Function at 0x18004ea60
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x438
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x3a0], xmm8
movdqa xmmword [rbp + 0x390], xmm7
movaps xmmword [rbp + 0x380], xmm6
and rsp, 0xffffffffffffff80
mov r15, rdx
mov qword [rsp + 0x90], rcx
mov rsi, qword [rdx + 0x10]
test rsi, rsi
jne 0x18004ede8
lea rdx, str.RAYON_NUM_THREADSRAYON_RS_NUM_CPUS
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1800d4b20
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x18004ec9c
mov r8, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
mov r9, qword [rsp + 0x190]
test al, al
jne 0x18004eb8c
test r9, r9
je 0x18004eb9a
lea rdx, [r8 + r9]
mov r11, r8
jmp 0x18004eb28
add r11, 2
cmp r10, rdx
cmovne r10, r11
nop word cs:[rax + rax]
mov r11, r10
cmp r10, rdx
je 0x18004eb8c
lea r10, [r11 + 1]
movzx ebx, byte [r11]
test bl, bl
jns 0x18004eb20
cmp bl, 0xe0
jb 0x18004eb0a
cmp bl, 0xed
jne 0x18004eb60
cmp r10, rdx
je 0x18004eb8c
lea r10, [r11 + 2]
cmp r10, rdx
je 0x18004eb8c
cmp byte [r11 + 1], 0x9f
ja 0x18004ec84
add r11, 3
mov r10, r11
jmp 0x18004eb20
add r11, 2
cmp r10, rdx
cmove r11, r10
xor r10d, r10d
cmp r11, rdx
setne r10b
add r10, r11
cmp bl, 0xf0
jb 0x18004eb20
xor r11d, r11d
cmp r10, rdx
setne r11b
add r10, r11
jmp 0x18004eb20
test r8, r8
je 0x18004ec9c
test r9, r9
jne 0x18004ebc7
xor edi, edi
test rcx, rcx
je 0x18004ebb0
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test dil, dil
je 0x18004ec9c
test rsi, rsi
je 0x18004edab
jmp 0x18004ede8
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x18004ebe0
cmp eax, 0x2b
jne 0x18004ebeb
dec r9
je 0x18004eb9a
lea r10, [r8 + 1]
jmp 0x18004ebee
mov r10, r8
cmp r9, 1
je 0x18004eb9a
jmp 0x18004ebee
mov r10, r8
cmp r9, 0x10
jbe 0x18004ec42
xor r11d, r11d
mov edi, 0xa
xor esi, esi
nop
cmp r9, r11
je 0x18004ec73
movzx r14d, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add r14d, 0xffffffd0
cmp r14d, 0xa
cmovb ebx, r14d
jae 0x18004eb9a
test dl, dl
jne 0x18004eb9a
mov rsi, rax
mov eax, ebx
inc r11
mov ebx, r14d
add rsi, rax
jae 0x18004ec00
jmp 0x18004eb9a
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x18004eb9a
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x18004ec50
mov dil, 1
test rcx, rcx
jne 0x18004eba1
jmp 0x18004ebb0
cmp al, 2
je 0x18004ec9c
test rcx, rcx
je 0x18004ec9c
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
lea rdx, [0x180132949]
lea rcx, [rsp + 0x180]
mov r8d, 0x11
call fcn.1800d4b20
movzx eax, byte [rsp + 0x198]
cmp al, 2
je 0x18004edab
mov r8, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
mov r9, qword [rsp + 0x190]
test al, al
jne 0x18004ed7c
test r9, r9
je 0x18004ed8a
lea rdx, [r8 + r9]
mov r11, r8
jmp 0x18004ed18
add r11, 2
cmp r10, rdx
cmovne r10, r11
nop word cs:[rax + rax]
mov r11, r10
cmp r10, rdx
je 0x18004ed7c
lea r10, [r11 + 1]
movzx ebx, byte [r11]
test bl, bl
jns 0x18004ed10
cmp bl, 0xe0
jb 0x18004ecf8
cmp bl, 0xed
jne 0x18004ed50
cmp r10, rdx
je 0x18004ed7c
lea r10, [r11 + 2]
cmp r10, rdx
je 0x18004ed7c
cmp byte [r11 + 1], 0x9f
ja 0x180050754
add r11, 3
mov r10, r11
jmp 0x18004ed10
add r11, 2
cmp r10, rdx
cmove r11, r10
xor r10d, r10d
cmp r11, rdx
setne r10b
add r10, r11
cmp bl, 0xf0
jb 0x18004ed10
xor r11d, r11d
cmp r10, rdx
setne r11b
add r10, r11
jmp 0x18004ed10
test r8, r8
je 0x18004edab
test r9, r9
jne 0x1800505c7
xor edi, edi
test rcx, rcx
je 0x18004eda0
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
test rsi, rsi
setne al
test dil, al
jne 0x18004ede8
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmmword [rsp + 0x180], xmm0
lea rcx, [rsp + 0x180]
call sub.kernel32.dll_GetSystemInfo
mov eax, dword [rsp + 0x1a0]
test eax, eax
mov esi, 1
