Function at 0x180004d00
Capabilities:
Check if file exists
Get file attributes
Get hostname
Get uefi variable
Query or enumerate registry value
Read .ini file
Set uefi variable

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x7d8]
sub rsp, 0x8b0
mov qword [rbp + 0x98], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x180038010]
xor rax, rsp
mov qword [rbp + 0x7a0], rax
mov ebx, ecx
xor r14d, r14d
mov dword [rsp + 0x40], r14d
movups xmm0, xmmword [str..Harddisk0Partition1_]
movaps xmmword [rbp + 0x380], xmm0
movups xmm1, xmmword [0x180030300]
movaps xmmword [rbp + 0x390], xmm1
movups xmm0, xmmword [0x180030310]
movaps xmmword [rbp + 0x3a0], xmm0
movzx eax, word [0x180030320]
mov word [rbp + 0x3b0], ax
xor edx, edx
mov r8d, 0x1d6
lea rcx, [rbp + 0x3b2]
call fcn.1800115d0
movsx eax, bl
add ax, 0x30
mov word [rbp + 0x398], ax
lea rax, [rbp + 0x380]
sub rax, 2
lea rax, [rax + 2]
cmp word [rax], r14w
jne 0x180004db1
movups xmm0, xmmword [str.dataRdvEsp.ini]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x180030400]
movups xmmword [rax + 0x10], xmm1
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000739a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x140], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073a5
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp + 0x118], rdi
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073b0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xd8], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073bb
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xd0], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073c6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x110], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073d1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x108], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073dc
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x100], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073e7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xf8], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073f2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc0], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800073fd
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xf0], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007408
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xe8], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007413
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc8], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000741e
mov rax, qword [rax]
call qword [rax + 0x18]
mov r13, rax
lea rcx, [rax + 0x18]
mov qword [rbp + 0x170], rcx
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007429
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x120], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007434
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb0], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000743f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xe0], rax
mov r15d, r14d
xor eax, eax
mov qword [rbp + 0xa8], rax
lea rax, vtable.CIniFile.0
mov qword [rbp + 0xa0], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000744a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa8], rax
lea rcx, [rbp + 0x380]
mov rsi, 0xffffffffffffffff
mov rax, rsi
inc rax
cmp word [rcx + rax*2], 0
jne 0x180005040
mov r8d, eax
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa8]
call fcn.180001660
mov r12, qword [rbp + 0xa8]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180005cc5
test al, 0x10
jne 0x180005cc5
mov qword [rbp - 8], r14
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007455
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 8], rbx
mov dword [rsp + 0x40], 1
nop dword [rax]
add r14d, 0x400
js 0x1800075d6
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x1800050df
mov edx, r14d
lea rcx, [rbp - 8]
call fcn.180001560
mov rbx, qword [rbp - 8]
cmp r14d, dword [rbx - 0xc]
jg 0x1800075cb
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, [0x180030410]
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r15d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x1800075c0
cmp eax, dword [rbx - 0xc]
jg 0x1800075c0
mov dword [rbx - 0x10], eax
movsxd rcx, eax
xor eax, eax
mov word [rbx + rcx*2], ax
lea ecx, [r14 - 2]
lea eax, [rcx + 1]
cmp r15d, eax
je 0x1800050b0
cmp r15d, ecx
je 0x1800050b0
lea r14, [rbx - 0x18]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x1800051c2
cmp dword [rdi + 0x10], 0
jl 0x1800051af
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x1800051af
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x1800051a2
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x118], rax
jmp 0x1800051c2
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x118]
call fcn.180001660
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1800051e4
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 0x50], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007460
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x50], rbx
mov dword [rsp + 0x40], 2
mov edi, r12d
mov r15, qword [rbp + 0xa8]
nop dword [rax]
add edi, 0x400
js 0x1800075b5
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x18000524c
