Function at 0x14001b0b0
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1538]
mov eax, 0x1638
call fcn.14005d8e0
sub rsp, rax
movaps xmmword [rsp + 0x1620], xmm6
xor edi, edi
mov dword [rsp + 0x3c], edi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rdi
mov qword [rbp + 0x28], rdi
movabs rax, 0x689cb8df7e4a2108
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x22e3b2f3ad114fa8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x3287ba302082529b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xe9963f6b75797ef9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2d8], rax
movabs rbx, 0x2dcef9882a0c6e5b
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x430], rax
movabs rsi, 0x4d90dd81ce7802f4
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x438], rax
movabs rax, 0x46f7c34263de26fd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x440], rax
movabs rax, 0xe9ef571b140b1996
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x448], rax
movdqa xmm0, xmmword [rbp + 0x430]
xorps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0x2c0], xmm0
movdqa xmm1, xmmword [rbp + 0x2d0]
xorps xmm1, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x2d0], xmm1
lea rax, [rbp + 0x28]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x2c0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x14001b259
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x260], xmm1
mov r15d, edi
mov qword [rbp + 0x270], rdi
lea esi, [rdi + 2]
xorps xmm0, xmm0
psrldq xmm0, 8
movq r12, xmm0
movq rbx, xmm1
jmp 0x14001b716
mov dword [rbp + 0x18], 1
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x920]
call fcn.140083f10
mov dword [rbp - 0x48], 0x400
movabs rax, 0x6aab97e1426f0f16
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x230], rax
movabs rax, 0x4d90dd81ce1c6b81
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x238], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x450], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x458], rax
movdqa xmm0, xmmword [rbp + 0x230]
xorps xmm0, xmmword [rbp + 0x450]
movdqa xmmword [rbp + 0x230], xmm0
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x920]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x18]
xor r8d, r8d
lea rdx, [rbp + 0x230]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [rbp - 0x48]
dec eax
xorps xmm0, xmm0
cmp eax, 0x3ff
ja 0x14001b55b
movups xmmword [rbp + 0xf8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x108], xmm1
lea rax, [rbp + 0x920]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14001b354
lea rdx, [rbp + 0x920]
lea rcx, [rbp + 0xf8]
call fcn.140013710
nop
mov dword [rsp + 0x3c], 4
mov dword [rsp + 0x64], 0x1e654cfa
mov word [rsp + 0x68], 0x1827
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rdi
mov edx, 6
lea rcx, [rbp + 0x118]
call fcn.140032640
mov r8d, 6
lea rdx, [rsp + 0x64]
mov r14, qword [rbp + 0x118]
mov rcx, r14
call fcn.140083870
lea rbx, [r14 + 6]
mov qword [rbp + 0x120], rbx
mov dword [rsp + 0x3c], send
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x38], xmm0
mov r10, rdi
mov qword [rbp + 0x48], rdi
mov r13, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0x108]
test rcx, rcx
jne 0x14001b415
movdqu xmmword [rbp + 0x1b8], xmm0
mov rbx, rdi
lea rax, [rbp + 0x1b0]
lea esi, [rcx + 0x5c]
jmp 0x14001b580
lea rdi, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rdi, r13
lea r15, [rbp + 0xf8]
cmova r15, r13
add r15, rcx
mov r9, qword [rbp + 0x40]
cmp rdi, r15
je 0x14001b52f
mov rsi, rbx
sub rsi, r14
cmp r14, rbx
mov r13d, 0
cmova rsi, r13
nop word [rax + rax]
movzx edx, byte [rdi]
mov rax, r13
mov rcx, r14
test rsi, rsi
je 0x14001b4d6
cmp rsi, 0x20
jb 0x14001b4d6
mov r8, rsi
and r8, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
movdqu xmm0, xmmword [rcx]
xorps xmm2, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
xorps xmm1, xmm0
add rcx, 0x20
add rax, 0x20
cmp rax, r8
jne 0x14001b481
xorps xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
xorps xmm1, xmm0
movd eax, xmm1
xor dl, al
cmp rcx, rbx
je 0x14001b4ea
nop dword [rax + rax]
xor dl, byte [rcx]
inc rcx
cmp rcx, rbx
jne 0x14001b4e0
mov byte [rbp + 0x1588], dl
cmp r9, r10
je 0x14001b501
mov byte [r9], dl
inc r9
mov qword [rbp + 0x40], r9
jmp 0x14001b51c
lea r8, [rbp + 0x1588]
mov rdx, r9
lea rcx, [rbp + 0x38]
call fcn.140043950
mov r10, qword [rbp + 0x48]
mov r9, qword [rbp + 0x40]
inc rdi
cmp rdi, r15
jne 0x14001b460
mov r13, qword [rbp + 0xf8]
xor edi, edi
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x40], rdi
mov rbx, qword [rbp + 0x38]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x1b8], r9
mov qword [rbp + 0x1c0], r10
lea rax, [rbp + 0x1b0]
lea esi, [rdi + 0x5c]
jmp 0x14001b580
movdqu xmmword [rbp + 0x3f0], xmm0
lea rax, [rbp + 0x3e8]
mov esi, 0x20
mov rbx, rdi
mov r13, qword [rbp + 0xf8]
mov r14, qword [rbp + 0x118]
mov r15, qword [rax + 0x10]
