Function at 0x180032510
Capabilities:
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x138
mov r15, rcx
mov rax, qword [0x1800a6010]
xor rax, rsp
mov qword [rsp + 0x130], rax
test rdx, rdx
je 0x180037161
mov r13, rdx
mov eax, dword [0x1800a6698]
test r15, r15
je 0x18003287b
test eax, eax
je 0x18003716c
mov r14, r15
and r14, 0xfffffffffff00000
cmp r14, r15
je 0x1800365d1
mov eax, r15d
shr eax, 0xc
movzx eax, al
lea rax, [rax + rax*2]
mov rax, qword [r14 + rax*8 + 0x30]
mov rdi, rax
and rdi, 0xfffffffffffff000
test al, 2
jne 0x180032595
mov rax, qword [rdi]
mov rdi, qword [rax + 0x10]
mov rsi, r14
cmp rdi, 0xfc000
ja 0x18003660f
mov rbx, qword [rsi]
cmp r13, 0xfc000
ja 0x180033f48
cmp r13, 8
jbe 0x1800334f1
cmp r13, 0x1f0
ja 0x180032976
lea rsi, [r13 + 0xf]
and rsi, 0xfffffffffffffff0
xor eax, eax
cmp rsi, rdi
sete cl
cmp rdi, 0xfc001
jae 0x180037185
test cl, cl
jne 0x180032d4d
lea rcx, [rdi - 0xf01]
cmp rcx, 0xfb100
setae cl
xor al, 1
or al, cl
je 0x180032cc3
cmp byte [rbx + 0x71], 0
mov rbp, rbx
jne 0x180032a35
cmp r13, 0x1f1
jae 0x180032a2e
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbp, qword [rax + 8]
test rbp, rbp
je 0x180037216
cmp r13, 8
jbe 0x18003312f
cmp r13, 0x1f1
jae 0x180032b97
lea rax, [r13 + 0xf]
mov rcx, rax
and rcx, 0xfffffffffffffff0
mov qword [rsp + 0x28], rcx
shr rax, 4
dec rax
mov qword [rsp + 0x88], rdi
lea rax, [rax + rax*2]
shl rax, 4
mov qword [rsp + 0x30], rax
lea rsi, [rax + rbp]
add rsi, 0x98
cmp byte [rbp + 0x70], 0
mov qword [rsp + 0x20], rbp
je 0x1800326ad
cmp qword [rbp + 0x78], 0
je 0x180036e51
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x68], rcx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r10, qword [rsp + 0x20]
mov r12, qword [rsi]
test r12, r12
mov rdi, qword [rsp + 0x30]
je 0x180032c3c
cmp dword [r12 + 0xc], 0
je 0x180032c3c
mov eax, dword [r12 + 8]
mov edx, dword [r12 + rax*4 + 0x10]
test edx, edx
je 0x180032dbe
mov rbp, qword [r10 + 0x78]
test rbp, rbp
jne 0x1800329df
bsf esi, edx
mov ebp, eax
shl ebp, 5
or ebp, esi
mov ecx, dword [r10 + rdi + 0xb8]
imul rbp, qword [r10 + rdi + 0xa8]
add rcx, r12
add rbp, rcx
btc edx, esi
mov dword [r12 + rax*4 + 0x10], edx
dec dword [r12 + 0xc]
test rbp, rbp
je 0x180036032
mov rax, qword [rsp + 0x28]
add qword [r10 + 0x50], rax
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rdi, qword [rsp + 0x88]
test rbp, rbp
je 0x18003603d
cmp rdi, r13
cmovb r13, rdi
mov rcx, rbp
mov rdx, r15
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov rsi, r15
and rsi, 0xfffff
je 0x180036c2d
cmp qword [r14], rbx
jne 0x18003718c
lea r12, [rbx + 0x18]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
shr rsi, 0xc
lea rax, [rsi + rsi*2]
mov rdi, qword [r14 + rax*8 + 0x30]
test dil, 0x20
jne 0x1800371a5
test dil, 1
je 0x1800371be
mov eax, edi
and rdi, 0xfffffffffffff000
test al, 2
jne 0x180032b5f
mov r13, r14
mov qword [rsp + 0x20], rbx
mov rsi, qword [rdi]
mov r14, qword [rsi + 0x10]
mov rcx, r15
mov dl, 0xe5
mov r8, r14
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rsi + 0x20]
add eax, edi
sub r15d, eax
movzx eax, word [rsi + 0x28]
imul eax, r15d
mov ecx, eax
shr ecx, 0x11
shr eax, 0x16
cmp eax, dword [rdi + 8]
jb 0x180032e25
mov eax, eax
mov edx, dword [rdi + rax*4 + 0x10]
mov ebx, 1
shl ebx, cl
bt edx, ecx
jb 0x1800371d7
or edx, ebx
mov dword [rdi + rax*4 + 0x10], edx
mov eax, dword [rdi + 0xc]
lea ecx, [rax + 1]
mov dword [rdi + 0xc], ecx
cmp ecx, dword [rsi + 0x18]
je 0x1800331b3
test eax, eax
mov rbx, qword [rsp + 0x20]
je 0x180032a6c
sub qword [rbx + 0x50], r14
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbp, rbp
je 0x18003603d
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.18004bde0
mov rax, rbp
add rsp, 0x138
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test eax, eax
je 0x180036ec2
cmp r13, 0x1f0
ja 0x180033976
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r14, qword [rax + 8]
test r14, r14
je 0x1800371f0
cmp r13, 8
jbe 0x1800330e1
add r13, 0xf
mov r15, r13
and r15, 0xfffffffffffffff0
shr r13, 4
dec r13
lea r12, [r13*2]
add r12, r13
shl r12, 4
lea rsi, [r14 + r12]
add rsi, 0x98
cmp byte [r14 + 0x70], 0
je 0x1800328fb
cmp qword [r14 + 0x78], 0
je 0x180036de9
lea r13, [r14 + 0x18]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [rsi]
test rbx, rbx
je 0x180032bb8
cmp dword [rbx + 0xc], 0
je 0x180032bb8
mov eax, dword [rbx + 8]
mov edx, dword [rbx + rax*4 + 0x10]
test edx, edx
je 0x180032d5e
mov rbp, qword [r14 + 0x78]
test rbp, rbp
jne 0x180032996
bsf edi, edx
mov ebp, eax
shl ebp, 5
or ebp, edi
mov ecx, dword [r14 + r12 + 0xb8]
imul rbp, qword [r14 + r12 + 0xa8]
add rcx, rbx
add rbp, rcx
btc edx, edi
mov dword [rbx + rax*4 + 0x10], edx
dec dword [rbx + 0xc]
test rbp, rbp
je 0x180035e90
add qword [r14 + 0x50], r15
mov rcx, r13
jmp 0x180032845
cmp r13, 0xf00
ja 0x180032a58
lea rsi, [r13 + 0xff]
and rsi, 0xffffffffffffff00
jmp 0x1800325d4
mov rsi, qword [rbp]
mov rcx, qword [rbp + 8]
mov qword [rbp], rcx
mov rdi, rsi
shl rdi, 0x17
xor rdi, rsi
mov rsi, rcx
shr rsi, 0x1a
xor rsi, rcx
xor rsi, rdi
shr rdi, 0x11
xor rsi, rdi
mov qword [rbp + 8], rsi
add ecx, esi
mov ebp, edx
ror ebp, cl
test ebp, ebp
je 0x180032b83
bsf edi, ebp
add edi, ecx
and edi, 0x1f
jmp 0x180032939
mov r9, rbx
mov rbx, qword [rbp]
mov rcx, qword [rbp + 8]
mov qword [rbp], rcx
mov rsi, rbx
shl rsi, 0x17
xor rsi, rbx
mov rbx, rcx
shr rbx, 0x1a
xor rbx, rcx
xor rbx, rsi
shr rsi, 0x11
xor rbx, rsi
mov qword [rbp + 8], rbx
add ecx, ebx
mov ebp, edx
ror ebp, cl
test ebp, ebp
je 0x180032b8d
bsf esi, ebp
add esi, ecx
and esi, 0x1f
mov rbx, r9
jmp 0x180032700
mov rbp, qword [0x1800a66c8]
cmp r13, 0xf00
jbe 0x180032649
mov rcx, rbp
mov rdx, r13
xor r8d, r8d
call fcn.180038150
mov rbp, rax
jmp 0x180032750
lea esi, [r13 + 0xfff]
and esi, 0x1ff000
mov al, 1
jmp 0x1800325d6
mov rax, qword [rsi]
cmp rax, rdi
je 0x18003283e
test rax, rax
je 0x18003382b
cmp rdi, rax
jae 0x180032e2d
cmp dword [rax + 0xc], 0
je 0x18003382b
mov rcx, rax
and rcx, 0xfffffffffff00000
shr eax, 0xc
movzx eax, al
shl rax, 3
lea r9, [rax + rax*2]
or r9, rcx
add r9, 0x20
mov rbx, qword [rsi + 8]
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0
test rbx, rbx
je 0x180033532
lea rcx, [rsp + 0xf8]
xor r10d, r10d
mov r8, r10
mov r10, rcx
mov rcx, qword [rbx]
test rcx, rcx
je 0x180032b03
mov rax, qword [rcx + 8]
test al, 1
je 0x180032b03
mov rdx, qword [rcx]
test rdx, rdx
je 0x180032b03
test byte [rdx + 8], 1
jne 0x180032b25
mov rcx, rbx
cmp rcx, r9
seta al
jbe 0x180032b1b
mov rbx, qword [rcx]
test rbx, rbx
jne 0x180032adf
jmp 0x1800337a7
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
jmp 0x180032b11
and rax, 0xfffffffffffffffe
mov qword [rbx], rax
mov r11, rbx
and r11, 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, r11
mov qword [rcx + 8], rdx
test rax, rax
je 0x180037c7c
and byte [rax + 8], 0xfe
cmp qword [r10], rbx
jne 0x180033727
mov qword [r10], rcx
jmp 0x180032b06
mov rcx, r15
mov dl, 0xe5
mov r8, rdi
call sub.VCRUNTIME140.dll_memset
sub qword [rbx + 0x58], rdi
mov rcx, rbx
mov rdx, r15
mov r8b, 1
call fcn.180027800
jmp 0x180032842
mov edi, 0x20
jmp 0x1800329d5
mov esi, 0x20
jmp 0x180032a21
lea rax, [r13 + 0xff]
mov ecx, eax
and ecx, 0x1f00
mov qword [rsp + 0x28], rcx
shr rax, 8
add rax, 0x1d
jmp 0x180032677
mov rdx, qword [r14 + r12 + 0xa0]
test rdx, rdx
je 0x1800339aa
lea r9, [r14 + r12]
add r9, 0xa0
mov rax, rdx
mov rbp, rax
mov rax, qword [rax]
test rax, rax
jne 0x180032bd7
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp rdx, rbp
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x180033184
mov rbx, qword [rdx]
test rbx, rbx
je 0x180037c7c
mov rax, qword [rbx + 8]
test al, 1
je 0x180032efe
xor eax, eax
mov qword [rsp + 0x20], rax
mov r8d, 0xffffffff
xor r10d, r10d
jmp 0x180037cfd
mov rdx, qword [r10 + rdi + 0xa0]
test rdx, rdx
je 0x180033a30
lea r12, [r10 + rdi]
add r12, 0xa0
mov rax, rdx
mov rbp, rax
mov rax, qword [rax]
test rax, rax
jne 0x180032c5b
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp rdx, rbp
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x1800333e5
mov rdi, rsi
mov rsi, qword [rdx]
test rsi, rsi
je 0x180037c7c
mov rax, qword [rsi + 8]
test al, 1
je 0x180032f6c
xor eax, eax
mov qword [rsp + 0x38], rax
mov r8d, 0xffffffff
xor r9d, r9d
jmp 0x180037843
mov qword [rsp + 0x58], r14
mov r14, rsi
sub r14, rdi
jb 0x18003347c
mov eax, r15d
shr eax, 0xc
mov r12, r14
movzx r14d, al
mov qword [rsp + 0x88], rdi
mov rbp, rdi
shr rbp, 0xc
lea rcx, [rbx + 0x18]
mov qword [rsp + 0x20], rcx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, r14
mov qword [rsp + 0x30], r14
add rbp, r14
cmp rbp, 0xfe
ja 0x180032d30
lea rdi, [rbp*2]
add rdi, rbp
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + rdi*8 + 0x30]
test al, 1
je 0x180032fda
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x88]
jmp 0x18003260c
sub rdi, r13
ja 0x180033414
mov rbp, r15
jmp 0x18003284b
mov ecx, dword [r14 + r12 + 0xb4]
lea edx, [rax + 1]
mov ebp, eax
shl ebp, 5
cmp edx, ecx
jae 0x18003723c
mov edi, dword [rbx + rdx*4 + 0x10]
inc rdx
add ebp, 0x20
inc eax
test edi, edi
je 0x180032d6e
mov r10, qword [r14 + 0x78]
test r10, r10
jne 0x180033042
bsf esi, edi
or ebp, esi
mov ecx, dword [r14 + r12 + 0xb8]
add rcx, rbx
imul rbp, qword [r14 + r12 + 0xa8]
add rbp, rcx
btc edi, esi
mov dword [rbx + rdx*4 + 0xc], edi
mov dword [rbx + 8], eax
jmp 0x18003295e
mov ecx, dword [r10 + rdi + 0xb4]
lea edx, [rax + 1]
mov ebp, eax
shl ebp, 5
cmp edx, ecx
jae 0x180037244
mov r8d, dword [r12 + rdx*4 + 0x10]
inc rdx
add ebp, 0x20
inc eax
test r8d, r8d
je 0x180032dce
mov rsi, qword [r10 + 0x78]
test rsi, rsi
jne 0x180033089
bsf esi, r8d
or ebp, esi
mov ecx, dword [r10 + rdi + 0xb8]
add rcx, r12
imul rbp, qword [r10 + rdi + 0xa8]
add rbp, rcx
btc r8d, esi
mov dword [r12 + rdx*4 + 0xc], r8d
mov dword [r12 + 8], eax
jmp 0x180032726
mov dword [rdi + 8], eax
jmp 0x180032803
sub rdi, r13
shr rdi, 0xc
lea rax, [rdi + rdi*2]
lea r8, [rax*8 + 0x20]
add r8, r13
mov rdi, qword [rsi + 8]
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0x100], 0
test rdi, rdi
je 0x18003368a
lea rcx, [rsp + 0xf8]
xor r10d, r10d
mov r9, r10
mov r10, rcx
mov rcx, qword [rdi]
test rcx, rcx
je 0x180032eb0
mov rax, qword [rcx + 8]
test al, 1
je 0x180032eb0
mov rbx, qword [rcx]
test rbx, rbx
je 0x180032e93
test byte [rbx + 8], 1
jne 0x180032ebf
mov rcx, rdi
mov rbx, qword [rsp + 0x20]
cmp rcx, r8
seta al
jbe 0x180032eb5
mov rdi, qword [rcx]
test rdi, rdi
jne 0x180032e6f
jmp 0x1800338db
mov rcx, rdi
jmp 0x180032e9b
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
jmp 0x180032ea6
and rax, 0xfffffffffffffffe
mov qword [rdi], rax
mov rbx, rdi
and rbx, 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rbx
mov qword [rcx + 8], rdx
test rax, rax
je 0x180037c7c
and byte [rax + 8], 0xfe
cmp qword [r10], rdi
mov rbx, qword [rsp + 0x20]
jne 0x18003385b
mov qword [r10], rcx
jmp 0x180032e9b
mov rcx, qword [rbx]
test rcx, rcx
je 0x180032f10
test byte [rcx + 8], 1
jne 0x180032c27
or rax, 1
mov qword [rbx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180038127
mov rbx, qword [rax]
test rbx, rbx
je 0x180032f3f
mov rdi, qword [rbx + 8]
test dil, 1
jne 0x180034096
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rbx, rax
and byte [rbx + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbx
jmp 0x180032c27
mov rcx, qword [rsi]
test rcx, rcx
je 0x180032f7e
test byte [rcx + 8], 1
jne 0x180032cae
or rax, 1
mov qword [rsi + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180038127
mov rsi, qword [rax]
test rsi, rsi
je 0x180032fad
mov r8, qword [rsi + 8]
test r8b, 1
jne 0x1800340f8
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rsi, rax
and byte [rsi + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rsi
jmp 0x180032cae
and rax, 0xfffffffffffff000
cmp rax, r12
jb 0x180032d30
shl rbp, 0xc
add rbp, qword [rsp + 0x58]
mov rcx, rbx
mov rdx, rbp
mov r8, r12
call fcn.18003a110
test al, al
je 0x180032d30
