Function at 0x18006a4f0
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x438
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x3a0], xmm8
movdqa xmmword [rbp + 0x390], xmm7
movaps xmmword [rbp + 0x380], xmm6
and rsp, 0xffffffffffffff80
mov r15, rdx
mov qword [rsp + 0x90], rcx
mov rsi, qword [rdx + 0x10]
test rsi, rsi
jne 0x18006a878
lea rdx, str.RAYON_NUM_THREADSRAYON_RS_NUM_CPUS
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1800f4960
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x18006a72c
mov r8, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
mov r9, qword [rsp + 0x190]
test al, al
jne 0x18006a61c
test r9, r9
je 0x18006a62a
lea rdx, [r8 + r9]
mov r11, r8
jmp 0x18006a5b8
add r11, 2
cmp r10, rdx
cmovne r10, r11
nop word cs:[rax + rax]
mov r11, r10
cmp r10, rdx
je 0x18006a61c
lea r10, [r11 + 1]
movzx ebx, byte [r11]
test bl, bl
jns 0x18006a5b0
cmp bl, 0xe0
jb 0x18006a59a
cmp bl, 0xed
jne 0x18006a5f0
cmp r10, rdx
je 0x18006a61c
lea r10, [r11 + 2]
cmp r10, rdx
je 0x18006a61c
cmp byte [r11 + 1], 0x9f
ja 0x18006a714
add r11, 3
mov r10, r11
jmp 0x18006a5b0
add r11, 2
cmp r10, rdx
cmove r11, r10
xor r10d, r10d
cmp r11, rdx
setne r10b
add r10, r11
cmp bl, 0xf0
jb 0x18006a5b0
xor r11d, r11d
cmp r10, rdx
setne r11b
add r10, r11
jmp 0x18006a5b0
test r8, r8
je 0x18006a72c
test r9, r9
jne 0x18006a657
xor edi, edi
test rcx, rcx
je 0x18006a640
mov rcx, qword [0x1801fd960]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test dil, dil
je 0x18006a72c
test rsi, rsi
je 0x18006a83b
jmp 0x18006a878
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x18006a670
cmp eax, 0x2b
jne 0x18006a67b
dec r9
je 0x18006a62a
lea r10, [r8 + 1]
jmp 0x18006a67e
mov r10, r8
cmp r9, 1
je 0x18006a62a
jmp 0x18006a67e
mov r10, r8
cmp r9, 0x10
jbe 0x18006a6d2
xor r11d, r11d
mov edi, 0xa
xor esi, esi
nop
cmp r9, r11
je 0x18006a703
movzx r14d, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add r14d, 0xffffffd0
cmp r14d, 0xa
cmovb ebx, r14d
jae 0x18006a62a
test dl, dl
jne 0x18006a62a
mov rsi, rax
mov eax, ebx
inc r11
mov ebx, r14d
add rsi, rax
jae 0x18006a690
jmp 0x18006a62a
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x18006a62a
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x18006a6e0
mov dil, 1
test rcx, rcx
jne 0x18006a631
jmp 0x18006a640
cmp al, 2
je 0x18006a72c
test rcx, rcx
je 0x18006a72c
mov rcx, qword [0x1801fd960]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
lea rdx, [0x1801c05f1]
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1800f4960
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x18006a83b
mov r8, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
mov r9, qword [rsp + 0x190]
test al, al
jne 0x18006a80c
test r9, r9
je 0x18006a81a
lea rdx, [r8 + r9]
mov r11, r8
jmp 0x18006a7a8
add r11, 2
cmp r10, rdx
cmovne r10, r11
nop word cs:[rax + rax]
mov r11, r10
cmp r10, rdx
je 0x18006a80c
lea r10, [r11 + 1]
movzx ebx, byte [r11]
test bl, bl
jns 0x18006a7a0
cmp bl, 0xe0
jb 0x18006a788
cmp bl, 0xed
jne 0x18006a7e0
cmp r10, rdx
je 0x18006a80c
lea r10, [r11 + 2]
cmp r10, rdx
je 0x18006a80c
cmp byte [r11 + 1], 0x9f
ja 0x18006c1e4
add r11, 3
mov r10, r11
jmp 0x18006a7a0
add r11, 2
cmp r10, rdx
cmove r11, r10
xor r10d, r10d
cmp r11, rdx
setne r10b
add r10, r11
cmp bl, 0xf0
jb 0x18006a7a0
xor r11d, r11d
cmp r10, rdx
setne r11b
add r10, r11
jmp 0x18006a7a0
test r8, r8
je 0x18006a83b
test r9, r9
jne 0x18006c057
xor edi, edi
test rcx, rcx
je 0x18006a830
mov rcx, qword [0x1801fd960]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test rsi, rsi
setne al
test dil, al
jne 0x18006a878
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmmword [rsp + 0x180], xmm0