mov qword [rax + 0x10], rdi
mov r12, qword [rax + 8]
mov qword [rax + 8], rdi
mov qword [rax], rdi
mov qword [rbp + 0x260], rbx
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x270], r15
or esi, 2
test sil, 0x20
je 0x14001b606
and esi, 0xffffffdf
mov rcx, qword [rbp + 0x3e8]
test rcx, rcx
je 0x14001b606
mov rdx, qword [rbp + 0x3f8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b5ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d73e
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3e8], xmm0
mov qword [rbp + 0x3f8], rdi
test sil, 0x10
je 0x14001b661
and esi, 0xffffffef
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x14001b661
mov rdx, qword [rbp + 0x1c0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b64a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d73e
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rdi
test sil, 8
je 0x14001b6b8
and esi, 0xfffffff7
test r14, r14
je 0x14001b6b8
mov rdx, qword [rbp + 0x128]
sub rdx, r14
mov rax, r14
cmp rdx, 0x1000
jb 0x14001b69e
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d744
mov rcx, r14
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rdi
test sil, 4
je 0x14001b716
and esi, 0xfffffffb
mov rax, qword [rbp + 0x110]
cmp rax, 0xf
jbe 0x14001b6ff
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14001b6f7
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d74a
mov rcx, r13
call fcn.14005cfe8
movdqa xmm0, xmmword [0x1400ba0f0]
movdqu xmmword [rbp + 0x108], xmm0
mov byte [rbp + 0xf8], 0
xor edx, edx
mov r8d, 0xd8
lea rcx, [rbp + 0x5a0]
call fcn.140083f10
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rdi
mov edx, 0x40
lea rcx, [rbp + 0x50]
call fcn.140032640
xorps xmm0, xmm0
mov rdi, qword [rbp + 0x50]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
lea r13, [rdi + 0x40]
mov qword [rbp + 0x58], r13
bts esi, 7
mov dword [rbp - 0x50], esi
cmp rbx, r12
jne 0x14001b7d9
movdqu xmmword [rbp + 0xc8], xmm0
xor r14d, r14d
mov qword [rbp + 0xd8], r14
mov dword [rsp + 0x3c], esi
test rdi, rdi
je 0x14001b7c9
mov rdx, qword [rbp + 0x60]
sub rdx, rdi
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001b7b5
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d750
mov rcx, rdi
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r14
mov r13, qword [rbp + 0xd0]
mov rdi, qword [rbp + 0xc8]
jmp 0x14001b838
lea rcx, [rbp + 0x5a0]
call fcn.14005ac90
sub r12, rbx
mov r8, r12
mov rdx, rbx
lea rcx, [rbp + 0x5a0]
call fcn.14005ad20
lea rdx, [rbp + 0x5a0]
mov rcx, rdi
call fcn.14005a480
mov rax, qword [rbp + 0x60]
xor r14d, r14d
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x50], r14
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], rax
mov dword [rbp - 0x50], esi
mov dword [rsp + 0x3c], esi
test rbx, rbx
je 0x14001b882
sub r15, rbx
mov rax, rbx
cmp r15, 0x1000
jb 0x14001b865
add r15, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d756
mov rdx, r15
mov rcx, rbx
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r14
cmp r13, rdi
je 0x14001bbd2
mov dword [rsp + 0x4c], 0xaf10351f
mov byte [rsp + 0x50], 0xcc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3a0], xmm0
mov qword [rbp + 0x3b0], r14
mov edx, 5
lea rcx, [rbp + 0x3a0]
call fcn.140032640
mov r8d, 5
lea rdx, [rsp + 0x4c]
mov r12, qword [rbp + 0x3a0]
mov rcx, r12
call fcn.140083870
lea r14, [r12 + 5]
mov qword [rbp + 0x3a8], r14
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xb0], xmm0
xor ebx, ebx
mov r9d, ebx
mov qword [rbp + 0xc0], rbx
cmp rdi, r13
jne 0x14001b92a
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x388], xmm1
xor r13d, r13d
mov qword [rbp + 0x398], r13
bts esi, 0x18
psrldq xmm0, 8
movq rbx, xmm0
movq r15, xmm1
jmp 0x14001ba5e
mov r15, r14
sub r15, r12
cmp r12, r14
mov esi, 0
cmova r15, rsi
mov rbx, qword [rbp + 0xb8]
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rdi]
mov rax, rsi
mov rcx, r12
test r15, r15
je 0x14001b9c6
cmp r15, 0x20
jb 0x14001b9c6
mov r8, r15
and r8, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
movdqu xmm0, xmmword [rcx]
xorps xmm2, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
xorps xmm1, xmm0
add rcx, 0x20
add rax, 0x20
cmp rax, r8
jne 0x14001b971
xorps xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
xorps xmm1, xmm0
movd eax, xmm1
xor dl, al
cmp rcx, r14
je 0x14001b9da
nop dword [rax + rax]
xor dl, byte [rcx]
inc rcx
cmp rcx, r14
jne 0x14001b9d0
mov byte [rbp + 0x1590], dl
cmp rbx, r9
je 0x14001b9f3
mov byte [rbx], dl
inc rbx
mov qword [rbp + 0xb8], rbx
jmp 0x14001ba17
lea r8, [rbp + 0x1590]
mov rdx, rbx
lea rcx, [rbp + 0xb0]
call fcn.140043950
mov r9, qword [rbp + 0xc0]
mov rbx, qword [rbp + 0xb8]
inc rdi
cmp rdi, r13
jne 0x14001b950
xor r13d, r13d
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xb8], r13
mov r15, qword [rbp + 0xb0]
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0x388], r15
