Function at 0x140007bf0
Capabilities:
Check if file exists
Encode data using xor
Get system firmware table
Set registry value

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x1b8]
sub rsp, 0x2b0
mov rax, qword [0x140071100]
xor rax, rsp
mov qword [rbp + 0x190], rax
mov qword [r11 + 8], rbx
lea rcx, [rbp + 0x30]
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r14
movaps xmmword [r11 - 0x18], xmm6
call fcn.140007730
movups xmm0, xmmword [0x140060770]
mov eax, dword [0x140060798]
xor edi, edi
movups xmm1, xmmword [0x140060780]
mov esi, dword [0x140071148]
mov r8d, edi
mov dword [rbp - 0x58], eax
movzx eax, byte [0x14006079c]
mov byte [rbp - 0x54], al
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140060790]
movsd qword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
cmp esi, 2
jl 0x140007db7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x140007cb0
cmp r8d, 0x2d
jge 0x140007df2
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140007dc1
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r14, 0xffffffffffffffff
test eax, eax
jne 0x140008126
cmp byte [0x140060b39], dil
movsd xmm0, qword [str._C_WAVB9]
movzx eax, word [0x140060b38]
movsd qword [rsp + 0x40], xmm0
mov word [rsp + 0x48], ax
je 0x140007e79
xor byte [rsp + 0x41], 0x31
xor byte [rsp + 0x42], 0x32
xor byte [rsp + 0x43], 0x33
xor byte [rsp + 0x44], 0x34
xor byte [rsp + 0x45], 0x35
xor byte [rsp + 0x46], 0x36
xor byte [rsp + 0x47], 0x37
xor byte [rsp + 0x48], 0x38
xor byte [rsp + 0x49], 0x39
mov byte [rsp + 0x40], 0x50
lea rcx, [rbp + 0x30]
mov rax, r14
inc rax
cmp byte [rcx + rax], dil
jne 0x140007e80
mov rcx, qword [rbp - 0x30]
lea rdx, [rsp + 0x40]
inc eax
mov r9d, 1
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x140008117
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x140008037
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140007f30
cmp r8d, 0x1b
jge 0x140008081
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140008050
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x1400080a0
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movzx eax, word [0x140060b38]
lea r9, [rbp - 0x80]
movsd xmm0, qword [str._C_WAVB9]
lea r8, [rsp + 0x60]
movups xmm1, xmmword [0x140060780]
mov word [rsp + 0x48], ax
lea rdx, [rsp + 0x30]
mov eax, dword [0x140060798]
mov ecx, 0xc
movsd qword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x140060770]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x14006079c]
movaps xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140060790]
mov byte [rbp - 0x54], al
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], r10d
movsd qword [rbp - 0x60], xmm0
mov qword [rsp + 0x20], rax
movaps xmmword [rbp - 0x70], xmm1
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140008373
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x140008301
mov r8d, edi
cmp esi, 2
jl 0x1400082b7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400081b0
cmp r8d, 0x1e
jge 0x140008301
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x1400082d0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x140008320
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [0x140060770]
mov eax, dword [0x140060798]
lea r9, [rbp - 0x80]
movups xmm1, xmmword [0x140060780]
lea r8, [rsp + 0x60]
mov dword [rbp - 0x58], eax
movaps xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x30]
movsd xmm0, qword [0x140060790]
mov ecx, 0xc
movzx eax, byte [0x14006079c]
movsd qword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x54], al
mov dword [rsp + 0x20], r10d
call fcn.140001180
cmp byte [0x1400609a3], dil
movups xmm0, xmmword [0x140060990]
mov eax, dword [str._d1C]
mov dword [rsp + 0x50], eax
movups xmmword [rsp + 0x40], xmm0
je 0x140008521
mov r8d, edi
cmp esi, 2
jl 0x1400084d7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x1400083d0
cmp r8d, 0x14
jge 0x140008521
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x14
jl 0x1400084f0
cmp byte [0x14006076d], dil
movzx eax, word [0x14006076c]
mov word [rsp + 0x30], ax
je 0x140008540
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2b
lea r9, [rbp + 0x30]
mov ecx, 0xa
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
call fcn.140001180
mov rbx, rdi
nop dword [rax + rax]
call fcn.1400240e0
and eax, 0x800000ff
jge 0x140008575
dec eax
or eax, 0xffffff00
inc eax
mov byte [rbp + rbx + 0x80], al
inc rbx
cmp rbx, 0xa6
jl 0x140008560
mov eax, dword [0x140060798]
mov r8d, edi
mov dword [rbp - 0x58], eax
movzx eax, byte [0x14006079c]
mov byte [rbp - 0x54], al
