Function at 0x1800135e0
Capabilities:
Access peb ldr_data

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x88
movzx r10d, word [rdx + 0xc]
mov rdi, rdx
movzx eax, word [rcx + 0x8c]
mov sil, r9b
xor r10, rax
mov r14, rdx
shl r10, 4
mov rbx, rcx
sub rdi, r10
cmp rdi, rdx
je 0x18001363c
mov eax, dword [rcx + 0x7c]
shr eax, 0x14
and al, byte [rcx + 0x8a]
xor al, byte [rdi + 0xa]
test al, 1
je 0x1800136a2
mov rsi, qword [rbp + 0x77]
mov rsi, qword [rsi]
shl rsi, 4
add rsi, r14
cmp dword [rbx + 0x7c], 0
je 0x180013674
mov eax, dword [rsi + 8]
mov edx, dword [rbx + 0x88]
xor edx, eax
mov ecx, edx
mov eax, edx
shr ecx, 0x10
shr eax, 8
xor cl, al
xor cl, dl
shr edx, 0x18
cmp dl, cl
jne 0x1800a893c
mov eax, dword [rbx + 0x7c]
shr eax, 0x14
and al, byte [rbx + 0x8a]
xor al, byte [rsi + 0xa]
test al, 1
je 0x1800138b2
mov rax, r14
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp dword [rcx + 0x7c], 0
je 0x1800136cd
mov edx, dword [rcx + 0x88]
xor edx, dword [rdi + 8]
mov ecx, edx
mov dword [rdi + 8], edx
shr ecx, 0x10
mov eax, edx
shr eax, 8
xor cl, al
xor cl, dl
shr edx, 0x18
cmp dl, cl
jne 0x1800a85e4
test sil, sil
jne 0x1800a85f5
mov rax, qword [rdi + 0x18]
lea r8, [rdi + 0x10]
mov r9, qword [r8]
mov qword [rbp + 0x6f], r9
mov qword [rbp - 0x39], rax
mov rax, qword [rax]
mov r9, qword [r9 + 8]
cmp rax, r9
jne 0x1800a891e
cmp rax, r8
jne 0x1800a891e
movzx eax, word [rdi + 8]
sub qword [rbx + 0xc0], rax
mov rsi, qword [rbx + 0x138]
test rsi, rsi
je 0x1800137fa
movzx r12d, word [rdi + 8]
mov eax, dword [rsi + 8]
cmp r12, rax
jae 0x180013859
mov rcx, r12
mov r15d, ecx
sub r15d, dword [rsi + 0x18]
cmp dword [rsi + 0xc], 0
lea eax, [r15 + r15]
jne 0x180013745
mov eax, r15d
mov r11d, dword [rsi + 8]
mov edx, eax
mov rax, qword [rsi + 0x30]
mov qword [rbp + 0x67], rdx
lea r9d, [r11 - 1]
mov r10, qword [rax + rdx*8]
dec dword [rsi + 0x10]
cmp ecx, r9d
je 0x18001386c
cmp r10, r8
jne 0x1800137fa
mov r13, qword [r8]
xor r10d, r10d
cmp qword [rsi], r10
cmovne r9d, r11d
cmp ecx, r9d
jae 0x18001388b
cmp r13, qword [rsi + 0x20]
je 0x1800137d2
lea r8, [r13 - 0x10]
mov eax, dword [r8 + 8]
mov dword [rbp - 0x19], eax
cmp dword [rbx + 0x7c], r10d
je 0x1800137c5
mov edx, dword [rbx + 0x88]
xor edx, eax
mov ecx, edx
mov dword [rbp - 0x19], edx
shr ecx, 0x10
mov eax, edx
shr eax, 8
xor cl, al
xor cl, dl
shr edx, 0x18
cmp dl, cl
jne 0x1800a884e
mov rdx, qword [rbp + 0x67]
movzx eax, word [rbp - 0x19]
cmp r12d, eax
je 0x18001387e
mov rax, qword [rsi + 0x30]
and qword [rax + rdx*8], 0
mov rdx, qword [rsi + 0x28]