mov qword [rbp + 0x390], rbx
mov qword [rbp + 0x398], r9
mov esi, dword [rbp - 0x50]
bts esi, 0x18
xor edx, edx
mov r8d, 0xd8
lea rcx, [rbp + 0x680]
call fcn.140083f10
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
mov edx, 0x40
lea rcx, [rbp + 0x98]
call fcn.140032640
xorps xmm0, xmm0
mov rdi, qword [rbp + 0x98]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
lea r14, [rdi + 0x40]
mov qword [rbp + 0xa0], r14
bts esi, 0x19
cmp r15, rbx
jne 0x14001bb2f
movdqu xmmword [rbp + 0x278], xmm0
mov qword [rbp + 0x288], r13
mov dword [rsp + 0x3c], esi
test rdi, rdi
je 0x14001bb23
mov rdx, qword [rbp + 0xa8]
sub rdx, rdi
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001bb09
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d75c
mov rcx, rdi
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
mov rdi, r13
mov r14, qword [rbp + 0x280]
jmp 0x14001bb94
lea rcx, [rbp + 0x680]
call fcn.14005ac90
sub rbx, r15
mov r8, rbx
mov rdx, r15
lea rcx, [rbp + 0x680]
call fcn.14005ad20
lea rdx, [rbp + 0x680]
mov rcx, rdi
call fcn.14005a480
mov rax, qword [rbp + 0xa8]
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xa0], r13
mov qword [rbp + 0x98], r13
mov qword [rbp + 0x278], rdi
mov qword [rbp + 0x280], r14
mov qword [rbp + 0x288], rax
mov dword [rsp + 0x3c], esi
sub r14, rdi
mov r8, r14
mov rdx, rdi
lea rcx, [rbp + 0x148]
call fcn.1400427f0
nop
lea rcx, [rbp + 0x278]
call fcn.14002d8a0
nop
lea rcx, [rbp + 0x388]
call fcn.14002d8a0
nop
lea rcx, [rbp + 0x3a0]
call fcn.14002d8a0
jmp 0x14001bbd5
xor r13d, r13d
mov qword [rbp - 0x50], r13
movabs rax, 0x6e92b4cd7e5f3708
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x320], rax
movabs rax, 0x22d3a9efab0a7081
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x328], rax
movabs rax, 0x3292902e0cac5293
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x330], rax
movabs rax, 0x8580256f7a645aca
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x338], rax
movabs rax, 0x3d84973a2f28ec3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x340], rax
movabs rax, 0x9d23e68d9bcb53ef
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x348], rax
movabs rax, 0x3ea03806979b43d6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x350], rax
movabs rax, 0x643b465cfce131ac
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x358], rax
movabs rax, 0x6dfb7ef09791f0b3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x360], rax
movabs rcx, 0x6fe4e1096f45fcdc
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x368], rax
movabs rbx, 0x2dcef9882a0c6e5b
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x470], rax
movabs rdi, 0x4d90dd81ce7802f4
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x478], rax
movabs rax, 0x46f7c34263de26fd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x480], rax
movabs rax, 0xe9ef571b140b1996
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x488], rax
movabs rax, 0x6abe271ce1b6c79f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x490], rax
movabs rax, 0xf95187c5c7891788
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x498], rax
movabs rax, 0x51d26826f2e922a1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4a0], rax
movabs rax, 0x540b1a2f998d58ca
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4a8], rax
movabs rax, 0x6dfb7ef09791c183
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4b0], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x4b8], rax
movdqa xmm0, xmmword [rbp + 0x320]
xorps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x320], xmm0
movdqa xmm1, xmmword [rbp + 0x330]
xorps xmm1, xmmword [rbp + 0x480]
movdqa xmmword [rbp + 0x330], xmm1
movdqa xmm0, xmmword [rbp + 0x340]
xorps xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp + 0x340], xmm0
movdqa xmm1, xmmword [rbp + 0x350]
xorps xmm1, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x350], xmm1
movdqa xmm0, xmmword [rbp + 0x360]
xorps xmm0, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp + 0x360], xmm0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x320]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x14001bebc
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x290], xmm1
mov r14, r13
mov qword [rbp + 0x2a0], r13
mov edi, dword [rsp + 0x3c]
bts edi, 8
xorps xmm0, xmm0
psrldq xmm0, 8
movq r15, xmm0
movq rsi, xmm1
jmp 0x14001c39f
mov dword [rbp + 0x1c], 1
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xd20]
call fcn.140083f10
mov dword [rbp - 0x44], 0x400
movabs rax, 0x41a79fe7585c1913
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x220], rax
movabs rax, 0x4d90dde5a70d4591
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x420], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x428], rax
movdqa xmm0, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x420]
movdqa xmmword [rbp + 0x220], xmm0
