Function at 0x140094e50
Capabilities:
Query or enumerate registry value

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
push rbp
xchg rdx, rdx
push rsi
jmp 0x140095a90
movdqa xmm0, xmm1
mov dword [rsp - 0x20], ebx
psrld xmm0, xmm5
jmp 0x1400956e8
mov dword [rsp - 0x34], esp
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x1401183f0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov dword [rsp - 0x30], ecx
jmp 0x1400955a4
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x34], 0x27d443e6
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
jmp 0x140095973
lea rax, [rbp - 0x20]
xor r9d, r9d
mov r9, r9
xor r8d, r8d
jmp 0x140095217
mov dword [rsp - 0x3c], 0x22626d90
xor ebx, ebx
movups xmm1, xmmword [0x14011c3c0]
xchg r9, rdx
mov r15, r9
xchg r9, rdx
mov eax, dword [0x14011c3f8]
jmp 0x1400954c3
movups xmm0, xmmword [0x14011c418]
mov dword [rsp - 0x30], ebp
xchg rsp, rbp
movups xmmword [rbp + 0x30], xmm0
xchg rsp, rbp
cmp esi, 2
jl 0x14009515c
jmp 0x1400958de
mov eax, edx
shr eax, 0x1a
shr eax, 2
shr eax, 2
shr eax, 1
jmp 0x140094fde
xchg r8, rcx
mov r8, qword [rsp + 0x50]
xchg rcx, r8
lea rax, [rsp + 0x58]
mov dword [rsp - 0x1c], 0xcafaef2
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x30]
jmp 0x140094eb7
mov qword [rsp - 8], r13
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
jmp 0x1400950d9
movdqa xmm1, xmm3
paddw xmm2, xmmword [0x14011a260]
pxor xmm2, xmm0
punpckldq xmm1, xmm3
jmp 0x140095832
mov dword [rsp - 0x10], 0x6f53962
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movd xmm6, r12d
jmp 0x140095724
pshufd xmm2, xmm1, 0xd8
xchg rcx, rcx
movdqa xmm1, xmm3
pand xmm2, xmmword [0x1401183d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
mov r14, r14
jmp 0x140095429
test eax, eax
jne 0x140095866
lea rax, [rsp + 0x60]
mov dword [rsp - 0x20], 0x2dbd8992
inc rdi
cmp word [rax + rdi*2], 0
jmp 0x140095a50
add edx, eax
movzx eax, dx
imul ecx, eax, 0x33
jmp 0x140095168
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x28], ebp
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [0x14011c400]
pshufd xmm2, xmm1, 0xd8
mov dword [rsp - 0x14], edx
jmp 0x140094f63
lea r12d, [rbx + 5]
mov dword [rsp - 0x10], edi
movups xmm0, xmmword [0x14011c3d0]
lea r13d, [rbx + 0x1f]
xchg r8, rbp
jmp 0x14009555a
mov dword [rsp - 0xc], 0xe554727
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3b
sub al, 9
xor byte [r9 - 1], al
jmp 0x140095746
sub eax, 0x74227fcc
add eax, 0x6282f960
xor eax, 0x7a93e70
jmp 0x14009588d
movups xmm1, xmmword [0x14011c3e0]
mov dword [rbp - 0x58], eax
movzx eax, word [0x14011c3fc]
mov rcx, rcx
xchg rbp, r8
jmp 0x1400953f6
movdqa xmm4, xmmword [0x1401183f0]
movdqa xmm1, xmm2
movdqa xmm8, xmmword [0x14011a260]
mov dword [rsp - 0x38], esi
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
jmp 0x140094f7c
xchg rsp, rbp
movsd qword [rbp + 0x40], xmm1
xchg rbp, rsp
jmp 0x140094eee
paddw xmm2, xmmword [0x14011a260]
pxor xmm2, xmm0
movq qword [rsp + 0x38], xmm2
mov dword [rsp - 0x2c], ebp
mov eax, r8d
lea r9, [rsp + 0x30]
lea r9, [r9 + rax*2]
jmp 0x1400953d5
mov qword [rsp - 8], r15
sub rsp, 8
lea rbp, [rax - 0x458]
mov dword [rsp - 0xc], 0x5401c546
jmp 0x1400950f6
add rsp, 0x9f80ff7
sub rsp, 0x9f81517
xchg r14, rax
movaps xmmword [r14 - 0x48], xmm6
xchg r14, rax
movaps xmmword [rax - 0x58], xmm7
mov dword [rsp - 0x28], edi
jmp 0x1400954f1
mov qword [rsp + 0x20], rsi
xchg rsi, rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rsp - 0x24], 0x6195696f
