Function at 0x180047240
Capabilities:
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
mov rdi, rdx
mov rax, qword [str.LoadLibraryA]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov eax, dword [0x1800a6698]
test eax, eax
je 0x18004916c
mov rbx, rcx
lea rcx, [0x1800a66a0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rsi, qword [0x1800a66e0]
test rsi, rsi
je 0x180049153
mov eax, 0xffffffff
xor ecx, ecx
cmp qword [rsi + 0x10], rbx
setb cl
cmova ecx, eax
cmp ecx, 0xffffffff
jne 0x1800472c0
mov rsi, qword [rsi]
test rsi, rsi
jne 0x18004729b
jmp 0x180049153
test ecx, ecx
jne 0x1800474ed
lea rcx, [0x1800a66a0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x1800a6698]
test eax, eax
je 0x180048ed0
test rdi, rdi
je 0x180049173
test rsi, rsi
je 0x18004917d
cmp rdi, 0xf00
ja 0x1800475c8
cmp rdi, 8
jbe 0x180047632
cmp rdi, 0x1f1
jae 0x18004744c
add rdi, 0xf
mov r15, rdi
and r15, 0xfffffffffffffff0
shr rdi, 4
dec rdi
lea r12, [rdi + rdi*2]
shl r12, 4
lea rdi, [rsi + r12]
add rdi, 0x98
cmp byte [rsi + 0x70], 0
je 0x18004734f
cmp qword [rsi + 0x78], 0
je 0x180048e64
lea r13, [rsi + 0x18]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r14, qword [rdi]
test r14, r14
je 0x18004746a
cmp dword [r14 + 0xc], 0
je 0x18004746a
mov eax, dword [r14 + 8]
mov edx, dword [r14 + rax*4 + 0x10]
test edx, edx
je 0x1800474fa
mov rbp, qword [rsi + 0x78]
test rbp, rbp
jne 0x180047400
bsf ebp, edx
mov edi, eax
shl edi, 5
or edi, ebp
mov ecx, dword [rsi + r12 + 0xb8]
imul rdi, qword [rsi + r12 + 0xa8]
add rcx, r14
add rdi, rcx
btc edx, ebp
mov dword [r14 + rax*4 + 0x10], edx
dec dword [r14 + 0xc]
test rdi, rdi
je 0x1800488bb
add qword [rsi + 0x50], r15
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rdi, rdi
je 0x1800488c4
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.18004bde0
mov rax, rdi
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rbx, qword [rbp]
mov rcx, qword [rbp + 8]
mov qword [rbp], rcx
mov rdi, rbx
shl rdi, 0x17
xor rdi, rbx
mov rbx, rcx
shr rbx, 0x1a
xor rbx, rcx
xor rbx, rdi
shr rdi, 0x11
xor rbx, rdi
mov qword [rbp + 8], rbx
add ecx, ebx
mov ebp, edx
ror ebp, cl
test ebp, ebp
je 0x180047445
bsf ebp, ebp
add ebp, ecx
and ebp, 0x1f
jmp 0x180047390
mov ebp, 0x20
jmp 0x18004743b
add rdi, 0xff
mov r15d, edi
and r15d, 0x1f00
shr rdi, 8
add rdi, 0x1d
jmp 0x18004732b
mov rdx, qword [rsi + r12 + 0xa0]
test rdx, rdx
mov qword [rsp + 0x68], rdi
je 0x180047744
lea r14, [rsi + r12]
add r14, 0xa0
mov rax, rdx
nop
mov rdi, rax
mov rax, qword [rax]
test rax, rax
jne 0x180047490
mov qword [rsp + 0xb8], rdx
mov qword [rsp + 0xc0], 0
xor ecx, ecx
cmp rdx, rdi
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x180047680
mov rbx, qword [rdx]
test rbx, rbx
je 0x18004913a
mov rax, qword [rbx + 8]
test al, 1
je 0x18004755a
xor r9d, r9d
mov r8d, 0xffffffff
xor r10d, r10d
jmp 0x18004956d
mov rsi, qword [rsi + 8]
and rsi, 0xfffffffffffffffe
jmp 0x1800472af
mov ecx, dword [rsi + r12 + 0xb4]
mov edi, eax
shl edi, 5
inc eax
cmp eax, ecx
jae 0x1800491db
mov r8d, eax
mov ebp, dword [r14 + r8*4 + 0x10]
add edi, 0x20
test ebp, ebp
je 0x180047507
mov rdx, qword [rsi + 0x78]
test rdx, rdx
jne 0x1800475eb
bsf edx, ebp
or edi, edx
mov ecx, dword [rsi + r12 + 0xb8]
add rcx, r14
imul rdi, qword [rsi + r12 + 0xa8]
add rdi, rcx
btc ebp, edx
mov dword [r14 + r8*4 + 0x10], ebp
mov dword [r14 + 8], eax
jmp 0x1800473b6
mov rcx, qword [rbx]
test rcx, rcx
je 0x18004756c
test byte [rcx + 8], 1
jne 0x1800474dc
or rax, 1
mov qword [rbx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004997e
mov rbx, qword [rax]
test rbx, rbx
je 0x18004759b
mov rbp, qword [rbx + 8]
test bpl, 1
jne 0x1800479df
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rbx, rax
and byte [rbx + 8], 0xfe
lea rdx, [rsp + 0xb8]
mov qword [rdx], rbx
jmp 0x1800474dc
cmp rdi, 0xfc000
ja 0x180048aee
mov rcx, rsi
mov rdx, rdi
xor r8d, r8d
call fcn.180038150
mov rdi, rax
jmp 0x1800473d0
mov r9, qword [rdx]
mov rcx, qword [rdx + 8]
mov qword [rdx], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov rbx, rcx
shr rbx, 0x1a
xor rbx, rcx
xor rbx, r10
shr r10, 0x11
xor rbx, r10
mov qword [rdx + 8], rbx
add ecx, ebx
mov edx, ebp
ror edx, cl
test edx, edx
je 0x1800476ab
bsf edx, edx
add edx, ecx
and edx, 0x1f
jmp 0x180047530
cmp rdi, 2
jb 0x1800479d8
mov ecx, 0x40
mov eax, 0x40
dec rdi
je 0x180047653
bsr rax, rdi
xor rax, 0x3f
sub rcx, rax
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov r15d, 0x10
cmovae r15, rax
mov rax, r15
shr rax, 4
or rax, 1
bsr rdi, rax
jmp 0x18004732b
test eax, eax
jne 0x1800476b5
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x1800488eb
mov rax, qword [rdx]
test rax, rax
jne 0x1800489e8
mov qword [rsp + 0xb8], rax
jmp 0x1800494a9
mov edx, 0x20
jmp 0x180047628
mov rax, qword [rdx + 8]
xor r9d, r9d
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x1800476d7
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800476d7
test byte [rcx + 8], 1
jne 0x1800474df
mov rcx, qword [rdx]
test rcx, rcx
je 0x1800491ef
test byte [rcx + 8], 1
jne 0x1800482bf
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18004770b
mov rbp, qword [rax + 8]
test bpl, 1
jne 0x18004850d
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rbx, rax
and rbx, 0xfffffffffffffffe
