword [rsp + 0x720], xmm0
mov qword [rsp + 0x730], 0
movdqu xmmword [rsp + 0x738], xmm0
mov qword [rsp + 0x748], 0
movdqa xmmword [rsp + 0x750], xmm0
mov qword [rsp + 0x760], 0
lea rcx, [rsp + 0x890]
lea rdx, [rsp + 0x180]
mov r8d, 0x5e8
call sub.msvcrt.dll_memcpy
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x1400509ff
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x5f0
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov r12, rax
mov qword [rax], 0
mov rcx, rax
add rcx, 8
lea rdx, [rsp + 0x890]
mov r8d, 0x5e8
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x197], rax
movaps xmm0, xmmword [rsp + 0xa0]
movups xmmword [rsp + 0x187], xmm0
mov rax, qword [rsp + 0x38]
movups xmm6, xmmword [rax + 0x18]
movdqu xmm7, xmmword [rax + 0x38]
movups xmm8, xmmword [rax + 0x48]
mov qword [rax + 0x18], 0
mov qword [rax + 0x38], 0
mov qword [rax + 0x48], 0
movups xmm0, xmmword [rsp + 0x180]
mov rax, qword [rsp + 0x18f]
mov qword [rsp + 0x16f], rax
mov rax, qword [rsp + 0x197]
mov qword [rsp + 0x177], rax
movaps xmmword [rsp + 0x160], xmm0
movaps xmm0, xmmword [rsp + 0x7b0]
movaps xmm1, xmmword [rsp + 0x7c0]
movaps xmm2, xmmword [rsp + 0x7d0]
movaps xmm3, xmmword [rsp + 0x7e0]
movaps xmmword [rsp + 0x890], xmm0
movaps xmmword [rsp + 0x8a0], xmm1
movaps xmmword [rsp + 0x8b0], xmm2
movaps xmmword [rsp + 0x8c0], xmm3
movaps xmm0, xmmword [rsp + 0x7f0]
movaps xmmword [rsp + 0x8d0], xmm0
movaps xmm0, xmmword [rsp + 0x800]
movaps xmmword [rsp + 0x8e0], xmm0
movaps xmm0, xmmword [rsp + 0x810]
movaps xmmword [rsp + 0x8f0], xmm0
movaps xmm0, xmmword [rsp + 0x820]
movdqa xmm1, xmmword [rsp + 0x830]
movaps xmm2, xmmword [rsp + 0x840]
movaps xmm3, xmmword [rsp + 0x850]
movaps xmmword [rsp + 0xa0], xmm0
movdqa xmmword [rsp + 0xb0], xmm1
movaps xmmword [rsp + 0xc0], xmm2
movaps xmmword [rsp + 0xd0], xmm3
movaps xmm0, xmmword [rsp + 0x860]
movaps xmmword [rsp + 0xe0], xmm0
movaps xmm0, xmmword [rsp + 0x870]
movaps xmmword [rsp + 0xf0], xmm0
movdqa xmm0, xmmword [rsp + 0x880]
movdqa xmmword [rsp + 0x100], xmm0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140050bc3
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x300
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov qword [rsp + 0x88], rbx
mov rcx, rax
and rcx, 0xffffffffffffff80
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
movaps xmm0, xmmword [rsp + 0x180]
movaps xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movaps xmm3, xmmword [rsp + 0x1b0]
movaps xmmword [rcx + 0x90], xmm0
movaps xmmword [rcx + 0xa0], xmm1
movaps xmmword [rcx + 0xb0], xmm2
movaps xmmword [rcx + 0xc0], xmm3
movaps xmm0, xmmword [rsp + 0x1c0]
movaps xmmword [rcx + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0x1d0]
movaps xmmword [rcx + 0xe0], xmm0
movaps xmm0, xmmword [rsp + 0x1e0]
movaps xmmword [rcx + 0xf0], xmm0
mov qword [rcx + 0x100], 0
mov qword [rcx + 0x108], r12
movaps xmm0, xmmword [rsp + 0x890]
movaps xmm1, xmmword [rsp + 0x8a0]
movaps xmm2, xmmword [rsp + 0x8b0]
movaps xmm3, xmmword [rsp + 0x8c0]
movaps xmmword [rcx + 0x110], xmm0
movaps xmmword [rcx + 0x120], xmm1
movaps xmmword [rcx + 0x130], xmm2
movaps xmmword [rcx + 0x140], xmm3
movaps xmm0, xmmword [rsp + 0x8d0]
movaps xmmword [rcx + 0x150], xmm0
movaps xmm0, xmmword [rsp + 0x8e0]
movaps xmmword [rcx + 0x160], xmm0
movaps xmm0, xmmword [rsp + 0x8f0]
movaps xmmword [rcx + 0x170], xmm0
mov qword [rcx + 0x180], 0
mov qword [rcx + 0x188], r12
