Function at 0x18002a0e0
Capabilities:
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x138
mov r15, rdx
mov rsi, rcx
mov rax, qword [str.LoadLibraryA]
xor rax, rsp
mov qword [rsp + 0x130], rax
test r8, r8
je 0x18002f687
mov r13, r8
mov eax, dword [0x1800a6698]
test r15, r15
je 0x18002a458
test eax, eax
je 0x18002f692
mov r12, r15
and r12, 0xfffffffffff00000
cmp r12, r15
je 0x18002ea9c
mov eax, r15d
shr eax, 0xc
movzx eax, al
lea rax, [rax + rax*2]
mov rax, qword [r12 + rax*8 + 0x30]
mov rdi, rax
and rdi, 0xfffffffffffff000
test al, 2
jne 0x18002a168
mov rax, qword [rdi]
mov rdi, qword [rax + 0x10]
mov rbp, r12
cmp rdi, 0xfc000
ja 0x18002eada
mov rbx, qword [rbp]
mov rax, qword [rsi]
test rax, rax
je 0x18002a18d
cmp rbx, rax
jne 0x18002f73c
cmp r13, 0xfc000
ja 0x18002c17c
cmp r13, 8
jbe 0x18002b505
cmp r13, 0x1f0
ja 0x18002a56c
lea rsi, [r13 + 0xf]
and rsi, 0xfffffffffffffff0
xor eax, eax
cmp rsi, rdi
sete cl
cmp rdi, 0xfc001
jae 0x18002f6ab
test cl, cl
jne 0x18002ad5e
lea rcx, [rdi - 0xf01]
cmp rcx, 0xfb100
setae cl
xor al, 1
or al, cl
je 0x18002ace1
cmp byte [rbx + 0x71], 0
mov rbp, rbx
jne 0x18002a62b
cmp r13, 0x1f1
jae 0x18002a624
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbp, qword [rax + 8]
test rbp, rbp
je 0x18002f755
cmp r13, 8
jbe 0x18002b143
cmp r13, 0x1f1
jae 0x18002a7ab
lea rax, [r13 + 0xf]
mov rcx, rax
and rcx, 0xfffffffffffffff0
mov qword [rsp + 0x70], rcx
shr rax, 4
dec rax
mov qword [rsp + 0x78], rdi
lea rax, [rax + rax*2]
shl rax, 4
mov qword [rsp + 0x30], rax
lea rsi, [rax + rbp]
add rsi, 0x98
cmp byte [rbp + 0x70], 0
mov qword [rsp + 0x20], rbp
je 0x18002a28f
cmp qword [rbp + 0x78], 0
je 0x18002f324
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x38], rcx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r10, qword [rsp + 0x20]
mov r14, qword [rsi]
test r14, r14
mov rdi, qword [rsp + 0x30]
je 0x18002aa02
cmp dword [r14 + 0xc], 0
je 0x18002aa02
mov eax, dword [r14 + 8]
mov edx, dword [r14 + rax*4 + 0x10]
test edx, edx
je 0x18002add4
mov rbp, qword [r10 + 0x78]
test rbp, rbp
jne 0x18002a5d5
bsf esi, edx
mov ebp, eax
shl ebp, 5
or ebp, esi
mov ecx, dword [r10 + rdi + 0xb8]
imul rbp, qword [r10 + rdi + 0xa8]
add rcx, r14
add rbp, rcx
btc edx, esi
mov dword [r14 + rax*4 + 0x10], edx
dec dword [r14 + 0xc]
test rbp, rbp
je 0x18002e4fe
mov rax, qword [rsp + 0x70]
add qword [r10 + 0x50], rax
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rdi, qword [rsp + 0x78]
test rbp, rbp
je 0x18002e509
cmp rdi, r13
cmovb r13, rdi
mov rcx, rbp
mov rdx, r15
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov rsi, r15
and rsi, 0xfffff
je 0x18002f0fe
cmp qword [r12], rbx
jne 0x18002f6b2
lea r14, [rbx + 0x18]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
shr rsi, 0xc
lea rax, [rsi + rsi*2]
mov rdi, qword [r12 + rax*8 + 0x30]
test dil, 0x20
jne 0x18002f6cb
test dil, 1
je 0x18002f6e4
mov eax, edi
and rdi, 0xfffffffffffff000
test al, 2
jne 0x18002a755
mov r13, r12
mov qword [rsp + 0x20], rbx
mov rsi, qword [rdi]
mov r12, qword [rsi + 0x10]
mov rcx, r15
mov dl, 0xe5
mov r8, r12
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rsi + 0x20]
add eax, edi
sub r15d, eax
movzx eax, word [rsi + 0x28]
imul eax, r15d
mov ecx, eax
shr ecx, 0x11
shr eax, 0x16
cmp eax, dword [rdi + 8]
jb 0x18002ae3a
mov eax, eax
mov edx, dword [rdi + rax*4 + 0x10]
mov ebx, 1
shl ebx, cl
bt edx, ecx
jb 0x18002f6fd
or edx, ebx
mov dword [rdi + rax*4 + 0x10], edx
mov eax, dword [rdi + 0xc]
lea ecx, [rax + 1]
mov dword [rdi + 0xc], ecx
cmp ecx, dword [rsi + 0x18]
je 0x18002b1c7
test eax, eax
mov rbx, qword [rsp + 0x20]
je 0x18002a662
sub qword [rbx + 0x50], r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbp, rbp
je 0x18002e509
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.18004bde0
mov rax, rbp
add rsp, 0x138
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test eax, eax
je 0x18002f3b6
mov r14, qword [rsi]
test r14, r14
jne 0x18002bb8c
cmp r13, 0x1f1
jae 0x18002bb85
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r14, qword [rax + 8]
test r14, r14
je 0x18002f716
cmp r13, 8
jbe 0x18002b0f5
cmp r13, 0x1f1
jae 0x18002a78d
add r13, 0xf
mov r15, r13
and r15, 0xfffffffffffffff0
shr r13, 4
dec r13
lea r12, [r13*2]
add r12, r13
shl r12, 4
lea rsi, [r14 + r12]
add rsi, 0x98
cmp byte [r14 + 0x70], 0
je 0x18002a4f1
cmp qword [r14 + 0x78], 0
je 0x18002f2bc
lea r13, [r14 + 0x18]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [rsi]
test rbx, rbx
je 0x18002a7cc
cmp dword [rbx + 0xc], 0
je 0x18002a7cc
mov eax, dword [rbx + 8]
mov edx, dword [rbx + rax*4 + 0x10]
test edx, edx
je 0x18002ad6f
mov rbp, qword [r14 + 0x78]
test rbp, rbp
jne 0x18002a58c
bsf edi, edx
mov ebp, eax
shl ebp, 5
or ebp, edi
mov ecx, dword [r14 + r12 + 0xb8]
imul rbp, qword [r14 + r12 + 0xa8]
add rcx, rbx
add rbp, rcx
btc edx, edi
mov dword [rbx + rax*4 + 0x10], edx
dec dword [rbx + 0xc]
test rbp, rbp
je 0x18002e35c
add qword [r14 + 0x50], r15
mov rcx, r13
jmp 0x18002a422
cmp r13, 0xf00
ja 0x18002a64e
lea rsi, [r13 + 0xff]
and rsi, 0xffffffffffffff00
jmp 0x18002a1b9
mov rsi, qword [rbp]
mov rcx, qword [rbp + 8]
mov qword [rbp], rcx
mov rdi, rsi
shl rdi, 0x17
xor rdi, rsi
mov rsi, rcx
shr rsi, 0x1a
xor rsi, rcx
xor rsi, rdi
shr rdi, 0x11
xor rsi, rdi
mov qword [rbp + 8], rsi
add ecx, esi
mov ebp, edx
ror ebp, cl
test ebp, ebp
je 0x18002a779
bsf edi, ebp
add edi, ecx
and edi, 0x1f
jmp 0x18002a52f
mov r9, rbx
mov rbx, qword [rbp]
mov rcx, qword [rbp + 8]
mov qword [rbp], rcx
mov rsi, rbx
shl rsi, 0x17
xor rsi, rbx
mov rbx, rcx
shr rbx, 0x1a
xor rbx, rcx
xor rbx, rsi
shr rsi, 0x11
xor rbx, rsi
mov qword [rbp + 8], rbx
add ecx, ebx
mov ebp, edx
ror ebp, cl
test ebp, ebp
je 0x18002a783
bsf esi, ebp
add esi, ecx
and esi, 0x1f
mov rbx, r9
jmp 0x18002a2e0
mov rbp, qword [0x1800a66c8]
cmp r13, 0xf00
jbe 0x18002a22e
mov rcx, rbp
mov rdx, r13
xor r8d, r8d
call fcn.180038150
mov rbp, rax
jmp 0x18002a32c
lea esi, [r13 + 0xfff]
and esi, 0x1ff000
mov al, 1
jmp 0x18002a1bb
mov rax, qword [rsi]
cmp rax, rdi
je 0x18002a41b
test rax, rax
je 0x18002b8b7
cmp rdi, rax
jae 0x18002ae42
cmp dword [rax + 0xc], 0
je 0x18002b8b7
mov rcx, rax
and rcx, 0xfffffffffff00000
shr eax, 0xc
movzx eax, al
shl rax, 3
lea r9, [rax + rax*2]
or r9, rcx
add r9, 0x20
mov rbx, qword [rsi + 8]
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0
test rbx, rbx
je 0x18002b546
lea rcx, [rsp + 0xf8]
xor r10d, r10d
mov r8, r10
mov r10, rcx
mov rcx, qword [rbx]
test rcx, rcx
je 0x18002a6f9
mov rax, qword [rcx + 8]
test al, 1
je 0x18002a6f9
mov rdx, qword [rcx]
test rdx, rdx
je 0x18002a6f9
test byte [rdx + 8], 1
jne 0x18002a71b
mov rcx, rbx
cmp rcx, r9
seta al
jbe 0x18002a711
mov rbx, qword [rcx]
test rbx, rbx
jne 0x18002a6d5
jmp 0x18002b833
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
jmp 0x18002a707
and rax, 0xfffffffffffffffe
mov qword [rbx], rax
mov r11, rbx
and r11, 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, r11
mov qword [rcx + 8], rdx
test rax, rax
je 0x18002f66e
and byte [rax + 8], 0xfe
cmp qword [r10], rbx
jne 0x18002b7b3
mov qword [r10], rcx
jmp 0x18002a6fc
mov rcx, r15
mov dl, 0xe5
mov r8, rdi
call sub.VCRUNTIME140.dll_memset
sub qword [rbx + 0x58], rdi
mov rcx, rbx
mov rdx, r15
mov r8b, 1
call fcn.180027800
jmp 0x18002a41f
mov edi, 0x20
jmp 0x18002a5cb
mov esi, 0x20
jmp 0x18002a617
add r13, 0xff
mov r15d, r13d
and r15d, 0x1f00
shr r13, 8
add r13, 0x1d
jmp 0x18002a4c5
lea rax, [r13 + 0xff]
mov ecx, eax
and ecx, 0x1f00
mov qword [rsp + 0x70], rcx
shr rax, 8
add rax, 0x1d
jmp 0x18002a25c
mov rdx, qword [r14 + r12 + 0xa0]
test rdx, rdx
je 0x18002bbb9
lea r9, [r14 + r12]
add r9, 0xa0
mov rax, rdx
mov rbp, rax
mov rax, qword [rax]
test rax, rax
jne 0x18002a7eb
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp rdx, rbp
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x18002b198
mov rbx, qword [rdx]
test rbx, rbx
je 0x18002f66e
mov rax, qword [rbx + 8]
test al, 1
je 0x18002af13
xor eax, eax
mov qword [rsp + 0x20], rax
mov r8d, 0xffffffff
xor r10d, r10d
mov r11, rdx
mov rdx, rbx
xor ecx, ecx
cmp rdx, rbp
setb cl
cmova ecx, r8d
cmp ecx, 0xffffffff
jne 0x18002a8ec
test rdx, rdx
je 0x18002c1a8
mov rbx, qword [rdx]
test rbx, rbx
je 0x18002c1a8
mov rcx, qword [rbx + 8]
test cl, 1
jne 0x18002a84b
mov rax, qword [rbx]
test rax, rax
je 0x18002a892
test byte [rax + 8], 1
jne 0x18002a84b
or rcx, 1
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x18002f395
mov rdi, qword [rbx]
test rdi, rdi
je 0x18002a8bf
mov rax, qword [rdi + 8]
test al, 1
jne 0x18002b8db
or rcx, 1
mov qword [rdx + 8], rcx
mov rax, qword [rbx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rbx], rdx
mov rdi, rbx
cmp qword [r11], rdx
jne 0x18002f7b8
mov qword [r11], rdi
mov rdx, rdi
jmp 0x18002a851
test ecx, ecx
jne 0x18002a90c
test rdx, rdx
je 0x18002ac54
mov rdi, qword [rdx + 8]
mov rax, r11
cmp rdi, 1
jbe 0x18002ac45
jmp 0x18002a91e
test rdx, rdx
je 0x18002f66e
mov rdi, qword [rdx + 8]
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
mov rbx, rdi
and rbx, 0xfffffffffffffffe
je 0x18002a93e
mov rax, qword [rbx]
test rax, rax
je 0x18002a93e
test byte [rax + 8], 1
jne 0x18002a84b
mov qword [rsp + 0x30], r9
mov r9, qword [rdx]
test r9, r9
je 0x18002f66e
mov rbx, qword [r9 + 8]
test bl, 1
je 0x18002baf3
and rbx, 0xfffffffffffffffe
je 0x18002f79b
mov rcx, qword [rbx]
test rcx, rcx
je 0x18002a978
test byte [rcx + 8], 1
jne 0x18002c284
and edi, 1
or rdi, rbx
mov qword [r9 + 8], rdi
or byte [rbx + 8], 1
mov rbx, qword [rdx]
test rbx, rbx
je 0x18002f77b
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r9, qword [rsp + 0x30]
je 0x18002f39d
mov rax, qword [rdi]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rdi], rdx
mov rax, qword [rbx + 8]
and eax, 1
or rax, rdi
mov qword [rbx + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18002bcc6
mov qword [r11], rbx
mov rdx, r11
jmp 0x18002a84b
mov rdx, qword [r10 + rdi + 0xa0]
test rdx, rdx
je 0x18002bc36
lea r14, [r10 + rdi]
add r14, 0xa0
mov rax, rdx
mov rbp, rax
mov rax, qword [rax]
test rax, rax
jne 0x18002aa21
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp rdx, rbp
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x18002b3f9
mov rdi, rsi
mov rsi, qword [rdx]
test rsi, rsi
je 0x18002f66e
mov rax, qword [rsi + 8]
test al, 1
je 0x18002af81
xor eax, eax
mov qword [rsp + 0x28], rax
mov r8d, 0xffffffff
xor r9d, r9d
mov r11, rdx
mov rdx, rsi
xor eax, eax
cmp rsi, rbp
setb al
cmova eax, r8d
cmp eax, 0xffffffff
jne 0x18002ab23
test rdx, rdx
je 0x18002c20b
mov rsi, qword [rdx]
test rsi, rsi
je 0x18002c20b
mov rax, qword [rsi + 8]
test al, 1
jne 0x18002aa84
mov rcx, qword [rsi]
test rcx, rcx
je 0x18002aaca
test byte [rcx + 8], 1
jne 0x18002aa84
or rax, 1
mov qword [rsi + 8], rax
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x18002f5ef
mov rsi, qword [rcx]
test rsi, rsi
je 0x18002aaf9
mov r10, qword [rsi + 8]
test r10b, 1
jne 0x18002b948
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rsi, rcx
cmp qword [r11], rdx
jne 0x18002f7d5
mov qword [r11], rsi
jmp 0x18002aa87
test eax, eax
jne 0x18002ab46
test rdx, rdx
mov rsi, rdi
je 0x18002ac9d
mov rcx, qword [rdx + 8]
mov rax, r11
cmp rcx, 1
jbe 0x18002ac8e
jmp 0x18002ab5b
test rdx, rdx
je 0x18002f66e
mov rsi, rdi
mov rcx, qword [rdx + 8]
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x28], rax
mov rdi, rsi
mov rsi, rcx
and rsi, 0xfffffffffffffffe
je 0x18002ab7e
mov rax, qword [rsi]
test rax, rax
je 0x18002ab7e
test byte [rax + 8], 1
jne 0x18002aa84
mov r10, qword [rdx]
test r10, r10
je 0x18002f66e
mov rsi, qword [r10 + 8]
test sil, 1
je 0x18002bb3e
mov qword [rsp + 0x58], r14
and rsi, 0xfffffffffffffffe
je 0x18002f667
mov r14, qword [rsi]
test r14, r14
je 0x18002abba
test byte [r14 + 8], 1