mov eax, 1
mov r8d, r15d
and r15d, 0x1f
mov cl, r15b
shr r8, 5
shl eax, cl
not eax
and dword [rdx + r8*4], eax
mov rcx, qword [rbp - 0x39]
mov rax, qword [rbp + 0x6f]
mov qword [rcx], rax
mov qword [rax + 8], rcx
test byte [rdi + 0xa], 8
jne 0x18001389a
mov al, byte [rdi + 0xa]
test al, 4
jne 0x1800a8886
movzx eax, word [rdi + 8]
mov r14, rdi
mov rcx, qword [rbp + 0x77]
mov rsi, qword [rbp + 0x77]
mov byte [rdi + 0xa], 0
mov byte [rdi + 0xf], 0
add qword [rcx], rax
mov rax, qword [rcx]
mov word [rdi + 8], ax
movzx ecx, word [rcx]
xor cx, word [rbx + 0x8c]
mov rax, qword [rsi]
add rax, rax
mov word [rdi + rax*8 + 0xc], cx
jmp 0x180013640
mov rax, qword [rsi]
test rax, rax
je 0x180013874
mov rsi, rax
mov eax, dword [rax + 8]
jmp 0x180013725
dec dword [rsi + 0x14]
jmp 0x180013767
mov ecx, dword [rsi + 8]
dec ecx
jmp 0x180013731
mov rax, qword [rsi + 0x30]
mov qword [rax + rdx*8], r13
jmp 0x1800137fa
cmp r13, qword [rsi + 0x20]
jne 0x180013882
and qword [rax + rdx*8], r10
jmp 0x1800137db
mov rdx, rdi
mov rcx, rbx
call fcn.18005ca3c
test al, al
jne 0x180013813
jmp 0x1800a886d
cmp dword [rbx + 0x7c], 0
je 0x1800138dd
mov edx, dword [rbx + 0x88]
xor edx, dword [rsi + 8]
mov ecx, edx
mov dword [rsi + 8], edx
shr ecx, 0x10
mov eax, edx
shr eax, 8
xor cl, al
xor cl, dl
shr edx, 0x18
cmp dl, cl
jne 0x1800a8972
cmp byte [rbp + 0x7f], 0
jne 0x1800a8983
mov rax, qword [rsi + 0x18]
lea r8, [rsi + 0x10]
mov r9, qword [r8]
mov qword [rbp + 0x6f], r9
mov qword [rbp - 0x39], rax
mov rax, qword [rax]
mov r9, qword [r9 + 8]
cmp rax, r9
jne 0x1800a8954
cmp rax, r8
jne 0x1800a8954
movzx eax, word [rsi + 8]
sub qword [rbx + 0xc0], rax
mov rdi, qword [rbx + 0x138]
test rdi, rdi
je 0x180013a10
movzx r12d, word [rsi + 8]
mov eax, dword [rdi + 8]
cmp r12, rax
jae 0x180013a6c
mov rcx, r12
mov r15d, ecx
sub r15d, dword [rdi + 0x18]
cmp dword [rdi + 0xc], 0
lea eax, [r15 + r15]
jne 0x180013956
mov eax, r15d
mov r11d, dword [rdi + 8]
or r13d, 0xffffffff
mov edx, eax
mov rax, qword [rdi + 0x30]
mov qword [rbp + 0x67], rdx
lea r9d, [r11 - 1]
mov r10, qword [rax + rdx*8]
add dword [rdi + 0x10], r13d
cmp ecx, r9d
je 0x180013a89
cmp r10, r8
jne 0x180013a10
mov r13, qword [r8]
xor r10d, r10d
cmp qword [rdi], r10
cmovne r9d, r11d
cmp ecx, r9d
jae 0x180013a9f
cmp r13, qword [rdi + 0x20]
je 0x1800139e8
lea r8, [r13 - 0x10]
mov eax, dword [r8 + 8]
mov dword [rbp + 7], eax
cmp dword [rbx + 0x7c], r10d
je 0x1800139db
mov edx, dword [rbx + 0x88]
xor edx, eax
mov ecx, edx
mov dword [rbp + 7], edx
shr ecx, 0x10
mov eax, edx
shr eax, 8
xor cl, al