mov edx, edi
lea rcx, [rbp + 0x50]
call fcn.180001560
mov rbx, qword [rbp + 0x50]
cmp edi, dword [rbx - 0xc]
jg 0x1800075aa
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, str.IpAddr
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x18000759f
cmp eax, dword [rbx - 0xc]
jg 0x18000759f
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x180005220
cmp r14d, ecx
je 0x180005220
lea r14, [rbx - 0x18]
mov rdi, qword [rbp + 0xd0]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x180005330
cmp dword [rdi + 0x10], 0
jl 0x18000531d
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x18000531d
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x180005310
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0xd0], rax
jmp 0x180005330
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.180001660
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x18000534f
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 8], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000746b
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 8], rbx
mov dword [rsp + 0x40], 4
mov edi, r12d
mov r15, qword [rbp + 0xa8]
add edi, 0x400
js 0x180007594
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x1800053b0
mov edx, edi
lea rcx, [rbp + 8]
call fcn.180001560
mov rbx, qword [rbp + 8]
cmp edi, dword [rbx - 0xc]
jg 0x180007589
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, str.WksName
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x18000757e
cmp eax, dword [rbx - 0xc]
jg 0x18000757e
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x180005384
cmp r14d, ecx
je 0x180005384
lea r14, [rbx - 0x18]
mov rdi, qword [rbp + 0x108]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x180005494
cmp dword [rdi + 0x10], 0
jl 0x180005481
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x180005481
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x180005474
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x108], rax
jmp 0x180005494
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x108]
call fcn.180001660
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1800054b3
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 0x10], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007476
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x10], rbx
mov dword [rsp + 0x40], 8
mov edi, r12d
mov r15, qword [rbp + 0xa8]
nop dword [rax + rax]
add edi, 0x400
js 0x180007573
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x18000551c
mov edx, edi
lea rcx, [rbp + 0x10]
call fcn.180001560
mov rbx, qword [rbp + 0x10]
cmp edi, dword [rbx - 0xc]
jg 0x180007568
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, str.SubMask
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x18000755d
cmp eax, dword [rbx - 0xc]
jg 0x18000755d
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x1800054f0
cmp r14d, ecx
je 0x1800054f0
lea r14, [rbx - 0x18]
mov rdi, qword [rbp + 0xf8]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x180005600
cmp dword [rdi + 0x10], 0
jl 0x1800055ed
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x1800055ed
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x1800055e0
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0xf8], rax
jmp 0x180005600
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xf8]
call fcn.180001660
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x18000561f
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 0x18], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007481
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x18], rbx
mov dword [rsp + 0x40], 0x10
mov edi, r12d
mov r15, qword [rbp + 0xa8]
add edi, 0x400
js 0x180007552
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x180005680
mov edx, edi
lea rcx, [rbp + 0x18]
call fcn.180001560
mov rbx, qword [rbp + 0x18]
cmp edi, dword [rbx - 0xc]
jg 0x180007547
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, str.Gateway
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x18000753c
cmp eax, dword [rbx - 0xc]
jg 0x18000753c
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x180005654
cmp r14d, ecx
je 0x180005654
lea r14, [rbx - 0x18]
mov rdi, qword [rbp + 0xf0]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x180005764
cmp dword [rdi + 0x10], 0
jl 0x180005751
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x180005751
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x180005744
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0xf0], rax
jmp 0x180005764
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xf0]
call fcn.180001660
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x180005783
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 0x20], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000748c
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x20], rbx
mov dword [rsp + 0x40], 0x20
mov edi, r12d
mov r15, qword [rbp + 0xa8]
nop dword [rax + rax]
add edi, 0x400
js 0x180007531
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x1800057ec
mov edx, edi
lea rcx, [rbp + 0x20]
call fcn.180001560
mov rbx, qword [rbp + 0x20]
cmp edi, dword [rbx - 0xc]
jg 0x180007526
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, [0x180030468]
