Function at 0x18006c070
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x438
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x3a0], xmm8
movdqa xmmword [rbp + 0x390], xmm7
movaps xmmword [rbp + 0x380], xmm6
and rsp, 0xffffffffffffff80
mov r15, rdx
mov qword [rsp + 0x90], rcx
mov rsi, qword [rdx + 0x10]
test rsi, rsi
jne 0x18006c3f8
lea rdx, str.RAYON_NUM_THREADSRAYON_RS_NUM_CPUS
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1800f85e0
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x18006c2ac
mov r8, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
mov r9, qword [rsp + 0x190]
test al, al
jne 0x18006c19c
test r9, r9
je 0x18006c1aa
lea rdx, [r8 + r9]
mov r11, r8
jmp 0x18006c138
add r11, 2
cmp r10, rdx
cmovne r10, r11
nop word cs:[rax + rax]
mov r11, r10
cmp r10, rdx
je 0x18006c19c
lea r10, [r11 + 1]
movzx ebx, byte [r11]
test bl, bl
jns 0x18006c130
cmp bl, 0xe0
jb 0x18006c11a
cmp bl, 0xed
jne 0x18006c170
cmp r10, rdx
je 0x18006c19c
lea r10, [r11 + 2]
cmp r10, rdx
je 0x18006c19c
cmp byte [r11 + 1], 0x9f
ja 0x18006c294
add r11, 3
mov r10, r11
jmp 0x18006c130
add r11, 2
cmp r10, rdx
cmove r11, r10
xor r10d, r10d
cmp r11, rdx
setne r10b
add r10, r11
cmp bl, 0xf0
jb 0x18006c130
xor r11d, r11d
cmp r10, rdx
setne r11b
add r10, r11
jmp 0x18006c130
test r8, r8
je 0x18006c2ac
test r9, r9
jne 0x18006c1d7
xor edi, edi
test rcx, rcx
je 0x18006c1c0
mov rcx, qword [0x1801fe9b8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test dil, dil
je 0x18006c2ac
test rsi, rsi
je 0x18006c3bb
jmp 0x18006c3f8
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x18006c1f0
cmp eax, 0x2b
jne 0x18006c1fb
dec r9
je 0x18006c1aa
lea r10, [r8 + 1]
jmp 0x18006c1fe
mov r10, r8
cmp r9, 1
je 0x18006c1aa
jmp 0x18006c1fe
mov r10, r8
cmp r9, 0x10
jbe 0x18006c252
xor r11d, r11d
mov edi, 0xa
xor esi, esi
nop
cmp r9, r11
je 0x18006c283
movzx r14d, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add r14d, 0xffffffd0
cmp r14d, 0xa
cmovb ebx, r14d
jae 0x18006c1aa
test dl, dl
jne 0x18006c1aa
mov rsi, rax
mov eax, ebx
inc r11
mov ebx, r14d
add rsi, rax
jae 0x18006c210
jmp 0x18006c1aa
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x18006c1aa
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x18006c260
mov dil, 1
test rcx, rcx
jne 0x18006c1b1
jmp 0x18006c1c0
cmp al, 2
je 0x18006c2ac
test rcx, rcx
je 0x18006c2ac
mov rcx, qword [0x1801fe9b8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
lea rdx, [0x1801c14b1]
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1800f85e0
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x18006c3bb
mov r8, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
mov r9, qword [rsp + 0x190]
test al, al
jne 0x18006c38c
test r9, r9
je 0x18006c39a
lea rdx, [r8 + r9]
mov r11, r8
jmp 0x18006c328
add r11, 2
cmp r10, rdx
cmovne r10, r11
nop word cs:[rax + rax]
mov r11, r10
cmp r10, rdx
je 0x18006c38c
lea r10, [r11 + 1]
movzx ebx, byte [r11]
test bl, bl
jns 0x18006c320
cmp bl, 0xe0
jb 0x18006c308
cmp bl, 0xed
jne 0x18006c360
cmp r10, rdx
je 0x18006c38c
lea r10, [r11 + 2]
cmp r10, rdx
je 0x18006c38c
cmp byte [r11 + 1], 0x9f
ja 0x18006dd64
add r11, 3
mov r10, r11
jmp 0x18006c320
add r11, 2
cmp r10, rdx
cmove r11, r10
xor r10d, r10d
cmp r11, rdx
setne r10b
add r10, r11
cmp bl, 0xf0
jb 0x18006c320
xor r11d, r11d
cmp r10, rdx
setne r11b
add r10, r11
jmp 0x18006c320
test r8, r8
je 0x18006c3bb
test r9, r9
jne 0x18006dbd7
xor edi, edi
test rcx, rcx
je 0x18006c3b0
mov rcx, qword [0x1801fe9b8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test rsi, rsi
setne al
test dil, al
jne 0x18006c3f8
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmmword [rsp + 0x180], xmm0