lea rcx, [rsp + 0x180]
call sub.kernel32.dll_GetSystemInfo
mov eax, dword [rsp + 0x1a0]
test eax, eax
mov esi, 1
cmovne esi, eax
cmp rsi, 0xffff
mov r13d, 0xffff
cmovb r13, rsi
mov qword [rsp + 0x98], r15
movzx r12d, byte [r15 + 0x59]
xorps xmm6, xmm6
movups xmmword [rsp + 0x188], xmm6
movups xmmword [rsp + 0x1a0], xmm6
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
lea rcx, [rsp + 0x180]
mov rdx, r13
call fcn.18016c650
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
sub rax, rdx
cmp rax, r13
jae 0x18006a8f9
lea rcx, [rsp + 0x198]
mov r8, r13
call fcn.18016c710
mov r15, qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x58], r13
jmp 0x18006a93c
mov rsi, qword [rsp + 0x198]
mov rax, rdi
shl rax, 4
mov qword [rsi + rax], rbx
mov byte [rsi + rax + 8], r14b
inc rdi
mov qword [rsp + 0x1a8], rdi
dec r13
je 0x18006ac27
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test r12b, r12b
je 0x18006aa60
test rax, rax
jne 0x18006a96e
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c21a
mov qword [0x1801fd960], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c21a
mov rsi, rax
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006a9b1
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c22b
mov qword [0x1801fd960], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c22b
mov rdi, rax
mov qword [rax], rsi
mov qword [rax + 8], 0x40
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006a9ff
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c209
mov qword [0x1801fd960], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c209
mov rcx, rax
and rcx, 0xffffffffffffff80
lea rbx, [rcx + 0x80]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
mov qword [rcx + 0x100], rdi
movaps xmmword [rcx + 0x180], xmm6
xor r14d, r14d
lock inc qword [rbx]
jg 0x18006ab66
jmp 0x18006be03
test rax, rax
jne 0x18006aa7b
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c21a
mov qword [0x1801fd960], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c21a
mov rsi, rax
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006aabe
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c22b
mov qword [0x1801fd960], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c22b
mov rdi, rax
mov qword [rax], rsi
mov qword [rax + 8], 0x40
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006ab0c
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c209
mov qword [0x1801fd960], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c209
mov rcx, rax
and rcx, 0xffffffffffffff80
lea rbx, [rcx + 0x80]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
mov qword [rcx + 0x100], rdi
movaps xmmword [rcx + 0x180], xmm6
mov r14b, 1
lock inc qword [rbx]
jle 0x18006be03
mov eax, dword [rsp + 0x110]
mov ecx, dword [rsp + 0x113]
mov dword [rsp + 0xab], ecx
mov dword [rsp + 0xa8], eax
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x18006aba9
lea rcx, [rsp + 0x180]
call fcn.180063830
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], rbx
mov qword [rax + rcx + 8], rsi
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], r14b
mov r8d, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0xab]
mov dword [rax + rcx + 0x19], r8d
mov dword [rax + rcx + 0x1c], r9d
inc rdx
mov qword [rsp + 0x190], rdx
mov rdi, qword [rsp + 0x1a8]
cmp rdi, qword [rsp + 0x1a0]
jne 0x18006a910
lea rcx, [rsp + 0x198]
mov rdx, rdi
call fcn.18005a000
mov rdi, qword [rsp + 0x1a8]
jmp 0x18006a910
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x80], rax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x188], xmm0
movdqu xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
lea rcx, [rsp + 0x180]