movaps xmm0, xmmword [rsp + 0x100]
movaps xmmword [rcx + 0x1f0], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rcx + 0x1e0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rcx + 0x1d0], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmm1, xmmword [rsp + 0xb0]
movaps xmm2, xmmword [rsp + 0xc0]
movaps xmm3, xmmword [rsp + 0xd0]
movaps xmmword [rcx + 0x1c0], xmm3
movaps xmmword [rcx + 0x1b0], xmm2
movdqa xmmword [rcx + 0x1a0], xmm1
movaps xmmword [rcx + 0x190], xmm0
movaps xmmword [rcx + 0x200], xmm6
movdqa xmmword [rcx + 0x210], xmm7
movaps xmmword [rcx + 0x220], xmm8
mov qword [rcx + 0x230], 0
mov byte [rcx + 0x238], 0
movups xmm0, xmmword [rsp + 0x16f]
movups xmmword [rcx + 0x248], xmm0
movdqa xmm0, xmmword [rsp + 0x160]
movdqu xmmword [rcx + 0x239], xmm0
mov qword [rcx + 0x258], 1
mov qword [rcx + 0x260], r14
mov rax, qword [rsp + 0x40]
mov qword [rcx + 0x268], rax
mov qword [rcx + 0x270], r13
lea rax, [rcx + 0x80]
mov qword [rsp + 0x40], rax
mov qword [rcx + 0x278], 0
mov qword [rcx + 0x280], rsi
mov rax, qword [rsp + 0x48]
mov qword [rcx + 0x288], rax
mov qword [rcx + 0x290], rdi
mov rax, qword [rsp + 0x80]
mov rdi, rax
shl rdi, 5
mov rbx, qword [rsp + 0x58]
add rdi, rbx
shl r15, 4
mov r14, qword [rsp + 0x60]
add r15, r14
test rax, rax
je 0x140051690
add rcx, 0x258
mov qword [rsp + 0x110], rcx
xor eax, eax
mov qword [rsp + 0x48], rax
xorps xmm6, xmm6
movdqa xmm7, xmmword [0x140127600]
mov r14, qword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
jmp 0x140050e71
inc qword [rsp + 0x48]
mov rax, rbx
cmp rbx, rdi
je 0x1400516bc
lea rbx, [rax + 0x20]
movzx esi, byte [rax + 0x18]
cmp sil, 2
je 0x140051690
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x190], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x180], xmm0
mov byte [rsp + 0x198], sil
mov ecx, dword [rax + 0x19]
mov edx, dword [rax + 0x1c]
lea r8, [rsp + 0x199]
mov dword [r8 + 3], edx
mov dword [r8], ecx
cmp r14, r15
je 0x140051672
lea rcx, [rax + 0x19]
mov r12, qword [r14]
movzx r13d, byte [r14 + 8]
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0x150], rdx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x140], xmm0
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x73], ecx
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x28]
test rdx, rdx
je 0x140050f20
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x30]
lea rcx, [rsp + 0x180]
mov r8, qword [rsp + 0x48]
call qword [rax + 0x20]
mov rax, qword [rsp + 0x38]
jmp 0x140050f2c
mov qword [rsp + 0x180], 0
mov r9, qword [rax]
mov r10, qword [rax + 8]
mov rdx, qword [rsp + 0x40]
lock inc qword [rdx]
jle 0x140051e1d
add r14, 0x10
mov rax, qword [rsp + 0x190]
lea r8, [rsp + 0x8d8]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [r8], xmm0
mov qword [rsp + 0x890], r9
mov qword [rsp + 0x898], r10
mov rax, qword [rsp + 0x150]
lea rcx, [rsp + 0x8b0]
mov qword [rcx + 0x10], rax
movdqa xmm0, xmmword [rsp + 0x140]
movdqu xmmword [rcx], xmm0
mov byte [rsp + 0x8c8], sil
mov eax, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x73]
mov dword [r8 - 0xc], ecx
mov dword [r8 - 0xf], eax
mov qword [rsp + 0x8a0], r12
mov byte [rsp + 0x8a8], r13b
mov qword [rsp + 0x8d0], rdx
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x8f0], rax
test rax, rax
jne 0x1400510f0
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x58], 0
je 0x1400510f0
xor ecx, ecx
call fcn.14004f480
test rax, rax