xor cl, dl
shr edx, 0x18
cmp dl, cl
jne 0x1800a8be2
mov rdx, qword [rbp + 0x67]
movzx eax, word [rbp + 7]
cmp r12d, eax
je 0x180013a92
mov rax, qword [rdi + 0x30]
and qword [rax + rdx*8], 0
mov rdx, qword [rdi + 0x28]
mov eax, 1
mov r8d, r15d
and r15d, 0x1f
mov cl, r15b
shr r8, 5
shl eax, cl
not eax
and dword [rdx + r8*4], eax
mov rcx, qword [rbp - 0x39]
mov rax, qword [rbp + 0x6f]
mov qword [rcx], rax
mov qword [rax + 8], rcx
test byte [rsi + 0xa], 8
jne 0x180013aae
mov al, byte [rsi + 0xa]
test al, 4
jne 0x1800a8c1a
mov rdx, qword [rbp + 0x77]
mov byte [r14 + 0xa], 0
mov byte [r14 + 0xf], 0
movzx eax, word [rsi + 8]
add qword [rdx], rax
mov rax, qword [rdx]
mov word [r14 + 8], ax
movzx ecx, word [rdx]
xor cx, word [rbx + 0x8c]
mov rax, qword [rdx]
add rax, rax
mov word [r14 + rax*8 + 0xc], cx
jmp 0x18001368b
mov rax, qword [rdi]
test rax, rax
je 0x180013a7f
mov rdi, rax
mov eax, dword [rax + 8]
jmp 0x180013936
mov ecx, dword [rdi + 8]
dec ecx
jmp 0x180013942
add dword [rdi + 0x14], r13d
jmp 0x18001397d
mov rax, qword [rdi + 0x30]
mov qword [rax + rdx*8], r13
jmp 0x180013a10
cmp r13, qword [rdi + 0x20]
jne 0x180013a96
and qword [rax + rdx*8], r10
jmp 0x1800139f1
mov rdx, rsi
mov rcx, rbx
call fcn.18005ca3c
test al, al
jne 0x180013a29
jmp 0x1800a8c01
mov rdx, rdi
mov rcx, rbx
call fcn.1800fbec0
nop
jmp 0x1800136cd
mov rax, qword [r14 + 0x18]
lea r8, [r14 + 0x10]
mov r9, qword [r8]
mov qword [rbp + 0x6f], r9
mov qword [rbp - 0x39], rax
mov rax, qword [rax]
mov r9, qword [r9 + 8]
cmp rax, r9
jne 0x1800a882d
cmp rax, r8
jne 0x1800a882d
movzx eax, word [r14 + 8]
sub qword [rbx + 0xc0], rax
mov rsi, qword [rbx + 0x138]
test rsi, rsi
je 0x1800a8753
movzx r12d, word [r14 + 8]
mov eax, dword [rsi + 8]
jmp 0x1800a8655
mov rax, qword [rsi]
test rax, rax
je 0x1800a865f
mov rsi, rax
mov eax, dword [rax + 8]
cmp r12, rax
jae 0x1800a8647
mov rcx, r12
jmp 0x1800a8664
mov ecx, dword [rsi + 8]
dec ecx
mov r15d, ecx
sub r15d, dword [rsi + 0x18]
cmp dword [rsi + 0xc], 0
lea eax, [r15 + r15]
jne 0x1800a8678
mov eax, r15d
mov r9, qword [rsi + 0x30]
mov r11d, dword [rsi + 8]
mov edx, eax
mov qword [rbp + 0x67], rdx
lea eax, [r11 - 1]
mov r10, qword [r9 + rdx*8]
dec dword [rsi + 0x10]
cmp ecx, eax
jne 0x1800a8698
dec dword [rsi + 0x14]
cmp r10, r8
jne 0x1800a8753
mov r13, qword [r8]
xor r10d, r10d
cmp qword [rsi], r10
cmovne eax, r11d
cmp ecx, eax
jae 0x1800a8724
cmp r13, qword [rsi + 0x20]
je 0x1800a8719
lea r8, [r13 - 0x10]
mov eax, dword [r8 + 8]
mov dword [rbp - 0x29], eax
cmp dword [rbx + 0x7c], r10d