mov rbx, qword [rsp + 0x58]
mov rdx, rbx
call fcn.18016c650
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
sub rax, rdx
mov r14, rbx
cmp rax, rbx
jae 0x18006ad0e
lea rcx, [rsp + 0x198]
mov r14, qword [rsp + 0x58]
mov r8, r14
call fcn.18016c710
jmp 0x18006ad0e
mov r13, qword [rsp + 0x198]
mov rax, rbx
shl rax, 4
mov qword [r13 + rax], r12
mov byte [r13 + rax + 8], 0
inc rbx
mov qword [rsp + 0x1a8], rbx
dec r14
je 0x18006aef6
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006ad37
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c21a
mov qword [0x1801fd960], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006c21a
mov rbx, rax
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006ad7d
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c22b
mov qword [0x1801fd960], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006c22b
mov r13, rax
mov qword [rax], rbx
mov qword [rax + 8], 0x40
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006adce
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c209
mov qword [0x1801fd960], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006c209
mov r12, rax
and r12, 0xffffffffffffff80
mov qword [r12 + 0x78], rax
mov qword [r12 + 0x80], 1
mov qword [r12 + 0x88], 1
mov qword [r12 + 0x100], r13
pxor xmm0, xmm0
movdqa xmmword [r12 + 0x180], xmm0
lock inc qword [r12 + 0x80]
jle 0x18006be03
sub r12, 0xffffffffffffff80
mov eax, dword [rsp + 0x110]
mov ecx, dword [rsp + 0x113]
mov dword [rsp + 0xab], ecx
mov dword [rsp + 0xa8], eax
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x18006ae78
lea rcx, [rsp + 0x180]
call fcn.180063830
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], r12
mov qword [rax + rcx + 8], rbx
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], 0
mov r8d, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0xab]
mov dword [rax + rcx + 0x19], r8d
mov dword [rax + rcx + 0x1c], r9d
inc rdx
mov qword [rsp + 0x190], rdx
mov rbx, qword [rsp + 0x1a8]
cmp rbx, qword [rsp + 0x1a0]
jne 0x18006ace0
lea rcx, [rsp + 0x198]
mov rdx, rbx
call fcn.18005a000
mov rbx, qword [rsp + 0x1a8]
jmp 0x18006ace0
mov r14, qword [rsp + 0x1a0]
movdqu xmm0, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x350], xmm0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x360], rax
test rdi, rdi
mov qword [rsp + 0x60], r14
je 0x18006be07
movabs rax, 0x1c71c71c71c71c8
xor r12d, r12d
cmp rdi, rax
setb al
jae 0x18006be03
lea rcx, [rdi*8]
mov r12b, al
shl r12, 3
lea rax, [rcx + rcx*8]
mov r14, rax
test rax, rax
je 0x18006be28
movzx eax, byte [0x1801fd9d8]
mov rcx, qword [0x1801fd960]
test rcx, rcx
jne 0x18006af92
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006be34
mov rcx, rax
mov qword [0x1801fd960], rax
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006be34
mov r11, rdi
shl r11, 4
add r11, rsi
xor r12d, r12d
pxor xmm0, xmm0
mov qword [rsp + 0x50], rax
mov rcx, rax
mov rdx, rsi
nop word cs:[rax + rax]
mov r8, qword [rdx]
movzx r9d, byte [rdx + 8]
movdqu xmmword [rsp + 0x186], xmm0
mov word [rsp + 0x196], 0
movdqu xmmword [rsp + 0x116], xmm0
mov qword [rcx], 0
mov word [rcx + 8], 0
movups xmm1, xmmword [rsp + 0x180]
movups xmmword [rcx + 0xa], xmm1
mov r10, qword [rsp + 0x190]
mov qword [rcx + 0x1a], r10
movdqu xmm1, xmmword [rsp + 0x110]
movdqu xmmword [rcx + 0x22], xmm1
mov r10, qword [rsp + 0x11e]
mov qword [rcx + 0x30], r10
mov qword [rcx + 0x38], r8
mov byte [rcx + 0x40], r9b
inc r12
add rcx, 0x48
add rdx, 0x10
cmp rdx, r11
jne 0x18006afd0
cmp qword [rsp + 0x80], 0
je 0x18006b068
mov rcx, qword [0x1801fd960]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [rsp + 0x58]
shl rsi, 7