je 0x140051e1d
cmp qword [rax], 0
jne 0x140051880
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x890]
call fcn.14004e4a0
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x140051043
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov rsi, rax
and rsi, 0xffffffffffffff80
mov qword [rsi + 0x78], rax
sub rsi, 0xffffffffffffff80
mov r8d, 0x180
mov rcx, rsi
lea rdx, [rsp + 0x180]
call sub.msvcrt.dll_memcpy
xor ecx, ecx
call fcn.14004f480
test rax, rax
je 0x140051e1d
cmp qword [rax], 0
jne 0x140051e1d
mov qword [rax], rsi
mov rax, qword [rsp + 0x40]
cmp qword [rax + 0x210], 0
je 0x140051e1d
mov rsi, qword [rax + 0x200]
mov rcx, rsi
call sub.KERNEL32.dll_AcquireSRWLockExclusive
movzx eax, byte [rsi + 8]
test al, al
jne 0x140051e1d
mov byte [rsi + 9], 1
lea rcx, [rsi + 0x10]
call sub.KERNEL32.dll_WakeAllConditionVariable
mov rcx, rsi
call fcn.140118b6c
jmp 0x140050e60
lea rcx, [rsp + 0x8a0]
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x1b0], rax
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movaps xmmword [rsp + 0x1a0], xmm2
movdqa xmmword [rsp + 0x190], xmm1
movdqa xmmword [rsp + 0x180], xmm0
mov r13, qword [rsp + 0x8d8]
mov rax, qword [rsp + 0x8e0]
mov rcx, qword [rsp + 0x8e8]
test r13, r13
mov rsi, qword [rsp + 0x80]
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], rcx
je 0x1400511ba
test rcx, rcx
mov rsi, rcx
je 0x1400511c4
js 0x140051e1d
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x1400511a0
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapAlloc
mov r12, rax
test rax, rax
jne 0x1400511ca
jmp 0x140051e1d
xor r12d, r12d
test r9, r9
jne 0x1400511f7
jmp 0x1400511ef
mov r12d, 1
mov rcx, r12
mov rdx, r13
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x118], rsi
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x68]
test r9, r9
jne 0x1400511f7
call fcn.1400e8df0
mov r10, rax
test r12, r12
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x120], r10
je 0x140051248
cmp rsi, 0x10
jae 0x140051267
test rsi, rsi
je 0x140051313
xor eax, eax
nop word cs:[rax + rax]
cmp byte [r12 + rax], 0
je 0x140051e1d
inc rax
cmp rsi, rax
jne 0x140051230
jmp 0x140051313
xor r13d, r13d
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x14005136e
jmp 0x140051359
lea rax, [r12 + 7]
and rax, 0xfffffffffffffff8
sub rax, r12
je 0x1400512a9
cmp rax, rsi
cmovae rax, rsi
test rax, rax
je 0x1400512a9
xor ecx, ecx
nop word cs:[rax + rax]
cmp byte [r12 + rcx], 0
je 0x140051e1d
inc rcx
cmp rax, rcx
jne 0x140051290
lea rcx, [rsi - 0x10]
jmp 0x1400512c0
lea rcx, [rsi - 0x10]
xor eax, eax
jmp 0x1400512c5
cmp rax, rcx
ja 0x1400512fa
movdqu xmm0, xmmword [r12 + rax]
movdqa xmm1, xmm0
paddq xmm1, xmm7
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq rdx, xmm1
movabs r8, 0x8080808080808080
test rdx, r8
jne 0x1400512fa
add rax, 0x10
jmp 0x1400512c0
cmp rax, rsi
je 0x140051313
nop
cmp byte [r12 + rax], 0
je 0x140051e1d
inc rax
cmp rsi, rax
jne 0x140051300
mov qword [rsp + 0xa0], r12
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rsi
lea rcx, [rsp + 0xa0]
call fcn.14000e0f0
mov r13, rax
mov rsi, rdx
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x14005136e
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov r12, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], rsi
mov rax, qword [0x1401a4148]
nop dword [rax + rax]
mov rcx, rax
inc rcx
je 0x140051e1d
lock cmpxchg qword [0x1401a4148], rcx
jne 0x1400513b0
