Function at 0x14007c9a0
Capabilities:
Delete registry value
Get disk information

Disassembly:
xchg r10, rsp
mov rax, r10
xchg r10, rsp
mov qword [rax + 0x10], rbx
mov r11, r11
mov qword [rax + 0x18], rsi
jmp 0x14007cac4
xchg r11, r11
lea rcx, [rsp + 0x30]
call fcn.140019590
nop
lea rax, [rbp - 0x10]
mov dword [rsp - 0x38], 0x337b60bc
nop
jmp 0x14007ca55
xchg rbx, rdi
xor r14d, r14d
mov qword [rbp - 0x58], r14
xchg r14, rsi
mov qword [rbp - 0x48], rsi
xchg rsi, r14
mov qword [rbp - 0x40], 0x3f659ff1
jmp 0x14007ca6b
mov r14, rcx
xchg r14, rax
sub rax, r8
xchg rdx, rdx
cmp rbx, rax
ja 0x14007ceaf
lea rax, [rbx + r8]
jmp 0x14007cca0
cmp rcx, 0x10
cmovae rdi, qword [rsp + 0x30]
mov dword [rsp - 0x20], edi
lea rax, [rbp - 0x10]
jmp 0x14007cd28
mov r11, qword [rcx]
xchg r11, rdx
lea rcx, [rbp - 0x58]
call fcn.140019590
xchg rsp, rsp
jmp 0x14007cb18
xchg rsi, rdx
mov rsi, qword [rbp - 0x40]
xchg rsi, rdx
jmp 0x14007cd5e
inc rbx
cmp byte [rax + rbx], 0
jne 0x14007ca55
mov dword [rsp - 0x20], ecx
jmp 0x14007cbeb
add qword [rbp - 0x40], 0x20a63f3a
sub qword [rbp - 0x40], 0x40fefb94
add qword [rbp - 0x40], 0x373cda73
sub qword [rbp - 0x40], 0xbbd398c
sub qword [rbp - 0x40], 0x4a8c846f
mov r8d, 0x27624578
jmp 0x14007cafe
test eax, eax
setne bl
xchg rdi, rdi
jmp 0x14007ca46
xor rax, rsp
xchg r13, rax
mov qword [rbp + 0x100], r13
xchg r13, rax
xchg rbx, rdi
mov rbx, rcx
jmp 0x14007c9da
mov qword [rax + 0x20], rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
jmp 0x14007ccf4
add rsp, 0x1914bf46
sub rsp, 0x1914c196
xchg rbx, rax
movaps xmmword [rbx - 0x28], xmm6
xchg rbx, rax
xchg r10, rax
jmp 0x14007cc1e
xor r8d, 0x10760ba4
add r8d, 0x10debb7d
xor r8d, 0x3f8eb169
jmp 0x14007cd44
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rcx, qword [rbp - 0x58]
mov r8d, 0x17d5c6db
sub r8d, 0x2c1b404
jmp 0x14007cc4a
sub qword [rsp + 0x48], 0x578838e9
mov byte [rsp + 0x30], r14b
xchg r15, rax
mov r15, qword [rdi + 0x10]
xchg r15, rax
jmp 0x14007cbad
cmp rcx, rax
mov dword [rsp - 0x1c], 0x471ba3b8
ja 0x14007ce2c
lea rax, [rbp - 0x10]
cmp rdi, rax
ja 0x14007ce0a
mov dword [rsp - 0x1c], ecx
jmp 0x14007cbdd
sub r8d, 0x14fa261d
add r8d, 0x7aa8a70
add r8d, 0x247bc8ff
sub r8d, 0x502e24a5
lea rdx, [rbp - 0x10]
mov dword [rsp - 0x20], 0x6d243add
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
jmp 0x14007ca9e
cmp rax, 2
jb 0x14007e38a
xchg rbx, rbx
nop
sub rax, 0xffffffffc55af5a1
jmp 0x14007cd79
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14007cdb9
jmp 0x14007cc2f
xchg r13, rsi
mov r13, r14
xchg rsi, r13
jmp 0x14007ce35
mov r8, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
xchg r14, rax
jmp 0x14007c9fb
add r8d, 0xbd0405c
xor r8d, 0x49ee3368
cmp qword [rcx + 0x10], r8
cmovb r8, qword [rcx + 0x10]
mov r11, r11
xchg rsi, rdx
jmp 0x14007ccd8
movaps xmmword [r10 - 0x38], xmm7
xchg r10, rax
movaps xmmword [rax - 0x48], xmm8
jmp 0x14007cc64
add rdx, 0x27
mov rbx, rbx
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jmp 0x14007cdab
xor r8d, 0x68ae1963
sub r8d, 0x64b3bd9d
add r8d, 0x1ffbaa40
jmp 0x14007cb7a
xchg rdx, rax
movaps xmmword [rdx - 0x58], xmm9
xchg rdx, rax
mov rax, qword [0x1402557f0]
mov dword [rsp - 0x3c], edx
jmp 0x14007caab
add rbx, 0x7fffffff
add rbx, 0x779fdff6
xchg r10, rbx
mov r8, r10
xchg rbx, r10
cmp rax, rbx
cmovb r8, rax
jmp 0x14007cd09
mov rdx, rdx
xchg r10, rax
mov qword [rsp + 0x40], r10
xchg r10, rax
lea rdi, [rsp + 0x30]
jmp 0x14007ca18
xchg r14, r15
mov qword [rsp + 0x40], r15
xchg r14, r15
mov qword [rsp + 0x48], 0x10ec3b13