je 0x1800a8706
mov edx, dword [rbx + 0x88]
xor edx, eax
mov ecx, edx
mov dword [rbp - 0x29], edx
shr ecx, 0x10
mov eax, edx
shr eax, 8
xor cl, al
xor cl, dl
shr edx, 0x18
cmp dl, cl
je 0x1800a8702
mov qword [rsp + 0x28], r10
lea ecx, [r10 + 3]
xor r9d, r9d
mov qword [rsp + 0x20], r10
mov rdx, rbx
call fcn.18009a4c0
mov rdx, qword [rbp + 0x67]
movzx eax, word [rbp - 0x29]
cmp r12d, eax
jne 0x1800a8719
mov rax, qword [rsi + 0x30]
mov qword [rax + rdx*8], r13
jmp 0x1800a8753
mov rax, qword [rsi + 0x30]
and qword [rax + rdx*8], 0
jmp 0x1800a8734
cmp r13, qword [rsi + 0x20]
je 0x1800a8730
mov qword [r9 + rdx*8], r13
jmp 0x1800a8753
and qword [r9 + rdx*8], r10
mov rdx, qword [rsi + 0x28]
mov eax, 1
mov r8d, r15d
and r15d, 0x1f
mov cl, r15b
shr r8, 5
shl eax, cl
not eax
and dword [rdx + r8*4], eax
mov rcx, qword [rbp - 0x39]
mov rax, qword [rbp + 0x6f]
mov qword [rcx], rax
mov qword [rax + 8], rcx
test byte [r14 + 0xa], 8
je 0x1800a8790
mov rdx, r14
mov rcx, rbx
call fcn.18005ca3c
test al, al
jne 0x1800a8790
movzx r8d, word [r14 + 8]
mov r9b, 1
mov rdx, r14
mov rcx, rbx
call fcn.1800128f0
jmp 0x1800a8845
mov al, byte [r14 + 0xa]
test al, 4
je 0x1800a8845
movzx esi, word [r14 + 8]
shl rsi, 4
sub rsi, 0x20
test al, 2
je 0x1800a87b7
cmp rsi, 4
jbe 0x1800a87b7
sub rsi, 4
lea rcx, [r14 + 0x20]
mov r8d, 0xfeeefeee
mov rdx, rsi
call sym.ntdll.dll_RtlCompareMemoryUlong
mov r15, rax
cmp rax, rsi
je 0x1800a8845
mov rcx, qword gs:[0x60]
cmp qword [rcx + 0x18], 0
je 0x1800a8804
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
lea rcx, str.HEAP__wZ_:
mov rdx, qword [rdx + 0x10]
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800a8810
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
lea r8, [r14 + 0x20]
mov rdx, r14
add r8, r15
lea rcx, str.HEAP:_Free_Heap_block__p_modified_at__p_after_it_was_freed_n
call sym.ntdll.dll_DbgPrint
call fcn.18010109c
jmp 0x1800a8845
and qword [rsp + 0x28], 0
mov rdx, rbx
mov ecx, 0xd
mov qword [rsp + 0x20], rax
call fcn.18009a4c0
mov byte [rbp + 0x7f], 0
jmp 0x1800136d6
xor r9d, r9d
mov qword [rsp + 0x28], r10
mov rdx, rbx
mov qword [rsp + 0x20], r10
lea ecx, [r9 + 3]
call fcn.18009a4c0
nop
jmp 0x1800137c1
movzx r8d, word [rdi + 8]
mov r9b, 1
mov rdx, rdi
mov rcx, rbx
call fcn.1800128f0
nop
jmp 0x18001363c
movzx esi, word [rdi + 8]
shl rsi, 4
sub rsi, 0x20
test al, 2
je 0x1800a88a0
cmp rsi, 4
jbe 0x1800a88a0
sub rsi, 4
lea rcx, [rdi + 0x20]
mov r8d, 0xfeeefeee
mov rdx, rsi
call sym.ntdll.dll_RtlCompareMemoryUlong
mov r14, rax
cmp rax, rsi
je 0x18001381e
mov rcx, qword gs:[0x60]
