Function at 0x180014140
Capabilities:
Enumerate services
Query or enumerate registry key
Query or enumerate registry value
Query service status
Start service

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x1b8]
sub rsp, 0x2b0
movsd xmm0, qword [0x1800b3848]
ucomisd xmm0, qword [0x18009a478]
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
jp 0x180014769
jne 0x180014769
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si ecx, qword [0x1800b3870]
movsd xmm9, qword [0x180099630]
movaps xmm7, xmm9
divsd xmm7, xmm0
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
cvttsd2si edi, qword [0x1800b3910]
lea rdx, str.modoyimbe
lea rcx, [rbp - 0x50]
divsd xmm7, xmm0
call fcn.1800090b0
lea rcx, [rbp - 0x30]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
movsd xmm2, qword [0x1800b37e8]
mov rcx, rax
mov r9d, edi
mov qword [rsp + 0x20], 0x1353e1eb
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rbp - 0x10]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18002f2d0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si esi, qword [0x1800b37e8]
lea rdx, str.ebazofiideyhhe
lea rcx, [rbp + 0x10]
movaps xmm6, xmm0
mulsd xmm6, xmm7
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x30]
mov rdi, rax
call fcn.18002f2f0
lea rdx, str.wuoyvovnixanab
mov rbx, rax
lea rcx, [rbp + 0x50]
call fcn.18000a440
mov rcx, rax
mov dword [rsp + 0x20], esi
mov r9d, esi
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
movsd xmm10, qword [0x180098ed0]
lea rdx, str.Opecoru
cvttsd2si esi, qword [0x1800b3910]
lea rcx, [rsp + 0x30]
movd xmm0, eax
movaps xmm7, xmm10
cvtdq2pd xmm0, xmm0
divsd xmm7, xmm0
addsd xmm7, qword [0x180099788]
addsd xmm7, xmm6
call fcn.18000a440
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rsp + 0x50]
mov rbx, rax
cvttsd2si edi, qword [0x1800b37e8]
call fcn.18002f2d0
mov rcx, rax
mov r9d, esi
mov r8, rbx
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
movsd xmm8, qword [0x180098950]
mov ecx, 0xa0e354e
movaps xmm6, xmm8
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_StartServiceA]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
divsd xmm6, xmm0
lea rdx, str.Juixymrukoka
lea rcx, [rsp + 0x70]
call fcn.18000a440
cvttsd2si rdi, qword [0x1800b37e8]
lea rdx, [0x180098140]
mov rbx, rax
lea rcx, [rbp - 0x70]
call fcn.18000a440
mov rcx, rax
mov r8, rbx
mov rdx, rdi
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
xorps xmm0, xmm0
mov ecx, 0x28145c46
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
subsd xmm7, xmm0
movsd qword [0x1800b3910], xmm7
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si ecx, qword [0x1800b3870]
movaps xmm7, xmm9
divsd xmm7, xmm0
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
cvttsd2si edi, qword [0x1800b3910]
lea rdx, str.modoyimbe
lea rcx, [rbp - 0x70]
divsd xmm7, xmm0
call fcn.1800090b0
lea rcx, [rsp + 0x70]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
movsd xmm2, qword [0x1800b37e8]
mov rcx, rax
mov r9d, edi
mov qword [rsp + 0x20], 0x1353e1eb
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rsp + 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18002f2d0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si esi, qword [0x1800b37e8]
lea rdx, str.ebazofiideyhhe
lea rcx, [rsp + 0x30]
movaps xmm6, xmm0
mulsd xmm6, xmm7
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x50]
mov rdi, rax
call fcn.18002f2f0
lea rdx, str.wuoyvovnixanab
mov rbx, rax
lea rcx, [rbp + 0x30]
call fcn.18000a440
mov rcx, rax
mov dword [rsp + 0x20], esi
mov r9d, esi
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cvttsd2si esi, qword [0x1800b3910]
lea rdx, str.Opecoru
lea rcx, [rbp + 0x10]
movd xmm0, eax
movaps xmm7, xmm10
cvtdq2pd xmm0, xmm0
divsd xmm7, xmm0
addsd xmm7, qword [0x18009a1a0]
addsd xmm7, xmm6
call fcn.18000a440
cvttsd2si edi, qword [0x1800b37e8]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rbp - 0x10]
call fcn.18002f2d0
mov rcx, rax
mov r9d, esi
mov r8, rbx
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
movaps xmm6, xmm8
mov ecx, 0xa0e354e
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_StartServiceA]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
lea rdx, str.Juixymrukoka
lea rcx, [rbp - 0x30]
divsd xmm6, xmm0
call fcn.18000a440
lea rdx, [0x180098140]
mov rbx, rax
lea rcx, [rbp - 0x50]
cvttsd2si rdi, qword [0x1800b37e8]
call fcn.18000a440
mov rcx, rax
mov r8, rbx
mov rdx, rdi
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
xorps xmm0, xmm0
mov ecx, 0x28145c46
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
subsd xmm7, xmm0
movsd qword [0x1800b37e8], xmm7
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si ecx, qword [0x1800b3870]
divsd xmm9, xmm0
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
cvttsd2si edi, qword [0x1800b3910]
lea rdx, str.modoyimbe
lea rcx, [rbp - 0x70]
divsd xmm9, xmm0
call fcn.1800090b0
lea rcx, [rsp + 0x70]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
movsd xmm2, qword [0x1800b37e8]
mov rcx, rax
mov r9d, edi
mov qword [rsp + 0x20], 0x1353e1eb
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rsp + 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm9, xmm0
call fcn.18002f2d0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si esi, qword [0x1800b37e8]
lea rdx, str.ebazofiideyhhe
lea rcx, [rsp + 0x30]
movaps xmm6, xmm0
mulsd xmm6, xmm9
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x50]
mov rdi, rax
call fcn.18002f2f0
lea rdx, str.wuoyvovnixanab
mov rbx, rax
lea rcx, [rbp + 0x30]
call fcn.18000a440
mov rcx, rax
mov r9d, esi
mov dword [rsp + 0x20], esi
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cvttsd2si esi, qword [0x1800b3910]
lea rdx, str.Opecoru
lea rcx, [rbp + 0x10]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm10, xmm0
addsd xmm10, qword [0x180098df0]
addsd xmm10, xmm6
call fcn.18000a440
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rbp - 0x10]
mov rbx, rax
cvttsd2si edi, qword [0x1800b37e8]
call fcn.18002f2d0
mov rcx, rax
mov r9d, esi
mov r8, rbx
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
mov ecx, 0xa0e354e
divsd xmm8, xmm0
call qword [sym.imp.ADVAPI32.dll_StartServiceA]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
lea rdx, str.Juixymrukoka
lea rcx, [rbp - 0x30]
divsd xmm8, xmm0
call fcn.18000a440
lea rdx, [0x180098140]
mov rbx, rax
lea rcx, [rbp - 0x50]
cvttsd2si rdi, qword [0x1800b37e8]
call fcn.18000a440
mov rcx, rax
mov r8, rbx
mov rdx, rdi
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
xorps xmm0, xmm0
mov ecx, 0x28145c46
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm8
subsd xmm10, xmm0
movsd qword [0x1800b3878], xmm10
movaps xmmword [rsp + 0x250], xmm11
movaps xmmword [rsp + 0x240], xmm12
call fcn.180015600
movsd xmm0, qword [0x1800b37e8]
mov esi, 0x32b08
movsd xmm8, qword [0x18009a320]
ucomisd xmm0, xmm8
jp 0x180014a96
jne 0x180014a96
movsd xmm7, qword [0x1800993e0]
movsd xmm9, qword [0x180098970]
movsd xmm10, qword [0x1800997a8]
movsd xmm11, qword [0x180099ac0]
movsd xmm12, qword [0x180099700]
cmp esi, 0x32b09
jge 0x180014a96
cvttsd2si rdx, qword [0x1800b3910]
mov ecx, 0x1fa4c98e
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rbp - 0x70]
movaps xmm6, xmm7
divsd xmm6, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
lea rdx, str.elualaqsoquanoo
lea rcx, [rsp + 0x70]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
call fcn.18000a440
lea rdx, str.jiuzneaigityx
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
lea rcx, [rsp + 0x30]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
movsd xmm0, qword [0x1800b3848]
mov rdx, rax
mov r9, rdi
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cvttsd2si rdx, qword [0x1800b3910]
mov ecx, 0x1fa4c98e
divsd xmm6, xmm0
movaps xmm1, xmm9
subsd xmm1, xmm6
movsd qword [0x1800b3870], xmm1
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rbp - 0x70]
movaps xmm6, xmm7
divsd xmm6, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
lea rdx, str.elualaqsoquanoo
lea rcx, [rsp + 0x70]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
call fcn.18000a440
lea rdx, str.jiuzneaigityx
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
lea rcx, [rsp + 0x30]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
movsd xmm0, qword [0x1800b3848]
mov rdx, rax
mov r9, rdi
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cvttsd2si rdx, qword [0x1800b3910]
mov ecx, 0x1fa4c98e
divsd xmm6, xmm0
movaps xmm1, xmm10
subsd xmm1, xmm6
movsd qword [0x1800b3848], xmm1
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rbp - 0x70]
movaps xmm6, xmm7
divsd xmm6, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
lea rdx, str.elualaqsoquanoo
lea rcx, [rsp + 0x70]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
call fcn.18000a440
lea rdx, str.jiuzneaigityx
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rsp + 0x30]
mov rbx, rax
call fcn.18002f2f0
movsd xmm0, qword [0x1800b3848]
mov rdx, rax
mov r9, rdi
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cvttsd2si rdx, qword [0x1800b3910]
mov ecx, 0x1fa4c98e
divsd xmm6, xmm0
movaps xmm1, xmm11
subsd xmm1, xmm6
movsd qword [0x1800b3870], xmm1
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rbp - 0x70]
movaps xmm6, xmm7
divsd xmm6, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
lea rdx, str.elualaqsoquanoo
lea rcx, [rsp + 0x70]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
call fcn.18000a440
lea rdx, str.jiuzneaigityx
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
lea rcx, [rsp + 0x30]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
movsd xmm0, qword [0x1800b3848]
mov rdx, rax
mov r9, rdi
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
movaps xmm1, xmm12
inc esi
divsd xmm6, xmm0
movsd xmm0, qword [0x1800b37e8]
ucomisd xmm0, xmm8
subsd xmm1, xmm6
movsd qword [0x1800b3848], xmm1
jp 0x180014a96
je 0x1800147d3
call fcn.1800159b0
movsd xmm0, qword [0x1800b3878]
ucomisd xmm0, qword [0x18009a598]
jp 0x1800155b8
jne 0x1800155b8
movaps xmmword [rsp + 0x230], xmm13
lea rdx, [0x180098184]
movaps xmmword [rsp + 0x220], xmm14
lea rcx, [rbp - 0x70]
movaps xmmword [rsp + 0x210], xmm15
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si ebx, qword [0x1800b3848]
lea rdx, [0x180098188]
lea rcx, [rsp + 0x70]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, qword [0x180099280]
call fcn.18000a440