add qword [rsp + 0x48], 0x654fa1be
jmp 0x14007cdd8
mov rsi, rcx
xchg rdx, rsi
cmp qword [rcx + 0x18], 0x10
xchg rdi, rdi
jb 0x14007ca35
xchg r11, rdx
jmp 0x14007ca2f
nop
sub rsp, 8
mov qword [rsp], r15
lea rbp, [rax - 0x168]
jmp 0x14007cae1
mov dword [rsp - 0x2c], 0x18084694
cmp qword [rdi + 0x18], 0x10
jb 0x14007cd1f
mov rdi, qword [rdi]
lea rdx, [rdi + 2]
jmp 0x14007c9b9
add rax, rbx
cmp rax, rdi
mov r12, r12
jbe 0x14007ce2c
lea rax, [rdi + r8]
lea rcx, [rbp - 0x10]
jmp 0x14007cb53
sub r8d, 0x2656321
add r8d, 0x737daf6
sub r8d, 0x3f323ff7
jmp 0x14007cbfc
cmp rdx, 0x10
jb 0x14007cdbe
xchg rbp, rbp
inc rdx
mov rcx, qword [rbp - 0x58]
xchg rcx, rax
jmp 0x14007cbc6
add rax, 0xffffffffc55af59f
nop
movabs rbx, 0xffffffff5da2f662
sub rbx, 0x39f8a5f3
sub rbx, 0x1b7651f6
add rbx, 0x6d7f0aea
xor rbx, 0x7dd32969
jmp 0x14007cc7d
mov dword [rsp - 0x10], 0xdc9b656
ja 0x14007e359
call fcn.1400e8bd0
test bl, bl
je 0x14007dd25
mov dword [rsp - 0x10], 0x119f1486
mov qword [rsp + 0x30], r14
jmp 0x14007ccb6
sub qword [rsp + 0x48], 0x44c66179
add qword [rsp + 0x48], 0x37ca659e
sub qword [rsp + 0x48], 0x2610e9c
sub qword [rsp + 0x48], 0x41af3c06
add qword [rsp + 0x48], 0x3258a2a4
jmp 0x14007cb38
lea rax, [rbp - 0x10]
xchg r10, rdi
mov rsi, r10
xchg rdi, r10
jmp 0x14007ce1c
sub rsi, rax
mov dword [rsp - 0x24], 0xf024cb2
jmp 0x14007ce35
xchg rbx, r9
mov rsi, r9
xchg r9, rbx
lea rcx, [rdi + rbx]
jmp 0x14007ce3e
inc r8
mov dword [rsp - 0x38], esp
xchg rdi, rdx
mov rdi, rdx
xchg rdi, rdx
call fcn.1400ead90
mov dword [rsp - 0x20], esi
jmp 0x14007ce75
lea rdx, [rbp - 0x10]
add rdx, rax
mov r9, r9
call fcn.1400ead90
lea rax, [rsp + 0x30]
jmp 0x14007e2a6
xchg r13, rsi
mov r8, r13
xchg r13, rsi
lea rdx, [rbp - 0x10]
mov rcx, rdi
call fcn.1400ead90
mov dword [rsp - 0x34], edx
jmp 0x14007ce93
lea rcx, [rdi + rsi]
xchg r8, rbx
mov rbx, r8
xchg r8, rbx
sub r8, rsi
mov rdx, rdx
lea rax, [rsi + rbx]
jmp 0x14007ce5c
mov qword [rsp + 0x28], rbx
lea rax, [rbp - 0x10]
mov dword [rsp - 0x30], 0x202c54e
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xchg rbx, rsp
jmp 0x14007dd8b
xchg r13, rsp
movups xmm1, xmmword [0x14011b5e0]
mov dword [rsp - 0x38], 0x7b1121c0
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x14011b5f0]
xchg rsp, r13
movups xmmword [r13 + 0x70], xmm0
jmp 0x14007d185
sar edx, 1
mov eax, edx
mov r14, r14
shr eax, 0x15
shr eax, 4
shr eax, 1
jmp 0x14007dd34
mov rdi, rdi
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov r14, r14
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14007d0a9
mov edx, r10d
lea rcx, [rsp + 0x50]
call fcn.1400ad210
mov dword [rsp - 0x20], 0x5fa881a6
mov rcx, qword [rbp - 0x60]
jmp 0x14007e2f9
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x14007d010
mov dword [rsp - 0x1c], ecx
xchg r15, r8
mov r15, r10
jmp 0x14007e1d8
xor eax, 0x4516a791
imul r8d
mov dword [rsp - 0x24], 0xa21722b
sar edx, 1
mov eax, edx
shr eax, 0x16
shr eax, 8
jmp 0x14007d33d
shr eax, 0xe
shr eax, 4
shr eax, 2
shr eax, 1
shr eax, 8
jmp 0x14007d595
mov dword [rsp - 0xc], ebp
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
jmp 0x14007d176
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
mov rcx, rcx
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
jmp 0x14007d7f6
sub ax, dx
sub ax, 0x5b52
add ax, 0x5b84
xor word [r8], ax
jmp 0x14007d2f2
xchg rdi, rdi
xchg rsp, rcx
movups xmmword [rcx + 0x50], xmm0
jmp 0x14007e17f
xchg r8, r11
movaps xmm6, xmmword [r8 - 0x10]
xchg r8, r11
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