jne 0x18002c2cf
and ecx, 1
or rcx, rsi
mov qword [r10 + 8], rcx
or byte [rsi + 8], 1
mov rsi, qword [rdx]
test rsi, rsi
je 0x18002f77b
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
mov r10, qword [rdx + 8]
mov rcx, r10
and rcx, 0xfffffffffffffffe
mov r14, qword [rsp + 0x58]
je 0x18002f39d
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and r10d, 1
or r10, rax
mov qword [rdx + 8], r10
mov qword [rcx], rdx
mov rax, qword [rsi + 8]
and eax, 1
or rax, rcx
mov qword [rsi + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18002beed
mov qword [r11], rsi
mov rdx, r11
jmp 0x18002aa84
mov r10, qword [rdx]
test r10, r10
jne 0x18002b576
xor r10d, r10d
cmp qword [r11], rdx
jne 0x18002b9aa
mov qword [r11], r10
mov rax, qword [rsp + 0xf8]
mov qword [r9], rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov rbx, 0xfffffffffffff000
and rbx, qword [rbp + 0x10]
mov qword [rsi], rbx
test rbx, rbx
jne 0x18002a514
jmp 0x18002e35c
mov r9, qword [rdx]
test r9, r9
jne 0x18002b644
xor r9d, r9d
cmp qword [r11], rdx
jne 0x18002b9c1
mov qword [r11], r9
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsp + 0xf8]
mov qword [r14], rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov r14, 0xfffffffffffff000
and r14, qword [rbp + 0x10]
mov qword [rsi], r14
test r14, r14
jne 0x18002a2bf
jmp 0x18002e4fe
mov qword [rsp + 0x50], r12
mov r12, rsi
sub r12, rdi
jb 0x18002b490
mov eax, r15d
shr eax, 0xc
movzx r14d, al
mov qword [rsp + 0x78], rdi
mov rbp, rdi
shr rbp, 0xc
lea rdi, [rbx + 0x18]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, r14
mov qword [rsp + 0x20], r14
add rbp, r14
cmp rbp, 0xfe
ja 0x18002ad46
lea r14, [rbp*2]
add r14, rbp
mov rax, qword [rsp + 0x50]
mov rax, qword [rax + r14*8 + 0x30]
test al, 1
je 0x18002afef
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r12, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x78]
jmp 0x18002a1f1
sub rdi, r13
ja 0x18002b428
mov rbp, r15
jmp 0x18002a428
mov ecx, dword [r14 + r12 + 0xb4]
lea edx, [rax + 1]
mov ebp, eax
shl ebp, 5
cmp edx, ecx
jae 0x18002f7a7
mov r8d, dword [rbx + rdx*4 + 0x10]
inc rdx
add ebp, 0x20
inc eax
test r8d, r8d
je 0x18002ad7f
mov rdi, qword [r14 + 0x78]
test rdi, rdi
jne 0x18002b055
bsf edi, r8d
or ebp, edi
mov ecx, dword [r14 + r12 + 0xb8]
add rcx, rbx
imul rbp, qword [r14 + r12 + 0xa8]
add rbp, rcx
btc r8d, edi
mov dword [rbx + rdx*4 + 0xc], r8d
mov dword [rbx + 8], eax
jmp 0x18002a554
mov ecx, dword [r10 + rdi + 0xb4]
lea edx, [rax + 1]
mov ebp, eax
shl ebp, 5
cmp edx, ecx
jae 0x18002f7af
mov r8d, dword [r14 + rdx*4 + 0x10]
inc rdx
add ebp, 0x20
inc eax
test r8d, r8d
je 0x18002ade4
mov rsi, qword [r10 + 0x78]
test rsi, rsi
jne 0x18002b09d
bsf esi, r8d
or ebp, esi
mov ecx, dword [r10 + rdi + 0xb8]
add rcx, r14
imul rbp, qword [r10 + rdi + 0xa8]
add rbp, rcx
btc r8d, esi
mov dword [r14 + rdx*4 + 0xc], r8d
mov dword [r14 + 8], eax
jmp 0x18002a306
mov dword [rdi + 8], eax
jmp 0x18002a3e0
sub rdi, r13
shr rdi, 0xc
lea rax, [rdi + rdi*2]
lea r8, [rax*8 + 0x20]
add r8, r13
mov rdi, qword [rsi + 8]
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0x100], 0
test rdi, rdi
je 0x18002b716
lea rcx, [rsp + 0xf8]
xor r10d, r10d
mov r9, r10
mov r10, rcx
mov rcx, qword [rdi]
test rcx, rcx
je 0x18002aec5
mov rax, qword [rcx + 8]
test al, 1
je 0x18002aec5
mov rbx, qword [rcx]
test rbx, rbx
je 0x18002aea8
test byte [rbx + 8], 1
jne 0x18002aed4
mov rcx, rdi
mov rbx, qword [rsp + 0x20]
cmp rcx, r8
seta al
jbe 0x18002aeca
mov rdi, qword [rcx]
test rdi, rdi
jne 0x18002ae84
jmp 0x18002ba58
mov rcx, rdi
jmp 0x18002aeb0
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
jmp 0x18002aebb
and rax, 0xfffffffffffffffe
mov qword [rdi], rax
mov rbx, rdi
and rbx, 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rbx
mov qword [rcx + 8], rdx
test rax, rax
je 0x18002f66e
and byte [rax + 8], 0xfe
cmp qword [r10], rdi
mov rbx, qword [rsp + 0x20]
jne 0x18002b9d8
mov qword [r10], rcx
jmp 0x18002aeb0
mov rcx, qword [rbx]
test rcx, rcx
je 0x18002af25
test byte [rcx + 8], 1
jne 0x18002a83b
or rax, 1
mov qword [rbx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f395
mov rbx, qword [rax]
test rbx, rbx
je 0x18002af54
mov rdi, qword [rbx + 8]
test dil, 1
jne 0x18002c547
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rbx, rax
and byte [rbx + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbx
jmp 0x18002a83b
mov rcx, qword [rsi]
test rcx, rcx
je 0x18002af93
test byte [rcx + 8], 1
jne 0x18002aa74
or rax, 1
mov qword [rsi + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f395
mov rsi, qword [rax]
test rsi, rsi
je 0x18002afc2
mov r8, qword [rsi + 8]
test r8b, 1
jne 0x18002c5a9
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rsi, rax
and byte [rsi + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rsi
jmp 0x18002aa74
and rax, 0xfffffffffffff000
cmp rax, r12
jb 0x18002ad46
shl rbp, 0xc
add rbp, qword [rsp + 0x50]
mov rcx, rbx
mov rdx, rbp
mov r8, r12
call fcn.18003a110
test al, al
je 0x18002ad46
mov rdx, qword [rsp + 0x50]
lea rax, [rdx + r14*8]
add rax, 0x30
or rsi, 3
mov rcx, qword [rsp + 0x20]
lea rcx, [rcx + rcx*2]
mov qword [rdx + rcx*8 + 0x30], rsi
mov qword [rax], 3
add qword [rbx + 0x58], r12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18002ad67
mov r9, qword [rdi]
mov rcx, qword [rdi + 8]
mov qword [rdi], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov rsi, rcx
shr rsi, 0x1a
xor rsi, rcx
xor rsi, r10
shr r10, 0x11
xor rsi, r10
mov qword [rdi + 8], rsi
add ecx, esi
mov edi, r8d
ror edi, cl
test edi, edi
je 0x18002b562
bsf edi, edi
add edi, ecx
and edi, 0x1f
jmp 0x18002adaa
mov rdi, rbx
mov r9, qword [rsi]
mov rcx, qword [rsi + 8]
mov qword [rsi], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov rbx, rcx
shr rbx, 0x1a
xor rbx, rcx
xor rbx, r10
shr r10, 0x11
xor rbx, r10
mov qword [rsi + 8], rbx
add ecx, ebx
mov esi, r8d
ror esi, cl
test esi, esi
je 0x18002b56c
bsf esi, esi
mov rbx, rdi
add esi, ecx
and esi, 0x1f
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
jmp 0x18002ae0f
cmp r13, 2
jb 0x18002c313
mov ecx, 0x40
mov eax, 0x40
dec r13
je 0x18002b116
bsr rax, r13
xor rax, 0x3f
sub rcx, rax
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov r15d, 0x10
cmovae r15, rax
mov rax, r15
shr rax, 4
or rax, 1
bsr r13, rax
jmp 0x18002a4c5
cmp r13, 2
jb 0x18002c31a
mov rdx, r13
mov ecx, 0x40
mov eax, 0x40
dec rdx
je 0x18002b167
bsr rax, rdx
xor rax, 0x3f
sub rcx, rax
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovae rcx, rax
mov qword [rsp + 0x70], rcx
mov rax, rcx
shr rax, 4
or rax, 1
bsr rax, rax
jmp 0x18002a25c
test eax, eax
jne 0x18002b5b2
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18002e378
mov rax, qword [rdx]
test rax, rax
jne 0x18002e806
mov qword [rsp + 0xf8], rax
jmp 0x18002ac60
cmp qword [rsi], rdi
mov rbx, qword [rsp + 0x20]
je 0x18002b93c
test eax, eax
je 0x18002b47a
mov rax, rdi
sub rax, r13
shr rax, 0xc
lea rax, [rax + rax*2]
lea r15, [rax*8 + 0x20]
add r15, r13
mov rdx, qword [rsi + 8]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp rdx, r15
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x18002c146
test rdx, rdx
je 0x18002f66e
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f66e
mov rax, qword [rcx + 8]
test al, 1
je 0x18002b745
xor r13d, r13d
mov r8d, 0xffffffff
xor r9d, r9d
mov r11, rdx
mov rdx, rcx
xor eax, eax
cmp rdx, r15
setb al
cmova eax, r8d
cmp eax, 0xffffffff
jne 0x18002b2f6
test rdx, rdx
je 0x18002dd89
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002dd89
mov rax, qword [rcx + 8]
test al, 1
jne 0x18002b254
mov rbx, qword [rcx]
test rbx, rbx
je 0x18002b29a
test byte [rbx + 8], 1
jne 0x18002b254
or rax, 1
mov qword [rcx + 8], rax
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x18002f5ef
mov rbx, qword [rcx]
test rbx, rbx
je 0x18002b2c9
mov r10, qword [rbx + 8]
test r10b, 1
jne 0x18002d6e5
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rbx, rcx
cmp qword [r11], rdx
jne 0x18002f802
mov qword [r11], rbx
mov rdx, rbx
jmp 0x18002b25a
test eax, eax
jne 0x18002b316
test rdx, rdx
je 0x18002b456
mov rbx, qword [rdx + 8]
mov r13, r11
cmp rbx, 1
jbe 0x18002b447
jmp 0x18002b323
test rdx, rdx
je 0x18002f66e
mov rbx, qword [rdx + 8]
mov rcx, rbx
and rcx, 0xfffffffffffffffe
je 0x18002b33e
mov rax, qword [rcx]
test rax, rax
je 0x18002b33e
test byte [rax + 8], 1
jne 0x18002b254
mov r10, qword [rdx]
test r10, r10
je 0x18002f66e
mov rcx, qword [r10 + 8]
test cl, 1
je 0x18002d836
and rcx, 0xfffffffffffffffe
je 0x18002f7ef
mov rax, qword [rcx]
test rax, rax
je 0x18002b373
test byte [rax + 8], 1
jne 0x18002e02e
and ebx, 1
or rbx, rcx
mov qword [r10 + 8], rbx
or byte [rcx + 8], 1
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f77b
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
mov r10, qword [rdx + 8]
mov rbx, r10
and rbx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rbx]
and rax, 0xfffffffffffffffe
and r10d, 1
or r10, rax
mov qword [rdx + 8], r10
mov qword [rbx], rdx
mov rax, qword [rcx + 8]
and eax, 1
or rax, rbx
mov qword [rcx + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18002db9b
mov qword [r11], rcx
mov rdx, r11
jmp 0x18002b254
test eax, eax
jne 0x18002b680
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18002e530
mov rax, qword [rdx]
test rax, rax
jne 0x18002e842
mov qword [rsp + 0xf8], rax
jmp 0x18002acb3
add r13, r15
cmp rdi, 8
je 0x18002b732
mov rcx, r13
mov dl, 0xe5
mov r8, rdi
call sub.VCRUNTIME140.dll_memset
jmp 0x18002ad67
mov r9, qword [rdx]
test r9, r9
jne 0x18002c474
xor r9d, r9d
mov rbx, qword [rsp + 0x20]
cmp qword [r11], rdx
jne 0x18002d747
mov qword [r11], r9
mov rax, qword [rsp + 0xf8]
mov qword [rsi + 8], rax
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov rcx, rbx
mov rdx, rdi
mov r8b, 1
call fcn.180027800
dec dword [rsi + 0x24]
jmp 0x18002a41b
mov r8, rdi
sub r8, r13
add r13, r15
mov rcx, r13
mov dl, 0xe5
call sub.VCRUNTIME140.dll_memset
lea r14, [rbx + 0x18]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, r15d
shr eax, 0xc
movzx eax, al
mov rcx, rsi
shr rcx, 0xc
mov rdx, rsi
or rdx, 3
lea rbp, [rax + rax*2]
mov r8, qword [rsp + 0x50]
mov qword [r8 + rbp*8 + 0x30], rdx
sub rdi, rsi
or rdi, 3
add rcx, rax
lea rax, [rcx + rcx*2]
mov qword [r8 + rax*8 + 0x30], rdi
add rsi, r15
mov rcx, rbx
mov rdx, rsi
mov r8b, 1
call fcn.180027800
add qword [rbx + 0x58], r12
mov rcx, r14
jmp 0x18002b04a
cmp r13, 2
jb 0x18002f7fb
mov rdx, r13
mov ecx, 0x40
mov eax, 0x40
dec rdx
je 0x18002b529
bsr rax, rdx
xor rax, 0x3f
sub rcx, rax
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov esi, 0x10
cmovae rsi, rax
jmp 0x18002a1b9
mov qword [r9], 0
mov qword [r9 + 8], 1
lea rcx, [rsp + 0xf8]
jmp 0x18002b896
mov edi, 0x20
jmp 0x18002b093
mov esi, 0x20
jmp 0x18002b0de
mov rax, qword [r10 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r10 + 8]
and ecx, 1
or rcx, rax
mov qword [r10 + 8], rcx
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [r10 + 8], rcx
or byte [rdx + 8], 1
and qword [r10 + 8], 1
jmp 0x18002ac54
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x20], rcx
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x18002b5d8
mov rcx, qword [rbx]
test rcx, rcx
je 0x18002b5d8
test byte [rcx + 8], 1
jne 0x18002a842
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f82f
test byte [rcx + 8], 1
jne 0x18002d778
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18002b60b
mov rbx, qword [rax + 8]
test bl, 1
jne 0x18002dcb1
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbx], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbx
jmp 0x18002a842
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
or byte [rdx + 8], 1
and qword [r9 + 8], 1
jmp 0x18002ac9d
mov rdi, rsi
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x28], rcx