lea rax, [rbp - 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd20]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1c]
xor r8d, r8d
lea rdx, [rbp + 0x220]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [rbp - 0x44]
dec eax
xorps xmm0, xmm0
cmp eax, 0x3ff
ja 0x14001c1ca
movups xmmword [rbp + 0x178], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x188], xmm1
lea rax, [rbp + 0xd20]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001bfc0
lea rdx, [rbp + 0xd20]
lea rcx, [rbp + 0x178]
call fcn.140013710
nop
mov edi, dword [rsp + 0x3c]
bts edi, 9
mov dword [rsp + 0x3c], edi
mov dword [rsp + 0x6c], 0x10654475
mov word [rsp + 0x70], 0x1323
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r13
mov edx, 6
lea rcx, [rbp + 0x130]
call fcn.140032640
mov r8d, 6
lea rdx, [rsp + 0x6c]
mov r13, qword [rbp + 0x130]
mov rcx, r13
call fcn.140083870
lea rbx, [r13 + 6]
mov qword [rbp + 0x138], rbx
bts edi, 0xa
mov dword [rsp + 0x3c], edi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x68], xmm0
xor r11d, r11d
mov r10d, r11d
mov qword [rbp + 0x78], r11
mov r12, qword [rbp + 0x178]
mov rcx, qword [rbp + 0x188]
test rcx, rcx
jne 0x14001c08d
movdqu xmmword [rbp + 0x1d0], xmm0
bts edi, 0xd
mov esi, r11d
lea rax, [rbp + 0x1c8]
bts edi, 0xb
jmp 0x14001c1f5
lea rsi, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova rsi, r12
lea r15, [rbp + 0x178]
cmova r15, r12
add r15, rcx
mov r9, qword [rbp + 0x70]
cmp rsi, r15
je 0x14001c19b
mov r14, rbx
sub r14, r13
cmp r13, rbx
cmova r14, r11
nop dword [rax + rax]
movzx edx, byte [rsi]
mov rax, r11
mov rcx, r13
test r14, r14
je 0x14001c14a
cmp r14, 0x20
jb 0x14001c14a
mov r8, r14
and r8, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rcx]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
xorps xmm0, xmm2
movdqa xmm2, xmm0
add rcx, 0x20
add rax, 0x20
cmp rax, r8
jne 0x14001c0f1
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
xorps xmm1, xmm0
movd eax, xmm1
xor dl, al
cmp rcx, rbx
je 0x14001c15a
nop
xor dl, byte [rcx]
inc rcx
cmp rcx, rbx
jne 0x14001c150
mov byte [rbp + 0x1598], dl
cmp r9, r10
je 0x14001c171
mov byte [r9], dl
inc r9
mov qword [rbp + 0x70], r9
jmp 0x14001c18f
lea r8, [rbp + 0x1598]
mov rdx, r9
lea rcx, [rbp + 0x68]
call fcn.140043950
mov r10, qword [rbp + 0x78]
mov r9, qword [rbp + 0x70]
xor r11d, r11d
inc rsi
cmp rsi, r15
jne 0x14001c0d0
mov qword [rbp + 0x78], r11
mov qword [rbp + 0x70], r11
mov rsi, qword [rbp + 0x68]
mov qword [rbp + 0x68], r11
mov qword [rbp + 0x1d0], r9
mov qword [rbp + 0x1d8], r10
bts edi, 0xd
lea rax, [rbp + 0x1c8]
bts edi, 0xb
jmp 0x14001c1f5
movdqu xmmword [rbp + 0x3c0], xmm0
lea rax, [rbp + 0x3b8]
mov edi, dword [rsp + 0x3c]
bts edi, 0xc
mov rsi, r13
mov r12, qword [rbp + 0x178]
mov r13, qword [rbp + 0x130]
xor r11d, r11d
mov r14, qword [rax + 0x10]
mov qword [rax + 0x10], r11
mov r15, qword [rax + 8]
mov qword [rax + 8], r11
mov qword [rax], r11
mov qword [rbp + 0x290], rsi
mov qword [rbp + 0x298], r15
mov qword [rbp + 0x2a0], r14
bts edi, 8
bt edi, 0xc
jae 0x14001c281
btr edi, 0xc
mov rcx, qword [rbp + 0x3b8]
test rcx, rcx
je 0x14001c281
mov rdx, qword [rbp + 0x3c8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c266
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d762
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3b8], xmm0
xor ebx, ebx
mov qword [rbp + 0x3c8], rbx
jmp 0x14001c283
xor ebx, ebx
bt edi, 0xb
jae 0x14001c2df
btr edi, 0xb
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x14001c2df
mov rdx, qword [rbp + 0x1d8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c2c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d762
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], rbx
bt edi, 0xa
jae 0x14001c33c
btr edi, 0xa
test r13, r13
je 0x14001c33c
mov rdx, qword [rbp + 0x140]
sub rdx, r13
mov rax, r13
cmp rdx, 0x1000
jb 0x14001c31d
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d768
mov rcx, r13
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x130], xmm0
xor r13d, r13d
mov qword [rbp + 0x140], r13
jmp 0x14001c33f
xor r13d, r13d
bt edi, 9
jae 0x14001c39f
btr edi, 9
mov rax, qword [rbp + 0x190]
cmp rax, 0xf
jbe 0x14001c388
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14001c380
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d76e
mov rcx, r12
call fcn.14005cfe8
movdqa xmm0, xmmword [0x1400ba0f0]
movdqu xmmword [rbp + 0x188], xmm0
mov byte [rbp + 0x178], 0
xor edx, edx
mov r8d, 0xd8
lea rcx, [rbp + 0x760]
call fcn.140083f10
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r13
mov edx, 0x40
lea rcx, [rbp + 0x80]
call fcn.140032640
xorps xmm0, xmm0
mov rbx, qword [rbp + 0x80]
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
lea r12, [rbx + 0x40]
mov qword [rbp + 0x88], r12
bts edi, 0xe
cmp rsi, r15
jne 0x14001c474
movdqu xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r13
mov dword [rsp + 0x3c], edi
test rbx, rbx