cmovne esi, eax
cmp rsi, 0xffff
mov r13d, 0xffff
cmovb r13, rsi
mov qword [rsp + 0x98], r15
movzx r12d, byte [r15 + 0x59]
xorps xmm6, xmm6
movups xmmword [rsp + 0x188], xmm6
movups xmmword [rsp + 0x1a0], xmm6
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
lea rcx, [rsp + 0x180]
mov rdx, r13
call fcn.180107450
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
sub rax, rdx
cmp rax, r13
jae 0x18004ee69
lea rcx, [rsp + 0x198]
mov r8, r13
call fcn.180107510
mov r15, qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x58], r13
jmp 0x18004eeac
mov rsi, qword [rsp + 0x198]
mov rax, rdi
shl rax, 4
mov qword [rsi + rax], rbx
mov byte [rsi + rax + 8], r14b
inc rdi
mov qword [rsp + 0x1a8], rdi
dec r13
je 0x18004f197
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test r12b, r12b
je 0x18004efd0
test rax, rax
jne 0x18004eede
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18005078a
mov qword [0x180168b78], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18005078a
mov rsi, rax
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004ef21
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18005079b
mov qword [0x180168b78], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18005079b
mov rdi, rax
mov qword [rax], rsi
mov qword [rax + 8], 0x40
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004ef6f
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x180050779
mov qword [0x180168b78], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x180050779
mov rcx, rax
and rcx, 0xffffffffffffff80
lea rbx, [rcx + 0x80]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
mov qword [rcx + 0x100], rdi
movaps xmmword [rcx + 0x180], xmm6
xor r14d, r14d
lock inc qword [rbx]
jg 0x18004f0d6
jmp 0x180050373
test rax, rax
jne 0x18004efeb
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18005078a
mov qword [0x180168b78], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18005078a
mov rsi, rax
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004f02e
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18005079b
mov qword [0x180168b78], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x18005079b
mov rdi, rax
mov qword [rax], rsi
mov qword [rax + 8], 0x40
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004f07c
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x180050779
mov qword [0x180168b78], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x180050779
mov rcx, rax
and rcx, 0xffffffffffffff80
lea rbx, [rcx + 0x80]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 1
mov qword [rcx + 0x88], 1
mov qword [rcx + 0x100], rdi
movaps xmmword [rcx + 0x180], xmm6
mov r14b, 1
lock inc qword [rbx]
jle 0x180050373
mov eax, dword [rsp + 0x110]
mov ecx, dword [rsp + 0x113]
mov dword [rsp + 0xab], ecx
mov dword [rsp + 0xa8], eax
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x18004f119
lea rcx, [rsp + 0x180]
call fcn.180050840
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], rbx
mov qword [rax + rcx + 8], rsi
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], r14b
mov r8d, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0xab]
mov dword [rax + rcx + 0x19], r8d
mov dword [rax + rcx + 0x1c], r9d
inc rdx
mov qword [rsp + 0x190], rdx
mov rdi, qword [rsp + 0x1a8]
cmp rdi, qword [rsp + 0x1a0]
jne 0x18004ee80
lea rcx, [rsp + 0x198]
mov rdx, rdi
call fcn.180040be0
mov rdi, qword [rsp + 0x1a8]
jmp 0x18004ee80
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x80], rax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x188], xmm0
movdqu xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x198], 8
lea rcx, [rsp + 0x180]
mov rbx, qword [rsp + 0x58]
mov rdx, rbx