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x18000751b
cmp eax, dword [rbx - 0xc]
jg 0x18000751b
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x1800057c0
cmp r14d, ecx
je 0x1800057c0
lea r14, [rbx - 0x18]
mov rdi, qword [rbp + 0xc8]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x1800058d0
cmp dword [rdi + 0x10], 0
jl 0x1800058bd
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x1800058bd
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x1800058b0
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0xc8], rax
jmp 0x1800058d0
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xc8]
call fcn.180001660
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1800058ef
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 0x28], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007497
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x28], rbx
mov dword [rsp + 0x40], 0x40
mov edi, r12d
mov r15, qword [rbp + 0xa8]
add edi, 0x400
js 0x180007510
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x180005950
mov edx, edi
lea rcx, [rbp + 0x28]
call fcn.180001560
mov rbx, qword [rbp + 0x28]
cmp edi, dword [rbx - 0xc]
jg 0x180007505
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, str.Dns2
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x1800074fa
cmp eax, dword [rbx - 0xc]
jg 0x1800074fa
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x180005924
cmp r14d, ecx
je 0x180005924
lea r14, [rbx - 0x18]
mov rdi, qword [rbp + 0x120]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x180005a34
cmp dword [rdi + 0x10], 0
jl 0x180005a21
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x180005a21
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x180005a14
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x120], rax
jmp 0x180005a34
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x120]
call fcn.180001660
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x180005a53
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 0x30], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800074a2
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x30], rbx
mov dword [rsp + 0x40], 0x80
mov edi, r12d
mov r15, qword [rbp + 0xa8]
nop dword [rax + rax]
add edi, 0x400
js 0x1800074ef
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x180005abc
mov edx, edi
lea rcx, [rbp + 0x30]
call fcn.180001560
mov rbx, qword [rbp + 0x30]
cmp edi, dword [rbx - 0xc]
jg 0x1800074e4
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, str.ServerIp
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x1800074d9
cmp eax, dword [rbx - 0xc]
jg 0x1800074d9
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x180005a90
cmp r14d, ecx
je 0x180005a90
lea r14, [rbx - 0x18]
mov rdi, qword [rbp + 0xe0]
add rdi, 0xffffffffffffffe8
cmp r14, rdi
je 0x180005ba0
cmp dword [rdi + 0x10], 0
jl 0x180005b8d
mov rax, qword [rdi]
cmp qword [r14], rax
jne 0x180005b8d
mov rcx, r14
call fcn.1800014e0
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x180005b80
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rinet_addr + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0xe0], rax
jmp 0x180005ba0
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.180001660
mov dword [rsp + 0x40], r12d
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x180005bbf
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov qword [rbp + 0x38], r12
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800074ad
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x38], rbx
mov dword [rsp + 0x40], 0x100
mov edi, r12d
mov r15, qword [rbp + 0xa8]
add edi, 0x400
js 0x1800074ce
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x180005c20
mov edx, edi
lea rcx, [rbp + 0x38]
call fcn.180001560
mov rbx, qword [rbp + 0x38]
cmp edi, dword [rbx - 0xc]
jg 0x1800074c3
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r12w
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x18002fc88]
lea rdx, str.DynamicWks
lea rcx, str.General
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800137cc
test eax, eax
js 0x1800074b8
cmp eax, dword [rbx - 0xc]
jg 0x1800074b8
mov dword [rbx - 0x10], eax
movsxd rcx, eax
mov word [rbx + rcx*2], r12w
lea ecx, [rdi - 2]
lea eax, [rcx + 1]
cmp r14d, eax
je 0x180005bf4
cmp r14d, ecx
je 0x180005bf4
mov rcx, rbx
call fcn.180017c70
mov r15d, eax
lea rdx, [rbx - 0x18]
mov ecx, esi
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x180005cc8
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rinet_addr + 8]
jmp 0x180005cc8
xor r12d, r12d
xor eax, eax
mov dword [rbp + 0x178], eax
mov word [rbp + 0x17c], ax
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], rax
mov dword [rbp + 0x1a0], eax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x690]
call fcn.1800115d0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x590]
call fcn.1800115d0
xor eax, eax
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0x1b0], rax
mov dword [rbp + 0x1b8], eax
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1c8], rax
mov dword [rbp + 0x1d0], eax
mov qword [rbp + 0x168], r12
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x690]
lea r8, [rbp + 0x590]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x178]
call fcn.180003490
cmp dword [rbp + 0x178], r12d