movups xmm0, xmmword [0x140060770]
movups xmm1, xmmword [0x140060780]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140060790]
movsd qword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
cmp esi, 2
jl 0x140008707
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x140008600
cmp r8d, 0x2d
jge 0x140008742
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140008711
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140008bb3
movzx eax, byte [0x1400608e0]
mov r8d, edi
mov byte [rsp + 0x50], al
movups xmm0, xmmword [str.tXUZ_TZgJVN_Iw__]
movups xmmword [rsp + 0x40], xmm0
cmp esi, 2
jl 0x1400088c7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x1400087c0
cmp r8d, 0x11
jge 0x140008911
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x1400088e0
mov rcx, qword [rbp - 0x30]
lea rax, [rbp + 0x80]
mov dword [rsp + 0x28], 0xa6
lea rdx, [rsp + 0x40]
mov r9d, 3
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x140008ba4
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x140008ac7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400089c0
cmp r8d, 0x1b
jge 0x140008b11
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140008ae0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x140008b30
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movzx eax, byte [0x1400608e0]
lea r9, [rbp - 0x80]
movups xmm0, xmmword [str.tXUZ_TZgJVN_Iw__]
mov byte [rsp + 0x50], al
lea r8, [rsp + 0x60]
mov eax, dword [0x140060798]
lea rdx, [rsp + 0x30]
movups xmm1, xmmword [0x140060780]
mov ecx, 0xc
mov dword [rbp - 0x58], eax
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x140060770]
movzx eax, byte [0x14006079c]
mov byte [rbp - 0x54], al
lea rax, [rsp + 0x40]
movaps xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140060790]
mov dword [rsp + 0x28], r10d
movsd qword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov qword [rsp + 0x20], rax
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140008df3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x140008d81
mov r8d, edi
cmp esi, 2
jl 0x140008d39
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140008c32
cmp r8d, 0x1e
jge 0x140008d81
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x140008d50
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x140008da0
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [0x140060770]
mov eax, dword [0x140060798]
lea r9, [rbp - 0x80]
movups xmm1, xmmword [0x140060780]
lea r8, [rsp + 0x60]
mov dword [rbp - 0x58], eax
movaps xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x30]
movsd xmm0, qword [0x140060790]
mov ecx, 0xc
movzx eax, byte [0x14006079c]
movsd qword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x54], al
mov dword [rsp + 0x20], r10d
call fcn.140001180
mov r9, rdi
mov rdx, rdi
nop dword [rax]
movsx rax, byte [rbp + rdx + 0x80]
imul rcx, r9, 0x1f
add rcx, rax
movsx rax, byte [rbp + rdx + 0x81]
imul r9, rcx, 0x1f
add rdx, 2
add r9, rax
cmp rdx, 0xa6
jb 0x140008e00
mov eax, dword [0x140060c50]
mov r8d, edi
mov dword [rsp + 0x78], eax
movzx eax, byte [0x140060c54]
mov byte [rsp + 0x7c], al
movups xmm0, xmmword [0x140060c38]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x140060c48]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x140008fa7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140008ea0
cmp r8d, 0x1d
jge 0x140008ff1
movsxd rax, r8d
lea r10, [rsp + 0x60]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r10, [r10 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r10 - 1], al
cmp r8d, 0x1d
jl 0x140008fc0
cmp byte [0x14006076d], dil
movzx eax, word [0x14006076c]
mov word [rsp + 0x30], ax
je 0x140009010
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2b
lea r8, [rsp + 0x60]
mov ecx, 0xa
lea rdx, [rsp + 0x30]
call fcn.140001180
xorps xmm0, xmm0
lea rcx, [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
call qword [sym.imp.RPCRT4.dll_UuidCreate]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x30], rdi
lea rcx, [rbp - 0x20]
call qword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
jne 0x140009071
mov rdx, qword [rbp - 0x30]
mov r8, r14
inc r8
cmp byte [rdx + r8], dil
jne 0x140009052
inc r8
lea rcx, [rbp + 0x50]
call fcn.140041940
lea rcx, [rbp - 0x30]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeA]
movups xmm1, xmmword [0x140060a70]
movups xmm0, xmmword [str.ctgctdrdtSXNRMP5]
movups xmmword [rsp + 0x70], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
movups xmmword [rsp + 0x60], xmm0
test al, al
je 0x140009221
cmp esi, 2
jl 0x1400091e1
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