movzx eax, byte [0x1801fd9d8]
mov rcx, qword [0x1801fd960]
test rcx, rcx
jne 0x18006b09d
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c27c
mov rcx, rax
mov qword [0x1801fd960], rax
lea r8, [rsi + 0x80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006c27c
mov r14, rax
and r14, 0xffffffffffffff80
mov qword [r14 + 0x78], rax
sub r14, 0xffffffffffffff80
mov r8, qword [rsp + 0x58]
cmp r8, 1
jne 0x18006b0d3
xor ecx, ecx
jmp 0x18006b136
mov ecx, eax
and ecx, 0x7f
mov edx, r8d
and edx, 0xfffe
sub rax, rcx
add rax, 0x110
xor ecx, ecx
nop dword [rax]
mov qword [rax - 0x90], 0
mov word [rax - 0x88], 0
mov qword [rax - 0x80], 0
add rcx, 2
mov qword [rax - 0x10], 0
mov word [rax - 8], 0
mov qword [rax], 0
add rax, 0x100
cmp rdx, rcx
jne 0x18006b0f0
test r8b, 1
je 0x18006b153
shl rcx, 7
mov qword [r14 + rcx], 0
mov word [r14 + rcx + 8], 0
mov qword [r14 + rcx + 0x10], 0
movzx eax, byte [0x1801fd9d8]
mov rcx, qword [0x1801fd960]
test rcx, rcx
jne 0x18006b17f
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c28b
mov rcx, rax
mov qword [0x1801fd960], rax
mov r8d, 0x5f0
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006c28b
mov rsi, rax
mov r8d, 0x5f0
mov rcx, rax
xor edx, edx
call fcn.18015b1d0
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x127], rax
movaps xmm0, xmmword [rsp + 0x350]
movups xmmword [rsp + 0x117], xmm0
mov rax, qword [rsp + 0x98]
movups xmm6, xmmword [rax + 0x18]
movdqu xmm7, xmmword [rax + 0x38]
movups xmm8, xmmword [rax + 0x48]
mov qword [rax + 0x18], 0
mov qword [rax + 0x38], 0
mov qword [rax + 0x48], 0
movups xmm0, xmmword [rsp + 0x110]
mov rax, qword [rsp + 0x11f]
mov qword [rsp + 0x18f], rax
mov rax, qword [rsp + 0x127]
mov qword [rsp + 0x197], rax
movaps xmmword [rsp + 0x180], xmm0
movzx eax, byte [0x1801fd9d8]
mov rcx, qword [0x1801fd960]
test rcx, rcx
jne 0x18006b253
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c29c
mov rcx, rax
mov qword [0x1801fd960], rax
mov r8d, 0x300
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006c29c
mov rcx, rax
and rax, 0xffffffffffffff80
mov qword [rax + 0x78], rcx
mov qword [rax + 0x80], 1
mov qword [rax + 0x88], 1
mov qword [rax + 0x100], 0
mov qword [rax + 0x108], rsi
mov qword [rax + 0x180], 0
mov qword [rax + 0x188], rsi
movaps xmmword [rax + 0x200], xmm6
movdqa xmmword [rax + 0x210], xmm7
movaps xmmword [rax + 0x220], xmm8
mov qword [rax + 0x230], 0
mov byte [rax + 0x238], 0
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rax + 0x239], xmm0
movdqu xmm0, xmmword [rsp + 0x18f]
movdqu xmmword [rax + 0x248], xmm0
mov qword [rax + 0x258], 1
mov qword [rax + 0x260], r14
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x268], rcx
mov qword [rax + 0x270], rcx
mov qword [rax + 0x278], 0
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0x280], rcx
mov qword [rax + 0x288], rdi
mov qword [rax + 0x290], r12
mov r9, qword [rsp + 0x78]
mov qword [rsp + 0x3a0], r9
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x3a8], rcx
mov rdx, qword [rsp + 0x70]
mov rcx, rdx
shl rcx, 5
add rcx, r9
mov qword [rsp + 0x3b0], r9
mov qword [rsp + 0x320], rcx
mov qword [rsp + 0x3b8], rcx
mov qword [rsp + 0x3c0], r13
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x3c8], rcx
mov rcx, rax
add rax, 0x80
mov qword [rsp + 0x50], rax
shl rbx, 4
add rbx, r13
mov qword [rsp + 0x3d0], r13
mov qword [rsp + 0x3d8], rbx
xorps xmm6, xmm6
movups xmmword [rsp + 0x3e0], xmm6
movups xmmword [rsp + 0x3f0], xmm6
test rdx, rdx
je 0x18006be5c
lea rax, [rcx + 0x258]
mov qword [rsp + 0xa0], rax
add rcx, 0x260
mov qword [rsp + 0x310], rcx
xor edi, edi
movdqa xmm7, xmmword [0x1801747f0]
jmp 0x18006b42b
