Function at 0x14010e68b
Capabilities:
Execute anti-debugging instructions
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push r15
inc r9b
push r14
push r12
or r10b, 0xff
push rsi
rcr r9b, 0x9c
setns r10b
push rdi
push rbp
bt r8, rbp
push rbx
sbb al, 0x98
lahf
sub rsp, 0x1e0
add eax, 0xf6b8e0e5
lahf
rcl eax, 0
movaps xmmword [rsp + 0x1d0], xmm6
mov rsi, rdx
and dh, 0x46
ror ecx, cl
mov rax, qword [0x1400f5980]
xor rax, rsp
movzx r9d, r9w
movsx ecx, r15w
mov qword [rsp + 0x1c8], rax
cmovle ecx, r10d
cwd
xorps xmm6, xmm6
cwde
rdtsc
movaps xmmword [rsp + 0x180], xmm6
not eax
lahf
movaps xmmword [rsp + 0x170], xmm6
movaps xmmword [rsp + 0x160], xmm6
cdq
movaps xmmword [rsp + 0x150], xmm6
xchg dh, ah
bswap r8d
cwde
movaps xmmword [rsp + 0x140], xmm6
bswap r10w
movsx r10w, cl
jmp 0x14010e731
movaps xmmword [rsp + 0x130], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
cdqe
movsx ecx, r9w
movaps xmmword [rsp + 0x100], xmm6
rdtsc
not edx
movaps xmmword [rsp + 0xf0], xmm6
mov r9w, sp
movaps xmmword [rsp + 0xe0], xmm6
cwde
cdqe
movaps xmmword [rsp + 0xd0], xmm6
setne ch
movaps xmmword [rsp + 0xc0], xmm6
cdqe
lahf
movaps xmmword [rsp + 0xb0], xmm6
mov r10d, ebx
movaps xmmword [rsp + 0xa0], xmm6
bswap r10w
setno ah
movaps xmmword [rsp + 0x90], xmm6
mov r9b, r8b
movsx rax, r12w
mov dword [rsp + 0x3c], 0x100
movzx rax, dx
movabs rax, 0xb468f40c981b642d
movsxd rcx, esi
mov qword [rsp + 0x70], rax
movzx r8, r13w
movabs rax, 0x6f51f0b76763ad5c
movsx r8, r12w
jmp 0x14010e7ea
mov qword [rsp + 0x78], rax
bswap r8
cmovge cx, r14w
movabs rax, 0xc49f434bef2e6e46
bswap r8w
cqo
movsx r10, r13w
mov qword [rsp + 0x80], rax
movabs rcx, 0x6a1276842f306300
jmp 0x14010e826
mov qword [rsp + 0x88], rcx
xchg r10b, r10b
cqo
cwde
movabs rdx, 0xdb1b8769fb74167d
cdqe
mov qword [rsp + 0x190], rdx
movzx r9, sp
movsx ax, dil
movzx r9d, sp
movabs r8, 0x1d25a3d20a02e32e
mov qword [rsp + 0x198], r8
movsx r9, bx
mov r10w, bx
movabs r9, 0xc49f434bef49002f
mov qword [rsp + 0x1a0], r9
movzx r10w, r11b
cmovo eax, ebp
mov r10b, 0xd
mov qword [rsp + 0x1a8], rcx
mov ah, 0x75
lea rax, [rsp + 0x190]
cmovne r10w, cx
xchg r10b, r10b
setl r10b
mov r10, rax
jmp 0x14010e8b3
movups xmm0, xmmword [r10]
jmp 0x14010e8bc
xorps xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x14010e8cb
movups xmm0, xmmword [r10 + 0x10]
setae r10b
movsxd r10, esi
xchg r10, r10
xorps xmm0, xmmword [rsp + 0x80]
movzx r10d, r14w
mov r10w, r10w
movaps xmmword [rsp + 0x80], xmm0
movsxd r10, r14d
cmove r10w, di
xchg r10b, r10b
movabs r10, 0x9e49c63ebf265735
mov qword [rsp + 0x40], r10
movzx r10w, r9b
mov r10b, 0x51
movabs r10, 0x4d6cf1915947a772
jmp 0x14010e923
mov qword [rsp + 0x48], r10
setno r10b
jmp 0x14010e934
movabs r10, 0xb7e61017a106497b
mov qword [rsp + 0x50], r10
movsx r10w, dl
movabs r10, 0x1e7c13c7735d0674
mov qword [rsp + 0x58], r10
mov r10b, 0x4c
movabs r10, 0xdcd1772f4e0182f3
mov qword [rsp + 0x60], r10