je 0x14001c464
mov rdx, qword [rbp + 0x90]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14001c44a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d774
mov rcx, rbx
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r13
mov r12, qword [rbp + 0xe8]
mov rbx, qword [rbp + 0xe0]
jmp 0x14001c4d9
lea rcx, [rbp + 0x760]
call fcn.14005ac90
sub r15, rsi
mov r8, r15
mov rdx, rsi
lea rcx, [rbp + 0x760]
call fcn.14005ad20
lea rdx, [rbp + 0x760]
mov rcx, rbx
call fcn.14005a480
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x80], r13
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], rax
mov dword [rsp + 0x3c], edi
test rsi, rsi
je 0x14001c523
sub r14, rsi
mov rax, rsi
cmp r14, 0x1000
jb 0x14001c506
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d77a
mov rdx, r14
mov rcx, rsi
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r13
cmp r12, rbx
je 0x14001c813
mov dword [rsp + 0x44], 0xaf10351f
mov byte [rsp + 0x48], 0xcc
lea rax, [rsp + 0x44]
mov qword [rbp + 0x460], rax
lea rax, [rsp + 0x49]
mov qword [rbp + 0x468], rax
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x400]
call fcn.14002d930
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3d0], xmm0
mov qword [rbp + 0x3e0], r13
mov r15, qword [rbp + 0x400]
cmp rbx, r12
jne 0x14001c5aa
movdqu xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], r13
bts edi, 0x1c
lea rcx, [rbp + 0x3d0]
call fcn.14002d8a0
mov rbx, r13
jmp 0x14001c695
mov rsi, qword [rbp + 0x408]
mov r14, rsi
sub r14, r15
cmp r15, rsi
cmova r14, r13
nop
movzx edx, byte [rbx]
mov rax, r13
mov rcx, r15
test r14, r14
je 0x14001c63a
cmp r14, 0x20
jb 0x14001c63a
mov r8, r14
and r8, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rcx]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
xorps xmm0, xmm2
movdqa xmm2, xmm0
add rcx, 0x20
add rax, 0x20
cmp rax, r8
jne 0x14001c5e1
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
xorps xmm1, xmm0
movd eax, xmm1
xor dl, al
cmp rcx, rsi
je 0x14001c64a
nop
xor dl, byte [rcx]
inc rcx
cmp rcx, rsi
jne 0x14001c640
mov byte [rsp + 0x40], dl
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x3d0]
call fcn.14002d880
inc rbx
cmp rbx, r12
jne 0x14001c5c0
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x370]
call fcn.14002d900
bts edi, 0x1c
lea rcx, [rbp + 0x3d0]
call fcn.14002d8a0
mov rbx, qword [rbp + 0x370]
xor edx, edx
mov r8d, 0xd8
lea rcx, [rbp + 0x840]
call fcn.140083f10
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], r13
mov byte [rsp + 0x41], 0
lea r8, [rsp + 0x41]
mov edx, 0x40
lea rcx, [rbp + 0x2a8]
call fcn.14002d760
bts edi, 0x1d
mov rsi, qword [rbp + 0x378]
cmp rbx, rsi
jne 0x14001c6fa
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], r13
jmp 0x14001c741
lea rcx, [rbp + 0x840]
call fcn.14005ac90
sub rsi, rbx
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp + 0x840]
call fcn.14005ad20
lea rdx, [rbp + 0x840]
mov rcx, qword [rbp + 0x2a8]
call fcn.14005a480
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x198]
call fcn.14002d900
mov dword [rsp + 0x3c], edi
lea rcx, [rbp + 0x2a8]
call fcn.14002d8a0
nop
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x148]
call fcn.140036b40
nop
mov rcx, qword [rbp + 0x198]
test rcx, rcx
je 0x14001c7b8
mov rdx, qword [rbp + 0x1a8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c7a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d780
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], r13
lea rcx, [rbp + 0x370]
call fcn.14002d8a0
nop
test r15, r15
je 0x14001c813
mov rdx, qword [rbp + 0x410]
sub rdx, r15
mov rax, r15
cmp rdx, 0x1000
jb 0x14001c7f9
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d786
mov rcx, r15
call fcn.14005cfe8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], r13
mov qword [rbp + 0x30], r13
movabs rax, 0x6e92b4cd7e5f3708
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x22d3a9efab0a7081
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x3292902e0cac5293
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x8580256f7a645aca
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x23d3426892cf94c3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x300], rax
movabs rax, 0x9025e6a8b5e671e6
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x308], rax
movabs rax, 0x51d26826f2e94cce
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x310], rax
movabs rcx, 0x540b1a2f998d58ca
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x318], rax
movabs rbx, 0x2dcef9882a0c6e5b
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e0], rax
movabs rdi, 0x4d90dd81ce7802f4
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1e8], rax
movabs r14, 0x46f7c34263de26fd
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1f0], rax
movabs rsi, 0xe9ef571b140b1996
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x6abe271ce1b6c79f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x200], rax