jmp 0x14007cfa2
mov rsp, rsp
mov eax, 0x61860a43
sub eax, 0x1c1c1c74
xor eax, 0x7d255f8e
add eax, 0x212b05e
sub eax, 0x329f5d38
xor eax, 0x4b998263
jmp 0x14007cf70
add eax, 0x754de9e
sub eax, 0x25d1a26a
imul r8d
jmp 0x14007d66c
psrld xmm0, xmm8
mov r10, r10
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
xchg rdi, rdi
pshuflw xmm0, xmm3, 0xd8
jmp 0x14007e01d
lea r9, [r9 + 2]
cmp r8d, 0x27
jl 0x14007de4c
mov dword [rsp - 0x18], ebp
jmp 0x14007cf35
psrld xmm0, xmm8
mov dword [rsp - 0x34], 0x510c55eb
paddd xmm0, xmm1
jmp 0x14007ddf5
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
xchg rsi, rsi
jmp 0x14007dc39
pand xmm2, xmmword [0x1401183d0]
mov rbx, rbx
packuswb xmm2, xmm2
jmp 0x14007d3dc
pand xmm2, xmmword [0x1401183d0]
mov r8, r8
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
xchg r9, r9
movd xmm0, dword [rcx]
jmp 0x14007d807
mov rbx, rbx
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14007d0bd
cmp rdx, 0x1000
jb 0x14007db8d
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
jmp 0x14007d24b
movups xmm0, xmmword [0x14011b5d0]
xchg r13, rsp
movups xmmword [r13 + 0x50], xmm0
jmp 0x14007ced3
sub qword [rsp + 0x48], 0x203099a8
sub qword [rsp + 0x48], 0x30f839de
mov byte [rsp + 0x30], 0x62
sub byte [rsp + 0x30], 0x54
add byte [rsp + 0x30], 0x25
xor byte [rsp + 0x30], 0x2e
add byte [rsp + 0x30], 0x3c
jmp 0x14007d5e7
xchg r10, r10
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401183d0]
mov r15, r15
jmp 0x14007cfb3
nop
add rsp, 8
mov r15, qword [rsp - 8]
jmp 0x14007d620
xchg rsp, r13
movsd xmm1, qword [0x14011b600]
movsd qword [rbp - 0x80], xmm1
mov eax, dword [0x14011b608]
jmp 0x14007e16a
movdqa xmm0, xmm2
mov dword [rsp - 0x1c], ebp
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14007e103
xchg rcx, rcx
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov dword [rsp - 0x10], ebx
jmp 0x14007da7c
mov r8d, r14d
cmp ebx, 2
jl 0x14007e1a9
jmp 0x14007e32f
lea eax, [r8 + 4]
movd xmm3, eax
xchg r14, r14
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
jmp 0x14007d1ba
mov rcx, qword [rsp + 0x30]
xchg rsi, rsi
xchg rcx, rax
jmp 0x14007e0dc
movdqa xmm0, xmm1
mov dword [rsp - 0x10], esi
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
mov rdx, rdx
jmp 0x14007ded5
movups xmm0, xmmword [0x14011b630]
xchg r13, rsp
movups xmmword [r13 + 0x70], xmm0
jmp 0x14007e03f
mov rdi, rdi
sub rax, 8
cmp rax, 0x1f
ja 0x14007e37b
jmp 0x14007db85
movups xmm1, xmmword [0x14011b550]
xchg r8, rsp
movups xmmword [r8 + 0x60], xmm1
xchg rsp, r8
jmp 0x14007d3fb
mov dword [rsp - 0x28], 0x7424af9
movd xmm2, r8d
pshufd xmm2, xmm2, 0
jmp 0x14007d484
mov dword [rsp - 0x3c], 0x209b53b3
lea rdx, [rsp + 0x50]
nop word [rax + rax]
movd xmm2, ecx
jmp 0x14007dfb3
pmuldq xmm1, xmm4
mov dword [rsp - 0x24], edx
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
jmp 0x14007df10
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14007db92
inc rdx
mov dword [rsp - 0x40], 0x6bcccbf0
jmp 0x14007dba1
cmp r8d, 0x20
jl 0x14007d280
cmp r8d, 0x27
jmp 0x14007e1a0
inc ecx
xchg r15, r15
lea r8, [r8 + 2]
cmp ecx, 0x27
jmp 0x14007e113
jl 0x14007dc82
mov r8, r8
cmp r8d, 0x39
jge 0x14007cf65
movsxd rax, r8d
lea r9, [rsp + 0x50]
jmp 0x14007d4e5
mov r10d, eax
test eax, 0xfffffffd
je 0x14007cf4a
movups xmm0, xmmword [0x14011b580]
jmp 0x14007cfe4
shr eax, 1
add edx, eax
movsx eax, dl
mov r10, r10
imul ecx, eax, 0x37
jmp 0x14007d8d6
sub rdx, 0x3d6f5511
add rdx, 0x3d6f5538
mov rcx, qword [rcx - 8]
mov r12, r12
sub rax, rcx
sub rax, 8
