Function at 0x140002ed0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push rbp
push rdi
push r15
lea rbp, [rsp - 0x18b0]
mov eax, 0x19b0
call fcn.14000cbf0
sub rsp, rax
mov rax, qword [0x140049058]
xor rax, rsp
mov qword [rbp + 0x1868], rax
xor r15d, r15d
mov dword [rbp + 0x1864], 4
mov edi, 0x12
mov qword [rbp + 0x1850], r15
mov dword [rbp + 0x1858], r15d
lea rax, [rbp + 0x790]
mov dword [rbp + 0x185c], r15d
mov ecx, edi
mov dword [rbp + 0x1860], 4
nop word [rax + rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140002f40
movdqa xmm0, xmmword [0x1400438e0]
lea rcx, [rsp + 0x30]
pxor xmm0, xmmword [0x140043a00]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [0x1400438f0]
mov r8d, 0x860
pxor xmm1, xmmword [0x140043a10]
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [0x140043900]
pxor xmm0, xmmword [0x140043a20]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [0x140043910]
pxor xmm1, xmmword [str.k_R_n]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [0x140043920]
pxor xmm0, xmmword [0x140043a40]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [0x140043930]
pxor xmm1, xmmword [0x140043a50]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [0x140043940]
pxor xmm0, xmmword [0x140043a60]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [0x140043950]
pxor xmm1, xmmword [0x140043a70]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [0x140043960]
pxor xmm0, xmmword [0x140043a80]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [0x140043970]
pxor xmm1, xmmword [0x140043a90]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [0x140043980]
pxor xmm0, xmmword [0x140043aa0]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [0x140043990]
pxor xmm1, xmmword [0x140043ab0]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [0x1400439a0]
pxor xmm0, xmmword [0x140043ac0]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [0x1400439b0]
pxor xmm1, xmmword [0x140043ad0]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [0x1400439c0]
pxor xmm0, xmmword [0x140043ae0]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [0x1400439d0]
pxor xmm1, xmmword [0x140043af0]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [0x1400439e0]
pxor xmm0, xmmword [0x140043b00]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [0x1400439f0]
pxor xmm1, xmmword [0x140043b10]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
call fcn.14000e1a0
lea r8, [rbp + 0x1850]
mov rcx, 0xffffffff80000002
lea rdx, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14000313c
xor al, al
jmp 0x140004518
mov qword [rsp + 0x19d0], rbx
movabs rax, 0x18d95bad2f4a3744
mov qword [rsp + 0x30], rax
mov ebx, 6
mov qword [rsp + 0x19d8], rsi
movabs rax, 0xa1b41f051e353d7
mov qword [rsp + 0x38], rax
xorps xmm2, xmm2
mov qword [rsp + 0x19e0], r14
movabs rax, 0x2e898d998d96f49
mov qword [rsp + 0x40], rax
xorps xmm3, xmm3
movaps xmmword [rsp + 0x19a0], xmm6
movabs rax, 0x1417e75d40dcf314
mov qword [rsp + 0x48], rax
xorps xmm4, xmm4
movaps xmmword [rsp + 0x1990], xmm7
movabs rax, 0xf0aef0a8f4b22a6
mov qword [rsp + 0x50], rax
xorps xmm5, xmm5
movabs rax, 0x6b1606896b2563f
movaps xmmword [rsp + 0x1980], xmm8
mov qword [rsp + 0x58], rax
xorps xmm6, xmm6
movabs rax, 0x18ad5bcc2f2f3702
movaps xmmword [rsp + 0x1970], xmm9
mov qword [rbp - 0x70], rax
xorps xmm7, xmm7
movabs rax, 0xa484195519153a2
mov ecx, ebx
mov qword [rbp - 0x68], rax
movabs rax, 0x28198ad98ad6f2c
mov qword [rbp - 0x60], rax
movabs rax, 0x1458e72e40bbf37a
mov qword [rbp - 0x58], rax
movabs rax, 0xf78ef788f2e22d0
mov qword [rbp - 0x50], rax
movabs rax, 0x6b1600d96d65656
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x790]
nop dword [rax]
nop dword [rax + rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003250
movdqa xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x70]
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm5
pxor xmm1, xmmword [rbp - 0x60]
pxor xmm3, xmm6
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm7
movdqa xmm0, xmmword [rsp + 0x50]
mov rdx, rbx
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7c0], xmm2
movdqa xmmword [rbp + 0x7d0], xmm3
movdqa xmmword [rbp + 0x7e0], xmm4
nop dword [rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x1400032d0
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x1860]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x1864]
lea rax, [rbp + 0x1858]
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x1400036fb
movabs rax, 0xf38539fe6e7f174
xorps xmm2, xmm2
mov qword [rsp + 0x30], rax
xorps xmm3, xmm3
movabs rax, 0x1283a4c09ee998e
xorps xmm4, xmm4
mov qword [rsp + 0x38], rax
xorps xmm5, xmm5
movabs rax, 0x1a314f388f3866e6
xorps xmm6, xmm6
mov qword [rsp + 0x40], rax
xorps xmm7, xmm7
movabs rax, 0x12faa5e63f5bf501
mov rcx, rbx
mov qword [rsp + 0x48], rax
movabs rax, 0x594659406e8d8da
mov qword [rsp + 0x50], rax
movabs rax, 0x1dccd76c0eb59f32
mov qword [rsp + 0x58], rax
movabs rax, 0xf4c53fee682f132
mov qword [rbp - 0x70], rax
movabs rax, 0x17b3a29099c99fb
mov qword [rbp - 0x68], rax
movabs rax, 0x1a584f4c8f4c6683
mov qword [rbp - 0x60], rax
movabs rax, 0x12b5a5953f3cf56f
mov qword [rbp - 0x58], rax
movabs rax, 0x5e665e6068dd8ac
mov qword [rbp - 0x50], rax
movabs rax, 0x1dccd7090ed19f5b
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x790]
nop word [rax + rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003430
movdqa xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x70]
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm5
pxor xmm1, xmmword [rbp - 0x60]
pxor xmm3, xmm6
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm7
movdqa xmm0, xmmword [rsp + 0x50]
mov rdx, rbx
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7c0], xmm2
movdqa xmmword [rbp + 0x7d0], xmm3
movdqa xmmword [rbp + 0x7e0], xmm4
nop dword [rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x1400034b0
lea rax, [rbp + 0x790]
mov rcx, rdi
nop dword [rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003510
movdqa xmm0, xmmword [0x140043460]
lea rcx, [rbp + 0xff0]
pxor xmm0, xmmword [0x140043580]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [0x140043470]
mov r8d, 0x860
pxor xmm1, xmmword [0x140043590]
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [0x140043480]
pxor xmm0, xmmword [0x1400435a0]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [0x140043490]
pxor xmm1, xmmword [0x1400435b0]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [0x1400434a0]
pxor xmm0, xmmword [0x1400435c0]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [0x1400434b0]
pxor xmm1, xmmword [0x1400435d0]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [0x1400434c0]
pxor xmm0, xmmword [0x1400435e0]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [0x1400434d0]
pxor xmm1, xmmword [0x1400435f0]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [0x1400434e0]
pxor xmm0, xmmword [0x140043600]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [0x1400434f0]
pxor xmm1, xmmword [0x140043610]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [0x140043500]
pxor xmm0, xmmword [0x140043620]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [0x140043510]
pxor xmm1, xmmword [0x140043630]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [0x140043520]
pxor xmm0, xmmword [0x140043640]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [0x140043530]
pxor xmm1, xmmword [0x140043650]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [0x140043540]
pxor xmm0, xmmword [0x140043660]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [0x140043550]
pxor xmm1, xmmword [0x140043670]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [0x140043560]
pxor xmm0, xmmword [0x140043680]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [0x140043570]
pxor xmm1, xmmword [0x140043690]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
call fcn.14000e1a0
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xff0]
call fcn.140002e30
movabs rcx, 0xe0000000200001f4
movabs rax, 0x1d44e6c410953e80
mov qword [rsp + 0x30], rax
movabs rdx, 0x1fffffffe0000000
movabs rax, 0xda668ee6bd4f820
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x38], rax
xorps xmm2, xmm2
movabs rax, 0x3256cb2c314704a
mov qword [rbp - 0x48], rcx
mov qword [rsp + 0x40], rax
xorps xmm3, xmm3
movabs rax, 0x74695be8fd7f711d
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rax