lea rcx, [rsp + 0x180]
call sub.kernel32.dll_GetSystemInfo
mov eax, dword [rsp + 0x1a0]
test eax, eax
mov esi, 1
cmovne esi, eax
cmp rsi, 0xffff
mov r13d, 0xffff
cmovb r13, rsi
mov qword [rsp + 0x98], r15
movzx r12d, byte [r15 + 0x59]
xorps xmm6, xmm6
movups xmmword [rsp + 0x188], xmm6
movups xmmword [rsp + 0x1a0], xmm6
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
lea rcx, [rsp + 0x180]
mov rdx, r13
call fcn.18016cd90
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
sub rax, rdx
cmp rax, r13
jae 0x18006c479
lea rcx, [rsp + 0x198]
mov r8, r13
call fcn.18016ce50
mov r15, qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x58], r13
jmp 0x18006c4bc
mov rsi, qword [rsp + 0x198]
mov rax, rdi
shl rax, 4
mov qword [rsi + rax], rbx
mov byte [rsi + rax + 8], r14b
inc rdi
mov qword [rsp + 0x1a8], rdi
dec r13
je 0x18006c7a7
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test r12b, r12b
je 0x18006c5e0
test rax, rax
jne 0x18006c4ee
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dd9a
mov qword [0x1801fe9b8], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006dd9a
mov rsi, rax
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006c531
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006ddab
mov qword [0x1801fe9b8], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006ddab
mov rdi, rax
mov qword [rax], rsi
mov qword [rax + 8], 0x40
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006c57f
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dd89
mov qword [0x1801fe9b8], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006dd89
mov rcx, rax
and rcx, 0xffffffffffffff80
lea rbx, [rcx + 0x80]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
mov qword [rcx + 0x100], rdi
movaps xmmword [rcx + 0x180], xmm6
xor r14d, r14d
lock inc qword [rbx]
jg 0x18006c6e6
jmp 0x18006d983
test rax, rax
jne 0x18006c5fb
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dd9a
mov qword [0x1801fe9b8], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006dd9a
mov rsi, rax
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006c63e
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006ddab
mov qword [0x1801fe9b8], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006ddab
mov rdi, rax
mov qword [rax], rsi
mov qword [rax + 8], 0x40
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006c68c
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dd89
mov qword [0x1801fe9b8], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006dd89
mov rcx, rax
and rcx, 0xffffffffffffff80
lea rbx, [rcx + 0x80]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
mov qword [rcx + 0x100], rdi
movaps xmmword [rcx + 0x180], xmm6
mov r14b, 1
lock inc qword [rbx]
jle 0x18006d983
mov eax, dword [rsp + 0x110]
mov ecx, dword [rsp + 0x113]
mov dword [rsp + 0xab], ecx
mov dword [rsp + 0xa8], eax
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x18006c729
lea rcx, [rsp + 0x180]
call fcn.1800650f0
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], rbx
mov qword [rax + rcx + 8], rsi
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], r14b
mov r8d, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0xab]
mov dword [rax + rcx + 0x19], r8d
mov dword [rax + rcx + 0x1c], r9d
inc rdx
mov qword [rsp + 0x190], rdx
mov rdi, qword [rsp + 0x1a8]
cmp rdi, qword [rsp + 0x1a0]
jne 0x18006c490
lea rcx, [rsp + 0x198]
mov rdx, rdi
call fcn.18005b760
mov rdi, qword [rsp + 0x1a8]
jmp 0x18006c490
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x80], rax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x188], xmm0
movdqu xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
lea rcx, [rsp + 0x180]