je 0x1800494db
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbx], rdx
lea rdx, [rsp + 0xb8]
mov qword [rdx], rbx
jmp 0x1800474df
movzx ebx, byte [rsi + r12 + 0xc2]
lea r11, [rsi + 0x90]
mov rcx, qword [rsi + 0x90]
test rcx, rcx
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x38], rbx
je 0x180048366
mov r10, rbx
mov rdx, rbx
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov rbx, rdi
mov rbp, qword [rcx + 0x10]
and rbp, r8
xor edi, edi
cmp rdx, rbp
seta dil
cmovb edi, r9d
lea ebp, [rdi + 1]
cmp ebp, 2
jae 0x1800477b6
mov rax, rcx
mov rcx, qword [rcx]
mov rdi, rbx
test rcx, rcx
jne 0x180047787
jmp 0x1800477c9
cmp edi, 1
jne 0x1800491e4
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x1800477ac
test rax, rax
mov rbx, r10
je 0x180048366
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, rdx
and r14, 0xfffffffffffffff0
shl r14, 8
add r14, rcx
mov r10, r11
mov r9, r14
and r9, 0xfffffffffff00000
mov rax, qword [r9 + 0x18]
mov qword [rsp + 0x90], rax
mov eax, r14d
shr eax, 0xc
movzx ecx, al
lea rax, [rcx*8]
lea rax, [rax + rax*2]
or rax, r9
mov qword [rsp + 0x30], rax
mov r8, qword [rax + 0x30]
test rbx, rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x60], r8
je 0x180047a41
cmp rbx, 2
mov edx, 1
cmovae rdx, rbx
lea rax, [rcx + rcx*2]
lea rdi, [r9 + rax*8]
add rdi, 0x30
mov al, 1
mov dword [rsp + 0x2c], eax
xor ebp, ebp
lea r11, [rcx + rbp]
lea rax, [r11 + r11*2]
test byte [r9 + rax*8 + 0x30], 0x60
jne 0x1800478a1
inc rbp
cmp rbp, rbx
setb al
mov dword [rsp + 0x2c], eax
add rdi, 0x18
cmp rbp, rdx
jne 0x180047876
jmp 0x180047a49
mov qword [rsp + 0x48], r11
mov r11, rbx
cmp rbp, rbx
jae 0x1800486a7
mov rax, rdi
xor ebx, ebx
mov rcx, qword [rax]
test cl, 0x60
je 0x1800478d9
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
lea rcx, [rbx + rbp]
inc rcx
inc rbx
add rax, 0x18
cmp rcx, r11
jb 0x1800478b7
mov rcx, rbx
shl rcx, 0xc
mov qword [rsp + 0x88], rdx
je 0x18004835e
mov rax, qword [rsp + 0x48]
shl rax, 0xc
add rax, r9
mov r8d, eax
and r8d, 0xff000
mov edx, 0x100000
sub rdx, r8
cmp rdx, rcx
cmovae rdx, rcx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x58], rcx
mov rcx, rax
mov qword [rsp + 0x48], rax
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x180049216
mov r8, qword [rsp + 0x48]
mov rax, qword [rsp + 0x70]
add r8, rax
mov rcx, qword [rsp + 0x58]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
mov rax, r8
jne 0x180047913
mov r8b, 1
mov r9, qword [rsp + 0x20]
mov r11, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
test rbx, rbx
je 0x1800479b1
test r8b, r8b
mov ecx, 0x20
mov eax, 4
cmovne rcx, rax
lea rax, [rbx*8]
lea rdx, [rax + rax*2]
xor eax, eax
or qword [rdi + rax], rcx
add rax, 0x18
cmp rdx, rax
jne 0x1800479a4
test r8b, r8b
mov rcx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x88]
je 0x180047da0
add qword [rsi + 0x48], rbx
mov rbx, r11
jmp 0x180047886
xor ecx, ecx
jmp 0x180047656
and rbp, 0xfffffffffffffffe
mov qword [rax], rbp
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
and rbx, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rbx]
mov qword [rdx + 8], rcx
test rbx, rbx
je 0x1800494db
mov rcx, qword [rbx]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180047a38
mov rcx, qword [rax + 8]
test cl, 1
jne 0x1800485da
mov qword [rdx + 8], rax
jmp 0x1800475b4
mov dword [rsp + 0x2c], 0
mov rax, qword [rsp + 0x30]
lea rcx, [rax + 0x20]
mov qword [rsp + 0x48], rcx
add rax, 0x30
mov rdx, qword [r10]
mov qword [rsp + 0xb8], rdx
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0x30], rax
mov rbp, qword [rax]
mov rcx, 0xfffffffffffff000
mov rax, rbp
and rax, rcx
and rcx, qword [rdx + 0x10]
xor edi, edi
cmp rax, rcx
seta dil
mov ecx, 0xffffffff
cmovae ecx, edi
test ecx, ecx
je 0x1800482de
cmp ecx, 0xffffffff
jne 0x18004801b
mov rdi, qword [rdx]
test rdi, rdi
je 0x18004913a
mov rax, qword [rdi + 8]
test al, 1
mov r10, qword [rsp + 0x38]
je 0x1800480c0
xor eax, eax
mov qword [rsp + 0x58], rax
mov r9, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r11, rdx
mov rdx, rdi
mov rax, qword [rsp + 0x30]
mov rbp, qword [rax]
mov rax, rbp
and rax, r9
mov rdi, qword [rdi + 0x10]
and rdi, r9
xor ecx, ecx
cmp rax, rdi
seta cl
cmovb ecx, r8d
test ecx, ecx
je 0x180047b3a
cmp ecx, 0xffffffff
jne 0x180047b57
mov rdi, qword [rdx]
test rdi, rdi
je 0x18004862d
mov rcx, qword [rdi + 8]
test cl, 1
jne 0x180047ade
mov rax, qword [rdi]
test rax, rax
je 0x180047c56
test byte [rax + 8], 1
jne 0x180047ade
jmp 0x180047c56
test bpl, 0x10
mov eax, 0
cmove rax, qword [rsp + 0x48]
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x180047b0e
mov cl, al
jmp 0x180047b09
test ecx, ecx
je 0x180047c3f
mov rbp, qword [rdx + 8]
mov rdi, rbp
and rdi, 0xfffffffffffffffe
je 0x180047b7e
mov rax, qword [rdi]
test rax, rax
je 0x180047b7e
test byte [rax + 8], 1
jne 0x180047ade
mov rcx, qword [rdx]
test rcx, rcx
je 0x18004913a
mov rdi, qword [rcx + 8]
test dil, 1
je 0x180048316
and rdi, 0xfffffffffffffffe
je 0x180049133
mov r10, qword [rdi]
test r10, r10
je 0x180047bb5
test byte [r10 + 8], 1
jne 0x1800489a4
and ebp, 1
or rbp, rdi
mov qword [rcx + 8], rbp
or byte [rdi + 8], 1
mov rdi, qword [rdx]
test rdi, rdi
je 0x1800494f4
mov rax, qword [rdi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rax