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r9, rax
cmp rax, qword [rsp + 0x320]
je 0x18006be5c
lea r8, [r9 + 0x20]
mov qword [rsp + 0x3b0], r8
movzx esi, byte [r9 + 0x18]
cmp sil, 2
je 0x18006be5c
mov rax, qword [r9 + 0x10]
mov qword [rsp + 0x190], rax
movups xmm0, xmmword [r9]
movaps xmmword [rsp + 0x180], xmm0
mov eax, dword [r9 + 0x19]
mov ecx, dword [r9 + 0x1c]
lea rdx, [rsp + 0x199]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
mov byte [rsp + 0x198], sil
cmp r13, rbx
je 0x18006be41
mov qword [rsp + 0x70], r8
lea rax, [r9 + 0x19]
lea rcx, [r13 + 0x10]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x3d0], rcx
mov r14, qword [r13]
movzx r12d, byte [r13 + 8]
mov rcx, qword [r9 + 0x10]
mov qword [rsp + 0x380], rcx
movups xmm0, xmmword [r9]
movaps xmmword [rsp + 0x370], xmm0
mov ecx, dword [rax]
mov eax, dword [rax + 3]
mov dword [rsp + 0x8b], eax
mov dword [rsp + 0x88], ecx
lea rax, [rdi + 1]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x3f8], rax
mov r13, qword [rsp + 0x98]
mov rdx, qword [r13 + 0x28]
test rdx, rdx
je 0x18006b510
mov rax, qword [r13 + 0x30]
lea rcx, [rsp + 0x180]
mov r8, rdi
call qword [rax + 0x20]
jmp 0x18006b51c
mov qword [rsp + 0x180], 0
mov r9, qword [r13]
mov r10, qword [r13 + 8]
mov rdx, qword [rsp + 0x50]
lock inc qword [rdx]
jle 0x18006be03
mov rax, qword [rsp + 0x190]
lea r8, [rsp + 0xf0]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [r8], xmm0
mov qword [rsp + 0xa8], r9
mov qword [rsp + 0xb0], r10
mov rax, qword [rsp + 0x380]
lea rcx, [rsp + 0xc8]
mov qword [rcx + 0x10], rax
movdqa xmm0, xmmword [rsp + 0x370]
movdqu xmmword [rcx], xmm0
mov byte [rsp + 0xe0], sil
mov eax, dword [rsp + 0x88]
mov ecx, dword [rsp + 0x8b]
mov dword [r8 - 0xc], ecx
mov dword [r8 - 0xf], eax
mov qword [rsp + 0xb8], r14
mov byte [rsp + 0xc0], r12b
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0x108], rdi
test rdi, rdi
je 0x18006b6b0
lea rcx, [rsp + 0xb8]
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movaps xmmword [rsp + 0x130], xmm2
movaps xmmword [rsp + 0x120], xmm1
movaps xmmword [rsp + 0x110], xmm0
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x78], rcx
test rcx, rcx
mov r14, qword [rsp + 0x340]
mov r12, qword [rsp + 0x348]
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x80], r10
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x330], rdx
je 0x18006b8b0
test rax, rax
mov r12, rax
je 0x18006b8b4
js 0x18006be03
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006b690
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c26d
mov qword [0x1801fd960], rax
mov rcx, rax
xor edx, edx
mov r8, r12
call r15
mov rsi, rax
test rax, rax
jne 0x18006b8b9
jmp 0x18006c26d
cmp byte [r13 + 0x58], 0
je 0x18006b5cb
mov eax, dword [0x1801fd9dc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x48], 0
jne 0x18006c07f
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x170], rax
movups xmm0, xmmword [rsp + 0xf8]
movaps xmmword [rsp + 0x160], xmm0
movups xmm0, xmmword [rsp + 0xe8]
movaps xmmword [rsp + 0x150], xmm0
movdqu xmm0, xmmword [rsp + 0xa8]
movdqu xmm1, xmmword [rsp + 0xb8]
movups xmm2, xmmword [rsp + 0xc8]
movups xmm3, xmmword [rsp + 0xd8]
movaps xmmword [rsp + 0x140], xmm3
movaps xmmword [rsp + 0x130], xmm2
movdqa xmmword [rsp + 0x120], xmm1
movdqa xmmword [rsp + 0x110], xmm0
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x110]
call fcn.180069690
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006b78e
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c209
mov qword [0x1801fd960], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c209
mov rsi, rax
and rsi, 0xffffffffffffff80
mov qword [rsi + 0x78], rax