cmp qword [rcx + 0x18], 0
je 0x1800a88f1
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
lea rcx, str.HEAP__wZ_:
mov rdx, qword [rdx + 0x10]
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800a88fd
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
lea r8, [rdi + 0x20]
mov rdx, rdi
add r8, r14
lea rcx, str.HEAP:_Free_Heap_block__p_modified_at__p_after_it_was_freed_n
call sym.ntdll.dll_DbgPrint
call fcn.18010109c
nop
jmp 0x18001381e
and qword [rsp + 0x28], 0
mov rdx, rbx
mov ecx, 0xd
mov qword [rsp + 0x20], rax
call fcn.18009a4c0
nop
jmp 0x18001363c
and qword [rsp + 0x28], 0
mov r8, rsi
and qword [rsp + 0x20], 0
xor r9d, r9d
lea ecx, [r9 + 3]
jmp 0x1800a8964
and qword [rsp + 0x28], 0
mov ecx, 0xd
mov qword [rsp + 0x20], rax
mov rdx, rbx
call fcn.18009a4c0
nop
jmp 0x180013674
mov rdx, rsi
mov rcx, rbx
call fcn.1800fbec0
nop
jmp 0x1800138dd
mov rax, qword [r14 + 0x18]
lea r8, [r14 + 0x10]
mov r9, qword [r8]
mov qword [rbp + 0x6f], r9
mov qword [rbp - 0x39], rax
mov rax, qword [rax]
mov r9, qword [r9 + 8]
cmp rax, r9
jne 0x1800a8bc1
cmp rax, r8
jne 0x1800a8bc1
movzx eax, word [r14 + 8]
sub qword [rbx + 0xc0], rax
mov rdi, qword [rbx + 0x138]
test rdi, rdi
je 0x1800a8ae7
movzx r12d, word [r14 + 8]
mov eax, dword [rdi + 8]
jmp 0x1800a89e3
mov rax, qword [rdi]
test rax, rax
je 0x1800a89ed
mov rdi, rax
mov eax, dword [rax + 8]
cmp r12, rax
jae 0x1800a89d5
mov rcx, r12
jmp 0x1800a89f2
mov ecx, dword [rdi + 8]
dec ecx
mov r15d, ecx
sub r15d, dword [rdi + 0x18]
cmp dword [rdi + 0xc], 0
lea eax, [r15 + r15]
jne 0x1800a8a06
mov eax, r15d
mov r9, qword [rdi + 0x30]
or r13d, 0xffffffff
mov r11d, dword [rdi + 8]
mov edx, eax
mov qword [rbp + 0x67], rdx
lea eax, [r11 - 1]
mov r10, qword [r9 + rdx*8]
add dword [rdi + 0x10], r13d
cmp ecx, eax
jne 0x1800a8a2c
add dword [rdi + 0x14], r13d
cmp r10, r8
jne 0x1800a8ae7
mov r13, qword [r8]
xor r10d, r10d
cmp qword [rdi], r10
cmovne eax, r11d
cmp ecx, eax
jae 0x1800a8ab8
cmp r13, qword [rdi + 0x20]
je 0x1800a8aad
lea r8, [r13 - 0x10]
mov eax, dword [r8 + 8]
mov dword [rbp - 9], eax
cmp dword [rbx + 0x7c], r10d
je 0x1800a8a9a
mov edx, dword [rbx + 0x88]
xor edx, eax
mov ecx, edx
mov dword [rbp - 9], edx
shr ecx, 0x10
mov eax, edx
shr eax, 8
xor cl, al
xor cl, dl
shr edx, 0x18
cmp dl, cl
je 0x1800a8a96
mov qword [rsp + 0x28], r10
lea ecx, [r10 + 3]
xor r9d, r9d
mov qword [rsp + 0x20], r10
mov rdx, rbx
call fcn.18009a4c0
mov rdx, qword [rbp + 0x67]
movzx eax, word [rbp - 9]
cmp r12d, eax
jne 0x1800a8aad
mov rax, qword [rdi + 0x30]
mov qword [rax + rdx*8], r13