mov qword [rdi + 8], rcx
mov rbp, qword [rdx + 8]
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x38]
je 0x1800494db
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and ebp, 1
or rbp, rax
mov qword [rdx + 8], rbp
mov qword [rcx], rdx
mov rax, qword [rdi + 8]
and eax, 1
or rax, rcx
mov qword [rdi + 8], rax
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18004849c
mov qword [r11], rdi
mov rdx, r11
jmp 0x180047ade
mov rbp, qword [rdx + 8]
mov rax, r11
mov qword [rsp + 0x58], r11
cmp rbp, 1
jbe 0x180047cad
jmp 0x180047b63
or rcx, 1
mov qword [rdi + 8], rcx
mov rbp, qword [rdx + 8]
mov rcx, rbp
and rcx, 0xfffffffffffffffe
je 0x180049126
mov rdi, qword [rcx]
test rdi, rdi
je 0x180047c83
mov rax, qword [rdi + 8]
test al, 1
jne 0x180048579
or rbp, 1
mov qword [rdx + 8], rbp
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov rdi, rcx
cmp qword [r11], rdx
jne 0x1800491fc
mov qword [r11], rdi
jmp 0x180047ae1
mov rcx, qword [rdx]
test rcx, rcx
je 0x180047cec
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rbp, qword [rcx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
or byte [rdx + 8], 1
and qword [rcx + 8], 1
cmp qword [r11], rdx
mov r9, qword [rsp + 0x20]
mov r8, qword [rsp + 0x60]
jne 0x1800482ff
mov qword [r11], rcx
mov r10, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
shr r8, 0xc
mov rax, qword [rsp + 0xb8]
mov qword [r10], rax
xorps xmm0, xmm0
mov rax, qword [rsp + 0x48]
movups xmmword [rax], xmm0
mov rdx, qword [rsp + 0x38]
cmp r8, rdx
jne 0x180047ddd
test dl, dl
je 0x180047d8a
mov rax, r14
or rax, 1
cmp rdx, 2
mov rbp, rcx
mov ecx, 1
cmovae rcx, rdx
shl rcx, 3
lea rcx, [rcx + rcx*2]
lea rdx, [rbp*2]
add rdx, rbp
lea rdx, [r9 + rdx*8]
add rdx, 0x30
xor ebp, ebp
test byte [rdx + rbp], 8
je 0x180047d7d
dec qword [r9 + 0x18]
dec qword [rsi + 0x80]
mov qword [rdx + rbp], rax
add rbp, 0x18
cmp rcx, rbp
jne 0x180047d6c
cmp qword [r9 + 0x18], 0
jne 0x180047da0
cmp qword [rsp + 0x90], 0
jne 0x18004819b
test byte [rsp + 0x2c], 1
mov rdi, qword [rsp + 0x68]
jne 0x1800488b4
test r14, r14
je 0x1800488b4
cmp qword [rdi], r14
je 0x1800494c5
mov qword [r14], rdi
xor eax, eax
cmp dword [rsi + r12 + 0xb4], 1
jne 0x18004812e
xor edx, edx
jmp 0x180048150
mov rax, rcx
add rcx, r8
sub r8, rdx
shl r8, 0xc
add rax, rdx
lea rax, [rax + rax*2]
lea r11, [r9 + rax*8]
add r11, 0x20
mov edx, 0xfff
mov rbp, qword [r11 + 0x10]
and rbp, rdx
or rbp, r8
mov qword [r11 + 0x10], rbp
lea rcx, [rcx + rcx*2]
and rdx, qword [r9 + rcx*8 + 0x18]
or rdx, r8
mov qword [r9 + rcx*8 + 0x18], rdx
mov rcx, qword [r10]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xc0], 0
test rcx, rcx
je 0x180048611
lea rax, [r9 + rax*8]
add rax, 0x30
mov qword [rsp + 0x30], rax
lea rdi, [rsp + 0xb8]
xor r9d, r9d
mov r10, r9
mov r9, rdi
mov rdi, qword [rcx]
test rdi, rdi
je 0x180047e7a
mov rax, qword [rdi + 8]
test al, 1
je 0x180047e7a
mov r8, qword [rdi]
test r8, r8
je 0x180047e7a
test byte [r8 + 8], 1
jne 0x180047eec
mov rdi, rcx
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov rdx, rax
mov rcx, 0xfffffffffffff000
and rdx, rcx
mov rbp, qword [rdi + 0x10]
and rbp, rcx
xor ecx, ecx
cmp rdx, rbp
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
cmp ecx, 0xffffffff
jne 0x180047ec0
mov rcx, qword [rdi]
mov eax, 0xffffffff
test rcx, rcx
jne 0x180047e55
jmp 0x180047fcc
test ecx, ecx
jne 0x180047ee5
test al, 0x10
mov ecx, 0
cmove rcx, r11
xor eax, eax
cmp rcx, rdi
seta cl
jb 0x180047eae
mov al, cl
mov rcx, qword [rdi + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180047eb6
mov eax, 1
jmp 0x180047edb
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rbp, rcx
and rbp, 0xfffffffffffffffe
mov rax, qword [rdi]
mov rdx, qword [rdi + 8]
and edx, 1
or rdx, rbp
mov qword [rdi + 8], rdx
test rax, rax
je 0x18004913a
and byte [rax + 8], 0xfe
cmp qword [r9], rcx
jne 0x180047f25
mov qword [r9], rdi
jmp 0x180047e7d
and rdi, 0xfffffffffffffffe
mov rax, qword [r9 + 8]
and eax, 1
lea rcx, [rax + rdi]
mov qword [r9 + 8], rcx
test rdi, rdi
je 0x1800494db
mov rcx, qword [rdi]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [r9 + 8], rcx
mov qword [rdi], r9
mov rax, qword [r9 + 8]
and eax, 1
mov rcx, qword [rdi + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdi + 8], rcx
or byte [r9 + 8], 1
test r10, r10
je 0x1800494fb
cmp qword [r10], r9
je 0x180048989
jmp 0x180048991
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov rdx, rax
mov rcx, 0xfffffffffffff000
and rdx, rcx
mov rbp, qword [rdi + 0x10]
and rbp, rcx
xor ecx, ecx
cmp rdx, rbp
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x180048723
jmp 0x180048a2b
mov r9, rdi
test rcx, rcx
jne 0x180047e5b
mov r9, r10
mov qword [r11], 0
mov qword [r11 + 8], 1
cmp eax, 1
je 0x180048272
mov qword [rdi], r11
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x18004913a
mov rdx, rcx
and byte [rax + 8], 0xfe
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov r9, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x50]
jmp 0x180047d34
test ecx, ecx
je 0x1800484b9
mov rax, qword [rdx + 8]
xor ebp, ebp
mov rdi, rax
and rdi, 0xfffffffffffffffe
mov r10, qword [rsp + 0x38]
mov qword [rsp + 0x58], rbp
je 0x18004804e
mov rcx, qword [rdi]
test rcx, rcx
je 0x18004804e
test byte [rcx + 8], 1