sub rsi, 0xffffffffffffff80
mov r8d, 0x180
mov rcx, rsi
lea rdx, [rsp + 0x180]
call fcn.18015ab20
mov eax, dword [0x1801fd9dc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x48], 0
jne 0x18006be03
mov eax, dword [0x1801fd9dc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x48], rsi
mov rax, qword [rsp + 0x50]
cmp qword [rax + 0x210], 0
je 0x18006be03
mov rsi, qword [rax + 0x200]
mov rcx, rsi
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1801fd998]
movabs rcx, 0x8000000000000001
lea r14, [rcx - 2]
test rax, r14
jne 0x18006bd79
xor edi, edi
movzx eax, byte [rsi + 8]
test al, al
jne 0x18006be03
mov byte [rsi + 9], 1
lea rcx, [rsi + 0x10]
call qword [sym.imp.kernel32.dll_WakeAllConditionVariable]
test dil, dil
jne 0x18006b877
mov rax, qword [0x1801fd998]
test rax, r14
jne 0x18006bd92
mov rcx, rsi
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov r9, rax
cmp rax, qword [rsp + 0x320]
jne 0x18006b42b
jmp 0x18006be5c
xor esi, esi
jmp 0x18006b8de
mov esi, 1
mov rcx, rsi
mov rdx, qword [rsp + 0x78]
mov r8, r12
call fcn.18015ab20
mov qword [rsp + 0x318], r12
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x80]
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x1b0], rax
movdqa xmm0, xmmword [rsp + 0x110]
movdqa xmm1, xmmword [rsp + 0x120]
movaps xmm2, xmmword [rsp + 0x130]
movaps xmmword [rsp + 0x1a0], xmm2
movdqa xmmword [rsp + 0x190], xmm1
movdqa xmmword [rsp + 0x180], xmm0
test r9, r9
cmovne r14, r10
mov rax, r14
je 0x18006b9b0
test rsi, rsi
mov qword [rsp + 0x348], r12
mov qword [rsp + 0x328], rax
je 0x18006b9ce
cmp r12, 0xf
ja 0x18006bb10
test r12, r12
je 0x18006b972
xor ecx, ecx
nop dword [rax]
cmp byte [rsi + rcx], 0
je 0x18006be03
inc rcx
cmp r12, rcx
jne 0x18006b960
mov qword [rsp + 0x388], rsi
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], r12
lea rcx, [rsp + 0x388]
call fcn.18001efb0
mov r12, rax
mov rsi, rdx
jmp 0x18006b9d1
call fcn.1800f6ea0
test rsi, rsi
mov qword [rsp + 0x348], r12
mov qword [rsp + 0x328], rax
jne 0x18006b94b
xor r12d, r12d
mov qword [rsp + 0x340], r14
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006ba02
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c23c
mov qword [0x1801fd960], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c23c
mov r14, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], rsi
mov rax, qword [0x1801fd958]
nop word [rax + rax]
mov rcx, rax
inc rcx
je 0x18006be03
lock cmpxchg qword [0x1801fd958], rcx
jne 0x18006ba40
mov qword [r14 + 0x10], rcx
mov byte [r14 + 0x28], 0
lock inc qword [r14]
jle 0x18006be03
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006ba93
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c23c
mov qword [0x1801fd960], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c23c
mov rsi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmmword [rax + 0x10], xmm6
lock inc qword [rax]
jle 0x18006be03
movzx eax, byte [0x1801fd900]
test al, al
je 0x18006bbc0
mov byte [0x1801fd900], 1
mov eax, dword [0x1801fd9dc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x18006bb5c
lea rax, [rax + 0x90]
jmp 0x18006bb6a
lea r9, [rsi + 7]
and r9, 0xfffffffffffffff8
sub r9, rsi
je 0x18006bbfd
cmp r9, r12
cmovae r9, r12
test r9, r9
je 0x18006bbfd
xor ecx, ecx
nop word cs:[rax + rax]
cmp byte [rsi + rcx], 0
je 0x18006be03
inc rcx
cmp r9, rcx
jne 0x18006bb40
lea rcx, [r12 - 0x10]
jmp 0x18006bde3
call fcn.1800f6870
test rax, rax
je 0x18006be03
mov r12, qword [rax]
mov qword [rax], 0
test r12, r12
je 0x18006bbc0
lock inc qword [r12]
jle 0x18006be03
mov byte [0x1801fd900], 1
mov eax, dword [0x1801fd9dc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x18006bc0a
lea rax, [rax + 0x90]