mov edx, edi
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov r8d, dword [rbp - 0x20]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x20
jl 0x1400090e0
jmp 0x140009221
lea r9, [rsp + 0x60]
mov r8d, edi
nop dword [rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x20
jl 0x1400091f0
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x60]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140009654
cmp byte [0x1400607db], dil
movsd xmm0, qword [str.PQ___SpMP_]
mov eax, dword [0x1400607d8]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], eax
je 0x1400093c1
mov r8d, edi
cmp esi, 2
jl 0x140009380
movdqa xmm2, xmmword [0x140069590]
mov r8d, 8
movdqa xmm4, xmmword [0x140069610]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x1400695a0]
movdqa xmm0, xmm2
mov eax, dword [str.000000000000000011111111111111114444444444444444]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.PQ___SpMP_]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rsp + 0x40], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
movd xmm1, dword [rsp + 0x44]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0xc
jl 0x140009390
lea rcx, [rbp + 0x50]
mov rax, r14
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], dil
jne 0x1400093d0
mov rcx, qword [rbp - 0x30]
lea rdx, [rsp + 0x40]
inc eax
mov r9d, 1
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x140009645
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x140009587
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140009480
cmp r8d, 0x1b
jge 0x1400095d1
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x1400095a0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x1400095f0
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movsd xmm0, qword [str.PQ___SpMP_]
lea r9, [rbp - 0x80]
mov eax, dword [0x1400607d8]
lea r8, [rsp + 0x60]
movups xmm1, xmmword [0x140060a70]
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x48], eax
movsd qword [rsp + 0x40], xmm0
lea rax, [rsp + 0x40]
movups xmm0, xmmword [str.ctgctdrdtSXNRMP5]
mov dword [rsp + 0x28], r10d
mov ecx, 0xc
movaps xmmword [rbp - 0x70], xmm1
movaps xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x20], rax
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140009883
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x140009831
mov r8d, edi
cmp esi, 2
jl 0x1400097e7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400096e0
cmp r8d, 0x1e
jge 0x140009831
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x140009800
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x140009850
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [str.ctgctdrdtSXNRMP5]
lea r9, [rbp - 0x80]
mov ecx, 0xc
movups xmm1, xmmword [0x140060a70]
lea r8, [rsp + 0x60]
mov dword [rsp + 0x20], r10d
lea rdx, [rsp + 0x30]
movaps xmmword [rbp - 0x80], xmm0
movaps xmmword [rbp - 0x70], xmm1
call fcn.140001180
cmp byte [0x14006086d], dil
mov eax, dword [0x140060868]
movups xmm0, xmmword [0x140060858]
mov dword [rsp + 0x50], eax
movzx eax, word [0x14006086c]
movups xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x54], ax
je 0x140009a41
mov r8d, edi
cmp esi, 2
jl 0x1400099f7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x1400098f0
cmp r8d, 0x16
jge 0x140009a41
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x16
jl 0x140009a10
cmp byte [0x14006076d], dil
movzx eax, word [0x14006076c]
mov word [rsp + 0x30], ax
je 0x140009a60
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2b
lea r9, [rbp + 0x50]
mov ecx, 0xa
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
call fcn.140001180
lea rcx, [rbp + 0x20]
call fcn.1400074a0
movzx eax, word [0x140060918]
mov r8d, edi
mov word [rbp - 0x50], ax
movzx eax, byte [0x14006091a]
mov byte [rbp - 0x4e], al
movups xmm0, xmmword [0x1400608e8]
movups xmm1, xmmword [0x1400608f8]
movups xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060908]
movups xmmword [rbp - 0x70], xmm1
movups xmmword [rbp - 0x60], xmm0
cmp esi, 2
jl 0x140009bf7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x30
jl 0x140009af0
cmp r8d, 0x33
jge 0x140009c32
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x33
jl 0x140009c01
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140009f45
movzx eax, byte [0x1400607a8]
lea rcx, [rbp + 0x20]
movsd xmm0, qword [str.xAGZT_R8]
movsd qword [rsp + 0x40], xmm0
xor byte [rsp + 0x41], 0x31
xor byte [rsp + 0x42], 0x32
xor byte [rsp + 0x43], 0x33
xor byte [rsp + 0x44], 0x34
xor byte [rsp + 0x45], 0x35
xor byte [rsp + 0x46], 0x36
xor byte [rsp + 0x47], 0x37
