Function at 0x140001d00
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
lea rbp, [rsp - 0x18f0]
mov eax, 0x19f0
call fcn.14001eb20
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x18a8], rax
xor esi, esi
mov dword [rbp + 0x18a4], 4
mov qword [rbp + 0x1890], rsi
lea rax, [rsp + 0x30]
mov dword [rbp + 0x1898], esi
lea rcx, [0x140029530]
mov dword [rbp + 0x189c], esi
mov edx, 4
mov dword [rbp + 0x18a0], 4
nop dword [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140001d70
movups xmm0, xmmword [rcx]
mov ebx, 0x12
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
mov ecx, ebx
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm1
lea rax, [rbp + 0x798]
nop
mov qword [rax - 8], rsi
mov qword [rax], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140001df0
movdqa xmm0, xmmword [rsp + 0x30]
lea rcx, [rbp + 0x1010]
xorps xmm0, xmmword [rbp + 0x50]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
mov r8d, 0x880
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
call fcn.14001f2a0
lea r8, [rbp + 0x1890]
mov rcx, 0xffffffff80000002
lea rdx, [rbp + 0x1010]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x140001fa4
xor al, al
jmp 0x140002f23
mov qword [rsp + 0x1a00], rdi
lea rcx, [rbp + 0x1010]
movabs rax, 0xa4a34be46c05b2b
movaps xmmword [rsp + 0x19e0], xmm6
mov qword [rsp + 0x30], rax
xorps xmm2, xmm2
movabs rax, 0x137c645335d5791a
movaps xmmword [rsp + 0x19d0], xmm7
mov qword [rsp + 0x38], rax
xorps xmm3, xmm3
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x18c3aa4a6a4a46bf
mov qword [rsp + 0x40], rax
xorps xmm4, xmm4
movabs rax, 0x1fe0577870f9ca64
movaps xmmword [rsp + 0x19c0], xmm8
mov qword [rsp + 0x48], rax
mov edi, 6
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x1494148e6c13349
mov qword [rsp + 0x50], rax
mov edx, edi
movabs rax, 0x10870aa63c1469fe
movaps xmmword [rsp + 0x19b0], xmm9
mov qword [rsp + 0x58], rax
movabs rax, 0xa3e34df46a55b6d
mov qword [rbp - 0x70], rax
movabs rax, 0x132f643635a7796f
mov qword [rbp - 0x68], rax
movabs rax, 0x18aaaa3e6a3e46da
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0x1faf570b709eca0a
mov qword [rbp - 0x58], rax
movabs rax, 0x13b413ae6a4333f
xorps xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x10870ac33c706997
movdqa xmmword [rbp + 0x1010], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp - 0x48], rax
lea rax, [rsp + 0x30]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x1030], xmm0
movdqa xmmword [rbp + 0x1020], xmm1
movdqa xmmword [rbp + 0x1040], xmm2
movdqa xmmword [rbp + 0x1050], xmm3
movdqa xmmword [rbp + 0x1060], xmm4
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x1400020f0
mov rcx, qword [rbp + 0x1890]
lea rax, [rbp + 0x18a0]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x18a4]
lea rax, [rbp + 0x1898]
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x140002535
movabs rax, 0x165a241235644f23
lea rcx, [rbp + 0x1010]
mov qword [rsp + 0x30], rax
xorps xmm2, xmm2
movabs rax, 0x1c4c6bef3db17006
movdqa xmmword [rbp + 0x1040], xmm2
mov qword [rsp + 0x38], rax
xorps xmm3, xmm3
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x6b7965a565a3563
mov qword [rsp + 0x40], rax
xorps xmm4, xmm4
movabs rax, 0x14c594872a9cc9c
movdqa xmmword [rbp + 0x1050], xmm3
mov qword [rsp + 0x48], rax
mov rdx, rdi
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0xdb12db0d5651f01
mov qword [rsp + 0x50], rax
movabs rax, 0x19af138e43f86552
mov qword [rsp + 0x58], rax
movabs rax, 0x162e247335014f65
mov qword [rbp - 0x70], rax
movabs rax, 0x1c1f6b8a3dc37073
mov qword [rbp - 0x68], rax
movabs rax, 0x6de962e562e3506
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0x103593b72ceccf2
mov qword [rbp - 0x58], rax
movabs rax, 0xdc32dc2d5001f77
xorps xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x19af13eb439c653b
movdqa xmmword [rbp + 0x1010], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x790]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x1030], xmm0
movdqa xmmword [rbp + 0x1020], xmm1
movdqa xmmword [rbp + 0x1060], xmm4
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x1400022a0
lea rax, [rsp + 0x30]
mov edx, 4
lea rcx, [0x1400292f0]
nop dword [rax]
nop dword [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140002310
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
mov rcx, rbx
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm1
lea rax, [rbp + 0x1018]
nop dword [rax + rax]
mov qword [rax - 8], rsi
mov qword [rax], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140002390
movdqa xmm0, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0x50]
lea rdx, [rbp + 0x1010]
movdqa xmm1, xmmword [rsp + 0x40]
mov r8d, 0x860
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x1010], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x1020], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x1030], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x1040], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x1050], xmm0
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x1060], xmm1
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x1070], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x1080], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x1090], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x10a0], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x10b0], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x10c0], xmm1
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x10d0], xmm0
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x10e0], xmm1
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x10f0], xmm0
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x1100], xmm1
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x1110], xmm0
movdqa xmmword [rbp + 0x1120], xmm1
call fcn.14001f2a0
lea r8, [rbp + 0x790]
mov dword [rsp + 0x20], 3
lea rdx, [rsp + 0x30]
call fcn.140001470
cmp dword [rbp + 0x1898], 3
je 0x1400026ea
movabs rax, 0x8df18cc69a78701
mov dword [rbp + 0x1898], 3
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x1010]
movabs rax, 0xb5b78808ad3290f
xorps xmm2, xmm2
mov qword [rsp + 0x38], rax
xorps xmm3, xmm3
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x1a83c8df48df29a6
mov qword [rsp + 0x40], rax
xorps xmm4, xmm4
movabs rax, 0xf50a8d38256bf01
movdqa xmmword [rbp + 0x1040], xmm2
mov qword [rsp + 0x48], rax
movabs rax, 0x71a07149a8514b
movdqa xmm1, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x1f99b50cac61faf
mov qword [rsp + 0x58], rax
movabs rax, 0x8ab18ad69c28747
mov qword [rbp - 0x70], rax
movabs rax, 0xb0878e58aa1297a
mov qword [rbp - 0x68], rax
movabs rax, 0x1aeac8ab48ab29c3
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0xf1fa8a08231bf6f
mov qword [rbp - 0x58], rax
movabs rax, 0x3a00349cd513d
xorps xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x1f99b35caa21fc6
movdqa xmmword [rbp + 0x1010], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x790]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x1030], xmm0
movdqa xmmword [rbp + 0x1020], xmm1
movdqa xmmword [rbp + 0x1050], xmm3
movdqa xmmword [rbp + 0x1060], xmm4
nop
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdi, 1
jne 0x140002660
mov rcx, qword [rbp + 0x1890]
lea rax, [rbp + 0x1898]
mov dword [rsp + 0x28], 4
lea rdx, [rbp + 0x790]
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rbp + 0x1898], esi
movabs rax, 0x1d340f0a9f7ebff6
movabs rcx, 0xc06ca557399fb65
mov qword [rsp + 0x30], rax
xorps xmm2, xmm2
movabs rax, 0x3ba8cb5dfded8ac
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm3, xmm3
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0xff3fd343d341f7d
mov qword [rsp + 0x40], rax
xorps xmm4, xmm4
movabs rax, 0x1e72f94692bbaa59
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x14fa14f9bf7f856c
mov qword [rsp + 0x50], rax
xorps xmm5, xmm5
movabs rax, 0x121d2bc95979ce30
movdqa xmmword [rbp + 0x7d0], xmm2
mov qword [rsp + 0x58], rax
mov edi, 7
movabs rax, 0x1b82e1916ef09
movdqa xmmword [rbp + 0x7e0], xmm3
mov qword [rsp + 0x60], rax
mov edx, edi
movabs rax, 0x1d400f6b9f1bbfb0
movdqa xmmword [rbp + 0x7f0], xmm4
mov qword [rbp - 0x50], rax
movabs rax, 0x3e98cd0dfacd8d9
mov qword [rbp - 0x48], rax
movabs rax, 0xf9afd403d401f18
xorps xmm0, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
movabs rax, 0x1e3df93592dcaa37
mov qword [rbp - 0x38], rax
movabs rax, 0x1488148bbf1a851a
xorps xmm1, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0x12502bac591dce59
mov qword [rbp - 0x28], rax
movabs rax, 0x1b8451965ef68
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x1010]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x800], xmm5
