Function at 0x140003500
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
mov rax, qword [0x1400ac0c0]
xor rax, rsp
mov qword [rbp - 0x19], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
xor r15d, r15d
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400035d8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400035d8
mov r11d, dword [rbx + 0x20]
nop dword [rax + rax]
dec r8d
mov edx, 0x1580f57
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400035d3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400035b0
cmp edx, 0x70ee6270
je 0x140003cdb
test r8d, r8d
jne 0x140003590
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1400035ed
cmp qword [rax + 0x30], r15
jne 0x140003560
mov r10, r15
cmp byte [0x1400960d1], r15b
movups xmm0, xmmword [0x1400960c0]
movzx eax, word [0x1400960d0]
mov r12d, dword [reloc.WS2_32.dll_accept]
movdqa xmm9, xmmword [0x14009f240]
movdqa xmm8, xmmword [0x14009f250]
movdqa xmm10, xmmword [0x14009f230]
movdqa xmm6, xmmword [0x14009f260]
movdqa xmm7, xmmword [0x14009f210]
movups xmmword [rbp - 0x59], xmm0
mov word [rbp - 0x49], ax
je 0x140003791
mov r8d, r15d
cmp r12d, 2
jl 0x14000374d
movdqa xmmword [rbp - 0x69], xmm8
lea rcx, [rbp - 0x55]
mov edx, dword [rbp - 0x69]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x140003660
cmp r8d, 0x12
jge 0x140003791
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x140003760
mov qword [rsp + 0x30], r15
lea rcx, [rbp - 0x59]
mov dword [rsp + 0x28], r15d
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov r8d, 7
mov qword [rsp + 0x120], r14
call r10
cmp rax, 0xffffffffffffffff
jne 0x140003d51
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140003868
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140003868
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x7ee9bb62
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140003863
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140003840
cmp edx, 0xc4164f14
je 0x140003cf8
test r8d, r8d
jne 0x140003820
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000387d
cmp qword [rax + 0x30], r15
jne 0x1400037f0
mov r10, r15
mov eax, dword [0x140096058]
mov r8d, r15d
movsd xmm0, qword [str._uWArTSV]
mov dword [rbp - 0x61], eax
movzx eax, byte [0x14009605c]
mov byte [rbp - 0x5d], al
movsd qword [rbp - 0x69], xmm0
cmp r12d, 2
jl 0x14000397d
movdqa xmm2, xmmword [0x14009f220]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
mov r8d, 8
pmuldq xmm1, xmm6
pmuldq xmm0, xmm6
movd eax, xmm8
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm10
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [str._uWArTSV]
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movd dword [rbp - 0x69], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x65]
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, eax
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp - 0x65], xmm2
movsxd rax, r8d
lea r9, [rbp - 0x69]
add r9, rax
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0xd
jl 0x140003990
lea rcx, [rbp - 0x69]
call r10
test rax, rax
jne 0x140003d51
mov qword [rbp - 0x29], r15
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140003a68
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140003a68
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xff15b6a
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140003a63
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140003a40
cmp edx, 0x835aa7c1
je 0x140003d15
test r8d, r8d
jne 0x140003a20
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x140003a7d
cmp qword [rax + 0x30], r15
jne 0x1400039f0
mov r10, r15
movzx eax, word [0x140096920]
mov r8d, r15d
mov word [rbp - 0x31], ax
movzx eax, byte [0x140096922]
mov byte [rbp - 0x2f], al
movups xmm0, xmmword [str.exmmznxbp2____]
movups xmm1, xmmword [0x140096908]
movups xmmword [rbp - 0x59], xmm0
movsd xmm0, qword [0x140096918]
movsd qword [rbp - 0x39], xmm0
movups xmmword [rbp - 0x49], xmm1
cmp r12d, 2
jl 0x140003bbf
movdqa xmmword [rbp - 0x69], xmm8
lea rcx, [rbp - 0x55]
mov edx, dword [rbp - 0x69]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x140003ad2
cmp r8d, 0x2b
jge 0x140003c01
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
nop dword [rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x140003bd0
lea rax, [rbp - 0x29]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x59]
mov rcx, 0xffffffff80000002
call r10
test eax, eax
jne 0x140003da0
cmp qword [rbp - 0x29], r15
je 0x140003da0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140003cc4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140003cc4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xaf1538b
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140003cbf
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140003ca0
cmp edx, 0xce9e5e34
je 0x140003d32
test r8d, r8d