jmp 0x18006bc18
movzx eax, byte [0x1801fd900]
test al, al
je 0x18006bbf8
mov byte [0x1801fd900], 1
mov eax, dword [0x1801fd9dc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x18006bc25
lea rax, [rax + 0x90]
jmp 0x18006bc33
xor r12d, r12d
jmp 0x18006bc50
lea rcx, [r12 - 0x10]
xor r9d, r9d
jmp 0x18006bdb0
call fcn.1800f6870
test rax, rax
je 0x18006c2ad
mov rcx, qword [rax]
mov qword [rax], r12
test rcx, rcx
jne 0x18006bc45
jmp 0x18006bc50
call fcn.1800f6870
test rax, rax
je 0x18006be03
mov rcx, qword [rax]
mov qword [rax], 0
xor r12d, r12d
test rcx, rcx
je 0x18006bc50
lock dec qword [rcx]
jne 0x18006bc50
call fcn.1800d7790
mov rax, rsi
add rax, 0x10
mov rcx, qword [rax]
test rcx, rcx
je 0x18006bc6a
lock inc qword [rcx + 0x18]
jle 0x18006c25e
movzx eax, byte [0x1801fd9d8]
mov rax, qword [0x1801fd960]
test rax, rax
jne 0x18006bc93
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006c24d
mov qword [0x1801fd960], rax
mov r8d, 0x80
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006c24d
mov qword [rax], r14
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x18], rcx
mov rcx, qword [rsp + 0x80]
mov qword [rax + 0x20], rcx
movdqa xmm0, xmmword [rsp + 0x180]
movdqa xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movdqu xmmword [rax + 0x28], xmm0
movdqu xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm2
mov rcx, qword [rsp + 0x1b0]
mov qword [rax + 0x58], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rax + 0x60], rcx
mov rcx, qword [rsp + 0x330]
mov qword [rax + 0x68], rcx
mov rcx, qword [rsp + 0x338]
mov qword [rax + 0x70], rcx
mov qword [rax + 0x78], rdi
mov rcx, qword [rsp + 0x328]
mov rdx, rax
lea r8, [0x1801c05c0]
call fcn.1800f70a0
mov rdi, rdx
test rax, rax
jne 0x18006bf8b
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
lock dec qword [r14]
jne 0x18006bd5d
mov rcx, r14
call fcn.180078150
lock dec qword [rsi]
mov rdi, qword [rsp + 0x60]
jne 0x18006b410
mov rcx, rsi
call fcn.18004f920
jmp 0x18006b410
call fcn.18016f320
mov edi, eax
xor dil, 1
movzx eax, byte [rsi + 8]
test al, al
je 0x18006b854
jmp 0x18006be03
call fcn.18016f320
test al, al
jne 0x18006b877
mov byte [rsi + 8], 1
jmp 0x18006b877
movdqu xmm0, xmmword [rsi + r9]
movdqa xmm1, xmm0
paddq xmm1, xmm7
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq rdx, xmm1
movabs r8, 0x8080808080808080
test rdx, r8
jne 0x18006bdf3
add r9, 0x10
cmp r9, rcx
jbe 0x18006bdb0
jmp 0x18006bdf3
inc r9
cmp r12, r9
je 0x18006b972
cmp byte [rsi + r9], 0
jne 0x18006bdf0
ud2
mov eax, 8
mov qword [rsp + 0x50], rax
xor r12d, r12d
cmp qword [rsp + 0x80], 0
jne 0x18006b056
jmp 0x18006b068
mov rax, r12
test rax, rax
jne 0x18006afa6
mov rcx, r12
mov rdx, r14
call fcn.180168710
ud2
mov rax, qword [rsp + 0x180]
lock dec qword [rax]
jne 0x18006be5c
lea rcx, [rsp + 0x180]
call fcn.1800fb060
lea rcx, [rsp + 0x3a0]
call fcn.18006c2d0
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rcx
mov qword [rax], 3
mov r13, qword [rsp + 0x98]
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x18006bebf
mov rdi, qword [r13 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006bebf
cmp qword [rdi + 0x10], 0x11
jb 0x18006bead
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fd960]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x18006bef5
mov rdi, qword [r13 + 0x30]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006bef5
cmp qword [rdi + 0x10], 0x11
jb 0x18006bee3
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fd960]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x38]
test rsi, rsi
je 0x18006bf2b
mov rdi, qword [r13 + 0x40]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006bf2b