xorps xmm4, xmm4
movabs rax, 0x6925838230c814db
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x70], rax
xorps xmm5, xmm5
movabs rax, 0x64d21c8b38b18a55
xorps xmm6, xmm6
mov qword [rbp - 0x68], rax
xorps xmm7, xmm7
movabs rax, 0x715709c48c671724
mov rcx, rbx
mov qword [rbp - 0x60], rax
movabs rax, 0x7e1c7ec8c71a1574
mov qword [rbp - 0x58], rax
lea rax, [rbp + 0x790]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x1400037b1
movdqa xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x70]
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm5
pxor xmm1, xmmword [rbp - 0x60]
pxor xmm3, xmm6
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm7
movdqa xmm0, xmmword [rbp - 0x50]
mov edx, 4
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7c0], xmm2
movdqa xmmword [rbp + 0x7d0], xmm3
movdqa xmmword [rbp + 0x7e0], xmm4
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003830
movups xmm0, xmmword [rcx]
mov edx, dword [rbp + 0x1858]
lea rcx, [rsp + 0x30]
movups xmmword [rax], xmm0
call fcn.1400010e0
cmp dword [rbp + 0x1858], 3
je 0x140003a87
movabs rax, 0x5064b195e076b4d
mov dword [rbp + 0x1858], 3
mov qword [rsp + 0x30], rax
xorps xmm2, xmm2
movabs rax, 0x110247bf97ef0eb7
xorps xmm3, xmm3
mov qword [rsp + 0x38], rax
xorps xmm4, xmm4
movabs rax, 0x10f6c50685065e06
xorps xmm5, xmm5
mov qword [rsp + 0x40], rax
xorps xmm6, xmm6
movabs rax, 0x1a2c2dc84729ec23
xorps xmm7, xmm7
mov qword [rsp + 0x48], rax
mov rcx, rbx
movabs rax, 0x1b8f5b8efe084e7b
mov qword [rsp + 0x50], rax
movabs rax, 0x98fe3ad198e12a3
mov qword [rsp + 0x58], rax
movabs rax, 0x5724b785e626b0b
mov qword [rbp - 0x70], rax
movabs rax, 0x115147da979d0ec2
mov qword [rbp - 0x68], rax
movabs rax, 0x109fc57285725e63
mov qword [rbp - 0x60], rax
movabs rax, 0x1a632dbb474eec4d
mov qword [rbp - 0x58], rax
movabs rax, 0x1bfd5bfcfe6d4e0d
mov qword [rbp - 0x50], rax
movabs rax, 0x98fe3c819ea12ca
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x790]
nop word [rax + rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003980
movdqa xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x70]
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm5
pxor xmm1, xmmword [rbp - 0x60]
pxor xmm3, xmm6
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm7
movdqa xmm0, xmmword [rsp + 0x50]
mov rdx, rbx
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7c0], xmm2
movdqa xmmword [rbp + 0x7d0], xmm3
movdqa xmmword [rbp + 0x7e0], xmm4
nop dword [rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003a00
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x1858]
lea r9d, [rdx + 4]
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rbp + 0x1858], r15d
movabs rax, 0x1d35449017392696
movabs rcx, 0xc069406fa666c54
mov qword [rsp + 0x30], rax
mov r14d, 8
movabs rax, 0x13e749ed5a284fac
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm2, xmm2
movabs rax, 0x9e37d357d355738
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x40], rax
xorps xmm3, xmm3
movabs rax, 0x105906996018da2e
xorps xmm4, xmm4
mov qword [rsp + 0x48], rax
xorps xmm5, xmm5
movabs rax, 0x13e0d3e0773a0688
xorps xmm6, xmm6
mov qword [rsp + 0x50], rax
xorps xmm7, xmm7
movabs rax, 0x1e62780eab9b3c54
xorps xmm8, xmm8
mov qword [rsp + 0x58], rax
xorps xmm9, xmm9
movabs rax, 0x1f338188ae48e
mov ecx, r14d
mov qword [rsp + 0x60], rax
movabs rax, 0x1d4144f1175c26d0
mov qword [rbp - 0x50], rax
movabs rax, 0x13b449885a5a4fd9
mov qword [rbp - 0x48], rax
movabs rax, 0x98a7d417d41575d
mov qword [rbp - 0x40], rax
movabs rax, 0x101606ea607fda40
mov qword [rbp - 0x38], rax
movabs rax, 0x1392d392775f06fe
mov qword [rbp - 0x30], rax
movabs rax, 0x1e2f786babff3c3d
mov qword [rbp - 0x28], rax
movabs rax, 0x1f35318f9e4ef
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x790]
nop
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003b90
movdqa xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x50]
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm6
pxor xmm1, xmmword [rbp - 0x40]
pxor xmm3, xmm7
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm8
movdqa xmm0, xmmword [rsp + 0x50]
pxor xmm5, xmm9
pxor xmm0, xmmword [rbp - 0x30]
mov esi, 7
movdqa xmmword [rbp + 0x7a0], xmm1
