Function at 0x18001cda0
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x180050040]
xor rax, rsp
mov qword [rbp + 0x148], rax
mov r15, rdx
mov rsi, rcx
xor edi, edi
mov eax, dword [0x18004af50]
mov dword [rsp + 0x30], eax
movzx edx, word [0x18004af54]
mov word [rsp + 0x34], dx
movzx eax, byte [0x18004af56]
mov byte [rsp + 0x30], 0x63
xor byte [rsp + 0x31], 0x31
xor byte [rsp + 0x32], 0x32
xor byte [rsp + 0x33], 0x33
xor dl, 0x34
mov byte [rsp + 0x34], dl
xor byte [rsp + 0x35], 0x35
xor al, 0x36
mov byte [rsp + 0x36], al
lea rcx, [rsp + 0x30]
call fcn.180001d70
mov r10, rax
test rax, rax
je 0x180021731
movups xmm0, xmmword [str.HIJ_f_v_n_tO_aABCDEFG_]
movups xmmword [rbp + 0x120], xmm0
movzx ecx, byte [0x18004b138]
mov byte [rbp + 0x130], cl
mov r8d, edi
movdqa xmm11, xmmword [0x18004b210]
movdqa xmm9, xmmword [0x18004b1c0]
movdqa xmm8, xmmword [0x18004b250]
movdqa xmm7, xmmword [0x18004b1f0]
movdqa xmm6, xmmword [0x18004b240]
mov r13d, dword [0x180050090]
cmp r13d, 2
jl 0x18001cfbb
movdqa xmmword [rbp + 0xc0], xmm8
lea rcx, [rbp + 0x120]
mov edx, dword [rbp + 0xc0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm9
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
andps xmm3, xmm11
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18001ced0
cmp r8d, 0x11
jge 0x18001cfff
movsxd rax, r8d
lea r9, [rbp + 0x120]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x18001cfd0
movzx eax, byte [0x18004b160]
movups xmm0, xmmword [0x18004b150]
mov byte [rbp + 0xe0], al
movups xmmword [rbp + 0xd0], xmm0
mov r8d, edi
cmp r13d, 2
jl 0x18001d12b
movdqa xmmword [rbp + 0xc0], xmm8
lea rcx, [rbp + 0xd0]
mov edx, dword [rbp + 0xc0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm9
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
andps xmm3, xmm11
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18001d040
cmp r8d, 0x11
jge 0x18001d16f
movsxd rax, r8d
lea r9, [rbp + 0xd0]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x18001d140
mov eax, dword [str._puv4]
mov dword [rbp + 0x18], eax
movzx eax, byte [0x18004acd4]
mov byte [rbp + 0x18], 0x50
xor byte [rbp + 0x19], 0x31
xor byte [rbp + 0x1a], 0x32
xor byte [rbp + 0x1b], 0x33
xor al, 0x34
mov byte [rbp + 0x1c], al
mov dword [rsp + 0x30], edi
lea r9, [rsp + 0x30]
mov r8, r10
lea rdx, [rbp + 0x18]
mov rcx, rsi
call fcn.180016dc0
mov r8d, dword [rsp + 0x30]
lea rcx, [rbp + 0x120]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0xd0]
mov rdx, rax
mov rcx, rsi
call fcn.180016820
mov r14, rax
test rax, rax
je 0x180021731
mov ecx, dword [str.HIJ3]
mov dword [rsp + 0x30], ecx
cmp r13d, 2
jl 0x18001d24d
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm6
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm8
movd xmm0, ecx
xorps xmm1, xmm0
movd dword [rsp + 0x30], xmm1
jmp 0x18001d28f
lea r9, [rsp + 0x30]
mov r8d, edi
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18001d260
mov eax, dword [0x18004aec0]
mov dword [rbp + 0x18], eax
cmp r13d, 2
jl 0x18001d2ff
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm6
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm8
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x18], xmm1
jmp 0x18001d33f
lea r9, [rbp + 0x18]
mov r8d, edi
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18001d310
lea rdx, [r14 - 0x32]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x18]
mov r8d, 0x32
mov rcx, rsi
call fcn.180016820
mov r12, rax
test rax, rax
je 0x180021731
mov qword [rbp + 0x20], rsi
mov r8d, dword [0x18008a250]
mov rcx, qword gs:[0x58]
mov edx, 4
mov rbx, qword [rcx + r8*8]
add rbx, rdx
movdqa xmm10, xmmword [0x18004b1d0]
mov eax, dword [rbx]
cmp dword [0x18008a488], eax
jle 0x18001d6d5
lea rcx, [0x18008a488]
call fcn.180027290
cmp dword [0x18008a488], 0xffffffff
jne 0x18001d6d5
movups xmm0, xmmword [0x18004afc0]
movups xmmword [rbp + 0xd0], xmm0
movsd xmm0, qword [0x18004afd0]
movsd qword [rbp + 0xe0], xmm0
mov eax, dword [0x18004afd8]
mov dword [rbp + 0xe8], eax
movzx eax, word [0x18004afdc]
mov word [rbp + 0xec], ax
movzx eax, byte [0x18004afde]
mov byte [rbp + 0xee], al
mov r8d, edi
cmp r13d, 2
jl 0x18001d51b
movdqa xmmword [rbp + 0xc0], xmm8
lea rcx, [rbp + 0xd0]
mov edx, dword [rbp + 0xc0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm9
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
andps xmm3, xmm11
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x18001d430
cmp r8d, 0x1f
jge 0x18001d55f
movsxd rax, r8d
lea r9, [rbp + 0xd0]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1f
jl 0x18001d530
mov eax, dword [0x18004acc8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18004accc]
movsd xmm0, qword [str.E___GX_]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
mov r8d, edi
cmp r13d, 2
jl 0x18001d672
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm6
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm8
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.E___GX_]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm6
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001d680