movabs rax, 0xf95187c5c7891788
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x208], rax
movabs rax, 0x51d26826f2e922a1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x210], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x218], rax
movdqa xmm0, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x2e0], xmm0
movdqa xmm1, xmmword [rbp + 0x2f0]
xorps xmm1, xmmword [rbp + 0x1f0]
movdqa xmmword [rbp + 0x2f0], xmm1
movdqa xmm0, xmmword [rbp + 0x300]
xorps xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x300], xmm0
movdqa xmm1, xmmword [rbp + 0x310]
xorps xmm1, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x310], xmm1
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x2e0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x14001ca69
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov r14, r13
mov qword [rbp - 0x28], r13
xorps xmm0, xmm0
psrldq xmm0, 8
movq r13, xmm0
movq rsi, xmm1
jmp 0x14001cf1e
mov dword [rbp + 0x20], 1
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x1120]
call fcn.140083f10
mov dword [rbp - 0x40], 0x400
movabs rax, 0x5fab8dfd5a610118
mov qword [rbp + 0x1588], rax
mov rax, qword [rbp + 0x1588]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x28e2bcf6aa0a63bc
mov qword [rbp + 0x1588], rax
mov rax, qword [rbp + 0x1588]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x46f7c34263de42b4
mov qword [rbp + 0x1588], rax
mov rax, qword [rbp + 0x1588]
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1588], rsi
mov rax, qword [rbp + 0x1588]
mov qword [rbp + 0x1f8], rax
mov qword [rbp + 0x1588], rbx
mov rax, qword [rbp + 0x1588]
mov qword [rbp - 0x20], rax
mov qword [rbp + 0x1588], rdi
mov rax, qword [rbp + 0x1588]
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x1588], r14
mov rax, qword [rbp + 0x1588]
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x1588], rsi
mov rax, qword [rbp + 0x1588]
mov qword [rbp - 8], rax
movdqa xmm0, xmmword [rbp + 0x1e0]
xorps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [rbp + 0x1f0]
xorps xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x1f0], xmm1
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1120]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x20]
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [rbp - 0x40]
dec eax
xorps xmm0, xmm0
cmp eax, 0x3ff
ja 0x14001cdc7
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x250], xmm1
lea rcx, [rbp + 0x1120]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x14001cbd7
mov r8, rax
lea rdx, [rbp + 0x1120]
lea rcx, [rbp + 0x240]
call fcn.140013710
nop
mov ebx, dword [rsp + 0x3c]
bts ebx, 0x10
mov dword [rsp + 0x3c], ebx
mov dword [rsp + 0x74], 0x20153121
mov word [rsp + 0x78], 0x1ad1
xorps xmm0, xmm0
movdqu xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov edx, 6
lea rcx, [rbp]
call fcn.140032640
mov r8d, 6
lea rdx, [rsp + 0x74]
mov r15, qword [rbp]
mov rcx, r15
call fcn.140083870
lea rdi, [r15 + 6]
mov qword [rbp + 8], rdi
bts ebx, 0x11
mov dword [rbp + 0x1588], ebx
mov dword [rsp + 0x3c], ebx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov r10, r13
mov qword [rbp - 0x70], r13
mov r12, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x250]
test rcx, rcx
jne 0x14001cc94
movdqu xmmword [rbp - 0x60], xmm0
bts ebx, 0x14
mov rsi, r13
lea rax, [rbp - 0x68]
bts ebx, 0x12
jmp 0x14001cde6
lea rsi, [rbp + 0x240]
cmp qword [rbp + 0x258], 0xf
cmova rsi, r12
lea r13, [rbp + 0x240]
cmova r13, r12
add r13, rcx
mov r9, qword [rbp - 0x78]
cmp rsi, r13
je 0x14001cdaa
mov r14, rdi
sub r14, r15
cmp r15, rdi
mov ebx, 0
cmova r14, rbx
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rsi]
mov rax, rbx
mov rcx, r15
test r14, r14
je 0x14001cd5a
cmp r14, 0x20
jb 0x14001cd5a
mov r8, r14
and r8, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rcx]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
xorps xmm0, xmm2
movdqa xmm2, xmm0
add rcx, 0x20
add rax, 0x20
cmp rax, r8
jne 0x14001cd01
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
xorps xmm1, xmm0
movd eax, xmm1
xor dl, al
cmp rcx, rdi
je 0x14001cd6a
nop
xor dl, byte [rcx]
inc rcx
cmp rcx, rdi
jne 0x14001cd60
mov byte [rsp + 0x38], dl
cmp r9, r10
je 0x14001cd7f
mov byte [r9], dl
inc r9
mov qword [rbp - 0x78], r9
jmp 0x14001cd98
lea r8, [rsp + 0x38]
mov rdx, r9
lea rcx, [rbp - 0x80]
call fcn.140043950
mov r10, qword [rbp - 0x70]
mov r9, qword [rbp - 0x78]
inc rsi
cmp rsi, r13
jne 0x14001cce0
mov ebx, dword [rbp + 0x1588]
mov rsi, qword [rbp - 0x80]
mov qword [rbp - 0x60], r9
mov qword [rbp - 0x58], r10
bts ebx, 0x14
xor r13d, r13d
lea rax, [rbp - 0x68]
bts ebx, 0x12
jmp 0x14001cde6
movdqu xmmword [rbp - 0x18], xmm0
lea rax, [rbp - 0x20]
mov ebx, dword [rsp + 0x3c]
bts ebx, 0x13
mov rsi, r13
mov r12, qword [rbp + 0x240]
mov r15, qword [rbp]
mov r14, qword [rax + 0x10]
mov qword [rax + 0x10], r13
