Function at 0x1400131d0
Capabilities:
Encode data using xor
Set registry value

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x240], rbx
mov rax, qword [0x1400b6088]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov qword [rsp + 0x40], r8
mov r12, rdx
xor r14d, r14d
mov ebx, r14d
mov qword [rbp - 0x20], rbx
mov edi, 0xf
mov qword [rbp - 0x18], rdi
mov byte [rbp - 0x30], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rdi
mov byte [rbp - 0x70], r14b
mov word [rsp + 0x30], 0x5252
mov byte [rsp + 0x32], 0x52
movdqa xmm0, xmmword [0x1400a0800]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], r14b
lea r8d, [r14 + 4]
lea rdx, str.amo
lea rcx, [rbp - 0x10]
call fcn.140004cc0
nop
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x30]
call fcn.14000b110
lea rcx, [rbp - 0x30]
cmp rcx, rax
je 0x1400132a1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rdi
mov byte [rax], r14b
mov rdi, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x20]
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x1400132dc
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400132d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013eed
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a0800]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140013328
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013323
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013eed
call fcn.14003e9b0
lea rdx, [rbp - 0x30]
cmp rdi, 0x10
cmovae rdx, qword [rbp - 0x30]
mov r8, rbx
lea rcx, [rbp - 0x70]
call fcn.140004cc0
mov r11d, r14d
mov r13, qword [rbp - 0x30]
mov rbx, qword [rbp - 0x20]
test rbx, rbx
je 0x1400133b7
mov r10, r14
mov r9, r14
movabs rsi, 0xaaaaaaaaaaaaaaab
mov rdi, qword [rbp - 0x18]
nop word [rax + rax]
lea r8, [rbp - 0x30]
cmp rdi, 0x10
cmovae r8, r13
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rcx, qword [rbp - 0x70]
mov rax, rsi
mul r9
shr rdx, 1
lea rax, [rdx + rdx*2]
sub r9, rax
movzx eax, byte [rsp + r9 + 0x30]
xor al, byte [r10 + r8]
mov byte [r10 + rcx], al
inc r11d
lea r10, [r10 + 1]
movsxd r9, r11d
cmp r9, rbx
jb 0x140013370
xorps xmm0, xmm0
movdqu xmmword [rbp], xmm0
mov rbx, qword [rbp - 0x60]
lea rdi, [rbp - 0x70]
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
cmovae rdi, rcx
mov rsi, 0xffffffffffffffff
cmp rbx, 0x10
jae 0x1400133f9
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
lea r15d, [rsi + 0x10]
mov r14, qword [rbp - 0x10]
jmp 0x140013477
mov r15, rbx
or r15, 0xf
movabs rax, 0x7fffffffffffffff
cmp r15, rax
cmova r15, rax
lea rax, [r15 + 1]
cmp rax, 0x1000
jb 0x140013444
lea rcx, [rax + 0x27]
cmp rcx, rax
cmovbe rcx, rsi
call fcn.14003e974
test rax, rax
je 0x140013ee1
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140013454
test rax, rax
je 0x140013454
mov rcx, rax
call fcn.14003e974
mov r14, rax
mov qword [rbp - 0x10], r14
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, r14
call fcn.14005d310
mov qword [rbp], rbx
mov rdx, qword [rbp - 0x58]
mov rbx, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x70]
mov qword [rbp + 8], r15
lea rax, [rbp - 0x70]
cmp rdx, 0x10
cmovae rax, rcx
add rbx, rax
lea rdi, [rbp - 0x70]
cmp rdx, 0x10
cmovae rdi, rcx
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rbp + 0x20], xmm0
xor eax, eax
mov word [rbp + 0x10], ax
mov rdx, rbx
sub rdx, rdi
lea rcx, [rbp + 0x10]
call fcn.14000ad10
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp + 0x10]
call fcn.140011250
nop
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rbp - 0x40], xmm0
xor edi, edi
mov word [rbp - 0x50], di
lea rcx, [rsp + 0x50]
call fcn.140007a20
nop
lea rcx, [rbp + 0x70]
call fcn.140002ba0
nop
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x60]
add r9, r8
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.140004880
nop
lea rcx, [rbp + 0x70]
call fcn.140002aa0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14001355f
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013559
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ef3
call fcn.14003e9b0
nop
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
lea rcx, [rsp + 0x70]
call fcn.140007a20
nop
lea rcx, [rbp + 0x70]
call fcn.140002ba0
nop
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae r8, qword [rsp + 0x70]
mov r9, qword [rbp - 0x80]
add r9, r8
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x70]
call fcn.140004880
nop
lea rcx, [rbp + 0x70]
call fcn.140002aa0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x1400135f2
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400135ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ef9
call fcn.14003e9b0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
lea r8, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.140010f30
nop
mov r8, rax
lea rcx, [rsp + 0x38]
call fcn.140011b90
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14001365f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001365a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013eff
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], di
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x1400136b0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400136ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013eff
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], di
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x14001398e
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov r8d, 2
lea rdx, [0x14009fa74]
lea rcx, [rsp + 0x50]
call fcn.14000aad0
nop
mov rax, qword [r12 + 0x10]
lea ecx, [rax*2 + 2]
cmp qword [r12 + 0x18], 8
jb 0x14001370a
mov r12, qword [r12]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], r12
mov r9d, 1
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140013f05
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140013780
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001377b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013f29
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov r8d, 2
lea rdx, [0x14009fa7c]
lea rcx, [rsp + 0x50]
call fcn.14000aad0
nop
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx + 0x10]
lea r8d, [rax*2 + 2]
cmp qword [rcx + 0x18], 8
jb 0x1400137c6
mov rcx, qword [rcx]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov dword [rsp + 0x28], r8d