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x18002b6a9
mov rcx, qword [rsi]
test rcx, rcx
je 0x18002b6a9
test byte [rcx + 8], 1
jne 0x18002aa7b
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f82f
test byte [rcx + 8], 1
jne 0x18002d7d1
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18002b6dd
mov rsi, qword [rax + 8]
test sil, 1
jne 0x18002dd1d
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rsi], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rsi
jmp 0x18002aa7b
mov qword [r8], 0
mov qword [r8 + 8], 1
lea rcx, [rsp + 0xf8]
jmp 0x18002ba70
movabs rax, 0xe5e5e5e5e5e5e5e5
mov qword [r13], rax
jmp 0x18002ad67
mov rbx, qword [rcx]
test rbx, rbx
je 0x18002b757
test byte [rbx + 8], 1
jne 0x18002b248
or rax, 1
mov qword [rcx + 8], rax
mov rbx, qword [rdx + 8]
mov rax, rbx
and rax, 0xfffffffffffffffe
je 0x18002f651
mov rcx, qword [rax]
test rcx, rcx
je 0x18002b786
mov r8, qword [rcx + 8]
test r8b, 1
jne 0x18002e8f8
or rbx, 1
mov qword [rdx + 8], rbx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, rax
and byte [rcx + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rcx
jmp 0x18002b248
and rcx, 0xfffffffffffffffe
mov rax, qword [r10 + 8]
and eax, 1
lea rdx, [rax + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x18002f39d
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rax, qword [r10 + 8]
and eax, 1
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
or byte [r10 + 8], 1
test r8, r8
je 0x18002f782
cmp qword [r8], r10
jne 0x18002c195
mov qword [r8], rcx
cmp r9, rcx
setb al
jb 0x18002c2c7
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
mov r10, rcx
test rbx, rbx
jne 0x18002a6db
mov r10, r8
mov qword [r9], 0
mov qword [r9 + 8], 1
test al, al
jne 0x18002b896
cmp rcx, r9
mov rbx, qword [rsp + 0x20]
jae 0x18002b89b
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, rax
or rdx, r9
mov qword [rcx + 8], rdx
mov rdx, qword [r9]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r9], rcx
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r9 + 8], rdx
or byte [rcx + 8], 1
cmp qword [r10], rcx
jne 0x18002b8bf
mov qword [r10], r9
jmp 0x18002b89e
mov rbx, qword [rsp + 0x20]
mov qword [rcx], r9
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x18002f66e
and byte [rax + 8], 0xfe
mov qword [rsi + 8], rax
mov qword [rsi], rdi
jmp 0x18002a41b
mov rax, qword [r10 + 8]
mov rdx, rax
and rdx, 0xfffffffffffffffe
cmp rcx, rdx
jne 0x18002b89e
and eax, 1
or rax, r9
mov qword [r10 + 8], rax
jmp 0x18002b89e
and rax, 0xfffffffffffffffe
mov qword [rbx], rax
mov rax, qword [rdi + 8]
and eax, 1
or rax, rbx
mov qword [rdi + 8], rax
and rdi, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rax, [rcx + rdi]
mov qword [rdx + 8], rax
test rdi, rdi
je 0x18002f39d
mov rax, qword [rdi]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rdi], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x18002b933
mov rax, qword [rcx + 8]
test al, 1
jne 0x18002c406
mov qword [rdx + 8], rcx
jmp 0x18002a8d8
mov qword [rsi], 0
jmp 0x18002b47a
and r10, 0xfffffffffffffffe
mov qword [rcx], r10
mov rax, qword [rsi + 8]
and eax, 1
or rax, rcx
mov qword [rsi + 8], rax
and rsi, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rsi]
mov qword [rdx + 8], rcx
test rsi, rsi
je 0x18002f39d
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rsi], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002b9a1
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002c43d
mov qword [rdx + 8], rax
jmp 0x18002ab12
and r10, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, r10
mov qword [r11 + 8], rax
jmp 0x18002ac60
and r9, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, r9
mov qword [r11 + 8], rax
jmp 0x18002aca9
and rcx, 0xfffffffffffffffe
mov rax, qword [r10 + 8]
and eax, 1
lea rdx, [rax + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x18002f39d
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rax, qword [r10 + 8]
and eax, 1
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
or byte [r10 + 8], 1
test r9, r9
je 0x18002f782
cmp qword [r9], r10
jne 0x18002c271
mov qword [r9], rcx
cmp r8, rcx
setb al
jb 0x18002c3fe
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
mov r10, rcx
test rdi, rdi
jne 0x18002ae8a
mov r10, r9
mov qword [r8], 0
mov qword [r8 + 8], 1
test al, al
jne 0x18002ba70
cmp rcx, r8
jb 0x18002ba91
mov qword [rcx], r8
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x18002f66e
and byte [rax + 8], 0xfe
mov qword [rsi + 8], rax
jmp 0x18002a41b
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, rax
or rdx, r8
mov qword [rcx + 8], rdx
mov rdx, qword [r8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r8], rcx
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, qword [r8 + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r8 + 8], rdx
or byte [rcx + 8], 1
cmp qword [r10], rcx
jne 0x18002bad7
mov qword [r10], r8
jmp 0x18002ba73
mov rax, qword [r10 + 8]
mov rdx, rax
and rdx, 0xfffffffffffffffe
cmp rcx, rdx
jne 0x18002ba73
and eax, 1
or rax, r8
mov qword [r10 + 8], rax
jmp 0x18002ba73
or rbx, 1
mov qword [r9 + 8], rbx
mov rcx, qword [r9]
test rcx, rcx
je 0x18002bb0f
mov rax, qword [rcx + 8]
test al, 1
jne 0x18002c321
mov rcx, qword [rdx + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
mov r9, qword [rsp + 0x30]
je 0x18002f39d
mov rax, qword [rbx]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
jmp 0x18002a9ee
or rsi, 1
mov qword [r10 + 8], rsi
mov rax, qword [r10]
test rax, rax
je 0x18002bb5b
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002c392
mov rax, qword [rdx + 8]
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rsi], rdx
jmp 0x18002ac31
mov r14, qword [0x1800a66c8]
cmp r13, 0xf00
jbe 0x18002a49c
cmp r13, 0xfc000
ja 0x18002c60b
mov rcx, r14
mov rdx, r13
xor r8d, r8d
call fcn.180038150
jmp 0x18002c18d
movzx r10d, byte [r14 + r12 + 0xc2]
lea r9, [r14 + 0x90]
mov rcx, qword [r14 + 0x90]
test rcx, rcx
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x78], r9
je 0x18002d8d3
mov rdx, r10
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov ebx, 0xffffffff
mov rbp, qword [rcx + 0x10]
and rbp, r8
xor edi, edi
cmp rdx, rbp
seta dil
cmovb edi, ebx
lea ebp, [rdi + 1]
cmp ebp, 2
jae 0x18002bc23
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x18002bbf8
jmp 0x18002bce3
cmp edi, 1
jne 0x18002f81f
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002bc19
movzx r11d, byte [r10 + rdi + 0xc2]
lea rax, [r10 + 0x90]
mov qword [rsp + 0x88], rax
mov rcx, qword [r10 + 0x90]
test rcx, rcx
mov qword [rsp + 0x80], r11
mov qword [rsp + 0x48], rsi
je 0x18002da5e
mov rdx, r11
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov rdi, rsi
mov rsi, qword [rcx + 0x10]
and rsi, r8
xor ebp, ebp
cmp rdx, rsi
seta bpl
cmovb ebp, r9d
lea esi, [rbp + 1]
cmp esi, 2
jae 0x18002bcb3
mov rax, rcx
mov rcx, qword [rcx]
mov rsi, rdi
test rcx, rcx
jne 0x18002bc81
jmp 0x18002bf0a
cmp ebp, 1
jne 0x18002f827
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002bca6
mov rax, rbx
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x18002a84b
test rax, rax
je 0x18002d8d3
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov rbx, rdx
and rbx, 0xfffffffffffffff0
shl rbx, 8
add rbx, rcx
mov r8, rbx
and r8, 0xfffffffffff00000
mov rax, qword [r8 + 0x18]
mov qword [rsp + 0x88], rax
mov eax, ebx
shr eax, 0xc
movzx r11d, al
lea rax, [r11*8]
lea rax, [rax + rax*2]
or rax, r8
mov qword [rsp + 0x20], rax
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x58], rax
test r10, r10
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x50], r11
je 0x18002c624
cmp r10, 2
mov r9d, 1
cmovae r9, r10
lea rax, [r11 + r11*2]
lea rdi, [r8 + rax*8]
add rdi, 0x30
mov cl, 1
xor ebp, ebp
lea rdx, [r11 + rbp]
lea rax, [rdx + rdx*2]
test byte [r8 + rax*8 + 0x30], 0x60
jne 0x18002bdae
inc rbp
cmp rbp, r10
setb cl
add rdi, 0x18
cmp rbp, r9
jne 0x18002bd87
jmp 0x18002c626
mov qword [rsp + 0x60], rdx
mov dword [rsp + 0x70], ecx
cmp rbp, r10
mov qword [rsp + 0x48], r9
jae 0x18002e07b
mov rax, rdi
xor edx, edx
mov rcx, qword [rax]
test cl, 0x60
je 0x18002bdec
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
lea rcx, [rdx + rbp]
inc rcx
inc rdx
add rax, 0x18
cmp rcx, r10
jb 0x18002bdca
mov qword [rsp + 0x80], rdi
mov rdi, rdx
shl rdi, 0xc
mov qword [rsp + 0x30], rdx
je 0x18002d8cc
mov rcx, qword [rsp + 0x60]
shl rcx, 0xc
add rcx, r8
mov eax, ecx
and eax, 0xff000
mov edx, 0x100000
sub rdx, rax
cmp rdx, rdi
cmovae rdx, rdi
mov qword [rsp + 0x40], rdi
mov rdi, rcx
mov qword [rsp + 0x68], rdx
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18002f884
mov rax, qword [rsp + 0x68]
add rdi, rax
mov rcx, rdi
mov rdi, qword [rsp + 0x40]
sub rdi, rax
mov eax, 0x100000
cmp rdi, rax
mov edx, 0x100000
cmovb rdx, rdi
test rdi, rdi
jne 0x18002be28
mov al, 1
mov r8, qword [rsp + 0x38]
mov r11, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x30]
test rdx, rdx
mov r10, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x80]
mov edx, eax
je 0x18002bece
test dl, dl
mov ecx, 0x20
mov eax, 4
cmovne rcx, rax
mov rax, qword [rsp + 0x30]
lea rax, [rax*8]
lea r9, [rax + rax*2]
xor eax, eax
or qword [rdi + rax], rcx
add rax, 0x18
cmp r9, rax
jne 0x18002bec1
test dl, dl
mov eax, dword [rsp + 0x70]
je 0x18002cc93
mov rax, qword [rsp + 0x30]
add qword [r14 + 0x48], rax
mov r9, qword [rsp + 0x48]
jmp 0x18002bd97
mov rax, rsi
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x18002aa84
test rax, rax
je 0x18002da5e
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, rdx
and r14, 0xfffffffffffffff0
shl r14, 8
add r14, rcx
mov r8, r14
and r8, 0xfffffffffff00000
mov rax, qword [r8 + 0x18]
mov qword [rsp + 0xd0], rax
mov eax, r14d
shr eax, 0xc
movzx edi, al
lea rax, [rdi*8]
lea r9, [rax + rax*2]
or r9, r8
mov rax, qword [r9 + 0x30]
mov qword [rsp + 0xa0], rax
test r11, r11
mov qword [rsp + 0x40], r8
mov qword [rsp + 0xa8], rdi
je 0x18002ce42
cmp r11, 2
mov eax, 1
cmovae rax, r11
mov qword [rsp + 0x58], rax
lea rax, [rdi + rdi*2]
lea rax, [r8 + rax*8]
add rax, 0x30
mov dl, 1
xor ebp, ebp
mov qword [rsp + 0x28], rax
lea rcx, [rdi + rbp]
lea rax, [rcx + rcx*2]
test byte [r8 + rax*8 + 0x30], 0x60
jne 0x18002bfe6
inc rbp
cmp rbp, r11
setb dl
mov rax, qword [rsp + 0x28]
add rax, 0x18
cmp rbp, qword [rsp + 0x58]
jne 0x18002bfb3
jmp 0x18002ce44
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x60], rbp
cmp rbp, r11
mov rax, qword [rsp + 0x28]
jae 0x18002e087
xor edi, edi
mov rbp, qword [rax]
test bpl, 0x60
je 0x18002c02a
and rbp, 0xffffffffffffff9f
mov qword [rax], rbp
mov rbp, qword [rsp + 0x60]
add rbp, rdi
inc rbp
inc rdi
add rax, 0x18
cmp rbp, r11
jb 0x18002c003
mov rax, rdi
shl rax, 0xc
mov dword [rsp + 0x68], edx
mov qword [rsp + 0x98], rdi
je 0x18002da52
shl rcx, 0xc
add rcx, r8
mov ebp, ecx
and ebp, 0xff000
mov edx, 0x100000
sub rdx, rbp
cmp rdx, rax
cmovae rdx, rax
mov rbp, qword [rsp + 0x60]
mov rdi, rax
mov qword [rsp + 0xb8], rdx
mov r8d, 0x1000
mov rsi, rcx
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18002f938
mov rax, qword [rsp + 0xb8]
add rsi, rax
sub rdi, rax
mov eax, 0x100000
cmp rdi, rax
mov edx, 0x100000
cmovb rdx, rdi
test rdi, rdi
mov rcx, rsi
jne 0x18002c069
mov al, 1
mov r10, qword [rsp + 0x20]
mov r8, qword [rsp + 0x40]
mov r11, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x98]
test rdi, rdi
mov rdi, qword [rsp + 0x30]
mov r9, qword [rsp + 0x28]
je 0x18002c114
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x98]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor esi, esi
or qword [r9 + rsi], rcx
add rsi, 0x18
cmp rdx, rsi
jne 0x18002c107
test al, al
mov rsi, qword [rsp + 0x48]
mov eax, dword [rsp + 0x68]
je 0x18002d481
mov rax, qword [rsp + 0x98]
add qword [r10 + 0x48], rax