mov rbx, qword [rsp + 0x58]
mov rdx, rbx
call fcn.18016cd90
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
sub rax, rdx
mov r14, rbx
cmp rax, rbx
jae 0x18006c88e
lea rcx, [rsp + 0x198]
mov r14, qword [rsp + 0x58]
mov r8, r14
call fcn.18016ce50
jmp 0x18006c88e
mov r13, qword [rsp + 0x198]
mov rax, rbx
shl rax, 4
mov qword [r13 + rax], r12
mov byte [r13 + rax + 8], 0
inc rbx
mov qword [rsp + 0x1a8], rbx
dec r14
je 0x18006ca76
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006c8b7
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dd9a
mov qword [0x1801fe9b8], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006dd9a
mov rbx, rax
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006c8fd
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006ddab
mov qword [0x1801fe9b8], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006ddab
mov r13, rax
mov qword [rax], rbx
mov qword [rax + 8], 0x40
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006c94e
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dd89
mov qword [0x1801fe9b8], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006dd89
mov r12, rax
and r12, 0xffffffffffffff80
mov qword [r12 + 0x78], rax
mov qword [r12 + 0x80], 1
mov qword [r12 + 0x88], 1
mov qword [r12 + 0x100], r13
pxor xmm0, xmm0
movdqa xmmword [r12 + 0x180], xmm0
lock inc qword [r12 + 0x80]
jle 0x18006d983
sub r12, 0xffffffffffffff80
mov eax, dword [rsp + 0x110]
mov ecx, dword [rsp + 0x113]
mov dword [rsp + 0xab], ecx
mov dword [rsp + 0xa8], eax
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x18006c9f8
lea rcx, [rsp + 0x180]
call fcn.1800650f0
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], r12
mov qword [rax + rcx + 8], rbx
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], 0
mov r8d, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0xab]
mov dword [rax + rcx + 0x19], r8d
mov dword [rax + rcx + 0x1c], r9d
inc rdx
mov qword [rsp + 0x190], rdx
mov rbx, qword [rsp + 0x1a8]
cmp rbx, qword [rsp + 0x1a0]
jne 0x18006c860
lea rcx, [rsp + 0x198]
mov rdx, rbx
call fcn.18005b760
mov rbx, qword [rsp + 0x1a8]
jmp 0x18006c860
mov r14, qword [rsp + 0x1a0]
movdqu xmm0, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x350], xmm0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x360], rax
test rdi, rdi
mov qword [rsp + 0x60], r14
je 0x18006d987
movabs rax, 0x1c71c71c71c71c8
xor r12d, r12d
cmp rdi, rax
setb al
jae 0x18006d983
lea rcx, [rdi*8]
mov r12b, al
shl r12, 3
lea rax, [rcx + rcx*8]
mov r14, rax
test rax, rax
je 0x18006d9a8
movzx eax, byte [0x1801fea30]
mov rcx, qword [0x1801fe9b8]
test rcx, rcx
jne 0x18006cb12
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006d9b4
mov rcx, rax
mov qword [0x1801fe9b8], rax
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006d9b4
mov r11, rdi
shl r11, 4
add r11, rsi
xor r12d, r12d
pxor xmm0, xmm0
mov qword [rsp + 0x50], rax
mov rcx, rax
mov rdx, rsi
nop word cs:[rax + rax]
mov r8, qword [rdx]
movzx r9d, byte [rdx + 8]
movdqu xmmword [rsp + 0x186], xmm0
mov word [rsp + 0x196], 0
movdqu xmmword [rsp + 0x116], xmm0
mov qword [rcx], 0
mov word [rcx + 8], 0
movups xmm1, xmmword [rsp + 0x180]
movups xmmword [rcx + 0xa], xmm1
mov r10, qword [rsp + 0x190]
mov qword [rcx + 0x1a], r10
movdqu xmm1, xmmword [rsp + 0x110]
movdqu xmmword [rcx + 0x22], xmm1
mov r10, qword [rsp + 0x11e]
mov qword [rcx + 0x30], r10
mov qword [rcx + 0x38], r8
mov byte [rcx + 0x40], r9b
inc r12
add rcx, 0x48
add rdx, 0x10
cmp rdx, r11
jne 0x18006cb50
cmp qword [rsp + 0x80], 0
je 0x18006cbe8
mov rcx, qword [0x1801fe9b8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [rsp + 0x58]
shl rsi, 7