movsd xmm3, qword [0x180098948]
mov rcx, rax
movsd xmm1, qword [0x180099bd0]
mov r8d, ebx
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
movsd xmm0, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rsp + 0x50]
movaps xmm7, xmm0
mulsd xmm7, xmm6
call fcn.18002f2d0
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rsp + 0x30]
mov rdi, rax
cvttsd2si esi, qword [0x1800b37e8]
call fcn.18002f2f0
lea rdx, str.Ivazaqymeyrie
mov rbx, rax
lea rcx, [rbp + 0x50]
call fcn.1800090b0
mov rcx, rax
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov r8, rbx
mov edx, 0x1cdf7fba
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp + 0x30]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
mulsd xmm6, xmm7
call fcn.18002f2f0
lea rdx, str.oduy
mov rdi, rax
lea rcx, [rbp + 0x10]
call fcn.1800090b0
lea rdx, str.faiiyozie
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.18000a440
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rbp - 0x30]
divsd xmm6, xmm0
addsd xmm6, qword [0x180099e10]
call fcn.18002f2d0
movsd xmm15, qword [0x180098850]
mov rcx, rax
movaps xmm1, xmm15
mov r8d, 0xf368d1
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
movsd xmm14, qword [0x1800999c0]
lea rdx, str.Ilpynujuutumo
cvttsd2si rbx, qword [0x1800b3848]
lea rcx, [rbp - 0x50]
xorps xmm8, xmm8
cvtsi2sd xmm8, rax
mulsd xmm8, xmm14
addsd xmm8, xmm6
call fcn.1800090b0
movsd xmm13, qword [0x180098ac8]
mov rdx, rax
movaps xmm0, xmm13
mov r9d, 0x241c47fb
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
movsd xmm12, qword [0x180098fc8]
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
mulsd xmm7, xmm12
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x70]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18002f2f0
lea rdx, str.Ybunad
mov rbx, rax
lea rcx, [rbp + 0x90]
call fcn.1800090b0
mov rdx, rax
mov r8, rbx
movsd xmm11, qword [0x1800998a8]
movaps xmm0, xmm11
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
xorps xmm0, xmm0
lea rdx, str.abluzuugyfeygk
lea rcx, [rbp + 0xb0]
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.1800090b0
mov r9, rax
cvttsd2si r8d, qword [0x1800b3878]
movsd xmm9, qword [0x180099c88]
movsd xmm10, qword [0x180099f48]
movaps xmm0, xmm9
movsd xmm1, qword [0x1800b3910]
movsd qword [rsp + 0x20], xmm10
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
movaps xmm6, xmm0
lea rdx, str.wuti
lea rcx, [rbp + 0xd0]
mulsd xmm6, xmm7
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp + 0xf0]
mov rbx, rax
call fcn.18002f2f0
cvttsd2si rcx, qword [0x1800b37e8]
mov rdx, rax
mov r9, rbx
mov r8d, 0x116cea61
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
lea rdx, [0x180098184]
lea rcx, [rbp + 0xf0]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
addsd xmm6, xmm8
movsd qword [0x1800b3878], xmm6
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si ebx, qword [0x1800b3848]
lea rdx, [0x180098188]
lea rcx, [rbp + 0xd0]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, qword [0x180099280]
call fcn.18000a440
movsd xmm3, qword [0x180098948]
mov rcx, rax
movsd xmm1, qword [0x180099bd0]
mov r8d, ebx
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
movsd xmm0, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp + 0xb0]
movaps xmm7, xmm0
mulsd xmm7, xmm6
call fcn.18002f2d0
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x90]
mov rdi, rax
cvttsd2si esi, qword [0x1800b37e8]
call fcn.18002f2f0
lea rdx, str.Ivazaqymeyrie
mov rbx, rax
lea rcx, [rbp + 0x70]
call fcn.1800090b0
mov rcx, rax
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov r8, rbx
mov edx, 0x1cdf7fba
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp - 0x70]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
mulsd xmm6, xmm7
call fcn.18002f2f0
lea rdx, str.oduy
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.1800090b0
lea rdx, str.faiiyozie
mov rbx, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rsp + 0x30]
divsd xmm6, xmm0
addsd xmm6, qword [0x180099060]
call fcn.18002f2d0
mov rcx, rax
mov r8d, 0xf368d1
movaps xmm1, xmm15
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
cvttsd2si rbx, qword [0x1800b3848]
lea rdx, str.Ilpynujuutumo
lea rcx, [rbp + 0x50]
xorps xmm8, xmm8
cvtsi2sd xmm8, rax
mulsd xmm8, xmm14
addsd xmm8, xmm6
call fcn.1800090b0
mov rdx, rax
mov r9d, 0x241c47fb
mov r8, rbx
movaps xmm0, xmm13
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
mulsd xmm7, xmm12
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x30]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18002f2f0
lea rdx, str.Ybunad
mov rbx, rax
lea rcx, [rbp + 0x10]
call fcn.1800090b0
mov rdx, rax
mov r8, rbx
movaps xmm0, xmm11
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
lea rdx, str.abluzuugyfeygk
lea rcx, [rbp - 0x10]
divsd xmm7, xmm0
call fcn.1800090b0
mov r9, rax
cvttsd2si r8d, qword [0x1800b3878]
movsd xmm1, qword [0x1800b3910]
movaps xmm0, xmm9
movsd qword [rsp + 0x20], xmm10
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
movaps xmm6, xmm0
lea rdx, str.wuti
lea rcx, [rbp - 0x30]
mulsd xmm6, xmm7
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp - 0x50]
mov rbx, rax
call fcn.18002f2f0
cvttsd2si rcx, qword [0x1800b37e8]
mov rdx, rax
mov r9, rbx
mov r8d, 0x116cea61
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
lea rdx, [0x180098184]
lea rcx, [rbp + 0xf0]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
addsd xmm6, xmm8
movsd qword [0x1800b37e8], xmm6
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si ebx, qword [0x1800b3848]
lea rdx, [0x180098188]
lea rcx, [rbp + 0xd0]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, qword [0x180099280]
call fcn.18000a440
movsd xmm3, qword [0x180098948]
mov rcx, rax
movsd xmm1, qword [0x180099bd0]
mov r8d, ebx
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
movsd xmm0, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp + 0xb0]
movaps xmm7, xmm0
mulsd xmm7, xmm6
call fcn.18002f2d0
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x90]
mov rdi, rax
cvttsd2si esi, qword [0x1800b37e8]
call fcn.18002f2f0
lea rdx, str.Ivazaqymeyrie
mov rbx, rax
lea rcx, [rbp + 0x70]
call fcn.1800090b0
mov rcx, rax
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov r8, rbx
mov edx, 0x1cdf7fba
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp - 0x70]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
mulsd xmm6, xmm7
call fcn.18002f2f0
lea rdx, str.oduy
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.1800090b0
lea rdx, str.faiiyozie
mov rbx, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rsp + 0x30]
divsd xmm6, xmm0
addsd xmm6, qword [0x180099d38]
call fcn.18002f2d0
mov rcx, rax
mov r8d, 0xf368d1
movaps xmm1, xmm15
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
cvttsd2si rbx, qword [0x1800b3848]
lea rdx, str.Ilpynujuutumo
lea rcx, [rbp + 0x50]
xorps xmm8, xmm8
cvtsi2sd xmm8, rax
mulsd xmm8, xmm14
addsd xmm8, xmm6
call fcn.1800090b0
mov rdx, rax
mov r9d, 0x241c47fb
mov r8, rbx
movaps xmm0, xmm13
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
mulsd xmm7, xmm12
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x30]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18002f2f0
lea rdx, str.Ybunad
mov rbx, rax
lea rcx, [rbp + 0x10]
call fcn.1800090b0
mov rdx, rax
mov r8, rbx
movaps xmm0, xmm11
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
xorps xmm0, xmm0
lea rdx, str.abluzuugyfeygk
lea rcx, [rbp - 0x10]
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.1800090b0
mov r9, rax
cvttsd2si r8d, qword [0x1800b3878]
movsd xmm1, qword [0x1800b3910]
movaps xmm0, xmm9
movsd qword [rsp + 0x20], xmm10
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
movaps xmm6, xmm0
lea rdx, str.wuti
lea rcx, [rbp - 0x30]
mulsd xmm6, xmm7
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp - 0x50]
mov rbx, rax
call fcn.18002f2f0
cvttsd2si rcx, qword [0x1800b37e8]
mov rdx, rax
mov r9, rbx
mov r8d, 0x116cea61
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
lea rdx, [0x180098184]
lea rcx, [rbp + 0xf0]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
addsd xmm6, xmm8
movsd qword [0x1800b3848], xmm6
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si ebx, qword [0x1800b3848]
lea rdx, [0x180098188]
lea rcx, [rbp + 0xd0]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, qword [0x180099280]
call fcn.18000a440
movsd xmm3, qword [0x180098948]
mov rcx, rax
movsd xmm1, qword [0x180099bd0]
mov r8d, ebx
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
movsd xmm0, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp + 0xb0]
movaps xmm7, xmm0
mulsd xmm7, xmm6
call fcn.18002f2d0
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x90]
mov rdi, rax
cvttsd2si esi, qword [0x1800b37e8]
call fcn.18002f2f0
lea rdx, str.Ivazaqymeyrie
mov rbx, rax
lea rcx, [rbp + 0x70]
call fcn.1800090b0
mov rcx, rax
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov r8, rbx
mov edx, 0x1cdf7fba
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp - 0x70]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
mulsd xmm6, xmm7
call fcn.18002f2f0
lea rdx, str.oduy
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.1800090b0
lea rdx, str.faiiyozie
mov rbx, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
cvttsd2si rdx, qword [0x1800b37e8]
lea rcx, [rsp + 0x30]
divsd xmm6, xmm0
addsd xmm6, qword [0x180099438]
call fcn.18002f2d0
mov rcx, rax
mov r8d, 0xf368d1
movaps xmm1, xmm15
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
cvttsd2si rbx, qword [0x1800b3848]
lea rdx, str.Ilpynujuutumo
lea rcx, [rbp + 0x50]
xorps xmm8, xmm8
cvtsi2sd xmm8, rax
mulsd xmm8, xmm14
addsd xmm8, xmm6
call fcn.1800090b0
mov rdx, rax
mov r9d, 0x241c47fb
mov r8, rbx
movaps xmm0, xmm13
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
mulsd xmm7, xmm12
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x30]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm7, xmm1
call fcn.18002f2f0
lea rdx, str.Ybunad
mov rbx, rax
lea rcx, [rbp + 0x10]
call fcn.1800090b0
mov rdx, rax
mov r8, rbx
movaps xmm0, xmm11
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
xorps xmm1, xmm1
lea rdx, str.abluzuugyfeygk
lea rcx, [rbp - 0x10]
cvtsi2sd xmm1, rax
divsd xmm7, xmm1
call fcn.1800090b0
mov r9, rax
cvttsd2si r8d, qword [0x1800b3878]
movsd xmm1, qword [0x1800b3910]
movaps xmm0, xmm9
movsd qword [rsp + 0x20], xmm10
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
movaps xmm6, xmm0
lea rdx, str.wuti
lea rcx, [rbp - 0x30]
mulsd xmm6, xmm7
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp - 0x50]
mov rbx, rax
call fcn.18002f2f0
cvttsd2si rcx, qword [0x1800b37e8]
mov rdx, rax
mov r9, rbx
mov r8d, 0x116cea61
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
movaps xmm15, xmmword [rsp + 0x210]
movaps xmm14, xmmword [rsp + 0x220]
movaps xmm13, xmmword [rsp + 0x230]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
addsd xmm6, xmm8
movsd qword [0x1800b3870], xmm6
movaps xmm12, xmmword [rsp + 0x240]
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [rsp + 0x250]
mov rsp, r11
pop rbp
jmp 0x180016220
mov r11, rsp
push rbp
lea rbp, [r11 - 0xe18]
sub rsp, 0xf10
mov rax, qword [0x1800b20b8]
xor rax, rsp
mov qword [rbp + 0xdd8], rax
movsd xmm0, qword [0x1800b3870]
xor eax, eax
ucomisd xmm0, qword [0x18009a330]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x10], r12
mov qword [r11 - 0x18], r13
mov dword [rsp + 0x20], eax
mov qword [r11 - 0x20], r14
mov dword [rsp + 0x20], eax
mov qword [r11 - 0x28], r15
mov dword [rsp + 0x20], eax
jp 0x1800162f6
jne 0x1800162f6
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rsp + 0x58]
cvttsd2si rdi, qword [0x1800b37e8]
movaps xmmword [r11 - 0x38], xmm6
cvttsd2si ebx, xmm0
call fcn.18002f2d0
mov rcx, rax
mov r8d, ebx
mov rdx, rdi
movsd xmm3, qword [0x1800988a8]
call qword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
movaps xmm6, xmm0
mulsd xmm6, qword [0x180098ce8]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
movsd xmm0, qword [0x18009a120]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm6
movaps xmm6, xmmword [rsp + 0xee0]
subsd xmm0, xmm1
movsd qword [0x1800b3878], xmm0
lea rcx, [rsp + 0x58]
call fcn.1800090d8
mov edx, 4
mov qword [rsp + 0x30], rax
lea rcx, [0x1800b38b8]
call fcn.180009028
lea rcx, [rbp + 0xd98]
mov qword [rsp + 0x28], rax
call fcn.1800090d8
lea rcx, [rbp + 0xd78]
mov r13, rax
call fcn.1800090d8
movzx r8d, byte [0x1800b11c5]
lea rcx, [rbp + 0xd58]
mov rdx, rax
call fcn.180009380
lea rcx, [rbp + 0xd38]
mov r12, rax
call fcn.1800090d8
lea rcx, [rbp + 0xd18]
mov r15, rax
call fcn.1800090d8
lea rcx, [rbp + 0xcf8]
mov r14, rax
call fcn.1800090d8
movzx edx, byte [0x1800b14c1]
lea rcx, [rbp + 0xcd8]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0xcb8]
mov rsi, rax
call fcn.1800090d8
movzx r8d, byte [0x1800b1103]
lea rcx, [rbp + 0xc98]
mov rdx, rax
call fcn.180009380
lea rcx, [rbp + 0xc78]
mov rdi, rax
call fcn.1800090d8
movsx ecx, byte [0x1800b1148]
mov rbx, rax
call fcn.18004c9b4
mov edx, eax
lea rcx, [rbp + 0xc58]
mov r8, rbx
call fcn.180009320
mov rdx, rax
lea rcx, [rbp + 0xc38]
mov r8, rdi
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0xc18]
mov r8, rsi
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0xbf8]
mov r8, r14
call fcn.180009408
movzx r8d, byte [0x1800b12c0]
lea rcx, [rbp + 0xdb8]
mov rdx, rax
call fcn.180009380
movzx r8d, byte [0x1800b1103]
lea rcx, [rbp + 0xbb8]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0xb98]
mov r8, r15
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0xb78]
mov r8, r12
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0xb58]
mov r8, r13
call fcn.180009408
movzx r8d, byte [0x1800b1641]
lea rcx, [rbp + 0xb38]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0xb18]
mov rax, qword [rsp + 0x28]
movzx r8d, byte [rax]
call fcn.180009380
mov r8, qword [rsp + 0x30]
lea rcx, [rbp + 0xaf8]
mov rdx, rax
call fcn.180009408
mov rcx, rax
call fcn.180009018
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x1800b3958], rax
test rax, rax
je 0x1800167d8
lea rcx, [rbp + 0xad8]
call fcn.1800090d8
lea rcx, [rbp + 0xab8]
mov qword [rsp + 0x40], rax
call fcn.1800090d8
movzx edx, byte [0x1800b1005]
lea rcx, [rbp + 0xa98]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0xa78]
mov qword [rsp + 0x38], rax
call fcn.1800090d8
lea rcx, [rbp + 0xa58]
mov qword [rsp + 0x50], rax
call fcn.1800090d8
mov edx, 2
lea rcx, [0x1800b3918]
mov rbx, rax
call fcn.180009028
movsx ecx, byte [rax]
call fcn.18004c9b4
mov edx, eax
lea rcx, [rbp + 0xa38]
mov r8, rbx
call fcn.180009320
lea rcx, [rbp + 0xa18]
mov qword [rsp + 0x48], rax
call fcn.1800090d8
movzx edx, byte [0x1800b14c1]
lea rcx, [rbp + 0xbd8]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0x9d8]
mov qword [rsp + 0x28], rax
call fcn.1800090d8
movzx r8d, byte [0x1800b13c1]
lea rcx, [rbp + 0x9b8]
mov rdx, rax
call fcn.180009380
lea rcx, [rbp + 0x998]
mov qword [rsp + 0x30], rax
call fcn.1800090d8
lea rcx, [rbp + 0x978]
mov r13, rax
call fcn.1800090d8
movsx ecx, byte [0x1800b1103]
mov r12, rax
call fcn.18004c9b4
lea rcx, [rbp + 0x958]
mov r15d, eax
call fcn.1800090d8
lea rcx, [rbp + 0x938]
mov r14, rax
call fcn.1800090d8
movzx edx, byte [0x1800b1545]
lea rcx, [rbp + 0x918]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0x8f8]
mov rsi, rax
call fcn.1800090d8
lea rcx, [rbp + 0x8d8]
mov rdi, rax
call fcn.1800090d8
movsx ecx, byte [0x1800b1506]
mov rbx, rax
call fcn.18004c9b4
mov edx, eax
lea rcx, [rbp + 0x8b8]
mov r8, rbx
call fcn.180009320
movzx r8d, byte [0x1800b1103]
lea rcx, [rbp + 0x898]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x878]
mov r8, rdi
call fcn.180009408
mov rdx, rax
mov r8, rsi
lea rcx, [rbp + 0x858]
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0x838]
mov r8, r14
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0x818]
movzx r8d, r15b
call fcn.180009380
movzx r8d, byte [0x1800b14c1]
lea rcx, [rbp + 0x7f8]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x7d8]
mov r8, r12
call fcn.180009408
movzx r8d, byte [0x1800b14c1]
lea rcx, [rbp + 0x7b8]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x798]
mov r8, r13
call fcn.180009408
mov r8, qword [rsp + 0x30]
lea rcx, [rbp + 0x778]
mov rdx, rax
call fcn.180009408
mov r8, qword [rsp + 0x28]
lea rcx, [rbp + 0x758]
mov rdx, rax
call fcn.180009408
mov r8, qword [rsp + 0x48]
lea rcx, [rbp + 0x738]
mov rdx, rax
call fcn.180009408
movzx r8d, byte [0x1800b13c8]
lea rcx, [rbp + 0x718]
mov rdx, rax
call fcn.180009380
mov r8, qword [rsp + 0x50]
lea rcx, [rbp + 0x6f8]
mov rdx, rax
call fcn.180009408
mov r8, qword [rsp + 0x38]
lea rcx, [rbp + 0x6d8]
mov rdx, rax
call fcn.180009408
movzx r8d, byte [0x1800b1103]
lea rcx, [rbp + 0x6b8]
mov rdx, rax
call fcn.180009380
mov r8, qword [rsp + 0x40]
lea rcx, [rbp + 0x698]
mov rdx, rax
call fcn.180009408
mov rcx, rax
call fcn.180009018
mov rcx, qword [0x1800b3958]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [rsp + 0x20]
mov esi, 7
mov ebx, 0xffffffff
jmp 0x180016ca8
lea rcx, [rbp + 0x678]
call fcn.1800090d8
mov edx, 4
mov qword [rsp + 0x38], rax
lea rcx, [0x1800b38b8]
call fcn.180009028
lea rcx, [rbp + 0x658]
mov qword [rsp + 0x40], rax
call fcn.1800090d8
lea rcx, [rbp + 0x638]
mov r13, rax
call fcn.1800090d8
movzx r8d, byte [0x1800b11c5]
lea rcx, [rbp + 0x618]
mov rdx, rax
call fcn.180009380
lea rcx, [rbp + 0x5f8]
mov r12, rax
call fcn.1800090d8
lea rcx, [rbp + 0x5d8]
mov r15, rax
call fcn.1800090d8
lea rcx, [rbp + 0x5b8]
mov r14, rax
call fcn.1800090d8
movzx edx, byte [0x1800b14c1]
lea rcx, [rbp + 0x598]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0x578]
mov rsi, rax
call fcn.1800090d8
movzx r8d, byte [0x1800b1103]
lea rcx, [rbp + 0x558]
mov rdx, rax
call fcn.180009380
lea rcx, [rbp + 0x538]
mov rdi, rax
call fcn.1800090d8
movsx ecx, byte [0x1800b1148]
mov rbx, rax
call fcn.18004c9b4
mov edx, eax
lea rcx, [rbp + 0x518]
mov r8, rbx
call fcn.180009320
mov rdx, rax
lea rcx, [rbp + 0x4f8]
mov r8, rdi
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0x4d8]
mov r8, rsi
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0x4b8]
mov r8, r14
call fcn.180009408
movzx r8d, byte [0x1800b12c0]
lea rcx, [rbp + 0x498]
mov rdx, rax
call fcn.180009380
movzx r8d, byte [0x1800b1103]
lea rcx, [rbp + 0x478]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x458]
mov r8, r15
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0x438]
mov r8, r12
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0x418]
mov r8, r13
call fcn.180009408
movzx r8d, byte [0x1800b1641]
lea rcx, [rbp + 0x3f8]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x3d8]
mov rax, qword [rsp + 0x40]
movzx r8d, byte [rax]
call fcn.180009380
mov r8, qword [rsp + 0x38]
lea rcx, [rbp + 0x3b8]
mov rdx, rax
call fcn.180009408
mov rcx, rax
call fcn.180009018
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1800b3958], rax
test rax, rax
je 0x180016c9d
lea rcx, [rbp + 0x398]
call fcn.1800090d8
lea rcx, [rbp + 0x378]
mov qword [rsp + 0x28], rax
call fcn.1800090d8
movzx edx, byte [0x1800b1005]
lea rcx, [rbp + 0x358]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0x338]
mov qword [rsp + 0x30], rax
call fcn.1800090d8
lea rcx, [rbp + 0x318]
mov qword [rsp + 0x48], rax
call fcn.1800090d8
mov edx, 2
lea rcx, [0x1800b3918]
mov rbx, rax
call fcn.180009028
movsx ecx, byte [rax]
call fcn.18004c9b4
mov edx, eax
lea rcx, [rbp + 0x2f8]
mov r8, rbx
call fcn.180009320
lea rcx, [rbp + 0x2d8]
mov qword [rsp + 0x50], rax
call fcn.1800090d8
movzx edx, byte [0x1800b14c1]
lea rcx, [rbp + 0x2b8]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0x298]
mov qword [rsp + 0x38], rax
call fcn.1800090d8
movzx r8d, byte [0x1800b13c1]
lea rcx, [rbp + 0x278]
mov rdx, rax
call fcn.180009380
lea rcx, [rbp + 0x258]
mov qword [rsp + 0x40], rax
call fcn.1800090d8
lea rcx, [rbp + 0x238]
mov r13, rax
call fcn.1800090d8
movsx ecx, byte [0x1800b1103]
mov r12, rax
call fcn.18004c9b4
lea rcx, [rbp + 0x218]
mov r15d, eax
call fcn.1800090d8
lea rcx, [rbp + 0x1f8]
mov r14, rax
call fcn.1800090d8
movzx edx, byte [0x1800b1545]
lea rcx, [rbp + 0x1d8]
mov r8, rax
call fcn.180009320
lea rcx, [rbp + 0x1b8]
mov rsi, rax
call fcn.1800090d8
lea rcx, [rbp + 0x198]
mov rdi, rax
call fcn.1800090d8
movsx ecx, byte [0x1800b1506]
mov rbx, rax
call fcn.18004c9b4
mov edx, eax
lea rcx, [rbp + 0x178]
mov r8, rbx
call fcn.180009320
movzx r8d, byte [0x1800b1103]
lea rcx, [rbp + 0x158]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x138]
mov r8, rdi
call fcn.180009408
mov rdx, rax
mov r8, rsi
lea rcx, [rbp + 0x118]
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0xf8]
mov r8, r14
call fcn.180009408
mov rdx, rax
lea rcx, [rbp + 0xd8]
movzx r8d, r15b
call fcn.180009380
movzx r8d, byte [0x1800b14c1]
lea rcx, [rbp + 0xb8]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x98]
mov r8, r12
call fcn.180009408
movzx r8d, byte [0x1800b14c1]
lea rcx, [rbp + 0x78]
mov rdx, rax
call fcn.180009380
mov rdx, rax
lea rcx, [rbp + 0x58]
mov r8, r13
call fcn.180009408
mov r8, qword [rsp + 0x40]
lea rcx, [rbp + 0x38]
mov rdx, rax
call fcn.180009408
mov r8, qword [rsp + 0x38]
lea rcx, [rbp + 0x18]
mov rdx, rax
call fcn.180009408
mov r8, qword [rsp + 0x50]
lea rcx, [rbp - 8]
mov rdx, rax
call fcn.180009408
movzx r8d, byte [0x1800b13c8]
lea rcx, [rbp - 0x28]
mov rdx, rax
call fcn.180009380
mov r8, qword [rsp + 0x48]
lea rcx, [rbp - 0x48]
mov rdx, rax
call fcn.180009408
mov r8, qword [rsp + 0x30]
lea rcx, [rbp - 0x68]
mov rdx, rax
call fcn.180009408
movzx r8d, byte [0x1800b1103]
lea rcx, [rsp + 0x78]
mov rdx, rax
call fcn.180009380
mov r8, qword [rsp + 0x28]
lea rcx, [rbp + 0x9f8]
mov rdx, rax
call fcn.180009408
mov rcx, rax
call fcn.180009018
mov rcx, qword [0x1800b3958]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ebx, ebx
mov esi, 0xfffffff8
mov edi, 0x1fffffff
jmp 0x180016ca8
xor ebx, ebx
mov esi, 0x3fffff8
mov eax, ebx
mov edi, eax
mov ecx, 0x8003
call rax
mov r15, qword [rsp + 0xef0]
mov r14, qword [rsp + 0xef8]
mov r13, qword [rsp + 0xf00]
mov r12, qword [rsp + 0xf08]
bt edi, 0x1c
jae 0x180016ce5
btr edi, 0x1c
lea rcx, [rbp + 0x9f8]
call fcn.180009038
bt edi, 0x1b
jae 0x180016cf9
btr edi, 0x1b
lea rcx, [rsp + 0x78]
call fcn.180009038
bt edi, 0x1a
jae 0x180016d0c
btr edi, 0x1a
lea rcx, [rbp - 0x68]
call fcn.180009038
bt edi, 0x19
jae 0x180016d1f
btr edi, 0x19
lea rcx, [rbp - 0x48]
call fcn.180009038
bt edi, 0x18
jae 0x180016d32
btr edi, 0x18
lea rcx, [rbp - 0x28]
call fcn.180009038
bt edi, 0x17
jae 0x180016d45
btr edi, 0x17
lea rcx, [rbp - 8]
call fcn.180009038
bt edi, 0x16
jae 0x180016d58
btr edi, 0x16
lea rcx, [rbp + 0x18]
call fcn.180009038
bt edi, 0x15
jae 0x180016d6b
btr edi, 0x15
lea rcx, [rbp + 0x38]
call fcn.180009038
bt edi, 0x14
jae 0x180016d7e
btr edi, 0x14
lea rcx, [rbp + 0x58]
call fcn.180009038
bt edi, 0x13
jae 0x180016d91
btr edi, 0x13
lea rcx, [rbp + 0x78]
call fcn.180009038
bt edi, 0x12
jae 0x180016da7
btr edi, 0x12
lea rcx, [rbp + 0x98]
call fcn.180009038
bt edi, 0x11
jae 0x180016dbd
btr edi, 0x11
lea rcx, [rbp + 0xb8]
call fcn.180009038
bt edi, 0x10
jae 0x180016dd3
btr edi, 0x10
lea rcx, [rbp + 0xd8]
call fcn.180009038
bt edi, 0xf
jae 0x180016de9
btr edi, 0xf
lea rcx, [rbp + 0xf8]
call fcn.180009038
bt edi, 0xe
jae 0x180016dff
btr edi, 0xe
lea rcx, [rbp + 0x118]
call fcn.180009038
bt edi, 0xd
jae 0x180016e15
btr edi, 0xd
lea rcx, [rbp + 0x138]
call fcn.180009038
bt edi, 0xc
jae 0x180016e2b
btr edi, 0xc
lea rcx, [rbp + 0x158]
call fcn.180009038
bt edi, 0xb
jae 0x180016e41
btr edi, 0xb
lea rcx, [rbp + 0x178]
call fcn.180009038
bt edi, 0xa
jae 0x180016e57
btr edi, 0xa
lea rcx, [rbp + 0x198]
call fcn.180009038
bt edi, 9
jae 0x180016e6d
btr edi, 9
lea rcx, [rbp + 0x1b8]
call fcn.180009038
bt edi, 8
jae 0x180016e83
btr edi, 8
lea rcx, [rbp + 0x1d8]
call fcn.180009038
test dil, dil
jns 0x180016e98
btr edi, 7
lea rcx, [rbp + 0x1f8]
call fcn.180009038
test dil, 0x40
je 0x180016ead
and edi, 0xffffffbf
lea rcx, [rbp + 0x218]
call fcn.180009038
test dil, 0x20
je 0x180016ec2
and edi, 0xffffffdf
lea rcx, [rbp + 0x238]
call fcn.180009038
test dil, 0x10
je 0x180016ed7
and edi, 0xffffffef
lea rcx, [rbp + 0x258]
call fcn.180009038
test dil, 8
je 0x180016eec
and edi, 0xfffffff7
lea rcx, [rbp + 0x278]
call fcn.180009038
test dil, 4
je 0x180016f01
and edi, 0xfffffffb
lea rcx, [rbp + 0x298]
call fcn.180009038
test dil, 2
je 0x180016f16
and edi, 0xfffffffd
lea rcx, [rbp + 0x2b8]
call fcn.180009038
test dil, 1
mov rdi, qword [rsp + 0xf30]
je 0x180016f30
lea rcx, [rbp + 0x2d8]
call fcn.180009038
test esi, esi
jns 0x180016f44
btr esi, 0x1f
lea rcx, [rbp + 0x2f8]
call fcn.180009038
bt esi, 0x1e
jae 0x180016f5a
btr esi, 0x1e
lea rcx, [rbp + 0x318]
call fcn.180009038
bt esi, 0x1d
jae 0x180016f70
btr esi, 0x1d
lea rcx, [rbp + 0x338]
call fcn.180009038
bt esi, 0x1c
jae 0x180016f86
btr esi, 0x1c
lea rcx, [rbp + 0x358]
call fcn.180009038
bt esi, 0x1b
jae 0x180016f9c
btr esi, 0x1b
lea rcx, [rbp + 0x378]
call fcn.180009038
bt esi, 0x1a
jae 0x180016fb2
btr esi, 0x1a
lea rcx, [rbp + 0x398]
call fcn.180009038
bt esi, 0x19
jae 0x180016fc8
btr esi, 0x19
lea rcx, [rbp + 0x3b8]
call fcn.180009038
bt esi, 0x18
jae 0x180016fde
btr esi, 0x18
lea rcx, [rbp + 0x3d8]
call fcn.180009038
bt esi, 0x17
jae 0x180016ff4
btr esi, 0x17
lea rcx, [rbp + 0x3f8]
call fcn.180009038
bt esi, 0x16
jae 0x18001700a
btr esi, 0x16
lea rcx, [rbp + 0x418]
call fcn.180009038
bt esi, 0x15
jae 0x180017020
btr esi, 0x15
lea rcx, [rbp + 0x438]
call fcn.180009038
bt esi, 0x14
jae 0x180017036
btr esi, 0x14
lea rcx, [rbp + 0x458]
call fcn.180009038
bt esi, 0x13
jae 0x18001704c
btr esi, 0x13
lea rcx, [rbp + 0x478]
call fcn.180009038
bt esi, 0x12
jae 0x180017062
btr esi, 0x12
lea rcx, [rbp + 0x498]
call fcn.180009038
bt esi, 0x11
jae 0x180017078
btr esi, 0x11
lea rcx, [rbp + 0x4b8]
call fcn.180009038
bt esi, 0x10
jae 0x18001708e
btr esi, 0x10
lea rcx, [rbp + 0x4d8]
call fcn.180009038
bt esi, 0xf
jae 0x1800170a4
btr esi, 0xf
lea rcx, [rbp + 0x4f8]
call fcn.180009038
bt esi, 0xe
jae 0x1800170ba
btr esi, 0xe
lea rcx, [rbp + 0x518]
call fcn.180009038
bt esi, 0xd
jae 0x1800170d0
btr esi, 0xd
lea rcx, [rbp + 0x538]
call fcn.180009038
bt esi, 0xc
jae 0x1800170e6
btr esi, 0xc
lea rcx, [rbp + 0x558]
call fcn.180009038
bt esi, 0xb
jae 0x1800170fc
btr esi, 0xb
lea rcx, [rbp + 0x578]
call fcn.180009038
bt esi, 0xa
jae 0x180017112
btr esi, 0xa
lea rcx, [rbp + 0x598]
call fcn.180009038
bt esi, 9
jae 0x180017128
btr esi, 9
lea rcx, [rbp + 0x5b8]
call fcn.180009038
bt esi, 8
jae 0x18001713e
btr esi, 8
lea rcx, [rbp + 0x5d8]
call fcn.180009038
test sil, sil
jns 0x180017153
btr esi, 7
lea rcx, [rbp + 0x5f8]
call fcn.180009038
test sil, 0x40
je 0x180017168
and esi, 0xffffffbf
lea rcx, [rbp + 0x618]
call fcn.180009038
test sil, 0x20
je 0x18001717d
and esi, 0xffffffdf
lea rcx, [rbp + 0x638]
call fcn.180009038
test sil, 0x10
je 0x180017192
and esi, 0xffffffef
lea rcx, [rbp + 0x658]
call fcn.180009038
test sil, 8
je 0x1800171a7
and esi, 0xfffffff7
lea rcx, [rbp + 0x678]
call fcn.180009038
test sil, 4
je 0x1800171bc
and esi, 0xfffffffb
lea rcx, [rbp + 0x698]
call fcn.180009038
test sil, 2
je 0x1800171ce
lea rcx, [rbp + 0x6b8]
call fcn.180009038
test sil, 1
mov rsi, qword [rsp + 0xf28]
je 0x1800171e8
lea rcx, [rbp + 0x6d8]
call fcn.180009038
test ebx, ebx
jns 0x1800171fc
btr ebx, 0x1f
lea rcx, [rbp + 0x6f8]
call fcn.180009038
bt ebx, 0x1e
jae 0x180017212
btr ebx, 0x1e
lea rcx, [rbp + 0x718]
call fcn.180009038
bt ebx, 0x1d
jae 0x180017228
btr ebx, 0x1d
lea rcx, [rbp + 0x738]
call fcn.180009038
bt ebx, 0x1c
jae 0x18001723e
btr ebx, 0x1c
lea rcx, [rbp + 0x758]
call fcn.180009038
bt ebx, 0x1b
jae 0x180017254
btr ebx, 0x1b
lea rcx, [rbp + 0x778]
call fcn.180009038
bt ebx, 0x1a
jae 0x18001726a
btr ebx, 0x1a
lea rcx, [rbp + 0x798]
call fcn.180009038
bt ebx, 0x19
jae 0x180017280
btr ebx, 0x19
lea rcx, [rbp + 0x7b8]
call fcn.180009038
bt ebx, 0x18
jae 0x180017296
btr ebx, 0x18
lea rcx, [rbp + 0x7d8]
call fcn.180009038
bt ebx, 0x17
jae 0x1800172ac
btr ebx, 0x17
lea rcx, [rbp + 0x7f8]
call fcn.180009038
bt ebx, 0x16
jae 0x1800172c2
btr ebx, 0x16
lea rcx, [rbp + 0x818]
call fcn.180009038
bt ebx, 0x15
jae 0x1800172d8
btr ebx, 0x15
lea rcx, [rbp + 0x838]
call fcn.180009038
bt ebx, 0x14
jae 0x1800172ee
btr ebx, 0x14
lea rcx, [rbp + 0x858]
call fcn.180009038
bt ebx, 0x13
jae 0x180017304
btr ebx, 0x13
lea rcx, [rbp + 0x878]
call fcn.180009038
bt ebx, 0x12
jae 0x18001731a
btr ebx, 0x12
lea rcx, [rbp + 0x898]
call fcn.180009038
bt ebx, 0x11
jae 0x180017330
btr ebx, 0x11
lea rcx, [rbp + 0x8b8]
call fcn.180009038
bt ebx, 0x10
jae 0x180017346
btr ebx, 0x10
lea rcx, [rbp + 0x8d8]
call fcn.180009038
bt ebx, 0xf
jae 0x18001735c
btr ebx, 0xf
lea rcx, [rbp + 0x8f8]
call fcn.180009038
bt ebx, 0xe
jae 0x180017372
btr ebx, 0xe
lea rcx, [rbp + 0x918]
call fcn.180009038
bt ebx, 0xd
jae 0x180017388
btr ebx, 0xd
lea rcx, [rbp + 0x938]
call fcn.180009038
bt ebx, 0xc
jae 0x18001739e
btr ebx, 0xc
lea rcx, [rbp + 0x958]
call fcn.180009038
bt ebx, 0xb
jae 0x1800173b4
btr ebx, 0xb
lea rcx, [rbp + 0x978]
call fcn.180009038
bt ebx, 0xa
jae 0x1800173ca
btr ebx, 0xa
lea rcx, [rbp + 0x998]
call fcn.180009038
bt ebx, 9
jae 0x1800173e0
btr ebx, 9
lea rcx, [rbp + 0x9b8]
call fcn.180009038
bt ebx, 8
jae 0x1800173f6
btr ebx, 8
lea rcx, [rbp + 0x9d8]
call fcn.180009038
test bl, bl
jns 0x18001740a
btr ebx, 7
lea rcx, [rbp + 0xbd8]
call fcn.180009038
test bl, 0x40
je 0x18001741e
and ebx, 0xffffffbf
lea rcx, [rbp + 0xa18]
call fcn.180009038
test bl, 0x20
je 0x180017432
and ebx, 0xffffffdf
lea rcx, [rbp + 0xa38]
call fcn.180009038
test bl, 0x10
je 0x180017446
and ebx, 0xffffffef
lea rcx, [rbp + 0xa58]
call fcn.180009038
test bl, 8
je 0x18001745a
and ebx, 0xfffffff7
lea rcx, [rbp + 0xa78]
call fcn.180009038
test bl, 4
je 0x18001746e
and ebx, 0xfffffffb
lea rcx, [rbp + 0xa98]
call fcn.180009038
test bl, 2
je 0x180017482
and ebx, 0xfffffffd
lea rcx, [rbp + 0xab8]
call fcn.180009038
test bl, 1
mov rbx, qword [rsp + 0xf20]
je 0x18001749b
lea rcx, [rbp + 0xad8]
call fcn.180009038
lea rcx, [rbp + 0xaf8]
call fcn.180009038
lea rcx, [rbp + 0xb18]
call fcn.180009038
lea rcx, [rbp + 0xb38]
call fcn.180009038
lea rcx, [rbp + 0xb58]
call fcn.180009038
lea rcx, [rbp + 0xb78]
call fcn.180009038
lea rcx, [rbp + 0xb98]
call fcn.180009038
lea rcx, [rbp + 0xbb8]
call fcn.180009038
lea rcx, [rbp + 0xdb8]
call fcn.180009038
lea rcx, [rbp + 0xbf8]
call fcn.180009038
lea rcx, [rbp + 0xc18]
call fcn.180009038
lea rcx, [rbp + 0xc38]
call fcn.180009038
lea rcx, [rbp + 0xc58]
call fcn.180009038
lea rcx, [rbp + 0xc78]
call fcn.180009038
lea rcx, [rbp + 0xc98]
call fcn.180009038
lea rcx, [rbp + 0xcb8]
call fcn.180009038
lea rcx, [rbp + 0xcd8]
call fcn.180009038
lea rcx, [rbp + 0xcf8]
call fcn.180009038
lea rcx, [rbp + 0xd18]
call fcn.180009038
lea rcx, [rbp + 0xd38]
call fcn.180009038
lea rcx, [rbp + 0xd58]
call fcn.180009038
lea rcx, [rbp + 0xd78]
call fcn.180009038
lea rcx, [rbp + 0xd98]
call fcn.180009038
lea rcx, [rsp + 0x58]
call fcn.180009038
mov rcx, qword [rbp + 0xdd8]
xor rcx, rsp
call fcn.18003c2c0
add rsp, 0xf10
pop rbp
ret