mov rdi, qword [rsp + 0xa8]
mov r9, qword [rsp + 0x90]
jmp 0x18002bfc8
test eax, eax
jne 0x18002c4b0
test rdx, rdx
je 0x18002c16d
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18002ef6e
mov rax, qword [rdx]
test rax, rax
jne 0x18002efa4
xor eax, eax
mov qword [rsp + 0xf8], rax
jmp 0x18002b467
mov rcx, rbx
mov rdx, r15
mov r8, r13
mov r9, rdi
call fcn.180003da0
mov rbp, rax
jmp 0x18002a428
mov rax, qword [r8 + 8]
and eax, 1
or rax, rcx
mov qword [r8 + 8], rax
jmp 0x18002b810
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x18002f782
cmp qword [rbx], rbp
jne 0x18002d75e
mov qword [rbx], rdx
test rdx, rdx
je 0x18002f39d
mov rax, qword [rbp]
mov qword [rdx], rax
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x18002f870
mov qword [r11], 0
jmp 0x18002ac60
mov rax, qword [rsp + 0x28]
test rax, rax
je 0x18002f782
cmp qword [rax], rbp
mov rsi, rdi
jne 0x18002d7b7
mov qword [rax], rdx
test rdx, rdx
je 0x18002f39d
mov rax, qword [rbp]
mov qword [rdx], rax
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x18002f87a
mov qword [r11], 0
jmp 0x18002aca9
mov rax, qword [r9 + 8]
and eax, 1
or rax, rcx
mov qword [r9 + 8], rax
jmp 0x18002ba35
and edi, 1
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
or rax, rdi
mov qword [rbx + 8], rax
and byte [rcx + 8], 0xfe
mov rcx, qword [r9 + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rbx]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov qword [rbx], r9
mov qword [rdx], rbx
jmp 0x18002a992
mov rbx, qword [rcx]
jmp 0x18002b824
and ecx, 1
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rsi + 8], rax
and byte [r14 + 8], 0xfe
mov rax, qword [r10 + 8]
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [r10 + 8], rax
mov qword [rsi], r10
mov qword [rdx], rsi
jmp 0x18002abd4
xor ecx, ecx
jmp 0x18002b119
xor ecx, ecx
jmp 0x18002b16a
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rbx, qword [rdx]
test rbx, rbx
mov r9, qword [rsp + 0x30]
je 0x18002f77b
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rdx + 8], rdi
mov qword [rcx], rdx
mov rax, qword [rbx + 8]
and eax, 1
or rax, rcx
mov qword [rbx + 8], rax
jmp 0x18002a9ee
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rsi, qword [rdx]
test rsi, rsi
je 0x18002f77b
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov r10, qword [rax]
and r10, 0xfffffffffffffffe
and ecx, 1
or rcx, r10
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
jmp 0x18002ac31
mov rdi, qword [rcx]
jmp 0x18002ba49
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
or rax, 1
mov qword [rdx + 8], rax
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov qword [rdi], rcx
jmp 0x18002a8d8
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rsi], rax
jmp 0x18002ab12
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
or byte [rdx + 8], 1
and qword [r9 + 8], 1
jmp 0x18002b456
test rdx, rdx
je 0x18002f66e
mov rax, qword [rdx + 8]
xor r13d, r13d
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x18002c4db
mov rbx, qword [rcx]
test rbx, rbx
je 0x18002c4db
test byte [rbx + 8], 1
jne 0x18002b24b
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f82f
test byte [rcx + 8], 1
jne 0x18002ea54
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18002c50e
mov rbx, qword [rax + 8]
test bl, 1
jne 0x18002eecb
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
and eax, 1
or rax, rbx
mov qword [rdx + 8], rax
mov qword [rcx], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rcx
jmp 0x18002b24b
and rdi, 0xfffffffffffffffe
mov qword [rax], rdi
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
and rbx, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbx]
mov qword [rdx + 8], rcx
test rbx, rbx
je 0x18002f39d
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002c5a0
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002deb8
mov qword [rdx + 8], rax
jmp 0x18002af6d
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
and rsi, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rsi]
mov qword [rdx + 8], rcx
test rsi, rsi
je 0x18002f39d
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rsi], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002c602
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002df77
mov qword [rdx + 8], rax
jmp 0x18002afdb
mov r8d, 0x100000
mov rcx, r14
mov rdx, r13
xor r9d, r9d
call fcn.180004060
jmp 0x18002c18d
xor ecx, ecx
mov dword [rsp + 0x70], ecx
mov rax, qword [rsp + 0x20]
lea rcx, [rax + 0x20]
mov qword [rsp + 0x30], rcx
add rax, 0x30
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rcx]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x20], rax
mov rbp, qword [rax]
mov rcx, 0xfffffffffffff000
mov rax, rbp
and rax, rcx
and rcx, qword [rdx + 0x10]
xor edi, edi
cmp rax, rcx
seta dil
mov ecx, 0xffffffff
cmovae ecx, edi
test ecx, ecx
je 0x18002d796
cmp ecx, 0xffffffff
jne 0x18002ccc8
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f66e
mov rax, qword [rbp + 8]
test al, 1
je 0x18002cd63
xor eax, eax
mov qword [rsp + 0x48], rax
mov r9, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r11, rdx
mov rdx, rbp
mov rax, qword [rsp + 0x20]
mov rbp, qword [rax]
mov rax, rbp
and rax, r9
mov rdi, qword [rdx + 0x10]
and rdi, r9
xor ecx, ecx
cmp rax, rdi
seta cl
cmovb ecx, r8d
test ecx, ecx
je 0x18002c71c
cmp ecx, 0xffffffff
jne 0x18002c739
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002df0b
mov rcx, qword [rbp + 8]
test cl, 1
jne 0x18002c6bf
mov rax, qword [rbp]
test rax, rax
je 0x18002c83a
test byte [rax + 8], 1
jne 0x18002c6bf
jmp 0x18002c83a
test bpl, 0x10
mov eax, 0
cmove rax, qword [rsp + 0x30]
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x18002c6ef
mov cl, al
jmp 0x18002c6ea
test ecx, ecx
je 0x18002c823
mov rdi, qword [rdx + 8]
mov rbp, rdi
and rbp, 0xfffffffffffffffe
je 0x18002c761
mov rax, qword [rbp]
test rax, rax
je 0x18002c761
test byte [rax + 8], 1
jne 0x18002c6bf
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f66e
mov rbp, qword [rcx + 8]
test bpl, 1
je 0x18002d87d
and rbp, 0xfffffffffffffffe
je 0x18002f65e
mov r10, qword [rbp]
test r10, r10
je 0x18002c799
test byte [r10 + 8], 1
jne 0x18002e72d
and edi, 1
or rdi, rbp
mov qword [rcx + 8], rdi
or byte [rbp + 8], 1
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f77b
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x28]
je 0x18002f39d
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rdx + 8], rdi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18002dbb8
mov qword [r11], rbp
mov rdx, r11
jmp 0x18002c6bf
mov rdi, qword [rdx + 8]
mov rax, r11
mov qword [rsp + 0x48], r11
cmp rdi, 1
jbe 0x18002c891
jmp 0x18002c745
or rcx, 1
mov qword [rbp + 8], rcx
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
je 0x18002f637
mov rbp, qword [rcx]
test rbp, rbp
je 0x18002c867
mov rax, qword [rbp + 8]
test al, 1
jne 0x18002dded
or rdi, 1
mov qword [rdx + 8], rdi
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rbp, rcx
cmp qword [r11], rdx
jne 0x18002f83c
mov qword [r11], rbp
jmp 0x18002c6c2
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002c8d0
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rcx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
or byte [rdx + 8], 1
and qword [rcx + 8], 1
cmp qword [r11], rdx
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x58]
jne 0x18002d808
mov qword [r11], rcx
shr rdi, 0xc
mov rax, qword [rsp + 0xf8]
mov qword [r8], rax
xorps xmm0, xmm0
mov rax, qword [rsp + 0x30]
movups xmmword [rax], xmm0
cmp rdi, r10
mov rdx, qword [rsp + 0x50]
jne 0x18002ca4c
test r10b, r10b
je 0x18002c960
mov rax, rbx
or rax, 1
cmp r10, 2
mov ecx, 1
cmovae rcx, r10
shl rcx, 3
lea rcx, [rcx + rcx*2]
lea rdx, [rdx + rdx*2]
lea rdx, [r9 + rdx*8]
add rdx, 0x30
xor ebp, ebp
test byte [rdx + rbp], 8
je 0x18002c953
dec qword [r9 + 0x18]
dec qword [r14 + 0x80]
mov qword [rdx + rbp], rax
add rbp, 0x18
cmp rcx, rbp
jne 0x18002c942
cmp qword [r9 + 0x18], 0
jne 0x18002cc8f
cmp qword [rsp + 0x88], 0
mov eax, dword [rsp + 0x70]
je 0x18002cc93
mov rbp, qword [r14 + 0x60]
mov qword [rsp + 0x100], rbp
mov qword [rsp + 0x108], 0
xor ecx, ecx
cmp rbp, r9
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
test eax, eax
je 0x18002e09b
cmp eax, 0xffffffff
je 0x18002e1b3
test rbp, rbp
je 0x18002f66e
mov rcx, qword [rbp + 0x10]
xor eax, eax
mov qword [rsp + 0x20], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002c9e7
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18002c9e7
test byte [rdx + 0x10], 1
jne 0x18002e1da
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002fad8
test byte [rax + 0x10], 1
jne 0x18002ebd1
or rcx, 1
mov qword [rbp + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002ca1c
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x18002f018
or byte [rax + 0x10], 1
mov rcx, qword [rbp + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [rbp + 0x10], rcx
mov qword [rax + 8], rbp
jmp 0x18002ebe7
lea rcx, [rdx + rdi]
sub rdi, r10
shl rdi, 0xc
lea rax, [rdx + r10]
lea rax, [rax + rax*2]
lea r11, [r9 + rax*8]
add r11, 0x20
mov edx, 0xfff
mov rbp, qword [r11 + 0x10]
and rbp, rdx
or rbp, rdi
mov qword [r11 + 0x10], rbp
lea rcx, [rcx + rcx*2]
and rdx, qword [r9 + rcx*8 + 0x18]
or rdx, rdi
mov qword [r9 + rcx*8 + 0x18], rdx
mov rcx, qword [r8]
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0x100], 0
test rcx, rcx
je 0x18002deef
lea rax, [r9 + rax*8]
add rax, 0x30
mov qword [rsp + 0x20], rax
lea rbp, [rsp + 0xf8]
xor r9d, r9d
mov r10, r9
mov r9, rbp
mov rbp, qword [rcx]
test rbp, rbp
je 0x18002caeb
mov rdi, qword [rbp + 8]
test dil, 1
je 0x18002caeb
mov r8, qword [rbp]
test r8, r8
je 0x18002caeb
test byte [r8 + 8], 1
jne 0x18002cb5f
mov rbp, rcx
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov rdx, rax
mov rcx, 0xfffffffffffff000
and rdx, rcx
mov rdi, qword [rbp + 0x10]
and rdi, rcx
xor ecx, ecx
cmp rdx, rdi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
cmp ecx, 0xffffffff
jne 0x18002cb32
mov rcx, qword [rbp]
mov edi, 0xffffffff
test rcx, rcx
jne 0x18002cac3
jmp 0x18002cc42
test ecx, ecx
jne 0x18002cb58
test al, 0x10
mov eax, 0
cmove rax, r11
xor edi, edi
cmp rax, rbp
seta al
jb 0x18002cb1f
mov dil, al
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002cb28
mov edi, 1
jmp 0x18002cb4e
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdi, qword [rbp]
mov rdx, qword [rbp + 8]
and edx, 1
or rdx, rax
mov qword [rbp + 8], rdx
test rdi, rdi
je 0x18002f66e
and byte [rdi + 8], 0xfe
cmp qword [r9], rcx
jne 0x18002cb99
mov qword [r9], rbp
jmp 0x18002caee
and rbp, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [r9 + 8], rax
test rbp, rbp
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [r9 + 8], rax
mov qword [rbp], r9
mov rax, qword [r9 + 8]
and eax, 1
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rbp + 8], rcx
or byte [r9 + 8], 1
test r10, r10
je 0x18002f782
cmp qword [r10], r9
je 0x18002e63a
jmp 0x18002e71a
mov rax, qword [rsp + 0x20]
mov rcx, qword [rax]
mov rax, rcx
mov rdx, 0xfffffffffffff000
and rax, rdx
mov rdi, qword [rbp + 0x10]
and rdi, rdx
xor edx, edx
cmp rax, rdi
seta dl
mov eax, 0xffffffff
cmovb edx, eax
test edx, edx
jne 0x18002e10d
jmp 0x18002e95a
mov r9, rbp
test rcx, rcx
jne 0x18002cac9
mov r9, r10
mov qword [r11], 0
mov qword [r11 + 8], 1
cmp edi, 1
je 0x18002d64b
mov qword [rbp], r11
mov r10, qword [rsp + 0x28]
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x18002f66e
and byte [rax + 8], 0xfe
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
mov r9, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x50]
jmp 0x18002c913
mov eax, dword [rsp + 0x70]
test al, 1
jne 0x18002e355
test rbx, rbx
je 0x18002e355
cmp qword [rsi], rbx
je 0x18002ac7d
mov qword [rbx], rsi
xor eax, eax
cmp dword [r14 + r12 + 0xb4], 1
jne 0x18002cdde