mov qword [r12 + 0x10], rcx
mov byte [r12 + 0x28], 0
lock inc qword [r12]
jle 0x140051e1d
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x140051405
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov r13, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmmword [rax + 0x10], xmm6
mov qword [rsp + 0xa0], rax
lock inc qword [rax]
jle 0x140051e1d
movzx eax, byte [0x1401a4108]
test al, al
je 0x1400514b0
mov byte [0x1401a4108], 1
call fcn.1400f0f00
test rax, rax
je 0x140051e1d
mov rsi, qword [rax]
mov qword [rax], 0
test rsi, rsi
je 0x1400514b0
lock inc qword [rsi]
jle 0x140051e1d
mov byte [0x1401a4108], 1
call fcn.1400f0f00
test rax, rax
je 0x140051e0f
mov rcx, qword [rax]
mov qword [rax], rsi
test rcx, rcx
jne 0x1400514e5
jmp 0x1400514f0
movzx eax, byte [0x1401a4108]
test al, al
je 0x140051656
mov byte [0x1401a4108], 1
call fcn.1400f0f00
test rax, rax
je 0x140051e1d
mov rcx, qword [rax]
mov qword [rax], 0
xor esi, esi
test rcx, rcx
je 0x1400514f0
lock dec qword [rcx]
jne 0x1400514f0
call fcn.140052d90
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x14005150c
lock inc qword [rcx + 0x18]
jle 0x140051e00
mov qword [rsp + 0x98], rax
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x14005153c
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov r8d, pe_nt_image_headers64
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov qword [rax], r12
mov qword [rax + 8], r13
mov qword [rax + 0x10], rsi
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0x18], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rax + 0x20], rcx
movdqa xmm0, xmmword [rsp + 0x180]
movdqa xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movdqu xmmword [rax + 0x28], xmm0
movdqu xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm2
mov rcx, qword [rsp + 0x1b0]
mov qword [rax + 0x58], rcx
mov rcx, qword [rsp + 0x128]
mov qword [rax + 0x60], rcx
mov rcx, qword [rsp + 0x138]
mov qword [rax + 0x68], rcx
mov rcx, qword [rsp + 0x130]
mov qword [rax + 0x70], rcx
mov rcx, qword [rsp + 0x48]
mov qword [rax + 0x78], rcx
mov rcx, qword [rsp + 0x120]
mov rdx, rax
lea r8, [0x14016f878]
call fcn.1400f1e20
mov rsi, rdx
test rax, rax
jne 0x140051930
mov qword [rsp + 0x7b0], r12
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x7b8], rax
mov qword [rsp + 0x7c0], rsi
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lock dec qword [r12]
jne 0x140051632
mov rcx, qword [rsp + 0x7b0]
call fcn.140105cd0
mov rax, qword [rsp + 0x7b8]
lock dec qword [rax]
jne 0x140050e60
lea rcx, [rsp + 0x7b8]
call fcn.140039820
jmp 0x140050e60
xor esi, esi
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rax + 0x10]
test rcx, rcx
jne 0x140051501
jmp 0x14005150c
mov rax, qword [rsp + 0x180]
lock dec qword [rax]
jne 0x14005168d
lea rcx, [rsp + 0x180]
call fcn.140052d20
mov r14, r15
sub rdi, rbx
je 0x1400516bc
shr rdi, 5
jmp 0x1400516a9
add rbx, 0x20
dec rdi
je 0x1400516bc
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x1400516a0
mov rcx, rbx
call fcn.140052d20
jmp 0x1400516a0
cmp qword [rsp + 0x90], 0
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x88]
je 0x1400516e7
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, qword [rsp + 0x58]
call sub.KERNEL32.dll_HeapFree
sub r15, r14
je 0x14005171c
shr r15, 4
jmp 0x140051709
add r14, 0x10
dec r15
je 0x14005171c
mov rax, qword [r14]
lock dec qword [rax]
jne 0x140051700
mov rcx, r14
call fcn.140052d20
jmp 0x140051700