jne 0x180005d96
movzx eax, word [rbp + 0x17c]
cmp ax, word [rbp + 0x16c]
je 0x180005de7
movzx eax, byte [rbp + 0x17d]
movzx ecx, byte [rbp + 0x17c]
movzx edx, byte [rbp + 0x17b]
movzx r10d, byte [rbp + 0x17a]
movzx r9d, byte [rbp + 0x179]
movzx r8d, byte [rbp + 0x178]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._02X_02X_02X_02X_02X_02X
lea rcx, [rbp + 0x140]
call fcn.1800081d0
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x90]
call fcn.180003f40
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0xd8]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x180005e5f
cmp dword [rbx + 0x10], 0
jl 0x180005e4e
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x180005e4e
call fcn.1800014e0
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x180005e41
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rinet_addr + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0xd8], rax
jmp 0x180005e5f
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0xd8]
call fcn.180001660
nop
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180005e7f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x280]
call fcn.1800115d0
mov dword [rbp + 0x128], 0x80
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x280]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800075e1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x40]
call fcn.1800040b0
test al, al
jne 0x180005f11
lea rcx, [rbp + 0x280]
mov rax, rsi
inc rax
cmp word [rcx + rax*2], 0
jne 0x180005ef3
mov r8d, eax
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x40]
call fcn.180001660
nop
mov rdx, qword [rbp + 0x40]
lea rdi, [rdx - 0x18]
mov rbx, qword [rbp + 0x110]
add rbx, 0xffffffffffffffe8
cmp rdi, rbx
je 0x180005f79
cmp dword [rbx + 0x10], 0
jl 0x180005f68
mov rax, qword [rbx]
cmp qword [rdi], rax
jne 0x180005f68
mov rcx, rdi
call fcn.1800014e0
mov r14, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x180005f5b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rinet_addr + 8]
lea rax, [r14 + 0x18]
mov qword [rbp + 0x110], rax
jmp 0x180005f79
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x110]
call fcn.180001660
nop
mov eax, esi
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x180005f91
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x70]
call fcn.180003f40
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0x100]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x180006006
cmp dword [rbx + 0x10], 0
jl 0x180005ff5
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x180005ff5
call fcn.1800014e0
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x180005fe8
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rinet_addr + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x100], rax
jmp 0x180006006
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x100]
call fcn.180001660
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006023
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x88]
call fcn.180003f40
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0xc0]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x18000609b
cmp dword [rbx + 0x10], 0
jl 0x18000608a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x18000608a
call fcn.1800014e0
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x18000607d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rinet_addr + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0xc0], rax
jmp 0x18000609b
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0xc0]
call fcn.180001660
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800060bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rbp + 0x80]
call fcn.180003010
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0xb0]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x18000612c
cmp dword [rbx + 0x10], 0
jl 0x18000611b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x18000611b
call fcn.1800014e0
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x18000610e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rinet_addr + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0xb0], rax
jmp 0x18000612c
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0xb0]
call fcn.180001660
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000614c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rbp + 0x78]
call fcn.180003900
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0xe8]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1800061ba
cmp dword [rbx + 0x10], 0
jl 0x1800061a9
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1800061a9
call fcn.1800014e0
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x18000619c
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rinet_addr + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0xe8], rax
jmp 0x1800061ba
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0xe8]
call fcn.180001660
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800061d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0x140]
cmp dword [rcx - 0x10], 0
je 0x18000636d
mov rax, qword [rbp + 0x118]
test rax, rax
je 0x1800075ec
mov rdx, rcx
sub rax, rcx
nop
movzx r9d, word [rdx]
movzx r8d, word [rdx + rax]
sub r9d, r8d
jne 0x180006217
add rdx, 2
test r8d, r8d
jne 0x180006200