jne 0x180047ad1
mov rcx, qword [rdx]
test rcx, rcx
je 0x1800491ef
test byte [rcx + 8], 1
jne 0x180048a95
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x180048082
mov rbp, qword [rax + 8]
test bpl, 1
jne 0x180048c52
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov rdi, rax
and rdi, 0xfffffffffffffffe
je 0x1800494db
mov rcx, qword [rdi]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rdi], rdx
lea rdx, [rsp + 0xb8]
mov qword [rdx], rdi
mov r10, qword [rsp + 0x38]
jmp 0x180047ad1
mov rcx, qword [rdi]
test rcx, rcx
je 0x1800480d2
test byte [rcx + 8], 1
jne 0x180047aca
or rax, 1
mov qword [rdi + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004997e
mov rdi, qword [rax]
test rdi, rdi
je 0x180048101
mov rbp, qword [rdi + 8]
test bpl, 1
jne 0x180048bb0
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rdi, rax
and byte [rdi + 8], 0xfe
lea rdx, [rsp + 0xb8]
mov qword [rdx], rdi
jmp 0x180047aca
lea rcx, [rsi + r12]
add rcx, 0xb4
xor edx, edx
mov dword [r14 + rdx*4 + 0x10], 0xffffffff
inc rdx
mov ebp, dword [rcx]
dec ebp
cmp rdx, rbp
jb 0x18004813b
mov ebp, dword [rsi + r12 + 0xb0]
and ebp, 0x1f
mov ecx, ebp
neg cl
mov edi, 0xffffffff
shr edi, cl
cmp ebp, 1
sbb eax, eax
or eax, edi
mov dword [r14 + rdx*4 + 0x10], eax
mov dword [r14 + 8], 0
mov eax, dword [rsi + r12 + 0xb0]
mov dword [r14 + 0xc], eax
inc dword [rsi + r12 + 0xbc]
mov rax, qword [rsp + 0x68]
mov qword [rax], r14
jmp 0x180047373
mov rbp, qword [rsi + 0x60]
mov qword [rsp + 0xc0], rbp
mov qword [rsp + 0xc8], 0
xor ecx, ecx
cmp rbp, r9
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
test eax, eax
je 0x1800486ae
cmp eax, 0xffffffff
je 0x18004873e
test rbp, rbp
mov r10d, dword [rsp + 0x2c]
je 0x18004913a
mov rcx, qword [rbp + 0x10]
xor r8d, r8d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180048205
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180048205
test byte [rdx + 0x10], 1
jne 0x180048766
mov dword [rsp + 0x2c], r10d
mov rax, qword [rbp + 8]
test rax, rax
je 0x1800492f7
mov rdi, r8
test byte [rax + 0x10], 1
jne 0x180048b21
or rcx, 1
mov qword [rbp + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180048242
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x180048d16
or byte [rax + 0x10], 1
mov rcx, qword [rbp + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800494db
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [rbp + 0x10], rcx
mov qword [rax + 8], rbp
jmp 0x180048b37
mov rax, qword [rdi + 8]
and eax, 1
mov rcx, rax
or rcx, r11
mov qword [rdi + 8], rcx
mov rcx, qword [r11]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdi + 8], rcx
mov qword [r11], rdi
mov rax, qword [rdi + 8]
and eax, 1
mov rcx, qword [r11 + 8]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [r11 + 8], rcx
or byte [rdi + 8], 1
cmp qword [r9], rdi
jne 0x1800484e5
mov qword [r9], r11
jmp 0x180047fe7
lea rbp, [rsp + 0x98]
mov rcx, rbp
mov rbx, r9
call fcn.180001ff0
mov r9, rbx
mov rbx, qword [rbp]
jmp 0x180047734
xor eax, eax
test bpl, 0x10
cmove rax, qword [rsp + 0x48]
xor ecx, ecx
cmp rax, rdx
seta al
jb 0x180047aad
mov cl, al
jmp 0x180047aa4
and rcx, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, rcx
mov qword [r11 + 8], rax
jmp 0x180047d02
or rdi, 1
mov qword [rcx + 8], rdi
mov rcx, qword [rcx]
test rcx, rcx
je 0x180048334
mov rbp, qword [rcx + 8]
test bpl, 1
jne 0x18004891d
mov rcx, qword [rdx + 8]
mov rdi, rcx
and rdi, 0xfffffffffffffffe
je 0x1800494db
mov rax, qword [rdi]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rdi], rdx
jmp 0x180047c2b
mov r8b, 1
jmp 0x180047980
mov rdx, qword [rsi + 0x68]
test rdx, rdx
jne 0x1800488f8
lea r9, [rsp + 0xb8]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.18004c4f0
test rax, rax
je 0x1800488b4
mov r14, rax
cmp byte [rsp + 0xb8], 0
mov ecx, 0x40
mov eax, 0x24
cmove rax, rcx
add qword [rsi + 0x40], 0x100000
mov qword [r14], rsi
xor ecx, ecx
mov qword [r14 + 0x18], rcx
mov qword [r14 + 0x30], rcx
mov qword [r14 + 0x48], rcx
mov qword [r14 + 0x60], 0x20
lea rcx, [rax + 0xfc000]
mov qword [r14 + 0x78], rcx
mov edx, 0xf0
mov qword [r14 + rdx - 0x60], rax
mov qword [r14 + rdx - 0x48], rax
mov qword [r14 + rdx - 0x30], rax
mov qword [r14 + rdx - 0x18], rax
mov qword [r14 + rdx], rax
add rdx, 0x78
cmp rdx, 0x1860
jne 0x1800483e0
mov qword [r14 + 0x1800], rcx
mov qword [r14 + 0x1818], 0x20
lea rcx, [r14 + 0x2000]
mov eax, ecx
and eax, 0xfffff
mov edi, 0x100000
sub rdi, rax
mov ebp, 0xfe000
cmp rdi, rbp
cmovae rdi, rbp
mov rbx, rcx
mov rdx, rdi
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x1800492b7
mov rcx, rbx
add rcx, rdi
sub rbp, rdi
mov eax, 0x100000
cmp rbp, rax
mov edi, 0x100000
cmovb rdi, rbp
test rbp, rbp
jne 0x180048439
add qword [rsi + 0x48], 3
lea rdx, [r14 + 0x68]
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
call fcn.18004c020
mov r11, rdi
add r14, 0x3000
mov rbx, qword [rsp + 0x38]
jmp 0x180047803
mov rax, rdi
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x180047ade
mov rax, qword [rdx + 8]
cmp rax, 1
mov rcx, qword [rsp + 0x50]
ja 0x180048cbe
mov rax, qword [rdx]
test rax, rax
jne 0x180048aad
mov qword [rsp + 0xb8], rax
jmp 0x180047d0c
mov rax, qword [r9 + 8]
mov rcx, rax
and rcx, 0xfffffffffffffffe
cmp rdi, rcx
mov rcx, qword [rsp + 0x38]