jmp 0x1800a8ae7
mov rax, qword [rdi + 0x30]
and qword [rax + rdx*8], 0
jmp 0x1800a8ac8
cmp r13, qword [rdi + 0x20]
je 0x1800a8ac4
mov qword [r9 + rdx*8], r13
jmp 0x1800a8ae7
and qword [r9 + rdx*8], r10
mov rdx, qword [rdi + 0x28]
mov eax, 1
mov r8d, r15d
and r15d, 0x1f
mov cl, r15b
shr r8, 5
shl eax, cl
not eax
and dword [rdx + r8*4], eax
mov rcx, qword [rbp - 0x39]
mov rax, qword [rbp + 0x6f]
mov qword [rcx], rax
mov qword [rax + 8], rcx
test byte [r14 + 0xa], 8
je 0x1800a8b24
mov rdx, r14
mov rcx, rbx
call fcn.18005ca3c
test al, al
jne 0x1800a8b24
movzx r8d, word [r14 + 8]
mov r9b, 1
mov rdx, r14
mov rcx, rbx
call fcn.1800128f0
jmp 0x1800a8bd9
mov al, byte [r14 + 0xa]
test al, 4
je 0x1800a8bd9
movzx edi, word [r14 + 8]
shl rdi, 4
sub rdi, 0x20
test al, 2
je 0x1800a8b4b
cmp rdi, 4
jbe 0x1800a8b4b
sub rdi, 4
lea r15, [r14 + 0x20]
mov r8d, 0xfeeefeee
mov rcx, r15
mov rdx, rdi
call sym.ntdll.dll_RtlCompareMemoryUlong
mov r12, rax
cmp rax, rdi
je 0x1800a8bd9
mov rcx, qword gs:[0x60]
cmp qword [rcx + 0x18], 0
je 0x1800a8b9b
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
lea rcx, str.HEAP__wZ_:
mov rdx, qword [rdx + 0x10]
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800a8ba7
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
lea r8, [r15 + r12]
mov rdx, r14
lea rcx, str.HEAP:_Free_Heap_block__p_modified_at__p_after_it_was_freed_n
call sym.ntdll.dll_DbgPrint
call fcn.18010109c
jmp 0x1800a8bd9
and qword [rsp + 0x28], 0
mov rdx, rbx
mov ecx, 0xd
mov qword [rsp + 0x20], rax
call fcn.18009a4c0
mov byte [rbp + 0x7f], 0
jmp 0x1800138e7
xor r9d, r9d
mov qword [rsp + 0x28], r10
mov rdx, rbx
mov qword [rsp + 0x20], r10
lea ecx, [r9 + 3]
call fcn.18009a4c0
nop
jmp 0x1800139d7
movzx r8d, word [rsi + 8]
mov r9b, 1
mov rdx, rsi
mov rcx, rbx
call fcn.1800128f0
nop
jmp 0x180013674
movzx edi, word [rsi + 8]
shl rdi, 4
sub rdi, 0x20
test al, 2
je 0x1800a8c34
cmp rdi, 4
jbe 0x1800a8c34
sub rdi, 4
lea r15, [rsi + 0x20]
mov r8d, 0xfeeefeee
mov rcx, r15
mov rdx, rdi
call sym.ntdll.dll_RtlCompareMemoryUlong
mov r12, rax
cmp rax, rdi
je 0x180013a34
mov rdx, qword gs:[0x60]
cmp qword [rdx + 0x18], 0
je 0x1800a8c88
mov rdx, qword gs:[0x60]
lea rcx, str.HEAP__wZ_:
mov r8, qword [rdx + 0x18]
mov rdx, qword [r8 + 0x10]
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800a8c94
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
lea r8, [r15 + r12]
mov rdx, rsi
lea rcx, str.HEAP:_Free_Heap_block__p_modified_at__p_after_it_was_freed_n
call sym.ntdll.dll_DbgPrint
call fcn.18010109c
nop
jmp 0x180013a34