movzx eax, byte [0x1801fea30]
mov rcx, qword [0x1801fe9b8]
test rcx, rcx
jne 0x18006cc1d
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006ddfc
mov rcx, rax
mov qword [0x1801fe9b8], rax
lea r8, [rsi + 0x80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006ddfc
mov r14, rax
and r14, 0xffffffffffffff80
mov qword [r14 + 0x78], rax
sub r14, 0xffffffffffffff80
mov r8, qword [rsp + 0x58]
cmp r8, 1
jne 0x18006cc53
xor ecx, ecx
jmp 0x18006ccb6
mov ecx, eax
and ecx, 0x7f
mov edx, r8d
and edx, 0xfffe
sub rax, rcx
add rax, 0x110
xor ecx, ecx
nop dword [rax]
mov qword [rax - 0x90], 0
mov word [rax - 0x88], 0
mov qword [rax - 0x80], 0
add rcx, 2
mov qword [rax - 0x10], 0
mov word [rax - 8], 0
mov qword [rax], 0
add rax, 0x100
cmp rdx, rcx
jne 0x18006cc70
test r8b, 1
je 0x18006ccd3
shl rcx, 7
mov qword [r14 + rcx], 0
mov word [r14 + rcx + 8], 0
mov qword [r14 + rcx + 0x10], 0
movzx eax, byte [0x1801fea30]
mov rcx, qword [0x1801fe9b8]
test rcx, rcx
jne 0x18006ccff
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006de0b
mov rcx, rax
mov qword [0x1801fe9b8], rax
mov r8d, 0x5f0
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006de0b
mov rsi, rax
mov r8d, 0x5f0
mov rcx, rax
xor edx, edx
call fcn.180167a10
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x127], rax
movaps xmm0, xmmword [rsp + 0x350]
movups xmmword [rsp + 0x117], xmm0
mov rax, qword [rsp + 0x98]
movups xmm6, xmmword [rax + 0x18]
movdqu xmm7, xmmword [rax + 0x38]
movups xmm8, xmmword [rax + 0x48]
mov qword [rax + 0x18], 0
mov qword [rax + 0x38], 0
mov qword [rax + 0x48], 0
movups xmm0, xmmword [rsp + 0x110]
mov rax, qword [rsp + 0x11f]
mov qword [rsp + 0x18f], rax
mov rax, qword [rsp + 0x127]
mov qword [rsp + 0x197], rax
movaps xmmword [rsp + 0x180], xmm0
movzx eax, byte [0x1801fea30]
mov rcx, qword [0x1801fe9b8]
test rcx, rcx
jne 0x18006cdd3
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006de1c
mov rcx, rax
mov qword [0x1801fe9b8], rax
mov r8d, 0x300
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18006de1c
mov rcx, rax
and rax, 0xffffffffffffff80
mov qword [rax + 0x78], rcx
mov qword [rax + 0x80], 1
mov qword [rax + 0x88], 1
mov qword [rax + 0x100], 0
mov qword [rax + 0x108], rsi
mov qword [rax + 0x180], 0
mov qword [rax + 0x188], rsi
movaps xmmword [rax + 0x200], xmm6
movdqa xmmword [rax + 0x210], xmm7
movaps xmmword [rax + 0x220], xmm8
mov qword [rax + 0x230], 0
mov byte [rax + 0x238], 0
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rax + 0x239], xmm0
movdqu xmm0, xmmword [rsp + 0x18f]
movdqu xmmword [rax + 0x248], xmm0
mov qword [rax + 0x258], 1
mov qword [rax + 0x260], r14
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x268], rcx
mov qword [rax + 0x270], rcx
mov qword [rax + 0x278], 0
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0x280], rcx
mov qword [rax + 0x288], rdi
mov qword [rax + 0x290], r12
mov r9, qword [rsp + 0x78]
mov qword [rsp + 0x3a0], r9
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x3a8], rcx
mov rdx, qword [rsp + 0x70]
mov rcx, rdx
shl rcx, 5
add rcx, r9
mov qword [rsp + 0x3b0], r9
mov qword [rsp + 0x320], rcx
mov qword [rsp + 0x3b8], rcx
mov qword [rsp + 0x3c0], r13
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x3c8], rcx
mov rcx, rax
add rax, 0x80
mov qword [rsp + 0x50], rax
shl rbx, 4
add rbx, r13
mov qword [rsp + 0x3d0], r13
mov qword [rsp + 0x3d8], rbx
xorps xmm6, xmm6
movups xmmword [rsp + 0x3e0], xmm6
movups xmmword [rsp + 0x3f0], xmm6
test rdx, rdx
je 0x18006d9dc
lea rax, [rcx + 0x258]
mov qword [rsp + 0xa0], rax
add rcx, 0x260
mov qword [rsp + 0x310], rcx
xor edi, edi
movdqa xmm7, xmmword [0x1801757b0]
jmp 0x18006cfab