jne 0x180047fec
and eax, 1
or rax, r11
mov qword [r9 + 8], rax
jmp 0x180047fec
and rbp, 0xfffffffffffffffe
mov qword [rax + 8], rbp
mov rbx, qword [rdx]
test rbx, rbx
je 0x1800494f4
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800494db
mov rbp, qword [rax]
and rbp, 0xfffffffffffffffe
and ecx, 1
or rcx, rbp
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
jmp 0x180047734
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, qword [rdi + 8]
and eax, 1
or rax, rcx
mov qword [rdi + 8], rax
and rdi, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rax, [rcx + rdi]
mov qword [rdx + 8], rax
test rdi, rdi
je 0x1800494db
mov rax, qword [rdi]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rdi], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x1800485d1
mov rax, qword [rcx + 8]
test al, 1
jne 0x180048c18
mov qword [rdx + 8], rcx
jmp 0x180047c9c
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800494db
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rbx], rax
jmp 0x1800475b4
mov qword [r11], 0
mov qword [r11 + 8], 1
lea rdi, [rsp + 0xb8]
jmp 0x180047fe4
mov rbp, qword [rsp + 0x58]
test rbp, rbp
je 0x1800494fb
mov rax, qword [rsp + 0x48]
cmp qword [rbp], rax
jne 0x180048b07
mov qword [rbp], rdx
mov rbp, qword [rsp + 0x48]
mov rax, qword [rbp]
mov qword [rdx], rax
mov rax, qword [rbp + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x1800492ed
mov qword [r11], 0
mov r9, qword [rsp + 0x20]
mov r10, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
jmp 0x180047d0c
xor ebx, ebx
jmp 0x1800479cc
mov ebx, dword [rsp + 0x2c]
test rbp, rbp
je 0x180048a51
mov rcx, qword [rbp + 0x10]
cmp rcx, 1
ja 0x180048d92
mov rax, qword [rbp + 8]
test rax, rax
je 0x180048a51
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rbp + 0x10], 1
and qword [rax + 0x10], 1
mov qword [rsp + 0xc0], rax
mov r10d, ebx
mov r9, qword [rsp + 0x20]
jmp 0x180048889
mov eax, 1
cmp ecx, 0xffffffff
je 0x180048a44
mov rcx, qword [rdi + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180047fbd
test rbp, rbp
je 0x180048a6b
mov rax, qword [rbp + 8]
test rax, rax
je 0x180048a6b
test byte [rax + 0x10], 1
je 0x180048a58
xor r8d, r8d
mov r10d, dword [rsp + 0x2c]
mov r11d, 0xffffffff
xor edx, edx
lea rcx, [rsp + 0xa8]
mov rdi, rbp
mov rbp, rax
xor eax, eax
cmp rbp, r9
setb al
cmova eax, r11d
test eax, eax
je 0x1800487af
cmp eax, 0xffffffff
jne 0x1800487c7
test rbp, rbp
je 0x180048da7
mov rax, qword [rbp + 8]
test rax, rax
je 0x180048da7
test byte [rax + 0x10], 1
jne 0x180048776
jmp 0x1800487f6
test rbp, rbp
je 0x18004887f
mov rax, qword [rbp + 0x10]
mov r8, rdi
cmp rax, 1
jbe 0x18004883a
jmp 0x1800487d4
test rbp, rbp
je 0x180048b5c
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
je 0x180048b5c
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x180048b5c
test byte [rbx + 0x10], 1
jne 0x180048776
jmp 0x180048b5c
mov qword [rsp + 0x30], r8
mov ebx, r10d
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180048ccb
test byte [rcx + 0x10], 1
je 0x180048ccb
mov rdi, rbp
mov r10d, ebx
mov r9, qword [rsp + 0x20]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov r11d, 0xffffffff
lea rcx, [rsp + 0xa8]
jmp 0x180048779
mov rdx, qword [rbp + 8]
test rdx, rdx
je 0x180048a24
mov rax, qword [rdx + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rbp + 8], rax
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
or byte [rbp + 0x10], 1
and qword [rdx + 0x10], 1
cmp qword [rdi + 8], rbp
jne 0x1800488d7
mov qword [rdi + 8], rdx
mov rax, qword [rsp + 0xc0]
mov qword [rsi + 0x60], rax
test r9, r9
mov rdi, qword [rsp + 0x68]
je 0x1800494db
xorps xmm0, xmm0
movups xmmword [r9 + 8], xmm0
test r10b, r10b
je 0x180047db9
mov qword [rdi], 0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
xor edi, edi
jmp 0x1800473d9
and rdx, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rdx
mov qword [rdi + 0x10], rax
jmp 0x180048889
lea r9, [rsp + 0xb8]
jmp 0x1800476bc
mov qword [rsi + 0x68], 0
lea r14, [rdx + 0x3000]
add rdx, 0x68
mov rcx, r11
call fcn.18004c020
mov r11, qword [rsp + 0x40]
jmp 0x180048492
and rbp, 0xfffffffffffffffe
mov qword [rcx + 8], rbp
mov rdi, qword [rdx]
test rdi, rdi
je 0x1800494f4
mov rax, qword [rdi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rax
mov qword [rdi + 8], rcx
mov rbp, qword [rdx + 8]
mov rcx, rbp
and rcx, 0xfffffffffffffffe
je 0x1800494db
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and ebp, 1
or rbp, rax
mov qword [rdx + 8], rbp
mov qword [rcx], rdx
mov rax, qword [rdi + 8]
and eax, 1
or rax, rcx
mov qword [rdi + 8], rax
jmp 0x180047c2b
mov qword [r10], rdi
jmp 0x180047f84
mov rax, qword [r10 + 8]
and eax, 1
or rax, rdi
mov qword [r10 + 8], rax
jmp 0x180047f84
and ebp, 1
mov rax, qword [rdi + 8]
and rax, 0xfffffffffffffffe
or rax, rbp
mov qword [rdi + 8], rax
and byte [r10 + 8], 0xfe
mov rbp, qword [rcx + 8]
mov rdi, rbp
and rdi, 0xfffffffffffffffe
je 0x1800494db
mov rax, qword [rdi]
and rax, 0xfffffffffffffffe
and ebp, 1
or rbp, rax
mov qword [rcx + 8], rbp
mov qword [rdi], rcx
mov qword [rdx], rdi
jmp 0x180047bcf
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbp, qword [rax + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18004769e
xor edx, edx
jmp 0x18004887f
test al, 0x10
mov ecx, 0