cmp qword [rdi + 0x10], 0x11
jb 0x18006bf19
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fd960]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x48]
test rsi, rsi
je 0x18006bf61
mov rdi, qword [r13 + 0x50]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006bf61
cmp qword [rdi + 0x10], 0x11
jb 0x18006bf4f
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fd960]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
movaps xmm6, xmmword [rbp + 0x380]
movaps xmm7, xmmword [rbp + 0x390]
movaps xmm8, xmmword [rbp + 0x3a0]
lea rsp, [rbp + 0x3b8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lock dec qword [rsi]
jne 0x18006bf99
mov rcx, rsi
call fcn.18004f920
lock dec qword [r14]
mov rsi, qword [rsp + 0xa0]
jne 0x18006bfaf
mov rcx, r14
call fcn.180078150
mov rax, qword [rsp + 0x90]
mov qword [rax], 2
mov qword [rax + 8], rdi
lea rcx, [rsp + 0x3a0]
call fcn.18006c2d0
lock dec qword [rsi]
jne 0x18006c03e
mov rax, qword [rsp + 0x50]
mov rax, qword [rax + 0x210]
test rax, rax
je 0x18006c03e
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rcx + 0x200]
shl rax, 3
lea rbx, [rax + rax*8]
xor r14d, r14d
xor esi, esi
jmp 0x18006c01c
add r14, 0x48
inc rsi
cmp rbx, r14
je 0x18006c03e
mov eax, 3
xchg qword [rdi + r14 + 0x30], rax
cmp rax, 2
jne 0x18006c010
mov rcx, qword [rsp + 0x310]
mov rdx, rsi
call fcn.1800694f0
jmp 0x18006c010
mov rcx, qword [rsp + 0x50]
lock dec qword [rcx]
jne 0x18006be89
call fcn.1800fae20
jmp 0x18006be89
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x18006c131
cmp eax, 0x2b
jne 0x18006c140
dec r9
je 0x18006a81a
lea r10, [r8 + 1]
jmp 0x18006c143
mov rax, qword [rsp + 0x90]
mov qword [rax], 1
mov r8, qword [rsp + 0xf0]
test r8, r8
je 0x18006c0b5
cmp qword [rsp + 0xf8], 0
je 0x18006c0b5
mov rcx, qword [0x1801fd960]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0xc8]
lock dec qword [rax]
mov rsi, qword [rsp + 0xa0]
je 0x18006c0ed
mov rax, qword [rsp + 0xb8]
lock dec qword [rax]
je 0x18006c108
mov rcx, qword [rsp + 0xe8]
lock dec qword [rcx]
jne 0x18006bfc2
jmp 0x18006c127
lea rcx, [rsp + 0xc8]
call fcn.1800fb060
mov rax, qword [rsp + 0xb8]
lock dec qword [rax]
jne 0x18006c0d9
lea rcx, [rsp + 0xb8]
call fcn.1800fb060
mov rcx, qword [rsp + 0xe8]
lock dec qword [rcx]
jne 0x18006bfc2
call fcn.1800fae20
jmp 0x18006bfc2
mov r10, r8
cmp r9, 1
je 0x18006a81a
jmp 0x18006c143
mov r10, r8
cmp r9, 0x10
jbe 0x18006c1a2
xor r11d, r11d
mov edi, 0xa
xor esi, esi
nop word cs:[rax + rax]
cmp r9, r11
je 0x18006c1d3
movzx r14d, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add r14d, 0xffffffd0
cmp r14d, 0xa
cmovb ebx, r14d
jae 0x18006a81a
test dl, dl
jne 0x18006a81a
mov rsi, rax
mov eax, ebx
inc r11
mov ebx, r14d
add rsi, rax
jae 0x18006c160
jmp 0x18006a81a
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x18006a81a
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x18006c1b0
mov dil, 1
test rcx, rcx
jne 0x18006a821
jmp 0x18006a830
cmp al, 2
je 0x18006a83b
test rcx, rcx
je 0x18006a83b
mov rcx, qword [0x1801fd960]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x18006a83b
mov ecx, 0x80
mov edx, 0x180
call fcn.180168710
ud2
mov ecx, 8
mov edx, 0x400
call fcn.180168710
ud2
mov ecx, 8
mov edx, 0x10
call fcn.180168710
ud2
mov ecx, 8
mov edx, 0x30
call fcn.180168710
ud2
mov ecx, 8
mov edx, 0x80
call fcn.180168710
ud2
add rcx, 0x10
xor edx, edx
call fcn.1800f3bf0
ud2
mov ecx, 1
mov rdx, r12
call fcn.180168710
ud2
mov ecx, 0x80
mov rdx, rsi
call fcn.180168710
ud2
mov ecx, 8
mov edx, 0x5f0
call fcn.180168710
ud2
mov ecx, 0x80
mov edx, 0x280
call fcn.180168710
ud2
lock dec qword [r12]
jne 0x18006be03
mov rcx, r12
call fcn.1800d7790
ud2