xor al, 0x38
mov byte [rsp + 0x40], 0x48
mov byte [rsp + 0x48], al
mov rax, r14
inc rax
cmp byte [rcx + rax], dil
jne 0x140009ca7
mov rcx, qword [rbp - 0x30]
lea rdx, [rsp + 0x40]
inc eax
mov r9d, 1
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x140009f36
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x140009e59
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140009d52
cmp r8d, 0x1b
jge 0x140009ea1
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140009e70
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x140009ec0
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movzx eax, byte [0x1400607a8]
lea r9, [rbp - 0x80]
movsd xmm0, qword [str.xAGZT_R8]
lea r8, [rsp + 0x60]
movups xmm1, xmmword [0x1400608f8]
mov byte [rsp + 0x48], al
lea rdx, [rsp + 0x30]
movzx eax, word [0x140060918]
mov ecx, 0xc
movsd qword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x1400608e8]
mov word [rbp - 0x50], ax
movzx eax, byte [0x14006091a]
movaps xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060908]
mov byte [rbp - 0x4e], al
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], r10d
movaps xmmword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov qword [rsp + 0x20], rax
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000a193
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x14000a121
mov r8d, edi
cmp esi, 2
jl 0x14000a0d7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140009fd0
cmp r8d, 0x1e
jge 0x14000a121
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x14000a0f0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000a140
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [0x1400608e8]
movzx eax, word [0x140060918]
lea r9, [rbp - 0x80]
movups xmm1, xmmword [0x1400608f8]
lea r8, [rsp + 0x60]
mov word [rbp - 0x50], ax
movaps xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x30]
movups xmm0, xmmword [0x140060908]
movzx eax, byte [0x14006091a]
mov ecx, 0xc
movaps xmmword [rbp - 0x70], xmm1
movaps xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x4e], al
mov dword [rsp + 0x20], r10d
call fcn.140001180
movups xmm0, xmmword [0x140060a80]
mov r8d, edi
movups xmm1, xmmword [0x140060a90]
movzx eax, byte [0x140060ac0]
movups xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060aa0]
movups xmmword [rbp - 0x70], xmm1
movups xmm1, xmmword [0x140060ab0]
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm1
mov byte [rbp - 0x40], al
cmp esi, 2
jl 0x14000a308
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x40
jl 0x14000a201
cmp r8d, 0x41
jge 0x14000a351
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x41
jl 0x14000a320
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000a7b3
mov eax, dword [0x140060738]
mov r8d, edi
movsd xmm0, qword [str.s_CAASEvXW_]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x14006073c]
mov byte [rsp + 0x4c], al
movsd qword [rsp + 0x40], xmm0
cmp esi, 2
jl 0x14000a4ad
movdqa xmm2, xmmword [0x140069590]
mov r8d, 8
movdqa xmm4, xmmword [0x140069610]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x1400695a0]
movdqa xmm0, xmm2
mov eax, dword [str.000000000000000011111111111111114444444444444444]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.s_CAASEvXW_]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rsp + 0x40], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
movd xmm1, dword [rsp + 0x44]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0xd
jl 0x14000a4c0
lea rcx, [rbp + 0x20]
mov rax, r14
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], dil
jne 0x14000a500
mov rcx, qword [rbp - 0x30]
lea rdx, [rsp + 0x40]
inc eax
mov r9d, 1
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x14000a7a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x14000a6b7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000a5b0
cmp r8d, 0x1b
jge 0x14000a701
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14000a6d0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000a724
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
mov eax, dword [0x140060738]
lea r9, [rbp - 0x80]
movsd xmm0, qword [str.s_CAASEvXW_]
lea r8, [rsp + 0x60]
movups xmm1, xmmword [0x140060a90]
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x48], eax
mov ecx, 0xc
movzx eax, byte [0x14006073c]
mov byte [rsp + 0x4c], al
movzx eax, byte [0x140060ac0]
movsd qword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x140060a80]
mov byte [rbp - 0x40], al
lea rax, [rsp + 0x40]
movaps xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060aa0]