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a3c0], rax
lea rcx, [0x18008a488]
call fcn.180027224
mov eax, dword [rbx]
cmp dword [0x18008a410], eax
jle 0x18001d9d3
lea rcx, [0x18008a410]
call fcn.180027290
cmp dword [0x18008a410], 0xffffffff
jne 0x18001d9d3
movups xmm0, xmmword [0x18004af00]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [0x18004af10]
movups xmmword [rsp + 0x78], xmm1
cmp r13d, 2
jl 0x18001d825
mov edx, edi
movdqa xmmword [rbp + 0xc0], xmm8
lea rcx, [rsp + 0x68]
mov r8d, dword [rbp + 0xc0]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm9
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
andps xmm3, xmm11
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r8d
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x18001d740
jmp 0x18001d85f
lea r9, [rsp + 0x68]
mov r8d, edi
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x18001d830
mov eax, dword [0x18004acc8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18004accc]
movsd xmm0, qword [str.E___GX_]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
mov r8d, edi
cmp r13d, 2
jl 0x18001d972
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm6
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm8
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.E___GX_]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm6
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001d980
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a3a0], rax
lea rcx, [0x18008a410]
call fcn.180027224
mov eax, dword [rbx]
cmp dword [0x18008a400], eax
jle 0x18001dcf5
lea rcx, [0x18008a400]
call fcn.180027290
cmp dword [0x18008a400], 0xffffffff
jne 0x18001dcf5
movups xmm0, xmmword [str.uI_VXPWD_k_HSHL__r7_E]
movups xmmword [rbp + 0xd0], xmm0
mov eax, dword [0x18004aeb8]
mov dword [rbp + 0xe0], eax
movzx eax, word [0x18004aebc]
mov word [rbp + 0xe4], ax
mov r8d, edi
cmp r13d, 2
jl 0x18001db3b
movdqa xmmword [rbp + 0xc0], xmm8
lea rcx, [rbp + 0xd0]
mov edx, dword [rbp + 0xc0]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm9
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
andps xmm3, xmm11
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18001da50
cmp r8d, 0x16
jge 0x18001db7f
movsxd rax, r8d
lea r9, [rbp + 0xd0]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x18001db50
mov eax, dword [0x18004acc8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18004accc]
movsd xmm0, qword [str.E___GX_]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
mov r8d, edi
cmp r13d, 2
jl 0x18001dc92
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm6
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm8
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.E___GX_]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm6
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001dca0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a3e8], rax
lea rcx, [0x18008a400]
call fcn.180027224
mov eax, dword [rbx]
cmp dword [0x18008a3d4], eax
jle 0x18001dff3
lea rcx, [0x18008a3d4]
call fcn.180027290
cmp dword [0x18008a3d4], 0xffffffff
jne 0x18001dff3
movups xmm0, xmmword [str.bEwQYSC_VQXPK_a__6__]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [0x18004afb0]
movups xmmword [rsp + 0x78], xmm1
cmp r13d, 2
jl 0x18001de45
mov edx, edi
movdqa xmmword [rbp + 0xc0], xmm8
lea rcx, [rsp + 0x68]
mov r8d, dword [rbp + 0xc0]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm9
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
andps xmm3, xmm11
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r8d
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x18001dd60
jmp 0x18001de7f
lea r9, [rsp + 0x68]
mov r8d, edi
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x18001de50
mov eax, dword [0x18004acc8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18004accc]
movsd xmm0, qword [str.E___GX_]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
mov r8d, edi
cmp r13d, 2
jl 0x18001df92
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm6
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm8
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.E___GX_]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm6
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001dfa0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a398], rax
lea rcx, [0x18008a3d4]
call fcn.180027224
mov eax, dword [rbx]
cmp dword [0x18008a420], eax
jle 0x18001e1e2
lea rcx, [0x18008a420]
call fcn.180027290
cmp dword [0x18008a420], 0xffffffff
jne 0x18001e1e2
movsd xmm0, qword [str.uItAQPfXWU:]
movsd qword [rbp + 0x38], xmm0
movzx ecx, word [0x18004b110]
mov word [rbp + 0x40], cx
movzx eax, byte [0x18004b112]
mov byte [rbp + 0x38], 0x45
xor byte [rbp + 0x39], 0x31
xor byte [rbp + 0x3a], 0x32
xor byte [rbp + 0x3b], 0x33
xor byte [rbp + 0x3c], 0x34
xor byte [rbp + 0x3d], 0x35
xor byte [rbp + 0x3e], 0x36
xor byte [rbp + 0x3f], 0x37
xor cl, 0x38
mov byte [rbp + 0x40], cl
xor byte [rbp + 0x41], 0x39
xor al, 0x3a
mov byte [rbp + 0x42], al
movsd xmm0, qword [str.E___GX_]
movsd qword [rbp + 0x98], xmm0