jmp 0x14007d70a
xchg r8, r8
lea rdx, [rbp - 0x60]
xchg r9, rdx
jmp 0x14007d471
xchg rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov dword [rsp - 0xc], esi
jmp 0x14007d323
xchg rdi, rdi
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14007daea
add r9d, 0x324177ad
sub r9d, 0x48da9746
add r9d, 0x4e559ab2
sub r9d, 0x470ee419
add r9d, 0x1bd83168
sub r9d, 0x33ea8889
xor r8d, r8d
jmp 0x14007d886
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
mov dword [rsp - 0x10], ebx
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
jmp 0x14007d1e9
movups xmm0, xmmword [0x14011b560]
xchg rbx, rbx
xchg r8, rsp
movups xmmword [r8 + 0x70], xmm0
jmp 0x14007dc1d
imul ecx, eax, 0x37
movzx eax, r8w
sub ax, cx
jmp 0x14007dc03
mov ecx, r14d
cmp ebx, 2
mov dword [rsp - 0xc], 0x21c709a5
jl 0x14007de92
jmp 0x14007e202
xchg rcx, rbp
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14007d538
mov dword [rsp - 0x1c], esi
jmp 0x14007dea3
xor esi, 0x5952e514
add esi, 0x3e470cd8
sub esi, 0x19822626
jmp 0x14007dd9b
mov qword [rsp + 0x20], r9
xchg rdx, r9
mov r9d, 0x2773c060
jmp 0x14007d3aa
paddd xmm2, xmm5
mov dword [rsp - 0x24], esi
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
jmp 0x14007d4aa
sub r9d, 0x5a5d8d38
xor r8d, r8d
xchg rdx, rax
jmp 0x14007d642
pmuldq xmm1, xmm4
xchg r13, r13
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14007d391
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
xchg r13, r13
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
jmp 0x14007d2ab
mov r8, r8
add r9, rax
nop dword [rax]
nop word [rax + rax]
jmp 0x14007d00d
movups xmmword [r9 + 0x70], xmm0
xchg rsp, r9
movups xmm1, xmmword [0x14011b5b0]
xchg rbp, r15
jmp 0x14007df5f
ret
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
xchg rdi, rdi
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14007cf12
call fcn.1400e8bd0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 0x4e77888c
add qword [rsp + 0x48], 0x5756f7b
sub qword [rsp + 0x48], 0x4608d672
add qword [rsp + 0x48], 0x4344b200
jmp 0x14007d129
movups xmm0, xmmword [0x14011b610]
xchg rdi, rsp
movups xmmword [rdi + 0x50], xmm0
xchg rsp, rdi
movups xmm1, xmmword [0x14011b620]
mov dword [rsp - 0x14], 0xada1ac9
movups xmmword [rsp + 0x60], xmm1
jmp 0x14007d237
shr eax, 1
shr eax, 1
add edx, eax
movsx eax, dl
mov dword [rsp - 0x14], edi
imul ecx, eax, 0x37
movzx eax, r8b
jmp 0x14007df2a
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov dword [rsp - 0x44], ecx
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
jmp 0x14007e315
xchg rbp, r9
xchg rcx, rax
movups xmm1, xmmword [rcx + 0x10]
xchg rcx, rax
xchg rbp, r8
jmp 0x14007df46
xor byte [rsp + 0x30], 0x2d
xor byte [rsp + 0x30], 0x74
lea rcx, [rbp - 0x58]
call fcn.1400af770
xchg r10, r10
nop
lea r10, [rbp - 0x58]
jmp 0x14007daa9
xchg rcx, r10
mov r10, qword [rbp - 0x60]
xchg rcx, r10
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
xchg r13, r13
jmp 0x14007d2c1
nop
add rsp, 8
mov r14, qword [rsp - 8]
pop rbp
xchg r14, r14
jmp 0x14007d515
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
jmp 0x14007de08
mov rax, rdx
xchg rdx, rax
nop
movabs rcx, 0xffffffff3b3f9ac3
xor rcx, 0x1aac5955
sub rcx, 0x20e9e133
add rcx, 0x23e72149
jmp 0x14007d7a7
sar edx, 1
mov eax, edx
xchg rsp, rsp
jmp 0x14007d89a
imul r8d
mov dword [rsp - 0x44], 0x2aff2d63
sar edx, 1
mov eax, edx
jmp 0x14007cf8f
sub qword [rax + 0x18], 0x4b90e2ab
xor qword [rax + 0x18], 0x54db0d9f
add qword [rax + 0x18], 0x1a7895aa
sub qword [rax + 0x18], 0x67101a0e