mov rdx, qword [rsp + 0x58]
lea rax, [rdx + rdi*8]
add rax, 0x30
or rsi, 3
mov rcx, qword [rsp + 0x30]
lea rcx, [rcx + rcx*2]
mov qword [rdx + rcx*8 + 0x30], rsi
mov qword [rax], 3
add qword [rbx + 0x58], r12
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180032d56
mov r8, qword [r10]
mov rcx, qword [r10 + 8]
mov qword [r10], rcx
mov r9, r8
shl r9, 0x17
xor r9, r8
mov rsi, rcx
shr rsi, 0x1a
xor rsi, rcx
xor rsi, r9
shr r9, 0x11
xor rsi, r9
mov qword [r10 + 8], rsi
add ecx, esi
mov esi, edi
ror esi, cl
test esi, esi
je 0x18003354e
bsf esi, esi
add esi, ecx
and esi, 0x1f
jmp 0x180032d96
mov rdi, rbx
mov r9, qword [rsi]
mov rcx, qword [rsi + 8]
mov qword [rsi], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov rbx, rcx
shr rbx, 0x1a
xor rbx, rcx
xor rbx, r10
shr r10, 0x11
xor rbx, r10
mov qword [rsi + 8], rbx
add ecx, ebx
mov esi, r8d
ror esi, cl
test esi, esi
je 0x180033558
bsf esi, esi
mov rbx, rdi
add esi, ecx
and esi, 0x1f
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
jmp 0x180032df9
cmp r13, 2
jb 0x180033f8f
mov ecx, 0x40
mov eax, 0x40
dec r13
je 0x180033102
bsr rax, r13
xor rax, 0x3f
sub rcx, rax
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov r15d, 0x10
cmovae r15, rax
mov rax, r15
shr rax, 4
or rax, 1
bsr r13, rax
jmp 0x1800328cf
cmp r13, 2
jb 0x180033f96
mov rdx, r13
mov ecx, 0x40
mov eax, 0x40
dec rdx
je 0x180033153
bsr rax, rdx
xor rax, 0x3f
sub rcx, rax
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovae rcx, rax
mov qword [rsp + 0x28], rcx
mov rax, rcx
shr rax, 4
or rax, 1
bsr rax, rax
jmp 0x180032677
test eax, eax
jne 0x180033562
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x180035eac
mov rax, qword [rdx]
test rax, rax
jne 0x18003633a
mov qword [rsp + 0xf8], rax
jmp 0x180037759
cmp qword [rsi], rdi
mov rbx, qword [rsp + 0x20]
je 0x18003384f
test eax, eax
je 0x180033466
mov rax, rdi
sub rax, r13
shr rax, 0xc
lea rax, [rax + rax*2]
lea r15, [rax*8 + 0x20]
add r15, r13
mov rdx, qword [rsi + 8]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp rdx, r15
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x180033f12
test rdx, rdx
je 0x180037c7c
mov rcx, qword [rdx]
test rcx, rcx
je 0x180037c7c
mov rax, qword [rcx + 8]
test al, 1
je 0x1800336b9
xor r13d, r13d
mov r8d, 0xffffffff
xor r9d, r9d
mov r11, rdx
mov rdx, rcx
xor eax, eax
cmp rdx, r15
setb al
cmova eax, r8d
cmp eax, 0xffffffff
jne 0x1800332e2
test rdx, rdx
je 0x1800358c5
mov rcx, qword [rdx]
test rcx, rcx
je 0x1800358c5
mov rax, qword [rcx + 8]
test al, 1
jne 0x180033240
mov rbx, qword [rcx]
test rbx, rbx
je 0x180033286
test byte [rbx + 8], 1
jne 0x180033240
or rax, 1
mov qword [rcx + 8], rax
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x180037c68
mov rbx, qword [rcx]
test rbx, rbx
je 0x1800332b5
mov r10, qword [rbx + 8]
test r10b, 1
jne 0x180035251
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rbx, rcx
cmp qword [r11], rdx
jne 0x180037261
mov qword [r11], rbx
mov rdx, rbx
jmp 0x180033246
test eax, eax
jne 0x180033302
test rdx, rdx
je 0x180033442
mov rbx, qword [rdx + 8]
mov r13, r11
cmp rbx, 1
jbe 0x180033433
jmp 0x18003330f
test rdx, rdx
je 0x180037c7c
mov rbx, qword [rdx + 8]
mov rcx, rbx
and rcx, 0xfffffffffffffffe
je 0x18003332a
mov rax, qword [rcx]
test rax, rax
je 0x18003332a
test byte [rax + 8], 1
jne 0x180033240
mov r10, qword [rdx]
test r10, r10
je 0x180037c7c
mov rcx, qword [r10 + 8]
test cl, 1
je 0x18003536e
and rcx, 0xfffffffffffffffe
je 0x18003724e
mov rax, qword [rcx]
test rax, rax
je 0x18003335f
test byte [rax + 8], 1
jne 0x180035b67
and ebx, 1
or rbx, rcx
mov qword [r10 + 8], rbx
or byte [rcx + 8], 1
mov rcx, qword [rdx]
test rcx, rcx
je 0x1800377cf
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
mov r10, qword [rdx + 8]
mov rbx, r10
and rbx, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rbx]
and rax, 0xfffffffffffffffe
and r10d, 1
or r10, rax
mov qword [rdx + 8], r10
mov qword [rbx], rdx
mov rax, qword [rcx + 8]
and eax, 1
or rax, rbx
mov qword [rcx + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x1800356e4
mov qword [r11], rcx
mov rdx, r11
jmp 0x180033240
test eax, eax
jne 0x1800335f4
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x180036064
mov rax, qword [rdx]
test rax, rax
jne 0x180036376
mov qword [rsp + 0xf8], rax
jmp 0x180037787
add r13, r15
cmp rdi, 8
je 0x1800336a6
mov rcx, r13
mov dl, 0xe5
mov r8, rdi
call sub.VCRUNTIME140.dll_memset
jmp 0x180032d56
mov r9, qword [rdx]
test r9, r9
jne 0x180033fc3
xor r9d, r9d
mov rbx, qword [rsp + 0x20]
cmp qword [r11], rdx
jne 0x1800352b3
mov qword [r11], r9
mov rax, qword [rsp + 0xf8]
mov qword [rsi + 8], rax
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov rcx, rbx
mov rdx, rdi
mov r8b, 1
call fcn.180027800
dec dword [rsi + 0x24]
jmp 0x18003283e
mov r8, rdi
sub r8, r13
add r13, r15
mov rcx, r13
mov dl, 0xe5
call sub.VCRUNTIME140.dll_memset
lea r12, [rbx + 0x18]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, r15d
shr eax, 0xc
movzx eax, al
mov rcx, rsi
shr rcx, 0xc
mov rdx, rsi
or rdx, 3
lea rbp, [rax + rax*2]
mov r8, qword [rsp + 0x58]
mov qword [r8 + rbp*8 + 0x30], rdx
sub rdi, rsi
or rdi, 3
add rcx, rax
lea rax, [rcx + rcx*2]
mov qword [r8 + rax*8 + 0x30], rdi
add rsi, r15
mov rcx, rbx
mov rdx, rsi
mov r8b, 1
call fcn.180027800
add qword [rbx + 0x58], r14
mov rcx, r12
jmp 0x180033037
cmp r13, 2
jb 0x18003725a
mov rdx, r13
mov ecx, 0x40
mov eax, 0x40
dec rdx
je 0x180033515
bsr rax, rdx
xor rax, 0x3f
sub rcx, rax
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov esi, 0x10
cmovae rsi, rax
jmp 0x1800325d4
mov qword [r9], 0
mov qword [r9 + 8], 1
lea rcx, [rsp + 0xf8]
jmp 0x18003380a
mov esi, 0x20
jmp 0x18003307f
mov esi, 0x20
jmp 0x1800330ca
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x20], rcx
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x180033588
mov rcx, qword [rbx]
test rcx, rcx
je 0x180033588
test byte [rcx + 8], 1
jne 0x180032c2e
mov rcx, qword [rdx]
test rcx, rcx
je 0x180037291
test byte [rcx + 8], 1
jne 0x1800352ca
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x1800335bb
mov rbx, qword [rax + 8]
test bl, 1
jne 0x1800357ed
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbx], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbx
jmp 0x180032c2e
mov rdi, rsi
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x18003361d
mov rcx, qword [rsi]
test rcx, rcx
je 0x18003361d
test byte [rcx + 8], 1
jne 0x180032cb5
mov rcx, qword [rdx]
test rcx, rcx
je 0x180037291
test byte [rcx + 8], 1
jne 0x180035309
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x180033651
mov rsi, qword [rax + 8]
test sil, 1
jne 0x180035859
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rsi], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rsi
jmp 0x180032cb5
mov qword [r8], 0
mov qword [r8 + 8], 1
lea rcx, [rsp + 0xf8]
jmp 0x1800338f3
movabs rax, 0xe5e5e5e5e5e5e5e5
mov qword [r13], rax
jmp 0x180032d56
mov rbx, qword [rcx]
test rbx, rbx
je 0x1800336cb
test byte [rbx + 8], 1
jne 0x180033234
or rax, 1
mov qword [rcx + 8], rax
mov rbx, qword [rdx + 8]
mov rax, rbx
and rax, 0xfffffffffffffffe
je 0x180037148
mov rcx, qword [rax]
test rcx, rcx
je 0x1800336fa
mov r8, qword [rcx + 8]
test r8b, 1
jne 0x18003642c
or rbx, 1
mov qword [rdx + 8], rbx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, rax
and byte [rcx + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rcx
jmp 0x180033234
and rcx, 0xfffffffffffffffe
mov rax, qword [r10 + 8]
and eax, 1
lea rdx, [rax + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x1800377b6
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rax, qword [r10 + 8]
and eax, 1
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
or byte [r10 + 8], 1
test r8, r8
je 0x1800377d6
cmp qword [r8], r10
jne 0x180033f61
mov qword [r8], rcx
cmp r9, rcx
setb al
jb 0x180033f87
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
mov r10, rcx
test rbx, rbx
jne 0x180032ae5
mov r10, r8
mov qword [r9], 0
mov qword [r9 + 8], 1
test al, al
jne 0x18003380a
cmp rcx, r9
mov rbx, qword [rsp + 0x20]
jae 0x18003380f
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, rax
or rdx, r9
mov qword [rcx + 8], rdx
mov rdx, qword [r9]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r9], rcx
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r9 + 8], rdx
or byte [rcx + 8], 1
cmp qword [r10], rcx
jne 0x180033833
mov qword [r10], r9
jmp 0x180033812
mov rbx, qword [rsp + 0x20]
mov qword [rcx], r9
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x180037c7c
and byte [rax + 8], 0xfe
mov qword [rsi + 8], rax
mov qword [rsi], rdi
jmp 0x18003283e
mov rax, qword [r10 + 8]
mov rdx, rax
and rdx, 0xfffffffffffffffe
cmp rcx, rdx
jne 0x180033812
and eax, 1
or rax, r9
mov qword [r10 + 8], rax
jmp 0x180033812
mov qword [rsi], 0
jmp 0x180033466
and rcx, 0xfffffffffffffffe
mov rax, qword [r10 + 8]
and eax, 1
lea rdx, [rax + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x1800377b6
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rax, qword [r10 + 8]
and eax, 1
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
or byte [r10 + 8], 1
test r9, r9
je 0x1800377d6
cmp qword [r9], r10
jne 0x180033f74
mov qword [r9], rcx
cmp r8, rcx
setb al
jb 0x180033fbb
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
mov r10, rcx
test rdi, rdi
jne 0x180032e75
mov r10, r9
mov qword [r8], 0
mov qword [r8 + 8], 1
test al, al
jne 0x1800338f3
cmp rcx, r8
jb 0x180033914
mov qword [rcx], r8
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x180037c7c
and byte [rax + 8], 0xfe
mov qword [rsi + 8], rax
jmp 0x18003283e
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, rax
or rdx, r8
mov qword [rcx + 8], rdx
mov rdx, qword [r8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r8], rcx
mov rax, qword [rcx + 8]
and eax, 1
mov rdx, qword [r8 + 8]
and rdx, 0xfffffffffffffffe
or rdx, rax
mov qword [r8 + 8], rdx
or byte [rcx + 8], 1
cmp qword [r10], rcx
jne 0x18003395a
mov qword [r10], r8
jmp 0x1800338f6
mov rax, qword [r10 + 8]
mov rdx, rax
and rdx, 0xfffffffffffffffe
cmp rcx, rdx
jne 0x1800338f6
and eax, 1
or rax, r8
mov qword [r10 + 8], rax
jmp 0x1800338f6
mov r14, qword [0x1800a66c8]
cmp r13, 0xf01
jb 0x180033f9d
cmp r13, 0xfc000
ja 0x180034996
mov rcx, r14
mov rdx, r13
xor r8d, r8d
call fcn.180038150
jmp 0x180033f59
movzx r9d, byte [r14 + r12 + 0xc2]
lea r10, [r14 + 0x90]
mov rcx, qword [r14 + 0x90]
test rcx, rcx
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x88], r10
je 0x18003540c
mov rdx, r9
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov ebx, 0xffffffff
mov rbp, rsi
mov rsi, qword [rcx + 0x10]
and rsi, r8
xor edi, edi
cmp rdx, rsi
seta dil
cmovb edi, ebx
lea esi, [rdi + 1]
cmp esi, 2
jae 0x180033a1d
mov rax, rcx
mov rcx, qword [rcx]
mov rsi, rbp
test rcx, rcx
jne 0x1800339ec
jmp 0x180033abd
cmp edi, 1
jne 0x18003727e
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180033a10
movzx r11d, byte [r10 + rdi + 0xc2]
lea rax, [r10 + 0x90]
mov qword [rsp + 0x60], rax
mov rcx, qword [r10 + 0x90]
test rcx, rcx
mov qword [rsp + 0x80], r11
mov qword [rsp + 0x50], rsi
je 0x1800355a0
mov rdx, r11
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov rdi, rsi
mov rsi, qword [rcx + 0x10]
and rsi, r8
xor ebp, ebp
cmp rdx, rsi
seta bpl
cmovb ebp, r9d
lea esi, [rbp + 1]
cmp esi, 2
jae 0x180033aaa
mov rax, rcx
mov rcx, qword [rcx]
mov rsi, rdi
test rcx, rcx
jne 0x180033a78
jmp 0x180033cd6
cmp ebp, 1
jne 0x180037289
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180033a9d
test rax, rax
je 0x18003540c
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov rbx, rdx
and rbx, 0xfffffffffffffff0
shl rbx, 8
add rbx, rcx
mov rdx, rbx
and rdx, 0xfffffffffff00000
mov rax, qword [rdx + 0x18]
mov qword [rsp + 0x40], rax
mov eax, ebx
shr eax, 0xc
movzx ecx, al
lea rax, [rcx*8]
lea rax, [rax + rax*2]
or rax, rdx
mov qword [rsp + 0x20], rax
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x60], rax