call fcn.180107450
mov rax, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
sub rax, rdx
mov r14, rbx
cmp rax, rbx
jae 0x18004f27e
lea rcx, [rsp + 0x198]
mov r14, qword [rsp + 0x58]
mov r8, r14
call fcn.180107510
jmp 0x18004f27e
mov r13, qword [rsp + 0x198]
mov rax, rbx
shl rax, 4
mov qword [r13 + rax], r12
mov byte [r13 + rax + 8], 0
inc rbx
mov qword [rsp + 0x1a8], rbx
dec r14
je 0x18004f466
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004f2a7
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18005078a
mov qword [0x180168b78], rax
mov r8d, 0x400
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18005078a
mov rbx, rax
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004f2ed
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18005079b
mov qword [0x180168b78], rax
mov r8d, 0x10
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18005079b
mov r13, rax
mov qword [rax], rbx
mov qword [rax + 8], 0x40
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004f33e
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x180050779
mov qword [0x180168b78], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x180050779
mov r12, rax
and r12, 0xffffffffffffff80
mov qword [r12 + 0x78], rax
mov qword [r12 + 0x80], 1
mov qword [r12 + 0x88], 1
mov qword [r12 + 0x100], r13
pxor xmm0, xmm0
movdqa xmmword [r12 + 0x180], xmm0
lock inc qword [r12 + 0x80]
jle 0x180050373
sub r12, 0xffffffffffffff80
mov eax, dword [rsp + 0x110]
mov ecx, dword [rsp + 0x113]
mov dword [rsp + 0xab], ecx
mov dword [rsp + 0xa8], eax
mov rdx, qword [rsp + 0x190]
cmp rdx, qword [rsp + 0x188]
jne 0x18004f3e8
lea rcx, [rsp + 0x180]
call fcn.180050840
mov rdx, qword [rsp + 0x190]
mov rax, qword [rsp + 0x180]
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], r12
mov qword [rax + rcx + 8], rbx
mov qword [rax + rcx + 0x10], 0x40
mov byte [rax + rcx + 0x18], 0
mov r8d, dword [rsp + 0xa8]
mov r9d, dword [rsp + 0xab]
mov dword [rax + rcx + 0x19], r8d
mov dword [rax + rcx + 0x1c], r9d
inc rdx
mov qword [rsp + 0x190], rdx
mov rbx, qword [rsp + 0x1a8]
cmp rbx, qword [rsp + 0x1a0]
jne 0x18004f250
lea rcx, [rsp + 0x198]
mov rdx, rbx
call fcn.180040be0
mov rbx, qword [rsp + 0x1a8]
jmp 0x18004f250
mov r14, qword [rsp + 0x1a0]
movdqu xmm0, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x350], xmm0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x360], rax
test rdi, rdi
mov qword [rsp + 0x60], r14
je 0x180050377
movabs rax, 0x1c71c71c71c71c8
xor r12d, r12d
cmp rdi, rax
setb al
jae 0x180050373
lea rcx, [rdi*8]
mov r12b, al
shl r12, 3
lea rax, [rcx + rcx*8]
mov r14, rax
test rax, rax
je 0x180050398
movzx eax, byte [0x180168bb8]
mov rcx, qword [0x180168b78]
test rcx, rcx
jne 0x18004f502
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800503a4
mov rcx, rax
mov qword [0x180168b78], rax
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x1800503a4
mov r11, rdi
shl r11, 4
add r11, rsi
xor r12d, r12d
pxor xmm0, xmm0
mov qword [rsp + 0x50], rax
mov rcx, rax
mov rdx, rsi
nop word cs:[rax + rax]
mov r8, qword [rdx]
movzx r9d, byte [rdx + 8]
movdqu xmmword [rsp + 0x186], xmm0
mov word [rsp + 0x196], 0
movdqu xmmword [rsp + 0x116], xmm0
mov qword [rcx], 0
mov word [rcx + 8], 0
movups xmm1, xmmword [rsp + 0x180]
movups xmmword [rcx + 0xa], xmm1
mov r10, qword [rsp + 0x190]
mov qword [rcx + 0x1a], r10
movdqu xmm1, xmmword [rsp + 0x110]
movdqu xmmword [rcx + 0x22], xmm1
mov r10, qword [rsp + 0x11e]
mov qword [rcx + 0x30], r10
mov qword [rcx + 0x38], r8
mov byte [rcx + 0x40], r9b
inc r12
add rcx, 0x48
add rdx, 0x10
cmp rdx, r11
jne 0x18004f540
cmp qword [rsp + 0x80], 0
je 0x18004f5d8
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [rsp + 0x58]
