Function at 0x1800b5820
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0xbd0]
sub rsp, 0xcd0
xor esi, esi
lea edx, [rsi + 1]
lea rcx, [rbp + 0x468]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x468]
mov rcx, qword [rax + 0x20]
mov rdi, qword [rcx]
lea ecx, [rsi + 0x10]
call fcn.1801ad470
mov rbx, rax
mov qword [rbp + 0xc08], rax
test rax, rax
je 0x1800b58a0
mov rdi, qword [rdi + 8]
mov qword [rax], rdi
lea edx, [rsi + 8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b58a3
lea r8, [rbx + 8]
lea rdx, [0x1800c4170]
mov rcx, rdi
call fcn.1801860d0
jmp 0x1800b58a3
mov rbx, rsi
mov qword [rbp + 0xf8], rbx
mov dword [rbp + 0xc00], 1
lea rdx, [rbp + 0xc00]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rdi, qword [rax]
mov qword [rax], rbx
test rdi, rdi
je 0x1800b58ed
mov rcx, qword [rdi]
test rcx, rcx
je 0x1800b58df
call fcn.180186360
mov edx, 0x10
mov rcx, rdi
call fcn.1801ad0f8
nop
mov ebx, 0xffffffff
mov rdi, qword [rbp + 0x470]
test rdi, rdi
je 0x1800b5927
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5927
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5927
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 2
lea rcx, [rbp + 0x478]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x478]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x3f0], rax
test rax, rax
je 0x1800b598e
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5991
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5991
mov rdi, rsi
mov qword [rbp + 0x3f0], rdi
mov dword [rbp + 0xc08], 2
lea rdx, [rbp + 0xc08]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b59db
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b59cd
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x480]
test rdi, rdi
je 0x1800b5a10
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5a10
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5a10
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 3
lea rcx, [rbp + 0x488]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x488]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x3f8], rax
test rax, rax
je 0x1800b5a77
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5a7a
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5a7a
mov rdi, rsi
mov qword [rbp + 0x3f8], rdi
mov dword [rsp + 0x20], 3
lea rdx, [rsp + 0x20]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b5ac0
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b5ab2
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x490]
test rdi, rdi
je 0x1800b5af5
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5af5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5af5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 4
lea rcx, [rbp + 0x498]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x498]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x400], rax
test rax, rax
je 0x1800b5b5c
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5b5f
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5b5f
mov rdi, rsi
mov qword [rbp + 0x400], rdi
mov dword [rsp + 0x24], 4
lea rdx, [rsp + 0x24]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b5ba5
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b5b97
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x4a0]
test rdi, rdi
je 0x1800b5bda
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5bda
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5bda
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 5
lea rcx, [rbp + 0x4a8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x4a8]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x408], rax
test rax, rax
je 0x1800b5c41
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5c44
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5c44
mov rdi, rsi
mov qword [rbp + 0x408], rdi
mov dword [rsp + 0x28], 5
lea rdx, [rsp + 0x28]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b5c8a
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b5c7c
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x4b0]
test rdi, rdi
je 0x1800b5cbf
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5cbf
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5cbf
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 6
lea rcx, [rbp + 0x4b8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x4b8]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x410], rax
test rax, rax
je 0x1800b5d26
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5d29
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5d29
mov rdi, rsi
mov qword [rbp + 0x410], rdi
mov dword [rsp + 0x2c], 6
lea rdx, [rsp + 0x2c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b5d6f
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b5d61
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x4c0]
test rdi, rdi
je 0x1800b5da4
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5da4
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5da4
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 7
lea rcx, [rbp + 0x4c8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x4c8]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x418], rax
test rax, rax
je 0x1800b5e0b
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5e0e
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5e0e
mov rdi, rsi
mov qword [rbp + 0x418], rdi
mov dword [rsp + 0x30], 7
lea rdx, [rsp + 0x30]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b5e54
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b5e46
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x4d0]
test rdi, rdi