mov edx, esi
movdqa xmm1, xmmword [rsp + 0x60]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7d0], xmm2
movdqa xmmword [rbp + 0x7e0], xmm3
movdqa xmmword [rbp + 0x7f0], xmm4
movdqa xmmword [rbp + 0x800], xmm5
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003c32
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x1860]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x1864]
lea rax, [rbp + 0x185c]
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x1400040bb
movabs rax, 0x12553b780dc12006
movabs rcx, 0xc06917ef60e7234
mov qword [rsp + 0x30], rax
xorps xmm2, xmm2
movabs rax, 0x1e87530563a04464
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm3, xmm3
movabs rax, 0xb725572554dc0
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x40], rax
xorps xmm4, xmm4
movabs rax, 0xd1102f95c78d82e
xorps xmm5, xmm5
mov qword [rsp + 0x48], rax
xorps xmm6, xmm6
movabs rax, 0x930c9306dc1fb78
xorps xmm7, xmm7
mov qword [rsp + 0x50], rax
xorps xmm8, xmm8
movabs rax, 0x1af2749ea873435c
xorps xmm9, xmm9
mov qword [rsp + 0x58], rax
mov rcx, r14
movabs rax, 0x1e9300dc2db76
mov qword [rsp + 0x60], rax
movabs rax, 0x12213b190da42040
mov qword [rbp - 0x50], rax
movabs rax, 0x1ed4536063d24411
mov qword [rbp - 0x48], rax
movabs rax, 0x62722172214da5
mov qword [rbp - 0x40], rax
movabs rax, 0xd5e028a5c1fd840
mov qword [rbp - 0x38], rax
movabs rax, 0x942c9426da4fb0e
mov qword [rbp - 0x30], rax
movabs rax, 0x1abf74fba8174335
mov qword [rbp - 0x28], rax
movabs rax, 0x1e95b0db1db17
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x790]
nop dword [rax]
nop dword [rax + rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003dd0
movdqa xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x50]
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm6
pxor xmm1, xmmword [rbp - 0x40]
pxor xmm3, xmm7
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm8
movdqa xmm0, xmmword [rsp + 0x50]
pxor xmm5, xmm9
pxor xmm0, xmmword [rbp - 0x30]
mov rdx, rsi
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7d0], xmm2
movdqa xmmword [rbp + 0x7e0], xmm3
movdqa xmmword [rbp + 0x7f0], xmm4
movdqa xmmword [rbp + 0x800], xmm5
nop
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003e70
lea rax, [rbp + 0x790]
nop word [rax + rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rdi, 1
jne 0x140003ed0
movdqa xmm0, xmmword [0x1400436a0]
lea rcx, [rbp + 0xff0]
pxor xmm0, xmmword [0x1400437c0]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [0x1400436b0]
mov r8d, 0x860
pxor xmm1, xmmword [0x1400437d0]
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [0x1400436c0]
pxor xmm0, xmmword [0x1400437e0]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [0x1400436d0]
pxor xmm1, xmmword [0x1400437f0]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [0x1400436e0]
pxor xmm0, xmmword [0x140043800]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [0x1400436f0]
pxor xmm1, xmmword [0x140043810]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [0x140043700]
pxor xmm0, xmmword [0x140043820]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [0x140043710]
pxor xmm1, xmmword [0x140043830]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [0x140043720]
pxor xmm0, xmmword [0x140043840]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [0x140043850]
pxor xmm1, xmmword [0x140043730]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [0x140043740]
pxor xmm0, xmmword [0x140043860]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [0x140043750]
pxor xmm1, xmmword [0x140043870]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [0x140043760]
pxor xmm0, xmmword [0x140043880]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [0x140043770]
pxor xmm1, xmmword [0x140043890]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [0x140043780]
pxor xmm0, xmmword [0x1400438a0]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [0x140043790]
pxor xmm1, xmmword [0x1400438b0]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [0x1400437a0]
pxor xmm0, xmmword [0x1400438c0]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [0x1400437b0]
pxor xmm1, xmmword [0x1400438d0]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