mov byte [rax], 0x2b
xor byte [rax], 0x68
jmp 0x14007df80
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov dword [rsp - 0x40], 0xa597c95
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x14007da58
lea rdx, [rdx + 0x10]
xchg rbp, rbp
cmp ecx, 0x20
jl 0x14007d2a2
cmp ecx, 0x27
jmp 0x14007de88
movdqa xmm4, xmmword [0x140119620]
movd xmm6, esi
movdqa xmm7, xmmword [str.7777]
jmp 0x14007e0bc
cmp rax, r15
ja 0x14007e36c
xchg r15, r15
call fcn.1400e8bd0
jmp 0x14007dfd4
mov dword [rsp - 0x24], edx
cmp rax, r15
ja 0x14007e363
call fcn.1400e8bd0
mov r11, r11
test edi, edi
jmp 0x14007dd45
xchg rbp, rcx
mov eax, dword [0x14011b5c8]
mov dword [rsp - 0x40], 0x2dc7c4e5
mov dword [rbp - 0x68], eax
movzx eax, word [0x14011b5cc]
mov word [rbp - 0x64], ax
xchg rsp, rsp
jmp 0x14007d1d8
sub byte [rbp - 0x58], 0x55
sub byte [rbp - 0x58], 0x29
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x14007dd25
mov dword [rsp - 0x1c], 0xdb299a4
jmp 0x14007da8d
movq xmm2, xmm9
paddw xmm3, xmm2
mov rbx, rbx
movq xmm0, qword [rdx]
pxor xmm3, xmm0
movq qword [rdx], xmm3
mov dword [rsp - 0x38], ebx
jmp 0x14007da40
add rcx, 0xfa8ccd2
add rcx, 0x7fffffff
xor rcx, 0x3439d07f
jmp 0x14007ddc6
jl 0x14007e28a
xchg rdi, rdi
cmp r8d, 0x3d
jge 0x14007d981
movsxd rax, r8d
jmp 0x14007dd63
movq qword [rdx + 8], xmm3
xchg rsi, rsi
nop
add ecx, 0x54724409
sub ecx, 0x54724401
jmp 0x14007d6d9
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
mov r12, r12
jmp 0x14007d4c8
pxor xmm2, xmm0
movd dword [rcx], xmm2
sub r8d, 0xfffffff8
jmp 0x14007ddb6
xor r9d, 0x560aaf63
xor r9d, 0xbf35907
add r9d, 0x40c3b0c
add r9d, 0x416d4845
xor r9d, 0x2415bcc9
add r9d, 0x277d8de4
sub r9d, 0x15ec5fc1
jmp 0x14007d499
nop word [rax + rax]
mov dword [rsp - 0x24], 0x63ca365
mov eax, 0x26ba0c25
sub eax, 0x2035258c
jmp 0x14007de65
add rdx, 0x7716e733
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
jmp 0x14007d720
mov dword [rsp - 0x24], 0x43aeaa11
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
jmp 0x14007db08
shr eax, 0x19
shr eax, 4
shr eax, 1
shr eax, 1
add edx, eax
movzx eax, dx
mov dword [rsp - 0x14], 0x30a48bcb
jmp 0x14007d412
psrld xmm0, xmm8
mov dword [rsp - 0x10], esi
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14007dad8
movzx eax, r8b
sub al, cl
mov dword [rsp - 0x14], esi
sub al, 0xce
xor byte [r9], al
inc r8d
mov dword [rsp - 0x3c], 0x451edd50
jmp 0x14007cf53
add rcx, 0x6b612a80
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp - 0x24], 0x60bd2cd7
mov edi, eax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14007dfd4
jmp 0x14007e153
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xchg rsp, rsp
jmp 0x14007dbb7
sub qword [rbp - 0x40], 0x2aaa793c
mov byte [rbp - 0x58], 0x3b
xor byte [rbp - 0x58], 0x67
xor byte [rbp - 0x58], 9
xor byte [rbp - 0x58], 0x46
xor byte [rbp - 0x58], 0xd
add byte [rbp - 0x58], 0x60
jmp 0x14007d763
mov r8, rdx
xchg rdx, r10
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
jmp 0x14007da10
lea r9, [r9 + 1]
cmp r8d, 0x3d
mov dword [rsp - 0x3c], 0x5764dfb9
jl 0x14007d860
xchg rdx, r10
jmp 0x14007d956
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
xchg r10, r10
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x14007d8b6
mov qword [rbp - 0x40], 0xf8f9db6
add qword [rbp - 0x40], 0x605fa6f4
xor qword [rbp - 0x40], 0x4a949b17
add qword [rbp - 0x40], 0x55ebedd0
sub qword [rbp - 0x40], 0x50bd5442
jmp 0x14007d931
xchg rsi, rbp
movsd qword [rsi - 0x70], xmm0
xchg rbp, rsi
mov eax, dword [0x14011b658]
mov dword [rbp - 0x68], eax