shl rsi, 7
movzx eax, byte [0x180168bb8]
mov rcx, qword [0x180168b78]
test rcx, rcx
jne 0x18004f60d
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800507ec
mov rcx, rax
mov qword [0x180168b78], rax
lea r8, [rsi + 0x80]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x1800507ec
mov r14, rax
and r14, 0xffffffffffffff80
mov qword [r14 + 0x78], rax
sub r14, 0xffffffffffffff80
mov r8, qword [rsp + 0x58]
cmp r8, 1
jne 0x18004f643
xor ecx, ecx
jmp 0x18004f6a6
mov ecx, eax
and ecx, 0x7f
mov edx, r8d
and edx, 0xfffe
sub rax, rcx
add rax, 0x110
xor ecx, ecx
nop dword [rax]
mov qword [rax - 0x90], 0
mov word [rax - 0x88], 0
mov qword [rax - 0x80], 0
add rcx, 2
mov qword [rax - 0x10], 0
mov word [rax - 8], 0
mov qword [rax], 0
add rax, 0x100
cmp rdx, rcx
jne 0x18004f660
test r8b, 1
je 0x18004f6c3
shl rcx, 7
mov qword [r14 + rcx], 0
mov word [r14 + rcx + 8], 0
mov qword [r14 + rcx + 0x10], 0
movzx eax, byte [0x180168bb8]
mov rcx, qword [0x180168b78]
test rcx, rcx
jne 0x18004f6ef
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800507fb
mov rcx, rax
mov qword [0x180168b78], rax
mov r8d, 0x5f0
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x1800507fb
mov rsi, rax
mov r8d, 0x5f0
mov rcx, rax
xor edx, edx
call fcn.1800f6c80
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x127], rax
movaps xmm0, xmmword [rsp + 0x350]
movups xmmword [rsp + 0x117], xmm0
mov rax, qword [rsp + 0x98]
movups xmm6, xmmword [rax + 0x18]
movdqu xmm7, xmmword [rax + 0x38]
movups xmm8, xmmword [rax + 0x48]
mov qword [rax + 0x18], 0
mov qword [rax + 0x38], 0
mov qword [rax + 0x48], 0
movups xmm0, xmmword [rsp + 0x110]
mov rax, qword [rsp + 0x11f]
mov qword [rsp + 0x18f], rax
mov rax, qword [rsp + 0x127]
mov qword [rsp + 0x197], rax
movaps xmmword [rsp + 0x180], xmm0
movzx eax, byte [0x180168bb8]
mov rcx, qword [0x180168b78]
test rcx, rcx
jne 0x18004f7c3
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x18005080c
mov rcx, rax
mov qword [0x180168b78], rax
mov r8d, 0x300
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x18005080c
mov rcx, rax
and rax, 0xffffffffffffff80
mov qword [rax + 0x78], rcx
mov qword [rax + 0x80], 1
mov qword [rax + 0x88], 1
mov qword [rax + 0x100], 0
mov qword [rax + 0x108], rsi
mov qword [rax + 0x180], 0
mov qword [rax + 0x188], rsi
movaps xmmword [rax + 0x200], xmm6
movdqa xmmword [rax + 0x210], xmm7
movaps xmmword [rax + 0x220], xmm8
mov qword [rax + 0x230], 0
mov byte [rax + 0x238], 0
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rax + 0x239], xmm0
movdqu xmm0, xmmword [rsp + 0x18f]
movdqu xmmword [rax + 0x248], xmm0
mov qword [rax + 0x258], 1
mov qword [rax + 0x260], r14
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x268], rcx
mov qword [rax + 0x270], rcx
mov qword [rax + 0x278], 0
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0x280], rcx
mov qword [rax + 0x288], rdi
mov qword [rax + 0x290], r12
mov r9, qword [rsp + 0x78]
mov qword [rsp + 0x3a0], r9
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x3a8], rcx
mov rdx, qword [rsp + 0x70]
mov rcx, rdx
shl rcx, 5
add rcx, r9
mov qword [rsp + 0x3b0], r9
mov qword [rsp + 0x320], rcx
mov qword [rsp + 0x3b8], rcx
mov qword [rsp + 0x3c0], r13
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x3c8], rcx
mov rcx, rax
add rax, 0x80
mov qword [rsp + 0x50], rax
shl rbx, 4
add rbx, r13
mov qword [rsp + 0x3d0], r13
mov qword [rsp + 0x3d8], rbx
xorps xmm6, xmm6
movups xmmword [rsp + 0x3e0], xmm6
movups xmmword [rsp + 0x3f0], xmm6
test rdx, rdx
je 0x1800503cc
lea rax, [rcx + 0x258]
mov qword [rsp + 0xa0], rax
add rcx, 0x260
mov qword [rsp + 0x310], rcx
xor edi, edi
movdqa xmm7, xmmword [0x18010d770]