mov eax, dword [0x18004acc8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18004accc]
mov byte [rbp + 0xa4], al
mov r8d, edi
cmp r13d, 2
jl 0x18001e17b
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm6
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm8
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.E___GX_]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm6
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001e190
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a440], rax
lea rcx, [0x18008a420]
call fcn.180027224
cmp qword [0x18008a3c0], 0
je 0x180021731
cmp qword [0x18008a3a0], 0
je 0x180021731
cmp qword [0x18008a3e8], 0
je 0x180021731
cmp qword [0x18008a398], 0
je 0x180021731
mov rdx, r14
lea rcx, [rbp + 0x20]
call fcn.18001c450
mov r14, rax
mov qword [rbp + 0x50], rax
mov rdx, r12
lea rcx, [rbp + 0x20]
call fcn.18001c450
mov r12, rax
mov qword [rsp + 0x30], rax
test r14, r14
je 0x180021731
test rax, rax
je 0x180021731
mov r14, qword [0x18008a3c0]
mov ecx, dword [rbx]
cmp dword [0x18008a390], ecx
jle 0x18001e2a9
lea rcx, [0x18008a390]
call fcn.180027290
cmp dword [0x18008a390], 0xffffffff
jne 0x18001e2a9
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a450], rax
lea rcx, [0x18008a390]
call fcn.180027224
mov dword [rbp + 0x98], 0x25ff
mov word [rbp + 0x9c], 0
mov qword [rbp + 0x9e], r14
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x20], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x18001e2f1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x180021731
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x20], 0xe
lea rcx, [rbp + 0x98]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18001e339
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x180021731
mov rax, qword [0x18008a450]
mov dl, 1
mov rcx, r12
call rax
movzx r14d, al
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x20], 0xe
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18001e393
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x180021731
test r14b, r14b
je 0x180021731
mov qword [rbp + 0x30], rdi
movdqa xmm12, xmmword [0x18004b260]
movdqa xmm8, xmmword [0x18004b200]
movdqa xmm7, xmmword [0x18004b280]
mov eax, dword [rbx]
cmp dword [0x18008a298], eax
jle 0x18001e6a6
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18001e6a6
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x18], rax
cmp r13d, 2
jl 0x18001e4de
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm12
movd xmm0, dword [rbp + 0x18]
xorps xmm1, xmm0
movd dword [rbp + 0x18], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm10
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm12
movd xmm0, dword [rbp + 0x1c]
xorps xmm1, xmm0
movd dword [rbp + 0x1c], xmm1
jmp 0x18001e523
lea r9, [rbp + 0x18]
mov r8d, edi
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18001e4f0
mov eax, dword [0x18002abd8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18002abdc]
movsd xmm0, qword [str.VMUHWOPSn_:D]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
mov r8d, edi
cmp r13d, 2
jl 0x18001e642
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001e650
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov r14, qword [0x18008a300]
mov eax, dword [rbx]
cmp dword [0x18008a2f8], eax
jle 0x18001e6fc
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18001e6fc
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x98], 0x25ff
mov word [rbp + 0x9c], 0
mov qword [rbp + 0x9e], r14
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x20], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x18001e744
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x1800215ec
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x20], 0xe
lea rcx, [rbp + 0x98]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18001e78c
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x1800215ec
mov rax, qword [0x18008a2b8]
mov r8d, 8
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x30]
call rax
mov r14, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x20], 0xe
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18001e7ee
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x1800215ec
test r14, r14
je 0x1800215ec
cmp qword [rbp + 0x30], 0
jne 0x18001e968
mov rdi, qword [0x18008a3e8]
mov eax, dword [rbx]
cmp dword [0x18008a474], eax
jle 0x18001e872
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x18001e872
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0x98], 0x25ff
mov word [rbp + 0x9c], 0
mov qword [rbp + 0x9e], rdi
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x50], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x18001e8ba
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x10]
call qword [rax + 0x10]
test al, al
je 0x18001e961
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x50], 0xe
lea rcx, [rbp + 0x98]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18001e902
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x10]
call qword [rax + 0x10]
test al, al
je 0x18001e961
mov rcx, r12
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x50], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18001e94f
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x10]
call qword [rax + 0x10]
mov al, 1
jmp 0x180021733
cmp qword [r15 + 0x18], 0xf
jbe 0x18001e97b
mov r8, qword [r15]
add r8, qword [r15 + 0x10]
mov r15, qword [r15]
jmp 0x18001e982
mov r8, qword [r15 + 0x10]
add r8, r15
mov rdx, r15
lea rcx, [rbp + 0x58]
call fcn.1800261b0
nop
lea rcx, [rsp + 0x68]
call fcn.180003080
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.18000fca0
nop
lea r9, [rbp + 0x58]
cmp qword [rbp + 0x70], 7
cmova r9, qword [rbp + 0x58]
mov r15, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
sub rax, r15
mov r14, qword [rbp + 0x68]
cmp r14, rax
ja 0x18001e9ff
lea rax, [r15 + r14]
mov qword [rbp - 0x68], rax
lea rbx, [rbp - 0x78]
cmp rcx, 7
cmova rbx, qword [rbp - 0x78]
lea rcx, [rbx + r15*2]
lea r8, [r14 + r14]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + r15]
mov word [rbx + rax*2], di
lea rax, [rbp - 0x78]
jmp 0x18001ea10
mov qword [rsp + 0x20], r14
mov rdx, r14
lea rcx, [rbp - 0x78]
call fcn.180026300
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x78], xmm0
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x18001ea74
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ea6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001ea6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], di
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x18001eac8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001eac3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001eac3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
movq rax, xmm6
lea rax, [rax*2 - 4]
mov qword [rbp - 0x58], rax
mov r8, qword [rbp + 0x30]
test r8, r8
je 0x1800213fa
mov r12d, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov rdx, qword [rax + r12*8]
lea rax, [rax + r12*8]
mov qword [rbp - 0x50], rax
mov rax, qword gs:[0x58]
lea rax, [rax + r12*8]
mov qword [rbp - 0x48], rax
mov rax, qword gs:[0x58]
lea rax, [rax + r12*8]
mov qword [rbp - 0x40], rax
mov rax, qword gs:[0x58]
lea rax, [rax + r12*8]
mov qword [rbp - 0x38], rax
mov rax, qword gs:[0x58]
lea rax, [rax + r12*8]
mov qword [rbp - 8], rax
mov rax, qword gs:[0x58]
lea rax, [rax + r12*8]
mov qword [rbp], rax
mov r9d, 4
mov ecx, r9d
add rcx, rdx
mov qword [rbp + 0x38], rcx
mov r12d, r9d
add r12, rdx
mov qword [rbp - 0x30], r12
mov r15d, r9d
mov qword [rbp + 0x20], r15
nop word [rax + rax]
mov word [rbp + 0x18], di
lea r14, [r8 + 8]
mov eax, dword [rcx]
cmp dword [0x18008a298], eax
jle 0x18001ee84
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18001ee84
mov rax, qword [str.UWVSK__]
mov qword [rbp + 8], rax
cmp byte [0x18002ac27], 0
je 0x18001ed03
cmp r13d, 2
jl 0x18001ecba
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm9
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 8]
xorps xmm2, xmm1
movd dword [rbp + 8], xmm2
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xc]
xorps xmm2, xmm1
movd dword [rbp + 0xc], xmm2
jmp 0x18001ed03
lea r9, [rbp + 8]
mov r8d, edi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18001ecd0
mov eax, dword [0x18002abd8]
mov dword [rsp + 0x60], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rsp + 0x58], xmm0
mov byte [rsp + 0x64], al
mov r8d, edi
cmp r13d, 2
jl 0x18001ee16
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rsp + 0x58], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x5c]
xorps xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001ee30
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x58]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rbx, qword [0x18008a300]
mov eax, dword [r12]
cmp dword [0x18008a2f8], eax
jle 0x18001eedc
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18001eedc
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0xf0], 0x25ff
mov word [rbp + 0xf4], 0
mov qword [rbp + 0xf6], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x10], 0xe
lea rcx, [rbp + 0x138]
mov qword [rbp + 8], rcx
mov qword [rbp + 0x28], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x1800213ee
mov rax, qword [rcx]
lea r9, [rbp + 0x10]
lea r8, [rbp + 8]
lea rdx, [rbp + 0x28]
call qword [rax + 0x10]
test al, al
je 0x180021298
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x28], 0xe
lea rcx, [rbp + 0xf0]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x180021291
mov rax, qword [rcx]
lea r9, [rbp + 0x28]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x180021298
mov rax, qword [0x18008a2b8]
mov r8d, 2
mov rdx, r14
lea rcx, [rbp + 0x18]
call rax
mov rbx, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x28], 0xe
lea rax, [rbp + 0x138]
mov qword [rbp + 0x10], rax
mov qword [rbp + 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x18002128a
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x28]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
call r10
test al, al
je 0x180021298
test rbx, rbx
je 0x180021298
movzx eax, word [rbp + 0x18]
test ax, ax
je 0x180021298
cmp qword [rbp - 0x58], rax