jmp 0x14007e1c5
movd dword [rcx], xmm2
nop
add r8d, 0x9a11782
sub r8d, 0x9a1177a
lea rcx, [rcx + 8]
cmp r8d, 0x38
jmp 0x14007d7c1
mov dword [rsp - 0x34], esp
call fcn.1400b4460
cmp qword [rax + 0x18], 0x10
jb 0x14007d373
mov rax, qword [rax]
jmp 0x14007d370
paddb xmm2, xmm0
movd xmm0, dword [rcx]
mov r8, r8
pxor xmm2, xmm0
jmp 0x14007d9f0
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
mov r15, r15
paddd xmm2, xmm5
jmp 0x14007d6b7
mov dword [rsp - 0x3c], 0x7618f3b7
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14007dcfe
imul edx, eax, 0x37
mov r10, r10
movzx eax, cx
jmp 0x14007cfd0
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x14007d045
inc rdx
xchg r9, rcx
mov r9, qword [rbp - 0x38]
xchg r9, rcx
mov rax, rcx
cmp rdx, 0x1000
jmp 0x14007db6d
cmp qword [rbp - 0x40], 0x10
xchg r14, r14
cmovae r10, qword [rbp - 0x58]
jmp 0x14007e24f
xor qword [rax + 0x18], 0x1eb423b4
sub qword [rax + 0x18], 0x6e56674d
xor qword [rax + 0x18], 0x72acb365
jmp 0x14007d68c
mov r11, r11
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
jmp 0x14007d786
mov r12, r12
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x2c], 0x7071098d
jmp 0x14007db34
nop
movabs rcx, 0xffffffff3be0d76d
add rcx, 0x2c34f1dd
sub rcx, 0x5b5f8af4
xor rcx, 0x625aca4f
sub rcx, 0x5a4e1e97
jmp 0x14007d8f5
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
mov dword [rsp - 0xc], ecx
paddw xmm3, xmm2
jmp 0x14007dbf2
cmp rdx, 0x10
jb 0x14007d53d
inc rdx
mov rsp, rsp
xchg rcx, rbp
mov rbp, qword [rsp + 0x30]
jmp 0x14007d43a
jb 0x14007dd20
mov r15, r15
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
jmp 0x14007d633
mov dword [rsp - 0x10], 0x2dd561ce
call fcn.1400e8bd0
xchg r10, r14
mov qword [rbp - 0x48], r10
xchg r10, r14
jmp 0x14007d9aa
xchg rcx, r12
mov r12, qword [rbp - 0x58]
xchg rcx, r12
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
jmp 0x14007d0f2
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
nop
add r8d, 0x11fef03a
sub r8d, 0x11fef032
lea rcx, [rcx + 0x10]
mov dword [rsp - 0x18], esi
jmp 0x14007d2df
mov r9d, eax
test eax, 0xfffffffd
xchg r9, r9
je 0x14007d607
jmp 0x14007d56b
movq xmm0, qword [rcx]
pxor xmm3, xmm0
mov dword [rsp - 0x30], esi
jmp 0x14007df91
xchg rsi, rsi
sub ax, 0x1fc6
add ax, 0x1ff8
xor word [r9], ax
xchg rbp, rbp
inc r8d
jmp 0x14007d067
xchg r8, rsp
movsd xmm1, qword [0x14011b570]
xchg rbp, r8
movsd qword [r8 - 0x80], xmm1
xchg r8, rbp
jmp 0x14007e064
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
jmp 0x14007d0e0
lea rcx, [rbp - 0x60]
mov dword [rsp - 0x3c], 0x124ad11e
mov qword [rsp + 0x20], rcx
mov r9d, 0x7aac9628
jmp 0x14007d818
mov r10, qword [r11 + 0x28]
xchg rbx, r10
xchg r15, rsi
mov r15, qword [r11 + 0x30]
xchg r15, rsi
mov rdi, qword [r11 + 0x38]
jmp 0x14007cff3
movd xmm2, r8d
mov dword [rsp - 0x3c], 0x6db0ea2
pshufd xmm2, xmm2, 0
jmp 0x14007e2e0
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
mov dword [rsp - 0x44], 0x40133ed5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x14007e08f
movdqa xmm5, xmmword [0x140118390]
mov dword [rsp - 0x14], esi
movdqa xmm4, xmmword [0x140119620]
movd xmm6, esi
movdqa xmm7, xmmword [str.7777]
movd xmm8, r15d
jmp 0x14007def6
lea rcx, [rsp + 0x54]
xchg r12, r12
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
jmp 0x14007dc82
psrad xmm1, xmm6
mov dword [rsp - 0x14], 0x766a78fc
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x1c], esp
jmp 0x14007d5ae
call fcn.1400e8bd0
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
jmp 0x14007debd