test r9d, r9d
je 0x18000636d
lea rax, [rbp + 0x48]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x50], rax
add rcx, 0xffffffffffffffe8
call fcn.1800014e0
add rax, 0x18
mov qword [rbp + 0x48], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800075f7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rbx, [0x180030410]
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.1800040b0
test al, al
jne 0x18000629f
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180006285
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007602
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea r14, str.General
mov rdx, r14
lea rcx, [rbp - 0x70]
call fcn.1800040b0
test al, al
jne 0x1800062fb
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x1800062e0
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x70]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006331
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000634e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006374
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x180006374
lea r14, str.General
mov rcx, qword [rbp + 0xd8]
cmp dword [rcx - 0x10], 0
je 0x1800064fc
mov rax, qword [rbp + 0xd0]
test rax, rax
je 0x18000760d
mov rdx, rcx
sub rax, rcx
nop dword [rax + rax]
movzx r9d, word [rdx]
movzx r8d, word [rdx + rax]
sub r9d, r8d
jne 0x1800063b7
add rdx, 2
test r8d, r8d
jne 0x1800063a0
test r9d, r9d
je 0x1800064fc
lea rax, [rbp]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x48], rax
add rcx, 0xffffffffffffffe8
call fcn.1800014e0
add rax, 0x18
mov qword [rbp], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007618
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rbx, str.IpAddr
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.1800040b0
test al, al
jne 0x18000643f
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180006425
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007623
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.1800040b0
test al, al
jne 0x18000648c
mov rax, rsi
inc rax
cmp word [r14 + rax*2], 0
jne 0x180006471
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp]
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800064c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800064df
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800064fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0x110]
cmp dword [rcx - 0x10], 0
je 0x18000668c
mov rax, qword [rbp + 0x108]
test rax, rax
je 0x18000762e
mov rdx, rcx
sub rax, rcx
nop dword [rax]
nop word [rax + rax]
movzx r9d, word [rdx]
movzx r8d, word [rdx + rax]
sub r9d, r8d
jne 0x180006547
add rdx, 2
test r8d, r8d
jne 0x180006530
test r9d, r9d
je 0x18000668c
lea rax, [rbp + 0x58]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
add rcx, 0xffffffffffffffe8
call fcn.1800014e0
add rax, 0x18
mov qword [rbp + 0x58], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007639
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rbx, str.WksName
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1800040b0
test al, al
jne 0x1800065cf
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800065b5
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007644
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
mov rdx, r14
lea rcx, [rbp - 0x50]
call fcn.1800040b0
test al, al
jne 0x18000661c
mov rax, rsi
inc rax
cmp word [r14 + rax*2], 0
jne 0x180006601
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x50]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp + 0x58]
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006652
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000666f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000668c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0x100]
cmp dword [rcx - 0x10], 0
je 0x18000681c
mov rax, qword [rbp + 0xf8]
test rax, rax
je 0x18000764f
mov rdx, rcx
sub rax, rcx
nop dword [rax]
nop word [rax + rax]
movzx r9d, word [rdx]
movzx r8d, word [rdx + rax]
sub r9d, r8d
jne 0x1800066d7
add rdx, 2
test r8d, r8d
jne 0x1800066c0
test r9d, r9d
je 0x18000681c
lea rax, [rbp + 0x60]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x48], rax
add rcx, 0xffffffffffffffe8
call fcn.1800014e0
add rax, 0x18
mov qword [rbp + 0x60], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000765a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x38], rax
lea rbx, str.SubMask
mov rdx, rbx
lea rcx, [rbp - 0x38]
call fcn.1800040b0
test al, al
jne 0x18000675f
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180006745
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x38]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007665
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.1800040b0
test al, al
jne 0x1800067ac
mov rax, rsi
inc rax
cmp word [r14 + rax*2], 0
jne 0x180006791
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp + 0x60]
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800067e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800067ff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000681c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0xc0]
cmp dword [rcx - 0x10], 0
je 0x1800069ac
mov rax, qword [rbp + 0xf0]
test rax, rax
je 0x180007670
mov rdx, rcx
sub rax, rcx
nop dword [rax]