je 0x1800b5e89
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5e89
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5e89
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 8
lea rcx, [rbp + 0x4d8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x4d8]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x420], rax
test rax, rax
je 0x1800b5ef0
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5ef3
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5ef3
mov rdi, rsi
mov qword [rbp + 0x420], rdi
mov dword [rsp + 0x34], 8
lea rdx, [rsp + 0x34]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b5f39
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b5f2b
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x4e0]
test rdi, rdi
je 0x1800b5f6e
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b5f6e
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b5f6e
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 9
lea rcx, [rbp + 0x4e8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x4e8]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x428], rax
test rax, rax
je 0x1800b5fd5
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b5fd8
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b5fd8
mov rdi, rsi
mov qword [rbp + 0x428], rdi
mov dword [rsp + 0x38], 9
lea rdx, [rsp + 0x38]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b601e
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b6010
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x4f0]
test rdi, rdi
je 0x1800b6053
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b6053
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b6053
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0xa
lea rcx, [rbp + 0x4f8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x4f8]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x430], rax
test rax, rax
je 0x1800b60ba
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b60bd
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b60bd
mov rdi, rsi
mov qword [rbp + 0x430], rdi
mov dword [rsp + 0x3c], 0xa
lea rdx, [rsp + 0x3c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b6103
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b60f5
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x500]
test rdi, rdi
je 0x1800b6138
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b6138
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b6138
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0xb
lea rcx, [rbp + 0x508]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x508]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x438], rax
test rax, rax
je 0x1800b619f
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b61a2
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b61a2
mov rdi, rsi
mov qword [rbp + 0x438], rdi
mov dword [rsp + 0x40], 0xb
lea rdx, [rsp + 0x40]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b61e8
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b61da
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x510]
test rdi, rdi
je 0x1800b621d
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b621d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b621d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0xc
lea rcx, [rbp + 0x518]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x518]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x440], rax
test rax, rax
je 0x1800b6284
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b6287
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b6287
mov rdi, rsi
mov qword [rbp + 0x440], rdi
mov dword [rsp + 0x44], 0xc
lea rdx, [rsp + 0x44]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b62cd
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b62bf
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x520]
test rdi, rdi
je 0x1800b6302
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b6302
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b6302
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0xd
lea rcx, [rbp + 0x528]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x528]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x448], rax
test rax, rax
je 0x1800b6369
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b636c
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b636c
mov rdi, rsi
mov qword [rbp + 0x448], rdi
mov dword [rsp + 0x48], 0xd
lea rdx, [rsp + 0x48]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b63b2
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b63a4
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x530]
test rdi, rdi
je 0x1800b63e7
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b63e7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b63e7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0xe
lea rcx, [rbp + 0x538]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x538]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x450], rax
test rax, rax
je 0x1800b644e
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b6451
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b6451
mov rdi, rsi
mov qword [rbp + 0x450], rdi
mov dword [rsp + 0x4c], 0xe
lea rdx, [rsp + 0x4c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b6497
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b6489
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x540]
test rdi, rdi
je 0x1800b64cc
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b64cc
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b64cc
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0xf
lea rcx, [rbp + 0x548]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x548]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x458], rax
test rax, rax
je 0x1800b6533
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b6536
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b6536
mov rdi, rsi
mov qword [rbp + 0x458], rdi
mov dword [rsp + 0x50], 0xf
lea rdx, [rsp + 0x50]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b657c
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b656e
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x550]
test rdi, rdi
je 0x1800b65b1
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b65b1
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1800b65b1
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0x11
lea rcx, [rbp + 0x558]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x558]
mov rcx, qword [rax + 0x20]
mov r14, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rdi, rax
mov qword [rbp + 0x460], rax
test rax, rax
je 0x1800b6618
mov r14, qword [r14 + 8]
mov qword [rax], r14
mov edx, 8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b661b
lea r8, [rdi + 8]
lea rdx, [0x1800c4170]
mov rcx, r14
call fcn.1801860d0
jmp 0x1800b661b
mov rdi, rsi
mov qword [rbp + 0x460], rdi
mov dword [rsp + 0x54], 0x11
lea rdx, [rsp + 0x54]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov r14, qword [rax]
mov qword [rax], rdi
test r14, r14
je 0x1800b6661
mov rcx, qword [r14]
test rcx, rcx
je 0x1800b6653
call fcn.180186360
mov edx, 0x10
mov rcx, r14
call fcn.1801ad0f8
nop
mov rdi, qword [rbp + 0x560]
test rdi, rdi
je 0x1800b6694
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1800b6694
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x1800b6694
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov edx, 0x12
lea rcx, [rbp + 0x568]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x568]
mov rcx, qword [rax + 0x20]
mov rdi, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov rbx, rax
mov qword [rbp + 0xc08], rax
test rax, rax
je 0x1800b66fb
mov rdi, qword [rdi + 8]
mov qword [rax], rdi
mov edx, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800b66fe
lea r8, [rbx + 8]
lea rdx, [0x1800c4170]
mov rcx, rdi
call fcn.1801860d0
jmp 0x1800b66fe
mov rbx, rsi
mov qword [rbp + 0xf0], rbx
mov dword [rbp + 0xc00], 0x12
lea rdx, [rbp + 0xc00]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
lea rdx, [rbp + 0xf0]
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0xf0]
test rbx, rbx
je 0x1800b6759
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b674b
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x570]
test rcx, rcx
je 0x1800b676a
call fcn.1800b1620
mov edx, 0x13
lea rcx, [rbp + 0x578]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x578]
mov rcx, qword [rax + 0x20]
mov rbx, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov qword [rbp + 0xc00], rax
test rax, rax
je 0x1800b67b5
lea r8, [0x1800c4170]
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.1800bb1d0
jmp 0x1800b67b8
mov rax, rsi
mov qword [rbp + 0xc00], rax
mov dword [rsp + 0x58], 0x13
lea rdx, [rsp + 0x58]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
lea rdx, [rbp + 0xc00]
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0xc00]
test rbx, rbx
je 0x1800b680f
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6801
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x580]
test rcx, rcx
je 0x1800b6820
call fcn.1800b1620
mov edx, 0x14
lea rcx, [rbp + 0x588]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x588]
mov rcx, qword [rax + 0x20]
mov rbx, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov qword [rbp + 0xc00], rax
test rax, rax
je 0x1800b686b
lea r8, [0x1800c4170]
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.1800bb1d0
jmp 0x1800b686e
mov rax, rsi
mov qword [rbp + 0xc00], rax
mov dword [rsp + 0x5c], 0x14
lea rdx, [rsp + 0x5c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
lea rdx, [rbp + 0xc00]
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0xc00]
test rbx, rbx
je 0x1800b68c5
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b68b7
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x590]
test rcx, rcx
je 0x1800b68d6
call fcn.1800b1620
mov edx, 0x15
lea rcx, [rbp + 0x598]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x598]
mov rcx, qword [rax + 0x20]
mov rbx, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov qword [rbp + 0xc00], rax
test rax, rax
je 0x1800b6921
lea r8, [0x1800c4170]
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.1800bb1d0
jmp 0x1800b6924
mov rax, rsi
mov qword [rbp + 0xc00], rax
mov dword [rsp + 0x60], 0x15
lea rdx, [rsp + 0x60]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
lea rdx, [rbp + 0xc00]
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0xc00]
test rbx, rbx
je 0x1800b697b
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b696d
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x5a0]
test rcx, rcx
je 0x1800b698c
call fcn.1800b1620
mov edx, 0x16
lea rcx, [rbp + 0x5a8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x5a8]
mov rcx, qword [rax + 0x20]
mov rbx, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov qword [rbp + 0xc00], rax
test rax, rax
je 0x1800b69d7
lea r8, [0x1800c4170]
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.1800bb1d0
jmp 0x1800b69da
mov rax, rsi
mov qword [rbp + 0xc00], rax
mov dword [rsp + 0x64], 0x16
lea rdx, [rsp + 0x64]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
lea rdx, [rbp + 0xc00]
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0xc00]
test rbx, rbx
je 0x1800b6a31
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6a23
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x5b0]
test rcx, rcx
je 0x1800b6a42
call fcn.1800b1620
mov edx, 0x17
lea rcx, [rbp + 0x5b8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x5b8]
mov rcx, qword [rax + 0x20]
mov rbx, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov qword [rbp + 0xc00], rax
test rax, rax
je 0x1800b6a8d
lea r8, [0x1800c4170]
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.1800bb1d0
jmp 0x1800b6a90
mov rax, rsi
mov qword [rbp + 0xc00], rax
mov dword [rsp + 0x68], 0x17
lea rdx, [rsp + 0x68]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
lea rdx, [rbp + 0xc00]
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0xc00]
test rbx, rbx
je 0x1800b6ae7
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6ad9
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x5c0]
test rcx, rcx
je 0x1800b6af8
call fcn.1800b1620
mov edx, 0x18
lea rcx, [rbp + 0x5c8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x5c8]
mov rcx, qword [rax + 0x20]
mov rbx, qword [rcx]
mov ecx, 0x10
call fcn.1801ad470
mov qword [rbp + 0xc00], rax
test rax, rax
je 0x1800b6b44
lea r8, [0x1800c4170]
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.1800bb1d0
mov rsi, rax
mov qword [rbp + 0xc00], rsi
mov dword [rsp + 0x6c], 0x18
lea rdx, [rsp + 0x6c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
lea rdx, [rbp + 0xc00]
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0xc00]
test rbx, rbx
je 0x1800b6b9b
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6b8d
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x5d0]
test rcx, rcx
je 0x1800b6bac
call fcn.1800b1620
mov edx, 0x19
lea rcx, [rbp + 0x5d8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x5d8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x3e8]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rsp + 0x70], 0x19
lea rdx, [rsp + 0x70]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x3e8]
test rbx, rbx
je 0x1800b6c32
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6c24
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x5e0]
test rcx, rcx
je 0x1800b6c43
call fcn.1800b1620
mov edx, 0x1a
lea rcx, [rbp + 0x5e8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x5e8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x100]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rsp + 0x74], 0x1a
lea rdx, [rsp + 0x74]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x100]
test rbx, rbx
je 0x1800b6cc9
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6cbb
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x5f0]
test rcx, rcx
je 0x1800b6cda
call fcn.1800b1620
mov edx, 0x1b
lea rcx, [rbp + 0x5f8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x5f8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x108]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rsp + 0x78], 0x1b
lea rdx, [rsp + 0x78]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x108]
test rbx, rbx
je 0x1800b6d60
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6d52
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x600]
test rcx, rcx
je 0x1800b6d71
call fcn.1800b1620
mov edx, 0x1c
lea rcx, [rbp + 0x608]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x608]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x110]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rsp + 0x7c], 0x1c
lea rdx, [rsp + 0x7c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x110]
test rbx, rbx
je 0x1800b6df7
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6de9
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x610]
test rcx, rcx
je 0x1800b6e08
call fcn.1800b1620
mov edx, 0x1d
lea rcx, [rbp + 0x618]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x618]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x118]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x80], 0x1d
lea rdx, [rbp - 0x80]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x118]
test rbx, rbx
je 0x1800b6e8c
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6e7e
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x620]
test rcx, rcx
je 0x1800b6e9d
call fcn.1800b1620
mov edx, 0x1e
lea rcx, [rbp + 0x628]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x628]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x120]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x7c], 0x1e
lea rdx, [rbp - 0x7c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x120]
test rbx, rbx
je 0x1800b6f21
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6f13
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x630]
test rcx, rcx
je 0x1800b6f32
call fcn.1800b1620
mov edx, 0x1f
lea rcx, [rbp + 0x638]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x638]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x128]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x78], 0x1f
lea rdx, [rbp - 0x78]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x128]
test rbx, rbx
je 0x1800b6fb6
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b6fa8
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x640]
test rcx, rcx
je 0x1800b6fc7
call fcn.1800b1620
mov edx, 0x20
lea rcx, [rbp + 0x648]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x648]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x130]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x74], 0x20
lea rdx, [rbp - 0x74]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x130]
test rbx, rbx
je 0x1800b704b
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b703d
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x650]
test rcx, rcx
je 0x1800b705c
call fcn.1800b1620
mov edx, 0x21
lea rcx, [rbp + 0x658]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x658]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x138]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x70], 0x21
lea rdx, [rbp - 0x70]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x138]
test rbx, rbx
je 0x1800b70e0
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b70d2
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x660]
test rcx, rcx
je 0x1800b70f1
call fcn.1800b1620
mov edx, 0x22
lea rcx, [rbp + 0x668]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x668]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x140]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x6c], 0x22
lea rdx, [rbp - 0x6c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x140]
test rbx, rbx
je 0x1800b7175
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7167
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x670]
test rcx, rcx
je 0x1800b7186
call fcn.1800b1620
mov edx, 0x23
lea rcx, [rbp + 0x678]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x678]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x148]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x68], 0x23
lea rdx, [rbp - 0x68]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x148]
test rbx, rbx
je 0x1800b720a
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b71fc
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x680]
test rcx, rcx
je 0x1800b721b
call fcn.1800b1620
mov edx, 0x24
lea rcx, [rbp + 0x688]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x688]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x150]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x64], 0x24
lea rdx, [rbp - 0x64]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x150]
test rbx, rbx
je 0x1800b729f
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7291
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x690]
test rcx, rcx
je 0x1800b72b0
call fcn.1800b1620
mov edx, 0x26
lea rcx, [rbp + 0x698]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x698]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x158]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x60], 0x26
lea rdx, [rbp - 0x60]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x158]
test rbx, rbx
je 0x1800b7334
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7326
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x6a0]
test rcx, rcx
je 0x1800b7345
call fcn.1800b1620
mov edx, 0x27
lea rcx, [rbp + 0x6a8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x6a8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x160]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x5c], 0x27
lea rdx, [rbp - 0x5c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x160]
test rbx, rbx
je 0x1800b73c9
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b73bb
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x6b0]
test rcx, rcx
je 0x1800b73da
call fcn.1800b1620
mov edx, 0x28
lea rcx, [rbp + 0x6b8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x6b8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x168]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x58], 0x28
lea rdx, [rbp - 0x58]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x168]
test rbx, rbx
je 0x1800b745e
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7450
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x6c0]
test rcx, rcx
je 0x1800b746f
call fcn.1800b1620
mov edx, 0x29
lea rcx, [rbp + 0x6c8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x6c8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x170]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x54], 0x29
lea rdx, [rbp - 0x54]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x170]
test rbx, rbx
je 0x1800b74f3
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b74e5
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x6d0]
test rcx, rcx
je 0x1800b7504
call fcn.1800b1620
mov edx, 0x2a
lea rcx, [rbp + 0x6d8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x6d8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x178]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x50], 0x2a
lea rdx, [rbp - 0x50]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x178]
test rbx, rbx
je 0x1800b7588
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b757a
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x6e0]
test rcx, rcx
je 0x1800b7599
call fcn.1800b1620
mov edx, 0x2b
lea rcx, [rbp + 0x6e8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x6e8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x180]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x4c], 0x2b
lea rdx, [rbp - 0x4c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x180]
test rbx, rbx
je 0x1800b761d
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b760f
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x6f0]
test rcx, rcx
je 0x1800b762e
call fcn.1800b1620
mov edx, 0x2c
lea rcx, [rbp + 0x6f8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x6f8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x188]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x48], 0x2c
lea rdx, [rbp - 0x48]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x188]
test rbx, rbx
je 0x1800b76b2
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b76a4
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x700]
test rcx, rcx
je 0x1800b76c3
call fcn.1800b1620
mov edx, 0x2d
lea rcx, [rbp + 0x708]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x708]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x190]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x44], 0x2d
lea rdx, [rbp - 0x44]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x190]
test rbx, rbx
je 0x1800b7747
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7739
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x710]
test rcx, rcx
je 0x1800b7758
call fcn.1800b1620
mov edx, 0x2e
lea rcx, [rbp + 0x718]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x718]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x198]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x40], 0x2e
lea rdx, [rbp - 0x40]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x198]
test rbx, rbx
je 0x1800b77dc
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b77ce
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x720]
test rcx, rcx
je 0x1800b77ed
call fcn.1800b1620
mov edx, 0x2f
lea rcx, [rbp + 0x728]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x728]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1a0]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x3c], 0x2f
lea rdx, [rbp - 0x3c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1a0]
test rbx, rbx
je 0x1800b7871
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7863
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x730]
test rcx, rcx
je 0x1800b7882
call fcn.1800b1620
mov edx, 0x30
lea rcx, [rbp + 0x738]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x738]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1a8]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x38], 0x30
lea rdx, [rbp - 0x38]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1a8]
test rbx, rbx
je 0x1800b7906
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b78f8
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x740]
test rcx, rcx
je 0x1800b7917
call fcn.1800b1620
mov edx, 0x31
lea rcx, [rbp + 0x748]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x748]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1b0]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x34], 0x31
lea rdx, [rbp - 0x34]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1b0]
test rbx, rbx
je 0x1800b799b
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b798d
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x750]
test rcx, rcx
je 0x1800b79ac
call fcn.1800b1620
mov edx, 0x32
lea rcx, [rbp + 0x758]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x758]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1b8]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x30], 0x32
lea rdx, [rbp - 0x30]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1b8]
test rbx, rbx
je 0x1800b7a30
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7a22
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x760]
test rcx, rcx
je 0x1800b7a41
call fcn.1800b1620
mov edx, 0x33
lea rcx, [rbp + 0x768]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x768]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1c0]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x2c], 0x33
lea rdx, [rbp - 0x2c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1c0]
test rbx, rbx
je 0x1800b7ac5
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7ab7
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x770]
test rcx, rcx
je 0x1800b7ad6
call fcn.1800b1620
mov edx, 0x34
lea rcx, [rbp + 0x778]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x778]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1c8]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x28], 0x34
lea rdx, [rbp - 0x28]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1c8]
test rbx, rbx
je 0x1800b7b5a
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7b4c
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x780]
test rcx, rcx
je 0x1800b7b6b
call fcn.1800b1620
mov edx, 0x36
lea rcx, [rbp + 0x788]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x788]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1d0]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x24], 0x36
lea rdx, [rbp - 0x24]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1d0]
test rbx, rbx
je 0x1800b7bef
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7be1
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x790]
test rcx, rcx
je 0x1800b7c00
call fcn.1800b1620
mov edx, 0x38
lea rcx, [rbp + 0x798]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x798]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1d8]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x20], 0x38
lea rdx, [rbp - 0x20]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1d8]
test rbx, rbx
je 0x1800b7c84
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7c76
call fcn.180186360
mov edx, 0x10
mov rcx, rbx
call fcn.1801ad0f8
nop
mov rcx, qword [rbp + 0x7a0]
test rcx, rcx
je 0x1800b7c95
call fcn.1800b1620
mov edx, 0x39
lea rcx, [rbp + 0x7a8]
call fcn.18017d2f0
nop
mov rax, qword [rbp + 0x7a8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx]
add rdx, 8
lea r8, [0x1800c4170]
lea rcx, [rbp + 0x1e0]
call fcn.1800ba7a0
mov rbx, rax
mov dword [rbp - 0x1c], 0x39
lea rdx, [rbp - 0x1c]
lea rcx, [0x18037e110]
call fcn.1800bc980
mov rcx, rax
mov rdx, rbx
call fcn.1800b3ec0
nop
mov rbx, qword [rbp + 0x1e0]
test rbx, rbx
je 0x1800b7d19
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800b7d0b
mov rcx, qword [rbp + 0x7b0]
test rcx, rcx
je 0x1800b7d2a