jmp 0x18004f99b
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov r9, rax
cmp rax, qword [rsp + 0x320]
je 0x1800503cc
lea r8, [r9 + 0x20]
mov qword [rsp + 0x3b0], r8
movzx esi, byte [r9 + 0x18]
cmp sil, 2
je 0x1800503cc
mov rax, qword [r9 + 0x10]
mov qword [rsp + 0x190], rax
movups xmm0, xmmword [r9]
movaps xmmword [rsp + 0x180], xmm0
mov eax, dword [r9 + 0x19]
mov ecx, dword [r9 + 0x1c]
lea rdx, [rsp + 0x199]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
mov byte [rsp + 0x198], sil
cmp r13, rbx
je 0x1800503b1
mov qword [rsp + 0x70], r8
lea rax, [r9 + 0x19]
lea rcx, [r13 + 0x10]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x3d0], rcx
mov r14, qword [r13]
movzx r12d, byte [r13 + 8]
mov rcx, qword [r9 + 0x10]
mov qword [rsp + 0x380], rcx
movups xmm0, xmmword [r9]
movaps xmmword [rsp + 0x370], xmm0
mov ecx, dword [rax]
mov eax, dword [rax + 3]
mov dword [rsp + 0x8b], eax
mov dword [rsp + 0x88], ecx
lea rax, [rdi + 1]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x3f8], rax
mov r13, qword [rsp + 0x98]
mov rdx, qword [r13 + 0x28]
test rdx, rdx
je 0x18004fa80
mov rax, qword [r13 + 0x30]
lea rcx, [rsp + 0x180]
mov r8, rdi
call qword [rax + 0x20]
jmp 0x18004fa8c
mov qword [rsp + 0x180], 0
mov r9, qword [r13]
mov r10, qword [r13 + 8]
mov rdx, qword [rsp + 0x50]
lock inc qword [rdx]
jle 0x180050373
mov rax, qword [rsp + 0x190]
lea r8, [rsp + 0xf0]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [r8], xmm0
mov qword [rsp + 0xa8], r9
mov qword [rsp + 0xb0], r10
mov rax, qword [rsp + 0x380]
lea rcx, [rsp + 0xc8]
mov qword [rcx + 0x10], rax
movdqa xmm0, xmmword [rsp + 0x370]
movdqu xmmword [rcx], xmm0
mov byte [rsp + 0xe0], sil
mov eax, dword [rsp + 0x88]
mov ecx, dword [rsp + 0x8b]
mov dword [r8 - 0xc], ecx
mov dword [r8 - 0xf], eax
mov qword [rsp + 0xb8], r14
mov byte [rsp + 0xc0], r12b
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0x108], rdi
test rdi, rdi
je 0x18004fc20
lea rcx, [rsp + 0xb8]
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movaps xmmword [rsp + 0x130], xmm2
movaps xmmword [rsp + 0x120], xmm1
movaps xmmword [rsp + 0x110], xmm0
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x78], rcx
test rcx, rcx
mov r14, qword [rsp + 0x340]
mov r12, qword [rsp + 0x348]
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x80], r10
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x330], rdx
je 0x18004fe20
test rax, rax
mov r12, rax
je 0x18004fe24
js 0x180050373
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004fc00
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800507dd
mov qword [0x180168b78], rax
mov rcx, rax
xor edx, edx
mov r8, r12
call r15
mov rsi, rax
test rax, rax
jne 0x18004fe29
jmp 0x1800507dd
cmp byte [r13 + 0x58], 0
je 0x18004fb3b
mov eax, dword [0x180168bbc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x48], 0
jne 0x1800505ef
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x170], rax
movups xmm0, xmmword [rsp + 0xf8]
movaps xmmword [rsp + 0x160], xmm0
movups xmm0, xmmword [rsp + 0xe8]
movaps xmmword [rsp + 0x150], xmm0
movdqu xmm0, xmmword [rsp + 0xa8]
movdqu xmm1, xmmword [rsp + 0xb8]
movups xmm2, xmmword [rsp + 0xc8]
movups xmm3, xmmword [rsp + 0xd8]
movaps xmmword [rsp + 0x140], xmm3
movaps xmmword [rsp + 0x130], xmm2
movdqa xmmword [rsp + 0x120], xmm1
movdqa xmmword [rsp + 0x110], xmm0
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x110]
call fcn.18004d950
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004fcfe
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x180050779
mov qword [0x180168b78], rax
mov r8d, 0x200
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x180050779
mov rsi, rax