nop word [rax + rax]
movzx r9d, word [rdx]
movzx r8d, word [rdx + rax]
sub r9d, r8d
jne 0x180006867
add rdx, 2
test r8d, r8d
jne 0x180006850
test r9d, r9d
je 0x1800069ac
lea rax, [rbp + 0x68]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x48], rax
add rcx, 0xffffffffffffffe8
call fcn.1800014e0
add rax, 0x18
mov qword [rbp + 0x68], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000767b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
lea rbx, str.Gateway
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.1800040b0
test al, al
jne 0x1800068ef
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800068d5
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x180007686
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x30], rax
mov rdx, r14
lea rcx, [rbp - 0x30]
call fcn.1800040b0
test al, al
jne 0x18000693c
mov rax, rsi
inc rax
cmp word [r14 + rax*2], 0
jne 0x180006921
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x30]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp + 0x68]
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006972
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000698f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800069ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0xe8]
cmp dword [rcx - 0x10], 0
je 0x180006b4d
mov rax, qword [rbp + 0xc8]
test rax, rax
je 0x180007691
mov rdx, rcx
sub rax, rcx
nop dword [rax]
nop word [rax + rax]
movzx r9d, word [rdx]
movzx r8d, word [rdx + rax]
sub r9d, r8d
jne 0x1800069f7
add rdx, 2
test r8d, r8d
jne 0x1800069e0
test r9d, r9d
je 0x180006b4d
lea rax, [rbp - 0x18]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x48], rax
add rcx, 0xffffffffffffffe8
call fcn.1800014e0
add rax, 0x18
mov qword [rbp - 0x18], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000769c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rbx, [0x180030468]
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.1800040b0
test al, al
jne 0x180006a8b
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180006a70
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800076a7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
mov rdx, r14
lea rcx, [rbp - 0x20]
call fcn.1800040b0
test al, al
jne 0x180006adb
mov rax, rsi
nop dword [rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x180006ac0
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x20]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp - 0x18]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006b12
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006b30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006b4d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0xb0]
cmp dword [rbx - 0x10], 0
je 0x180006cf7
mov rax, qword [rbp + 0xe0]
test rax, rax
je 0x1800076b2
mov rcx, rbx
sub rax, rbx
nop dword [rax]
nop dword [rax + rax]
movzx r8d, word [rcx]
movzx edx, word [rcx + rax]
sub r8d, edx
jne 0x180006b95
add rcx, 2
test edx, edx
jne 0x180006b80
test r8d, r8d
je 0x180006cf7
lea rax, [rbp - 0x10]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rcx, [rbx - 0x18]
call fcn.1800014e0
add rax, 0x18
mov qword [rbp - 0x10], rax
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800076bd
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rbx, str.ServerIp
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1800040b0
test al, al
jne 0x180006c2b
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180006c10
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800076c8
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov rdx, r14
lea rcx, [rsp + 0x68]
call fcn.1800040b0
test al, al
jne 0x180006c7c
mov rax, rsi
nop
inc rax
cmp word [r14 + rax*2], 0
jne 0x180006c60
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x68]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp - 0x10]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006cb5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006cd3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006cf0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0xb0]
xor eax, eax
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x148], r12
mov dword [rbp + 0x150], r12d
mov qword [rbp + 0x158], r12
lea rcx, [rbp + 0x148]
call fcn.180002f00
test eax, eax
jne 0x180006ec6
mov dword [rbp + 0xb8], r12d
mov dword [rbp + 0xbc], r12d
mov dword [rbp + 0x12c], 4
lea rax, [rbp + 0x12c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x164]
xor r8d, r8d
lea rdx, str.BootFromUefi
mov rdi, qword [rbp + 0x148]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rbp + 0x130], 4
lea rax, [rbp + 0x130]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xbc]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x160]
xor r8d, r8d
lea rdx, str.BootOsByPxe
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rbp + 0xb8], 1
jne 0x180006ecd
cmp dword [rbp + 0xbc], 1
jne 0x180006ecd
mov qword [rbp + 0x138], r12
mov rdx, rbx
lea rcx, [rbp + 0x138]
call fcn.180003cd0
nop
mov rbx, qword [rbp + 0x138]
movaps xmm0, xmmword [str.36D08FA8_CF0B_42F5_8F14_68DF73ED3740]
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmm1, xmmword [0x1800300d0]
movaps xmmword [rbp + 0x1f0], xmm1
movaps xmm0, xmmword [0x1800300e0]
movaps xmmword [rbp + 0x200], xmm0