jmp 0x140094fbc
xchg r13, r13
add edx, ebx
sar edx, 2
sar edx, 2
sar edx, 1
jmp 0x140094f11
paddw xmm3, xmm2
pxor xmm3, xmm0
mov dword [rsp - 0x10], 0x279a2a2a
movq qword [rsp + 0x38], xmm3
mov eax, ebx
lea r8, [rsp + 0x30]
jmp 0x1400956cb
mov dword [rsp - 0x20], ebx
movzx eax, bx
inc ebx
sub ax, cx
sub ax, 0xffce
xchg r15, r15
jmp 0x14009525b
mov dword [rsp - 0x34], 0x1cdae0e5
movq xmm2, xmm8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rsp + 0x38]
mov r10, r10
pshufd xmm3, xmm1, 0xd8
jmp 0x140095146
mov dword [rsp - 0x10], esp
pmulld xmm0, xmmword [0x1401183b0]
psubd xmm2, xmm0
jmp 0x140094feb
sub r9d, 0x3b89eba7
add r9d, 0x148a33be
xor r9d, 0x464e9353
mov qword [rsp + 0x20], rax
mov r11, r11
xor r8d, r8d
lea rdx, [rsp + 0x60]
jmp 0x140095a24
add rcx, 0x3448e74e
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rsp, rsp
jmp 0x140095546
sub dword [rsp + 0x58], 0x3a6a4b81
add dword [rsp + 0x58], 0x926a58d
sub dword [rsp + 0x58], 0x28fd6eaf
jmp 0x1400950a2
xchg r11, rax
mov qword [rsp + 0x20], r11
xchg r11, rax
jmp 0x1400957f6
mov qword [rsp + 0x570], rdi
mov r9d, 0x50445af3
sub r9d, 0x1b5e3a0f
add r9d, 0x41aeef6b
add r9d, 0x89a02ac
xor r9d, 0xb351786
xor r9d, 0x195b4e28
jmp 0x1400951bb
xor word [r8 - 2], ax
cmp ebx, 0xf
jl 0x1400956de
jmp 0x140095aa9
add ebx, 0x701a6509
xor ebx, 0x2a264dcd
add ebx, 0x12c25d05
xor ebx, 0x70d7b286
jmp 0x140095078
xor word [r9 - 2], ax
cmp r8d, 0xc
jl 0x1400953e2
mov dword [rsp - 0x2c], 0x57e3b03
jmp 0x140094f23
sub rdi, 0x1f7afb35
sub rdi, 0x18c9d177
add rdi, 0x7fffffff
xor rdi, 0x626e4bae
test eax, eax
mov r13, r13
jne 0x140095a66
jmp 0x140095379
xor eax, 0x735b9417
add eax, 0x63f95553
xor eax, 0x14a04088
jmp 0x140095048
movd dword [rcx - 8], xmm2
cmp r8d, 0x48
xchg rdi, rdi
jl 0x140095b20
cmp r8d, 0x4e
jge 0x140095754
movsxd rax, r8d
jmp 0x140095822
mov dword [rsp - 0x14], 0x2d06e27
movq xmm0, qword [0x14011c418]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
mov dword [rsp - 0x40], edi
movdqa xmm2, xmmword [0x1401183a0]
jmp 0x1400953b3
movdqa xmm0, xmmword [0x14011a270]
mov dword [rsp - 0xc], 0x1e2698af
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140118390]
movdqa xmm4, xmmword [0x1401183f0]
movdqa xmm7, xmmword [0x1401183b0]
jmp 0x14009539b
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
jmp 0x14009567b
lea rax, [rbp - 0x20]
xchg r15, rdi
mov r8, r15
xchg rdi, r15
inc r8
mov dword [rsp - 0x18], 0x399bc361
cmp word [rax + r8*2], bx
jmp 0x140095484
xchg r11, r11
xchg r14, rsp
movdqa xmmword [r14 + 0x30], xmm0
xchg rsp, r14
mov edx, dword [rsp + 0x30]
jmp 0x140095b03
pxor xmm3, xmm0
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov dword [rsp - 0xc], ebx
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
jmp 0x1400958bb
nop word [rax + rax]
mov rdi, rdi
mov eax, 0xec2aa90
add eax, 0xc6df9c6
xor eax, 0x369872ed
jmp 0x140095943
movsd qword [r8 - 0x60], xmm0
xchg r8, rbp
movups xmmword [rbp - 0x70], xmm1
jmp 0x140095aee
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
jmp 0x14009502a
xor eax, 0x722fc680
sub eax, 0x60d4e04
xor eax, 0xb58a81cb
jmp 0x1400959f1
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
mov dword [rsp - 0x38], 0x98dc12c
pxor xmm2, xmm0
jmp 0x1400956b1
pand xmm2, xmmword [0x1401183d0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
mov rsi, rsi
movd xmm0, dword [rcx - 8]
pxor xmm2, xmm0
jmp 0x1400952e7
sar edx, 1
sar edx, 1
sar edx, 3