test rdi, rdi
je 0x140051732
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x40]
mov qword [rax + 8], rcx
mov qword [rax], 3
mov rax, qword [rsp + 0x38]
mov rsi, qword [rax + 0x18]
test rsi, rsi
je 0x14005178b
mov rdi, qword [rax + 0x20]
mov rcx, rsi
call qword [rdi]
mov rax, qword [rsp + 0x38]
cmp qword [rdi + 8], 0
je 0x14005178b
cmp qword [rdi + 0x10], 0x11
jb 0x140051775
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x38]
mov rsi, qword [rax + 0x28]
test rsi, rsi
je 0x1400517ca
mov rdi, qword [rax + 0x30]
mov rcx, rsi
call qword [rdi]
mov rax, qword [rsp + 0x38]
cmp qword [rdi + 8], 0
je 0x1400517ca
cmp qword [rdi + 0x10], 0x11
jb 0x1400517b4
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x38]
mov rsi, qword [rax + 0x38]
test rsi, rsi
je 0x140051809
mov rdi, qword [rax + 0x40]
mov rcx, rsi
call qword [rdi]
mov rax, qword [rsp + 0x38]
cmp qword [rdi + 8], 0
je 0x140051809
cmp qword [rdi + 0x10], 0x11
jb 0x1400517f3
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x38]
mov rsi, qword [rax + 0x48]
test rsi, rsi
je 0x14005183e
mov rdi, qword [rax + 0x50]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14005183e
cmp qword [rdi + 0x10], 0x11
jb 0x14005182d
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
movaps xmm6, xmmword [rbp + 0xe00]
movaps xmm7, xmmword [rbp + 0xe10]
movaps xmm8, xmmword [rbp + 0xe20]
lea rsp, [rbp + 0xe38]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
xor edi, edi
mov r12, qword [rsp + 0x40]
cmp qword [rsp + 0x68], 0
jne 0x140050375
jmp 0x140050386
mov rax, qword [rsp + 0x78]
mov qword [rax], 1
mov r8, qword [rsp + 0x8d8]
test r8, r8
je 0x1400518b2
cmp qword [rsp + 0x8e0], 0
je 0x1400518b2
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x8b0]
lock dec qword [rax]
jne 0x140051900
lea rcx, [rsp + 0x8b0]
call fcn.140052d20
mov rax, qword [rsp + 0x8a0]
lock dec qword [rax]
je 0x14005190e
mov rax, qword [rsp + 0x8d0]
lock dec qword [rax]
jne 0x140051929
mov rcx, qword [rsp + 0x8d0]
call fcn.140052de0
sub rdi, rbx
jne 0x14005196f
jmp 0x14005199c
mov rax, qword [rsp + 0x8a0]
lock dec qword [rax]
jne 0x1400518db
lea rcx, [rsp + 0x8a0]
call fcn.140052d20
mov rax, qword [rsp + 0x8d0]
lock dec qword [rax]
je 0x1400518e9
sub rdi, rbx
jne 0x14005196f
jmp 0x14005199c
mov rax, qword [rsp + 0x98]
lock dec qword [rax]
jne 0x14005194b
lea rcx, [rsp + 0xa0]
call fcn.140039820
lock dec qword [r12]
jne 0x14005195a
mov rcx, r12
call fcn.140105cd0
mov rax, qword [rsp + 0x78]
mov qword [rax], 2
mov qword [rax + 8], rsi
sub rdi, rbx
je 0x14005199c
shr rdi, 5
jmp 0x140051989
add rbx, 0x20
dec rdi
je 0x14005199c
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x140051980
mov rcx, rbx
call fcn.140052d20
jmp 0x140051980
cmp qword [rsp + 0x90], 0
je 0x1400519ba
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, qword [rsp + 0x58]
call sub.KERNEL32.dll_HeapFree
sub r15, r14
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x88]
je 0x1400519fc
shr r15, 4
jmp 0x1400519e9
add r14, 0x10
dec r15
je 0x1400519fc
mov rax, qword [r14]
lock dec qword [rax]
jne 0x1400519e0
mov rcx, r14
call fcn.140052d20
jmp 0x1400519e0
test rdi, rdi
je 0x140051a12
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x110]
lock dec qword [rax]
mov rcx, qword [rsp + 0x40]
jne 0x140051aea
mov rax, qword [rcx + 0x210]
test rax, rax
je 0x140051aea
mov rbx, qword [rcx + 0x200]
shl rax, 3
lea r14, [rax + rax*8]
mov r15d, 0x10
xor r12d, r12d
xor r13d, r13d
jmp 0x140051a7d
mov rcx, rsi
call fcn.140118b6c
mov rcx, qword [rsp + 0x40]
add r12, 0x48
sub r15, 0xffffffffffffff80
inc r13
cmp r14, r12
je 0x140051aea
mov eax, 3
xchg qword [rbx + r12 + 0x30], rax
cmp rax, 2
jne 0x140051a6d
cmp qword [rcx + 0x1f0], r13
jbe 0x140051e1d
mov rdi, qword [rcx + 0x1e0]
lea rsi, [rdi + r15]
add rsi, 0xfffffffffffffff0
mov rcx, rsi
call sub.KERNEL32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + r15 - 8]
test al, al
jne 0x140051e1d
cmp byte [rdi + r15 - 7], 0
je 0x140051a60
mov byte [rdi + r15 - 7], 0
add rdi, r15
mov rcx, rdi
call fcn.140118abc
mov rax, qword [rsp + 0x40]
lock dec qword [rax + 0x1f8]
jmp 0x140051a60
lock dec qword [rcx]
jne 0x140051747
call fcn.140052de0
jmp 0x140051747
lea rcx, [rsp + 0x180]
xor edx, edx
mov r8, r12
call fcn.1400530c0
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
sub rax, rdx
cmp rax, r12
jb 0x140051dc9
xorps xmm6, xmm6
lea r15, [rsp + 0x890]
mov rsi, r12
jmp 0x140051b6b
mov rcx, qword [rsp + 0x198]
mov rax, r14
shl rax, 4
mov qword [rcx + rax], rdi
mov byte [rcx + rax + 8], bl
inc r14
mov qword [rsp + 0x1a8], r14
dec rsi
je 0x14005001f
test r13b, r13b
je 0x140051b90
mov rcx, r15
call fcn.140052bb0
mov rdi, qword [rsp + 0x890]
lock inc qword [rdi]
jg 0x140051cc8
jmp 0x140051e1d
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x140051bb8
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov rbx, rax
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x140051bfc
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov r14, rax
mov qword [rax], rbx
mov qword [rax + 8], 0x40
movzx eax, byte [0x1401a4170]
mov rax, qword [0x1401a4160]
test rax, rax
jne 0x140051c4b
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x140051e1d
mov qword [0x1401a4160], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140051e1d
mov rcx, rax
and rcx, 0xffffffffffffff80
lea rdi, [rcx + 0x80]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
mov qword [rcx + 0x100], r14
movaps xmmword [rcx + 0x180], xmm6
mov qword [rsp + 0x890], rdi
mov qword [rsp + 0x898], rbx
mov qword [rsp + 0x8a0], 0x40
mov byte [rsp + 0x8a8], 1
lock inc qword [rdi]
jle 0x140051e1d
movzx ebx, byte [rsp + 0x8a8]
movups xmm0, xmmword [rsp + 0x890]
movups xmm1, xmmword [rsp + 0x8a0]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm1
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x140051d17
lea rcx, [rsp + 0x180]
call fcn.140053010
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
movdqa xmm0, xmmword [rsp + 0xa0]
movdqa xmm1, xmmword [rsp + 0xb0]
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmmword [rax + rcx], xmm0
inc rdx
mov qword [rsp + 0x190], rdx
mov r14, qword [rsp + 0x1a8]
cmp r14, qword [rsp + 0x1a0]
jne 0x140051b40
lea rcx, [rsp + 0x198]
mov rdx, r14
call fcn.140045e30
mov r14, qword [rsp + 0x1a8]
jmp 0x140051b40
lea rcx, [rsp + 0x180]
xor edx, edx
mov r8, r12
call fcn.1400530c0
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
mov qword [rsp + 0x48], r14
sub rax, rdx
cmp rax, r12
jae 0x1400500aa
lea rcx, [rsp + 0x198]
mov r8, r12
call fcn.140053170
jmp 0x1400500aa
lea rcx, [rsp + 0x198]
mov r8, r12
call fcn.140053170
jmp 0x140051b2c
cmp qword [rsp + 0x188], 0
je 0x14004ff7f
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14004ff7f
add rcx, 0x10
xor edx, edx
call fcn.1400e8920
ud2
lock dec qword [rsi]
jne 0x140051e1d
mov rcx, rsi
call fcn.1400e27e0
ud2