movaps xmmword [rbp - 0x70], xmm1
movups xmm1, xmmword [0x140060ab0]
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], rax
movaps xmmword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x50], xmm1
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000a9f7
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x14000a981
mov r8d, edi
cmp esi, 2
jl 0x14000a939
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000a832
cmp r8d, 0x1e
jge 0x14000a981
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x14000a950
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000a9a4
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [0x140060a80]
lea r9, [rbp - 0x80]
movups xmm1, xmmword [0x140060a90]
lea r8, [rsp + 0x60]
movzx eax, byte [0x140060ac0]
lea rdx, [rsp + 0x30]
movaps xmmword [rbp - 0x80], xmm0
mov ecx, 0xc
movups xmm0, xmmword [0x140060aa0]
movaps xmmword [rbp - 0x70], xmm1
movups xmm1, xmmword [0x140060ab0]
movaps xmmword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x50], xmm1
mov byte [rbp - 0x40], al
mov dword [rsp + 0x20], r10d
call fcn.140001180
movzx eax, word [0x140060b00]
mov r8d, edi
mov word [rbp - 0x48], ax
movzx eax, byte [0x140060b02]
mov byte [rbp - 0x46], al
movups xmm0, xmmword [str.chagqxjtMKHRIP.50__]
movups xmm1, xmmword [0x140060ad8]
movups xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060ae8]
movups xmmword [rbp - 0x70], xmm1
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x140060af8]
movsd qword [rbp - 0x50], xmm0
cmp esi, 2
jl 0x14000ab79
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x38
jl 0x14000aa72
cmp r8d, 0x3b
jge 0x14000abc1
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x3b
jl 0x14000ab90
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000b020
mov eax, dword [0x140060738]
mov r8d, edi
movsd xmm0, qword [str.s_CAASEvXW_]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x14006073c]
mov byte [rsp + 0x4c], al
movsd qword [rsp + 0x40], xmm0
cmp esi, 2
jl 0x14000ad1d
movdqa xmm2, xmmword [0x140069590]
mov r8d, 8
movdqa xmm4, xmmword [0x140069610]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x1400695a0]
movdqa xmm0, xmm2
mov eax, dword [str.000000000000000011111111111111114444444444444444]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.s_CAASEvXW_]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rsp + 0x40], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
movd xmm1, dword [rsp + 0x44]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0xd
jl 0x14000ad30
lea rax, [rbp + 0x20]
inc r14
cmp byte [rax + r14], dil
jne 0x14000ad65
mov rcx, qword [rbp - 0x30]
lea rax, [rbp + 0x20]
inc r14d
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x14000b011
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x14000af19
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000ae12
cmp r8d, 0x1b
jge 0x14000af61
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14000af30
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000af84
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
mov eax, dword [0x140060738]
lea r9, [rbp - 0x80]
movsd xmm0, qword [str.s_CAASEvXW_]
lea r8, [rsp + 0x60]
movups xmm1, xmmword [0x140060ad8]
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x30]
movzx eax, byte [0x14006073c]
mov ecx, 0xc
movsd qword [rsp + 0x40], xmm0
movups xmm0, xmmword [str.chagqxjtMKHRIP.50__]
mov byte [rsp + 0x4c], al
movzx eax, word [0x140060b00]
movaps xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060ae8]
mov word [rbp - 0x48], ax
movzx eax, byte [0x140060b02]
movaps xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x140060af8]
mov byte [rbp - 0x46], al
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], r10d
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov qword [rsp + 0x20], rax
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000b274
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x14000b1f1
mov r8d, edi
cmp esi, 2
jl 0x14000b1a7
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000b0a0
cmp r8d, 0x1e
jge 0x14000b1f1
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x14000b1c0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000b214
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [str.chagqxjtMKHRIP.50__]
movzx eax, word [0x140060b00]
lea r9, [rbp - 0x80]
movups xmm1, xmmword [0x140060ad8]
lea r8, [rsp + 0x60]
mov word [rbp - 0x48], ax
movaps xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x30]
movups xmm0, xmmword [0x140060ae8]
movzx eax, byte [0x140060b02]
mov ecx, 0xc
movaps xmmword [rbp - 0x70], xmm1