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140013f2f
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001383d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013838
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013f53
call fcn.14003e9b0
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rdx, qword [rbp + 0x10]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], di
nop
inc rsi
cmp word [rdx + rsi*2], 0
jne 0x140013860
mov r8, rsi
lea rcx, [rsp + 0x50]
call fcn.14000aad0
nop
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], di
mov r8d, 4
lea rdx, str.chnl
lea rcx, [rsp + 0x70]
call fcn.14000aad0
nop
mov eax, dword [rsp + 0x60]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140013f59
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140013932
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001392d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ee7
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], di
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140013d47
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ee7
jmp 0x140013d41
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
mov r8d, 1
lea rdx, [0x14009fa8c]
lea rcx, [rsp + 0x70]
call fcn.14000aad0
nop
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov r8d, 2
lea rdx, [0x14009fa74]
lea rcx, [rsp + 0x50]
call fcn.14000aad0
nop
mov eax, dword [rbp - 0x80]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140013f7d
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140013a71
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013a6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013fa1
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140013ac5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013ac0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013fa1
call fcn.14003e9b0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
mov r8d, 1
lea rdx, [0x14009fa8c]
lea rcx, [rsp + 0x70]
call fcn.14000aad0
nop
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov r8d, 2
lea rdx, [0x14009fa7c]
lea rcx, [rsp + 0x50]
call fcn.14000aad0
nop
mov eax, dword [rbp - 0x80]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140013fa7
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140013ba8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013ba3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013fcb
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140013bfc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013bf7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013fcb
call fcn.14003e9b0
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rdx, qword [rbp + 0x10]
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
nop dword [rax + rax]
inc rsi
cmp word [rdx + rsi*2], 0
jne 0x140013c20
mov r8, rsi
lea rcx, [rsp + 0x70]
call fcn.14000aad0
nop
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov r8d, 4
lea rdx, str.chnl
lea rcx, [rsp + 0x50]
call fcn.14000aad0
nop
mov eax, dword [rbp - 0x80]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rcx, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140013fd1
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140013cf2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013ced
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ff5
call fcn.14003e9b0
movdqa xmm0, xmmword [0x1400a07f0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], di
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140013d47
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ff5
call fcn.14003e9b0
nop
test rbx, rbx
je 0x140013d7f
mov eax, 0x80000000
add rax, rbx
cmp rax, 5
jbe 0x140013d7f
cmp rbx, 0xffffffff80000007
je 0x140013d7f
cmp rbx, 0xffffffff80000060
je 0x140013d7f
cmp rbx, 0xffffffff80000050
je 0x140013d7f
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 8
jb 0x140013dc0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013dba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ee1
call fcn.14003e9b0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140013e01
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013dfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ee1
call fcn.14003e9b0
nop
cmp r15, 0x10
jb 0x140013e39
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140013e30
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ee1
mov rcx, r14
call fcn.14003e9b0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140013e70
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ee1
call fcn.14003e9b0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
jb 0x140013eb7
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x140013eaf
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013ee1
mov rcx, r13
call fcn.14003e9b0
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.14003e950
mov rbx, qword [rsp + 0x240]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140060238
nop
call fcn.140060238
nop
call fcn.140060238
nop
call fcn.140060238
nop
call fcn.140060238
nop
call fcn.140060238
nop
mov r8d, eax
lea rdx, str.Cannot_write_string_value:_RegSetValueEx_failed.
lea rcx, [rbp - 0x50]
call fcn.140011ae0
lea rdx, [0x1400b36d8]
lea rcx, [rbp - 0x50]
call fcn.14005d238
nop
call fcn.140060238
nop
mov r8d, eax
lea rdx, str.Cannot_write_string_value:_RegSetValueEx_failed.
lea rcx, [rbp - 0x50]
call fcn.140011ae0
lea rdx, [0x1400b36d8]
lea rcx, [rbp - 0x50]
call fcn.14005d238
nop
call fcn.140060238
nop
mov r8d, eax
lea rdx, str.Cannot_write_string_value:_RegSetValueEx_failed.
lea rcx, [rbp - 0x50]
call fcn.140011ae0
lea rdx, [0x1400b36d8]
lea rcx, [rbp - 0x50]
call fcn.14005d238
nop
mov r8d, eax
lea rdx, str.Cannot_write_string_value:_RegSetValueEx_failed.
lea rcx, [rbp - 0x50]
call fcn.140011ae0
lea rdx, [0x1400b36d8]
lea rcx, [rbp - 0x50]
call fcn.14005d238
nop
call fcn.140060238
nop
mov r8d, eax
lea rdx, str.Cannot_write_string_value:_RegSetValueEx_failed.
lea rcx, [rbp - 0x50]
call fcn.140011ae0
lea rdx, [0x1400b36d8]
lea rcx, [rbp - 0x50]
call fcn.14005d238
nop
call fcn.140060238
nop
mov r8d, eax
lea rdx, str.Cannot_write_string_value:_RegSetValueEx_failed.
lea rcx, [rbp - 0x50]
call fcn.140011ae0
lea rdx, [0x1400b36d8]
lea rcx, [rbp - 0x50]
call fcn.14005d238
nop
call fcn.140060238
int3