Function at 0x1400b3c30
Capabilities:
Encode data using xor
Set registry value

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xe0
movups xmm0, xmmword [str.eXMMZNXbr__0_7_3]
xor r9d, r9d
cmp dword [reloc.WS2_32.dll_accept], 2
mov ecx, r9d
movups xmm1, xmmword [0x14037cb00]
mov eax, dword [0x14037cb40]
movups xmmword [rbp - 0x27], xmm0
mov qword [rbp + 0x6f], r9
movups xmm0, xmmword [0x14037cb10]
movups xmmword [rbp - 7], xmm0
mov dword [rbp + 0x29], eax
movups xmm0, xmmword [0x14037cb30]
movups xmmword [rbp - 0x17], xmm1
movups xmm1, xmmword [0x14037cb20]
movups xmmword [rbp + 0x19], xmm0
movups xmmword [rbp + 9], xmm1
jl 0x1400b3dd4
movdqa xmm5, xmmword [0x140379a20]
lea rdx, [rbp - 0x27]
movdqa xmm4, xmmword [0x140380750]
movaps xmmword [r11 - 0x18], xmm6
movdqa xmm6, xmmword [str.::::HKRC_NGO]
movaps xmmword [r11 - 0x28], xmm7
movdqa xmm7, xmmword [str.66666666]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 0x10]
paddd xmm2, xmm5
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rdx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rdx - 8], xmm3
cmp ecx, 0x28
jl 0x1400b3cd0
movaps xmm7, xmmword [rsp + 0xc0]
movaps xmm6, xmmword [rsp + 0xd0]
cmp ecx, 0x2a
jge 0x1400b3e13
movsxd rax, ecx
lea r8, [rbp - 0x27]
lea r8, [r8 + rax*2]
nop
mov eax, 0x8d3dcb09
lea r8, [r8 + 2]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x3a
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x36
xor word [r8 - 2], ax
cmp ecx, 0x2a
jl 0x1400b3de0
movzx eax, word [0x14037cb58]
mov ecx, 0x53
movups xmm0, xmmword [str.eVPIOYO_]
xor ax, 0x3e
mov word [rbp - 0x29], ax
mov eax, dword [0x14037cb5c]
movups xmmword [rbp - 0x39], xmm0
xor word [rbp - 0x37], 0x37
xor word [rbp - 0x35], 0x38
xor word [rbp - 0x33], 0x39
xor word [rbp - 0x31], 0x3a
xor word [rbp - 0x2f], 0x3b
xor word [rbp - 0x2d], 0x3c
xor word [rbp - 0x2b], 0x3d
cmp word [0x14037cb5e], r9w
mov word [rbp - 0x39], cx
mov dword [rbp + 0x67], eax
je 0x1400b3e7a
xor word [rbp + 0x69], 0x37
mov eax, 0x30
mov word [rbp + 0x67], ax
mov qword [rsp + 0x40], r9
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x27]
mov qword [rsp + 0x30], r9
xor r8d, r8d
mov dword [rsp + 0x28], 0x20006
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x20], r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400b3f01
lea rcx, [rbp + 0x67]
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp word [rcx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x1400b3ec0
mov rcx, qword [rbp + 0x6f]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
lea rdx, [rbp - 0x39]
lea rax, [rbp + 0x67]
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x6f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
add rsp, 0xe0
pop rbp
ret