movaps xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x140060af8]
movsd qword [rbp - 0x50], xmm0
mov byte [rbp - 0x46], al
mov dword [rsp + 0x20], r10d
call fcn.140001180
mov eax, dword [0x140060700]
mov r8d, edi
mov dword [rsp + 0x50], eax
movzx eax, word [0x140060704]
mov word [rsp + 0x54], ax
movzx eax, byte [0x140060706]
mov byte [rsp + 0x56], al
movups xmm0, xmmword [0x1400606f0]
movups xmmword [rsp + 0x40], xmm0
cmp esi, 2
jl 0x14000b3eb
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x14000b2e0
cmp r8d, 0x17
jge 0x14000b431
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x17
jl 0x14000b400
cmp byte [0x14006076d], dil
movzx eax, word [0x14006076c]
mov word [rsp + 0x30], ax
je 0x14000b454
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2b
lea r9, [rbp + 0x20]
mov ecx, 0xa
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
call fcn.140001180
movzx eax, word [0x140060850]
mov r8d, edi
mov word [rbp - 0x58], ax
movzx eax, byte [0x140060852]
mov byte [rbp - 0x56], al
movups xmm0, xmmword [str.s_vndrxojfLY_bH__.3_55]
movups xmm1, xmmword [0x140060838]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140060848]
movsd qword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
cmp esi, 2
jl 0x14000b5eb
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x14000b4e0
cmp r8d, 0x2b
jge 0x14000b631
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x14000b600
xor edx, edx
lea r8, [rbp - 0x80]
mov r9d, 1
lea ecx, [rdx + 0x14]
call qword [sym.imp.USER32.dll_SystemParametersInfoA]
cmp byte [0x14006076b], dil
movups xmm0, xmmword [0x140060758]
mov eax, dword [str._d1Ce1]
mov dword [rsp + 0x50], eax
movups xmmword [rsp + 0x40], xmm0
je 0x14000b7f1
mov r8d, edi
cmp esi, 2
jl 0x14000b7ad
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x14000b6a2
cmp r8d, 0x14
jge 0x14000b7f1
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x14
jl 0x14000b7c0
cmp byte [0x14006076d], dil
movzx eax, word [0x14006076c]
mov word [rsp + 0x30], ax
je 0x14000b814
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2b
lea r9, [rbp - 0x80]
mov ecx, 0xa
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
call fcn.140001180
xor ecx, ecx
call fcn.140023e54
mov rbx, rax
call fcn.1400240e0
xorps xmm0, xmm0
mov r8d, edi
movd xmm1, eax
lea rax, [rbx - 0x56867850]
cvtdq2pd xmm1, xmm1
cvtsi2sd xmm0, rax
divsd xmm1, qword [0x140069568]
mulsd xmm1, xmm0
movups xmm0, xmmword [0x140060770]
addsd xmm1, qword [0x140069570]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140060790]
movsd qword [rbp - 0x60], xmm0
cvttsd2si rax, xmm1
movups xmm1, xmmword [0x140060780]
mov qword [rbp - 0x10], rax
mov eax, dword [0x140060798]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x14006079c]
mov byte [rbp - 0x54], al
movups xmmword [rbp - 0x70], xmm1
cmp esi, 2
jl 0x14000b9eb
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x14000b8e0
cmp r8d, 0x2d
jge 0x14000ba31
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x14000ba00
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000be78
cmp byte [0x1400609fb], dil
movsd xmm0, qword [str.y_AGUYZsYM__]
mov eax, dword [0x1400609f8]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], eax
je 0x14000bbd1
mov r8d, edi
cmp esi, 2
jl 0x14000bb8f
movdqa xmm2, xmmword [0x140069590]
mov r8d, 8
movdqa xmm4, xmmword [0x140069610]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x1400695a0]
movdqa xmm0, xmm2
mov eax, dword [str.000000000000000011111111111111114444444444444444]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.y_AGUYZsYM__]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rsp + 0x40], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400695b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
movd xmm1, dword [rsp + 0x44]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0xc
jl 0x14000bba0
mov rcx, qword [rbp - 0x30]
lea rax, [rbp - 0x10]
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x14000be69
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x14000bd8b
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000bc80
cmp r8d, 0x1b
jge 0x14000bdd1
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14000bda0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000bdf4
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
mov eax, dword [0x1400609f8]
lea r9, [rbp - 0x80]
movsd xmm0, qword [str.y_AGUYZsYM__]
lea r8, [rsp + 0x60]
movups xmm1, xmmword [0x140060780]
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x30]
mov eax, dword [0x140060798]
mov ecx, 0xc
movsd qword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x140060770]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x14006079c]
movaps xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140060790]
mov byte [rbp - 0x54], al
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], r10d
movsd qword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov qword [rsp + 0x20], rax
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000c0c7
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x14000c051
mov r8d, edi
cmp esi, 2
jl 0x14000c00b
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000bf00
cmp r8d, 0x1e
jge 0x14000c051
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x14000c020
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000c074
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [0x140060770]
mov eax, dword [0x140060798]
lea r9, [rbp - 0x80]
movups xmm1, xmmword [0x140060780]
lea r8, [rsp + 0x60]
mov dword [rbp - 0x58], eax
movaps xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x30]
movsd xmm0, qword [0x140060790]
mov ecx, 0xc
movzx eax, byte [0x14006079c]
movsd qword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x54], al
mov dword [rsp + 0x20], r10d
call fcn.140001180
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 8]
call fcn.140020b00
cmp byte [0x140060c99], dil
movups xmm0, xmmword [0x140060c88]
movzx eax, word [0x140060c98]
mov word [rsp + 0x50], ax
movups xmmword [rsp + 0x40], xmm0
je 0x14000c281
mov r8d, edi
cmp esi, 2
jl 0x14000c23d
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x14000c132
cmp r8d, 0x12
jge 0x14000c281
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x14000c250
lea r9, [rbp - 8]
mov edx, 0x5a
lea r8, [rsp + 0x40]
lea rcx, [rbp + 0x130]
call fcn.140020fa8
cmp byte [0x140060825], dil
mov eax, dword [0x140060820]
movups xmm0, xmmword [0x140060810]
mov dword [rsp + 0x50], eax
movzx eax, word [0x140060824]
movups xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x54], ax
je 0x14000c461
mov r8d, edi
cmp esi, 2
jl 0x14000c41b
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x14000c310
cmp r8d, 0x16
jge 0x14000c461
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x16
jl 0x14000c430
cmp byte [0x14006076d], dil
movzx eax, word [0x14006076c]
mov word [rsp + 0x30], ax
je 0x14000c484
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2b
lea r9, [rbp + 0x130]
mov ecx, 0xa
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
call fcn.140001180
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x52534d42
call qword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, r14d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x14000c6b7
mov ecx, dword [0x140060c10]
mov r8d, edi
mov dword [rbp - 0x60], ecx
movups xmm0, xmmword [0x140060bf0]
movups xmm1, xmmword [0x140060c00]
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm1
cmp esi, 2
jl 0x14000c63b
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x14000c530
cmp r8d, 0x24
jge 0x14000c681
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x24
jl 0x14000c650
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000c6a4
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
lea r8, [rbp - 0x80]
mov ecx, 0xc
lea rdx, [rsp + 0x30]
call fcn.140001180
mov r9d, r14d
mov r8, rbx
xor edx, edx
mov ecx, 0x52534d42
call qword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
cmp eax, r14d
je 0x14000c8b7
movzx eax, byte [0x140060a58]
mov r8d, edi
mov byte [rbp - 0x60], al
movups xmm0, xmmword [0x140060a38]
movups xmm1, xmmword [0x140060a48]
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm1
cmp esi, 2
jl 0x14000c83b
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x14000c730
cmp r8d, 0x21
jge 0x14000c881
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x21
jl 0x14000c850
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000c8a4
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
lea r8, [rbp - 0x80]
mov ecx, 0xc
lea rdx, [rsp + 0x30]
call fcn.140001180
movups xmm0, xmmword [0x1400607e0]
movups xmm1, xmmword [0x1400607f0]
movups xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060800]
movups xmmword [rbp - 0x70], xmm1
movups xmmword [rbp - 0x60], xmm0
cmp esi, 2
jl 0x14000ca14
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rbp - 0x7c]
movdqa xmm5, xmmword [0x140069590]
mov edx, edi
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov r8d, dword [rbp - 0x20]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x30
jl 0x14000c910
jmp 0x14000ca51
lea r10, [rbp - 0x80]
mov r8d, edi
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r10, [r10 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r10 - 1], al
cmp r8d, 0x30
jl 0x14000ca20
lea rax, [rbp - 0x30]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000cd70
movzx ecx, word [0x140069440]
lea rdx, [rsp + 0x40]
movzx eax, byte [0x140069442]
mov r9d, 3
movsd xmm0, qword [str.cpZ_FrVLX:]
xor al, 0x3a
movsd qword [rsp + 0x40], xmm0
xor r8d, r8d
xor byte [rsp + 0x41], 0x31
xor byte [rsp + 0x42], 0x32
xor byte [rsp + 0x43], 0x33
xor byte [rsp + 0x44], 0x34
xor byte [rsp + 0x45], 0x35
xor byte [rsp + 0x46], 0x36
xor byte [rsp + 0x47], 0x37
mov word [rsp + 0x48], cx
xor cl, 0x38
xor byte [rsp + 0x49], 0x39
mov byte [rsp + 0x48], cl
mov rcx, qword [rbp - 0x30]
mov dword [rsp + 0x28], r14d
mov byte [rsp + 0x40], 0x53
mov byte [rsp + 0x4a], al
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x14000cd61
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, word [0x1400609e8]
mov r10d, eax
mov word [rsp + 0x78], cx
mov r8d, edi
movzx ecx, byte [0x1400609ea]
mov byte [rsp + 0x7a], cl
movups xmm0, xmmword [str.uC_F]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400609e0]
movsd qword [rsp + 0x70], xmm0
cmp esi, 2
jl 0x14000cc8b
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000cb80
cmp r8d, 0x1b
jge 0x14000ccd1
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14000cca0
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000ccf4
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movzx eax, word [0x140069440]
lea r9, [rbp - 0x80]
movsd xmm0, qword [str.cpZ_FrVLX:]
lea r8, [rsp + 0x60]
movups xmm1, xmmword [0x1400607f0]
lea rdx, [rsp + 0x30]
mov word [rsp + 0x48], ax
movsd qword [rsp + 0x40], xmm0
mov ecx, 0xc
movups xmm0, xmmword [0x1400607e0]
movzx eax, byte [0x140069442]
mov byte [rsp + 0x4a], al
lea rax, [rsp + 0x40]
movaps xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140060800]
mov dword [rsp + 0x28], r10d
movaps xmmword [rbp - 0x70], xmm1
movaps xmmword [rbp - 0x60], xmm0
mov qword [rsp + 0x20], rax
call fcn.140001180
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000cfa2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x1400607cd], dil
mov r10d, eax
movups xmm0, xmmword [0x1400607b0]
mov ecx, dword [0x1400607c8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x1400607cc]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x7c], cx
movsd xmm0, qword [str.e2bk_a__rio_eM]
movsd qword [rsp + 0x70], xmm0
je 0x14000cf41
mov r8d, edi
cmp esi, 2
jl 0x14000cefb
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x14000cdf0
cmp r8d, 0x1e
jge 0x14000cf41
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x14000cf10
cmp byte [0x14006072d], dil
movzx eax, word [0x14006072c]
mov word [rsp + 0x30], ax
je 0x14000cf64
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2d
movups xmm0, xmmword [0x1400607e0]
lea r9, [rbp - 0x80]
mov ecx, 0xc
movups xmm1, xmmword [0x1400607f0]
lea r8, [rsp + 0x60]
mov dword [rsp + 0x20], r10d
movaps xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x30]
movups xmm0, xmmword [0x140060800]
movaps xmmword [rbp - 0x70], xmm1
movaps xmmword [rbp - 0x60], xmm0
call fcn.140001180
cmp byte [0x140069505], dil
mov eax, dword [0x140069500]
movups xmm0, xmmword [0x1400694f0]
mov r14, qword [rsp + 0x2d8]
mov rbx, qword [rsp + 0x2c0]
mov dword [rsp + 0x50], eax
movzx eax, word [0x140069504]
movups xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x54], ax
je 0x14000d16e
cmp esi, 2
jl 0x14000d128
movdqa xmm0, xmmword [str.000000000000000011111111111111114444444444444444]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x140069590]
movdqa xmm4, xmmword [0x140069610]
movdqa xmm6, xmmword [0x1400695b0]
movdqa xmmword [rbp - 0x20], xmm0
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
mov eax, edi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400695d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x14000d020
cmp eax, 0x16
jge 0x14000d16e
movsxd rax, edi
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, dil
inc edi
sub al, cl
add al, 0x30
xor byte [r8 - 1], al
cmp edi, 0x16
jl 0x14000d140
cmp byte [0x14006076d], 0
movzx eax, word [0x14006076c]
movaps xmm6, xmmword [rsp + 0x2a0]
mov rdi, qword [rsp + 0x2d0]
mov rsi, qword [rsp + 0x2c8]
mov word [rsp + 0x30], ax
je 0x14000d1a9
xor byte [rsp + 0x31], 0x31
mov byte [rsp + 0x30], 0x2b
lea r8, [rsp + 0x40]
mov ecx, 0xa
lea rdx, [rsp + 0x30]
call fcn.140001180
xor eax, eax
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.140019bd0
add rsp, 0x2b0
pop rbp
ret