Function at 0x140002cb0
Capabilities:
Encode data using xor
Set registry value

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xb0
mov rax, qword [0x140020010]
xor rax, rsp
mov qword [rbp + 0x3f], rax
movups xmm3, xmmword [str.kvoklz]
xor r9d, r9d
mov eax, dword [0x14001a4b8]
movsd xmm0, qword [0x14001a4b0]
cmp word [0x14001a4ba], r9w
movups xmmword [rbp + 0x17], xmm3
mov dword [rbp + 0x2f], eax
movsd qword [rbp + 0x27], xmm0
je 0x140002e53
cmp dword [0x140020020], 2
mov ecx, r9d
jl 0x140002e0d
movdqa xmm2, xmmword [0x14001a540]
mov eax, 5
movdqa xmm4, xmmword [0x14001a600]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov ecx, 8
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movaps xmmword [r11 - 0x18], xmm6
movd xmm6, eax
mov eax, 0x1f
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, eax
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14001a560]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movq xmm1, xmm3
movdqa xmm3, xmmword [0x14001a550]
paddw xmm2, xmmword [str.88888888]
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movq qword [rbp + 0x17], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movaps xmm6, xmmword [r11 - 0x18]
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14001a560]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp + 0x1f]
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.88888888]
xorps xmm2, xmm0
movq qword [rbp + 0x1f], xmm2
movsxd rax, ecx
lea r8, [rbp + 0x17]
lea r8, [r8 + rax*2]
nop dword [rax + rax]
mov eax, 0x8fb823ef
lea r8, [r8 + 2]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x39
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x38
xor word [r8 - 2], ax
cmp ecx, 0xe
jl 0x140002e20
movzx eax, word [0x14001a4c8]
lea rdx, [rbp + 0x17]
movsd xmm0, qword [str.XNZ_]
xor ax, 0x3c
movsd qword [rbp + 7], xmm0
mov ecx, 0x44
movsd xmm0, qword [str.LKO_]
xor r8d, r8d
xor word [rbp + 9], 0x39
xor word [rbp + 0xb], 0x3a
xor word [rbp + 0xd], 0x3b
mov qword [rsp + 0x40], r9
movsd qword [rbp - 9], xmm0
xor word [rbp - 7], 0x39
xor word [rbp - 5], 0x3a
xor word [rbp - 3], 0x3b
mov word [rbp + 0xf], ax
movzx eax, word [0x14001a480]
xor ax, 0x3c
mov word [rbp + 7], cx
mov word [rbp - 1], ax
mov ecx, 0x74
lea rax, [rbp + 0x37]
mov word [rbp - 9], cx
mov qword [rsp + 0x38], rax
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x30], r9
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x140002f36
lea rcx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, qword [rbp + 0x37]
lea rdx, [rbp + 7]
mov r9d, 1
xor r8d, r8d
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x37]
test eax, eax
je 0x140002f3a
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x140002f42
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140015af0
add rsp, 0xb0
pop rbp
ret