test r9, r9
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x38], rcx
je 0x18003415a
cmp r9, 2
mov r8d, 1
cmovae r8, r9
lea rax, [rcx + rcx*2]
mov r10, rdx
lea rdi, [rdx + rax*8]
add rdi, 0x30
mov dl, 1
xor ebp, ebp
lea r11, [rcx + rbp]
lea rax, [r11 + r11*2]
test byte [r10 + rax*8 + 0x30], 0x60
jne 0x180033b87
inc rbp
cmp rbp, r9
setb dl
add rdi, 0x18
cmp rbp, r8
jne 0x180033b60
jmp 0x18003415f
mov qword [rsp + 0x48], r11
cmp rbp, r9
mov qword [rsp + 0x78], r8
jae 0x180035bb4
mov rax, rdi
xor ecx, ecx
mov qword [rsp + 0x30], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x180033bd0
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r11, qword [rsp + 0x30]
lea rcx, [r11 + rbp]
inc rcx
inc r11
mov qword [rsp + 0x30], r11
add rax, 0x18
cmp rcx, r9
jb 0x180033ba4
mov rcx, qword [rsp + 0x30]
shl rcx, 0xc
mov dword [rsp + 0x58], edx
je 0x180035404
mov rax, qword [rsp + 0x48]
shl rax, 0xc
add rax, qword [rsp + 0x28]
mov r8d, eax
and r8d, 0xff000
mov edx, 0x100000
sub rdx, r8
cmp rdx, rcx
cmovae rdx, rcx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x80], rcx
mov rcx, rax
mov qword [rsp + 0x48], rax
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x1800372d2
mov r8, qword [rsp + 0x48]
mov rax, qword [rsp + 0x70]
add r8, rax
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
mov rax, r8
jne 0x180033c0a
mov r8b, 1
mov r10, qword [rsp + 0x28]
mov r9, qword [rsp + 0x50]
cmp qword [rsp + 0x30], 0
je 0x180033cb1
test r8b, r8b
mov ecx, 0x20
mov eax, 4
cmovne rcx, rax
mov rax, qword [rsp + 0x30]
lea rax, [rax*8]
lea rdx, [rax + rax*2]
xor eax, eax
or qword [rdi + rax], rcx
add rax, 0x18
cmp rdx, rax
jne 0x180033ca4
test r8b, r8b
mov eax, dword [rsp + 0x58]
je 0x1800347e7
mov rax, qword [rsp + 0x30]
add qword [r14 + 0x48], rax
mov rcx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x78]
jmp 0x180033b70
test rax, rax
je 0x1800355a0
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r12, rdx
and r12, 0xfffffffffffffff0
shl r12, 8
add r12, rcx
mov r8, r12
and r8, 0xfffffffffff00000
mov rax, qword [r8 + 0x18]
mov qword [rsp + 0xd0], rax
mov eax, r12d
shr eax, 0xc
movzx edi, al
lea rax, [rdi*8]
lea r9, [rax + rax*2]
or r9, r8
mov rax, qword [r9 + 0x30]
mov qword [rsp + 0xa0], rax
test r11, r11
mov qword [rsp + 0x40], r8
mov qword [rsp + 0xa8], rdi
je 0x1800349af
cmp r11, 2
mov eax, 1
cmovae rax, r11
mov qword [rsp + 0x48], rax
lea rax, [rdi + rdi*2]
lea rax, [r8 + rax*8]
add rax, 0x30
mov dl, 1
xor ebp, ebp
mov qword [rsp + 0x38], rax
lea rcx, [rdi + rbp]
lea rax, [rcx + rcx*2]
test byte [r8 + rax*8 + 0x30], 0x60
jne 0x180033db2
inc rbp
cmp rbp, r11
setb dl
mov rax, qword [rsp + 0x38]
add rax, 0x18
cmp rbp, qword [rsp + 0x48]
jne 0x180033d7f
jmp 0x1800349b1
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x70], rbp
cmp rbp, r11
mov rax, qword [rsp + 0x38]
jae 0x180035bc0
xor edi, edi
mov rbp, qword [rax]
test bpl, 0x60
je 0x180033df6
and rbp, 0xffffffffffffff9f
mov qword [rax], rbp
mov rbp, qword [rsp + 0x70]
add rbp, rdi
inc rbp
inc rdi
add rax, 0x18
cmp rbp, r11
jb 0x180033dcf
mov rax, rdi
shl rax, 0xc
mov dword [rsp + 0x78], edx
mov qword [rsp + 0x98], rdi
je 0x180035594
shl rcx, 0xc
add rcx, r8
mov ebp, ecx
and ebp, 0xff000
mov edx, 0x100000
sub rdx, rbp
cmp rdx, rax
cmovae rdx, rax
mov rbp, qword [rsp + 0x70]
mov rdi, rax
mov qword [rsp + 0xb8], rdx
mov r8d, 0x1000
mov rsi, rcx
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18003737c
mov rax, qword [rsp + 0xb8]
add rsi, rax
sub rdi, rax
mov eax, 0x100000
cmp rdi, rax
mov edx, 0x100000
cmovb rdx, rdi
test rdi, rdi
mov rcx, rsi
jne 0x180033e35
mov al, 1
mov r10, qword [rsp + 0x20]
mov r8, qword [rsp + 0x40]
mov r11, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x98]
test rdi, rdi
mov rdi, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
je 0x180033ee0
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x98]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor esi, esi
or qword [r9 + rsi], rcx
add rsi, 0x18
cmp rdx, rsi
jne 0x180033ed3
test al, al
mov rsi, qword [rsp + 0x50]
mov eax, dword [rsp + 0x78]
je 0x180034fe5
mov rax, qword [rsp + 0x98]
add qword [r10 + 0x48], rax
mov rdi, qword [rsp + 0xa8]
mov r9, qword [rsp + 0x90]
jmp 0x180033d94
test eax, eax
jne 0x180033fff
test rdx, rdx
je 0x180033f39
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x180036a9d
mov rax, qword [rdx]
test rax, rax
jne 0x180036ad3
xor eax, eax
mov qword [rsp + 0xf8], rax
jmp 0x180033453
mov rcx, rbx
mov rdx, r15
mov r8, r13
mov r9, rdi
call fcn.180003da0
mov rbp, rax
jmp 0x18003284b
mov rax, qword [r8 + 8]
and eax, 1
or rax, rcx
mov qword [r8 + 8], rax
jmp 0x180033784
mov rax, qword [r9 + 8]
and eax, 1
or rax, rcx
mov qword [r9 + 8], rax
jmp 0x1800338b8
mov rbx, qword [rcx]
jmp 0x180033798
xor ecx, ecx
jmp 0x180033105
xor ecx, ecx
jmp 0x180033156
add r13, 0xff
mov r15d, r13d
and r15d, 0x1f00
shr r13, 8
add r13, 0x1d
jmp 0x1800328cf
mov rdi, qword [rcx]
jmp 0x1800338cc
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
or byte [rdx + 8], 1
and qword [r9 + 8], 1
jmp 0x180033442
test rdx, rdx
je 0x180037c7c
mov rax, qword [rdx + 8]
xor r13d, r13d
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x18003402a
mov rbx, qword [rcx]
test rbx, rbx
je 0x18003402a
test byte [rbx + 8], 1
jne 0x180033237
mov rcx, qword [rdx]
test rcx, rcx
je 0x180037291
test byte [rcx + 8], 1
jne 0x180036589
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18003405d
mov rbx, qword [rax + 8]
test bl, 1
jne 0x1800369fa
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
and eax, 1
or rax, rbx
mov qword [rdx + 8], rax
mov qword [rcx], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rcx
jmp 0x180033237
and rdi, 0xfffffffffffffffe
mov qword [rax], rdi
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
and rbx, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbx]
mov qword [rdx + 8], rcx
test rbx, rbx
je 0x1800377b6
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x1800340ef
mov rcx, qword [rax + 8]
test cl, 1
jne 0x1800359f1
mov qword [rdx + 8], rax
jmp 0x180032f58
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
and rsi, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rsi]
mov qword [rdx + 8], rcx
test rsi, rsi
je 0x1800377b6
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rsi], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180034151
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180035ab0
mov qword [rdx + 8], rax
jmp 0x180032fc6
mov r10, rdx
xor edx, edx
mov dword [rsp + 0x58], edx
mov rax, qword [rsp + 0x20]
lea rcx, [rax + 0x20]
mov qword [rsp + 0x30], rcx
add rax, 0x30
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rcx]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x20], rax
mov rbp, qword [rax]
mov rcx, 0xfffffffffffff000
mov rax, rbp
and rax, rcx
and rcx, qword [rdx + 0x10]
xor edi, edi
cmp rax, rcx
seta dil
mov ecx, 0xffffffff
cmovae ecx, edi
test ecx, ecx
je 0x1800352e8
cmp ecx, 0xffffffff
jne 0x18003481c
mov rbp, qword [rdx]
test rbp, rbp
je 0x180037c7c
mov rax, qword [rbp + 8]
test al, 1
je 0x1800348b7
xor eax, eax
mov qword [rsp + 0x48], rax
mov r9, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r11, rdx
mov rdx, rbp
mov rax, qword [rsp + 0x20]
mov rbp, qword [rax]
mov rax, rbp
and rax, r9
mov rdi, qword [rdx + 0x10]
and rdi, r9
xor ecx, ecx
cmp rax, rdi
seta cl
cmovb ecx, r8d
test ecx, ecx
je 0x180034258
cmp ecx, 0xffffffff
jne 0x180034275
mov rbp, qword [rdx]
test rbp, rbp
je 0x180035a44
mov rcx, qword [rbp + 8]
test cl, 1
jne 0x1800341fb
mov rdi, qword [rbp]
test rdi, rdi
je 0x180034376
test byte [rdi + 8], 1
jne 0x1800341fb
jmp 0x180034376
test bpl, 0x10
mov eax, 0
cmove rax, qword [rsp + 0x30]
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x18003422b
mov cl, al
jmp 0x180034226
test ecx, ecx
je 0x18003435f
mov rdi, qword [rdx + 8]
mov rbp, rdi
and rbp, 0xfffffffffffffffe
je 0x18003429d
mov rcx, qword [rbp]
test rcx, rcx
je 0x18003429d
test byte [rcx + 8], 1
jne 0x1800341fb
mov rcx, qword [rdx]
test rcx, rcx
je 0x180037c7c
mov rbp, qword [rcx + 8]
test bpl, 1
je 0x1800353b5
and rbp, 0xfffffffffffffffe
je 0x180037155
mov r10, qword [rbp]
test r10, r10
je 0x1800342d5
test byte [r10 + 8], 1
jne 0x180036261
and edi, 1
or rdi, rbp
mov qword [rcx + 8], rdi
or byte [rbp + 8], 1
mov rbp, qword [rdx]
test rbp, rbp
je 0x1800377cf
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x28]
je 0x1800377b6
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rdx + 8], rdi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x180035701
mov qword [r11], rbp
mov rdx, r11
jmp 0x1800341fb
mov rdi, qword [rdx + 8]
mov rax, r11
mov qword [rsp + 0x48], r11
cmp rdi, 1
jbe 0x1800343dd
jmp 0x180034281
or rcx, 1
mov qword [rbp + 8], rcx
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
je 0x18003712e
mov r10, rsi
mov rbp, qword [rcx]
test rbp, rbp
je 0x1800343a8
mov rsi, qword [rbp + 8]
test sil, 1
jne 0x180035929
or rdi, 1
mov qword [rdx + 8], rdi
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rbp, rcx
cmp qword [r11], rdx
mov rsi, r10
jne 0x18003729e
mov qword [r11], rbp
mov rdx, rbp
mov r10, qword [rsp + 0x28]
jmp 0x180034201
mov rcx, qword [rdx]
test rcx, rcx
je 0x18003441c
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rcx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
or byte [rdx + 8], 1
and qword [rcx + 8], 1
cmp qword [r11], rdx
mov r8, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x60]
jne 0x180035340
mov qword [r11], rcx
shr rdi, 0xc
mov rax, qword [rsp + 0xf8]
mov rbp, qword [rsp + 0x88]
mov qword [rbp], rax
xorps xmm0, xmm0
mov rax, qword [rsp + 0x30]
movups xmmword [rax], xmm0
mov rdx, qword [rsp + 0x50]
cmp rdi, rdx
jne 0x180034598
test dl, dl
je 0x1800344af
mov rax, rbx
or rax, 1
cmp rdx, 2
mov ecx, 1
cmovae rcx, rdx
shl rcx, 3
lea rcx, [rcx + rcx*2]
lea rdx, [r8 + r8*2]
lea rdx, [r10 + rdx*8]
add rdx, 0x30
xor ebp, ebp
test byte [rdx + rbp], 8
je 0x1800344a2
dec qword [r10 + 0x18]
dec qword [r14 + 0x80]
mov qword [rdx + rbp], rax
add rbp, 0x18
cmp rcx, rbp
jne 0x180034491
cmp qword [r10 + 0x18], 0
jne 0x1800347e3
cmp qword [rsp + 0x40], 0
mov eax, dword [rsp + 0x58]
je 0x1800347e7
mov rbp, qword [r14 + 0x60]
mov qword [rsp + 0x100], rbp
mov qword [rsp + 0x108], 0
xor ecx, ecx
cmp rbp, r10
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
test eax, eax
je 0x180035bd4
cmp eax, 0xffffffff
je 0x180035ce8
test rbp, rbp
je 0x180037c7c
mov rcx, qword [rbp + 0x10]
xor eax, eax
mov qword [rsp + 0x20], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180034533
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180034533
test byte [rdx + 0x10], 1
jne 0x180035d0f
mov rax, qword [rbp + 8]
test rax, rax
je 0x180037526
test byte [rax + 0x10], 1
jne 0x180036705
or rcx, 1
mov qword [rbp + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180034568
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x180036b47
or byte [rax + 0x10], 1
mov rcx, qword [rbp + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [rbp + 0x10], rcx
mov qword [rax + 8], rbp
jmp 0x18003671b
lea rcx, [r8 + rdi]
sub rdi, rdx
shl rdi, 0xc
lea rax, [r8 + rdx]
lea rax, [rax + rax*2]
mov r9, rbp
lea r11, [r10 + rax*8]
add r11, 0x20
mov edx, 0xfff
mov rbp, qword [r11 + 0x10]
and rbp, rdx
or rbp, rdi
mov qword [r11 + 0x10], rbp
lea rcx, [rcx + rcx*2]
and rdx, qword [r10 + rcx*8 + 0x18]
or rdx, rdi
mov qword [r10 + rcx*8 + 0x18], rdx
mov rcx, qword [r9]
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0x100], 0
test rcx, rcx
je 0x180035a28
lea r10, [r10 + rax*8]
add r10, 0x30
lea rbp, [rsp + 0xf8]
xor edx, edx
mov rax, rdx
mov rdx, rbp
mov rbp, qword [rcx]
mov r9, rsi
test rbp, rbp
je 0x180034636
mov rdi, qword [rbp + 8]
test dil, 1
je 0x180034636
mov rsi, qword [rbp]
test rsi, rsi
je 0x180034636
test byte [rsi + 8], 1
jne 0x1800346ad
mov rbp, rcx
mov rdi, qword [r10]
mov rax, rdi
mov rcx, 0xfffffffffffff000
and rax, rcx
mov rsi, qword [rbp + 0x10]