xor edx, edx
jmp 0x18002cdff
test ecx, ecx
je 0x18002dbd5
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x18002ccf7
mov rcx, qword [rbp]
test rcx, rcx
je 0x18002ccf7
test byte [rcx + 8], 1
jne 0x18002c6b2
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f82f
test byte [rcx + 8], 1
jne 0x18002ea6c
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18002cd2b
mov rbp, qword [rax + 8]
test bpl, 1
jne 0x18002edbb
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
jmp 0x18002cdd4
mov rcx, qword [rbp]
test rcx, rcx
je 0x18002cd76
test byte [rcx + 8], 1
jne 0x18002c6ab
or rax, 1
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f395
mov rbp, qword [rax]
test rbp, rbp
je 0x18002cda5
mov rdi, qword [rbp + 8]
test dil, 1
jne 0x18002ecb6
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rbp, rax
and byte [rbp + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
xor eax, eax
mov qword [rsp + 0x48], rax
mov r10, qword [rsp + 0x28]
jmp 0x18002c6b2
lea rcx, [r14 + r12]
add rcx, 0xb4
xor edx, edx
mov dword [rbx + rdx*4 + 0x10], 0xffffffff
inc rdx
mov ebp, dword [rcx]
dec ebp
cmp rdx, rbp
jb 0x18002cdeb
mov ebp, dword [r14 + r12 + 0xb0]
and ebp, 0x1f
mov ecx, ebp
neg cl
mov edi, 0xffffffff
shr edi, cl
cmp ebp, 1
sbb eax, eax
or eax, edi
mov dword [rbx + rdx*4 + 0x10], eax
mov dword [rbx + 8], 0
mov eax, dword [r14 + r12 + 0xb0]
mov dword [rbx + 0xc], eax
inc dword [r14 + r12 + 0xbc]
mov qword [rsi], rbx
jmp 0x18002a514
xor edx, edx
mov dword [rsp + 0x68], edx
lea r10, [r9 + 0x20]
add r9, 0x30
mov rax, qword [rsp + 0x88]
mov rdx, qword [rax]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
mov rbp, qword [r9]
mov rcx, 0xfffffffffffff000
mov rax, rbp
and rax, rcx
and rcx, qword [rdx + 0x10]
xor esi, esi
cmp rax, rcx
seta sil
mov ecx, 0xffffffff
cmovae ecx, esi
test ecx, ecx
je 0x18002d7e9
cmp ecx, 0xffffffff
jne 0x18002d4b9
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f66e
mov rax, qword [rbp + 8]
test al, 1
je 0x18002d571
xor eax, eax
mov qword [rsp + 0x28], rax
mov rdi, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r11, rdx
mov rdx, rbp
mov rbp, qword [r9]
mov rax, rbp
and rax, rdi
mov rsi, qword [rdx + 0x10]
and rsi, rdi
xor ecx, ecx
cmp rax, rsi
seta cl
cmovb ecx, r8d
test ecx, ecx
mov rsi, qword [rsp + 0x48]
je 0x18002cf2e
cmp ecx, 0xffffffff
jne 0x18002cf49
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002dfca
mov rcx, qword [rbp + 8]
test cl, 1
jne 0x18002ced1
mov rax, qword [rbp]
test rax, rax
je 0x18002d04e
test byte [rax + 8], 1
jne 0x18002ced1
jmp 0x18002d04e
test bpl, 0x10
mov eax, 0
cmove rax, r10
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x18002cf01
mov cl, al
jmp 0x18002cefc
test ecx, ecx
je 0x18002d037
mov rcx, qword [rdx + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x18002cf71
mov rax, qword [rbp]
test rax, rax
je 0x18002cf71
test byte [rax + 8], 1
jne 0x18002ced1
mov qword [rsp + 0x58], r10
mov r10, qword [rdx]
test r10, r10
je 0x18002f66e
mov rbp, qword [r10 + 8]
test bpl, 1
je 0x18002d9f3
and rbp, 0xfffffffffffffffe
je 0x18002f667
mov rsi, qword [rbp]
test rsi, rsi
je 0x18002cfad
test byte [rsi + 8], 1
jne 0x18002e786
and ecx, 1
or rcx, rbp
mov qword [r10 + 8], rcx
or byte [rbp + 8], 1
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f77b
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x58]
je 0x18002f39d
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and esi, 1
or rsi, rax
mov qword [rdx + 8], rsi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18002dc10
mov qword [r11], rbp
mov rdx, r11
jmp 0x18002ced1
mov rcx, qword [rdx + 8]
mov rax, r11
mov qword [rsp + 0x28], r11
cmp rcx, 1
jbe 0x18002d0a5
jmp 0x18002cf55
or rcx, 1
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
je 0x18002f644
mov rbp, qword [rcx]
test rbp, rbp
je 0x18002d07b
mov rax, qword [rbp + 8]
test al, 1
jne 0x18002de55
or rsi, 1
mov qword [rdx + 8], rsi
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rbp, rcx
cmp qword [r11], rdx
jne 0x18002f856
mov qword [r11], rbp
jmp 0x18002ced4
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002d0e4
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rcx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
or byte [rdx + 8], 1
and qword [rcx + 8], 1
cmp qword [r11], rdx
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x88]
jne 0x18002d81f
mov qword [r11], rcx
mov rcx, qword [rsp + 0xa0]
shr rcx, 0xc
mov rax, qword [rsp + 0xf8]
mov qword [r9], rax
xorps xmm0, xmm0
movups xmmword [r10], xmm0
mov rdx, qword [rsp + 0x80]
cmp rcx, rdx
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
jne 0x18002d225
test dl, dl
je 0x18002d18a
mov rax, r14
or rax, 1
cmp rdx, 2
mov ecx, 1
cmovae rcx, rdx
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0xa8]
lea rdx, [rdx + rdx*2]
lea rdx, [r8 + rdx*8]
add rdx, 0x30
xor ebp, ebp
test byte [rdx + rbp], 8
je 0x18002d17d
dec qword [r8 + 0x18]
dec qword [r10 + 0x80]
mov qword [rdx + rbp], rax
add rbp, 0x18
cmp rcx, rbp
jne 0x18002d16c
cmp qword [r8 + 0x18], 0
jne 0x18002d47d
cmp qword [rsp + 0xd0], 0
mov eax, dword [rsp + 0x68]
je 0x18002d481
mov rsi, qword [r10 + 0x60]
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 0
xor ecx, ecx
cmp rsi, r8
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
test eax, eax
mov qword [rsp + 0x50], r12
je 0x18002e128
cmp eax, 0xffffffff
je 0x18002e385
test rsi, rsi
je 0x18002f66e
mov rdx, rsi
mov rcx, qword [rsi + 0x10]
xor r12d, r12d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002e884
mov rbp, qword [rax + 8]
test rbp, rbp
je 0x18002e884
test byte [rbp + 0x10], 1
je 0x18002e884
mov rsi, rdx
jmp 0x18002e3a8
mov rax, qword [rsp + 0xa8]
lea rdi, [rax + rcx]
sub rcx, rdx
shl rcx, 0xc
add rax, rdx
lea rax, [rax + rax*2]
lea r11, [r8 + rax*8]
add r11, 0x20
mov edx, 0xfff
mov rbp, qword [r11 + 0x10]
and rbp, rdx
or rbp, rcx
mov qword [r11 + 0x10], rbp
lea rbp, [rdi + rdi*2]
and rdx, qword [r8 + rbp*8 + 0x18]
or rdx, rcx
mov qword [r8 + rbp*8 + 0x18], rdx
mov rcx, qword [r9]
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0x100], 0
test rcx, rcx
je 0x18002dfae
lea rdi, [r8 + rax*8]
add rdi, 0x30
lea rbp, [rsp + 0xf8]
xor r9d, r9d
mov r10, r9
mov r9, rbp
mov rbp, qword [rcx]
test rbp, rbp
je 0x18002d2c5
mov rsi, qword [rbp + 8]
test sil, 1
je 0x18002d2c5
mov rax, qword [rbp]
test rax, rax
je 0x18002d2c5
test byte [rax + 8], 1
jne 0x18002d341
mov rbp, rcx
mov rax, qword [rdi]
mov rdx, rax
mov rcx, 0xfffffffffffff000
and rdx, rcx
mov rsi, qword [rbp + 0x10]
and rsi, rcx
xor ecx, ecx
cmp rdx, rsi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
cmp ecx, 0xffffffff
jne 0x18002d30d
mov rcx, qword [rbp]
mov r8d, 0xffffffff
mov rsi, qword [rsp + 0x48]
test rcx, rcx
jne 0x18002d29e
jmp 0x18002d424
test ecx, ecx
jne 0x18002d339
test al, 0x10
mov eax, 0
cmove rax, r11
xor r8d, r8d
cmp rax, rbp
seta al
jb 0x18002d2f4
mov r8b, al
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002d303
mov r8d, 1
jmp 0x18002d32a
and rsi, 0xfffffffffffffffe
mov qword [rcx], rsi
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rsi, qword [rbp]
mov rdx, qword [rbp + 8]
and edx, 1
or rdx, rax
mov qword [rbp + 8], rdx
test rsi, rsi
je 0x18002f66e
and byte [rsi + 8], 0xfe
cmp qword [r9], rcx
jne 0x18002d37b
mov qword [r9], rbp
jmp 0x18002d2c8
and rbp, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [r9 + 8], rax
test rbp, rbp
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [r9 + 8], rax
mov qword [rbp], r9
mov rax, qword [r9 + 8]
and eax, 1
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rbp + 8], rcx
or byte [r9 + 8], 1
test r10, r10
je 0x18002f782
cmp qword [r10], r9
je 0x18002e712
jmp 0x18002e773
mov rcx, qword [rdi]
mov rax, rcx
mov rdx, 0xfffffffffffff000
and rax, rdx
mov rsi, qword [rbp + 0x10]
and rsi, rdx
xor edx, edx
cmp rax, rsi
seta dl
mov eax, 0xffffffff
cmovb edx, eax
test edx, edx
jne 0x18002e197
jmp 0x18002e982
mov r9, rbp
test rcx, rcx
mov rsi, qword [rsp + 0x48]
jne 0x18002d2a4
mov r9, r10
mov qword [r11], 0
mov qword [r11 + 8], 1
cmp r8d, 1
je 0x18002d698
mov qword [rbp], r11
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x18002f66e
and byte [rax + 8], 0xfe
mov rcx, qword [rsp + 0x88]
mov qword [rcx], rax
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x80]
jmp 0x18002d136
mov eax, dword [rsp + 0x68]
test al, 1
jne 0x18002e4f7
test r14, r14
je 0x18002e4f7
cmp qword [rsi], r14
je 0x18002acd0
mov qword [r14], rsi
xor eax, eax
cmp dword [r10 + rdi + 0xb4], 1
jne 0x18002d5e0
mov r8, rsi
xor edx, edx
jmp 0x18002d605
test ecx, ecx
je 0x18002dc2d
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x28], rcx
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x18002d4e8
mov rcx, qword [rbp]
test rcx, rcx
je 0x18002d4e8
test byte [rcx + 8], 1
jne 0x18002cec4
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x90], r9
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f82f
test byte [rcx + 8], 1
jne 0x18002ea84
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18002d529
mov rbp, qword [rax + 8]
test bpl, 1
jne 0x18002ee5f
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
mov r9, qword [rsp + 0x90]
mov r10, qword [rsp + 0x58]
jmp 0x18002cec4
mov rcx, qword [rbp]
test rcx, rcx
je 0x18002d584
test byte [rcx + 8], 1
jne 0x18002cebd
or rax, 1
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f395
mov rbp, qword [rax]
test rbp, rbp
je 0x18002d5b3
mov rsi, qword [rbp + 8]
test sil, 1
jne 0x18002ed1a
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rbp, rax
and byte [rbp + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
jmp 0x18002cebd
mov r8, rsi
lea rcx, [r10 + rdi]
add rcx, 0xb4
xor edx, edx
mov dword [r14 + rdx*4 + 0x10], 0xffffffff
inc rdx
mov ebp, dword [rcx]
dec ebp
cmp rdx, rbp
jb 0x18002d5f0
mov ebp, dword [r10 + rdi + 0xb0]
and ebp, 0x1f
mov ecx, ebp
neg cl
mov esi, 0xffffffff
shr esi, cl
cmp ebp, 1
sbb eax, eax
or eax, esi
mov dword [r14 + rdx*4 + 0x10], eax
mov dword [r14 + 8], 0
mov eax, dword [r10 + rdi + 0xb0]
mov dword [r14 + 0xc], eax
inc dword [r10 + rdi + 0xbc]
mov qword [r8], r14
jmp 0x18002a2bf
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, rax
or rcx, r11
mov qword [rbp + 8], rcx
mov rcx, qword [r11]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rbp + 8], rcx
mov qword [r11], rbp
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, qword [r11 + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [r11 + 8], rcx
or byte [rbp + 8], 1
cmp qword [r9], rbp
jne 0x18002dc66
mov qword [r9], r11
jmp 0x18002cc5e
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, rax
or rcx, r11
mov qword [rbp + 8], rcx
mov rcx, qword [r11]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rbp + 8], rcx
mov qword [r11], rbp
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, qword [r11 + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [r11 + 8], rcx
or byte [rbp + 8], 1
cmp qword [r9], rbp
jne 0x18002dc8e
mov qword [r9], r11
jmp 0x18002d441
and r10, 0xfffffffffffffffe
mov qword [rcx], r10
mov rax, qword [rbx + 8]
and eax, 1
or rax, rcx
mov qword [rbx + 8], rax
and rbx, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbx]
mov qword [rdx + 8], rcx
test rbx, rbx
je 0x18002f39d
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002d73e
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002e642
mov qword [rdx + 8], rax
jmp 0x18002b2e2
and r9, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, r9
mov qword [r11 + 8], rax
jmp 0x18002b467
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
jmp 0x18002c1c2
lea rbx, [rsp + 0xd8]
mov rcx, rbx
mov rdi, r9
call fcn.180001ff0
mov r9, rdi
mov rbx, qword [rbx]
jmp 0x18002b634
xor eax, eax
test bpl, 0x10
cmove rax, qword [rsp + 0x30]