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140002851
mov rcx, qword [rbp + 0x1890]
lea rax, [rbp + 0x18a0]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x18a4]
lea rax, [rbp + 0x189c]
xor r8d, r8d
lea rdx, [rbp + 0x1010]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x140002ce5
movabs rax, 0xe52bde8d592be27
movabs rcx, 0xc060ea32a02203e
mov qword [rsp + 0x30], rax
xorps xmm2, xmm2
movabs rax, 0x285d0949bf3ee2c
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm3, xmm3
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0xd3e4e530e52d591
mov qword [rsp + 0x40], rax
xorps xmm4, xmm4
movabs rax, 0xcc9b541cea05f00
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x27de27d7593da25
mov qword [rsp + 0x50], rax
xorps xmm5, xmm5
movabs rax, 0x11b76b53aed518c8
movdqa xmmword [rbp + 0x7d0], xmm2
mov qword [rsp + 0x58], rax
mov rdx, rdi
movabs rax, 0x2791368681de6
movdqa xmmword [rbp + 0x7e0], xmm3
mov qword [rsp + 0x60], rax
movabs rax, 0xe26bd89d5f7be61
mov qword [rbp - 0x50], rax
movabs rax, 0x2d6d0f19b81ee59
mov qword [rbp - 0x48], rax
movabs rax, 0xd574e270e26d5f4
xorps xmm0, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
movabs rax, 0xc86b532cec75f6e
mov qword [rbp - 0x38], rax
movabs rax, 0x20fe20f75f6da53
xorps xmm1, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0x11fa6b36aeb118a1
mov qword [rbp - 0x28], rax
movabs rax, 0x27978681b1d87
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x1010]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7f0], xmm4
movdqa xmmword [rbp + 0x800], xmm5
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140002a50
lea rax, [rsp + 0x30]
mov edx, 4
lea rcx, [0x1400290b0]
nop dword [rax]
nop dword [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140002ac0
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm1
lea rax, [rbp + 0x798]
nop dword [rax + rax]
mov qword [rax - 8], rsi
mov qword [rax], rsi
lea rax, [rax + 0x10]
sub rbx, 1
jne 0x140002b40
movdqa xmm0, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0x50]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
mov r8d, 0x860
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
call fcn.14001f2a0
lea r8, [rbp + 0x1010]
mov dword [rsp + 0x20], 3
lea rdx, [rsp + 0x30]
call fcn.140001470
cmp dword [rbp + 0x189c], 3
je 0x140002eea
movabs rax, 0x1fb5b1b088d97556
mov dword [rbp + 0x189c], 3
mov qword [rsp + 0x30], rax
movabs rcx, 0xc061c6678c6d55d
movabs rax, 0x10b6dc3368101492
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm2, xmm2
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x3ffb5ffb5c8d8
mov qword [rsp + 0x40], rax
xorps xmm3, xmm3
movabs rax, 0x19d383aedd0343c0
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x14215420e8da8b48
mov qword [rsp + 0x50], rax
xorps xmm4, xmm4
movabs rax, 0x1f06f8e13af74b3a
movdqa xmmword [rbp + 0x7d0], xmm2
mov qword [rsp + 0x58], rax
xorps xmm5, xmm5
movabs rax, 0x26b9899eb51ae
movdqa xmmword [rbp + 0x7e0], xmm3
mov qword [rsp + 0x60], rax
movabs rax, 0x1fc1b1d188bc7510
mov qword [rbp - 0x50], rax
movabs rax, 0x10e5dc56686214e7
mov qword [rbp - 0x48], rax
movabs rax, 0x6affc1ffc1c8bd
xorps xmm0, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
movabs rax, 0x199c83dddd6443ae
mov qword [rbp - 0x38], rax
movabs rax, 0x14535452e8bf8b3e
xorps xmm1, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0x1f4bf8843a934b53
mov qword [rbp - 0x28], rax
movabs rax, 0x26bf3999851cf
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x1010]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7f0], xmm4
movdqa xmmword [rbp + 0x800], xmm5
nop dword [rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdi, 1
jne 0x140002e60
mov rcx, qword [rbp + 0x1890]
lea rax, [rbp + 0x189c]
mov dword [rsp + 0x28], 4
lea rdx, [rbp + 0x1010]
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rbp + 0x189c], esi
mov rcx, qword [rbp + 0x1890]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movaps xmm9, xmmword [rsp + 0x19b0]
mov al, 1
movaps xmm8, xmmword [rsp + 0x19c0]
movaps xmm7, xmmword [rsp + 0x19d0]
movaps xmm6, xmmword [rsp + 0x19e0]
mov rdi, qword [rsp + 0x1a00]
mov rcx, qword [rbp + 0x18a8]
xor rcx, rsp
call fcn.140007b20
lea r11, [rsp + 0x19f0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret