Function at 0x180022b30
Capabilities:
Access the windows event log
Create thread
Enumerate services

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x538]
sub rsp, 0x5f8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov r14, rcx
xor ecx, ecx
mov qword [rbp + 0x1d8], rcx
mov word [rbp + 0x1e0], cx
movdqa xmm0, xmmword [0x18009ff70]
movdqu xmmword [rbp + 0x1f2], xmm0
mov byte [rbp + 0x1e2], cl
mov qword [rbp + 0x180], rcx
mov word [rbp + 0x188], cx
movdqu xmmword [rbp + 0x19a], xmm0
mov byte [rbp + 0x18a], cl
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0xe8], rcx
movdqa xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], rcx
mov qword [rbp + 0x108], rcx
mov qword [rbp + 0x110], rcx
mov qword [rbp + 0x210], rcx
mov qword [rbp + 0x218], rcx
mov qword [rbp + 0x220], rcx
mov ecx, 0x30
call fcn.180069fb0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x218], rax
xor r8d, r8d
mov qword [rbp + 0x228], r8
xorps xmm8, xmm8
movsd qword [rbp + 8], xmm8
movsd qword [rbp + 0x230], xmm8
mov qword [rbp + 0x238], r8
mov edx, 1
mov dword [rbp + 0x240], edx
mov qword [rbp + 0x248], r8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x260], xmm1
movdqa xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r8
mov qword [rbp + 0x288], 0xffffffffffffffff
mov dword [rbp + 0x290], r8d
xor eax, eax
movups xmmword [rbp + 0x298], xmm0
movups xmmword [rbp + 0x2a8], xmm0
movups xmmword [rbp + 0x2b8], xmm0
movups xmmword [rbp + 0x2c8], xmm0
mov qword [rbp + 0x2d8], rax
movdqa xmm0, xmmword [0x18009ff70]
movdqa xmmword [rbp + 0x2f0], xmm0
mov byte [rbp + 0x2e0], al
mov word [rbp + 0x300], r8w
mov dword [rbp + 0x304], r8d
mov qword [rbp + 0x308], r8
xorps xmm0, xmm0
movaps xmmword [rbp + 0x310], xmm0
movsd qword [rbp + 0x320], xmm8
mov byte [rbp + 0x328], al
mov qword [rbp + 0x32c], r8
mov r9d, dword [rbp + 0x560]
mov dword [rsp + 0x68], r9d
mov dword [rbp - 0x50], r9d
imul eax, r9d, 0x226
mov dword [rbp], eax
mov ebx, dword [rbp - 0x4c]
cmp r9d, eax
ja 0x180024cc2
movsd xmm15, qword [0x18009f4f0]
movsd xmm13, qword [0x18009f550]
movsd xmm7, qword [0x18009f738]
movsd xmm14, qword [0x18009f678]
mov dword [rbp - 0x28], ebx
movzx eax, byte [rsp + 0x50]
mov dword [rbp - 0x18], eax
mov rdx, qword [rsp + 0x60]
mov qword [rbp - 0x78], rdx
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x50], al
mov r8d, dword [rsp + 0x6c]
mov dword [rsp + 0x54], r8d
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x51], al
movzx eax, byte [rsp + 0x50]
mov dword [rsp + 0x58], eax
mov r10, qword [rsp + 0x60]
mov qword [rbp - 0x20], r10
mov r15, qword [rsp + 0x60]
mov qword [rbp - 0x60], r15
mov r11, qword [rsp + 0x60]
mov qword [rbp + 0x18], r11
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x70], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x98], rax
mov rdi, qword [rsp + 0x60]
mov qword [rbp - 0x38], rdi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x120], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x128], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0xa0], rax
mov r13d, dword [rsp + 0x6c]
mov dword [rbp - 0x80], r13d
mov eax, dword [rsp + 0x6c]
mov dword [rbp + 0x2c], eax
mov ecx, dword [rsp + 0x6c]
mov dword [rbp - 0x30], ecx
movsd xmm10, qword [rsp + 0x60]
movsd qword [rbp + 0x88], xmm10
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x60], rax
movsd xmm11, qword [rsp + 0x60]
movsd qword [rbp + 0xa8], xmm11
mov rcx, qword [rsp + 0x60]
mov qword [rbp + 0x68], rcx
movsd xmm6, qword [rsp + 0x60]
movsd xmm9, qword [rsp + 0x60]
movsd xmm12, qword [rsp + 0x60]
mov r12, qword [rsp + 0x60]
mov qword [rbp - 0x70], r12
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x138], rax
mov rcx, qword [rbp + 0x50]
mov qword [rbp + 0x130], rcx
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x78], rax
mov r9, qword [rsp + 0x60]
mov qword [rbp - 0x68], r9
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x158], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x90], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x150], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x178], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x168], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x140], rax
mov rsi, qword [rsp + 0x60]
mov qword [rbp + 0x10], rsi
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x170], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x160], rax
mov eax, dword [rsp + 0x6c]
mov dword [rbp + 0x24], eax
mov eax, dword [rsp + 0x6c]
mov dword [rbp + 0x20], eax
mov eax, dword [rsp + 0x6c]
mov dword [rbp + 0x28], eax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x148], rax
mov eax, dword [rbp - 0x50]
nop dword [rax]
cmp eax, 0x188
ja 0x180023311
je 0x180023243
sub eax, 7
je 0x180023201
sub eax, 0x8f
je 0x180024c90
sub eax, 0x21
je 0x1800231be
sub eax, 0x46
je 0x1800231a3
cmp eax, 0x22
jne 0x180024c5e
lea rax, [0x1800b53d8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xa6
call fcn.18000f090
test al, al
jne 0x180024c55
mov edi, 0x114
nop dword [rax + rax]
cmp edi, 0x11400
ja 0x18002308d
je 0x180023012
cmp edi, 0x114
je 0x180022ffd
cmp edi, 0x5cb8
je 0x180022fe9
cmp edi, 0xb85c
jne 0x180023188
xor eax, eax
mov qword [rbp + 0x1c0], rax
mov dword [rbp + 0x24], 0xb
mov dword [rbp + 0x38], eax
mov dword [rbp + 0x20], 1
jmp 0x180023188
xor eax, eax
mov qword [rbp + 0x1b0], rax
mov dword [rbp - 8], eax
mov dword [rbp + 0x28], eax
jmp 0x180023188
xor eax, eax
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x148], rax
jmp 0x180023188
xor r15d, r15d
mov qword [rbp + 0x1b8], r15
mov dword [rbp + 0x80], r15d
mov dword [rbp + 0x84], r15d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
lea rax, [rbp + 0x84]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, dword [rbp + 0x20]
mov r8d, dword [rbp + 0x24]
mov edx, dword [rbp + 0x28]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusExW]
jmp 0x180023188
cmp edi, 0x16fa4
je 0x18002313d
cmp edi, 0x1cb48
jne 0x180023188
mov esi, ebx
lea rcx, [rbp + 0x288]
call fcn.180004550
mov rbx, qword [rbp + 0x270]
test rbx, rbx
je 0x1800252bf
mov rdi, qword [rbp + 0x278]
cmp rbx, rdi
je 0x1800230e8
nop
mov rcx, rbx
call fcn.18001b4d0
add rbx, 0x20
cmp rbx, rdi
jne 0x1800230d0
mov rbx, qword [rbp + 0x270]
mov rdx, qword [rbp + 0x280]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x18002311b
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800254ed
mov rcx, rbx
call fcn.180069fec
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x270], xmm0
xor r14d, r14d
mov qword [rbp + 0x280], r14
jmp 0x1800252c2
lea rax, [rbp + 0x350]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1c0]
lea r8, [rbp - 8]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.ADVAPI32.dll_LookupSecurityDescriptorPartsA]
mov ebx, 1
mov dword [rbp - 0x28], ebx
mov dword [rbp - 0x4c], ebx
add edi, 0x5ba4
cmp edi, 0x225d8
jbe 0x180022fa0
mov rdi, qword [rbp - 0x38]
jmp 0x180024c55
mov rcx, qword [rbp + 0x550]
call qword [0x18073dbd8]
mov byte [rbp - 0x4c], al
mov ebx, dword [rbp - 0x4c]
mov dword [rbp - 0x28], ebx
jmp 0x180024c55
mov r15, qword [rbp + 0x550]
mov r8d, dword [r15 + 0xc]
mov dword [rsp + 0x54], r8d
mov eax, dword [r15 + 4]
cmp qword [r15 + 0x1fc0], 0
jne 0x180024c5e
mov dword [rbp - 0x48], eax
mov r9, r15
xor edx, edx
lea r8d, [rdx + 0xa]
lea rcx, [rbp - 0x48]
call fcn.18003db80
mov qword [r15 + 0x1fc0], rax
jmp 0x180024c55
mov rdx, r14
mov qword [rbp - 0x78], rdx
xor eax, eax
mov rcx, r14
mov r9d, 0x100
nop dword [rax]
nop word [rax + rax]
mov byte [rcx], al
inc ax
lea rcx, [rcx + 1]
cmp ax, r9w
jb 0x180023220
mov word [r14 + 0x100], 0
xor al, al
mov dword [rbp - 0x18], eax
jmp 0x180024c5e
xor r10b, r10b
xor eax, eax
movzx r9d, ax
mov r13d, dword [rbp - 0x18]
movzx esi, byte [rsp + 0x50]
mov rdi, qword [rbp + 0x558]
mov r14, qword [rbp + 0x550]
nop dword [rax]
nop word [rax + rax]
mov r8d, 0x4e
mov eax, r8d
sub eax, 0x4e
je 0x1800232c5
sub eax, 1
je 0x1800232a6
cmp eax, 1
jne 0x1800232d8
movzx eax, r10b
mov byte [rax + rdx], sil
movzx eax, r13b
inc eax
cdq
idiv dword [rdi]
mov r13d, edx
inc r9w
mov rdx, qword [rbp - 0x78]
jmp 0x1800232d8
movzx edx, r9w
mov r11, qword [rbp - 0x78]
movzx esi, byte [rdx + r11]
movzx eax, r10b
movzx ecx, byte [rax + r11]
mov byte [rdx + r11], cl
mov rdx, r11
jmp 0x1800232d8
movzx ecx, r9w
movzx eax, r13b
movzx ecx, byte [rcx + rdx]
add cl, byte [rax + r14]
add r10b, cl
inc r8d
cmp r8d, 0x51
jb 0x180023276
mov byte [rsp + 0x50], sil
mov dword [rbp - 0x18], r13d
mov eax, 0x100
cmp r9w, ax
jb 0x180023270
mov rdi, qword [rbp - 0x38]
mov rsi, qword [rbp + 0x10]
mov r14, qword [rbp + 0x540]
mov r13d, dword [rbp - 0x80]
jmp 0x180024c59
cmp eax, 0x2808
je 0x180024aba
cmp eax, 0x3758
je 0x1800230a5
cmp eax, 0x3ec8
je 0x180024a6b
cmp eax, 0x4f59
jne 0x180024c5e
xor eax, eax
mov dword [rbp - 0x2c], eax
test r8d, r8d
je 0x180024c5e
xor ebx, ebx
mov r8d, ebx
mov qword [rbp - 0x40], rbx
nop dword [rax]
nop dword [rax + rax]
mov dword [rbp - 0x48], ebx
mov qword [rbp + 0x48], rbx
nop word [rax + rax]
mov eax, 0x1c
mov dword [rbp + 0x3c], eax
nop dword [rax + rax]
add eax, 0xffffffe9
cmp eax, 5
ja case.default.0x18002339d
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x25500]
add rcx, rdx
jmp rcx
mov rax, qword [r15]
mov qword [r10], rax
mov rax, qword [rbp + 0x70]
movsd xmm0, qword [rax]
mulsd xmm0, qword [r15]
movsd qword [r11], xmm0
mov rdx, qword [rbp + 0x98]
add rdx, 0xc
lea rcx, [r15 + 0x10]
mov r8, rax
sub r8, r15
mov r9d, 0x40
nop dword [rax]
nop word [rax + rax]
movsxd rax, dword [rdx - 8]
movsd xmm0, qword [r10 + rax*8]
addsd xmm0, qword [rcx - 8]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx - 8]
movsd xmm0, qword [rcx + r8 - 8]
mulsd xmm0, qword [rcx - 8]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
movsxd rax, dword [rdx - 4]
movsd xmm0, qword [rcx]
addsd xmm0, qword [r10 + rax*8]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx - 4]
movsd xmm0, qword [rcx + r8]
mulsd xmm0, qword [rcx]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
movsxd rax, dword [rdx]
movsd xmm0, qword [r10 + rax*8]
addsd xmm0, qword [rcx + 8]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx]
movsd xmm0, qword [rcx + r8 + 8]
mulsd xmm0, qword [rcx + 8]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
movsxd rax, dword [rdx + 4]
movsd xmm0, qword [r10 + rax*8]
addsd xmm0, qword [rcx + 0x10]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx + 4]
movsd xmm0, qword [rcx + r8 + 0x10]
mulsd xmm0, qword [rcx + 0x10]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
movsxd rax, dword [rdx + 8]
movsd xmm0, qword [rcx + 0x18]
addsd xmm0, qword [r10 + rax*8]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx + 8]
movsd xmm0, qword [rcx + r8 + 0x18]
mulsd xmm0, qword [rcx + 0x18]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
movsxd rax, dword [rdx + 0xc]
movsd xmm0, qword [r10 + rax*8]
addsd xmm0, qword [rcx + 0x20]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx + 0xc]
movsd xmm0, qword [rcx + r8 + 0x20]
mulsd xmm0, qword [rcx + 0x20]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
movsxd rax, dword [rdx + 0x10]
movsd xmm0, qword [rcx + 0x28]
addsd xmm0, qword [r10 + rax*8]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx + 0x10]
movsd xmm0, qword [rcx + r8 + 0x28]
mulsd xmm0, qword [rcx + 0x28]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
movsxd rax, dword [rdx + 0x14]
movsd xmm0, qword [r10 + rax*8]
addsd xmm0, qword [rcx + 0x30]
movsd qword [r10 + rax*8], xmm0
movsxd rax, dword [rdx + 0x14]
movsd xmm0, qword [rcx + r8 + 0x30]
mulsd xmm0, qword [rcx + 0x30]
addsd xmm0, qword [r11 + rax*8]
movsd qword [r11 + rax*8], xmm0
add rdx, 0x20
add rcx, 0x40
sub r9, 1
jne 0x1800233e0
jmp 0x180024747
mov eax, dword [rbp - 0x2c]
lea rdx, [rax + rax*8]
shl rdx, 8
add rdx, qword [rbp + 0x558]
mov r11d, ebx
imul r10, r8, 0x420
mov rsi, qword [rbp + 0x120]
lea r9, [rsi + 8]
lea rbx, [r10 + 2]
lea rbx, [r14 + rbx*2]
mov r8, qword [rbp + 0x128]
sub r8, rsi
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [rdi + 0xc]
add ecx, r11d
add rcx, r10
movsx eax, word [r14 + rcx*2]
mov word [rbx - 4], ax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r9 + r8 - 8]
movsd qword [r9 - 8], xmm0
mov eax, dword [rdi + 0xc]
inc eax
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx - 2], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9]
movsd qword [r9], xmm0
mov eax, dword [rdi + 0xc]
add eax, 2
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 8]
movsd qword [r9 + 8], xmm0
mov eax, dword [rdi + 0xc]
add eax, 3
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx + 2], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 0x10]
movsd qword [r9 + 0x10], xmm0
mov eax, dword [rdi + 0xc]
add eax, 4
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx + 4], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 0x18]
movsd qword [r9 + 0x18], xmm0
mov eax, dword [rdi + 0xc]
add eax, 5
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx + 6], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 0x20]
movsd qword [r9 + 0x20], xmm0
mov eax, dword [rdi + 0xc]
add eax, 6
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx + 8], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 0x28]
movsd qword [r9 + 0x28], xmm0
mov eax, dword [rdi + 0xc]
add eax, 7
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx + 0xa], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 0x30]
movsd qword [r9 + 0x30], xmm0
mov eax, dword [rdi + 0xc]
add eax, 8
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx + 0xc], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 0x38]
movsd qword [r9 + 0x38], xmm0
mov eax, dword [rdi + 0xc]
add eax, 9
add eax, r11d
add rax, r10
movsx ecx, word [r14 + rax*2]
mov word [rbx + 0xe], cx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + r9 + 0x40]
movsd qword [r9 + 0x40], xmm0
add r11d, 0xa
lea rbx, [rbx + 0x14]
lea r9, [r9 + 0x50]
cmp r11d, 0x1e0
jb 0x1800235c0
cmp r11d, 0x400
jae 0x1800238b0
mov edi, r11d
mov eax, 0x400
sub eax, r11d
cmp eax, 4
jb 0x18002385f
lea rcx, [rsi + 8]
lea rcx, [rcx + r11*8]
lea r9, [r11 + 2]
add r9, r10
lea r9, [r14 + r9*2]
mov eax, 0x3fc
sub eax, r11d
shr eax, 2
inc eax
mov ebx, eax
lea r11d, [r11 + rax*4]
lea rdi, [rdi + rax*4]
nop dword [rax]
nop word [rax + rax]
movsx eax, word [rdx]
mov word [r9 - 4], ax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [rcx + r8 - 8]
movsd qword [rcx - 8], xmm0
movsx eax, word [rdx + 2]
mov word [r9 - 2], ax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + rcx]
movsd qword [rcx], xmm0
movsx eax, word [rdx + 4]
mov word [r9], ax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + rcx + 8]
movsd qword [rcx + 8], xmm0
movsx eax, word [rdx + 6]
mov word [r9 + 2], ax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + rcx + 0x10]
movsd qword [rcx + 0x10], xmm0
add rdx, 8
lea r9, [r9 + 8]
lea rcx, [rcx + 0x20]
sub rbx, 1
jne 0x1800237d0
cmp r11d, 0x400
jae 0x1800238a1
lea rcx, [rsi + rdi*8]
lea rax, [r10 + rdi]
lea r9, [r14 + rax*2]
mov eax, 0x400
sub eax, r11d
mov r11d, eax
movsx eax, word [rdx]
mov word [r9], ax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [r8 + rcx]
movsd qword [rcx], xmm0
add rdx, 2
lea r9, [r9 + 2]
lea rcx, [rcx + 8]
sub r11, 1
jne 0x180023876
mov rdi, qword [rbp - 0x38]
nop word [rax + rax]
movzx eax, word [rdx]
mov word [r14 + r10*2 + 0x800], ax
movzx eax, word [rdx + 2]
mov word [r14 + r10*2 + 0x802], ax
movzx eax, word [rdx + 4]
mov word [r14 + r10*2 + 0x804], ax
movzx eax, word [rdx + 6]
mov word [r14 + r10*2 + 0x806], ax
movzx eax, word [rdx + 8]
mov word [r14 + r10*2 + 0x808], ax
movzx eax, word [rdx + 0xa]
mov word [r14 + r10*2 + 0x80a], ax
movzx eax, word [rdx + 0xc]
mov word [r14 + r10*2 + 0x80c], ax
movzx eax, word [rdx + 0xe]
mov word [r14 + r10*2 + 0x80e], ax
movzx eax, word [rdx + 0x10]
mov word [r14 + r10*2 + 0x810], ax
movzx eax, word [rdx + 0x12]
mov word [r14 + r10*2 + 0x812], ax
movzx eax, word [rdx + 0x14]
mov word [r14 + r10*2 + 0x814], ax
movzx eax, word [rdx + 0x16]
mov word [r14 + r10*2 + 0x816], ax
movzx eax, word [rdx + 0x18]
mov word [r14 + r10*2 + 0x818], ax
movzx eax, word [rdx + 0x1a]
mov word [r14 + r10*2 + 0x81a], ax
movzx eax, word [rdx + 0x1c]
mov word [r14 + r10*2 + 0x81c], ax
movzx eax, word [rdx + 0x1e]
mov word [r14 + r10*2 + 0x81e], ax
movzx eax, word [rdx + 0x20]
mov word [r14 + r10*2 + 0x820], ax
movzx eax, word [rdx + 0x22]
mov word [r14 + r10*2 + 0x822], ax
movzx eax, word [rdx + 0x24]
mov word [r14 + r10*2 + 0x824], ax
movzx eax, word [rdx + 0x26]
mov word [r14 + r10*2 + 0x826], ax
movzx eax, word [rdx + 0x28]
mov word [r14 + r10*2 + 0x828], ax
movzx eax, word [rdx + 0x2a]
mov word [r14 + r10*2 + 0x82a], ax
movzx eax, word [rdx + 0x2c]
mov word [r14 + r10*2 + 0x82c], ax
movzx eax, word [rdx + 0x2e]
mov word [r14 + r10*2 + 0x82e], ax
movzx eax, word [rdx + 0x30]
mov word [r14 + r10*2 + 0x830], ax
movzx eax, word [rdx + 0x32]
mov word [r14 + r10*2 + 0x832], ax
movzx eax, word [rdx + 0x34]
mov word [r14 + r10*2 + 0x834], ax
movzx eax, word [rdx + 0x36]
mov word [r14 + r10*2 + 0x836], ax
movzx eax, word [rdx + 0x38]
mov word [r14 + r10*2 + 0x838], ax
movzx eax, word [rdx + 0x3a]
mov word [r14 + r10*2 + 0x83a], ax
movzx eax, word [rdx + 0x3c]
mov word [r14 + r10*2 + 0x83c], ax
movzx eax, word [rdx + 0x3e]
mov word [r14 + r10*2 + 0x83e], ax
mov qword [rsp + 0x20], r15
mov r9, rsi
mov r8, qword [rbp + 0xa0]
mov edx, 0xd3
lea rcx, [rbp + 0xb0]
call fcn.18001d6e0
mov ecx, 0x85
mov r15d, dword [rbp + 0x2c]
xor ebx, ebx
nop word [rax + rax]
mov eax, ecx
sub eax, 0x85
je 0x180023a9d
cmp eax, 0x15
jne 0x180023ab4
mov r13d, dword [rdi]
mov r15d, dword [rdi + 4]
mov eax, dword [rdi + 8]
mov dword [rbp - 0x30], eax
jmp 0x180023ab7
mov eax, ebx
cmp dword [rdi], ebx
sete al
mov dword [rdi], eax
mov dword [rdi + 8], eax
mov eax, ebx
cmp dword [rdi + 4], ebx
sete al
mov dword [rdi + 4], eax
mov eax, dword [rbp - 0x30]
add ecx, 0x15
cmp ecx, 0xaf
jb 0x180023a80
mov dword [rbp + 0x2c], r15d
mov dword [rbp - 0x80], r13d
movsxd r13, r13d
movsxd rcx, r15d
mov qword [rsp + 0x78], rcx
movsxd r8, eax
mov qword [rbp - 0x10], r8
mov r14, rbx
mov rsi, qword [rbp + 0xa0]
mov rdi, qword [rbp + 0x70]
mov r15, qword [rbp - 0x60]
sub rdi, r15
mov qword [rbp - 0x58], rdi
sub r15, rsi
mov r12d, 0x201
movsd xmm14, qword [0x1800a02a0]
nop word [rax + rax]
mov ebx, 0x48
mov eax, ebx
sub eax, 0x48
je 0x180023bf6
sub eax, 0x48
je 0x180023b79
cmp eax, 0x48
jne 0x180023c78
ucomisd xmm6, xmm8
jp 0x180023b49
jne 0x180023b49
movaps xmm0, xmm8
lea rax, [r15 + rsi]
movsd qword [rax + rdi], xmm0
jmp 0x180023c78
movaps xmm1, xmm12
mulsd xmm1, xmm12
movaps xmm0, xmm9
mulsd xmm0, xmm9
addsd xmm1, xmm0
movaps xmm0, xmm1
call fcn.18007855c
divsd xmm0, xmm6
lea rax, [r15 + rsi]
movsd qword [rax + rdi], xmm0
jmp 0x180023c78
mov rax, qword [rbp - 0x40]
lea rax, [rax*2]
add rax, r13
imul rcx, rax, 0x201
add rcx, r14
mov rax, qword [rbp + 0x60]
movsd xmm7, qword [rax + rcx*8]
movsd xmm0, qword [rsi]
call fcn.1800754f0
movaps xmm9, xmm0
mulsd xmm9, xmm7
movaps xmm0, xmm11
call fcn.1800754f0
mulsd xmm0, xmm10
subsd xmm9, xmm0
movsd xmm0, qword [rsi]
call fcn.180077ff0
movaps xmm12, xmm0
mulsd xmm12, xmm7
movaps xmm0, xmm11
call fcn.180077ff0
mulsd xmm0, xmm10
subsd xmm12, xmm0
movaps xmm6, xmm10
andps xmm6, xmm14
addsd xmm6, xmm7
jmp 0x180023c78
mov r9, qword [rbp - 0x40]
lea rax, [rcx + r9*2]
imul rdx, rax, 0x201
add rdx, r14
mov r10, qword [rbp + 0x60]
movsd xmm10, qword [r10 + rdx*8]
lea rax, [r8 + r9*2]
imul rcx, rax, 0x201
add rcx, r14
addsd xmm10, xmm10
subsd xmm10, qword [r10 + rcx*8]
mov rax, qword [rbp + 0x68]
movsd xmm11, qword [rax + rdx*8]
addsd xmm11, xmm11
subsd xmm11, qword [rax + rcx*8]
lea rax, [r9*2]
add rax, r13
imul rdi, rax, 0x201
add rdi, r14
movsd xmm0, qword [r15 + rsi]
call fcn.18007855c
mov rax, qword [rbp + 0x60]
movsd qword [rax + rdi*8], xmm0
mov rax, qword [rsi]
mov rcx, qword [rbp + 0x68]
mov qword [rcx + rdi*8], rax
mov rdi, qword [rbp - 0x58]
add ebx, 0x48
cmp ebx, 0xd8
mov rcx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x10]
jbe 0x180023b15
movsd qword [rbp + 0xa8], xmm11
movsd qword [rbp + 0x88], xmm10
inc r14
add rsi, 8
sub r12, 1
jne 0x180023b10
lea r9d, [r12 + 1]
mov r11, qword [rbp + 0x18]
lea rdx, [r11 + 8]
lea r8, [r11 + 0x1f8]
mov r10, qword [rbp - 0x20]
lea rcx, [r10 + 8]
lea rax, [r10 + 0x1f8]
cmp rdx, rax
movsd xmm14, qword [0x18009f678]
ja 0x180023ced
cmp r8, rcx
jae 0x180023d92
mov eax, 7
xor ebx, ebx
lea r9d, [rax + 0x38]
nop dword [rax + rax]
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], rbx
lea rcx, [rcx + 0x40]
mov qword [rcx - 0x28], rbx
mov qword [rcx - 0x20], rbx
mov qword [rcx - 0x18], rbx
mov qword [rcx - 0x10], rbx
mov qword [rcx - 8], rbx
sub rax, 1
jne 0x180023d00
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], rbx
mov qword [rcx + 0x18], rbx
mov qword [rcx + 0x20], rbx
mov qword [rcx + 0x28], rbx
mov eax, 7
nop word [rax + rax]
mov qword [rdx], rbx
mov qword [rdx + 8], rbx
mov qword [rdx + 0x10], rbx
lea rdx, [rdx + 0x40]
mov qword [rdx - 0x28], rbx
mov qword [rdx - 0x20], rbx
mov qword [rdx - 0x18], rbx
mov qword [rdx - 0x10], rbx
mov qword [rdx - 8], rbx
sub rax, 1
jne 0x180023d50
mov qword [rdx], rbx
mov qword [rdx + 8], rbx
mov qword [rdx + 0x10], rbx
mov qword [rdx + 0x18], rbx
mov qword [rdx + 0x20], rbx
mov qword [rdx + 0x28], rbx
jmp 0x180023d94
xor ebx, ebx
mov eax, r9d
lea rcx, [r11 + rax*8]
mov r8, r10
sub r8, r11
mov edx, 0x40
sub edx, r9d
nop dword [rax]
mov qword [r8 + rcx], rbx
mov qword [rcx], rbx
lea rcx, [rcx + 8]
sub rdx, 1
jne 0x180023db0
movsd xmm7, qword [0x18009f738]
mov rdi, qword [rbp - 0x38]
mov rsi, qword [rbp + 0x10]
mov r14, qword [rbp + 0x540]
mov r13d, dword [rbp - 0x80]
jmp 0x180024747
movsd xmm10, qword [0x18009f5d0]
movsd xmm14, qword [0x18009f700]
movsd xmm7, qword [0x18009f648]
nop dword [rax + rax]
lea eax, [rbx + 0x10]
mov qword [rbp - 0x58], rax
lea eax, [rbx + 0xf]
mov qword [rbp + 0x40], rax
lea eax, [rbx + 0xe]
mov qword [rbp + 0x30], rax
lea ecx, [rbx + 0xd]
mov qword [rsp + 0x78], rcx
lea r13d, [rbx + 0xc]
mov qword [rbp - 0x10], r13
lea r12d, [rbx + 0xb]
lea r15d, [rbx + 0xa]
lea r14d, [rbx + 9]
lea esi, [rbx + 8]
lea edi, [rbx + 7]
lea r11d, [rbx + 6]
lea r10d, [rbx + 5]
lea r9d, [rbx + 4]
lea r8d, [rbx + 3]
lea edx, [rbx + 2]
lea ecx, [rbx + 1]
mov eax, ebx
mov r13, qword [rbp - 0x70]
movsd xmm0, qword [r13 + rax*8]
minsd xmm0, xmm14
mov rax, r13
movsd xmm1, qword [r13 + rcx*8]
minsd xmm1, xmm0
movsd xmm2, qword [r13 + rdx*8]
minsd xmm2, xmm1
movsd xmm0, qword [r13 + r8*8]
minsd xmm0, xmm2
movsd xmm1, qword [r13 + r9*8]
minsd xmm1, xmm0
movsd xmm2, qword [r13 + r10*8]
minsd xmm2, xmm1
movsd xmm0, qword [r13 + r11*8]
minsd xmm0, xmm2
movsd xmm1, qword [r13 + rdi*8]
minsd xmm1, xmm0
movsd xmm2, qword [r13 + rsi*8]
minsd xmm2, xmm1
movsd xmm0, qword [r13 + r14*8]
minsd xmm0, xmm2
movsd xmm1, qword [r13 + r15*8]
minsd xmm1, xmm0
movsd xmm2, qword [r13 + r12*8]
minsd xmm2, xmm1
mov r13, qword [rbp - 0x10]
movsd xmm0, qword [rax + r13*8]
minsd xmm0, xmm2
mov rax, qword [rsp + 0x78]
mov r13, qword [rbp - 0x70]
movsd xmm1, qword [r13 + rax*8]
minsd xmm1, xmm0
mov qword [rsp + 0x70], rax
movsd xmm2, qword [r13 + r13*8]
minsd xmm2, xmm1
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x40]
movsd xmm0, qword [rax + rax*8]
mov rax, qword [rsp + 0x70]
minsd xmm0, xmm2
mov qword [rsp + 0x70], rax
mov rax, qword [rbp - 0x58]
movsd xmm1, qword [rax + rax*8]
mov rax, qword [rsp + 0x70]
minsd xmm1, xmm0
mov qword [rsp + 0x70], rax
mov rax, qword [rbp - 0x60]
movsd xmm0, qword [rax + rax*8]
mov rax, qword [rsp + 0x70]
addsd xmm0, xmm8
addsd xmm0, qword [rax + rcx*8]
mov rcx, qword [rbp - 0x60]
addsd xmm0, qword [rcx + rdx*8]
addsd xmm0, qword [rcx + r8*8]
addsd xmm0, qword [rcx + r9*8]
addsd xmm0, qword [rcx + r10*8]
addsd xmm0, qword [rcx + r11*8]
addsd xmm0, qword [rcx + rdi*8]
addsd xmm0, qword [rcx + rsi*8]
addsd xmm0, qword [rcx + r14*8]
addsd xmm0, qword [rcx + r15*8]
addsd xmm0, qword [rcx + r12*8]
mov r13, qword [rbp - 0x10]
addsd xmm0, qword [rcx + r13*8]
addsd xmm0, qword [rcx + rax*8]
mov rax, qword [rbp + 0x30]
addsd xmm0, qword [rcx + rax*8]
mov rax, qword [rbp + 0x40]
addsd xmm0, qword [rcx + rax*8]
mov rax, qword [rbp - 0x58]
addsd xmm0, qword [rcx + rax*8]
mulsd xmm1, xmm7
divsd xmm0, xmm1
call fcn.180075e70
mulsd xmm0, xmm10
mov ecx, ebx
shr rcx, 4
mov rax, qword [rbp + 0x48]
mov rax, qword [rbp + rax*8 + 0x50]
movsd qword [rax + rcx*8], xmm0
add ebx, 0x10
cmp ebx, 0xc1
jb 0x180023e00
movsd xmm10, qword [rbp + 0x88]
movsd xmm14, qword [0x18009f678]
movsd xmm7, qword [0x18009f738]
mov rdi, qword [rbp - 0x38]
mov r11, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x10]
mov r14, qword [rbp + 0x540]
mov r13d, dword [rbp - 0x80]
xor ebx, ebx
jmp 0x180024743
mov ebx, 0xd0
movsd xmm11, qword [0x18009f5d0]
nop word [rax + rax]
mov eax, 0x40
mov dword [rsp + 0x78], eax
nop dword [rax]
cmp eax, 0x40
jne 0x180024219
lea eax, [rbx + 1]
mov qword [rbp - 0x58], rax
lea eax, [rbx + 2]
mov qword [rbp + 0x40], rax
lea eax, [rbx + 3]
mov qword [rbp + 0x30], rax
lea ecx, [rbx + 4]
mov qword [rsp + 0x70], rcx
lea r13d, [rbx + 5]
mov qword [rbp + 0x1d0], r13
lea r12d, [rbx + 6]
mov qword [rbp - 0x10], r12
lea r15d, [rbx + 7]
lea r14d, [rbx + 8]
lea esi, [rbx + 9]
lea edi, [rbx + 0xa]
lea r11d, [rbx + 0xb]
lea r10d, [rbx + 0xc]
lea r9d, [rbx + 0xd]
lea r8d, [rbx + 0xe]
lea edx, [rbx + 0xf]
lea ecx, [rbx + 0x10]
mov eax, ebx
mov r12, qword [rbp - 0x70]
movsd xmm1, qword [r12 + rax*8]
addsd xmm1, xmm8
mov rax, qword [rbp - 0x58]
addsd xmm1, qword [r12 + rax*8]
mov rax, qword [rbp + 0x40]
addsd xmm1, qword [r12 + rax*8]
mov rax, qword [rbp + 0x30]
addsd xmm1, qword [r12 + rax*8]
mov rax, qword [rsp + 0x70]
addsd xmm1, qword [r12 + rax*8]
addsd xmm1, qword [r12 + r13*8]
mov r12, qword [rbp - 0x10]
mov r13, qword [rbp - 0x70]
addsd xmm1, qword [r13 + r12*8]
addsd xmm1, qword [r13 + r15*8]
addsd xmm1, qword [r13 + r14*8]
addsd xmm1, qword [r13 + rsi*8]
addsd xmm1, qword [r13 + rdi*8]
addsd xmm1, qword [r13 + r11*8]
addsd xmm1, qword [r13 + r10*8]
addsd xmm1, qword [r13 + r9*8]
addsd xmm1, qword [r13 + r8*8]
addsd xmm1, qword [r13 + rdx*8]
addsd xmm1, qword [r13 + rcx*8]
mov qword [rsp + 0x70], rax
mov eax, ebx
mov r13, qword [rbp - 0x60]
movsd xmm0, qword [r13 + rax*8]
mov rax, qword [rsp + 0x70]
addsd xmm0, xmm8
mov qword [rsp + 0x70], rax
mov rax, qword [rbp - 0x58]
addsd xmm0, qword [r13 + rax*8]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x40]
addsd xmm0, qword [r13 + rax*8]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x30]
addsd xmm0, qword [r13 + rax*8]
mov rax, qword [rsp + 0x70]
addsd xmm0, qword [r13 + rax*8]
mov r13, qword [rbp + 0x1d0]
mov rax, qword [rbp - 0x60]
addsd xmm0, qword [rax + r13*8]
addsd xmm0, qword [rax + r12*8]
addsd xmm0, qword [rax + r15*8]
addsd xmm0, qword [rax + r14*8]
addsd xmm0, qword [rax + rsi*8]
addsd xmm0, qword [rax + rdi*8]
addsd xmm0, qword [rax + r11*8]
addsd xmm0, qword [rax + r10*8]
addsd xmm0, qword [rax + r9*8]
addsd xmm0, qword [rax + r8*8]
addsd xmm0, qword [rax + rdx*8]
addsd xmm0, qword [rax + rcx*8]
divsd xmm0, xmm1
call fcn.180075e70
mulsd xmm0, xmm11
mov ecx, ebx
shr rcx, 4
mov rax, qword [rbp + 0x48]
mov rax, qword [rbp + rax*8 + 0x50]
movsd qword [rax + rcx*8], xmm0
mov eax, dword [rsp + 0x78]
add eax, 0x43
mov dword [rsp + 0x78], eax
cmp eax, 0x83
jb 0x180024050
add ebx, 0x10
cmp ebx, 0x200
jb 0x180024040
movsd xmm11, qword [rbp + 0xa8]
mov rdi, qword [rbp - 0x38]
mov r11, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x10]
mov r14, qword [rbp + 0x540]
mov r13d, dword [rbp - 0x80]
xor ebx, ebx
jmp 0x180024743
mov rcx, r9
mov rax, qword [rbp + 0x158]
lea rdx, [rax + 0x10]
mov r8, r11
sub r8, rax
sub r8, 8
sub r10, r11
mov r9, qword [rbp + 0x78]
sub r9, qword [rbp - 0x68]
mov qword [rbp - 0x58], 0x40
nop dword [rax]
mov qword [r9 + rcx], rbx
mov qword [rcx], rbx
lea rbx, [r10 + r8]
lea rdi, [r10 + r8]
lea rsi, [r10 + r8]
lea r14, [r10 + r8]
lea r15, [r10 + r8]
lea r12, [r10 + r8]
lea r13, [r10 + r8]
mov r11d, 8
nop dword [rax]
movsd xmm0, qword [rdx - 0x10]
ucomisd xmm0, xmm8
jp 0x1800242ce
je 0x1800242f5
mulsd xmm0, qword [rdx + r13 - 8]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx - 8]
mulsd xmm0, qword [rdx - 0x10]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
movsd xmm0, qword [rdx - 8]
ucomisd xmm0, xmm8
jp 0x180024303
je 0x180024327
mulsd xmm0, qword [rbx + rdx]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx]
mulsd xmm0, qword [rdx - 8]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
movsd xmm0, qword [rdx]
ucomisd xmm0, xmm8
jp 0x180024334
je 0x18002435e
lea rax, [rdx + r10]
mulsd xmm0, qword [rax + r8 + 8]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx + 8]
mulsd xmm0, qword [rdx]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
movsd xmm0, qword [rdx + 8]
ucomisd xmm0, xmm8
jp 0x18002436c
je 0x180024392
mulsd xmm0, qword [rdi + rdx + 0x10]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx + 0x10]
mulsd xmm0, qword [rdx + 8]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
movsd xmm0, qword [rdx + 0x10]
ucomisd xmm0, xmm8
jp 0x1800243a0
je 0x1800243c6
mulsd xmm0, qword [rsi + rdx + 0x18]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx + 0x18]
mulsd xmm0, qword [rdx + 0x10]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
movsd xmm0, qword [rdx + 0x18]
ucomisd xmm0, xmm8
jp 0x1800243d4
je 0x1800243fb
mulsd xmm0, qword [r14 + rdx + 0x20]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx + 0x20]
mulsd xmm0, qword [rdx + 0x18]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
movsd xmm0, qword [rdx + 0x20]
ucomisd xmm0, xmm8
jp 0x180024409
je 0x180024430
mulsd xmm0, qword [r15 + rdx + 0x28]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx + 0x28]
mulsd xmm0, qword [rdx + 0x20]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
movsd xmm0, qword [rdx + 0x28]
ucomisd xmm0, xmm8
jp 0x18002443e
je 0x180024465
mulsd xmm0, qword [r12 + rdx + 0x30]
addsd xmm0, qword [r9 + rcx]
movsd qword [r9 + rcx], xmm0
movsd xmm0, qword [r8 + rdx + 0x30]
mulsd xmm0, qword [rdx + 0x28]
addsd xmm0, qword [rcx]
movsd qword [rcx], xmm0
add rdx, 0x40
sub r11, 1
jne 0x1800242c0
movsd xmm1, qword [r9 + rcx]
ucomisd xmm1, xmm8
jp 0x180024489
jne 0x180024489
xor ebx, ebx
mov qword [rcx], rbx
jmp 0x180024497
movsd xmm0, qword [rcx]
divsd xmm0, xmm1
movsd qword [rcx], xmm0
xor ebx, ebx
sub r8, 0x200
add rcx, 8
sub qword [rbp - 0x58], 1
jne 0x180024290
mov rax, qword [rbp - 0x68]
mov rdi, rax
mov r15, qword [rbp + 0x150]
sub r15, rax
mov rbx, qword [rbp + 0x90]
sub rbx, rax
mov r12, qword [rbp + 0x178]
sub r12, rax
mov r14d, 0x40
movsd xmm14, qword [0x18009f720]
movsd xmm8, qword [0x18009f528]
movsd xmm10, qword [0x18009f570]
movsd xmm11, qword [0x18009f5e0]
mov r13d, r14d
nop
mov esi, 0x112
cmp esi, 0x112
je 0x180024542
cmp esi, 0x436e
jne 0x18002459f
mov eax, r13d
movsd xmm0, qword [rbx + rdi]
lea rcx, [0x180000000]
maxsd xmm0, qword [rcx + rax*8 + 0x95160]
mulsd xmm0, xmm14
call fcn.180075a70
movsd qword [rbx + rdi], xmm0
jmp 0x18002459f
movsd xmm0, qword [rdi]
comisd xmm15, xmm0
jbe 0x180024553
movaps xmm0, xmm15
jmp 0x18002455e
comisd xmm0, xmm13
jbe 0x18002455e
movaps xmm0, xmm13
call fcn.180075e70
mulsd xmm0, xmm7
subsd xmm0, xmm8
movsd qword [rdi], xmm0
movaps xmm2, xmm0
mulsd xmm2, qword [r15 + rdi]
movaps xmm1, xmm10
subsd xmm1, xmm0
mulsd xmm1, xmm11
addsd xmm2, xmm1
movsd qword [rbx + rdi], xmm2
movsd xmm0, qword [r12 + rdi]
addsd xmm0, xmm13
cvttsd2si r13d, xmm0
add esi, 0x425c
cmp esi, 0x84b8
jbe 0x180024505
add rdi, 8
sub r14, 1
jne 0x180024500
mov rcx, qword [rbp + 0x90]
mov rax, rcx
mov rdx, qword [rbp + 0x140]
mov r10, qword [rbp + 0x168]
sub r10, rcx
mov r11, qword [rbp + 0x78]
sub r11, rcx
mov rsi, qword [rbp + 0x10]
mov r9, rsi
sub r9, rcx
lea r8d, [r14 + 0x40]
movsd xmm8, qword [rbp + 8]
movsd xmm10, qword [rbp + 0x88]
movsd xmm11, qword [rbp + 0xa8]
movsd xmm14, qword [0x18009f678]
movsd xmm2, qword [r10 + rax]
ucomisd xmm2, xmm8
jp 0x18002461f
je 0x180024641
mov ecx, dword [rdx]
test ecx, ecx
je 0x180024641
movsd xmm1, qword [r11 + rax]
mulsd xmm1, qword [rax]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm2
divsd xmm1, xmm0
jmp 0x180024645
movaps xmm1, xmm8
movsd qword [r9 + rax], xmm1
add rdx, 4
add rax, 8
sub r8, 1
jne 0x180024610
mov rdi, qword [rbp - 0x38]
mov r11, qword [rbp + 0x18]
mov r14, qword [rbp + 0x540]
mov r13d, dword [rbp - 0x80]
xor ebx, ebx
jmp 0x180024743
mov rdx, qword [rbp + 0x98]
add rdx, 8
imul rax, r8, 0x1008
mov r10, qword [rbp + 0x160]
lea rcx, [r10 + 0x10]
add rcx, rax
mov r9, qword [rbp + 0x170]
sub r9, rax
sub r9, r10
mov r8, r12
sub r8, rax
sub r8, r10
mov r10d, 0xab
nop
movsxd rax, dword [rdx - 8]
movsd xmm0, qword [rsi + rax*8]
movsd xmm1, qword [r9 + rcx - 0x10]
comisd xmm0, xmm1
ja 0x1800246c9
movaps xmm0, xmm1
movsd qword [rcx + r8 - 0x10], xmm0
mulsd xmm0, xmm14
movsd qword [rcx - 0x10], xmm0
movsxd rax, dword [rdx - 4]
movsd xmm1, qword [rsi + rax*8]
movsd xmm0, qword [r9 + rcx - 8]
comisd xmm1, xmm0
ja 0x1800246f3
movaps xmm1, xmm0
movsd qword [r8 + rcx - 8], xmm1
mulsd xmm1, xmm14
movsd qword [rcx - 8], xmm1
movsxd rax, dword [rdx]
movsd xmm9, qword [rsi + rax*8]
movsd xmm0, qword [r9 + rcx]
comisd xmm9, xmm0
ja 0x18002471e
movaps xmm9, xmm0
movsd qword [r8 + rcx], xmm9
movaps xmm0, xmm9
mulsd xmm0, xmm14
movsd qword [rcx], xmm0
add rdx, 0xc
add rcx, 0x18
sub r10, 1
jne 0x1800246b0
mov r10, qword [rbp - 0x20]
mov r9, qword [rbp - 0x68]
mov r8, qword [rbp - 0x40]
mov eax, dword [rbp + 0x3c]
dec eax
mov dword [rbp + 0x3c], eax
cmp eax, 0x16
mov r15, qword [rbp - 0x60]
mov r12, qword [rbp - 0x70]
ja 0x180023380
mov ecx, dword [rbp - 0x48]
inc ecx
mov dword [rbp - 0x48], ecx
inc qword [rbp + 0x48]
cmp ecx, 2
jb 0x180023370
mov rax, r8
shl rax, 5
mov r9, qword [rbp + 0x130]
movsd xmm0, qword [r9]
mov rcx, qword [rbp + 0x138]
maxsd xmm0, qword [rcx]
mov rdx, qword [rbp + 0x548]
movsd qword [rdx + rax*8], xmm0
movsd xmm1, qword [r9 + 8]
maxsd xmm1, qword [rcx + 8]
movsd qword [rdx + rax*8 + 8], xmm1
movsd xmm0, qword [r9 + 0x10]
maxsd xmm0, qword [rcx + 0x10]
movsd qword [rdx + rax*8 + 0x10], xmm0
movsd xmm1, qword [r9 + 0x18]
maxsd xmm1, qword [rcx + 0x18]
movsd qword [rdx + rax*8 + 0x18], xmm1
movsd xmm0, qword [r9 + 0x20]
maxsd xmm0, qword [rcx + 0x20]
movsd qword [rdx + rax*8 + 0x20], xmm0
movsd xmm1, qword [r9 + 0x28]
maxsd xmm1, qword [rcx + 0x28]
movsd qword [rdx + rax*8 + 0x28], xmm1
movsd xmm0, qword [r9 + 0x30]
maxsd xmm0, qword [rcx + 0x30]
movsd qword [rdx + rax*8 + 0x30], xmm0
movsd xmm1, qword [r9 + 0x38]
maxsd xmm1, qword [rcx + 0x38]
movsd qword [rdx + rax*8 + 0x38], xmm1
movsd xmm0, qword [r9 + 0x40]
maxsd xmm0, qword [rcx + 0x40]
movsd qword [rdx + rax*8 + 0x40], xmm0
movsd xmm1, qword [r9 + 0x48]
maxsd xmm1, qword [rcx + 0x48]
movsd qword [rdx + rax*8 + 0x48], xmm1
movsd xmm0, qword [r9 + 0x50]
maxsd xmm0, qword [rcx + 0x50]
movsd qword [rdx + rax*8 + 0x50], xmm0
movsd xmm1, qword [r9 + 0x58]
maxsd xmm1, qword [rcx + 0x58]
movsd qword [rdx + rax*8 + 0x58], xmm1
movsd xmm0, qword [r9 + 0x60]
maxsd xmm0, qword [rcx + 0x60]
movsd qword [rdx + rax*8 + 0x60], xmm0
movsd xmm1, qword [r9 + 0x68]
maxsd xmm1, qword [rcx + 0x68]
movsd qword [rdx + rax*8 + 0x68], xmm1
movsd xmm0, qword [r9 + 0x70]
maxsd xmm0, qword [rcx + 0x70]
movsd qword [rdx + rax*8 + 0x70], xmm0
movsd xmm1, qword [r9 + 0x78]
maxsd xmm1, qword [rcx + 0x78]
movsd qword [rdx + rax*8 + 0x78], xmm1
movsd xmm0, qword [r9 + 0x80]
maxsd xmm0, qword [rcx + 0x80]
movsd qword [rdx + rax*8 + 0x80], xmm0
movsd xmm1, qword [r9 + 0x88]
maxsd xmm1, qword [rcx + 0x88]
movsd qword [rdx + rax*8 + 0x88], xmm1
movsd xmm0, qword [r9 + 0x90]
maxsd xmm0, qword [rcx + 0x90]
movsd qword [rdx + rax*8 + 0x90], xmm0
movsd xmm1, qword [r9 + 0x98]
maxsd xmm1, qword [rcx + 0x98]
movsd qword [rdx + rax*8 + 0x98], xmm1
movsd xmm0, qword [r9 + 0xa0]
maxsd xmm0, qword [rcx + 0xa0]
movsd qword [rdx + rax*8 + 0xa0], xmm0
movsd xmm1, qword [r9 + 0xa8]
maxsd xmm1, qword [rcx + 0xa8]
movsd qword [rdx + rax*8 + 0xa8], xmm1
movsd xmm0, qword [r9 + 0xb0]
maxsd xmm0, qword [rcx + 0xb0]
movsd qword [rdx + rax*8 + 0xb0], xmm0
movsd xmm1, qword [r9 + 0xb8]
maxsd xmm1, qword [rcx + 0xb8]
movsd qword [rdx + rax*8 + 0xb8], xmm1
movsd xmm0, qword [r9 + 0xc0]
maxsd xmm0, qword [rcx + 0xc0]
movsd qword [rdx + rax*8 + 0xc0], xmm0
movsd xmm1, qword [r9 + 0xc8]
maxsd xmm1, qword [rcx + 0xc8]
movsd qword [rdx + rax*8 + 0xc8], xmm1
movsd xmm0, qword [r9 + 0xd0]
maxsd xmm0, qword [rcx + 0xd0]
movsd qword [rdx + rax*8 + 0xd0], xmm0
movsd xmm1, qword [r9 + 0xd8]
maxsd xmm1, qword [rcx + 0xd8]
movsd qword [rdx + rax*8 + 0xd8], xmm1
movsd xmm0, qword [r9 + 0xe0]
maxsd xmm0, qword [rcx + 0xe0]
movsd qword [rdx + rax*8 + 0xe0], xmm0
movsd xmm1, qword [r9 + 0xe8]
maxsd xmm1, qword [rcx + 0xe8]
movsd qword [rdx + rax*8 + 0xe8], xmm1
movsd xmm0, qword [r9 + 0xf0]
maxsd xmm0, qword [rcx + 0xf0]
movsd qword [rdx + rax*8 + 0xf0], xmm0
movsd xmm1, qword [r9 + 0xf8]
maxsd xmm1, qword [rcx + 0xf8]
movsd qword [rdx + rax*8 + 0xf8], xmm1
mov eax, dword [rbp - 0x2c]
inc eax
mov dword [rbp - 0x2c], eax
inc r8
mov qword [rbp - 0x40], r8
cmp eax, dword [rsp + 0x54]
mov r9, qword [rbp - 0x68]
jb 0x180023360
mov ebx, dword [rbp - 0x28]
jmp 0x180024c55
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.18006fc7c
mov byte [rsp + 0x51], 1
mov eax, 0x1bb
mov word [rsp + 0x78], ax
lea r9, [0x1800b5438]
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x1d8]
mov ecx, 0xf7
call fcn.18001aad0
mov r10b, 1
mov dword [rsp + 0x58], r10d
mov rdx, qword [rbp - 0x78]
mov r8d, dword [rsp + 0x54]
jmp 0x180024c63
mov rax, qword [rbp + 0x550]
mov rdi, qword [rax + 0x1fc0]
mov qword [rbp - 0x38], rdi
xor eax, eax
mov edx, eax
lea r8d, [rax + 9]
cmp edx, 8
ja case.default.0x180024af1
mov eax, edx
lea r9, [0x180000000]
mov ecx, dword [r9 + rax*4 + 0x25518]
add rcx, r9
jmp rcx
lea rax, [rdi + 0x5218]
mov qword [rbp - 0x60], rax
jmp case.default.0x180024af1
lea rax, [rdi + 0xe340]
mov qword [rbp + 0x98], rax
mov rcx, qword [rdi + 0xeb48]
mov qword [rbp + 0x150], rcx
mov rax, qword [rdi + 0xeb50]
mov qword [rbp + 0x158], rax
mov rax, qword [rdi + 0xeb58]
mov qword [rbp + 0x160], rax
jmp case.default.0x180024af1
lea rcx, [rdi + 0xa18]
mov qword [rbp + 0x78], rcx
lea rax, [rdi + 0xc18]
mov qword [rbp + 0x90], rax
jmp case.default.0x180024af1
lea rax, [rdi + 0x1018]
mov qword [rbp + 0x168], rax
lea rcx, [rdi + 0xe18]
mov qword [rbp + 0x178], rcx
lea rax, [rdi + 0x1218]
mov qword [rbp + 0x120], rax
lea rax, [rdi + 0x3218]
mov qword [rbp + 0xa0], rax
jmp case.default.0x180024af1
mov rcx, qword [rdi + 0xeb68]
mov qword [rbp + 0x68], rcx
lea rax, [rdi + 0xc230]
mov qword [rbp - 0x70], rax
jmp case.default.0x180024af1
lea rax, [rdi + 0x18]
mov qword [rbp + 0x18], rax
lea rcx, [rdi + 0x218]
mov qword [rbp - 0x20], rcx
lea rsi, [rdi + 0x418]
lea rax, [rdi + 0x618]
mov qword [rbp - 0x68], rax
jmp case.default.0x180024af1
lea rax, [rdi + 0x7218]
mov qword [rbp + 0x128], rax
lea rax, [rdi + 0xb228]
mov qword [rbp + 0x70], rax
lea rcx, [rdi + 0xeb70]
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0x50], rcx
lea rax, [rdi + 0xec70]
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x58], rax
lea rcx, [rdi + 0xe240]
mov qword [rbp + 0x140], rcx
jmp case.default.0x180024af1
mov rax, qword [rdi + 0xeb60]
mov qword [rbp + 0x60], rax
jmp case.default.0x180024af1
lea rcx, [rdi + 0xd238]
mov qword [rbp + 0x170], rcx
inc edx
sub r8, 1
jne 0x180024ad4
mov qword [rbp + 0x10], rsi
mov rdx, qword [rbp - 0x78]
mov r8d, dword [rsp + 0x54]
mov r10d, dword [rsp + 0x58]
mov r9d, dword [rsp + 0x68]
imul eax, r9d, 0x37
add dword [rbp - 0x50], eax
mov eax, dword [rbp - 0x50]
cmp eax, dword [rbp]
ja 0x180024cd9
mov r11, qword [rbp + 0x18]
mov r10, qword [rbp - 0x20]
mov r15, qword [rbp - 0x60]
mov r12, qword [rbp - 0x70]
mov r9, qword [rbp - 0x68]
jmp 0x180022f30
mov r8, qword [rbp + 0x550]
mov rdx, qword [r14]
mov rax, qword [rbp + 0x558]
mov rcx, qword [rax]
cmp dword [r8], 0
jne 0x180024cb5
call qword [r8 + 0x18]
mov ebx, eax
jmp 0x1800230a5
call qword [r8 + 0x18]
mov ebx, eax
neg ebx
jmp 0x1800230a5
movzx edi, byte [rsp + 0x50]
mov byte [rsp + 0x51], dil
movzx r10d, byte [rsp + 0x50]
mov dword [rsp + 0x58], r10d
jmp 0x180024ce6
mov edx, 1
movzx edi, byte [rsp + 0x51]
xor r8d, r8d
lea ecx, [r9 + 0x636]
mov dword [rsp + 0x54], ecx
cmp r9d, ecx
jae 0x1800230a5
mov r15, qword [rsp + 0x60]
mov r13d, dword [rsp + 0x6c]
mov r12, qword [rsp + 0x60]
movzx r14d, byte [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
movabs r11, 0x6f435f78696b70
cmp r9d, 0x43a
ja 0x180025190
je 0x180024f48
cmp r9d, 0x11f
je 0x180024ed1
cmp r9d, 0x1be
je 0x180024e71
cmp r9d, 0x25d
je 0x180024e0a
cmp r9d, 0x2fc
je 0x180024dcd
cmp r9d, 0x39b
jne 0x18002529b
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x50], rax
mov eax, dword [0x1800b5480]
mov dword [rbp + 0x58], eax
mov eax, dword [0x1800b5484]
mov dword [rbp + 0x5c], eax
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x340], xmm0
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x340]
lea r8, [0x1800175d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r12, rax
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
xor r8d, r8d
jmp 0x18002529b
mov eax, dword [0x1800b5480]
mov dword [rbp], eax
mov qword [rsp + 0x20], r8
xor r9d, r9d
mov r8d, 0xbd
lea rdx, [rbp]
lea rcx, [rbp + 0xd0]
call fcn.1800104c0
xor r8d, r8d
mov dword [rsp + 0x6c], r8d
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
jmp 0x18002529b
call sub.IMM32.dll_ImmCreateContext
mov r15, rax
lea rax, [rbp + 0x180]
mov qword [rbp + 8], rax
mov rdx, qword [rbp + 0xd8]
cmp rdx, qword [rbp + 0xe0]
je 0x180024e50
lea rax, [rbp + 0x180]
mov qword [rdx], rax
add qword [rbp + 0xd8], 8
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
xor r8d, r8d
jmp 0x18002529b
lea r8, [rbp + 8]
lea rcx, [rbp + 0xd0]
call fcn.180002510
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
xor r8d, r8d
jmp 0x18002529b
lea rax, [rbp + 0x1d8]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, qword [rbp + 0xe0]
je 0x180024ea6
lea rdx, [rbp + 0x1d8]
mov qword [rax], rdx
add qword [rbp + 0xd8], 8
mov r13d, r8d
jmp 0x18002529b
lea r8, [rbp + 8]
mov rdx, qword [rbp + 0xd8]
lea rcx, [rbp + 0xd0]
call fcn.180002510
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
xor r8d, r8d
mov r13d, r8d
jmp 0x18002529b
mov eax, 0x1bb
mov word [rsp + 0x78], ax
lea r9, [0x1800b5458]
mov r8d, 0xaa
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x180]
call fcn.18004b980
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x380], xmm0
movups xmmword [rbp + 0x390], xmm0
movups xmmword [rbp + 0x3a0], xmm0
movups xmmword [rbp + 0x3b0], xmm0
mov qword [rbp + 0x3c0], rax
lea r9, [rbp + 0xd0]
xor r8d, r8d
mov edx, 0x84
xor ecx, ecx
call fcn.180016de0
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
xor r8d, r8d
jmp 0x18002529b
test r12, r12
jne 0x18002529b
mov edi, 0xc2
nop word [rax + rax]
cmp edi, 0x1c6
ja 0x1800250b8
je 0x180025094
mov eax, edi
sub eax, 0xc2
je 0x180025062
sub eax, 0x34
je 0x18002503b
sub eax, 0x34
je 0x180025013
sub eax, 0x34
je 0x180024fce
cmp eax, 0x34
jne 0x180025169
lea r8d, [rax - 0x2f]
lea rdx, str.tring
lea rcx, [rbp + 0xb0]
call fcn.18006f3a0
mov r14b, 1
xor r8d, r8d
mov esi, r8d
movabs r11, 0x6f435f78696b70
jmp 0x180025169
mov eax, 0x72
mov word [rbp + 0xc0], ax
mov eax, 0x61
mov word [rbp + 0xc1], ax
lea r8d, [rax - 0x5c]
lea rdx, str.ms_To
lea rcx, [rbp + 0xb0]
call fcn.18006f3a0
mov r8d, 2
lea rdx, [0x18009b0e4]
lea rcx, [rbp + 0xc7]
jmp 0x18002507d
mov r8, rdx
lea rdx, [0x18009b454]
lea rcx, [rbp + 0xb0]
call fcn.18006f3a0
xor r8d, r8d
movabs r11, 0x6f435f78696b70
jmp 0x180025169
mov word [rbp + 0xb9], 0x4c52
mov eax, dword [str.SelP]
mov dword [rbp + 0xbb], eax
movzx eax, byte [0x18009b450]
mov byte [rbp + 0xbf], al
jmp 0x180025169
mov qword [rbp + 0xb0], r11
mov r8d, 3
lea rdx, [0x18009b448]
lea rcx, [rbp + 0xb7]
call fcn.18006f5e0
xor r8d, r8d
movabs r11, 0x6f435f78696b70
jmp 0x180025169
lea rdx, [rbp + 0xb0]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
mov rsi, rax
xor r8d, r8d
movabs r11, 0x6f435f78696b70
jmp 0x180025169
mov eax, edi
sub eax, 0x1fa
je 0x180025126
sub eax, 0x34
je 0x180025113
sub eax, 0x34
je 0x1800250dc
cmp eax, 0x34
jne 0x180025169
lea esi, [rax - 0x33]
jmp 0x1800230a7
test r14b, r14b
je 0x1800250f7
lea rdx, [rbp + 0x38]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_GetOldestEventLogRecord]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CloseEventLog]
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
xor r8d, r8d
movabs r11, 0x6f435f78696b70
jmp 0x180025169
mov ecx, r8d
movzx eax, r14b
test rsi, rsi
cmovne ecx, eax
movzx r14d, cl
jmp 0x180025169
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3d0], xmm0
movups xmmword [rbp + 0x3e0], xmm0
movups xmmword [rbp + 0x3f0], xmm0
movups xmmword [rbp + 0x400], xmm0
movups xmmword [rbp + 0x410], xmm0
movups xmmword [rbp + 0x420], xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], rax
mov dword [rbp + 0x448], eax
add edi, 0x34
cmp edi, 0x2ca
mov edx, 1
jb 0x180024f60
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
movzx edi, byte [rsp + 0x51]
jmp 0x18002529b
cmp r9d, 0x4d9
je 0x18002528b
cmp r9d, 0x578
je 0x18002521a
cmp r9d, 0x617
je 0x1800251c1
cmp r9d, 0x6b6
je 0x1800230a5
jmp 0x18002529b
mov ecx, r8d
movzx eax, dil
cmp dword [rbp - 8], 0
cmovne ecx, eax
movzx edi, cl
mov byte [rsp + 0x51], cl
mov edx, 0xa4
lea rcx, [rbp + 0x210]
call fcn.18000ef40
cmp byte [rsp + 0x58], 0
je 0x1800251f6
mov rcx, r15
call sub.IMM32.dll_ImmDestroyContext
test dil, dil
je 0x180025206
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_CredFree]
xor r8d, r8d
mov ebx, r8d
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
jmp 0x18002529b
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x6c]
mov edx, r13d
lea rcx, [rbp + 0x380]
call qword [sym.imp.ADVAPI32.dll_CredReadDomainCredentialsW]
mov dword [rbp - 8], eax
lea rax, [0x18000c6b0]
mov qword [rbp + 8], rax
xor r9d, r9d
lea r8d, [r9 + 0x59]
lea rdx, [rbp + 8]
xor ecx, ecx
call fcn.18005d2b0
lea r9, [0x1800b53d0]
mov r8d, 0x69
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0xd0]
call fcn.18004bd20
mov ecx, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x68]
xor r8d, r8d
jmp 0x18002529b
movzx r10d, r10b
test r15, r15
cmove r10d, r8d
mov dword [rsp + 0x58], r10d
add r9d, 0x9f
mov dword [rsp + 0x68], r9d
cmp r9d, ecx
jae 0x1800230a5
mov edx, 1
mov r10d, dword [rsp + 0x58]
jmp 0x180024d14
xor r14d, r14d
mov rcx, qword [rbp + 0x258]
test rcx, rcx
je 0x180025318
mov rdx, qword [rbp + 0x268]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025301
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800254ed
call fcn.180069fec
mov qword [rbp + 0x258], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x218]
call fcn.180004490
nop
mov rbx, qword [rbp + 0xe8]
test rbx, rbx
je 0x1800253c5
mov rdi, qword [rbp + 0xf0]
cmp rbx, rdi
je 0x180025359
mov rcx, rbx
call fcn.180003da0
add rbx, 0x28
cmp rbx, rdi
jne 0x180025341
mov rbx, qword [rbp + 0xe8]
mov rcx, qword [rbp + 0xf8]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800253ab
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800254f3
mov rcx, rbx
call fcn.180069fec
mov qword [rbp + 0xe8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov rdx, qword [rbp + 0xd0]
test rdx, rdx
je 0x1800253fd
mov r8, qword [rbp + 0xe0]
sub r8, rdx
sar r8, 3
lea rcx, [rbp + 0xd0]
call fcn.18002c0e0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r14
mov rdx, qword [rbp + 0x1a2]
cmp rdx, 0x10
jb 0x18002543e
inc rdx
mov rcx, qword [rbp + 0x18a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025439
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800254f9
call fcn.180069fec
movdqa xmm0, xmmword [0x18009ff70]
movdqu xmmword [rbp + 0x19a], xmm0
mov byte [rbp + 0x18a], 0
mov rdx, qword [rbp + 0x1fa]
cmp rdx, 0x10
jb 0x180025492
inc rdx
mov rcx, qword [rbp + 0x1e2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002548d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800254e7
call fcn.180069fec
mov eax, esi
lea r11, [rsp + 0x5f8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.18006eba4
nop
call fcn.18006eba4
nop
call fcn.18006eba4
nop
call fcn.18006eba4
int3