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x18002c693
mov cl, al
jmp 0x18002c68a
mov rdi, rdx
and rdi, 0xfffffffffffffffe
mov rcx, qword [rax + 8]
and ecx, 1
or rcx, rdi
mov qword [rax + 8], rcx
jmp 0x18002c228
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call fcn.180001ff0
mov rsi, qword [rsi]
jmp 0x18002b706
xor eax, eax
test bpl, 0x10
cmove rax, r10
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x18002cea5
mov cl, al
jmp 0x18002ce9c
and rcx, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, rcx
mov qword [r11 + 8], rax
jmp 0x18002c8eb
and rcx, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, rcx
mov qword [r11 + 8], rax
jmp 0x18002d0fd
or rcx, 1
mov qword [r10 + 8], rcx
mov rax, qword [r10]
test rax, rax
je 0x18002d853
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002e540
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
and eax, 1
or rax, rbx
mov qword [rdx + 8], rax
mov qword [rcx], rdx
jmp 0x18002b3e5
or rbp, 1
mov qword [rcx + 8], rbp
mov rcx, qword [rcx]
test rcx, rcx
je 0x18002d89b
mov rbp, qword [rcx + 8]
test bpl, 1
jne 0x18002e5ce
mov rcx, qword [rdx + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov r10, qword [rsp + 0x28]
jmp 0x18002c80f
mov al, 1
jmp 0x18002be8a
mov rdx, qword [r14 + 0x68]
test rdx, rdx
jne 0x18002e5ac
lea r9, [rsp + 0xf8]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.18004c4f0
test rax, rax
je 0x18002e355
mov rbx, rax
cmp byte [rsp + 0xf8], 0
mov ecx, 0x40
mov eax, 0x24
cmove rax, rcx
add qword [r14 + 0x40], 0x100000
mov qword [rbx], r14
xor ecx, ecx
mov qword [rbx + 0x18], rcx
mov qword [rbx + 0x30], rcx
mov qword [rbx + 0x48], rcx
mov qword [rbx + 0x60], 0x20
lea rcx, [rax + 0xfc000]
mov qword [rbx + 0x78], rcx
mov edx, 0x90
mov qword [rbx + rdx], rax
add rdx, 0x18
cmp rdx, 0x1800
jne 0x18002d94d
mov qword [rbx + 0x1800], rcx
mov qword [rbx + 0x1818], 0x20
lea rcx, [rbx + 0x2000]
mov eax, ecx
and eax, 0xfffff
mov ebp, 0x100000
sub rbp, rax
mov edi, 0xfe000
cmp rbp, rdi
cmovae rbp, rdi
mov qword [rsp + 0x20], rcx
mov rdx, rbp
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x18002fa33
mov rcx, qword [rsp + 0x20]
add rcx, rbp
sub rdi, rbp
mov eax, 0x100000
cmp rdi, rax
mov ebp, 0x100000
cmovb rbp, rdi
test rdi, rdi
jne 0x18002d992
add qword [r14 + 0x48], 3
lea rdx, [rbx + 0x68]
mov rcx, qword [rsp + 0x78]
call fcn.18004c020
add rbx, 0x3000
mov r10, qword [rsp + 0x28]
jmp 0x18002bd1a
mov qword [rsp + 0x90], r9
or rbp, 1
mov qword [r10 + 8], rbp
mov rcx, qword [r10]
test rcx, rcx
je 0x18002da19
mov rbp, qword [rcx + 8]
test bpl, 1
jne 0x18002e6a6
mov rcx, qword [rdx + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov r9, qword [rsp + 0x90]
mov r10, qword [rsp + 0x58]
jmp 0x18002d023
mov al, 1
mov rbp, qword [rsp + 0x60]
jmp 0x18002c0d2
mov rdx, qword [r10 + 0x68]
test rdx, rdx
jne 0x18002e679
mov qword [rsp + 0x50], r12
lea r9, [rsp + 0xf8]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.18004c4f0
test rax, rax
je 0x18002fab0
mov r14, rax
cmp byte [rsp + 0xf8], 0
mov ecx, 0x40
mov eax, 0x24
cmove rax, rcx
mov rcx, qword [rsp + 0x20]
add qword [rcx + 0x40], 0x100000
mov qword [r14], rcx
xor ecx, ecx
mov qword [r14 + 0x18], rcx
mov qword [r14 + 0x30], rcx
mov qword [r14 + 0x48], rcx
mov qword [r14 + 0x60], 0x20
lea rcx, [rax + 0xfc000]
mov qword [r14 + 0x78], rcx
mov edx, 0x90
mov qword [r14 + rdx], rax
add rdx, 0x18
cmp rdx, 0x1800
jne 0x18002dae2
mov qword [r14 + 0x1800], rcx
mov qword [r14 + 0x1818], 0x20
lea rcx, [r14 + 0x2000]
mov eax, ecx
and eax, 0xfffff
mov edx, 0x100000
sub rdx, rax
mov ebp, 0xfe000
cmp rdx, rbp
cmovae rdx, rbp
mov r12, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdi, rcx
mov rsi, rdx
mov r8d, 0x4000
call r12
test eax, eax
je 0x18002fa33
mov rcx, rdi
add rcx, rsi
sub rbp, rsi
mov eax, 0x100000
cmp rbp, rax
mov edx, 0x100000
cmovb rdx, rbp
test rbp, rbp
jne 0x18002db2e
mov rsi, qword [rsp + 0x20]
add qword [rsi + 0x48], 3
lea rdx, [r14 + 0x68]
mov rcx, qword [rsp + 0x88]
call fcn.18004c020
mov r10, rsi
add r14, 0x3000
mov r12, qword [rsp + 0x50]
mov r11, qword [rsp + 0x80]
jmp 0x18002bf41
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rax
mov qword [r11 + 8], rdx
mov rdx, r11
jmp 0x18002b254
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x18002c6bf
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18002ef7b
mov rax, qword [rdx]
test rax, rax
jne 0x18002eb1b
mov qword [rsp + 0xf8], rax
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x58]
jmp 0x18002c8eb
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x18002ced1
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18002ef92
mov rax, qword [rdx]
test rax, rax
jne 0x18002eb76
mov qword [rsp + 0xf8], rax
mov rsi, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x88]
jmp 0x18002d0fd
mov rax, qword [r9 + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
cmp rbp, rcx
mov r10, qword [rsp + 0x28]
jne 0x18002cc63
and eax, 1
or rax, r11
mov qword [r9 + 8], rax
jmp 0x18002cc63
mov rax, qword [r9 + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
cmp rbp, rcx
jne 0x18002d441
and eax, 1
or rax, r11
mov qword [r9 + 8], rax
jmp 0x18002d441
and rbx, 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rbx, qword [rdx]
test rbx, rbx
je 0x18002f77b
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rdi, qword [rax]
and rdi, 0xfffffffffffffffe
and ecx, 1
or rcx, rdi
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
jmp 0x18002b634
and rsi, 0xfffffffffffffffe
mov qword [rax + 8], rsi
mov rsi, qword [rdx]
test rsi, rsi
je 0x18002f77b
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
jmp 0x18002b706
test r13, r13
je 0x18002f782
cmp qword [r13], r15
jne 0x18002ea3a
mov qword [r13], rdx
test rdx, rdx
je 0x18002f39d
mov rax, qword [r15]
mov qword [rdx], rax
mov rax, qword [r15 + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [r15 + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x18002faba
mov qword [r11], 0
mov rbx, qword [rsp + 0x20]
jmp 0x18002b467
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
and rbp, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [rdx + 8], rax
test rbp, rbp
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x18002de47
mov rax, qword [rcx + 8]
test al, 1
jne 0x18002ed7e
mov qword [rdx + 8], rcx
mov r10, qword [rsp + 0x28]
jmp 0x18002c880
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
and rbp, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [rdx + 8], rax
test rbp, rbp
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x18002deaf
mov rax, qword [rcx + 8]
test al, 1
jne 0x18002ee27
mov qword [rdx + 8], rcx
jmp 0x18002d094
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbx], rax
jmp 0x18002af6d
mov qword [r11], 0
mov qword [r11 + 8], 1
lea rbp, [rsp + 0xf8]
jmp 0x18002cc5a
cmp qword [rsp + 0x48], 0
je 0x18002f782
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x48]
cmp qword [rcx], rax
jne 0x18002eb57
mov rax, qword [rsp + 0x48]
mov qword [rax], rdx
mov rbp, qword [rsp + 0x30]
mov rax, qword [rbp]
mov qword [rdx], rax
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x18002fac4
mov qword [r11], 0
jmp 0x18002dbf7
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rsi], rax
jmp 0x18002afdb
mov qword [r11], 0
mov qword [r11 + 8], 1
lea rbp, [rsp + 0xf8]
jmp 0x18002d43d
cmp qword [rsp + 0x28], 0
je 0x18002f782
mov rax, qword [rsp + 0x28]
cmp qword [rax], r10
jne 0x18002ebb2
mov rax, qword [rsp + 0x28]
mov qword [rax], rdx
mov rbp, r10
mov rax, qword [r10]
mov qword [rdx], rax
mov rax, qword [r10 + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [r10 + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x18002face
mov qword [r11], 0
jmp 0x18002dc4f
and ebx, 1
mov qword [rsp + 0x30], rax
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
or rax, rbx
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x30]
and byte [rax + 8], 0xfe
mov rax, qword [r10 + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
and eax, 1
or rax, rbx
mov qword [r10 + 8], rax
mov qword [rcx], r10
mov qword [rdx], rcx
jmp 0x18002b38d
xor eax, eax
mov qword [rsp + 0x30], rax
jmp 0x18002beda
xor eax, eax
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x60]
jmp 0x18002c125
test rbp, rbp
je 0x18002e9ac
mov rcx, qword [rbp + 0x10]
cmp rcx, 1
ja 0x18002f123
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002e9ac
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rbp + 0x10], 1
and qword [rax + 0x10], 1
mov qword [rsp + 0x100], rax
mov r8, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x70]
jmp 0x18002e330
mov edi, 1
cmp edx, 0xffffffff
je 0x18002e974
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002cc33
test rsi, rsi
je 0x18002e9b3
mov rdx, rsi
mov rcx, qword [rsi + 0x10]
cmp rcx, 1
ja 0x18002f130
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002e9b3
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov rbp, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rbp + 0x10], 1
and qword [rax + 0x10], 1
mov qword [rsp + 0x100], rax
jmp 0x18002e4b6
mov r8d, 1
cmp edx, 0xffffffff
je 0x18002e99d
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002d410
test rbp, rbp
je 0x18002e9cd
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002e9cd
test byte [rax + 0x10], 1
je 0x18002e9ba
xor ecx, ecx
mov qword [rsp + 0x20], rcx
mov r8, qword [rsp + 0x38]
mov ecx, 0xffffffff
xor edx, edx
mov rdi, rbp
mov rbp, rax
xor eax, eax
cmp rbp, r8
setb al
cmova eax, ecx
test eax, eax
je 0x18002e22d
cmp eax, 0xffffffff
jne 0x18002e24e
test rbp, rbp
je 0x18002f13d
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002f13d
test byte [rax + 0x10], 1
je 0x18002e290
mov rdi, rbp
mov r8, qword [rsp + 0x38]
xor edx, edx
mov ecx, 0xffffffff
jmp 0x18002e1e9
test rbp, rbp
je 0x18002e322
mov rax, qword [rbp + 0x10]
mov rcx, rdi
mov qword [rsp + 0x20], rdi
cmp rax, 1
jbe 0x18002e2dd
jmp 0x18002e25b
test rbp, rbp
je 0x18002ec2c
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
je 0x18002ec2c
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002ec2c
test byte [rcx + 0x10], 1
mov r8, qword [rsp + 0x38]
mov edx, 0
mov ecx, 0xffffffff
jne 0x18002e1e6
jmp 0x18002ec2c
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002e2a3
test byte [rcx + 0x10], 1
jne 0x18002e21c
lea rcx, [rsp + 0xf0]
mov rdx, rbp
call fcn.180003330
mov rax, qword [rsp + 0xf0]
cmp qword [rdi + 8], rbp
jne 0x18002faf2
mov qword [rdi + 8], rax
mov rbp, rax
mov r8, qword [rsp + 0x38]
xor edx, edx
mov ecx, 0xffffffff
jmp 0x18002e1ec
mov rdx, qword [rbp + 8]
test rdx, rdx
je 0x18002e8ea
mov rax, qword [rdx + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rbp + 8], rax
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
or byte [rbp + 0x10], 1
and qword [rdx + 0x10], 1
cmp qword [rdi + 8], rbp
mov ecx, dword [rsp + 0x70]
jne 0x18002e364
mov qword [rdi + 8], rdx
mov rax, qword [rsp + 0x100]
mov qword [r14 + 0x60], rax
test r8, r8
je 0x18002f39d
xorps xmm0, xmm0
movups xmmword [r8 + 8], xmm0
test cl, cl
je 0x18002cca4
mov qword [rsi], 0
mov rcx, r13
jmp 0x18002e503
and rdx, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rdx
mov qword [rdi + 0x10], rax
jmp 0x18002e330
lea rcx, [rsp + 0xf8]
jmp 0x18002b5b8
test rsi, rsi
je 0x18002ea0f
mov rax, qword [rsi + 8]
test rax, rax
je 0x18002ea0f
test byte [rax + 0x10], 1
je 0x18002e9fc
xor r12d, r12d
xor ebp, ebp
mov rcx, qword [rsp + 0x40]
mov rdx, rax
xor eax, eax
cmp rdx, rcx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
test eax, eax
je 0x18002e3e9
cmp eax, 0xffffffff
jne 0x18002e404
test rdx, rdx
je 0x18002f1ff
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002f1ff
test byte [rax + 0x10], 1
jne 0x18002e45f
jmp 0x18002e448
test rdx, rdx
je 0x18002fa4c
mov rax, qword [rdx + 0x10]
mov rdi, rsi
mov r12, rsi
cmp rax, 1
jbe 0x18002e467
jmp 0x18002e41a
mov rdi, rsi
mov rsi, rdx
test rdx, rdx
je 0x18002ec77
mov rdx, rsi
mov rax, qword [rsi + 0x10]
mov rsi, rdx
and rax, 0xfffffffffffffffe
je 0x18002ec77
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002ec77
test byte [rcx + 0x10], 1
mov rcx, qword [rsp + 0x40]
jne 0x18002e3af
jmp 0x18002ec77
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002efe5
test byte [rcx + 0x10], 1
je 0x18002efe5
mov rsi, rdx
jmp 0x18002e3aa
mov rbp, qword [rdx + 8]
test rbp, rbp
je 0x18002e8f1
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rdx + 8], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
or byte [rdx + 0x10], 1
and qword [rbp + 0x10], 1
cmp qword [rdi + 8], rdx
jne 0x18002e51c
mov qword [rdi + 8], rbp
mov r12, qword [rsp + 0x50]
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
mov edx, dword [rsp + 0x68]
mov rax, qword [rsp + 0x100]
mov qword [r10 + 0x60], rax
test rcx, rcx
je 0x18002f39d
xorps xmm0, xmm0
movups xmmword [rcx + 8], xmm0
test dl, dl
je 0x18002d492
mov qword [rsi], 0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
xor ebp, ebp
jmp 0x18002a431
and rbp, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rbp
mov qword [rdi + 0x10], rax
jmp 0x18002e4b6
mov rdi, rsi
lea rcx, [rsp + 0xf8]
jmp 0x18002b689
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f77b
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
mov rbx, qword [rdx + 8]
mov rax, rbx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov r10, qword [rax]
and r10, 0xfffffffffffffffe
and ebx, 1
or rbx, r10
mov qword [rdx + 8], rbx
mov qword [rax], rdx
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
jmp 0x18002b3e5
mov qword [r14 + 0x68], 0
lea rbx, [rdx + 0x3000]
add rdx, 0x68
mov rcx, qword [rsp + 0x78]
call fcn.18004c020
jmp 0x18002d9e9
and rbp, 0xfffffffffffffffe
mov qword [rcx + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f77b
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rdx + 8], rdi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
jmp 0x18002d8c2
mov qword [r10], rbp
jmp 0x18002cbfa
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbx], rax
jmp 0x18002b2e2
mov rsi, qword [rsp + 0x20]
mov qword [rsi + 0x68], 0
lea r14, [rdx + 0x3000]
add rdx, 0x68
mov rcx, qword [rsp + 0x88]
call fcn.18004c020
mov r10, rsi
jmp 0x18002db8e
and rbp, 0xfffffffffffffffe
mov qword [rcx + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f77b
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and esi, 1
or rsi, rax
mov qword [rdx + 8], rsi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
jmp 0x18002da40
mov qword [r10], rbp
jmp 0x18002d3dc
mov rax, qword [r10 + 8]
and eax, 1
or rax, rbp
mov qword [r10 + 8], rax
jmp 0x18002cbfa
and edi, 1
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
or rax, rdi
mov qword [rbp + 8], rax
and byte [r10 + 8], 0xfe
mov rdi, qword [rcx + 8]
mov rbp, rdi
and rbp, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rcx + 8], rdi
mov qword [rbp], rcx
mov qword [rdx], rbp
jmp 0x18002c7b3
mov rax, qword [r10 + 8]
and eax, 1
or rax, rbp
mov qword [r10 + 8], rax
jmp 0x18002d3dc
mov qword [rsp + 0x90], r9
and ecx, 1
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rbp + 8], rax
and byte [rsi + 8], 0xfe
mov rcx, qword [r10 + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [r10 + 8], rcx
mov qword [rbp], r10
mov qword [rdx], rbp
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
mov r9, qword [rsp + 0x90]
jmp 0x18002cff2
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbx, qword [rax + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
mov rbx, qword [rdx + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002b1ba
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, rsi
mov rsi, qword [rax + 8]
and esi, 1
or rsi, rcx
mov qword [rax + 8], rsi
mov rsi, qword [rdx + 8]
and esi, 1
or rsi, rcx
mov qword [rax + 8], rsi
mov rsi, r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002b41b
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002fae5
test byte [rax + 0x10], 1
jne 0x18002ebf8
or rcx, 1
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002e8ba
mov rbp, qword [rcx + 0x10]
test bpl, 1
jne 0x18002f088
or byte [rax + 0x10], 1
mov rcx, qword [rdx + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rbp, qword [rax + 8]
and rbp, 0xfffffffffffffffe
and ecx, 1
or rcx, rbp
mov qword [rdx + 0x10], rcx
mov qword [rax + 8], rdx
jmp 0x18002ec0b
xor edx, edx
jmp 0x18002e322
xor ebp, ebp
jmp 0x18002e4ac
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
and rcx, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rbx, [rax + rcx]
mov qword [rdx + 8], rbx
test rcx, rcx
je 0x18002f39d
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
or rbx, rax
mov qword [rdx + 8], rbx
mov qword [rcx], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002e951
mov rbx, qword [rax + 8]
test bl, 1
jne 0x18002ef37
mov qword [rdx + 8], rax
jmp 0x18002b79f
test cl, 0x10
mov eax, 0
cmove rax, r11
xor edi, edi
cmp rax, rbp
seta cl
jae 0x18002ec1c
mov rcx, qword [rbp]
mov edi, 0xffffffff
jmp 0x18002cc33
test cl, 0x10
mov eax, 0
cmove rax, r11
xor r8d, r8d
cmp rax, rbp
seta al
jae 0x18002ec24
mov rcx, qword [rbp]
mov r8d, 0xffffffff
jmp 0x18002d410
xor eax, eax
jmp 0x18002e0f7
xor eax, eax
jmp 0x18002e18a
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002e9cd
test byte [rcx + 0x10], 1
jne 0x18002e1d3
lea rdi, [rsp + 0xd8]
mov rcx, rdi
mov rdx, rbp
call fcn.180003330
mov rax, qword [rdi]
test rax, rax
je 0x18002f66e
and byte [rax + 0x10], 0xfe
xor ecx, ecx
mov qword [rsp + 0x20], rcx
jmp 0x18002ebe7
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002ea0f
test byte [rcx + 0x10], 1
jne 0x18002e3a5
lea rdi, [rsp + 0xd8]
mov rcx, rdi
mov rdx, rsi
call fcn.180003330
mov rax, qword [rdi]
test rax, rax
je 0x18002f66e
and byte [rax + 0x10], 0xfe
xor r12d, r12d
jmp 0x18002ec0b
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r13 + 8]
and ecx, 1
or rcx, rax
mov qword [r13 + 8], rcx
jmp 0x18002dda0
lea rbx, [rsp + 0xd8]
mov rcx, rbx
call fcn.180001ff0
mov rcx, qword [rbx]
jmp 0x18002c537
lea rdi, [rsp + 0xd8]
mov rcx, rdi
call fcn.180025190
mov rbp, qword [rdi]
jmp 0x18002cd56
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call fcn.180025190
mov rbp, qword [rsi]
jmp 0x18002d554
lea rcx, [0x1800a6590]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbp, qword [0x1800a65b8]
mov eax, 0xffffffff
xor ecx, ecx
cmp qword [rbp + 0x20], r15
setb cl
cmova ecx, eax
test ecx, ecx
je 0x18002eb05
cmp ecx, 0xffffffff
jne 0x18002ead0
mov rbp, qword [rbp + 0x10]
jmp 0x18002eab5
mov rbp, qword [rbp + 0x18]
and rbp, 0xfffffffffffffffe
jmp 0x18002eab5
mov rax, qword [rbp]
mov rbx, qword [rbp + 0x30]
cmp rax, qword [rbx + 0x10]
je 0x18002a17c
lea rax, str.MOZ_RELEASE_ASSERT_mNode__mArenaId__mNode__mArena__mId_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rdi, qword [rbp + 0x28]
lea rcx, [0x1800a6590]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18002a16b
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbp, qword [rax + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002dbef
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rsp + 0x48]
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x18002df32
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbp, qword [rax + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002dc47
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rsp + 0x28]
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x18002dfec
lea rdi, [rsp + 0xd8]
mov rcx, rdi
mov rdx, rbp
call fcn.180029970
mov rax, qword [rdi]
lea rbp, [rsp + 0xf8]
mov qword [rbp + 8], rax
jmp 0x18002e1da
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call fcn.180029970
mov rax, qword [rsi]
lea rsi, [rsp + 0xf8]
mov qword [rsi + 8], rax
jmp 0x18002e3a8
mov dil, cl
jmp 0x18002e11b
mov r8b, al
jmp 0x18002e1a6
lea rcx, [rsp + 0xe8]
mov rdx, rbp
call fcn.180029970
mov rax, qword [rsp + 0xe8]
cmp qword [rdi + 8], rbp
je 0x18002f10e
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rbp, rdi
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
mov r8, qword [rsp + 0x38]
xor edx, edx
mov ecx, 0xffffffff
jmp 0x18002e1e6
lea rcx, [rsp + 0xe8]
mov rdx, rsi
call fcn.180029970
mov rax, qword [rsp + 0xe8]
cmp qword [rdi + 8], rsi
je 0x18002f11a
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
mov rsi, rdi
jmp 0x18002e3aa
and rdi, 0xfffffffffffffffe
mov qword [rax], rdi
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
and rbp, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbp]
mov qword [rdx + 8], rcx
test rbp, rbp
je 0x18002f39d
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002ed11
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002f1c7
mov qword [rdx + 8], rax
jmp 0x18002cdbe
and rsi, 0xfffffffffffffffe
mov qword [rax], rsi
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
and rbp, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbp]
mov qword [rdx + 8], rcx
test rbp, rbp
je 0x18002f39d
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002ed75
mov rcx, qword [rax + 8]
test cl, 1
jne 0x18002f284
mov qword [rdx + 8], rax
jmp 0x18002d5cc
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
or rax, 1
mov qword [rdx + 8], rax
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov qword [rbp], rcx
mov r10, qword [rsp + 0x28]
jmp 0x18002c880
and rbp, 0xfffffffffffffffe
mov qword [rax + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f77b
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rdi, qword [rax]
and rdi, 0xfffffffffffffffe
and ecx, 1
or rcx, rdi
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x18002cd56
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
or rax, 1
mov qword [rdx + 8], rax
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov qword [rbp], rcx
jmp 0x18002d094
and rbp, 0xfffffffffffffffe
mov qword [rax + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x18002f77b
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rsi, qword [rax]
and rsi, 0xfffffffffffffffe
and ecx, 1
or rcx, rsi
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x18002d554
and rbx, 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002f77b
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
mov rax, qword [rdx + 8]
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x18002f39d
mov r8, qword [rbx]
and r8, 0xfffffffffffffffe
and eax, 1
or rax, r8
mov qword [rdx + 8], rax
mov qword [rbx], rdx
mov rax, qword [rcx + 8]
and eax, 1
or rax, rbx
mov qword [rcx + 8], rax
jmp 0x18002c537
and rbx, 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rbx, qword [rdx + 8]
mov rax, rbx
or rax, 1
mov qword [rdx + 8], rax
and rbx, 0xfffffffffffffffe
je 0x18002f39d
mov rax, qword [rbx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rbx], rdx
mov qword [rcx], rbx
jmp 0x18002b79f
lea r13, [rsp + 0xf8]
jmp 0x18002c4c0
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0x48], rcx
mov r10, qword [rsp + 0x28]
jmp 0x18002ccdb
lea rbp, [rsp + 0xf8]
mov qword [rsp + 0x28], rbp
jmp 0x18002d4cc
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbx, qword [rax + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
mov rbx, qword [rdx + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
mov rbx, qword [rsp + 0x20]
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002c16f
lea rcx, [rsp + 0xf0]
mov rdi, rdx
call fcn.180003330
mov rax, qword [rsp + 0xf0]
cmp qword [rsi + 8], rdi
jne 0x18002fb0c
mov qword [rsi + 8], rax
mov rdx, rax
mov rcx, qword [rsp + 0x40]
jmp 0x18002e3b2
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002fb26
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
and edx, 1