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r9, rax
cmp rax, qword [rsp + 0x320]
je 0x18006d9dc
lea r8, [r9 + 0x20]
mov qword [rsp + 0x3b0], r8
movzx esi, byte [r9 + 0x18]
cmp sil, 2
je 0x18006d9dc
mov rax, qword [r9 + 0x10]
mov qword [rsp + 0x190], rax
movups xmm0, xmmword [r9]
movaps xmmword [rsp + 0x180], xmm0
mov eax, dword [r9 + 0x19]
mov ecx, dword [r9 + 0x1c]
lea rdx, [rsp + 0x199]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
mov byte [rsp + 0x198], sil
cmp r13, rbx
je 0x18006d9c1
mov qword [rsp + 0x70], r8
lea rax, [r9 + 0x19]
lea rcx, [r13 + 0x10]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x3d0], rcx
mov r14, qword [r13]
movzx r12d, byte [r13 + 8]
mov rcx, qword [r9 + 0x10]
mov qword [rsp + 0x380], rcx
movups xmm0, xmmword [r9]
movaps xmmword [rsp + 0x370], xmm0
mov ecx, dword [rax]
mov eax, dword [rax + 3]
mov dword [rsp + 0x8b], eax
mov dword [rsp + 0x88], ecx
lea rax, [rdi + 1]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x3f8], rax
mov r13, qword [rsp + 0x98]
mov rdx, qword [r13 + 0x28]
test rdx, rdx
je 0x18006d090
mov rax, qword [r13 + 0x30]
lea rcx, [rsp + 0x180]
mov r8, rdi
call qword [rax + 0x20]
jmp 0x18006d09c
mov qword [rsp + 0x180], 0
mov r9, qword [r13]
mov r10, qword [r13 + 8]
mov rdx, qword [rsp + 0x50]
lock inc qword [rdx]
jle 0x18006d983
mov rax, qword [rsp + 0x190]
lea r8, [rsp + 0xf0]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [r8], xmm0
mov qword [rsp + 0xa8], r9
mov qword [rsp + 0xb0], r10
mov rax, qword [rsp + 0x380]
lea rcx, [rsp + 0xc8]
mov qword [rcx + 0x10], rax
movdqa xmm0, xmmword [rsp + 0x370]
movdqu xmmword [rcx], xmm0
mov byte [rsp + 0xe0], sil
mov eax, dword [rsp + 0x88]
mov ecx, dword [rsp + 0x8b]
mov dword [r8 - 0xc], ecx
mov dword [r8 - 0xf], eax
mov qword [rsp + 0xb8], r14
mov byte [rsp + 0xc0], r12b
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0x108], rdi
test rdi, rdi
je 0x18006d230
lea rcx, [rsp + 0xb8]
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movaps xmmword [rsp + 0x130], xmm2
movaps xmmword [rsp + 0x120], xmm1
movaps xmmword [rsp + 0x110], xmm0
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x78], rcx
test rcx, rcx
mov r14, qword [rsp + 0x340]
mov r12, qword [rsp + 0x348]
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x80], r10
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x330], rdx
je 0x18006d430
test rax, rax
mov r12, rax
je 0x18006d434
js 0x18006d983
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006d210
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dded
mov qword [0x1801fe9b8], rax
mov rcx, rax
xor edx, edx
mov r8, r12
call r15
mov rsi, rax
test rax, rax
jne 0x18006d439
jmp 0x18006dded
cmp byte [r13 + 0x58], 0
je 0x18006d14b
mov eax, dword [0x1801fea34]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x48], 0
jne 0x18006dbff
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x170], rax
movups xmm0, xmmword [rsp + 0xf8]
movaps xmmword [rsp + 0x160], xmm0
movups xmm0, xmmword [rsp + 0xe8]
movaps xmmword [rsp + 0x150], xmm0
movdqu xmm0, xmmword [rsp + 0xa8]
movdqu xmm1, xmmword [rsp + 0xb8]
movups xmm2, xmmword [rsp + 0xc8]
movups xmm3, xmmword [rsp + 0xd8]
movaps xmmword [rsp + 0x140], xmm3
movaps xmmword [rsp + 0x130], xmm2
movdqa xmmword [rsp + 0x120], xmm1
movdqa xmmword [rsp + 0x110], xmm0
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x110]
call fcn.18006af10
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006d30e
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006dd89
mov qword [0x1801fe9b8], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006dd89
mov rsi, rax
and rsi, 0xffffffffffffff80
mov qword [rsi + 0x78], rax
sub rsi, 0xffffffffffffff80
mov r8d, 0x180
mov rcx, rsi
lea rdx, [rsp + 0x180]
call fcn.180167370
mov eax, dword [0x1801fea34]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x48], 0
jne 0x18006d983
mov eax, dword [0x1801fea34]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x48], rsi
mov rax, qword [rsp + 0x50]
cmp qword [rax + 0x210], 0
je 0x18006d983
mov rsi, qword [rax + 0x200]
mov rcx, rsi
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1801fe9f0]
movabs rcx, 0x8000000000000001
lea r14, [rcx - 2]
test rax, r14
jne 0x18006d8f9
xor edi, edi
movzx eax, byte [rsi + 8]
test al, al
jne 0x18006d983
mov byte [rsi + 9], 1
lea rcx, [rsi + 0x10]
call qword [sym.imp.kernel32.dll_WakeAllConditionVariable]
test dil, dil
jne 0x18006d3f7
mov rax, qword [0x1801fe9f0]
test rax, r14
jne 0x18006d912
mov rcx, rsi
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov r9, rax
cmp rax, qword [rsp + 0x320]
jne 0x18006cfab
jmp 0x18006d9dc
xor esi, esi
jmp 0x18006d45e
mov esi, 1
mov rcx, rsi
mov rdx, qword [rsp + 0x78]
mov r8, r12
call fcn.180167370
mov qword [rsp + 0x318], r12
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x80]
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x1b0], rax
movdqa xmm0, xmmword [rsp + 0x110]
movdqa xmm1, xmmword [rsp + 0x120]
movaps xmm2, xmmword [rsp + 0x130]
movaps xmmword [rsp + 0x1a0], xmm2
movdqa xmmword [rsp + 0x190], xmm1
movdqa xmmword [rsp + 0x180], xmm0
test r9, r9
cmovne r14, r10
mov rax, r14
je 0x18006d530
test rsi, rsi
mov qword [rsp + 0x348], r12
mov qword [rsp + 0x328], rax
je 0x18006d54e
cmp r12, 0xf
ja 0x18006d690
test r12, r12
je 0x18006d4f2
xor ecx, ecx
nop dword [rax]
cmp byte [rsi + rcx], 0
je 0x18006d983
inc rcx
cmp r12, rcx
jne 0x18006d4e0
mov qword [rsp + 0x388], rsi
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], r12
lea rcx, [rsp + 0x388]
call fcn.180020e20
mov r12, rax
mov rsi, rdx
jmp 0x18006d551
call fcn.1800fa890
test rsi, rsi
mov qword [rsp + 0x348], r12
mov qword [rsp + 0x328], rax
jne 0x18006d4cb
xor r12d, r12d
mov qword [rsp + 0x340], r14
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006d582
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006ddbc
mov qword [0x1801fe9b8], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006ddbc
mov r14, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], rsi
mov rax, qword [0x1801fe9b0]
nop word [rax + rax]
mov rcx, rax
inc rcx
je 0x18006d983
lock cmpxchg qword [0x1801fe9b0], rcx
jne 0x18006d5c0
mov qword [r14 + 0x10], rcx
mov byte [r14 + 0x28], 0
lock inc qword [r14]
jle 0x18006d983
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006d613
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006ddbc
mov qword [0x1801fe9b8], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006ddbc
mov rsi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmmword [rax + 0x10], xmm6
lock inc qword [rax]
jle 0x18006d983
movzx eax, byte [0x1801fe958]
test al, al
je 0x18006d740
mov byte [0x1801fe958], 1
mov eax, dword [0x1801fea34]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x18006d6dc
lea rax, [rax + 0x90]
jmp 0x18006d6ea
lea r9, [rsi + 7]
and r9, 0xfffffffffffffff8
sub r9, rsi
je 0x18006d77d
cmp r9, r12
cmovae r9, r12
test r9, r9
je 0x18006d77d
xor ecx, ecx
nop word cs:[rax + rax]
cmp byte [rsi + rcx], 0
je 0x18006d983
inc rcx
cmp r9, rcx
jne 0x18006d6c0
lea rcx, [r12 - 0x10]
jmp 0x18006d963
call fcn.1800fa260
test rax, rax
je 0x18006d983
mov r12, qword [rax]
mov qword [rax], 0
test r12, r12
je 0x18006d740
lock inc qword [r12]
jle 0x18006d983
mov byte [0x1801fe958], 1
mov eax, dword [0x1801fea34]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x18006d78a
lea rax, [rax + 0x90]
jmp 0x18006d798
movzx eax, byte [0x1801fe958]
test al, al
je 0x18006d778
mov byte [0x1801fe958], 1
mov eax, dword [0x1801fea34]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x18006d7a5
lea rax, [rax + 0x90]
jmp 0x18006d7b3
xor r12d, r12d
jmp 0x18006d7d0
lea rcx, [r12 - 0x10]
xor r9d, r9d
jmp 0x18006d930
call fcn.1800fa260
test rax, rax
je 0x18006de2d
mov rcx, qword [rax]
mov qword [rax], r12
test rcx, rcx
jne 0x18006d7c5
jmp 0x18006d7d0
call fcn.1800fa260
test rax, rax
je 0x18006d983
mov rcx, qword [rax]
mov qword [rax], 0
xor r12d, r12d
test rcx, rcx
je 0x18006d7d0
lock dec qword [rcx]
jne 0x18006d7d0
call fcn.18006b460
mov rax, rsi
add rax, 0x10
mov rcx, qword [rax]
test rcx, rcx
je 0x18006d7ea
lock inc qword [rcx + 0x18]
jle 0x18006ddde
movzx eax, byte [0x1801fea30]
mov rax, qword [0x1801fe9b8]
test rax, rax
jne 0x18006d813
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18006ddcd
mov qword [0x1801fe9b8], rax
mov r8d, 0x80
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18006ddcd
mov qword [rax], r14
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x18], rcx
mov rcx, qword [rsp + 0x80]
mov qword [rax + 0x20], rcx
movdqa xmm0, xmmword [rsp + 0x180]
movdqa xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movdqu xmmword [rax + 0x28], xmm0
movdqu xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm2
mov rcx, qword [rsp + 0x1b0]
mov qword [rax + 0x58], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rax + 0x60], rcx
mov rcx, qword [rsp + 0x330]
mov qword [rax + 0x68], rcx
mov rcx, qword [rsp + 0x338]
mov qword [rax + 0x70], rcx
mov qword [rax + 0x78], rdi
mov rcx, qword [rsp + 0x328]
mov rdx, rax
lea r8, [0x1801c1480]
call fcn.1800faa90
mov rdi, rdx
test rax, rax
jne 0x18006db0b
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
lock dec qword [r14]
jne 0x18006d8dd
mov rcx, r14
call fcn.180069d40
lock dec qword [rsi]
mov rdi, qword [rsp + 0x60]
jne 0x18006cf90
mov rcx, rsi
call fcn.180102df0
jmp 0x18006cf90
call fcn.18016fa60
mov edi, eax
xor dil, 1
movzx eax, byte [rsi + 8]
test al, al
je 0x18006d3d4
jmp 0x18006d983
call fcn.18016fa60
test al, al
jne 0x18006d3f7
mov byte [rsi + 8], 1
jmp 0x18006d3f7
movdqu xmm0, xmmword [rsi + r9]
movdqa xmm1, xmm0
paddq xmm1, xmm7
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq rdx, xmm1
movabs r8, 0x8080808080808080
test rdx, r8
jne 0x18006d973
add r9, 0x10
cmp r9, rcx
jbe 0x18006d930
jmp 0x18006d973
inc r9
cmp r12, r9
je 0x18006d4f2
cmp byte [rsi + r9], 0
jne 0x18006d970
ud2
mov eax, 8
mov qword [rsp + 0x50], rax
xor r12d, r12d
cmp qword [rsp + 0x80], 0
jne 0x18006cbd6
jmp 0x18006cbe8
mov rax, r12
test rax, rax
jne 0x18006cb26
mov rcx, r12
mov rdx, r14
call fcn.180169390
ud2
mov rax, qword [rsp + 0x180]
lock dec qword [rax]
jne 0x18006d9dc
lea rcx, [rsp + 0x180]
call fcn.18006b1b0
lea rcx, [rsp + 0x3a0]
call fcn.18006de50
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rcx
mov qword [rax], 3
mov r13, qword [rsp + 0x98]
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x18006da3f
mov rdi, qword [r13 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006da3f
cmp qword [rdi + 0x10], 0x11
jb 0x18006da2d
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fe9b8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x18006da75
mov rdi, qword [r13 + 0x30]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006da75
cmp qword [rdi + 0x10], 0x11
jb 0x18006da63
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fe9b8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x38]
test rsi, rsi
je 0x18006daab
mov rdi, qword [r13 + 0x40]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006daab
cmp qword [rdi + 0x10], 0x11
jb 0x18006da99
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fe9b8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x48]
test rsi, rsi
je 0x18006dae1
mov rdi, qword [r13 + 0x50]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18006dae1
cmp qword [rdi + 0x10], 0x11
jb 0x18006dacf
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1801fe9b8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
movaps xmm6, xmmword [rbp + 0x380]
movaps xmm7, xmmword [rbp + 0x390]
movaps xmm8, xmmword [rbp + 0x3a0]
lea rsp, [rbp + 0x3b8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lock dec qword [rsi]
jne 0x18006db19
mov rcx, rsi
call fcn.180102df0
lock dec qword [r14]
mov rsi, qword [rsp + 0xa0]
jne 0x18006db2f
mov rcx, r14
call fcn.180069d40
mov rax, qword [rsp + 0x90]
mov qword [rax], 2
mov qword [rax + 8], rdi
lea rcx, [rsp + 0x3a0]
call fcn.18006de50
lock dec qword [rsi]
jne 0x18006dbbe
mov rax, qword [rsp + 0x50]
mov rax, qword [rax + 0x210]
test rax, rax
je 0x18006dbbe
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rcx + 0x200]
shl rax, 3
lea rbx, [rax + rax*8]
xor r14d, r14d
xor esi, esi
jmp 0x18006db9c
add r14, 0x48
inc rsi
cmp rbx, r14
je 0x18006dbbe
mov eax, 3
xchg qword [rdi + r14 + 0x30], rax
cmp rax, 2
jne 0x18006db90
mov rcx, qword [rsp + 0x310]
mov rdx, rsi
call fcn.18006ae10
jmp 0x18006db90
mov rcx, qword [rsp + 0x50]
lock dec qword [rcx]
jne 0x18006da09
call fcn.18006b220
jmp 0x18006da09
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x18006dcb1
cmp eax, 0x2b
jne 0x18006dcc0
dec r9
je 0x18006c39a
lea r10, [r8 + 1]
jmp 0x18006dcc3
mov rax, qword [rsp + 0x90]
mov qword [rax], 1
mov r8, qword [rsp + 0xf0]
test r8, r8
je 0x18006dc35
cmp qword [rsp + 0xf8], 0
je 0x18006dc35
mov rcx, qword [0x1801fe9b8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0xc8]
lock dec qword [rax]
mov rsi, qword [rsp + 0xa0]
je 0x18006dc6d
mov rax, qword [rsp + 0xb8]
lock dec qword [rax]
je 0x18006dc88
mov rcx, qword [rsp + 0xe8]
lock dec qword [rcx]
jne 0x18006db42
jmp 0x18006dca7
lea rcx, [rsp + 0xc8]
call fcn.18006b1b0
mov rax, qword [rsp + 0xb8]
lock dec qword [rax]
jne 0x18006dc59
lea rcx, [rsp + 0xb8]
call fcn.18006b1b0
mov rcx, qword [rsp + 0xe8]
lock dec qword [rcx]
jne 0x18006db42
call fcn.18006b220
jmp 0x18006db42
mov r10, r8
cmp r9, 1
je 0x18006c39a
jmp 0x18006dcc3
mov r10, r8
cmp r9, 0x10
jbe 0x18006dd22
xor r11d, r11d
mov edi, 0xa
xor esi, esi
nop word cs:[rax + rax]
cmp r9, r11
je 0x18006dd53
movzx r14d, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add r14d, 0xffffffd0
cmp r14d, 0xa
cmovb ebx, r14d
jae 0x18006c39a
test dl, dl
jne 0x18006c39a
mov rsi, rax
mov eax, ebx
inc r11
mov ebx, r14d
add rsi, rax
jae 0x18006dce0
jmp 0x18006c39a
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x18006c39a
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x18006dd30
mov dil, 1
test rcx, rcx
jne 0x18006c3a1
jmp 0x18006c3b0
cmp al, 2
je 0x18006c3bb
test rcx, rcx
je 0x18006c3bb
mov rcx, qword [0x1801fe9b8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x18006c3bb
mov ecx, 0x80
mov edx, 0x180
call fcn.180169390
ud2
mov ecx, 8
mov edx, 0x400
call fcn.180169390
ud2
mov ecx, 8
mov edx, 0x10
call fcn.180169390
ud2
mov ecx, 8
mov edx, 0x30
call fcn.180169390
ud2
mov ecx, 8
mov edx, 0x80
call fcn.180169390
ud2
add rcx, 0x10
xor edx, edx
call fcn.1800f7870
ud2
mov ecx, 1
mov rdx, r12
call fcn.180169390
ud2
mov ecx, 0x80
mov rdx, rsi
call fcn.180169390
ud2
mov ecx, 8
mov edx, 0x5f0
call fcn.180169390
ud2
mov ecx, 0x80
mov edx, 0x280
call fcn.180169390
ud2
lock dec qword [r12]
jne 0x18006d983
mov rcx, r12
call fcn.18006b460
ud2