cmove rcx, r11
xor eax, eax
cmp rcx, rdi
seta cl
jae 0x180048b55
mov rcx, qword [rdi]
mov eax, 0xffffffff
jmp 0x180047fbd
xor eax, eax
jmp 0x18004870e
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180048a6b
test byte [rcx + 0x10], 1
jne 0x18004875e
lea rdi, [rsp + 0x98]
mov rcx, rdi
mov rdx, rbp
call fcn.180003330
mov rax, qword [rdi]
test rax, rax
je 0x18004913a
and byte [rax + 0x10], 0xfe
xor edi, edi
jmp 0x180048b37
lea rdi, [rsp + 0x98]
mov rcx, rdi
call fcn.180025190
mov rdi, qword [rdi]
jmp 0x1800480ab
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rbp, qword [rax + 8]
and ebp, 1
or rbp, rcx
mov qword [rax + 8], rbp
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, rcx
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rbp
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x1800484d8
mov r8d, 0x100000
mov rcx, rsi
mov rdx, rdi
xor r9d, r9d
call fcn.180004060
jmp 0x1800475e3
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 8]
and ecx, 1
or rcx, rax
mov qword [rbp + 8], rcx
jmp 0x18004864e
lea rbx, [rsp + 0x98]
mov rcx, rbx
mov rdx, rbp
call fcn.180029970
mov rax, qword [rbx]
lea rbp, [rsp + 0xb8]
mov qword [rbp + 8], rax
mov r10d, dword [rsp + 0x2c]
mov r9, qword [rsp + 0x20]
mov r8, rdi
jmp 0x180048766
mov al, cl
jmp 0x180048731
mov qword [rsp + 0x30], r8
mov ebx, r10d
mov rdx, rbp
call fcn.180029970
mov rax, qword [rsp + 0xa8]
cmp qword [rdi + 8], rbp
je 0x180048d86
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rbp, rdi
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
mov r10d, ebx
mov r9, qword [rsp + 0x20]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov r11d, 0xffffffff
jmp 0x18004876e
and rbp, 0xfffffffffffffffe
mov qword [rax], rbp
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rax
mov qword [rdi + 8], rcx
and rdi, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + rdi]
mov qword [rdx + 8], rcx
test rdi, rdi
je 0x1800494db
mov r9, r10
mov rcx, qword [rdi]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rdi], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180048c0c
mov rcx, qword [rax + 8]
test cl, 1
jne 0x180048e2a
mov qword [rdx + 8], rax
mov r10, r9
jmp 0x18004811a
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
or rax, 1
mov qword [rdx + 8], rax
and rcx, 0xfffffffffffffffe
je 0x1800494db
mov rbp, r10
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov qword [rdi], rcx
jmp 0x180047c9c
and rbp, 0xfffffffffffffffe
mov qword [rax + 8], rbp
mov rdi, qword [rdx]
test rdi, rdi
je 0x1800494f4
mov rax, qword [rdi + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rax
mov qword [rdi + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800494db
mov rbp, qword [rax]
and rbp, 0xfffffffffffffffe
and ecx, 1
or rcx, rbp
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rax
mov qword [rdi + 8], rcx
jmp 0x1800480ab
lea rbp, [rsp + 0xb8]
jmp 0x180048029
lea rcx, [rsp + 0xb0]
mov rdx, rbp
call fcn.180003330
mov rax, qword [rsp + 0xb0]
cmp qword [rdi + 8], rbp
jne 0x180049304
mov qword [rdi + 8], rax
mov rbp, rax
mov r10d, ebx
mov r9, qword [rsp + 0x20]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov r11d, 0xffffffff
lea rcx, [rsp + 0xa8]
jmp 0x18004877c
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [rbp + 8]
test rax, rax
je 0x18004931e
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x1800494db
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rbp + 0x10], rdx
mov qword [rcx + 8], rbp
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x180048b37
mov rbp, rdi
mov qword [rdi + 8], rax
jmp 0x180048b96
lea r8, [rsp + 0xb8]
mov r10d, ebx
mov r9, qword [rsp + 0x20]
jmp 0x1800481e9
test r8, r8
je 0x18004932b
mov ebx, r10d
mov rcx, r8
mov rax, qword [rsp + 0x20]
cmp qword [r8 + 8], rax
jne 0x180049109
mov qword [rcx + 8], rbp
cmp qword [rsp + 0x20], 0
je 0x18004934b
test rbp, rbp
je 0x1800494db
mov rdx, qword [rsp + 0x20]
mov rax, qword [rdx + 8]
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [rbp + 0x10]
and eax, 1
or rax, rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rdx + 0x10]
and ecx, 1
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rbp + 0x10], rax
cmp qword [rdi + 8], rbp
jne 0x18004936e
mov qword [rdi + 8], 0
jmp 0x180048716
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x1800494db
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [rdi], rax
mov r10, r9
jmp 0x18004811a
mov rbx, rdi
mov byte [rsi + 0x70], 0
lea rcx, [rsp + 0xb8]
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
lea rdi, [rsp + 0x98]
mov rcx, rdi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
mov ecx, 0x10
call fcn.180002210
xor ecx, ecx
cmp byte [rdi + 8], 0
mov edx, 0
je 0x180048ea7
mov rdx, qword [rsp + 0x98]
cmp byte [rsp + 0xc0], 0
je 0x180048eb9
mov rcx, qword [rsp + 0xb8]
mov qword [rax], rcx
mov qword [rax + 8], rdx
mov qword [rsi + 0x78], rax
mov byte [rsi + 0x70], 1
mov rdi, rbx
jmp 0x18004734f
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov eax, dword [0x1800a6698]
test eax, eax
jne 0x1800490f7
mov eax, dword [0x1800a66f8]
mov ecx, dword [0x1800a64f4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x180048f48
lea rcx, [0x1800a66f8]
call fcn.18004a800
cmp dword [0x1800a66f8], 0xffffffff
jne 0x180048f48