mov r13, qword [rax + 8]
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax], rcx
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r14
bts ebx, 0xf
bt ebx, 0x13
jae 0x14001ce4f
btr ebx, 0x13
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x14001ce4f
mov rdx, qword [rbp - 0x10]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d78c
call fcn.14005cfe8
bt ebx, 0x12
jae 0x14001ce94
btr ebx, 0x12
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14001ce94
mov rdx, qword [rbp - 0x58]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d78c
call fcn.14005cfe8
nop
bt ebx, 0x11
jae 0x14001ced8
btr ebx, 0x11
test r15, r15
je 0x14001ced8
mov rdx, qword [rbp + 0x10]
sub rdx, r15
mov rax, r15
cmp rdx, 0x1000
jb 0x14001cecf
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d792
mov rcx, r15
call fcn.14005cfe8
nop
bt ebx, 0x10
jae 0x14001cf1e
mov rax, qword [rbp + 0x258]
cmp rax, 0xf
jbe 0x14001cf1e
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14001cf15
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d798
mov rcx, r12
call fcn.14005cfe8
nop
xor edx, edx
mov r8d, 0xd8
lea rcx, [rbp + 0x4c0]
call fcn.140083f10
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
xor ebx, ebx
mov qword [rbp - 0x58], rbx
lea edx, [rbx + 0x40]
lea rcx, [rbp - 0x68]
call fcn.140032640
xorps xmm0, xmm0
mov rdi, qword [rbp - 0x68]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
lea r12, [rdi + 0x40]
cmp rsi, r13
jne 0x14001cfd0
movdqu xmmword [rbp + 0x160], xmm0
xor r13d, r13d
mov eax, r13d
mov qword [rbp + 0x1588], rax
mov qword [rbp + 0x170], rax
test rdi, rdi
je 0x14001cfc0
mov rdx, qword [rbp - 0x58]
sub rdx, rdi
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001cfb8
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d79e
mov rcx, rdi
call fcn.14005cfe8
mov r12, qword [rbp + 0x168]
mov rdi, qword [rbp + 0x160]
jmp 0x14001d023
lea rcx, [rbp + 0x4c0]
call fcn.14005ac90
sub r13, rsi
mov r8, r13
mov rdx, rsi
lea rcx, [rbp + 0x4c0]
call fcn.14005ad20
lea rdx, [rbp + 0x4c0]
mov rcx, rdi
call fcn.14005a480
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x168], r12
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x1588], rax
mov qword [rbp + 0x170], rax
xor r13d, r13d
test rsi, rsi
je 0x14001d05b
sub r14, rsi
mov rax, rsi
cmp r14, 0x1000
jb 0x14001d050
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7a4
mov rdx, r14
mov rcx, rsi
call fcn.14005cfe8
cmp r12, rdi
je 0x14001d333
mov dword [rsp + 0x54], 0xaf10351f
mov byte [rsp + 0x58], 0xcc
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov edx, 5
lea rcx, [rbp - 0x38]
call fcn.140032640
mov r8d, 5
lea rdx, [rsp + 0x54]
mov r15, qword [rbp - 0x38]
mov rcx, r15
call fcn.140083870
lea rbx, [r15 + 5]
mov qword [rbp - 0x30], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov r10, r13
mov qword [rbp - 0x70], r13
cmp rdi, r12
jne 0x14001d0ca
xorps xmm6, xmm6
mov qword [rbp - 0x10], r13
jmp 0x14001d1b2
mov rsi, rdi
mov r14, rbx
sub r14, r15
cmp r15, rbx
cmova r14, r13
mov r9, qword [rbp - 0x78]
nop
movzx edx, byte [rsi]
mov rax, r13
mov rcx, r15
test r14, r14
je 0x14001d156
cmp r14, 0x20
jb 0x14001d156
mov r8, r14
and r8, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rcx]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
xorps xmm2, xmm0
add rcx, 0x20
add rax, 0x20
cmp rax, r8
jne 0x14001d101
xorps xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
xorps xmm1, xmm0
movd eax, xmm1
xor dl, al
cmp rcx, rbx
je 0x14001d16a
nop dword [rax + rax]
xor dl, byte [rcx]
inc rcx
cmp rcx, rbx
jne 0x14001d160
mov byte [rsp + 0x38], dl
cmp r9, r10
je 0x14001d17f
mov byte [r9], dl
inc r9
mov qword [rbp - 0x78], r9
jmp 0x14001d198
lea r8, [rsp + 0x38]
mov rdx, r9
lea rcx, [rbp - 0x80]
call fcn.140043950
mov r10, qword [rbp - 0x70]
mov r9, qword [rbp - 0x78]
inc rsi
cmp rsi, r12
jne 0x14001d0e0
movups xmm6, xmmword [rbp - 0x80]
movsd xmm0, qword [rbp - 0x70]
movsd qword [rbp - 0x10], xmm0
movdqu xmmword [rbp - 0x20], xmm6
xor edx, edx
mov r8d, 0xd8
lea rcx, [rbp + 0x4c0]
call fcn.140083f10
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov edx, 0x40
lea rcx, [rbp - 0x68]
call fcn.140032640
xorps xmm0, xmm0
mov rbx, qword [rbp - 0x68]
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
lea r14, [rbx + 0x40]
movq r12, xmm6
psrldq xmm6, 8
movq rsi, xmm6
cmp r12, rsi
jne 0x14001d261
movdqu xmmword [rbp], xmm0
mov rsi, r13
mov qword [rbp + 0x10], r13
test rbx, rbx
je 0x14001d258
mov rdx, qword [rbp - 0x58]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14001d250
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7aa
mov rcx, rbx
call fcn.14005cfe8
mov rbx, r13
mov r14, qword [rbp + 8]
jmp 0x14001d2a1
lea rcx, [rbp + 0x4c0]
call fcn.14005ac90
sub rsi, r12
mov r8, rsi
mov rdx, r12
lea rcx, [rbp + 0x4c0]
call fcn.14005ad20
lea rdx, [rbp + 0x4c0]
mov rcx, rbx
call fcn.14005a480