and rsi, rcx
xor ecx, ecx
cmp rax, rsi
seta cl
mov eax, 0xffffffff
cmovb ecx, eax
cmp ecx, 0xffffffff
jne 0x18003467b
mov rcx, qword [rbp]
mov edi, 0xffffffff
mov rsi, r9
test rcx, rcx
jne 0x18003460c
jmp 0x180034798
test ecx, ecx
jne 0x1800346a6
test dil, 0x10
mov eax, 0
cmove rax, r11
xor edi, edi
cmp rax, rbp
seta al
jb 0x180034665
mov dil, al
mov rsi, r9
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180034671
mov edi, 1
jmp 0x180034699
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rsi, rcx
and rsi, 0xfffffffffffffffe
mov rdi, qword [rbp]
mov r8, qword [rbp + 8]
and r8d, 1
or r8, rsi
mov qword [rbp + 8], r8
test rdi, rdi
je 0x180037c7c
and byte [rdi + 8], 0xfe
cmp qword [rdx], rcx
mov r8, qword [rsp + 0x38]
jne 0x1800346ed
mov qword [rdx], rbp
jmp 0x180034639
and rbp, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rdi, [rcx + rbp]
mov qword [rdx + 8], rdi
test rbp, rbp
je 0x1800377b6
mov rdi, qword [rbp]
and rdi, 0xfffffffffffffffe
or rdi, rcx
mov qword [rdx + 8], rdi
mov qword [rbp], rdx
mov rcx, qword [rdx + 8]
and ecx, 1
mov rdi, qword [rbp + 8]
and rdi, 0xfffffffffffffffe
or rdi, rcx
mov qword [rbp + 8], rdi
or byte [rdx + 8], 1
test rax, rax
je 0x1800377d6
cmp qword [rax], rdx
je 0x180036171
jmp 0x18003624e
mov rdi, qword [r10]
mov rcx, rdi
mov rdx, 0xfffffffffffff000
and rcx, rdx
mov rsi, qword [rbp + 0x10]
and rsi, rdx
xor edx, edx
cmp rcx, rsi
seta dl
mov ecx, 0xffffffff
cmovb edx, ecx
test edx, edx
jne 0x180035c42
jmp 0x18003648e
mov rdx, rbp
test rcx, rcx
mov rsi, r9
mov r8, qword [rsp + 0x38]
jne 0x180034612
mov rdx, rax
mov qword [r11], 0
mov qword [r11 + 8], 1
cmp edi, 1
je 0x1800351b2
mov r10, qword [rsp + 0x28]
mov qword [rbp], r11
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x180037c7c
and byte [rax + 8], 0xfe
mov rcx, qword [rsp + 0x88]
mov qword [rcx], rax
mov rdx, qword [rsp + 0x50]
jmp 0x180034463
mov eax, dword [rsp + 0x58]
test al, 1
jne 0x180035e89
test rbx, rbx
je 0x180035e89
cmp qword [rsi], rbx
je 0x180037776
mov qword [rbx], rsi
xor eax, eax
cmp dword [r14 + r12 + 0xb4], 1
jne 0x180034932
xor edx, edx
jmp 0x180034953
test ecx, ecx
je 0x18003571e
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x18003484b
mov rcx, qword [rbp]
test rcx, rcx
je 0x18003484b
test byte [rcx + 8], 1
jne 0x1800341ee
mov rcx, qword [rdx]
test rcx, rcx
je 0x180037291
test byte [rcx + 8], 1
jne 0x1800365a1
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18003487f
mov rbp, qword [rax + 8]
test bpl, 1
jne 0x1800368ea
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
jmp 0x180034928
mov rcx, qword [rbp]
test rcx, rcx
je 0x1800348ca
test byte [rcx + 8], 1
jne 0x1800341e7
or rax, 1
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180038127
mov rbp, qword [rax]
test rbp, rbp
je 0x1800348f9
mov rdi, qword [rbp + 8]
test dil, 1
jne 0x1800367ea
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rbp, rax
and byte [rbp + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
xor eax, eax
mov qword [rsp + 0x48], rax
mov r10, qword [rsp + 0x28]
jmp 0x1800341ee
lea rcx, [r14 + r12]
add rcx, 0xb4
xor edx, edx
mov dword [rbx + rdx*4 + 0x10], 0xffffffff
inc rdx
mov ebp, dword [rcx]
dec ebp
cmp rdx, rbp
jb 0x18003493f
mov ebp, dword [r14 + r12 + 0xb0]
and ebp, 0x1f
mov ecx, ebp
neg cl
mov edi, 0xffffffff
shr edi, cl
cmp ebp, 1
sbb eax, eax
or eax, edi
mov dword [rbx + rdx*4 + 0x10], eax
mov dword [rbx + 8], 0
mov eax, dword [r14 + r12 + 0xb0]
mov dword [rbx + 0xc], eax
inc dword [r14 + r12 + 0xbc]
mov qword [rsi], rbx
jmp 0x18003291e
mov r8d, 0x100000
mov rcx, r14
mov rdx, r13
xor r9d, r9d
call fcn.180004060
jmp 0x180033f59
xor edx, edx
mov dword [rsp + 0x78], edx
lea r10, [r9 + 0x20]
add r9, 0x30
mov rax, qword [rsp + 0x60]
mov rdx, qword [rax]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
mov rbp, qword [r9]
mov rcx, 0xfffffffffffff000
mov rax, rbp
and rax, rcx
and rcx, qword [rdx + 0x10]
xor esi, esi
cmp rax, rcx
seta sil
mov ecx, 0xffffffff
cmovae ecx, esi
test ecx, ecx
je 0x180035321
cmp ecx, 0xffffffff
jne 0x18003501e
mov rbp, qword [rdx]
test rbp, rbp
je 0x180037c7c
mov rax, qword [rbp + 8]
test al, 1
je 0x1800350d6
xor eax, eax
mov qword [rsp + 0x38], rax
mov rdi, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r11, rdx
mov rdx, rbp
mov rbp, qword [r9]
mov rax, rbp
and rax, rdi
mov rsi, qword [rdx + 0x10]
and rsi, rdi
xor ecx, ecx
cmp rax, rsi
seta cl
cmovb ecx, r8d
test ecx, ecx
mov rsi, qword [rsp + 0x50]
je 0x180034a98
cmp ecx, 0xffffffff
jne 0x180034ab3
mov rbp, qword [rdx]
test rbp, rbp
je 0x180035b03
mov rcx, qword [rbp + 8]
test cl, 1
jne 0x180034a3b
mov rax, qword [rbp]
test rax, rax
je 0x180034bb8
test byte [rax + 8], 1
jne 0x180034a3b
jmp 0x180034bb8
test bpl, 0x10
mov eax, 0
cmove rax, r10
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x180034a6b
mov cl, al
jmp 0x180034a66
test ecx, ecx
je 0x180034ba1
mov rcx, qword [rdx + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x180034adb
mov rax, qword [rbp]
test rax, rax
je 0x180034adb
test byte [rax + 8], 1
jne 0x180034a3b
mov qword [rsp + 0x48], r10
mov r10, qword [rdx]
test r10, r10
je 0x180037c7c
mov rbp, qword [r10 + 8]
test bpl, 1
je 0x180035535
and rbp, 0xfffffffffffffffe
je 0x180037c75
mov rsi, qword [rbp]
test rsi, rsi
je 0x180034b17
test byte [rsi + 8], 1
jne 0x1800362ba
and ecx, 1
or rcx, rbp
mov qword [r10 + 8], rcx
or byte [rbp + 8], 1
mov rbp, qword [rdx]
test rbp, rbp
je 0x1800377cf
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x48]
je 0x1800377b6
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and esi, 1
or rsi, rax
mov qword [rdx + 8], rsi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x180035754
mov qword [r11], rbp
mov rdx, r11
jmp 0x180034a3b
mov rcx, qword [rdx + 8]
mov rax, r11
mov qword [rsp + 0x38], r11
cmp rcx, 1
jbe 0x180034c0f
jmp 0x180034abf
or rcx, 1
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
je 0x18003713b
mov rbp, qword [rcx]
test rbp, rbp
je 0x180034be5
mov rax, qword [rbp + 8]
test al, 1
jne 0x18003598e
or rsi, 1
mov qword [rdx + 8], rsi
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rbp, rcx
cmp qword [r11], rdx
jne 0x1800372b8
mov qword [r11], rbp
jmp 0x180034a3e
mov rcx, qword [rdx]
test rcx, rcx
je 0x180034c4e
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rcx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
or byte [rdx + 8], 1
and qword [rcx + 8], 1
cmp qword [r11], rdx
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x60]
jne 0x180035357
mov qword [r11], rcx
mov rcx, qword [rsp + 0xa0]
shr rcx, 0xc
mov rax, qword [rsp + 0xf8]
mov qword [r9], rax
xorps xmm0, xmm0
movups xmmword [r10], xmm0
mov rdx, qword [rsp + 0x80]
cmp rcx, rdx
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
jne 0x180034d8c
test dl, dl
je 0x180034cf1
mov rax, r12
or rax, 1
cmp rdx, 2
mov ecx, 1
cmovae rcx, rdx
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0xa8]
lea rdx, [rdx + rdx*2]
lea rdx, [r8 + rdx*8]
add rdx, 0x30
xor ebp, ebp
test byte [rdx + rbp], 8
je 0x180034ce4
dec qword [r8 + 0x18]
dec qword [r10 + 0x80]
mov qword [rdx + rbp], rax
add rbp, 0x18
cmp rcx, rbp
jne 0x180034cd3
cmp qword [r8 + 0x18], 0
jne 0x180034fe1
cmp qword [rsp + 0xd0], 0
mov eax, dword [rsp + 0x78]
je 0x180034fe5
mov rsi, qword [r10 + 0x60]
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 0
xor ecx, ecx
cmp rsi, r8
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
test eax, eax
mov qword [rsp + 0x58], r14
je 0x180035c5d
cmp eax, 0xffffffff
je 0x180035eb9
test rsi, rsi
je 0x180037c7c
mov rdx, rsi
mov rcx, qword [rsi + 0x10]
xor r14d, r14d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800363b8
mov rbp, qword [rax + 8]
test rbp, rbp
je 0x1800363b8
test byte [rbp + 0x10], 1
je 0x1800363b8
mov rsi, rdx
jmp 0x180035edc
mov rax, qword [rsp + 0xa8]
lea rdi, [rax + rcx]
sub rcx, rdx
shl rcx, 0xc
add rax, rdx
lea rax, [rax + rax*2]
lea r11, [r8 + rax*8]
add r11, 0x20
mov edx, 0xfff
mov rbp, qword [r11 + 0x10]
and rbp, rdx
or rbp, rcx
mov qword [r11 + 0x10], rbp
lea rbp, [rdi + rdi*2]
and rdx, qword [r8 + rbp*8 + 0x18]
or rdx, rcx
mov qword [r8 + rbp*8 + 0x18], rdx
mov rcx, qword [r9]
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0x100], 0
test rcx, rcx
je 0x180035ae7
lea rdi, [r8 + rax*8]
add rdi, 0x30
lea rbp, [rsp + 0xf8]
xor r9d, r9d
mov r10, r9
mov r9, rbp
mov rbp, qword [rcx]
test rbp, rbp
je 0x180034e2c
mov rsi, qword [rbp + 8]
test sil, 1
je 0x180034e2c
mov rax, qword [rbp]
test rax, rax
je 0x180034e2c
test byte [rax + 8], 1
jne 0x180034ea8
mov rbp, rcx
mov rax, qword [rdi]
mov rdx, rax
mov rcx, 0xfffffffffffff000
and rdx, rcx
mov rsi, qword [rbp + 0x10]
and rsi, rcx
xor ecx, ecx
cmp rdx, rsi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
cmp ecx, 0xffffffff
jne 0x180034e74
mov rcx, qword [rbp]
mov r8d, 0xffffffff
mov rsi, qword [rsp + 0x50]
test rcx, rcx
jne 0x180034e05
jmp 0x180034f8b
test ecx, ecx
jne 0x180034ea0
test al, 0x10
mov eax, 0
cmove rax, r11
xor r8d, r8d
cmp rax, rbp
seta al
jb 0x180034e5b
mov r8b, al
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180034e6a
mov r8d, 1
jmp 0x180034e91
and rsi, 0xfffffffffffffffe
mov qword [rcx], rsi
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rsi, qword [rbp]
mov rdx, qword [rbp + 8]
and edx, 1
or rdx, rax
mov qword [rbp + 8], rdx
test rsi, rsi
je 0x180037c7c
and byte [rsi + 8], 0xfe
cmp qword [r9], rcx
jne 0x180034ee2
mov qword [r9], rbp
jmp 0x180034e2f
and rbp, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [r9 + 8], rax
test rbp, rbp
je 0x1800377b6
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [r9 + 8], rax
mov qword [rbp], r9
mov rax, qword [r9 + 8]
and eax, 1
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rbp + 8], rcx
or byte [r9 + 8], 1
test r10, r10
je 0x1800377d6
cmp qword [r10], r9
je 0x180036246
jmp 0x1800362a7
mov rcx, qword [rdi]
mov rax, rcx
mov rdx, 0xfffffffffffff000
and rax, rdx
mov rsi, qword [rbp + 0x10]
and rsi, rdx
xor edx, edx
cmp rax, rsi
seta dl
mov eax, 0xffffffff
cmovb edx, eax
test edx, edx
jne 0x180035ccc
jmp 0x1800364b7
mov r9, rbp
test rcx, rcx
mov rsi, qword [rsp + 0x50]
jne 0x180034e0b
mov r9, r10
mov qword [r11], 0
mov qword [r11 + 8], 1
cmp r8d, 1
je 0x180035204
mov qword [rbp], r11
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x180037c7c
and byte [rax + 8], 0xfe
mov rcx, qword [rsp + 0x60]
mov qword [rcx], rax
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x80]
jmp 0x180034c9d
mov eax, dword [rsp + 0x78]
test al, 1
jne 0x18003602b
test r12, r12
je 0x18003602b
cmp qword [rsi], r12
je 0x1800377a5
mov qword [r12], rsi
xor eax, eax
cmp dword [r10 + rdi + 0xb4], 1
jne 0x180035145
mov r8, rsi
xor edx, edx
jmp 0x18003516a
test ecx, ecx
je 0x180035771
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x18003504d
mov rcx, qword [rbp]
test rcx, rcx
je 0x18003504d
test byte [rcx + 8], 1
jne 0x180034a2e
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x90], r9
mov rcx, qword [rdx]
test rcx, rcx
je 0x180037291
test byte [rcx + 8], 1
jne 0x1800365b9
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18003508e
mov rbp, qword [rax + 8]
test bpl, 1
jne 0x18003698e
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rbp, rax
and rbp, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
mov r9, qword [rsp + 0x90]
mov r10, qword [rsp + 0x48]
jmp 0x180034a2e
mov rcx, qword [rbp]
test rcx, rcx
je 0x1800350e9
test byte [rcx + 8], 1
jne 0x180034a27
or rax, 1
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180038127
mov rbp, qword [rax]
test rbp, rbp
je 0x180035118
mov rsi, qword [rbp + 8]
test sil, 1
jne 0x18003684e
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rbp, rax
and byte [rbp + 8], 0xfe
lea rdx, [rsp + 0xf8]
mov qword [rdx], rbp
jmp 0x180034a27
mov r8, rsi
lea rcx, [r10 + rdi]
add rcx, 0xb4
xor edx, edx
mov dword [r12 + rdx*4 + 0x10], 0xffffffff
inc rdx
mov ebp, dword [rcx]
dec ebp
cmp rdx, rbp
jb 0x180035155