mov eax, edx
shr eax, 0xf
shr eax, 7
shr eax, 5
jmp 0x1400958a2
jne 0x140095386
lea rdx, [rbp - 0x20]
mov dword [rsp - 0x10], ecx
mov rcx, r14
call fcn.14000eac0
jmp 0x140095a66
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x30]
lea rax, [rsp + 0x60]
mov dword [rsp - 0x1c], 0x7019727b
xor r9d, r9d
xor r8d, r8d
xchg rsi, rax
jmp 0x14009511a
mov r14, rcx
mov esi, dword [0x1402557d0]
mov rbx, rbx
mov r8d, ebx
movups xmmword [rsp + 0x60], xmm0
jmp 0x14009500f
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
mov r11, r11
jmp 0x140095843
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x1402557f0]
xor rax, rsp
jmp 0x1400957b5
imul r8d
mov dword [rsp - 0x44], edx
add edx, r8d
jmp 0x14009546d
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14009530b
imul ecx, eax, 0x33
movzx eax, r8w
inc r8d
mov dword [rsp - 0x1c], edi
sub ax, cx
sub ax, 0x4d8d
add ax, 0x4dbf
jmp 0x14009528b
test eax, eax
jne 0x140095b31
cmp word [0x14011c416], bx
jmp 0x14009563c
movups xmmword [r8 - 0x80], xmm0
xchg r8, rbp
movsd xmm0, qword [0x14011c3f0]
mov dword [rsp - 0x1c], ebp
xchg r9, rsp
movups xmmword [r9 + 0x70], xmm1
xchg rsp, r9
jmp 0x14009505c
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
xchg rbx, rbx
pmulld xmm0, xmmword [0x1401183b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x140095180
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
jmp 0x1400955ec
add dword [rsp + 0x5a], 0x39bf3dfa
sub dword [rsp + 0x5a], 0x65493a41
add dword [rsp + 0x5a], 0x7b20851
xor dword [rsp + 0x5a], 0x464d94a0
sub dword [rsp + 0x5a], 0x2396acba
sub dword [rsp + 0x5a], 0x298b94e5
jmp 0x140095873
movd xmm6, r12d
mov dword [rsp - 0x14], edx
movd xmm5, r13d
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
jmp 0x14009595b
xchg rsp, r14
movsd qword [rsp + 0x40], xmm1
je 0x140094f23
mov r8d, ebx
jmp 0x140095992
xchg rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp - 0x24], 0x19593191
mov al, 0x27
sub al, 9
xor al, 0x42
sub al, 0x47
jmp 0x140095938
movups xmm0, xmmword [0x14011c400]
mov dword [rsp - 0x18], 0x70eb1aa
pushf
mov dword [rsp + 0x5a], 0x58d64266
sub dword [rsp + 0x5a], 0x298e7d31
jmp 0x1400955b7
pmuldq xmm0, xmm4
nop
sub r8d, 0x4076ca53
add r8d, 0x4076ca5b
jmp 0x14009575e
punpckhdq xmm0, xmm2
mov r11, r11
paddd xmm3, xmm5
jmp 0x140095662
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401183b0]
mov dword [rsp - 0x10], 0x15d3a42f
psubd xmm2, xmm0
jmp 0x140095514
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov rdx, rdx
movd dword [rcx - 0xc], xmm2
jmp 0x140095a07
lea r8, [r8 + rax*2]
mov dword [rsp - 0x38], edx
nop word [rax + rax]
mov eax, 0x74944522
jmp 0x1400952d3
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401183b0]
mov dword [rsp - 0x1c], 0x494bc416
jmp 0x140095794
nop dword [rax]
mov eax, 0x3939c02d
sub eax, 0xfe395cb
xor eax, 0x2d50b9cc
add eax, 0x6e711828
sub eax, 0x95f01e8
jmp 0x140095415
mov dword [rsp - 0x34], edi
movd xmm5, r13d
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
mov dword [rsp - 0x2c], 0x70d4b31d
jmp 0x14009568b
cmp r8d, 0x4e
mov dword [rsp - 0x30], edx
jl 0x140095706
lea rax, [rsp + 0x50]
jmp 0x140095225
pmuldq xmm1, xmm4
xchg rsp, rsp
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
mov dword [rsp - 0x30], ebp
movdqa xmm0, xmm1
jmp 0x140095ac9
sar edx, 3
mov eax, edx
mov rdx, rdx
shr eax, 0xa
shr eax, 0x14
shr eax, 1
jmp 0x140095408
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rsp + 0x38]
xchg rdi, rdi
pshufd xmm2, xmm1, 0xd8
jmp 0x1400950b2
mov dword [rsp - 0x10], 0x14f41fbc
xchg rdi, rax
mov qword [rbp + 0x3e0], rdi
xchg rdi, rax
movups xmm0, xmmword [0x14011c3b0]
jmp 0x140094ec9
sub r8d, 0x5aae736f
add r8d, 0x676f440c
sub r8d, 0x7bda4cf3
movdqa xmm3, xmmword [0x1401183a0]
jmp 0x140094e72
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rsp - 0x10], 0x103261ea
nop
movabs rdi, 0xffffffff02117dd1
sub rdi, 0x4c1d4c
add rdi, 0x54112079
jmp 0x1400952a7
xchg r9, r9
lea r9, [rsp + 0x60]
add r9, rax
jmp 0x140095702
xchg r15, r15
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
jmp 0x1400959b9
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
mov dword [rsp - 0x3c], ebx
jmp 0x140095367
xchg rcx, r15
mov r15, rcx
xchg rcx, r15
call fcn.14000eac0
xchg rcx, r13
mov r13, qword [rsp + 0x50]
jmp 0x14009561e
popf
movsd xmm1, qword [0x14011c410]
xchg rdi, rdi
xchg r14, rsp
movups xmmword [r14 + 0x30], xmm0
jmp 0x140095607
sub eax, 0xcfb5bf2
add eax, 0x433b1aaf
lea r8, [r8 + 2]
imul ebx
jmp 0x140095134
shr eax, 1
shr eax, 2
shr eax, 1
add edx, eax
mov dword [rsp - 0x24], 0x5223a676
movzx eax, dx
jmp 0x140095528
mov dword [rsp - 0x2c], ebx
pmuldq xmm1, xmm4
movq qword [rsp + 0x30], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
xchg rcx, rcx
psrad xmm1, xmm6
jmp 0x14009557e
movdqa xmm2, xmmword [0x140118390]
mov dword [rsp - 0x2c], esp
mov ebx, 0x211b5954
add ebx, 0x3fe7cab5
sub ebx, 0x5cea70ce
jmp 0x14009526e
mov r15, r15
paddd xmm1, xmm3
psrad xmm1, xmm6
jmp 0x140094e61
sub r8d, 0x3bbe1f46
add r8d, 0x5d5dbdcc
xor r8d, 0xcabb913
sub r8d, 0x428773b7
xor r8d, 0x5c6e8619
jmp 0x1400957d4
add al, 0x5e
sub al, 0x18
sub al, 0x3a
jmp 0x140095b2a
xor eax, 0x47942f8d
sub eax, 0xeacffcb
add eax, 0x4510a736
lea r9, [r9 + 2]
jmp 0x140095505
psrad xmm1, xmm6
xchg r13, r13
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
jmp 0x1400951a5
mov dword [rsp - 0x3c], ecx
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
mov dword [rsp - 0x20], 0x7eac18c2
jmp 0x14009544c
mov dword [rsp - 0x20], 0x1cf30bb8
cmp esi, 2
jl 0x1400950c8
movdqa xmm2, xmmword [0x140118390]
mov rsi, rsi
mov r8d, 0x57b53667
jmp 0x140095910
punpckhdq xmm0, xmm3
mov rdx, rdx
pmuldq xmm0, xmm4
movq qword [rsp + 0x30], xmm2
shufps xmm1, xmm0, 0xdd
jmp 0x140095900
mov dword [rsp + 0x58], 0x4c9a5987
sub dword [rsp + 0x58], 0x1c099d45
add dword [rsp + 0x58], 0x29b058e1
jmp 0x1400951fa
lea r9, [r9 + 1]
imul r8d
mov rdx, rdx
add edx, r8d
sar edx, 1
sar edx, 1
jmp 0x14009577f
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
mov dword [rsp - 0x44], 0x2f72dd4c
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x140094e93
nop
movabs rcx, 0xffffffff0da52654
add rcx, 0x450eb2c7
sub rcx, 0x17228d25
sub rcx, 0x3afba9a5
add rcx, 0x4b217663
jmp 0x1400951e5
jne 0x140094fd1
mov r8, rdi
xchg r8, r8
lea rdx, [rsp + 0x60]
jmp 0x140095858
mov eax, dword [0x14011c430]
movsd xmm1, qword [0x14011c428]
mov r8, r8
mov dword [rsp + 0x48], eax
movzx eax, word [0x14011c434]
mov word [rsp + 0x4c], ax
mov dword [rsp - 0x2c], ebx
jmp 0x1400959d4
mov qword [rsp], rbx
push rsi
mov dword [rsp - 0xc], ecx
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
jmp 0x140094f4a
mov dword [rsp - 0x24], 0x37056df0
xchg rdi, rcx
mov rdi, qword [rsp + 0x50]
xchg rdi, rcx
lea rax, [rsp + 0x58]
mov r10, r10
jmp 0x14009549f
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
mov dword [rsp - 0x14], ecx
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x140094f98