lea rbx, [rsp + 0xb8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800a66f0], rax
lea rcx, [0x1800a66f8]
call fcn.18004a7a0
mov eax, 0x1000
xor edx, edx
div qword [0x1800a66f0]
test rdx, rdx
jne 0x1800493a6
lea rcx, str.MALLOC_OPTIONS
lea rbx, [0x1800a6700]
mov rdx, rbx
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor ebp, ebp
test eax, eax
cmovne rbp, rbx
je 0x180048fcf
mov al, byte [rbp]
test al, al
je 0x180048fcf
xor r15d, r15d
movsx eax, al
add eax, 0xffffffd0
mov ebx, 1
cmp eax, 9
jbe 0x1800493fc
mov r12d, r15d
mov al, byte [rbp + r12]
movsx ecx, al
cmp ecx, 0x72
jne 0x180049378
mov byte [0x1800a6588], 1
dec ebx
jne 0x180048fa7
inc r15d
mov al, byte [rbp + r15]
test al, al
jne 0x180048f90
mov qword [0x1800a6658], 0
lea rcx, [0x1800a6660]
mov rbx, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rbx
xor ebp, ebp
mov qword [0x1800a6690], rbp
mov qword [0x1800a6688], rbp
lea rcx, [0x1800a6590]
mov edx, 0x1388
call rbx
mov qword [0x1800a65b8], rbp
mov qword [0x1800a65c0], rbp
mov qword [0x1800a65c8], rbp
lea rcx, [0x1800a6600]
mov edx, 0x1388
call rbx
mov qword [0x1800a6650], rbp
mov qword [0x1800a6640], rbp
xorps xmm0, xmm0
movups xmmword [0x1800a66d8], xmm0
lea rcx, [0x1800a66a0]
mov dword [rsp + 0xc0], 0
mov rax, qword [0x1800a6038]
mov qword [rsp + 0xb8], rax
mov edx, 0x1388
call rbx
test eax, eax
je 0x1800493d2
lea rdx, [rsp + 0xb8]
xor ecx, ecx
call fcn.18003dfc0
mov qword [0x1800a66c8], rax
test rax, rax
je 0x1800493ea
mov ecx, dword [0x1800a64f4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 8], rax
lea rcx, [0x1800a65d0]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.180002210
test rax, rax
je 0x1800493df
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800a65f8], rax
mov eax, 1
xchg dword [0x1800a6698], eax
call fcn.180002410
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x1800472e3
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rdx, rcx
mov rcx, qword [rcx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
jmp 0x180048dc9
or rbp, 1
mov qword [rdx + 8], rbp
jmp 0x1800494db
and ebp, 1
mov qword [rcx + 8], rbp
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT_result_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
xor esi, esi
jmp 0x1800472d5
mov edi, 1
jmp 0x1800472ec
cmp rdi, 0x1f1
jb 0x180049192
mov rsi, qword [0x1800a66c8]
jmp 0x1800472f5
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 8]
test rsi, rsi
jne 0x180047302
mov rsi, qword [0x1800a66c8]
mov eax, dword [0x1800a64f4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 8], rsi
jmp 0x180047302
dec dword [r14 + 0xc]
jmp 0x1800488bb
mov rax, rcx
mov rbx, r10
jmp 0x1800477d5
or rax, 1
mov qword [rdx + 8], rax
jmp 0x18004913a
mov rax, rdi
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x180047ae1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18004922c
cmp eax, 8
jne 0x1800492af
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0x78], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x80], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0x80], 0
jne 0x1800492d0
cmp eax, 0x5af
je 0x180049291
cmp eax, 8
jne 0x1800492af
xor r8d, r8d
dec qword [rsp + 0x78]
mov r9, qword [rsp + 0x20]
mov r11, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
jne 0x180049245
jmp 0x180047980
xor r8d, r8d
jmp 0x180047971
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
cmp eax, 0x5af
je 0x1800492e0
cmp eax, 8
jne 0x180047940
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180047940
and qword [r11 + 8], 1
jmp 0x18004868e
or rcx, 1
mov qword [rbp + 0x10], rcx
jmp 0x18004913a
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x180048cf1
mov qword [rbp + 8], 0
jmp 0x1800494fb
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rbp, rbp
je 0x1800494db
mov qword [rbp + 8], 0
mov rax, qword [rbp + 0x10]
and eax, 1
mov qword [rbp + 0x10], rax
xor ecx, ecx
jmp 0x180048e08
and qword [rdi + 0x10], 1
jmp 0x180048716
cmp ecx, 0x46
jne 0x180049422
mov rax, qword [0x1800a6038]
test rax, rax
je 0x180049444
add rax, rax
je 0x180048fbf
mov qword [0x1800a6038], rax
jmp 0x180048fbf
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180051bf0
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov qword [0x1800a66c8], 0
jmp 0x1800493ea
mov qword [0x1800a65f8], 0
lea rcx, [0x1800a66e8]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x1800488c4
xor ebx, ebx
lea ecx, [rbx + rbx*4]
lea ebx, [rax + rcx*2]
inc r15d
movsx eax, byte [rbp + r15]
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x1800493fe
test ebx, ebx
je 0x180048fc3
jmp 0x180048fa4
cmp ecx, 0x52
jne 0x180049433
mov byte [0x1800a6588], 0
jmp 0x180048fbf
cmp ecx, 0x66
jne 0x180049454
shr qword [0x1800a6038], 1
jmp 0x180048fbf
mov qword [0x1800a6038], 1
jmp 0x180048fbf
lea r14, [rsp + 0xb8]
mov byte [r14], al
mov byte [r14 + 1], 0
lea rdx, str._jemalloc_
mov r13, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call r13
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call r13
lea rdx, [0x18009ab44]
mov rcx, r14
call fcn.180051bf0
jmp 0x180048fbf
mov rax, qword [rsp + 0xb8]
mov qword [r14], rax
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov r14, 0xfffffffffffff000
and r14, qword [rdi + 0x10]
mov rax, qword [rsp + 0x68]
mov qword [rax], r14