mov ebp, dword [r10 + rdi + 0xb0]
and ebp, 0x1f
mov ecx, ebp
neg cl
mov esi, 0xffffffff
shr esi, cl
cmp ebp, 1
sbb eax, eax
or eax, esi
mov dword [r12 + rdx*4 + 0x10], eax
mov dword [r12 + 8], 0
mov eax, dword [r10 + rdi + 0xb0]
mov dword [r12 + 0xc], eax
inc dword [r10 + rdi + 0xbc]
mov qword [r8], r12
jmp 0x1800326de
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, rax
or rcx, r11
mov qword [rbp + 8], rcx
mov rcx, qword [r11]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rbp + 8], rcx
mov qword [r11], rbp
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, qword [r11 + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [r11 + 8], rcx
or byte [rbp + 8], 1
cmp qword [rdx], rbp
mov r10, qword [rsp + 0x28]
jne 0x1800357a7
mov qword [rdx], r11
jmp 0x1800347b9
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, rax
or rcx, r11
mov qword [rbp + 8], rcx
mov rcx, qword [r11]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rbp + 8], rcx
mov qword [r11], rbp
mov rax, qword [rbp + 8]
and eax, 1
mov rcx, qword [r11 + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [r11 + 8], rcx
or byte [rbp + 8], 1
cmp qword [r9], rbp
jne 0x1800357ca
mov qword [r9], r11
jmp 0x180034fa8
and r10, 0xfffffffffffffffe
mov qword [rcx], r10
mov rax, qword [rbx + 8]
and eax, 1
or rax, rcx
mov qword [rbx + 8], rax
and rbx, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbx]
mov qword [rdx + 8], rcx
test rbx, rbx
je 0x1800377b6
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x1800352aa
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180036179
mov qword [rdx + 8], rax
jmp 0x1800332ce
and r9, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, r9
mov qword [r11 + 8], rax
jmp 0x180033453
lea rbx, [rsp + 0xd8]
mov rcx, rbx
mov rdi, r9
call fcn.180001ff0
mov r9, rdi
mov rbx, qword [rbx]
jmp 0x1800335e4
xor eax, eax
test bpl, 0x10
cmove rax, qword [rsp + 0x30]
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x1800341cf
mov cl, al
jmp 0x1800341c6
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call fcn.180001ff0
mov rsi, qword [rsi]
jmp 0x18003367a
xor eax, eax
test bpl, 0x10
cmove rax, r10
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x180034a0f
mov cl, al
jmp 0x180034a06
and rcx, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, rcx
mov qword [r11 + 8], rax
jmp 0x180034432
and rcx, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, rcx
mov qword [r11 + 8], rax
jmp 0x180034c64
or rcx, 1
mov qword [r10 + 8], rcx
mov rax, qword [r10]
test rax, rax
je 0x18003538b
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180036074
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
and eax, 1
or rax, rbx
mov qword [rdx + 8], rax
mov qword [rcx], rdx
jmp 0x1800333d1
or rbp, 1
mov qword [rcx + 8], rbp
mov rcx, qword [rcx]
test rcx, rcx
je 0x1800353d3
mov rbp, qword [rcx + 8]
test bpl, 1
jne 0x180036105
mov rcx, qword [rdx + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov r10, qword [rsp + 0x28]
jmp 0x18003434b
mov r8b, 1
jmp 0x180033c78
mov rdx, qword [r14 + 0x68]
test rdx, rdx
jne 0x1800360e0
mov qword [rsp + 0x68], rsi
lea r9, [rsp + 0xf8]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.18004c4f0
test rax, rax
je 0x1800374f4
mov rbx, rax
cmp byte [rsp + 0xf8], 0
mov ecx, 0x40
mov eax, 0x24
cmove rax, rcx
add qword [r14 + 0x40], 0x100000
mov qword [rbx], r14
xor ecx, ecx
mov qword [rbx + 0x18], rcx
mov qword [rbx + 0x30], rcx
mov qword [rbx + 0x48], rcx
mov qword [rbx + 0x60], 0x20
lea rcx, [rax + 0xfc000]
mov qword [rbx + 0x78], rcx
mov edx, 0x90
mov qword [rbx + rdx], rax
add rdx, 0x18
cmp rdx, 0x1800
jne 0x18003548b
mov qword [rbx + 0x1800], rcx
mov qword [rbx + 0x1818], 0x20
lea rcx, [rbx + 0x2000]
mov eax, ecx
and eax, 0xfffff
mov ebp, 0x100000
sub rbp, rax
mov edi, 0xfe000
cmp rbp, rdi
cmovae rbp, rdi
mov rsi, rcx
mov rdx, rbp
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x180037477
mov rcx, rsi
add rcx, rbp
sub rdi, rbp
mov eax, 0x100000
cmp rdi, rax
mov ebp, 0x100000
cmovb rbp, rdi
test rdi, rdi
jne 0x1800354d0
add qword [r14 + 0x48], 3
lea rdx, [rbx + 0x68]
mov rcx, qword [rsp + 0x88]
call fcn.18004c020
add rbx, 0x3000
mov rsi, qword [rsp + 0x68]
mov r9, qword [rsp + 0x50]
jmp 0x180033af4
mov qword [rsp + 0x90], r9
or rbp, 1
mov qword [r10 + 8], rbp
mov rcx, qword [r10]
test rcx, rcx
je 0x18003555b
mov rbp, qword [rcx + 8]
test bpl, 1
jne 0x1800361da
mov rcx, qword [rdx + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov r9, qword [rsp + 0x90]
mov r10, qword [rsp + 0x48]
jmp 0x180034b8d
mov al, 1
mov rbp, qword [rsp + 0x70]
jmp 0x180033e9e
mov rdx, qword [r10 + 0x68]
test rdx, rdx
jne 0x1800361b0
mov qword [rsp + 0x58], r14
lea r9, [rsp + 0xf8]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.18004c4f0
test rax, rax
je 0x1800374fe
mov r12, rax
cmp byte [rsp + 0xf8], 0
mov ecx, 0x40
mov eax, 0x24
cmove rax, rcx
mov rcx, qword [rsp + 0x20]
add qword [rcx + 0x40], 0x100000
mov qword [r12], rcx
xor ecx, ecx
mov qword [r12 + 0x18], rcx
mov qword [r12 + 0x30], rcx
mov qword [r12 + 0x48], rcx
mov qword [r12 + 0x60], 0x20
lea rcx, [rax + 0xfc000]
mov qword [r12 + 0x78], rcx
mov edx, 0x90
mov qword [r12 + rdx], rax
add rdx, 0x18
cmp rdx, 0x1800
jne 0x18003562a
mov qword [r12 + 0x1800], rcx
mov qword [r12 + 0x1818], 0x20
lea rcx, [r12 + 0x2000]
mov eax, ecx
and eax, 0xfffff
mov edx, 0x100000
sub rdx, rax
mov ebp, 0xfe000
cmp rdx, rbp
cmovae rdx, rbp
mov r14, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdi, rcx
mov rsi, rdx
mov r8d, 0x4000
call r14
test eax, eax
je 0x180037477
mov rcx, rdi
add rcx, rsi
sub rbp, rsi
mov eax, 0x100000
cmp rbp, rax
mov edx, 0x100000
cmovb rdx, rbp
test rbp, rbp
jne 0x180035679
mov rsi, qword [rsp + 0x20]
add qword [rsi + 0x48], 3
lea rdx, [r12 + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18004c020
mov r10, rsi
add r12, 0x3000
mov r14, qword [rsp + 0x58]
mov r11, qword [rsp + 0x80]
jmp 0x180033d0d
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rax
mov qword [r11 + 8], rdx
mov rdx, r11
jmp 0x180033240
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x1800341fb
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x180036aaa
mov rax, qword [rdx]
test rax, rax
jne 0x18003664f
mov qword [rsp + 0xf8], rax
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x60]
jmp 0x180034432
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x180034a3b
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x180036ac1
mov rax, qword [rdx]
test rax, rax
jne 0x1800366aa
mov qword [rsp + 0xf8], rax
mov rsi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x60]
jmp 0x180034c64
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
cmp rbp, rcx
jne 0x1800347b9
and eax, 1
or rax, r11
mov qword [rdx + 8], rax
jmp 0x1800347b9
mov rax, qword [r9 + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
cmp rbp, rcx
jne 0x180034fa8
and eax, 1
or rax, r11
mov qword [r9 + 8], rax
jmp 0x180034fa8
and rbx, 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rbx, qword [rdx]
test rbx, rbx
je 0x1800377cf
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rdi, qword [rax]
and rdi, 0xfffffffffffffffe
and ecx, 1
or rcx, rdi
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
jmp 0x1800335e4
and rsi, 0xfffffffffffffffe
mov qword [rax + 8], rsi
mov rsi, qword [rdx]
test rsi, rsi
je 0x1800377cf
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
jmp 0x18003367a
test r13, r13
je 0x1800377d6
cmp qword [r13], r15
jne 0x18003656f
mov qword [r13], rdx
test rdx, rdx
je 0x1800377b6
mov rax, qword [r15]
mov qword [rdx], rax
mov rax, qword [r15 + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [r15 + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x180037508
mov qword [r11], 0
mov rbx, qword [rsp + 0x20]
jmp 0x180033453
and rsi, 0xfffffffffffffffe
mov qword [rcx], rsi
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
and rbp, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [rdx + 8], rax
test rbp, rbp
je 0x1800377b6
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x180035985
mov rdi, qword [rcx + 8]
test dil, 1
jne 0x1800368b2
mov qword [rdx + 8], rcx
jmp 0x1800343c1
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
and rbp, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [rdx + 8], rax
test rbp, rbp
je 0x1800377b6
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x1800359e8
mov rax, qword [rcx + 8]
test al, 1
jne 0x180036956
mov qword [rdx + 8], rcx
jmp 0x180034bfe
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbx], rax
jmp 0x180032f58
mov qword [r11], 0
mov qword [r11 + 8], 1
lea rbp, [rsp + 0xf8]
jmp 0x1800347b5
cmp qword [rsp + 0x48], 0
je 0x1800377d6
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x48]
cmp qword [rcx], rax
jne 0x18003668b
mov rax, qword [rsp + 0x48]
mov qword [rax], rdx
mov rbp, qword [rsp + 0x30]
mov rax, qword [rbp]
mov qword [rdx], rax
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x180037512
mov qword [r11], 0
jmp 0x180035740
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rsi], rax
jmp 0x180032fc6
mov qword [r11], 0
mov qword [r11 + 8], 1
lea rbp, [rsp + 0xf8]
jmp 0x180034fa4
cmp qword [rsp + 0x38], 0
je 0x1800377d6
mov rax, qword [rsp + 0x38]
cmp qword [rax], r10
jne 0x1800366e6
mov rax, qword [rsp + 0x38]
mov qword [rax], rdx
mov rbp, r10
mov rax, qword [r10]
mov qword [rdx], rax
mov rax, qword [r10 + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [r10 + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x18003751c
mov qword [r11], 0
jmp 0x180035793
and ebx, 1
mov qword [rsp + 0x30], rax
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
or rax, rbx
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x30]
and byte [rax + 8], 0xfe
mov rax, qword [r10 + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
and eax, 1
or rax, rbx
mov qword [r10 + 8], rax
mov qword [rcx], r10
mov qword [rdx], rcx
jmp 0x180033379
xor eax, eax
mov qword [rsp + 0x30], rax
jmp 0x180033cbe
xor eax, eax
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x70]
jmp 0x180033ef1
test rbp, rbp
je 0x1800364e1
mov rcx, qword [rbp + 0x10]
cmp rcx, 1
ja 0x180036c52
mov rax, qword [rbp + 8]
test rax, rax
je 0x1800364e1
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rbp + 0x10], 1
and qword [rax + 0x10], 1
mov qword [rsp + 0x100], rax
mov r8, qword [rsp + 0x28]
jmp 0x180035e61
mov edi, 1
cmp edx, 0xffffffff
je 0x1800364a9
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180034781
test rsi, rsi
je 0x1800364e8
mov rdx, rsi
mov rcx, qword [rsi + 0x10]
cmp rcx, 1
ja 0x180036c5f
mov rax, qword [rdx + 8]
test rax, rax
je 0x1800364e8
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov rbp, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rbp + 0x10], 1
and qword [rax + 0x10], 1
mov qword [rsp + 0x100], rax
jmp 0x180035fea
mov r8d, 1
cmp edx, 0xffffffff
je 0x1800364d2
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180034f77
test rbp, rbp
je 0x180036502
mov rax, qword [rbp + 8]
test rax, rax
je 0x180036502
test byte [rax + 0x10], 1
je 0x1800364ef
xor ecx, ecx
mov qword [rsp + 0x20], rcx
mov r8, qword [rsp + 0x28]
mov ecx, 0xffffffff
xor edx, edx
mov rdi, rbp
mov rbp, rax
xor eax, eax
cmp rbp, r8
setb al
cmova eax, ecx
test eax, eax
je 0x180035d62
cmp eax, 0xffffffff
jne 0x180035d83
test rbp, rbp
je 0x180036c6c
mov rax, qword [rbp + 8]
test rax, rax
je 0x180036c6c
test byte [rax + 0x10], 1
je 0x180035dc5
mov rdi, rbp
mov r8, qword [rsp + 0x28]
xor edx, edx
mov ecx, 0xffffffff
jmp 0x180035d1e
test rbp, rbp
je 0x180035e57
mov rax, qword [rbp + 0x10]
mov rcx, rdi
mov qword [rsp + 0x20], rdi
cmp rax, 1
jbe 0x180035e12
jmp 0x180035d90
test rbp, rbp
je 0x180036760
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
je 0x180036760
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180036760
test byte [rcx + 0x10], 1
mov r8, qword [rsp + 0x28]
mov edx, 0
mov ecx, 0xffffffff
jne 0x180035d1b
jmp 0x180036760
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180035dd8
test byte [rcx + 0x10], 1
jne 0x180035d51
lea rcx, [rsp + 0xf0]
mov rdx, rbp
call fcn.180003330
mov rax, qword [rsp + 0xf0]
cmp qword [rdi + 8], rbp
jne 0x180037540
mov qword [rdi + 8], rax
mov rbp, rax
mov r8, qword [rsp + 0x28]
xor edx, edx
mov ecx, 0xffffffff
jmp 0x180035d21
mov rdx, qword [rbp + 8]
test rdx, rdx
je 0x18003641e
mov rax, qword [rdx + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rbp + 8], rax
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
or byte [rbp + 0x10], 1
and qword [rdx + 0x10], 1
cmp qword [rdi + 8], rbp
jne 0x180035e98
mov qword [rdi + 8], rdx
mov rax, qword [rsp + 0x100]
mov qword [r14 + 0x60], rax
test r8, r8
je 0x1800377b6
xorps xmm0, xmm0
movups xmmword [r8 + 8], xmm0
cmp byte [rsp + 0x58], 0
je 0x1800347f8
mov qword [rsi], 0
mov rcx, r13
jmp 0x180036037
and rdx, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rdx
mov qword [rdi + 0x10], rax
jmp 0x180035e61
lea rcx, [rsp + 0xf8]
jmp 0x180033568
test rsi, rsi
je 0x180036544
mov rax, qword [rsi + 8]
test rax, rax
je 0x180036544
test byte [rax + 0x10], 1
je 0x180036531
xor r14d, r14d
xor ebp, ebp
mov rcx, qword [rsp + 0x40]
mov rdx, rax
xor eax, eax
cmp rdx, rcx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
test eax, eax
je 0x180035f1d
cmp eax, 0xffffffff
jne 0x180035f38
test rdx, rdx
je 0x180036d2e
mov rax, qword [rdx + 8]
test rax, rax
je 0x180036d2e
test byte [rax + 0x10], 1
jne 0x180035f93
jmp 0x180035f7c
test rdx, rdx
je 0x180037490
mov rax, qword [rdx + 0x10]
mov rdi, rsi
mov r14, rsi
cmp rax, 1
jbe 0x180035f9b
jmp 0x180035f4e
mov rdi, rsi
mov rsi, rdx
test rdx, rdx
je 0x1800367ab
mov rdx, rsi
mov rax, qword [rsi + 0x10]
mov rsi, rdx
and rax, 0xfffffffffffffffe
je 0x1800367ab
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1800367ab
test byte [rcx + 0x10], 1
mov rcx, qword [rsp + 0x40]
jne 0x180035ee3
jmp 0x1800367ab
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180036b14
test byte [rcx + 0x10], 1
je 0x180036b14
mov rsi, rdx
jmp 0x180035ede
mov rbp, qword [rdx + 8]
test rbp, rbp
je 0x180036425
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rdx + 8], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
or byte [rdx + 0x10], 1
and qword [rbp + 0x10], 1
cmp qword [rdi + 8], rdx
jne 0x180036050
mov qword [rdi + 8], rbp
mov r14, qword [rsp + 0x58]
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
mov edx, dword [rsp + 0x78]
mov rax, qword [rsp + 0x100]
mov qword [r10 + 0x60], rax
test rcx, rcx
je 0x1800377b6
xorps xmm0, xmm0
movups xmmword [rcx + 8], xmm0
test dl, dl
je 0x180034ff6
mov qword [rsi], 0
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
xor ebp, ebp
jmp 0x180032854
and rbp, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rbp
mov qword [rdi + 0x10], rax
jmp 0x180035fea
mov rdi, rsi
lea rcx, [rsp + 0xf8]
jmp 0x1800335fd
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rcx, qword [rdx]
test rcx, rcx
je 0x1800377cf
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
mov rbx, qword [rdx + 8]
mov rax, rbx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov r10, qword [rax]
and r10, 0xfffffffffffffffe
and ebx, 1
or rbx, r10
mov qword [rdx + 8], rbx
mov qword [rax], rdx
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
jmp 0x1800333d1
mov qword [r14 + 0x68], 0
lea rbx, [rdx + 0x3000]
add rdx, 0x68
mov rcx, qword [rsp + 0x88]
call fcn.18004c020
jmp 0x18003552b
and rbp, 0xfffffffffffffffe
mov qword [rcx + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x1800377cf
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rdx + 8], rdi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
jmp 0x1800353fa
mov qword [rax], rbp
jmp 0x18003474d
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbx], rax
jmp 0x1800332ce
mov rsi, qword [rsp + 0x20]
mov qword [rsi + 0x68], 0
lea r12, [rdx + 0x3000]
add rdx, 0x68
mov rcx, qword [rsp + 0x60]
call fcn.18004c020
mov r10, rsi
jmp 0x1800356d7
and rbp, 0xfffffffffffffffe
mov qword [rcx + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x1800377cf
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and esi, 1
or rsi, rax
mov qword [rdx + 8], rsi
mov qword [rcx], rdx
mov rax, qword [rbp + 8]
and eax, 1
or rax, rcx
mov qword [rbp + 8], rax
jmp 0x180035582
mov qword [r10], rbp
jmp 0x180034f43
mov rcx, qword [rax + 8]
and ecx, 1
or rcx, rbp
mov qword [rax + 8], rcx
jmp 0x18003474d
and edi, 1
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
or rax, rdi
mov qword [rbp + 8], rax
and byte [r10 + 8], 0xfe
mov rdi, qword [rcx + 8]
mov rbp, rdi
and rbp, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rcx + 8], rdi
mov qword [rbp], rcx
mov qword [rdx], rbp
jmp 0x1800342ef
mov rax, qword [r10 + 8]
and eax, 1
or rax, rbp
mov qword [r10 + 8], rax
jmp 0x180034f43
mov qword [rsp + 0x90], r9
and ecx, 1
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rbp + 8], rax
and byte [rsi + 8], 0xfe
mov rcx, qword [r10 + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [r10 + 8], rcx
mov qword [rbp], r10
mov qword [rdx], rbp
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rsi, qword [rdx + 8]
mov rcx, rsi
and rcx, 0xfffffffffffffffe
mov r9, qword [rsp + 0x90]
jmp 0x180034b5c
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbx, qword [rax + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
mov rbx, qword [rdx + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x1800331a6
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, rsi
mov rsi, qword [rax + 8]
and esi, 1
or rsi, rcx
mov qword [rax + 8], rsi
mov rsi, qword [rdx + 8]
and esi, 1
or rsi, rcx
mov qword [rax + 8], rsi
mov rsi, r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x180033407
mov rax, qword [rdx + 8]
test rax, rax
je 0x180037533
test byte [rax + 0x10], 1
jne 0x18003672c
or rcx, 1
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1800363ee
mov rbp, qword [rcx + 0x10]
test bpl, 1
jne 0x180036bb7
or byte [rax + 0x10], 1
mov rcx, qword [rdx + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rbp, qword [rax + 8]
and rbp, 0xfffffffffffffffe
and ecx, 1
or rcx, rbp
mov qword [rdx + 0x10], rcx
mov qword [rax + 8], rdx
jmp 0x18003673f
xor edx, edx
jmp 0x180035e57
xor ebp, ebp
jmp 0x180035fe0
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
and rcx, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rbx, [rax + rcx]
mov qword [rdx + 8], rbx
test rcx, rcx
je 0x1800377b6
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
or rbx, rax
mov qword [rdx + 8], rbx
mov qword [rcx], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180036485
mov rbx, qword [rax + 8]
test bl, 1
jne 0x180036a66
mov qword [rdx + 8], rax
jmp 0x180033713
test dil, 0x10
mov ecx, 0
cmove rcx, r11
xor edi, edi
cmp rcx, rbp
seta cl
jae 0x180036750
mov rcx, qword [rbp]
mov edi, 0xffffffff
jmp 0x180034781
test cl, 0x10
mov eax, 0
cmove rax, r11
xor r8d, r8d
cmp rax, rbp
seta al
jae 0x180036758
mov rcx, qword [rbp]
mov r8d, 0xffffffff
jmp 0x180034f77
xor eax, eax
jmp 0x180035c30
xor eax, eax
jmp 0x180035cbf
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180036502
test byte [rcx + 0x10], 1
jne 0x180035d08
lea rdi, [rsp + 0xd8]
mov rcx, rdi
mov rdx, rbp
call fcn.180003330
mov rax, qword [rdi]
test rax, rax
je 0x180037c7c
and byte [rax + 0x10], 0xfe
xor ecx, ecx
mov qword [rsp + 0x20], rcx
jmp 0x18003671b
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180036544
test byte [rcx + 0x10], 1
jne 0x180035ed9
lea rdi, [rsp + 0xd8]
mov rcx, rdi
mov rdx, rsi
call fcn.180003330
mov rax, qword [rdi]
test rax, rax
je 0x180037c7c
and byte [rax + 0x10], 0xfe
xor r14d, r14d
jmp 0x18003673f
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r13 + 8]
and ecx, 1
or rcx, rax
mov qword [r13 + 8], rcx
jmp 0x1800358dc
lea rbx, [rsp + 0xd8]
mov rcx, rbx
call fcn.180001ff0
mov rcx, qword [rbx]
jmp 0x180034086
lea rdi, [rsp + 0xd8]
mov rcx, rdi
call fcn.180025190
mov rbp, qword [rdi]
jmp 0x1800348aa
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call fcn.180025190
mov rbp, qword [rsi]
jmp 0x1800350b9
lea rcx, [0x1800a6590]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rsi, qword [0x1800a65b8]
mov eax, 0xffffffff
xor ecx, ecx
cmp qword [rsi + 0x20], r15
setb cl
cmova ecx, eax
test ecx, ecx
je 0x180036639
cmp ecx, 0xffffffff
jne 0x180036605
mov rsi, qword [rsi + 0x10]
jmp 0x1800365ea
mov rsi, qword [rsi + 0x18]
and rsi, 0xfffffffffffffffe
jmp 0x1800365ea
mov rax, qword [rsi]
mov rbx, qword [rsi + 0x30]
cmp rax, qword [rbx + 0x10]
je 0x1800325a8
lea rax, [0x18009889b]
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rdi, qword [rsi + 0x28]
lea rcx, [0x1800a6590]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180032598
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbp, qword [rax + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x180035738
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rsp + 0x48]
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x180035a6b
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbp, qword [rax + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18003578b
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rsp + 0x38]
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x180035b25
lea rdi, [rsp + 0xd8]
mov rcx, rdi
mov rdx, rbp
call fcn.180029970
mov rax, qword [rdi]
lea rbp, [rsp + 0xf8]
mov qword [rbp + 8], rax
jmp 0x180035d0f
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call fcn.180029970
mov rax, qword [rsi]
lea rsi, [rsp + 0xf8]
mov qword [rsi + 8], rax
jmp 0x180035edc
mov dil, cl
jmp 0x180035c50
mov r8b, al
jmp 0x180035cdb
lea rcx, [rsp + 0xe8]
mov rdx, rbp
call fcn.180029970
mov rax, qword [rsp + 0xe8]
cmp qword [rdi + 8], rbp
je 0x180036c3d
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rbp, rdi
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
mov r8, qword [rsp + 0x28]
xor edx, edx
mov ecx, 0xffffffff
jmp 0x180035d1b
lea rcx, [rsp + 0xe8]
mov rdx, rsi
call fcn.180029970
mov rax, qword [rsp + 0xe8]
cmp qword [rdi + 8], rsi
je 0x180036c49
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
mov rsi, rdi
jmp 0x180035ede
and rdi, 0xfffffffffffffffe
mov qword [rax], rdi
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
and rbp, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbp]
mov qword [rdx + 8], rcx
test rbp, rbp
je 0x1800377b6
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180036845
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180036cf6
mov qword [rdx + 8], rax
jmp 0x180034912
and rsi, 0xfffffffffffffffe
mov qword [rax], rsi
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
and rbp, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbp]
mov qword [rdx + 8], rcx
test rbp, rbp
je 0x1800377b6
mov rcx, qword [rbp]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x1800368a9
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180036db1
mov qword [rdx + 8], rax
jmp 0x180035131
and rdi, 0xfffffffffffffffe
mov qword [rcx + 8], rdi
mov rcx, qword [rdx + 8]
mov rax, rcx
or rax, 1
mov qword [rdx + 8], rax
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov qword [rbp], rcx
jmp 0x1800343c1
and rbp, 0xfffffffffffffffe
mov qword [rax + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x1800377cf
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rdi, qword [rax]
and rdi, 0xfffffffffffffffe
and ecx, 1
or rcx, rdi
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x1800348aa
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
or rax, 1
mov qword [rdx + 8], rax
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov qword [rbp], rcx
jmp 0x180034bfe
and rbp, 0xfffffffffffffffe
mov qword [rax + 8], rbp
mov rbp, qword [rdx]
test rbp, rbp
je 0x1800377cf
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rsi, qword [rax]
and rsi, 0xfffffffffffffffe
and ecx, 1
or rcx, rsi
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x1800350b9