mov r8, r8
mov word [rbp - 0x54], ax
cmp esi, 2
jl 0x140095303
jmp 0x140095335
mov dword [rsp - 0x34], ebp
movd xmm6, r12d
movd xmm8, r13d
nop dword [rax]
nop dword [rax + rax]
xchg r15, r15
movd xmm2, r8d
jmp 0x1400954dc
xor al, 0x20
jmp 0x1400966d8
movups xmm0, xmmword [str.araavjflsj_b_vss_f_]
mov r8d, ebx
mov dword [rsp - 0x3c], ecx
movups xmm1, xmmword [0x14011c450]
mov eax, dword [0x14011c488]
xchg r14, rsp
movups xmmword [r14 + 0x60], xmm0
jmp 0x140096417
movq qword [rsp + 0x38], xmm3
mov eax, ebx
lea r8, [rsp + 0x30]
xchg r8, r8
lea r8, [r8 + rax*2]
nop word [rax + rax]
mov eax, 0x69d902c8
jmp 0x140095bac
mov qword [rsp + 0x20], rax
mov dword [rsp - 0x18], 0x7f23c321
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
nop
movabs rdi, 0xffffffff117d78fc
sub rdi, 0x9aa297b
jmp 0x14009605a
xor eax, 0xf7800cd
xor eax, 0x325f8184
add eax, 0xb49b860
xor eax, 0x53a0a3a8
sub eax, 0x16ad4552
sub eax, 0x16a1dc0
jmp 0x140096193
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
jmp 0x140095c0d
xchg rdx, rdx
lea rax, [rbp - 0x20]
xor r9d, r9d
xor r8d, r8d
jmp 0x140095b82
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x30], 0x7bf0e5ca
jmp 0x14009649c
mov rdi, rdi
movd xmm6, r12d
movd xmm5, r13d
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
mov rbx, rbx
jmp 0x1400962cc
imul ecx, eax, 0x33
movzx eax, r8w
inc r8d
sub ax, cx
mov dword [rsp - 0x40], ebx
sub ax, 0x54ee
add ax, 0x5520
jmp 0x140096130
xchg rbx, rcx
mov rbx, qword [rsp + 0x50]
xchg rbx, rcx
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x30]
jmp 0x140095be2
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
mov dword [rsp - 0x18], 0x19364313
jmp 0x14009603d
sub r9d, 0x28afc7a0
sub r9d, 0xa7a0975
add r9d, 0x5327cc5a
xor r9d, 0x3af1f98a
xor r9d, 0x3a6dac1f
sub r9d, 0x17e56b59
sub r9d, 0x42473143
jmp 0x140096304
mov dword [rsp - 0x3c], ebp
movq xmm2, xmm8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rsp + 0x38]
pshufd xmm3, xmm1, 0xd8
mov dword [rsp - 0x38], ebp
paddw xmm3, xmm2
jmp 0x1400963b3
shr eax, 2
shr eax, 1
shr eax, 3
shr eax, 2
shr eax, 1
add edx, eax
jmp 0x14009655a
shr eax, 0xd
shr eax, 7
shr eax, 3
jmp 0x1400966a8
mov dword [rsp - 0x18], esi
jne 0x1400961c3
jmp 0x140095a56
movq xmm0, qword [str.vZGEZVApYTRvZGEZVAo_IOTQQ_]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
mov dword [rsp - 0x34], ecx
movdqa xmm2, xmmword [0x1401183a0]
pxor xmm3, xmm0
jmp 0x1400965bf
xchg r10, r10
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
mov dword [rsp - 0x20], esp
psubd xmm3, xmm0
jmp 0x140096266
xchg rsp, rbx
movups xmmword [rbx + 0x30], xmm0
xchg rsp, rbx
cmp esi, 2
mov rsi, rsi
jl 0x140095b5f
jmp 0x140095f7c
pxor xmm3, xmm0
movdqa xmm1, xmm2
mov r15, r15
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
jmp 0x140096478
mov rdx, rdx
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm8
pshufhw xmm1, xmm0, 0xd8
jmp 0x140096453
paddd xmm2, xmm5
mov dword [rsp - 0x14], edx
movd xmm3, eax
jmp 0x14009611b
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp - 0x38], 0x2fea26bd
lea rdx, [rsp + 0x30]
lea rax, [rsp + 0x60]
jmp 0x140095e4c
pmuldq xmm1, xmm4
xchg r15, r15
movd xmm0, edx
jmp 0x140095f03
movsxd rax, r8d
lea r10, [rsp + 0x60]
xchg r11, r11
add r10, rax
nop dword [rax]
jmp 0x140095eb7
mov dword [rsp - 0x1c], edi
movd xmm8, r13d
nop word [rax + rax]
jmp 0x1400960bd
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
mov r9, r9
pmuldq xmm1, xmm4
movd xmm6, r12d
jmp 0x140096295
movdqa xmm7, xmmword [0x1401183b0]
xchg r13, rsp
movdqa xmmword [r13 + 0x30], xmm0
xchg r13, rsp
mov edx, dword [rsp + 0x30]
movd xmm6, r12d
jmp 0x140095df7
xor r9d, r9d
mov rbp, rbp
xor r8d, r8d
xchg r9, rax
jmp 0x140095e7d
sub eax, 0x6493f41a
add eax, 0x386605b7
xor eax, 0x7a9cd5c
jmp 0x140096281
mov eax, edx
shr eax, 0xf
shr eax, 7
jmp 0x140095cda
mov qword [rsp + 0x20], r9
xchg r9, rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x1400961ad
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
jmp 0x140095d31
pmulld xmm0, xmmword [0x1401183b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x140095cb4
mov eax, 0x35f0d01b
xor eax, 0x6697f7cf
sub eax, 0x3edccafe
xor eax, 0xc234bbf
add eax, 0x6b7c7d2
add eax, 0x813fc166
jmp 0x140096376
movdqa xmm4, xmmword [0x1401183f0]
xchg rsi, rsi
movdqa xmm1, xmm2
movdqa xmm8, xmmword [0x14011a260]
movdqa xmm0, xmm2
mov dword [rsp - 0x44], esi
punpckhdq xmm0, xmm2
jmp 0x140095bcf
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
pxor xmm2, xmm0
mov dword [rsp - 0xc], ebx
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
jmp 0x14009602a
movdqa xmm2, xmmword [0x140118390]
mov rsi, rsi
mov r8d, 0x7ab04000
jmp 0x140095f37
sub r8d, 0x5bc0d878
xor r8d, 0x49fd01f5
add r8d, 0x1a9126c9
sub r8d, 0x670ab5f7
xor r8d, 0xa98d747
jmp 0x140095eda
xchg rbx, rsp
je 0x140095c48
mov r8d, ebx
xchg rsi, rsi
cmp esi, 2
jl 0x1400963c5
jmp 0x140095f21
movdqa xmm2, xmmword [0x140118390]
mov ebx, 0x441350b2
add ebx, 0xb9b5baa
add ebx, 0x1cff893b
xor ebx, 0x2530feb8
jmp 0x140096226
mov dword [rsp - 0x44], edi
jne 0x1400963a6
lea rdx, [rbp - 0x20]
mov rcx, r14
call fcn.14000eac0
mov dword [rsp - 0x10], 0x379ab22f
mov eax, dword [0x14011c4c0]
jmp 0x140095fc9
movsd xmm1, qword [0x14011c4b8]
mov dword [rsp + 0x48], eax
movzx eax, word [0x14011c4c4]
mov rdx, rdx
jmp 0x14009620c
movdqa xmm0, xmmword [0x14011a270]
xchg r13, r13
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140118390]
movdqa xmm4, xmmword [0x1401183f0]
mov dword [rsp - 0x44], 0x103baf5d
jmp 0x140095e2a
sub ax, cx
add ax, 0x32
xor word [r8 - 2], ax
mov dword [rsp - 0x18], 0x64243c37
jmp 0x140096541
pmuldq xmm0, xmm4
mov dword [rsp - 0x38], ecx
movd dword [rcx - 0xc], xmm2
jmp 0x140095e8f
inc r8d
sub al, cl
add al, 0x32
mov rsp, rsp
xor byte [r10 - 1], al
cmp r8d, 0x4e
jl 0x140095eb7
jmp 0x14009631e
sub rdi, 0x760efac
xor rdi, 0x7b228d91
sub rdi, 0x6a85f25f
add rdi, 0x6c7f8a21
jmp 0x1400965e0
xchg rbp, r14
movsd xmm0, qword [0x14011c480]
mov rsp, rsp
xchg rsp, r9
movups xmmword [r9 + 0x70], xmm1
xchg rsp, r9
jmp 0x1400964e8
pshufhw xmm1, xmm0, 0xd8
mov dword [rsp - 0x10], edx
movq xmm0, qword [rsp + 0x38]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xchg rdi, rdi
pxor xmm3, xmm0
jmp 0x140095b59
movd xmm2, r8d
lea eax, [r8 + 4]
mov dword [rsp - 0x3c], 0x60bf3ac4
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
jmp 0x140095d9d
xchg rsp, rsi
xchg rbx, rsp
movsd qword [rbx + 0x40], xmm1
jmp 0x140095f5f
sar edx, 2
sar edx, 1
sar edx, 1
sar edx, 1
mov eax, edx
mov dword [rsp - 0x1c], esp
jmp 0x140095cee
pmulld xmm0, xmm7
psubd xmm2, xmm0
xchg r10, r10
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x140096245
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
mov rdx, rdx
punpckldq xmm1, xmm2
jmp 0x140096331
xor word [r9 - 2], ax
mov dword [rsp - 0x34], esi
cmp r8d, 0xc
jl 0x140096523
jmp 0x140095c48
sub dword [rsp + 0x5a], 0x568a3965
popf
movsd xmm1, qword [0x14011c4a0]
xchg r9, r9
xchg rsi, rsp
movups xmmword [rsi + 0x30], xmm0
jmp 0x1400960dc
mov dword [rsp - 0x38], 0x332a1aba
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x24], 0x393be9c8
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x140096100
xor eax, 0xbb719596
lea r8, [r8 + 2]
mov r14, r14
imul ebx
add edx, ebx
sar edx, 4
sar edx, 1
jmp 0x140095e70
test eax, eax
jne 0x140095866
xchg r8, r8
lea rax, [rsp + 0x60]
nop word [rax + rax]
inc rdi
cmp word [rax + rdi*2], 0
jmp 0x140095cfc
paddd xmm1, xmm2
xchg rsp, rsp
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
mov dword [rsp - 0x14], edi
paddd xmm0, xmm1
jmp 0x140095ea0
movsd qword [rdx - 0x60], xmm0
xchg rbp, rdx
xchg rbp, r8
movups xmmword [r8 - 0x70], xmm1
xchg r8, rbp
mov word [rbp - 0x54], ax
jmp 0x1400966bd
mov word [rsp + 0x4c], ax
mov dword [rsp + 0x58], 0x3f7ccec9
xor dword [rsp + 0x58], 0x3f379570
jmp 0x1400964c3
sub ebx, 0x19e0b9ab
xor ebx, 0x204a5cf9
sub ebx, 0xff44d75
movdqa xmm4, xmmword [0x1401183f0]
jmp 0x140096618
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
mov r15, r15
pand xmm2, xmmword [0x1401183d0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
jmp 0x140095dcf
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
xchg r11, r11
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
jmp 0x140096432
add eax, 0x5b152814
lea r9, [r9 + 2]
xchg r10, r10
imul r8d
jmp 0x140096366
movd xmm5, r13d
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x14], 0x38ce2d52
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x1400965fa
add r8d, 0x43e2209d
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x140096169
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
jmp 0x140096638
sub dword [rsp + 0x58], 0x779e145e
xchg r8, rsp
movsd qword [r8 + 0x40], xmm1
xchg rsp, r8
movups xmm0, xmmword [0x14011c4a8]
mov r14, r14
jmp 0x140095d53
xor r8d, r8d
xchg r8, r8
xchg r14, rax
mov qword [rsp + 0x20], r14
xchg r14, rax
lea rdx, [rsp + 0x60]
nop
jmp 0x1400963de
xchg r9, r9
lea rax, [rsp + 0x50]
mov r9d, 0x3aa9ce09
jmp 0x140095c7e
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov r15, r15
paddd xmm3, xmm5
pmuldq xmm0, xmm4
nop
sub r8d, 0x43e22095
jmp 0x1400962b7
pmuldq xmm1, xmm4
movq qword [rsp + 0x30], xmm3
shufps xmm1, xmm0, 0xdd
jmp 0x1400961d0
add edx, r8d
sar edx, 5
mov eax, edx
mov r11, r11
jmp 0x140096388
lea r10, [r10 + 1]
xchg r10, r10
imul r8d
add edx, r8d
jmp 0x1400960ec
shr eax, 2
shr eax, 0x18
shr eax, 4
shr eax, 1
add edx, eax
movzx eax, dx
mov rsi, rsi
jmp 0x140095c2a
mov rbx, rdi
xchg r8, rbx
inc r8
cmp word [rax + r8*2], bx
jmp 0x140095fa0
pxor xmm3, xmm0
movq qword [rsp + 0x38], xmm3
mov dword [rsp - 0xc], 0x1d9a8f72
mov eax, r8d
lea r9, [rsp + 0x30]
lea r9, [r9 + rax*2]
mov dword [rsp - 0x24], 0x1afc0e8a
jmp 0x14009651c
movabs rcx, 0xffffffff0d01b278
add rcx, 0x17632b53
sub rcx, 0x1d93c3a9
xor rcx, 0x3d009159
sub rcx, 0x2bdac969
add rcx, 0x3b6a15ed
add rcx, 0x7fffffff
jmp 0x140096571
xchg rsp, r14
movups xmm0, xmmword [str._0:__]
mov dword [rsp - 0x18], esi
xchg rbp, r14
movups xmmword [r14 - 0x80], xmm0
jmp 0x14009607b
pand xmm2, xmmword [0x1401183d0]
packuswb xmm2, xmm2
xchg rsp, rsp
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
pxor xmm2, xmm0
jmp 0x140096683
mov dword [rsp - 0x2c], ebp
movq xmm0, qword [0x14011c4a8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
mov r9, r9
movdqa xmm2, xmmword [0x1401183a0]
jmp 0x140095d6e
punpckhdq xmm0, xmm2
mov dword [rsp - 0xc], ebp
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movq qword [rsp + 0x30], xmm3
mov r11, r11
shufps xmm1, xmm0, 0xdd
jmp 0x140095bf4
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401183b0]
psubd xmm2, xmm0
xchg rdi, rdi
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm8
jmp 0x140096099
xor dword [rsp + 0x58], 0x65854343
sub dword [rsp + 0x58], 0x17ec29b9
sub dword [rsp + 0x58], 0xe99dda1
add dword [rsp + 0x58], 0x3856033e
jmp 0x1400962e1
movups xmm1, xmmword [0x14011c470]
mov r14, r14
mov dword [rbp - 0x58], eax
movzx eax, word [0x14011c48c]
xchg rdx, rbp
jmp 0x1400961f0
test eax, eax
mov dword [rsp - 0x18], edi
jne 0x140095fbe
lea rax, [rbp - 0x20]
xchg r8, rbx
jmp 0x1400963a0
nop dword [rax]
mov eax, 0x6cdf3dfb
sub eax, 0x3667c8e9
sub eax, 0x31d1b5aa
add eax, 0x2dfa15d7
xor eax, 0x5ccf710b
jmp 0x140095e5c
cmp ebx, 0xf
jl 0x140095b78
xchg r12, rcx
mov r12, qword [rsp + 0x50]
xchg r12, rcx
jmp 0x140095dae
xchg r15, r15
movzx eax, dx
imul ecx, eax, 0x33
movzx eax, bx
inc ebx
mov dword [rsp - 0x44], ebx
jmp 0x140096011
sub rcx, 0x4b60d7fd
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r12, r12
test eax, eax
jmp 0x140096588
jne 0x1400966ce
cmp word [0x14011c4a6], bx
mov dword [rsp - 0x10], 0x60efa727
jmp 0x140096665
sub dword [rsp + 0x5a], 0x2ccb1772
sub dword [rsp + 0x5a], 0x8e7ed5d
xor dword [rsp + 0x5a], 0x5e639669
jmp 0x140096148
movdqa xmm1, xmm2
xchg rbx, rbx
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
mov dword [rsp - 0x1c], ecx
jmp 0x140096352
sub rdi, 0x2b6886b2
add rdi, 0x7fffffff
add rdi, 0x2e1e1cac
jmp 0x140096504
psrld xmm0, xmm5
mov dword [rsp - 0x14], esp
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401183b0]
psubd xmm2, xmm0
jmp 0x140095d86
xchg r14, r14
movdqa xmm1, xmm2
movdqa xmm8, xmmword [0x14011a260]
movdqa xmm0, xmm2
xchg r9, r9
punpckhdq xmm0, xmm2
jmp 0x140095e0f
mov dword [rsp - 0x24], edx
pmulld xmm0, xmmword [0x1401183b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm8
mov dword [rsp - 0x20], 0x7412237a
pshufhw xmm1, xmm0, 0xd8
jmp 0x140095d0b
movups xmm0, xmmword [str.vZGEZVApYTRvZGEZVAo_IOTQQ_]
pushf
mov dword [rsp + 0x5a], 0x64b71131
sub dword [rsp + 0x5a], 0x261a6156
jmp 0x1400965a2
movd dword [rcx - 8], xmm2
mov dword [rsp - 0x18], edx
cmp r8d, 0x48
jl 0x1400960bd
cmp r8d, 0x4e
xchg rbp, rbp
jge 0x140096321
jmp 0x140095de0
shr eax, 4
shr eax, 4
add edx, eax
mov dword [rsp - 0x34], 0x50ebd368
jmp 0x140095c67
mov rcx, rcx
cmp esi, 2
jl 0x140095de0
jmp 0x140095fe4
xor al, al
mov dword [rsp - 0xc], 0x9750999
xchg rdi, r13
mov r13, qword [rsp + 0x570]
xchg rdi, r13
mov rcx, qword [rbp + 0x3e0]
jmp 0x14009674e
mov dword [rsp - 0x3c], 0x67373339
nop
add rsp, 8
mov rbx, qword [rsp - 8]
nop
mov rbp, qword [rsp]
add rsp, 8
jmp 0x140096771
nop
mov r15, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov r14, qword [rsp - 8]
jmp 0x140096791
movaps xmm7, xmmword [r14 - 0x20]
xchg r14, r11
xchg r11, r12
movaps xmm8, xmmword [r12 - 0x30]
xchg r12, r11
mov rsp, r11
mov dword [rsp - 0x28], 0x3d71af56
jmp 0x140096712
xchg rbp, rbp
xor rcx, rsp
call fcn.1400e8cf0
lea r11, [rsp + 0x520]
mov dword [rsp - 0xc], 0x671abbda
xchg r11, rdi
jmp 0x140096782
ret
nop
add rsp, 8
mov r12, qword [rsp - 8]
pop rsi
jmp 0x1400966f2
movaps xmm6, xmmword [rdi - 0x10]
xchg r11, rdi
xchg r14, r11
jmp 0x14009672a
nop
mov r13, qword [rsp]
add rsp, 8
jmp 0x140096772