and rsi, 0xffffffffffffff80
mov qword [rsi + 0x78], rax
sub rsi, 0xffffffffffffff80
mov r8d, 0x180
mov rcx, rsi
lea rdx, [rsp + 0x180]
call fcn.1800f64f0
mov eax, dword [0x180168bbc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x48], 0
jne 0x180050373
mov eax, dword [0x180168bbc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x48], rsi
mov rax, qword [rsp + 0x50]
cmp qword [rax + 0x210], 0
je 0x180050373
mov rsi, qword [rax + 0x200]
mov rcx, rsi
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x180168bb0]
movabs rcx, 0x8000000000000001
lea r14, [rcx - 2]
test rax, r14
jne 0x1800502e9
xor edi, edi
movzx eax, byte [rsi + 8]
test al, al
jne 0x180050373
mov byte [rsi + 9], 1
lea rcx, [rsi + 0x10]
call qword [sym.imp.kernel32.dll_WakeAllConditionVariable]
test dil, dil
jne 0x18004fde7
mov rax, qword [0x180168bb0]
test rax, r14
jne 0x180050302
mov rcx, rsi
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov r9, rax
cmp rax, qword [rsp + 0x320]
jne 0x18004f99b
jmp 0x1800503cc
xor esi, esi
jmp 0x18004fe4e
mov esi, 1
mov rcx, rsi
mov rdx, qword [rsp + 0x78]
mov r8, r12
call fcn.1800f64f0
mov qword [rsp + 0x318], r12
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x80]
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x1b0], rax
movdqa xmm0, xmmword [rsp + 0x110]
movdqa xmm1, xmmword [rsp + 0x120]
movaps xmm2, xmmword [rsp + 0x130]
movaps xmmword [rsp + 0x1a0], xmm2
movdqa xmmword [rsp + 0x190], xmm1
movdqa xmmword [rsp + 0x180], xmm0
test r9, r9
cmovne r14, r10
mov rax, r14
je 0x18004ff20
test rsi, rsi
mov qword [rsp + 0x348], r12
mov qword [rsp + 0x328], rax
je 0x18004ff3e
cmp r12, 0xf
ja 0x180050080
test r12, r12
je 0x18004fee2
xor ecx, ecx
nop dword [rax]
cmp byte [rsi + rcx], 0
je 0x180050373
inc rcx
cmp r12, rcx
jne 0x18004fed0
mov qword [rsp + 0x388], rsi
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], r12
lea rcx, [rsp + 0x388]
call fcn.1800130f0
mov r12, rax
mov rsi, rdx
jmp 0x18004ff41
call fcn.1800d7060
test rsi, rsi
mov qword [rsp + 0x348], r12
mov qword [rsp + 0x328], rax
jne 0x18004febb
xor r12d, r12d
mov qword [rsp + 0x340], r14
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x18004ff72
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800507ac
mov qword [0x180168b78], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x1800507ac
mov r14, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], rsi
mov rax, qword [0x180168b70]
nop word [rax + rax]
mov rcx, rax
inc rcx
je 0x180050373
lock cmpxchg qword [0x180168b70], rcx
jne 0x18004ffb0
mov qword [r14 + 0x10], rcx
mov byte [r14 + 0x28], 0
lock inc qword [r14]
jle 0x180050373
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x180050003
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800507ac
mov qword [0x180168b78], rax
mov r8d, 0x30
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x1800507ac
mov rsi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmmword [rax + 0x10], xmm6
lock inc qword [rax]
jle 0x180050373
movzx eax, byte [0x180168b18]
test al, al
je 0x180050130
mov byte [0x180168b18], 1
mov eax, dword [0x180168bbc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x1800500cc
lea rax, [rax + 0x90]
jmp 0x1800500da
lea r9, [rsi + 7]
and r9, 0xfffffffffffffff8
sub r9, rsi
je 0x18005016d
cmp r9, r12
cmovae r9, r12
test r9, r9
je 0x18005016d
xor ecx, ecx
nop word cs:[rax + rax]
cmp byte [rsi + rcx], 0
je 0x180050373
inc rcx
cmp r9, rcx
jne 0x1800500b0
lea rcx, [r12 - 0x10]
jmp 0x180050353
call fcn.1800d6a30
test rax, rax
je 0x180050373
mov r12, qword [rax]
mov qword [rax], 0
test r12, r12
je 0x180050130
lock inc qword [r12]
jle 0x180050373
mov byte [0x180168b18], 1