and rbx, 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rcx, qword [rdx]
test rcx, rcx
je 0x1800377cf
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
or rbx, rax
mov qword [rcx + 8], rbx
mov rax, qword [rdx + 8]
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x1800377b6
mov r8, qword [rbx]
and r8, 0xfffffffffffffffe
and eax, 1
or rax, r8
mov qword [rdx + 8], rax
mov qword [rbx], rdx
mov rax, qword [rcx + 8]
and eax, 1
or rax, rbx
mov qword [rcx + 8], rax
jmp 0x180034086
and rbx, 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rbx, qword [rdx + 8]
mov rax, rbx
or rax, 1
mov qword [rdx + 8], rax
and rbx, 0xfffffffffffffffe
je 0x1800377b6
mov rax, qword [rbx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rbx], rdx
mov qword [rcx], rbx
jmp 0x180033713
lea r13, [rsp + 0xf8]
jmp 0x18003400f
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0x48], rcx
mov r10, qword [rsp + 0x28]
jmp 0x18003482f
lea rbp, [rsp + 0xf8]
mov qword [rsp + 0x38], rbp
jmp 0x180035031
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbx, qword [rax + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
mov rbx, qword [rdx + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
mov rbx, qword [rsp + 0x20]
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x180033f3b
lea rcx, [rsp + 0xf0]
mov rdi, rdx
call fcn.180003330
mov rax, qword [rsp + 0xf0]
cmp qword [rsi + 8], rdi
jne 0x18003755a
mov qword [rsi + 8], rax
mov rdx, rax
mov rcx, qword [rsp + 0x40]
jmp 0x180035ee6
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [rbp + 8]
test rax, rax
je 0x180037574
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
and edx, 1
or rdx, rdi
mov qword [rbp + 0x10], rdx
mov qword [rcx + 8], rbp
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18003671b
and rbp, 0xfffffffffffffffe
mov qword [rcx + 0x10], rbp
mov rax, qword [rdx + 8]
test rax, rax
je 0x180037581
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov rbp, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov rdi, rbp
mov rbp, qword [rcx + 8]
and rbp, 0xfffffffffffffffe
and edx, 1
or rdx, rbp
mov qword [rdi + 0x10], rdx
mov qword [rcx + 8], rdi
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18003673f
mov rcx, r15
mov rdx, rbx
call fcn.180003470
jmp 0x180032854
mov rbp, rdi
mov qword [rdi + 8], rax
jmp 0x18003679a
mov qword [rdi + 8], rax
jmp 0x1800367e2
lea rax, [rsp + 0xf8]
jmp 0x180034512
lea r14, [rsp + 0xf8]
jmp 0x180034d60
cmp qword [rsp + 0x20], 0
je 0x18003758e
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
cmp qword [rcx + 8], rax
jne 0x1800370f5
mov rax, qword [rsp + 0x20]
mov qword [rax + 8], rbp
cmp qword [rsp + 0x28], 0
je 0x1800375ae
test rbp, rbp
je 0x1800377b6
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx + 8]
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [rbp + 0x10]
and eax, 1
or rax, rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rdx + 0x10]
and ecx, 1
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rbp + 0x10], rax
cmp qword [rdi + 8], rbp
jne 0x1800375d1
mov qword [rdi + 8], 0
jmp 0x180035c38
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbp], rax
jmp 0x180034912
test r14, r14
je 0x1800375db
mov rdi, rdx
mov rax, qword [rsp + 0x40]
cmp qword [r14 + 8], rax
jne 0x180037114
mov qword [r14 + 8], rdi
cmp qword [rsp + 0x40], 0
je 0x1800375fb
test rdi, rdi
je 0x1800377b6
mov rdx, qword [rsp + 0x40]
mov rax, qword [rdx + 8]
mov rbp, rdi
mov qword [rdi + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rcx
mov qword [rdi + 0x10], rax
mov rcx, qword [rdx + 0x10]
and ecx, 1
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdi + 0x10], rax
cmp qword [rsi + 8], rdi
jne 0x180037621
mov qword [rsi + 8], 0
jmp 0x180035fea
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbp], rax
jmp 0x180035131
mov byte [r14 + 0x70], 0
lea rcx, [rsp + 0xf8]
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
lea rdi, [rsp + 0xd8]
mov rcx, rdi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
mov ecx, 0x10
call fcn.180002210
xor ecx, ecx
cmp byte [rdi + 8], 0
mov edx, 0
je 0x180036e2a
mov rdx, qword [rsp + 0xd8]
cmp byte [rsp + 0x100], 0
je 0x180036e3c
mov rcx, qword [rsp + 0xf8]
mov qword [rax], rcx
mov qword [rax + 8], rdx
mov qword [r14 + 0x78], rax
mov byte [r14 + 0x70], 1
jmp 0x1800328fb
mov r12, rsi
mov byte [rbp + 0x70], 0
lea rcx, [rsp + 0xf8]
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
lea rsi, [rsp + 0xd8]
mov rcx, rsi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
mov ecx, 0x10
call fcn.180002210
xor ecx, ecx
cmp byte [rsi + 8], 0
mov edx, 0
je 0x180036e94
mov rdx, qword [rsp + 0xd8]
cmp byte [rsp + 0x100], 0
je 0x180036ea6
mov rcx, qword [rsp + 0xf8]
mov qword [rax], rcx
mov qword [rax + 8], rdx
mov rbp, qword [rsp + 0x20]
mov qword [rbp + 0x78], rax
mov byte [rbp + 0x70], 1
mov rsi, r12
jmp 0x1800326ad
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov eax, dword [0x1800a6698]
test eax, eax
jne 0x1800370e3
mov eax, dword [0x1800a66f8]
mov ecx, dword [0x1800a64f4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x180036f3a
lea rcx, [0x1800a66f8]
call fcn.18004a800
cmp dword [0x1800a66f8], 0xffffffff
jne 0x180036f3a
lea rsi, [rsp + 0xf8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 4]
mov qword [0x1800a66f0], rax
lea rcx, [0x1800a66f8]
call fcn.18004a7a0
mov eax, 0x1000
xor edx, edx
div qword [0x1800a66f0]
test rdx, rdx
jne 0x180037659
lea rcx, str.MALLOC_OPTIONS
lea rsi, [0x1800a6700]
mov rdx, rsi
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor ebx, ebx
test eax, eax
cmovne rbx, rsi
je 0x180036fbb
mov al, byte [rbx]
test al, al
je 0x180036fbb
xor ebp, ebp
movsx eax, al
add eax, 0xffffffd0
mov esi, 1
cmp eax, 9
jbe 0x1800376af
mov r15d, ebp
mov al, byte [rbx + r15]
movsx ecx, al
cmp ecx, 0x72
jne 0x18003762b
mov byte [0x1800a6588], 1
dec esi
jne 0x180036f97
inc ebp
mov al, byte [rbx + rbp]
test al, al
jne 0x180036f80
mov qword [0x1800a6658], 0
lea rcx, [0x1800a6660]
mov rsi, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rsi
xor ebx, ebx
mov qword [0x1800a6690], rbx
mov qword [0x1800a6688], rbx
lea rcx, [0x1800a6590]
mov edx, 0x1388
call rsi
mov qword [0x1800a65b8], rbx
mov qword [0x1800a65c0], rbx
mov qword [0x1800a65c8], rbx
lea rcx, [0x1800a6600]
mov edx, 0x1388
call rsi
mov qword [0x1800a6650], rbx
mov qword [0x1800a6640], rbx
xorps xmm0, xmm0
movups xmmword [0x1800a66d8], xmm0
lea rcx, [0x1800a66a0]
mov dword [rsp + 0x100], 0
mov rax, qword [0x1800a6038]
mov qword [rsp + 0xf8], rax
mov edx, 0x1388
call rsi
test eax, eax
je 0x180037685
lea rdx, [rsp + 0xf8]
xor ecx, ecx
call fcn.18003dfc0
mov qword [0x1800a66c8], rax
test rax, rax
je 0x18003769d
mov ecx, dword [0x1800a64f4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 8], rax
lea rcx, [0x1800a65d0]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.180002210
test rax, rax
je 0x180037692
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800a65f8], rax
mov eax, 1
xchg dword [0x1800a6698], eax
call fcn.180002410
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x180032883
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rdx, qword [rsp + 0x20]
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
jmp 0x180036c95
mov rax, rdi
and rax, 0xfffffffffffffffe
mov rcx, qword [r14 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r14 + 0x10], rcx
jmp 0x180036d4d
or rdi, 1
mov qword [rdx + 8], rdi
jmp 0x1800377b6
or rsi, 1
mov qword [rdx + 8], rsi
jmp 0x1800377b6
or rbx, 1
mov qword [rdx + 8], rbx
jmp 0x1800377b6
and edi, 1
mov qword [rcx + 8], rdi
jmp 0x180037c7c
mov r13d, 1
jmp 0x180032544
lea rax, str.MOZ_RELEASE_ASSERT_malloc_initializN
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
xor ecx, ecx
jmp 0x1800325e9
lea rax, str.MOZ_RELEASE_ASSERT__aArena__arena__aArena_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x20U____0___Freeing_in_decommitted_page._
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x01U_____0___Double_free__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__run__mRegionsMask_elm____1U____bit____0___Double_free__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov r14, qword [0x1800a66c8]
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 8], r14
jmp 0x1800328b3
mov rbp, qword [0x1800a66c8]
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 8], rbp
jmp 0x180032649
dec dword [rbx + 0xc]
jmp 0x180035e90
dec dword [r12 + 0xc]
jmp 0x180036032
and ebx, 1
mov qword [r10 + 8], rbx
jmp 0x180037c7c
xor ecx, ecx
jmp 0x180033518
mov rax, rbx
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, rbx
jmp 0x180033246
mov rax, rcx
mov rsi, rbp
jmp 0x180033ac6
mov rax, rcx
jmp 0x180033cdf
or rax, 1
mov qword [rdx + 8], rax
jmp 0x180037c7c
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x1800343d0
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x180034a3e
mov qword [rsp + 0x68], rsi
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x1800372ed
cmp eax, 8
jne 0x18003736f
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xa8], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test rsi, rsi
jne 0x180037498
cmp eax, 0x5af
je 0x18003734e
cmp eax, 8
jne 0x18003736f
xor r8d, r8d
dec qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x68]
mov r10, qword [rsp + 0x28]
mov r9, qword [rsp + 0x50]
jne 0x180037309
jmp 0x180033c78
xor r8d, r8d
mov rsi, qword [rsp + 0x68]
jmp 0x180033c6e
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x58], r14
mov rsi, rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x1800373aa
cmp eax, 8
jne 0x180037449
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xc8], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test rdi, rdi
jne 0x1800374ba
cmp eax, 0x5af
je 0x180037411
cmp eax, 8
jne 0x180037449
xor eax, eax
dec qword [rsp + 0xc8]
mov rbx, rsi
mov r14, qword [rsp + 0x58]
mov r10, qword [rsp + 0x20]
mov r8, qword [rsp + 0x40]
mov r11, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x70]
jne 0x1800373c6
jmp 0x180033e9e
xor eax, eax
mov rbx, rsi
mov r14, qword [rsp + 0x58]
mov r10, qword [rsp + 0x20]
mov r8, qword [rsp + 0x40]
mov r11, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x70]
jmp 0x180033e9e
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rdi, rsi
jmp 0x180035fe0
cmp eax, 0x5af
mov rsi, qword [rsp + 0x68]
je 0x1800374ad
cmp eax, 8
jne 0x180033c3a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180033c3a
cmp eax, 0x5af
mov rbx, rsi
mov r14, qword [rsp + 0x58]
mov rsi, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xc0]
je 0x1800374e7
cmp eax, 8
jne 0x180033e5b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180033e5b
mov rsi, qword [rsp + 0x68]
jmp 0x180035e89
mov rsi, qword [rsp + 0x50]
jmp 0x18003602b
and qword [r11 + 8], 1
jmp 0x18003591f
and qword [r11 + 8], 1
jmp 0x180035740
and qword [r11 + 8], 1
jmp 0x180035793
or rcx, 1
mov qword [rbp + 0x10], rcx
jmp 0x180037c7c
or rcx, 1
mov qword [rdx + 0x10], rcx
jmp 0x180037c7c
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x180035dfe
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rsi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rsi + 0x10], rdx
jmp 0x180036b3a
mov qword [rbp + 8], 0
jmp 0x1800377d6
mov qword [rdx + 8], 0
jmp 0x1800377d6
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rbp, rbp
je 0x1800377b6
mov qword [rbp + 8], 0
mov rax, qword [rbp + 0x10]
and eax, 1
mov qword [rbp + 0x10], rax
xor ecx, ecx
jmp 0x180036cd4
and qword [rdi + 0x10], 1
jmp 0x180035c38
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rdi, rdi
je 0x1800377b6
mov rcx, rdi
mov qword [rdi + 8], 0
mov rax, qword [rdi + 0x10]
and eax, 1
mov qword [rdi + 0x10], rax
xor ecx, ecx
jmp 0x180036d8f
and qword [rsi + 0x10], 1
jmp 0x180035fea
cmp ecx, 0x46
jne 0x1800376d2
mov rax, qword [0x1800a6038]
test rax, rax
je 0x1800376f4
add rax, rax
je 0x180036fae
mov qword [0x1800a6038], rax
jmp 0x180036fae
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180051bf0