shr eax, 3
shr eax, 1
shr eax, 1
add edx, eax
movzx eax, dx
jmp 0x14007da6e
jne 0x14007e2ff
lea rdx, [rbp - 0x10]
mov dword [rsp - 0x1c], 0x6e5c5b17
xchg rcx, r12
mov r12, qword [rbp - 0x60]
jmp 0x14007d37f
lea r9, [rsp + 0x50]
xchg rbp, rbp
add r9, rax
nop dword [rax]
jmp 0x14007d84e
xchg r13, r13
mov r8d, r14d
cmp ebx, 2
jl 0x14007d7d4
jmp 0x14007dcb7
mov rdx, rsp
xchg rbx, rsp
lea rcx, [rsp + 0x30]
jmp 0x14007e2a1
sub esi, 0x504701d2
add esi, 0x1a85e7bb
sub esi, 0x28b22b49
lea r15d, [rsi + 0x1e]
jmp 0x14007e2b9
xchg rbp, rbp
lea rcx, [rcx + 8]
cmp r8d, 0x38
jmp 0x14007d303
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xchg rdx, rdx
mov edi, eax
mov rdx, qword [rsp + 0x48]
jmp 0x14007dddb
cmp rdx, 0x10
mov dword [rsp - 0x18], 0x333828ff
jb 0x14007d735
inc rdx
jmp 0x14007d20a
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14007d159
add rax, 8
neg rax
cmp rax, 0x1f
mov dword [rsp - 0x3c], 0x2b9d3ec8
ja 0x14007e353
jmp 0x14007dd20
mov dword [rsp - 0x34], 0x59c59ed6
movd xmm8, r15d
movdqa xmm9, xmmword [0x14011a260]
lea rcx, [rsp + 0x50]
nop word [rax + rax]
jmp 0x14007d278
mov eax, 0x23434bd2
xor eax, 0x790a0d52
xor eax, 0x65b5e8e3
sub eax, 0x1830ca02
jmp 0x14007d033
add eax, 0x3b128d5b
sub eax, 0x20bac18c
xor eax, 0x6c05bbc
sub eax, 0x2555a486
add eax, 0x14f69c93
xor eax, 0x1cf2c174
jmp 0x14007d678
mov dword [rsp - 0x14], ecx
jge 0x14007e119
movsxd rax, ecx
lea r8, [rsp + 0x50]
mov dword [rsp - 0x34], ebp
jmp 0x14007dff3
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
jmp 0x14007e1ef
mov r10, r10
call fcn.1400e8cf0
lea r11, [rsp + 0x250]
xchg r10, rbx
jmp 0x14007dc68
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov dword [rsp - 0x38], edx
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
jmp 0x14007d920
mov dword [rsp - 0x18], ecx
movdqa xmm0, xmmword [0x14011a270]
xchg rsp, r13
movdqa xmmword [r13 + 0x30], xmm0
jmp 0x14007e27e
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x38], 0x525be42
psrad xmm1, xmm6
jmp 0x14007d094
sub al, cl
xchg rdx, rdx
sub al, 0xeb
add al, 0x1d
xor byte [r9], al
mov dword [rsp - 0x20], 0x7a1cab8a
inc r8d
jmp 0x14007d96b
movups xmmword [r8 - 0x28], xmm1
xchg r8, rbp
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0x617c648b
jmp 0x14007dabb
movups xmmword [r15 - 0x80], xmm1
xchg rbp, r15
movsd xmm0, qword [0x14011b5c0]
mov dword [rsp - 0x38], ecx
xchg rcx, rbp
movsd qword [rcx - 0x70], xmm0
jmp 0x14007d73c
sub byte [rax], 0x1f
add byte [rax], 0x26
add byte [rax], 2
xor byte [rax], 7
jmp 0x14007e0a9
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
mov dword [rsp - 0x1c], ebp
paddd xmm2, xmm5
movdqa xmm1, xmm2
jmp 0x14007dc99
pshufd xmm2, xmm2, 0
xchg r12, r12
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
xchg rbx, rbx
jmp 0x14007d989
test edi, edi
jne 0x14007d2c1
lea rdx, [rbp - 0x10]
mov dword [rsp - 0x10], edx
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
jmp 0x14007dbdc
lea r8, [r8 + rax*2]
nop dword [rax + rax]
mov eax, 0x56628d3e
xor eax, 0x5547e18b
xor eax, 0x12fcd630
sub eax, 0x6ad1be1
sub eax, 0xa5cf40b
jmp 0x14007e07e
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401183d0]
xchg rdi, rdi
packuswb xmm2, xmm2
movd xmm0, edx
jmp 0x14007da2c
xchg r13, rsp
movups xmm1, xmmword [0x14011b640]
mov dword [rsp - 0x14], ebp
xchg rbx, rbp
movups xmmword [rbx - 0x80], xmm1
xchg rbp, rbx
movsd xmm0, qword [0x14011b650]
jmp 0x14007d9d7
movzx eax, byte [0x14011b578]
mov r11, r11
mov byte [rbp - 0x78], al
mov r8d, r14d
mov esi, 0x60fcbbbb