mov r10b, al
mov r10b, 0xec
movabs r10, 0x6b78f91ae7be8421
jmp 0x14010e97e
mov qword [rsp + 0x68], r10
jmp 0x14010e988
mov qword [rsp + 0x190], rdx
mov edx, 0x1c3b9324
movzx rdx, r14w
mov qword [rsp + 0x198], r8
movzx r8d, r14w
cmovb r8w, sp
mov qword [rsp + 0x1a0], r9
mov qword [rsp + 0x1a8], rcx
movsx dx, bl
jmp 0x14010e9c7
movabs rcx, 0xb9b2185d1e6de381
movsxd rdx, r13d
mov qword [rsp + 0x1b0], rcx
xchg r8w, r9w
movabs rcx, 0x6b78c94695d1f752
cwd
mov r9, rbp
mov qword [rsp + 0x1b8], rcx
movups xmm0, xmmword [rax]
not r9w
setge r8b
xorps xmm0, xmmword [rsp + 0x40]
xchg cl, ch
movaps xmmword [rsp + 0x40], xmm0
jmp 0x14010ea19
movups xmm0, xmmword [rax + 0x10]
setb r8b
movsx rdx, ax
bswap dx
xorps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm0
movsx r9w, dil
setle ch
movups xmm0, xmmword [rax + 0x20]
lahf
cdqe
xorps xmm0, xmmword [rsp + 0x60]
bswap cx
movzx dx, sil
movaps xmmword [rsp + 0x60], xmm0
movsx r9w, al
movsxd rdx, esi
lea rax, [rsp + 0x3c]
movsx r8d, bp
movsxd r9, edx
mov qword [rsp + 0x30], rax
movsx r9, bx
mov ax, sp
lea rax, [rsp + 0x90]
not r9d
mov rdx, rcx
movsxd r9, r12d
mov qword [rsp + 0x28], rax
cdq
mov qword [rsp + 0x20], 0
cmovne dx, r13w
lea rdx, [rsp + 0x40]
movsxd r8, r12d
lea r8, [rsp + 0x70]
bswap r9
cmovb cx, sp
movsx r9w, r15b
mov rcx, 0xffffffff80000002
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jmp 0x14010eacb
je 0x14010ec84
mov ecx, 0x30
jmp 0x14010eadb
call fcn.14009ad20
mov rdi, rax
movzx rdx, di
bts r10d, r11d
sub r11b, 0xbe
mov eax, 0x80000002
rcl dl, cl
ror dl, 0xcb
sub ecx, ecx
xchg rbx, r14
shl bl, cl
cpuid
xchg rbx, r14
sbb bp, 0xe5fd
mov r8d, ecx
jmp 0x14010eb12
mov r9d, edx
neg r11b
shl r11, 0x6f
bswap r10d
mov r10d, eax
ror dx, cl
sub ecx, ecx
mov dx, 0xaec9
cbw
bswap rax
mov eax, 0x80000003
bswap bp
xchg rbx, r15
bswap dx
movzx edx, r9w
movsxd rdx, r14d
cpuid
movzx r11w, r9b
jmp 0x14010eb55
xchg rbx, r15
movzx rbx, di
movsxd rbp, ecx
mov r11w, r12w
mov r11d, ecx
mov ebx, edx
cmovbe ecx, ebx
movzx rcx, r8w
setbe bpl
mov ebp, eax
setne cl
mov eax, 0x80000004
mov dh, 0x93
mov ecx, 0
xchg rbx, r12
not bh
cqo
movzx ebx, r14w
cpuid
jmp 0x14010eb97
xchg rbx, r12
jmp 0x14010eb9f
mov dword [rdi], r10d
jmp 0x14010eba7
mov dword [rdi + 4], r14d
jmp 0x14010ebb0
mov dword [rdi + 8], r8d
jmp 0x14010ebb9
mov dword [rdi + 0xc], r9d
jmp 0x14010ebc2
mov dword [rdi + 0x10], ebp
jmp 0x14010ebca
mov dword [rdi + 0x14], r15d
mov dword [rdi + 0x18], r11d
jmp 0x14010ebd7
mov dword [rdi + 0x1c], ebx
mov dword [rdi + 0x20], eax
jmp 0x14010ebe2
mov dword [rdi + 0x24], r12d
mov dword [rdi + 0x28], ecx
cmovo ecx, r10d
xchg cx, cx
jmp 0x14010ebf5
mov dword [rdi + 0x2c], edx
xchg ch, cl
mov ecx, r11d
movups xmmword [rsi], xmm6
movsx cx, r14b
not ecx
movups xmmword [rsi + 0x10], xmm6
cmovo rcx, r10
mov ecx, 0xfa365381
mov rcx, rdi
jmp 0x14010ec1c
call fcn.1400af490
test rax, rax
jmp 0x14010ec29
js 0x14010ef1a
mov rbx, rax
cmp r9b, cl
cmp rax, 0xf
jmp 0x14010ec3e
ja 0x14010ed10
mov qword [rsi + 0x10], rbx
movzx dx, spl
mov qword [rsi + 0x18], recvfrom
movsx rdx, di
movsx cx, r13b
mov r8, 0xffffffffabb89473
mov rcx, rsi
movsx r8, bp
cdq
movzx dx, cl
mov rdx, rdi
mov r8, rbx
call fcn.1400ca7f0
add rbx, rsi
jmp 0x14010ee20
movups xmmword [rsi + 0x10], xmm6
movzx ecx, r10w
movups xmmword [rsi], xmm6
cmovle rcx, r9
lea rcx, [rsp + 0x90]
jmp 0x14010eca0
call fcn.1400af490
test rax, rax
jmp 0x14010ecad
js 0x14010ef1a
mov rdi, rax
cmp rax, 0xf
jmp 0x14010ecbf
ja 0x14010ed6f
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], recvfrom
cmovae r8w, r10w
movsx ecx, ax
mov r8, rsp
lea rdx, [rsp + 0x90]
movsx ecx, r9w
movsx r8w, r10b
mov rcx, rsi
movsxd r8, ebp
movsx r8, di
mov r8w, r15w
mov r8, rdi
jmp 0x14010ed03
call fcn.1400ca7f0
add rdi, rsi
jmp 0x14010ee8d
mov rax, rbx
mov r15b, al
mov r15w, 0xd46c
or rax, 0xf
sbb r15b, bl
sar r15w, 0x37
cmp rax, 0x17
mov r15d, 0x16
cmovae r15, rax
stc
test bpl, r15b
cmp r15, 0xfff
jmp 0x14010ed45
jb 0x14010edcf
lea rcx, [r15 + 0x28]
call fcn.14009ad20
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
jmp 0x14010ed61
mov qword [r14 - 8], rax
jmp 0x14010ed6a
jmp 0x14010ede0
mov rax, rdi
stc
or rax, 0xf
xor r14b, 0x77
cmp rax, 0x17
mov r14d, 0x16
jmp 0x14010ed8a
cmovae r14, rax
stc
cmp r14, 0xfff
jmp 0x14010ed9b
jb 0x14010ee46
lea rcx, [r14 + 0x28]
jmp 0x14010edaa
call fcn.14009ad20
lea rbx, [rax + 0x27]
jmp 0x14010edb8
and rbx, 0xffffffffffffffe0
jmp 0x14010edc1
mov qword [rbx - 8], rax
jmp 0x14010edca
jmp 0x14010ee57
lea rcx, [r15 + 1]
jmp 0x14010edd8
call fcn.14009ad20
mov r14, rax
mov qword [rsi], r14
mov rcx, r8
movzx r8d, r15w
not r8w
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], r15
movzx rcx, dx
not cx
mov rcx, r14
cwd
movsx r8, r13w
mov rdx, rdi
xchg r8b, r8b
mov r8w, r12w
mov r8, rbx
jmp 0x14010ee18
call fcn.1400ca7f0
add rbx, r14
mov byte [rbx], 0
movzx rcx, ax
mov edx, 0x30
cmovg ecx, r14d
movsx rcx, sp
jmp 0x14010ee39
mov rcx, rdi
call fcn.14009ad64
jmp 0x14010ee99
lea rcx, [r14 + 1]
jmp 0x14010ee4f
call fcn.14009ad20
mov rbx, rax
mov qword [rsi], rbx
cdq
mov qword [rsi + 0x10], rdi
mov edx, r14d
mov qword [rsi + 0x18], r14
lea rdx, [rsp + 0x90]
mov rcx, rbx
xchg r8b, r8b
movsx r8w, dil
movsxd r8, edi
mov r8, rdi
jmp 0x14010ee84
call fcn.1400ca7f0
lea rdi, [rdi + rbx]
mov byte [rdi], 0
adc ch, 0x3d
bswap cx
adc cx, dx
mov rcx, qword [rsp + 0x1c8]
cmp esi, 0xb114ae55
jmp 0x14010eeaf
xor rcx, rsp
jmp 0x14010eeb7
call fcn.14009adb0
mov rax, rsi
add di, 0x906
movaps xmm6, xmmword [rsp + 0x1d0]
cmp r13, rsi
jmp 0x14010eed4
add rsp, 0x1e0
movsx rdi, ax
seta sil
pop rbx
movzx bp, sil
movzx esi, cx
pop rbp
bswap di
movsx r15, sp
movzx r15d, r15w
pop rdi
pop rsi
pop r12
bswap r15w
not r15b
pop r14
jmp 0x14010ef12
pop r15
jmp 0x14010ef19
ret
call fcn.140002dd0
nop
jmp 0x1400027b0