test r14, r14
jne 0x180047373
jmp 0x1800488bb
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, rbp
nop dword [rax]
xor ecx, ecx
cmp rdx, rdi
setb cl
cmova ecx, r8d
cmp ecx, 0xffffffff
jne 0x180049575
test rdx, rdx
je 0x180049818
mov rbx, qword [rdx]
test rbx, rbx
je 0x180049818
mov rcx, qword [rbx + 8]
test cl, 1
jne 0x18004956d
mov rax, qword [rbx]
test rax, rax
je 0x180049595
test byte [rax + 8], 1
je 0x180049595
mov r11, rdx
mov rdx, rbx
jmp 0x180049530
test ecx, ecx
jne 0x1800495ef
test rdx, rdx
je 0x1800496ee
mov rbp, qword [rdx + 8]
mov r9, r11
cmp rbp, 1
jbe 0x1800496e3
jmp 0x1800495fc
or rcx, 1
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x18004997e
mov rbp, qword [rbx]
test rbp, rbp
je 0x1800495c2
mov rax, qword [rbp + 8]
test al, 1
jne 0x180049738
or rcx, 1
mov qword [rdx + 8], rcx
mov rax, qword [rbx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rbx], rdx
mov rbp, rbx
cmp qword [r11], rdx
jne 0x180049514
mov qword [r11], rbp
mov rdx, rbp
jmp 0x180049530
test rdx, rdx
je 0x18004913a
mov rbp, qword [rdx + 8]
mov rbx, rbp
and rbx, 0xfffffffffffffffe
je 0x180049617
mov rax, qword [rbx]
test rax, rax
je 0x180049617
test byte [rax + 8], 1
jne 0x18004956d
mov qword [rsp + 0x30], r14
mov r14, r9
mov r9, qword [rdx]
test r9, r9
je 0x18004913a
mov rbx, qword [r9 + 8]
test bl, 1
je 0x1800497b2
and rbx, 0xfffffffffffffffe
je 0x18004998b
mov rcx, qword [rbx]
test rcx, rcx
je 0x180049654
test byte [rcx + 8], 1
jne 0x180049875
and ebp, 1
or rbp, rbx
mov qword [r9 + 8], rbp
or byte [rbx + 8], 1
mov rbx, qword [rdx]
test rbx, rbx
je 0x1800494f4
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
mov rcx, qword [rdx + 8]
mov rbp, rcx
and rbp, 0xfffffffffffffffe
mov r9, r14
je 0x1800494db
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbp], rdx
mov rax, qword [rbx + 8]
and eax, 1
or rax, rbp
mov qword [rbx + 8], rax
or byte [rdx + 8], 1
mov r14, qword [rsp + 0x30]
cmp qword [r11], rdx
jne 0x1800497fb
mov qword [r11], rbx
mov rdx, r11
jmp 0x18004956d
mov r10, qword [rdx]
test r10, r10
jne 0x1800496ff
xor r10d, r10d
cmp qword [r11], rdx
jne 0x18004979b
mov qword [r11], r10
jmp 0x1800494a9
mov rax, qword [r10 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r10 + 8]
and ecx, 1
or rcx, rax
mov qword [r10 + 8], rcx
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [r10 + 8], rcx
or byte [rdx + 8], 1
and qword [r10 + 8], 1
jmp 0x1800496ee
and rax, 0xfffffffffffffffe
mov qword [rbx], rax
mov rax, qword [rbp + 8]
and eax, 1
or rax, rbx
mov qword [rbp + 8], rax
and rbp, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea rax, [rcx + rbp]
mov qword [rdx + 8], rax
test rbp, rbp
je 0x1800494db
mov rax, qword [rbp]
and rax, 0xfffffffffffffffe
or rax, rcx
mov qword [rdx + 8], rax
mov qword [rbp], rdx
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
je 0x180049792
mov rax, qword [rcx + 8]
test al, 1
jne 0x18004992c
mov qword [rdx + 8], rcx
jmp 0x1800495db
and r10, 0xfffffffffffffffe
mov rax, qword [r11 + 8]
and eax, 1
or rax, r10
mov qword [r11 + 8], rax
jmp 0x1800494a9
or rbx, 1
mov qword [r9 + 8], rbx
mov rcx, qword [r9]
test rcx, rcx
je 0x1800497ce
mov rax, qword [rcx + 8]
test al, 1
jne 0x1800498b8
mov rcx, qword [rdx + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x1800494db
mov r9, r14
mov rax, qword [rbx]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [rbx], rdx
jmp 0x1800496ca
mov rax, rbx
and rax, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
mov rdx, r11
jmp 0x18004956d
test r9, r9
je 0x1800494fb
cmp qword [r9], rdi
jne 0x180049964
mov qword [r9], rdx
test rdx, rdx
je 0x1800494db
mov rax, qword [rdi]
mov qword [rdx], rax
mov rax, qword [rdi + 8]
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rax
mov qword [rdx + 8], rcx
cmp qword [r11], rdx
jne 0x180049997
mov qword [r11], 0
jmp 0x1800494a9
and ebp, 1
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
or rax, rbp
mov qword [rbx + 8], rax
and byte [rcx + 8], 0xfe
mov rcx, qword [r9 + 8]
mov rbx, rcx
and rbx, 0xfffffffffffffffe
je 0x1800494db
mov rax, qword [rbx]
and rax, 0xfffffffffffffffe
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov qword [rbx], r9
mov qword [rdx], rbx
jmp 0x18004966e
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rbx, qword [rdx]
test rbx, rbx
je 0x1800494f4
mov r9, r14
mov rax, qword [rbx + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rax
mov qword [rbx + 8], rcx
mov rbp, qword [rdx + 8]
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov r14, qword [rsp + 0x30]
je 0x1800494db
mov rax, qword [rcx]
and rax, 0xfffffffffffffffe
and ebp, 1
or rbp, rax
mov qword [rdx + 8], rbp
mov qword [rcx], rdx
mov rax, qword [rbx + 8]
and eax, 1
or rax, rcx
mov qword [rbx + 8], rax
jmp 0x1800496cf
and rax, 0xfffffffffffffffe
mov qword [rcx + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
or rax, 1
mov qword [rdx + 8], rax
and rcx, 0xfffffffffffffffe
je 0x1800494db
mov rax, qword [rcx]
or rax, 1
mov qword [rdx + 8], rax
mov qword [rcx], rdx
mov qword [rbp], rcx
jmp 0x1800495db
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x18004982d
or rcx, 1
mov qword [rdx + 8], rcx
jmp 0x1800494db
and ebp, 1
mov qword [r9 + 8], rbp
jmp 0x18004913a
and qword [r11 + 8], 1
jmp 0x1800494a9