jmp 0x14007d45a
xor eax, 0x2a0323c0
xor eax, 0x2383a9cc
imul ecx
jmp 0x14007cefe
pmuldq xmm0, xmm4
mov dword [rsp - 0x44], 0x62769a1f
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14007d219
sub byte [rax], 0x4b
xchg rdx, r9
mov r9, qword [rsp + 0x48]
xchg r9, rdx
jmp 0x14007db50
mov rdx, rdx
movd xmm8, r15d
movdqa xmm0, xmmword [0x14011a270]
xchg rcx, rsp
movdqa xmmword [rcx + 0x30], xmm0
xchg rcx, rsp
jmp 0x14007dce1
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
mov dword [rsp - 0x14], 0x416e6644
jb 0x14007d72d
nop
sub rdx, 0x7716e70c
jmp 0x14007d86f
xchg r10, r10
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x14007d07e
jl 0x14007dfff
mov edx, r9d
mov dword [rsp - 0x44], 0x4a976c99
lea rcx, [rsp + 0x50]
call fcn.1400ad210
jmp 0x14007d607
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
xchg r14, r14
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov rbx, rbx
jmp 0x14007d516
xchg r13, r13
inc rdx
mov rcx, qword [rsp + 0x30]
xchg r11, rax
mov r11, rcx
xchg r11, rax
jmp 0x14007e234
mov r9, r9
mov dword [rbp - 0x78], eax
movzx eax, byte [0x14011b60c]
mov byte [rbp - 0x74], al
jmp 0x14007dd77
xchg rsp, rcx
movups xmm1, xmmword [0x14011b590]
movups xmmword [rsp + 0x60], xmm1
xchg rcx, rcx
movups xmm0, xmmword [0x14011b5a0]
xchg r9, rsp
jmp 0x14007d4fe
jge 0x14007cf35
xchg r9, r9
movsxd rax, r8d
lea r9, [rsp + 0x50]
lea r9, [r9 + rax*2]
mov dword [rsp - 0x3c], 0x4dafe2d6
nop dword [rax]
jmp 0x14007de4c
movzx eax, word [0x14011b65c]
xchg rsp, rsp
mov word [rbp - 0x64], ax
jmp 0x14007d421
xchg r15, r8
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400b4460
jmp 0x14007e268
cmp rax, 0x1f
ja 0x14007e393
mov dword [rsp - 0x18], edi
jmp 0x14007d538
movdqa xmm5, xmmword [0x140118390]
movdqa xmm4, xmmword [0x140119620]
movd xmm6, esi
xchg r10, r10
movdqa xmm7, xmmword [str.7777]
movd xmm8, r15d
movdqa xmm9, xmmword [0x14011a260]
jmp 0x14007d28f
cmp rdx, 0x1000
mov dword [rsp - 0x44], 0x27d930ee
jb 0x14007d716
nop
jmp 0x14007d34f
movups xmm0, xmmword [str.ajgaszdzUUHOQS]
movups xmmword [rsp + 0x50], xmm0
mov dword [rsp - 0x38], 0x317f5b4
jmp 0x14007d261
mov r11, r11
cmp qword [rax + 0x18], 0x10
jb 0x14007dc4c
mov rax, qword [rax]
jmp 0x14007dc4c
xchg rsp, r13
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
mov dword [rsp - 0x34], edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
jmp 0x14007e133
call fcn.140076a60
movups xmm0, xmmword [rax]
xchg rcx, rcx
xchg rbp, r9
movups xmmword [r9 - 0x38], xmm0
jmp 0x14007d5d4
mov dword [rsp - 0x18], 0x4c00486d
mov ebx, dword [0x1402557d0]
cmp ebx, 2
jl 0x14007d316
movdqa xmm5, xmmword [0x140118390]
mov rdi, rdi
jmp 0x14007d6f1
paddd xmm2, xmm5
movdqa xmm1, xmm2
xchg rsp, rsp
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
jmp 0x14007d1a0
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r10, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
mov rdx, rdx
cmovae r10, qword [rbp - 0x58]
jmp 0x14007d115
paddw xmm3, xmm2
mov dword [rsp - 0x28], 0x797dd088
movq xmm0, qword [rdx + 8]
pxor xmm3, xmm0
jmp 0x14007d7dc
xchg rcx, rcx
movdqa xmm5, xmmword [0x140118390]
movdqa xmm4, xmmword [0x140119620]
movd xmm6, esi
movdqa xmm7, xmmword [str.7777]
jmp 0x14007de26
call fcn.1400ef88c
int3
call fcn.1400ef88c
jmp 0x14007e381
call fcn.1400ef88c
xchg rdx, rdx
int3
call fcn.1400ef88c
nop
mov dword [rsp - 0x14], edx
jmp 0x14007e37b
call fcn.1400ef88c
int3
mov dword [rsp - 0xc], 0x1379ccd7
int3
call fcn.140039b00
nop
mov rsp, rsp
call fcn.1400ef88c
nop
jmp 0x14007e363