call fcn.14000e1a0
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xff0]
call fcn.140002e30
movabs rax, 0x7c17a292bb30e71
movabs rcx, 0xdab61a0de56d8
mov qword [rsp + 0x30], rax
xorps xmm5, xmm5
movabs rax, 0xb664fc522d1bd1
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x38], rax
xorps xmm6, xmm6
movabs rax, 0x11d793394aa1b049
mov qword [rbp - 0x48], rcx
mov qword [rsp + 0x40], rax
xorps xmm7, xmm7
movabs rax, 0x429145b2a6271855
xorps xmm2, xmm2
mov qword [rsp + 0x48], rax
xorps xmm3, xmm3
movabs rax, 0x2efc397e68
xorps xmm4, xmm4
mov qword [rsp + 0x50], rax
movabs rax, 0x73a01f6f0bee242a
mov qword [rbp - 0x70], rax
movabs rax, 0x69c21099014869a4
mov qword [rbp - 0x68], rax
movabs rax, 0x63a5f64f05d2d727
mov qword [rbp - 0x60], rax
movabs rax, 0x78fa36d3eb427c3c
mov qword [rbp - 0x58], rax
movabs rax, 0x2ef64c5b48
mov qword [rbp - 0x50], rax
lea rax, [rbp + 0x790]
nop dword [rax + rax]
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub rbx, 1
jne 0x140004180
movdqa xmm0, xmmword [rbp - 0x70]
lea edx, [rbx + 4]
pxor xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
movdqa xmm1, xmmword [rbp - 0x60]
lea rcx, [rbp + 0x790]
pxor xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm5
mov rbx, qword [rsp + 0x19d0]
pxor xmm3, xmm6
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm7
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7c0], xmm2
movdqa xmmword [rbp + 0x7d0], xmm3
movdqa xmmword [rbp + 0x7e0], xmm4
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140004210
movups xmm0, xmmword [rcx]
mov edx, dword [rbp + 0x185c]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
lea rcx, [rsp + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmmword [rax + 0x40], xmm0
call fcn.1400010e0
cmp dword [rbp + 0x185c], 3
je 0x1400044d7
movabs rax, 0x11d2d11fec315a2
mov dword [rbp + 0x185c], 3
mov qword [rsp + 0x30], rax
movabs rcx, 0xc069b9f0258639c
movabs rax, 0x118f62ef745e3f92
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm2, xmm2
movabs rax, 0x1075611d611d3ec2
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x40], rax
xorps xmm3, xmm3
movabs rax, 0x17c70ec16820d55e
xorps xmm4, xmm4
mov qword [rsp + 0x48], rax
xorps xmm5, xmm5
movabs rax, 0x1844b8445ec3e9f4
xorps xmm6, xmm6
mov qword [rsp + 0x50], rax
xorps xmm7, xmm7
movabs rax, 0x9ce83bab5dd3622
xorps xmm8, xmm8
mov qword [rsp + 0x58], rax
xorps xmm9, xmm9
movabs rax, 0x1d94dfcb0cd10
mov qword [rsp + 0x60], rax
movabs rax, 0x1692d70fea615e4
mov qword [rbp - 0x50], rax
movabs rax, 0x11dc628a742c3fe7
mov qword [rbp - 0x48], rax
movabs rax, 0x101c616961693ea7
mov qword [rbp - 0x40], rax
movabs rax, 0x17880eb26847d530
mov qword [rbp - 0x38], rax
movabs rax, 0x1836b8365ea6e982
mov qword [rbp - 0x30], rax
movabs rax, 0x98383dfb5b9364b
mov qword [rbp - 0x28], rax
movabs rax, 0x1d926fcc3cd71
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x790]
nop
mov qword [rax], r15
mov qword [rax + 8], r15
lea rax, [rax + 0x10]
sub r14, 1
jne 0x1400043b0
movdqa xmm0, xmmword [rsp + 0x30]
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x50]
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
pxor xmm2, xmm6
pxor xmm1, xmmword [rbp - 0x40]
pxor xmm3, xmm7
movdqa xmmword [rbp + 0x790], xmm0
pxor xmm4, xmm8
movdqa xmm0, xmmword [rsp + 0x50]
pxor xmm5, xmm9
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7d0], xmm2
movdqa xmmword [rbp + 0x7e0], xmm3
movdqa xmmword [rbp + 0x7f0], xmm4
movdqa xmmword [rbp + 0x800], xmm5
nop dword [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rsi, 1
jne 0x140004450
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x185c]
mov dword [rsp + 0x28], 4
lea r9d, [rsi + 4]
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rbp + 0x185c], r15d
mov rcx, qword [rbp + 0x1850]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movaps xmm9, xmmword [rsp + 0x1970]
mov al, 1
movaps xmm8, xmmword [rsp + 0x1980]
movaps xmm7, xmmword [rsp + 0x1990]
movaps xmm6, xmmword [rsp + 0x19a0]
mov r14, qword [rsp + 0x19e0]
mov rsi, qword [rsp + 0x19d8]
mov rcx, qword [rbp + 0x1868]
xor rcx, rsp
call fcn.14000c2e0
add rsp, 0x19b0
pop r15
pop rdi
pop rbp
ret