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov qword [0x1800a66c8], 0
jmp 0x18003769d
mov qword [0x1800a65f8], 0
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x18003603d
xor esi, esi
lea ecx, [rsi + rsi*4]
lea esi, [rax + rcx*2]
inc ebp
movsx eax, byte [rbx + rbp]
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x1800376b1
test esi, esi
je 0x180036fb2
jmp 0x180036f94
cmp ecx, 0x52
jne 0x1800376e3
mov byte [0x1800a6588], 0
jmp 0x180036fae
cmp ecx, 0x66
jne 0x180037704
shr qword [0x1800a6038], 1
jmp 0x180036fae
mov qword [0x1800a6038], 1
jmp 0x180036fae
lea r14, [rsp + 0xf8]
mov byte [r14], al
mov byte [r14 + 1], 0
lea rdx, str._jemalloc_
mov r12, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call r12
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call r12
lea rdx, [0x18009ab44]
mov rcx, r14
call fcn.180051bf0
jmp 0x180036fae
mov rax, qword [rsp + 0xf8]
mov qword [r9], rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov rbx, 0xfffffffffffff000
and rbx, qword [rbp + 0x10]
mov qword [rsi], rbx
test rbx, rbx
jne 0x18003291e
jmp 0x180035e90
mov rax, qword [rsp + 0xf8]
mov qword [r12], rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov r12, 0xfffffffffffff000
and r12, qword [rbp + 0x10]
mov qword [rsi], r12
test r12, r12
jne 0x1800326de
jmp 0x180036032
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rax, rsi
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, rsi
xor eax, eax
cmp rsi, rbp
setb al
cmova eax, r8d
cmp eax, 0xffffffff
jne 0x180037848
test rdx, rdx
je 0x180037b00
mov rsi, qword [rdx]
test rsi, rsi
je 0x180037b00
mov rax, qword [rsi + 8]
test al, 1
jne 0x180037843
mov rcx, qword [rsi]
test rcx, rcx
je 0x18003786b
test byte [rcx + 8], 1
je 0x18003786b
mov r11, rdx
jmp 0x180037804
test eax, eax
jne 0x1800378c4
test rdx, rdx
mov rsi, rdi
je 0x1800379cf
mov rcx, qword [rdx + 8]
mov rax, r11
cmp rcx, 1
jbe 0x1800379c4
jmp 0x1800378d9
or rax, 1
mov qword [rsi + 8], rax
mov rax, qword [rdx + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
je 0x180037c68
mov rsi, qword [rcx]
test rsi, rsi
je 0x18003789a
mov r10, qword [rsi + 8]
test r10b, 1
jne 0x180037a23
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rsi, rcx
cmp qword [r11], rdx
jne 0x1800377ef
mov qword [r11], rsi
jmp 0x180037804
test rdx, rdx
je 0x180037c7c
mov rsi, rdi
mov rcx, qword [rdx + 8]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x38], rax
mov rdi, rsi
mov rsi, rcx
and rsi, 0xfffffffffffffffe
je 0x1800378fc
mov rax, qword [rsi]
test rax, rax
je 0x1800378fc
test byte [rax + 8], 1
jne 0x180037843
mov r10, qword [rdx]
test r10, r10
je 0x180037c7c
mov rsi, qword [r10 + 8]
test sil, 1
je 0x180037a9c
mov qword [rsp + 0x48], r12
and rsi, 0xfffffffffffffffe
je 0x180037c75
mov r12, qword [rsi]
test r12, r12
je 0x180037939
test byte [r12 + 8], 1
jne 0x180037b66
and ecx, 1
or rcx, rsi
mov qword [r10 + 8], rcx
or byte [rsi + 8], 1
mov rsi, qword [rdx]
test rsi, rsi
je 0x1800377cf
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
mov r10, qword [rdx + 8]
mov rcx, r10
and rcx, 0xfffffffffffffffe
mov r12, qword [rsp + 0x48]
je 0x1800377b6
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and r10d, 1
or r10, rax
mov qword [rdx + 8], r10
mov qword [rcx], rdx
mov rax, qword [rsi + 8]
and eax, 1
or rax, rcx
mov qword [rsi + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x180037ae3
mov qword [r11], rsi
mov rdx, r11
jmp 0x180037843
mov r9, qword [rdx]
test r9, r9
jne 0x1800379ea
xor r9d, r9d
cmp qword [r11], rdx
jne 0x180037a85
mov qword [r11], r9
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x30]
jmp 0x180037787
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
or byte [rdx + 8], 1
and qword [r9 + 8], 1
jmp 0x1800379cf
and r10, 0xfffffffffffffffe
mov qword [rcx], r10
mov rax, qword [rsi + 8]
and eax, 1
or rax, rcx
mov qword [rsi + 8], rax
and rsi, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rsi]
mov qword [rdx + 8], rcx
test rsi, rsi
je 0x1800377b6
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rsi], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180037a7c
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180037c17
mov qword [rdx + 8], rax
jmp 0x1800378b3
and r9, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, r9
mov qword [r11 + 8], rax
jmp 0x1800379db
or rsi, 1
mov qword [r10 + 8], rsi
mov rax, qword [r10]
test rax, rax
je 0x180037ab9
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180037bab
mov rax, qword [rdx + 8]
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rsi], rdx
jmp 0x1800379b0
mov rax, rsi
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x180037843
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x1800377d6
cmp qword [rax], rbp
mov rsi, rdi
jne 0x180037c4e
mov qword [rax], rdx
test rdx, rdx
je 0x1800377b6
mov rax, qword [rbp]
mov qword [rdx], rax
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x180037c95
mov qword [r11], 0
jmp 0x1800379db
and ecx, 1
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rsi + 8], rax
and byte [r12 + 8], 0xfe
mov rax, qword [r10 + 8]
mov rsi, rax
and rsi, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rsi]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [r10 + 8], rax
mov qword [rsi], r10
mov qword [rdx], rsi
jmp 0x180037953
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rsi, qword [rdx]
test rsi, rsi
je 0x1800377cf
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov r10, qword [rax]
and r10, 0xfffffffffffffffe
and ecx, 1
or rcx, r10
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rsi + 8]
and ecx, 1
or rcx, rax
mov qword [rsi + 8], rcx
jmp 0x1800379b0
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800377b6
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rsi], rax
jmp 0x1800378b3
mov rdi, rdx
and rdi, 0xfffffffffffffffe
mov rcx, qword [rax + 8]
and ecx, 1
or rcx, rdi
mov qword [rax + 8], rcx
jmp 0x180037b1d
or rax, 1
mov qword [rdx + 8], rax
jmp 0x1800377b6
and ecx, 1
mov qword [r10 + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
and qword [r11 + 8], 1
jmp 0x1800379db
mov rcx, rdi
and rcx, 0xfffffffffffffffe
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rcx
mov qword [r11 + 8], rdx
mov rdx, rdi
nop word [rax + rax]
xor ecx, ecx
cmp rdx, rbp
setb cl
cmova ecx, r8d
cmp ecx, 0xffffffff
jne 0x180037d05
test rdx, rdx
je 0x180037fb8
mov rbx, qword [rdx]
test rbx, rbx
je 0x180037fb8
mov rcx, qword [rbx + 8]
test cl, 1
jne 0x180037cfd
mov rdi, qword [rbx]
test rdi, rdi
je 0x180037d25
test byte [rdi + 8], 1
je 0x180037d25
mov r11, rdx
mov rdx, rbx
jmp 0x180037cc0
test ecx, ecx
jne 0x180037d87
test rdx, rdx
je 0x180037e8e
mov rdi, qword [rdx + 8]
mov rax, r11
cmp rdi, 1
jbe 0x180037e83
jmp 0x180037d99
or rcx, 1
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x180038127
mov rax, rsi
mov rdi, qword [rbx]
test rdi, rdi
je 0x180037d57
mov rsi, qword [rdi + 8]
test sil, 1
jne 0x180037ed8
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rbx]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
mov rdi, rbx
mov rsi, rax
cmp qword [r11], rdx
jne 0x180037c9f
mov qword [r11], rdi
mov rdx, rdi
jmp 0x180037cc0
test rdx, rdx
je 0x180037c7c
mov rdi, qword [rdx + 8]
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
mov rbx, rdi
and rbx, 0xfffffffffffffffe
je 0x180037db9
mov rcx, qword [rbx]
test rcx, rcx
je 0x180037db9
test byte [rcx + 8], 1
jne 0x180037cfd
mov rax, r9
mov r9, qword [rdx]
test r9, r9
je 0x180037c7c
mov rbx, qword [r9 + 8]
test bl, 1
je 0x180037f51
and rbx, 0xfffffffffffffffe
je 0x180038134
mov rcx, qword [rbx]
test rcx, rcx
mov qword [rsp + 0x68], rsi
je 0x180037df6
test byte [rcx + 8], 1
jne 0x18003801b
and edi, 1
or rdi, rbx
mov qword [r9 + 8], rdi
or byte [rbx + 8], 1
mov rbx, qword [rdx]
test rbx, rbx
je 0x1800377cf
mov rcx, qword [rbx + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdi, qword [rbx + 8]
and edi, 1
or rdi, rcx
mov qword [rbx + 8], rdi
mov rcx, qword [rdx + 8]
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r9, rax
je 0x1800377b6
mov rsi, qword [rdi]
and rsi, 0xfffffffffffffffe
and ecx, 1
or rcx, rsi
mov qword [rdx + 8], rcx
mov qword [rdi], rdx
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rdi
mov qword [rbx + 8], rcx
or byte [rdx + 8], 1
mov rsi, qword [rsp + 0x68]
cmp qword [r11], rdx
jne 0x180037f9b
mov qword [r11], rbx
mov rdx, r11
jmp 0x180037cfd
mov r10, qword [rdx]
test r10, r10
jne 0x180037e9f
xor r10d, r10d
cmp qword [r11], rdx
jne 0x180037f3a
mov qword [r11], r10
jmp 0x180037759
mov rcx, qword [r10 + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbx, qword [r10 + 8]
and ebx, 1
or rbx, rcx
mov qword [r10 + 8], rbx
mov rbx, qword [rdx + 8]
and ebx, 1
or rbx, rcx
mov qword [r10 + 8], rbx
or byte [rdx + 8], 1
and qword [r10 + 8], 1
jmp 0x180037e8e
and rsi, 0xfffffffffffffffe
mov qword [rbx], rsi
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rbx
mov qword [rdi + 8], rcx
and rdi, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rbx, [rcx + rdi]
mov qword [rdx + 8], rbx
test rdi, rdi
je 0x1800377b6
mov rbx, qword [rdi]
and rbx, 0xfffffffffffffffe
or rbx, rcx
mov qword [rdx + 8], rbx
mov qword [rdi], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x180037f31
mov rbx, qword [rcx + 8]
test bl, 1
jne 0x1800380d3
mov qword [rdx + 8], rcx
jmp 0x180037d70
and r10, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, r10
mov qword [r11 + 8], rcx
jmp 0x180037759
or rbx, 1
mov qword [r9 + 8], rbx
mov rcx, qword [r9]
test rcx, rcx
je 0x180037f6e
mov rbx, qword [rcx + 8]
test bl, 1
jne 0x18003805e
mov rcx, qword [rdx + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x1800377b6
mov r9, rax
mov rdi, qword [rbx]
and rdi, 0xfffffffffffffffe
and ecx, 1
or rcx, rdi
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
jmp 0x180037e6f
mov rcx, rbx
and rcx, 0xfffffffffffffffe
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rcx
mov qword [r11 + 8], rdx
mov rdx, r11
jmp 0x180037cfd
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x1800377d6
cmp qword [rax], rbp
jne 0x18003810d
mov qword [rax], rdx
test rdx, rdx
je 0x1800377b6
mov rcx, qword [rbp]
mov qword [rdx], rcx
mov rcx, qword [rbp + 8]
and rcx, 0xfffffffffffffffe
mov rbx, qword [rdx + 8]
and ebx, 1
or rbx, rcx
mov qword [rdx + 8], rbx
mov rbx, qword [rbp + 8]
and ebx, 1
or rbx, rcx
mov qword [rdx + 8], rbx
cmp qword [r11], rdx
jne 0x180038140
mov qword [r11], 0
jmp 0x180037759
and edi, 1
mov rsi, qword [rbx + 8]
and rsi, 0xfffffffffffffffe
or rsi, rdi
mov qword [rbx + 8], rsi
and byte [rcx + 8], 0xfe
mov rcx, qword [r9 + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x1800377b6
mov rdi, qword [rbx]
and rdi, 0xfffffffffffffffe
and ecx, 1
or rcx, rdi
mov qword [r9 + 8], rcx
mov qword [rbx], r9
mov qword [rdx], rbx
jmp 0x180037e10
and rbx, 0xfffffffffffffffe
mov qword [rcx + 8], rbx
mov rbx, qword [rdx]
test rbx, rbx
je 0x1800377cf
mov rcx, qword [rbx + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdi, qword [rbx + 8]
and edi, 1
or rdi, rcx
mov qword [rbx + 8], rdi
mov rdi, qword [rdx + 8]
mov rcx, rdi
and rcx, 0xfffffffffffffffe
je 0x1800377b6
mov r9, rax
mov rax, rsi
mov rsi, qword [rcx]
and rsi, 0xfffffffffffffffe
and edi, 1
or rdi, rsi
mov qword [rdx + 8], rdi
mov qword [rcx], rdx
mov rdi, qword [rbx + 8]
and edi, 1
or rdi, rcx
mov qword [rbx + 8], rdi
mov rsi, rax
jmp 0x180037e6f
and rbx, 0xfffffffffffffffe
mov qword [rcx + 8], rbx
mov rbx, qword [rdx + 8]
mov rcx, rbx
or rcx, 1
mov qword [rdx + 8], rcx
and rbx, 0xfffffffffffffffe
je 0x1800377b6
mov rsi, rax
mov rcx, qword [rbx]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
mov qword [rdi], rbx
jmp 0x180037d73
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbx, qword [rax + 8]
and ebx, 1
or rbx, rcx
mov qword [rax + 8], rbx
jmp 0x180037fd2
or rcx, 1
mov qword [rdx + 8], rcx
jmp 0x1800377b6
and edi, 1
mov qword [r9 + 8], rdi
jmp 0x180037c7c
and qword [r11 + 8], 1
jmp 0x180037759