or rdx, rdi
mov qword [rbp + 0x10], rdx
mov qword [rcx + 8], rbp
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18002ebe7
and rbp, 0xfffffffffffffffe
mov qword [rcx + 0x10], rbp
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002fb33
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov rbp, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18002f39d
mov rdi, rbp
mov rbp, qword [rcx + 8]
and rbp, 0xfffffffffffffffe
and edx, 1
or rdx, rbp
mov qword [rdi + 0x10], rdx
mov qword [rcx + 8], rdi
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18002ec0b
mov rcx, r15
mov rdx, rbx
call fcn.180003470
jmp 0x18002a431
mov rbp, rdi
mov qword [rdi + 8], rax
jmp 0x18002ec66
mov qword [rdi + 8], rax
jmp 0x18002ecae
lea rax, [rsp + 0xf8]
jmp 0x18002c9c6
lea r12, [rsp + 0xf8]
jmp 0x18002d1f9
cmp qword [rsp + 0x20], 0
je 0x18002fb40
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x20]
cmp qword [rcx + 8], rax
jne 0x18002f5fc
mov rax, qword [rsp + 0x20]
mov qword [rax + 8], rbp
cmp qword [rsp + 0x38], 0
je 0x18002fb60
test rbp, rbp
je 0x18002f39d
mov rdx, qword [rsp + 0x38]
mov rax, qword [rdx + 8]
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [rbp + 0x10]
and eax, 1
or rax, rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rdx + 0x10]
and ecx, 1
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rbp + 0x10], rax
cmp qword [rdi + 8], rbp
jne 0x18002fb83
mov qword [rdi + 8], 0
jmp 0x18002e0ff
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbp], rax
jmp 0x18002cdbe
test r12, r12
je 0x18002fb8d
mov rdi, rdx
mov rax, qword [rsp + 0x40]
cmp qword [r12 + 8], rax
jne 0x18002f61b
mov qword [r12 + 8], rdi
cmp qword [rsp + 0x40], 0
je 0x18002fbad
test rdi, rdi
je 0x18002f39d
mov rdx, qword [rsp + 0x40]
mov rax, qword [rdx + 8]
mov rbp, rdi
mov qword [rdi + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rcx
mov qword [rdi + 0x10], rax
mov rcx, qword [rdx + 0x10]
and ecx, 1
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdi + 0x10], rax
cmp qword [rsi + 8], rdi
jne 0x18002fbd3
mov qword [rsi + 8], 0
jmp 0x18002e4b6
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002f39d
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbp], rax
jmp 0x18002d5cc
mov byte [r14 + 0x70], 0
lea rcx, [rsp + 0xf8]
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
lea rdi, [rsp + 0xd8]
mov rcx, rdi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
mov ecx, 0x10
call fcn.180002210
xor ecx, ecx
cmp byte [rdi + 8], 0
mov edx, 0
je 0x18002f2fd
mov rdx, qword [rsp + 0xd8]
cmp byte [rsp + 0x100], 0
je 0x18002f30f
mov rcx, qword [rsp + 0xf8]
mov qword [rax], rcx
mov qword [rax + 8], rdx
mov qword [r14 + 0x78], rax
mov byte [r14 + 0x70], 1
jmp 0x18002a4f1
mov r14, rsi
mov byte [rbp + 0x70], 0
lea rcx, [rsp + 0xf8]
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
mov ecx, 0x10
call fcn.180002210
xor ecx, ecx
cmp byte [rsi + 8], 0
mov edx, 0
je 0x18002f367
mov rdx, qword [rsp + 0xd8]
cmp byte [rsp + 0x100], 0
je 0x18002f379
mov rcx, qword [rsp + 0xf8]
mov qword [rax], rcx
mov qword [rax + 8], rdx
mov rbp, qword [rsp + 0x20]
mov qword [rbp + 0x78], rax
mov byte [rbp + 0x70], 1
mov rsi, r14
jmp 0x18002a28f
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov eax, dword [0x1800a6698]
test eax, eax
jne 0x18002f5dd
mov eax, dword [0x1800a66f8]
mov ecx, dword [0x1800a64f4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x18002f42e
lea rcx, [0x1800a66f8]
call fcn.18004a800
cmp dword [0x1800a66f8], 0xffffffff
jne 0x18002f42e
lea rbx, [rsp + 0xf8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800a66f0], rax
lea rcx, [0x1800a66f8]
call fcn.18004a7a0
mov eax, 0x1000
xor edx, edx
div qword [0x1800a66f0]
test rdx, rdx
jne 0x18002fc0b
lea rcx, str.MALLOC_OPTIONS
lea rbx, [0x1800a6700]
mov rdx, rbx
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor ebp, ebp
test eax, eax
cmovne rbp, rbx
je 0x18002f4b5
mov al, byte [rbp]
test al, al
je 0x18002f4b5
xor r15d, r15d
movsx eax, al
add eax, 0xffffffd0
mov ebx, 1
cmp eax, 9
jbe 0x18002fc61
mov r12d, r15d
mov al, byte [rbp + r12]
movsx ecx, al
cmp ecx, 0x72
jne 0x18002fbdd
mov byte [0x1800a6588], 1
dec ebx
jne 0x18002f48d
inc r15d
mov al, byte [rbp + r15]
test al, al
jne 0x18002f476
mov qword [0x1800a6658], 0
lea rcx, [0x1800a6660]
mov rbx, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rbx
xor ebp, ebp
mov qword [0x1800a6690], rbp
mov qword [0x1800a6688], rbp
lea rcx, [0x1800a6590]
mov edx, 0x1388
call rbx
mov qword [0x1800a65b8], rbp
mov qword [0x1800a65c0], rbp
mov qword [0x1800a65c8], rbp
lea rcx, [0x1800a6600]
mov edx, 0x1388
call rbx
mov qword [0x1800a6650], rbp
mov qword [0x1800a6640], rbp
xorps xmm0, xmm0
movups xmmword [0x1800a66d8], xmm0
lea rcx, [0x1800a66a0]
mov dword [rsp + 0x100], 0
mov rax, qword [0x1800a6038]
mov qword [rsp + 0xf8], rax
mov edx, 0x1388
call rbx
test eax, eax
je 0x18002fc37
lea rdx, [rsp + 0xf8]
xor ecx, ecx
call fcn.18003dfc0
mov qword [0x1800a66c8], rax
test rax, rax
je 0x18002fc4f
mov ecx, dword [0x1800a64f4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 8], rax
lea rcx, [0x1800a65d0]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.180002210
test rax, rax
je 0x18002fc44
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800a65f8], rax
mov eax, 1
xchg dword [0x1800a6698], eax
call fcn.180002410
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x18002a460
or rax, 1
mov qword [rdx + 8], rax
jmp 0x18002f39d
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rdx, qword [rsp + 0x20]
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
jmp 0x18002f166
mov rax, rdi
and rax, 0xfffffffffffffffe
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r12 + 0x10], rcx
jmp 0x18002f220
or rdi, 1
mov qword [rdx + 8], rdi
jmp 0x18002f39d
or rsi, 1
mov qword [rdx + 8], rsi
jmp 0x18002f39d
or rbx, 1
mov qword [rdx + 8], rbx
jmp 0x18002f39d
and edi, 1
mov qword [rcx + 8], rdi
jmp 0x18002f66e
and ecx, 1
mov qword [r10 + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov r13d, 1
jmp 0x18002a117
lea rax, str.MOZ_RELEASE_ASSERT_malloc_initialized_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
xor ecx, ecx
jmp 0x18002a1ce
lea rax, str.MOZ_RELEASE_ASSERT__aArena__arena__aArena_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x20U____0___Freeing_in_decommitted_page._
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x01U_____0___Double_free__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__run__mRegionsMask_elm____1U____bit____0___Double_free__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov r14, qword [0x1800a66c8]
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 8], r14
jmp 0x18002a49c
lea rax, str.MOZ_RELEASE_ASSERT__mArena__arena__mArena_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rbp, qword [0x1800a66c8]
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 8], rbp
jmp 0x18002a22e
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
and edi, 1
mov qword [r9 + 8], rdi
jmp 0x18002f66e
dec dword [rbx + 0xc]
jmp 0x18002e35c
dec dword [r14 + 0xc]
jmp 0x18002e4fe
mov rax, rdi
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, rdi
jmp 0x18002a851
mov rax, rsi
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x18002aa87
and ebx, 1
mov qword [r10 + 8], rbx
jmp 0x18002f66e
xor ecx, ecx
jmp 0x18002b52c
mov rax, rbx
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, rbx
jmp 0x18002b25a
mov rax, rcx
jmp 0x18002bcec
mov rax, rcx
jmp 0x18002bf13
or rax, 1
mov qword [rdx + 8], rax
jmp 0x18002f66e
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x18002c6c2
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x18002ced4
and qword [r11 + 8], 1
jmp 0x18002ac60
and qword [r11 + 8], 1
jmp 0x18002aca9
mov rax, rdi
mov rdi, qword [rsp + 0x68]
mov qword [rsp + 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18002f8a7
cmp eax, 8
jne 0x18002f931
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xa0], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x60]
mov rdx, rdi
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xa8], 0
jne 0x18002fa54
cmp eax, 0x5af
je 0x18002f911
cmp eax, 8
jne 0x18002f931
xor eax, eax
dec qword [rsp + 0xa0]
mov r8, qword [rsp + 0x38]
mov r11, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x30]
jne 0x18002f8c3
jmp 0x18002be8a
xor eax, eax
jmp 0x18002be7b
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x50], r12
mov rsi, rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18002f966
cmp eax, 8
jne 0x18002fa05
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xc8], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test rdi, rdi
jne 0x18002fa76
cmp eax, 0x5af
je 0x18002f9cd
cmp eax, 8
jne 0x18002fa05
xor eax, eax
dec qword [rsp + 0xc8]
mov rbx, rsi
mov r12, qword [rsp + 0x50]
mov r10, qword [rsp + 0x20]
mov r8, qword [rsp + 0x40]
mov r11, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x60]
jne 0x18002f982
jmp 0x18002c0d2
xor eax, eax
mov rbx, rsi
mov r12, qword [rsp + 0x50]
mov r10, qword [rsp + 0x20]
mov r8, qword [rsp + 0x40]
mov r11, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x60]
jmp 0x18002c0d2
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rdi, rsi
jmp 0x18002e4ac
cmp eax, 0x5af
mov rdi, qword [rsp + 0x60]
je 0x18002fa69
cmp eax, 8
jne 0x18002be50
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18002be50
cmp eax, 0x5af
mov rbx, rsi
mov r12, qword [rsp + 0x50]
mov rsi, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0x60]
mov rdi, qword [rsp + 0xc0]
je 0x18002faa3
cmp eax, 8
jne 0x18002c08f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18002c08f
mov rsi, qword [rsp + 0x48]
jmp 0x18002e4f7
and qword [r11 + 8], 1
jmp 0x18002dde3
and qword [r11 + 8], 1
jmp 0x18002dbf7
and qword [r11 + 8], 1
jmp 0x18002dc4f
or rcx, 1
mov qword [rbp + 0x10], rcx
jmp 0x18002f66e
or rcx, 1
mov qword [rdx + 0x10], rcx
jmp 0x18002f66e
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x18002e2c9
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rsi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rsi + 0x10], rdx
jmp 0x18002f00b
mov qword [rbp + 8], 0
jmp 0x18002f782
mov qword [rdx + 8], 0
jmp 0x18002f782
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rbp, rbp
je 0x18002f39d
mov qword [rbp + 8], 0
mov rax, qword [rbp + 0x10]
and eax, 1
mov qword [rbp + 0x10], rax
xor ecx, ecx
jmp 0x18002f1a5
and qword [rdi + 0x10], 1
jmp 0x18002e0ff
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rdi, rdi
je 0x18002f39d
mov rcx, rdi
mov qword [rdi + 8], 0
mov rax, qword [rdi + 0x10]
and eax, 1
mov qword [rdi + 0x10], rax
xor ecx, ecx
jmp 0x18002f262
and qword [rsi + 0x10], 1
jmp 0x18002e4b6
cmp ecx, 0x46
jne 0x18002fc87
mov rax, qword [0x1800a6038]
test rax, rax
je 0x18002fca9
add rax, rax
je 0x18002f4a5
mov qword [0x1800a6038], rax
jmp 0x18002f4a5
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180051bf0
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov qword [0x1800a66c8], 0
jmp 0x18002fc4f
mov qword [0x1800a65f8], 0
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x18002e509
xor ebx, ebx
lea ecx, [rbx + rbx*4]
lea ebx, [rax + rcx*2]
inc r15d
movsx eax, byte [rbp + r15]
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x18002fc63
test ebx, ebx
je 0x18002f4a9
jmp 0x18002f48a
cmp ecx, 0x52
jne 0x18002fc98
mov byte [0x1800a6588], 0
jmp 0x18002f4a5
cmp ecx, 0x66
jne 0x18002fcb9
shr qword [0x1800a6038], 1
jmp 0x18002f4a5
mov qword [0x1800a6038], 1
jmp 0x18002f4a5
lea r14, [rsp + 0xf8]
mov byte [r14], al
mov byte [r14 + 1], 0
lea rdx, str._jemalloc_
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call rdi
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call rdi
lea rdx, [0x18009ab44]
mov rcx, r14
call fcn.180051bf0
jmp 0x18002f4a5