mov qword [rbp], rbx
mov qword [rbp + 8], r14
mov rsi, qword [rbp - 0x58]
mov qword [rbp + 0x10], rsi
sub r14, rbx
mov r8, r14
mov rdx, rbx
lea rcx, [rbp + 0x148]
call fcn.1400427f0
nop
test rbx, rbx
je 0x14001d2f0
sub rsi, rbx
cmp rsi, 0x1000
jb 0x14001d2e4
add rsi, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x14001d7b6
mov rbx, rcx
mov rdx, rsi
mov rcx, rbx
call fcn.14005cfe8
nop
lea rcx, [rbp - 0x20]
call fcn.14002d8a0
nop
test r15, r15
je 0x14001d333
mov rdx, qword [rbp - 0x28]
sub rdx, r15
mov rax, r15
cmp rdx, 0x1000
jb 0x14001d32b
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7b0
mov rcx, r15
call fcn.14005cfe8
mov dword [rsp + 0x5c], 0x3c122343
mov byte [rsp + 0x60], 0xf2
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov edx, 5
lea rcx, [rbp - 0x68]
call fcn.140032640
mov r8d, 5
lea rdx, [rsp + 0x5c]
mov r15, qword [rbp - 0x68]
mov rcx, r15
call fcn.140083870
lea rbx, [r15 + 5]
mov qword [rbp - 0x60], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov r10, r13
mov qword [rbp - 0x70], r13
mov r12, qword [rbp + 0x148]
mov r13, qword [rbp + 0x150]
cmp r12, r13
jne 0x14001d3b1
xorps xmm6, xmm6
movdqu xmmword [rbp - 0x20], xmm6
xor ebx, ebx
mov r14d, ebx
mov qword [rbp - 0x10], rbx
jmp 0x14001d4b4
mov rsi, r12
mov r14, rbx
sub r14, r15
cmp r15, rbx
mov r12d, 0
cmova r14, r12
mov r9, qword [rbp - 0x78]
nop dword [rax + rax]
movzx edx, byte [rsi]
mov rcx, r12
mov rax, r15
test r14, r14
je 0x14001d44a
cmp r14, 0x20
jb 0x14001d44a
mov r8, r14
and r8, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rax]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rax + 0x10]
xorps xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
add rcx, 0x20
cmp rcx, r8
jne 0x14001d3f1
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
xorps xmm1, xmm0
movd ecx, xmm1
xor dl, cl
cmp rax, rbx
je 0x14001d45a
nop
xor dl, byte [rax]
inc rax
cmp rax, rbx
jne 0x14001d450
mov byte [rsp + 0x38], dl
cmp r9, r10
je 0x14001d46f
mov byte [r9], dl
inc r9
mov qword [rbp - 0x78], r9
jmp 0x14001d488
lea r8, [rsp + 0x38]
mov rdx, r9
lea rcx, [rbp - 0x80]
call fcn.140043950
mov r10, qword [rbp - 0x70]
mov r9, qword [rbp - 0x78]
inc rsi
cmp rsi, r13
jne 0x14001d3d0
movups xmm6, xmmword [rbp - 0x80]
movdqu xmmword [rbp - 0x20], xmm6
movsd xmm0, qword [rbp - 0x70]
movsd qword [rbp - 0x10], xmm0
mov r14, qword [rbp - 0x10]
mov r12, qword [rbp + 0x148]
xor ebx, ebx
xor edx, edx
mov r8d, 0xd8
lea rcx, [rbp + 0x4c0]
call fcn.140083f10
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], rbx
mov edx, 0x40
lea rcx, [rbp - 0x38]
call fcn.140032640
xorps xmm0, xmm0
mov rbx, qword [rbp - 0x38]
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
movq rsi, xmm6
psrldq xmm6, 8
movq r13, xmm6
cmp rsi, r13
jne 0x14001d560
mov r13, qword [rbp + 0x1580]
xor eax, eax
mov qword [r13], rax
mov qword [r13 + 8], rax
mov qword [r13 + 0x10], rax
test rbx, rbx
je 0x14001d5ab
mov rdx, qword [rbp - 0x28]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14001d556
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7bc
mov rcx, rbx
call fcn.14005cfe8
jmp 0x14001d5ab
lea rcx, [rbp + 0x4c0]
call fcn.14005ac90
sub r13, rsi
mov r8, r13
mov rdx, rsi
lea rcx, [rbp + 0x4c0]
call fcn.14005ad20
lea rdx, [rbp + 0x4c0]
mov rcx, rbx
call fcn.14005a480
mov r13, qword [rbp + 0x1580]
mov qword [r13], rbx
lea rax, [rbx + 0x40]
mov qword [r13 + 8], rax
mov rax, qword [rbp - 0x28]
mov qword [r13 + 0x10], rax
test rsi, rsi
je 0x14001d5e4
sub r14, rsi
mov rax, rsi
cmp r14, 0x1000
jb 0x14001d5d8
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7c2
mov rdx, r14
mov rcx, rsi
call fcn.14005cfe8
nop
test r15, r15
je 0x14001d61e
mov rdx, qword [rbp - 0x58]
sub rdx, r15
mov rax, r15
cmp rdx, 0x1000
jb 0x14001d615
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7c8
mov rcx, r15
call fcn.14005cfe8
nop
test rdi, rdi
je 0x14001d65e
mov rcx, qword [rbp + 0x1588]
sub rcx, rdi
mov rax, rdi
cmp rcx, 0x1000
jb 0x14001d652
add rcx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7ce
mov rdx, rcx
mov rcx, rdi
call fcn.14005cfe8
nop
mov rcx, qword [rbp + 0xe0]
test rcx, rcx
je 0x14001d69f
mov rdx, qword [rbp + 0xf0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d699
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7d4
call fcn.14005cfe8
nop
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x14001d6e0
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d6da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d7da
call fcn.14005cfe8
nop
test r12, r12
je 0x14001d719
mov rdx, qword [rbp + 0x158]
sub rdx, r12
mov rax, r12
cmp rdx, 0x1000
jb 0x14001d711
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d738
mov rcx, r12
call fcn.14005cfe8
mov rax, r13
movaps xmm6, xmmword [rsp + 0x1620]
add rsp, 0x1638
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
nop
call fcn.14006e068
int3