jne 0x140003c80
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x140003d4a
cmp qword [rax + 0x30], r15
jne 0x140003c50
jmp 0x140003d4a
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
add r10, r9
jmp 0x1400035f0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
add r10, r9
jmp 0x140003880
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
add r10, r9
jmp 0x140003a80
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
add r15, r9
mov rcx, qword [rbp - 0x29]
call r15
mov eax, 1
mov r14, qword [rsp + 0x120]
mov rcx, qword [rbp - 0x19]
xor rcx, rsp
call fcn.140081d90
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r12
pop rbp
ret
mov qword [rbp - 0x29], r15
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140003e38
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140003e38
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xde48c51
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140003e33
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140003e10
cmp edx, 0xc7288c68
je 0x14000491f
test r8d, r8d
jne 0x140003df0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x140003e4d
cmp qword [rax + 0x30], r15
jne 0x140003dc0
mov r11, r15
cmp byte [0x140095f33], r15b
movups xmm0, xmmword [str.vjmznxb]
mov eax, dword [0x140095f30]
mov dword [rbp - 0x41], eax
movups xmmword [rbp - 0x59], xmm0
movsd xmm0, qword [0x140095f28]
movsd qword [rbp - 0x49], xmm0
je 0x140003fd1
mov r8d, r15d
cmp r12d, 2
jl 0x140003f8d
movdqa xmmword [rbp - 0x69], xmm8
lea rcx, [rbp - 0x55]
mov edx, dword [rbp - 0x69]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140003ea0
cmp r8d, 0x1c
jge 0x140003fd1
movsxd rax, r8d
lea r10, [rbp - 0x59]
add r10, rax
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r10, [r10 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r10 - 1], al
cmp r8d, 0x1c
jl 0x140003fa0
lea rax, [rbp - 0x29]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x59]
mov rcx, 0xffffffff80000002
call r11
test eax, eax
jne 0x140003d56
mov dword [rbp - 0x21], r15d
mov dword [rbp - 0x1d], 0x100
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140004098
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140004098
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xfabe4fc1
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140004093
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140004070
cmp edx, 0xa3488019
je 0x14000493c
test r8d, r8d
jne 0x140004050
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1400040ad
cmp qword [rax + 0x30], r15
jne 0x140004020
mov rax, r15
mov edx, 0x10a
mov ecx, 0x40
call rax
mov rcx, qword gs:[0x60]
mov r14, rax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rsi, qword [rcx]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov ebx, dword [rcx + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140004158
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140004158
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xf9bc0f97
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140004153
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140004130
cmp edx, 0x3ddbcf6
je 0x140004958
test r8d, r8d
jne 0x140004110
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000416d
cmp qword [rax + 0x30], r15
jne 0x1400040e0
mov r10, r15
cmp byte [0x1400969f1], r15b
movups xmm0, xmmword [0x1400969e0]
movzx eax, word [0x1400969f0]
mov word [rbp - 0x49], ax
movups xmmword [rbp - 0x59], xmm0
je 0x1400042e1
mov r8d, r15d
cmp r12d, 2
jl 0x14000429d
movdqa xmmword [rbp - 0x69], xmm8
lea rcx, [rbp - 0x55]
mov edx, dword [rbp - 0x69]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x1400041b0
cmp r8d, 0x12
jge 0x1400042e1
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x1400042b0
mov rcx, qword [rbp - 0x29]
lea rax, [rbp - 0x1d]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x21]
xor r8d, r8d
mov qword [rsp + 0x20], r14
lea rdx, [rbp - 0x59]
call r10
test eax, eax
jne 0x14000437f
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r14 + rax], r15b
jne 0x140004310
test eax, eax
je 0x140004337
mov rbx, r14
mov edi, eax
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx], al
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x140004322
mov eax, dword [rbp - 0x21]
cmp eax, 1
je 0x140004344
cmp eax, 7
jne 0x14000437f
mov eax, dword [str._UWA:]
lea rdx, [rbp - 0x79]
mov dword [rbp - 0x79], eax
mov rcx, r14
movzx eax, byte [0x140095e74]
xor byte [rbp - 0x78], 0x37
xor al, 0x3a
xor byte [rbp - 0x77], 0x38
xor byte [rbp - 0x76], 0x39
mov byte [rbp - 0x75], al
mov byte [rbp - 0x79], 0x76
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140003d51
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140004418
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140004418
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x57015158
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140004413
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400043f0
cmp edx, 0x8ec4f79
je 0x140004975
test r8d, r8d
jne 0x1400043d0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000442d
cmp qword [rax + 0x30], r15
jne 0x1400043a0
mov rax, r15
mov rcx, r14
call rax
mov dword [rbp - 0x21], r15d
mov dword [rbp - 0x1d], 0x200
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400044d8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400044d8
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xe00b235f
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400044d3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400044b0
cmp edx, 0xf0acc7ff
je 0x140004991
test r8d, r8d
jne 0x140004490
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1400044ed
cmp qword [rax + 0x30], r15
jne 0x140004460
mov rax, r15
mov edx, 0x20a
mov ecx, 0x40
call rax
movzx ecx, byte [0x1400965b8]
mov r14, rax
mov byte [rbp - 0x49], cl
mov r8d, r15d
movups xmm0, xmmword [str._UyURMi_31F]
movups xmmword [rbp - 0x59], xmm0
cmp r12d, 2
jl 0x14000461d
movdqa xmmword [rbp - 0x69], xmm8
lea rcx, [rbp - 0x55]
mov edx, dword [rbp - 0x69]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x140004530
cmp r8d, 0x11
jge 0x140004661
movsxd rax, r8d
lea r9, [rbp - 0x59]
add r9, rax
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x140004630
mov rcx, qword [rbp - 0x29]
lea rax, [rbp - 0x1d]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x21]
xor r8d, r8d
mov qword [rsp + 0x20], r14
lea rdx, [rbp - 0x59]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x1400047b8
cmp dword [rbp - 0x21], 7
jne 0x1400047b8
mov rdi, r14
cmp byte [r14], r15b
je 0x1400047b8
nop dword [rax]
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400046b7
test eax, eax
je 0x1400046e5
mov rbx, rdi
mov esi, eax
nop dword [rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x1400046d0
mov eax, dword [str.YEYZV_]
lea rdx, [rbp - 0x79]
mov dword [rbp - 0x79], eax
mov rcx, rdi
movzx eax, word [0x1400963e8]
xor byte [rbp - 0x78], 0x37
xor byte [rbp - 0x77], 0x38
xor byte [rbp - 0x76], 0x39
mov word [rbp - 0x75], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
xor byte [rbp - 0x75], 0x3a
xor al, 0x3c
xor byte [rbp - 0x74], 0x3b
mov byte [rbp - 0x73], al
mov byte [rbp - 0x79], reloc.WS2_32.dll_WSAGetLastError
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140003d51
movzx ecx, word [0x1400964a0]
lea rdx, [rbp - 0x69]
movzx eax, byte [0x1400964a2]
movsd xmm0, qword [str._JMOZP_QG_]
xor al, 0x40
movsd qword [rbp - 0x69], xmm0
xor byte [rbp - 0x68], 0x37
xor byte [rbp - 0x67], 0x38
xor byte [rbp - 0x66], 0x39
xor byte [rbp - 0x65], 0x3a
xor byte [rbp - 0x64], 0x3b
xor byte [rbp - 0x63], 0x3c
xor byte [rbp - 0x62], 0x3d
mov word [rbp - 0x61], cx
xor cl, 0x3e
xor byte [rbp - 0x60], 0x3f
mov byte [rbp - 0x61], cl
mov rcx, rdi
mov byte [rbp - 0x69], 0x76
mov byte [rbp - 0x5f], al
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140003d51
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400047a0
inc rdi
add rdi, rax
cmp byte [rdi], r15b
jne 0x1400046b0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140004848
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140004848
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x35dd05a9
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140004843
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140004820
cmp edx, 0xfc8ef472
je 0x1400049ad
test r8d, r8d
jne 0x140004800
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000485d
cmp qword [rax + 0x30], r15
jne 0x1400047d0
mov rax, r15
mov rcx, r14
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400048f8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400048f8
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xa96fdd55
lea rax, [r9 + r8*4]
mov eax, dword [rax + r11]
add rax, r9
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x1400048f3
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x1400048d0
cmp edx, 0xf352ca1a
je 0x1400049c9
test r8d, r8d
jne 0x1400048b0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1400049e1
cmp qword [rax + 0x30], r15
jne 0x140004880
mov rcx, qword [rbp - 0x29]
call r15
xor eax, eax
jmp 0x140003d56
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r11d, dword [rcx + rdx*4]
add r11, r9
jmp 0x140003e50
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1400040b0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
add r10, r9
jmp 0x140004170
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140004430
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1400044f0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140004860
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
add r15, r9
mov rcx, qword [rbp - 0x29]
call r15
xor eax, eax
jmp 0x140003d56