mov eax, dword [0x180168bbc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x18005017a
lea rax, [rax + 0x90]
jmp 0x180050188
movzx eax, byte [0x180168b18]
test al, al
je 0x180050168
mov byte [0x180168b18], 1
mov eax, dword [0x180168bbc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp qword [rax + 0x88], 0
je 0x180050195
lea rax, [rax + 0x90]
jmp 0x1800501a3
xor r12d, r12d
jmp 0x1800501c0
lea rcx, [r12 - 0x10]
xor r9d, r9d
jmp 0x180050320
call fcn.1800d6a30
test rax, rax
je 0x18005081d
mov rcx, qword [rax]
mov qword [rax], r12
test rcx, rcx
jne 0x1800501b5
jmp 0x1800501c0
call fcn.1800d6a30
test rax, rax
je 0x180050373
mov rcx, qword [rax]
mov qword [rax], 0
xor r12d, r12d
test rcx, rcx
je 0x1800501c0
lock dec qword [rcx]
jne 0x1800501c0
call fcn.1800bdc20
mov rax, rsi
add rax, 0x10
mov rcx, qword [rax]
test rcx, rcx
je 0x1800501da
lock inc qword [rcx + 0x18]
jle 0x1800507ce
movzx eax, byte [0x180168bb8]
mov rax, qword [0x180168b78]
test rax, rax
jne 0x180050203
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1800507bd
mov qword [0x180168b78], rax
mov r8d, 0x80
mov rcx, rax
xor edx, edx
call r15
test rax, rax
je 0x1800507bd
mov qword [rax], r14
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x18], rcx
mov rcx, qword [rsp + 0x80]
mov qword [rax + 0x20], rcx
movdqa xmm0, xmmword [rsp + 0x180]
movdqa xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movdqu xmmword [rax + 0x28], xmm0
movdqu xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm2
mov rcx, qword [rsp + 0x1b0]
mov qword [rax + 0x58], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rax + 0x60], rcx
mov rcx, qword [rsp + 0x330]
mov qword [rax + 0x68], rcx
mov rcx, qword [rsp + 0x338]
mov qword [rax + 0x70], rcx
mov qword [rax + 0x78], rdi
mov rcx, qword [rsp + 0x328]
mov rdx, rax
lea r8, [0x180132918]
call fcn.1800d7260
mov rdi, rdx
test rax, rax
jne 0x1800504fb
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
lock dec qword [r14]
jne 0x1800502cd
mov rcx, r14
call fcn.18005c530
lock dec qword [rsi]
mov rdi, qword [rsp + 0x60]
jne 0x18004f980
mov rcx, rsi
call fcn.180037870
jmp 0x18004f980
call fcn.18010a120
mov edi, eax
xor dil, 1
movzx eax, byte [rsi + 8]
test al, al
je 0x18004fdc4
jmp 0x180050373
call fcn.18010a120
test al, al
jne 0x18004fde7
mov byte [rsi + 8], 1
jmp 0x18004fde7
movdqu xmm0, xmmword [rsi + r9]
movdqa xmm1, xmm0
paddq xmm1, xmm7
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq rdx, xmm1
movabs r8, 0x8080808080808080
test rdx, r8
jne 0x180050363
add r9, 0x10
cmp r9, rcx
jbe 0x180050320
jmp 0x180050363
inc r9
cmp r12, r9
je 0x18004fee2
cmp byte [rsi + r9], 0
jne 0x180050360
ud2
mov eax, 8
mov qword [rsp + 0x50], rax
xor r12d, r12d
cmp qword [rsp + 0x80], 0
jne 0x18004f5c6
jmp 0x18004f5d8
mov rax, r12
test rax, rax
jne 0x18004f516
mov rcx, r12
mov rdx, r14
call fcn.180103b10
ud2
mov rax, qword [rsp + 0x180]
lock dec qword [rax]
jne 0x1800503cc
lea rcx, [rsp + 0x180]
call fcn.18004dbf0
lea rcx, [rsp + 0x3a0]
call fcn.180050900
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rcx
mov qword [rax], 3
mov r13, qword [rsp + 0x98]
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x18005042f
mov rdi, qword [r13 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18005042f
cmp qword [rdi + 0x10], 0x11
jb 0x18005041d
mov rsi, qword [rsi - 8]
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x180050465
mov rdi, qword [r13 + 0x30]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x180050465
cmp qword [rdi + 0x10], 0x11
jb 0x180050453
mov rsi, qword [rsi - 8]
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x38]
test rsi, rsi
je 0x18005049b
mov rdi, qword [r13 + 0x40]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x18005049b
cmp qword [rdi + 0x10], 0x11
jb 0x180050489
mov rsi, qword [rsi - 8]
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r13 + 0x48]
test rsi, rsi
je 0x1800504d1
mov rdi, qword [r13 + 0x50]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1800504d1
cmp qword [rdi + 0x10], 0x11
jb 0x1800504bf
mov rsi, qword [rsi - 8]
mov rcx, qword [0x180168b78]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
movaps xmm6, xmmword [rbp + 0x380]
movaps xmm7, xmmword [rbp + 0x390]
movaps xmm8, xmmword [rbp + 0x3a0]
lea rsp, [rbp + 0x3b8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lock dec qword [rsi]
jne 0x180050509
mov rcx, rsi
call fcn.180037870
lock dec qword [r14]
mov rsi, qword [rsp + 0xa0]
jne 0x18005051f
mov rcx, r14
call fcn.18005c530
mov rax, qword [rsp + 0x90]
mov qword [rax], 2
mov qword [rax + 8], rdi
lea rcx, [rsp + 0x3a0]
call fcn.180050900
lock dec qword [rsi]
jne 0x1800505ae
mov rax, qword [rsp + 0x50]
mov rax, qword [rax + 0x210]
test rax, rax
je 0x1800505ae
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rcx + 0x200]
shl rax, 3
lea rbx, [rax + rax*8]
xor r14d, r14d
xor esi, esi
jmp 0x18005058c
add r14, 0x48
inc rsi
cmp rbx, r14
je 0x1800505ae
mov eax, 3
xchg qword [rdi + r14 + 0x30], rax
cmp rax, 2
jne 0x180050580
mov rcx, qword [rsp + 0x310]
mov rdx, rsi
call fcn.18004d890
jmp 0x180050580
mov rcx, qword [rsp + 0x50]
lock dec qword [rcx]
jne 0x1800503f9
call fcn.18004dc60
jmp 0x1800503f9
movzx eax, byte [r8]
cmp eax, 0x2d
je 0x1800506a1
cmp eax, 0x2b
jne 0x1800506b0
dec r9
je 0x18004ed8a
lea r10, [r8 + 1]
jmp 0x1800506b3
mov rax, qword [rsp + 0x90]
mov qword [rax], 1
mov r8, qword [rsp + 0xf0]
test r8, r8
je 0x180050625
cmp qword [rsp + 0xf8], 0
je 0x180050625
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0xc8]
lock dec qword [rax]
mov rsi, qword [rsp + 0xa0]
je 0x18005065d
mov rax, qword [rsp + 0xb8]
lock dec qword [rax]
je 0x180050678
mov rcx, qword [rsp + 0xe8]
lock dec qword [rcx]
jne 0x180050532
jmp 0x180050697
lea rcx, [rsp + 0xc8]
call fcn.18004dbf0
mov rax, qword [rsp + 0xb8]
lock dec qword [rax]
jne 0x180050649
lea rcx, [rsp + 0xb8]
call fcn.18004dbf0
mov rcx, qword [rsp + 0xe8]
lock dec qword [rcx]
jne 0x180050532
call fcn.18004dc60
jmp 0x180050532
mov r10, r8
cmp r9, 1
je 0x18004ed8a
jmp 0x1800506b3
mov r10, r8
cmp r9, 0x10
jbe 0x180050712
xor r11d, r11d
mov edi, 0xa
xor esi, esi
nop word cs:[rax + rax]
cmp r9, r11
je 0x180050743
movzx r14d, byte [r10 + r11]
mov rax, rsi
mul rdi
seto dl
add r14d, 0xffffffd0
cmp r14d, 0xa
cmovb ebx, r14d
jae 0x18004ed8a
test dl, dl
jne 0x18004ed8a
mov rsi, rax
mov eax, ebx
inc r11
mov ebx, r14d
add rsi, rax
jae 0x1800506d0
jmp 0x18004ed8a
xor eax, eax
xor esi, esi
nop word cs:[rax + rax]
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x18004ed8a
lea r11, [rsi + rsi*4]
mov edx, edx
lea rsi, [rdx + r11*2]
inc rax
cmp r9, rax
jne 0x180050720
mov dil, 1
test rcx, rcx
jne 0x18004ed91
jmp 0x18004eda0
cmp al, 2
je 0x18004edab
test rcx, rcx
je 0x18004edab
mov rcx, qword [0x180168b78]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x18004edab
mov ecx, 0x80
mov edx, 0x180
call fcn.180103b10
ud2
mov ecx, 8
mov edx, 0x400
call fcn.180103b10
ud2
mov ecx, 8
mov edx, 0x10
call fcn.180103b10
ud2
mov ecx, 8
mov edx, 0x30
call fcn.180103b10
ud2
mov ecx, 8
mov edx, 0x80
call fcn.180103b10
ud2
add rcx, 0x10
xor edx, edx
call fcn.1800d3db0
ud2
mov ecx, 1
mov rdx, r12
call fcn.180103b10
ud2
mov ecx, 0x80
mov rdx, rsi
call fcn.180103b10
ud2
mov ecx, 8
mov edx, 0x5f0
call fcn.180103b10
ud2
mov ecx, 0x80
mov edx, 0x280
call fcn.180103b10
ud2
lock dec qword [r12]
jne 0x180050373
mov rcx, r12
call fcn.1800bdc20
ud2