movaps xmm1, xmmword [0x1800300f0]
movaps xmmword [rbp + 0x210], xmm1
movsd xmm0, qword [0x180030100]
movsd qword [rbp + 0x220], xmm0
mov eax, dword [0x180030108]
mov dword [rbp + 0x228], eax
movzx eax, word [0x18003010c]
mov word [rbp + 0x22c], ax
call fcn.180003ac0
mov rax, rsi
nop dword [rax + rax]
lea rax, [rax + 1]
cmp byte [rbx + rax], 0
jne 0x180006e60
lea r9d, [rax + 1]
mov r8, rbx
lea rdx, [rbp + 0x1e0]
lea rcx, str.ServerIp
call qword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableW]
test eax, eax
jne 0x180006ea6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.UpdateServerToNvram
lea rcx, str._s_SetUefiVariable_failed:_d
call fcn.180003280
nop
mov rdx, qword [rbp + 0x138]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006ec6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdi, qword [rbp + 0x148]
test rdi, rdi
je 0x180006edb
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movaps xmm0, xmmword [str.36D08FA8_CF0B_42F5_8F14_68DF73ED3740]
movaps xmmword [rbp + 0x230], xmm0
movaps xmm1, xmmword [0x1800300d0]
movaps xmmword [rbp + 0x240], xmm1
movaps xmm0, xmmword [0x1800300e0]
movaps xmmword [rbp + 0x250], xmm0
movaps xmm1, xmmword [0x1800300f0]
movaps xmmword [rbp + 0x260], xmm1
movsd xmm0, qword [0x180030100]
movsd qword [rbp + 0x270], xmm0
mov eax, dword [0x180030108]
mov dword [rbp + 0x278], eax
movzx eax, word [0x18003010c]
mov word [rbp + 0x27c], ax
xor eax, eax
mov qword [rbp + 0x180], rax
mov word [rbp + 0x188], ax
call fcn.180003ac0
mov r9d, 2
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x230]
lea rdi, str.DynamicWks
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFirmwareEnvironmentVariableW]
test eax, eax
je 0x180007120
lea rcx, [rbp + 0x180]
call fcn.180017c9c
cmp eax, r15d
je 0x180007135
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x58], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x48], rcx
lea rcx, [0x1800304cc]
lea rbx, [0x1800304d0]
test eax, eax
cmovne rbx, rcx
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800076d3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
mov rdx, rbx
lea rcx, [rbp - 0x78]
call fcn.1800040b0
test al, al
jne 0x18000700f
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180006ff5
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x78]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x1800076de
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.1800040b0
test al, al
jne 0x18000705b
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x180007041
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.180001660
nop
call fcn.180001110
mov rcx, rax
test rax, rax
je 0x18000738f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov rdx, r14
lea rcx, [rsp + 0x78]
call fcn.1800040b0
test al, al
jne 0x1800070ac
mov rax, rsi
nop
inc rax
cmp word [r14 + rax*2], 0
jne 0x180007090
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x78]
call fcn.180001660
nop
mov r9, qword [rbp + 0xa8]
mov r8, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800070e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007101
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007135
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x180007135
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.GetUefiVariable_failed:__d
call fcn.180003280
nop
mov rdx, qword [rbp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007156
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007177
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007198
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x120]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800071b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, esi
lock xadd dword [r13 + 0x10], eax
sub eax, 1
jg 0x1800071d4
mov rcx, qword [r13]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800071f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007216
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007237
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007258
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xf8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180007279
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x100]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000729a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x108]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800072bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x110]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800072dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800072fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000731e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x118]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18000733f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x140]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x18000735d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
mov rcx, qword [rbp + 0x7a0]
xor rcx, rsp
call fcn.18000ed70
lea r11, [rsp + 0x8b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
int3
mov ecx, 0x80070057
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
int3
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
nop
mov ecx, 0x80004005
call fcn.1800013d0
int3