jne 0x18001fa36
mov qword [rbp + 0x10], rdi
mov r14, qword [rbp + 0x30]
mov rax, qword [rbp - 0x50]
mov rax, qword [rax]
mov ecx, dword [r15 + rax]
cmp dword [0x18008a298], ecx
jle 0x18001f2f4
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18001f2f4
mov rax, qword [str.UWVSK__]
mov qword [rbp + 8], rax
cmp byte [0x18002ac27], 0
je 0x18001f173
cmp r13d, 2
jl 0x18001f135
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm9
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 8]
xorps xmm2, xmm1
movd dword [rbp + 8], xmm2
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xc]
xorps xmm2, xmm1
movd dword [rbp + 0xc], xmm2
jmp 0x18001f173
lea r9, [rbp + 8]
mov r8d, edi
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18001f140
mov eax, dword [0x18002abd8]
mov dword [rsp + 0x50], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rsp + 0x48], xmm0
mov byte [rsp + 0x54], al
mov r8d, edi
cmp r13d, 2
jl 0x18001f286
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rsp + 0x48], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x4c]
xorps xmm2, xmm1
movd dword [rsp + 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x48]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001f2a0
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x48]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rbx, qword [0x18008a300]
mov rax, qword [rbp - 0x48]
mov rax, qword [rax]
mov ecx, dword [r15 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18001f353
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18001f353
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x100], 0x25ff
mov word [rbp + 0x104], 0
mov qword [rbp + 0x106], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x28], 0xe
lea rcx, [rbp + 0x120]
mov qword [rbp + 8], rcx
mov qword [rbp + 0x48], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x180021118
mov rax, qword [rcx]
lea r9, [rbp + 0x28]
lea r8, [rbp + 8]
lea rdx, [rbp + 0x48]
call qword [rax + 0x10]
test al, al
je 0x180020fc2
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rcx, [rbp + 0x100]
mov qword [rbp + 0x28], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x180020fbb
mov rax, qword [rcx]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x180020fc2
mov rax, qword [0x18008a2b8]
mov r8d, 8
lea rdx, [r14 + 0x10]
lea rcx, [rbp + 0x10]
call rax
mov rbx, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rax, [rbp + 0x120]
mov qword [rbp + 0x28], rax
mov qword [rbp + 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x180020fb4
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 8]
call r10
test al, al
je 0x180020fc2
test rbx, rbx
je 0x180020fc2
cmp qword [rbp + 0x10], 0
je 0x180020fc2
movzx ecx, word [rbp + 0x18]
shr rcx, 1
inc rcx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov rcx, rax
call fcn.1800276b4
mov r12, rax
movzx r8d, word [rbp + 0x18]
add r8, 2
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx r14d, word [rbp + 0x18]
mov r15, qword [rbp + 0x10]
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x20]
mov edx, dword [rax + rcx]
cmp dword [0x18008a298], edx
jle 0x18001f7a4
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18001f7a4
mov rax, qword [str.UWVSK__]
mov qword [rbp + 8], rax
cmp byte [0x18002ac27], 0
je 0x18001f623
cmp r13d, 2
jl 0x18001f5e0
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm9
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 8]
xorps xmm2, xmm1
movd dword [rbp + 8], xmm2
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xc]
xorps xmm2, xmm1
movd dword [rbp + 0xc], xmm2
jmp 0x18001f623
lea r9, [rbp + 8]
mov r8d, edi
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18001f5f0
mov eax, dword [0x18002abd8]
mov dword [rsp + 0x40], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rsp + 0x38], xmm0
mov byte [rsp + 0x44], al
mov r8d, edi
cmp r13d, 2
jl 0x18001f736
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rsp + 0x38], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x3c]
xorps xmm2, xmm1
movd dword [rsp + 0x3c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x38]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001f750
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x38]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rbx, qword [0x18008a300]
mov rax, qword [rbp - 0x38]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x20]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18001f806
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18001f806
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x110], 0x25ff
mov word [rbp + 0x114], 0
mov qword [rbp + 0x116], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rcx, [rbp + 0xd0]
mov qword [rbp + 0x28], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x180020fad
mov rax, qword [rcx]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x180020e57
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rcx, [rbp + 0x110]
mov qword [rbp + 0x28], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x180020e50
mov rax, qword [rcx]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 8]
call qword [rax + 0x10]
test al, al
je 0x180020e57
mov rax, qword [0x18008a2b8]
mov r8, r14
mov rdx, r15
mov rcx, r12
call rax
mov rbx, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x28], rax
mov qword [rbp + 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x180020e49
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 8]
call r10
test al, al
je 0x180020e57
test rbx, rbx
je 0x180020e57
mov rdx, r12
lea rcx, [rbp - 0x28]
call fcn.18000fb60
mov r14, rax
lea r10, [rbp + 0x58]
cmp qword [rbp + 0x70], 7
cmova r10, qword [rbp + 0x58]
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x18001f93c
mov r14, qword [rax]
mov r11, qword [rbp + 0x68]
cmp r11, rcx
ja 0x18001f9d5
test r11, r11
jne 0x18001f956
mov rbx, rdi
jmp 0x18001f9dc
sub rcx, r11
lea r15, [rcx + 1]
lea r15, [r14 + r15*2]
mov rbx, r14
movzx r9d, word [r10]
nop dword [rax + rax]
mov rax, r15
sub rax, rbx
sar rax, 1
mov rcx, rdi
je 0x18001f99a
cmp word [rbx], r9w
je 0x18001f997
cmp rax, 1
je 0x18001f99a
dec rax
add rbx, 2
cmp word [rbx], r9w
jne 0x18001f984
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x18001f9d5
mov rdx, r11
mov rcx, r10
test r11, r11
je 0x18001f9c7
mov r8, rbx
sub r8, r10
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x18001f9cf
add rcx, 2
sub rdx, 1
jne 0x18001f9b3
sub rbx, r14
sar rbx, 1
jmp 0x18001f9dc
add rbx, 2
jmp 0x18001f970
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x18001fa1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fa17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001feaa
call fcn.1800271e0
cmp rbx, 0xffffffffffffffff
jne 0x18001feb1
mov rcx, r12
call fcn.1800271e0
mov r15, qword [rbp + 0x20]
mov r12, qword [rbp - 0x30]
mov r14, qword [rbp + 0x30]
mov qword [rbp + 0x50], r14
mov rax, qword [rbp - 8]
mov rax, qword [rax]
mov ecx, dword [r15 + rax]
cmp dword [0x18008a298], ecx
jle 0x18001fd26
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18001fd26
mov rax, qword [str.UWVSK__]
mov qword [rbp + 8], rax
cmp byte [0x18002ac27], 0
je 0x18001fba3
cmp r13d, 2
jl 0x18001fb69
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm9
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 8]
xorps xmm2, xmm1
movd dword [rbp + 8], xmm2
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xc]
xorps xmm2, xmm1
movd dword [rbp + 0xc], xmm2
jmp 0x18001fba3
lea r9, [rbp + 8]
mov r8d, edi
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18001fb70
mov eax, dword [0x18002abd8]
mov dword [rbp + 0xa0], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp + 0x98], xmm0
mov byte [rbp + 0xa4], al
mov r8d, edi
cmp r13d, 2
jl 0x18001fcc2
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001fcd0
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rbx, qword [0x18008a300]
mov rax, qword [rbp]
mov rax, qword [rax]
mov ecx, dword [r15 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18001fd85
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18001fd85
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x180021283
mov rax, qword [rcx]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x10]
call qword [rax + 0x10]
test al, al
je 0x18002112d
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x10], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x180021126
mov rax, qword [rcx]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x10]
call qword [rax + 0x10]
test al, al
je 0x18002112d
mov rax, qword [0x18008a2b8]
mov r8d, 8
mov rdx, r14
lea rcx, [rbp + 0x30]
call rax
mov rbx, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x48], 0xe
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x10], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
je 0x18002111f
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x10]
call r10
test al, al
je 0x18002112d
test rbx, rbx
je 0x18002112d
mov r8, qword [rbp + 0x30]
test r8, r8
je 0x1800213f5
mov rcx, qword [rbp + 0x38]
jmp 0x18001eb90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rbp + 0x20], rdi
mov r14, qword [rbp + 0x30]
mov r15d, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r15*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a298], ecx
jle 0x1800201a6
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x1800201a6
mov rax, qword [str.UWVSK__]
mov qword [rbp + 8], rax
cmp r13d, 2
jl 0x18001ffe8
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm9
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 8]
xorps xmm2, xmm1
movd dword [rbp + 8], xmm2
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xc]
xorps xmm2, xmm1
movd dword [rbp + 0xc], xmm2
jmp 0x180020023
lea r9, [rbp + 8]
mov r8d, edi
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18001fff0
mov eax, dword [0x18002abd8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18002abdc]
movsd xmm0, qword [str.VMUHWOPSn_:D]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
mov r8d, edi
cmp r13d, 2
jl 0x180020142
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm9
psubd xmm1, xmm0
andps xmm1, xmm11
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x180020150
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rbx, qword [0x18008a300]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r15*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18002020f
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18002020f
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x180020257
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020cf9
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18002029f
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020cf9
mov rax, qword [0x18008a2b8]
mov r8d, 8
mov rdx, r14
lea rcx, [rbp + 0x20]
call rax
mov rbx, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rax, [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp - 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020300
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020cf9
test rbx, rbx
je 0x180020cf9
mov rax, qword gs:[0x58]
mov r14d, 4
mov rax, qword [rax + r15*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18008a298], ecx
jle 0x180020612
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x180020612
mov rax, qword [str.UWVSK__]
mov qword [rbp + 8], rax
cmp r13d, 2
jl 0x18002044d
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm9
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 8]
xorps xmm2, xmm1
movd dword [rbp + 8], xmm2
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm11
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xc]
xorps xmm2, xmm1
movd dword [rbp + 0xc], xmm2
jmp 0x180020493
lea r9, [rbp + 8]
mov r8d, edi
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x180020460
mov eax, dword [0x18002abd8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18002abdc]
movsd xmm0, qword [str.VMUHWOPSn_:D]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
cmp r13d, 2
jl 0x1800205b0
movdqa xmm1, xmm9
punpckldq xmm1, xmm9
pmuldq xmm1, xmm7
movdqa xmm0, xmm9
punpckhdq xmm0, xmm9
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm9
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm9, xmm0
andps xmm9, xmm11
packuswb xmm9, xmm9
packuswb xmm9, xmm9
movd eax, xmm12
movd xmm0, eax
paddb xmm9, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm9, xmm0
movd dword [rbp + 0x98], xmm9
movdqa xmm1, xmm10
punpckldq xmm1, xmm10
pmuldq xmm1, xmm7
movdqa xmm0, xmm10
punpckhdq xmm0, xmm10
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm10
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm10, xmm0
andps xmm10, xmm11
packuswb xmm10, xmm10
packuswb xmm10, xmm10
movd xmm0, eax
paddb xmm10, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm10, xmm1
movd dword [rbp + 0x9c], xmm10
mov edi, 8
movsxd rax, edi
lea r8, [rbp + 0x98]
add r8, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, dil
sub al, cl
add al, 0x38
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 0xd
jl 0x1800205c0
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rbx, qword [0x18008a300]
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x180020677
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x180020677
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x1800206bf
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020bad
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020707
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020bad
mov rax, qword [0x18008a2b8]
mov r8d, 8
lea rdx, [rbp + 0x20]
mov rcx, qword [rbp + 0x50]
call rax
mov rbx, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rax, [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp - 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020769
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020bad
test rbx, rbx
je 0x180020bad
mov rdi, qword [rbp + 0x30]
mov rbx, qword [0x18008a440]
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18008a3b8], ecx
jle 0x1800207f5
lea rcx, [0x18008a3b8]
call fcn.180027290
cmp dword [0x18008a3b8], 0xffffffff
jne 0x1800207f5
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a3f8], rax
lea rcx, [0x18008a3b8]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x18002083d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020a61
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020885
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020a61
mov rcx, rdi
call qword [0x18008a3f8]
mov rbx, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rax, [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp - 8], rcx
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x1800208d9
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020a61
test rbx, rbx
je 0x180020a61
mov rbx, qword [0x18008a3e8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18008a474], ecx
jle 0x180020961
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180020961
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x1800209a9
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020a52
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x1800209f1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180020a52
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020a40
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
mov rcx, r12
call fcn.1800271e0
mov bl, 1
jmp 0x18002155a
mov rbx, qword [0x18008a3e8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18008a474], ecx
jle 0x180020ac6
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180020ac6
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x180020b0e
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020b56
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rbx, qword [0x18008a3e8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + r15*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18008a474], ecx
jle 0x180020c12
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180020c12
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x180020c5a
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020ca2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rbx, qword [0x18008a3e8]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r15*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a474], ecx
jle 0x180020d62
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180020d62
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x180020daa
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020df2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rbx, qword [0x18008a3e8]
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a474], ecx
jle 0x180020ec6
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180020ec6
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x180020f0e
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180020f56
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rbx, qword [0x18008a3e8]
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a474], ecx
jle 0x180021031
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180021031
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x180021079
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x1800210c1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rbx, qword [0x18008a3e8]
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a474], ecx
jle 0x18002119c
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x18002119c
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x1800211e4
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18002122c
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rbx, qword [0x18008a3e8]
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a474], ecx
jle 0x180021307
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180021307
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x18002134f
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021397
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, qword [rsp + 0x30]
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov r12, qword [rsp + 0x30]
mov rbx, qword [0x18008a3e8]
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x18008a474], ecx
jle 0x180021469
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180021469
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rbx
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x1800214b1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x1800214f9
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021558
mov rcx, r12
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x180021546
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
xor bl, bl
mov rdx, qword [rbp + 0x90]
cmp rdx, 7
jbe 0x1800215a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002159b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002159b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 7
jbe 0x1800215e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800215df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800215df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movzx eax, bl
jmp 0x180021733
mov rdi, qword [0x18008a3e8]
mov eax, dword [rbx]
cmp dword [0x18008a474], eax
jle 0x180021642
lea rcx, [0x18008a474]
call fcn.180027290
cmp dword [0x18008a474], 0xffffffff
jne 0x180021642
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a480], rax
lea rcx, [0x18008a474]
call fcn.180027224
mov dword [rbp + 0xa8], 0x25ff
mov word [rbp + 0xac], 0
mov qword [rbp + 0xae], rdi
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x38]
test rcx, rcx
jne 0x18002168a
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021731
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xa8]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x1800216d2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
test al, al
je 0x180021731
mov rcx, r12
call qword [0x18008a480]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x38], 0xe
lea rcx, [rbp + 0xc0]
mov qword [rbp], rcx
mov qword [rbp - 8], rax
mov rcx, qword [rsi + 0x78]
test rcx, rcx
jne 0x18002171f
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
lea r9, [rbp + 0x38]
lea r8, [rbp]
lea rdx, [rbp - 8]
call qword [rax + 0x10]
xor al, al
mov rcx, qword [rbp + 0x148]
xor rcx, rsp
call fcn.1800271c0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret