Function at 0x1400773b0
Capabilities:
Delete registry value
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov dword [rsp - 0x1c], ebp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov dword [rsp - 0x14], ebx
nop
jmp 0x140077bfd
movsd xmm0, qword [0x14011b480]
xchg rdx, rbp
movsd qword [rdx - 0x30], xmm0
xchg rdx, rbp
mov eax, dword [0x14011b488]
mov r14, r14
mov dword [rbp - 0x28], eax
jmp 0x140077f24
lea rcx, [rbp - 0x70]
mov dword [rsp - 0x44], 0x46d82f93
call fcn.1400ad210
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
xchg r13, r14
mov qword [rsp + 0x48], r14
jmp 0x140077eb6
mov rbx, rbx
movsx eax, dl
imul ecx, eax, 0x37
jmp 0x1400779c5
xor byte [rbp - 0x10], 0x22
xor byte [rbp - 0x10], 4
xor byte [rbp - 0x10], 0x2e
sub byte [rbp - 0x10], 0x30
add byte [rbp - 0x10], 0x6d
xor byte [rbp - 0x10], 0x7c
mov r12d, r13d
jmp 0x140077998
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
mov dword [rsp - 0xc], 0xaf389b2
movdqa xmm0, xmm1
jmp 0x140077b74
movq xmm2, xmm9
paddw xmm3, xmm2
mov dword [rsp - 0x28], 0x19b01a33
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
jmp 0x140077caf
mov dword [rsp - 0x38], 0x7a820f57
test eax, 0xfffffffd
je 0x140077402
movups xmm0, xmmword [0x14011b440]
xchg rbp, rsi
movups xmmword [rsi - 0x70], xmm0
jmp 0x140077b5f
jge 0x140077c48
movsxd rax, r8d
mov dword [rsp - 0x20], 0x741d9f8c
lea r9, [rbp - 0x70]
lea r9, [r9 + rax*2]
nop dword [rax]
jmp 0x14007756d
mov dword [rsp - 0x20], 0x5cf6206c
lea rcx, [rbp - 0x70]
nop word [rax + rax]
movd xmm2, r8d
xchg r12, r12
pshufd xmm2, xmm2, 0
jmp 0x140077bed
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
mov dword [rsp - 0x24], ebp
movdqa xmm0, xmm2
jmp 0x140077a43
sub rsp, 8
lea rbp, [rax - 0x1c8]
add rsp, 0x65ada53a
sub rsp, 0x65ada7da
movaps xmmword [rax - 0x38], xmm6
xchg r12, rax
jmp 0x140077dce
xor dword [rbp + 0x24], 0x139cd81e
sub dword [rbp + 0x24], 0x2787a638
mov qword [rsp + 0x38], r13
xchg rsi, rsi
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
jmp 0x140077a66
mov dword [rsp - 0xc], edx
lea rdi, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
jmp 0x1400776eb
mov eax, 0x64bb455f
add eax, 0xcaef8d4
sub eax, 0x6948be47
add eax, 0x3f78e9e9
add eax, 0x240283ff
xor eax, 0x36233a1a
sub eax, 0x1406328f
jmp 0x140077758
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
jmp 0x140077512
pxor xmm2, xmm0
mov dword [rsp - 0x38], edx
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
mov rsi, rsi
jmp 0x140077d81
mov rax, qword [rsp + 0x78]
cmp rsi, rax
ja 0x1400780cf
test rsi, rsi
mov dword [rsp - 0x40], esi
jne 0x140078030
jmp 0x1400777ed
sub byte [rsp + 0x60], 0x35
add byte [rsp + 0x60], 0x1f
xor byte [rsp + 0x61], 0x33
xchg r10, r10
jmp 0x140077a09
sub al, 0xd
add al, 0x3f
xor byte [r9], al
jmp 0x140077e5f
movdqa xmm5, xmmword [0x140118390]
movdqa xmm4, xmmword [0x140119620]
mov rsi, rsi
movd xmm6, esi
movdqa xmm7, xmmword [str.7777]
movd xmm8, r14d
movdqa xmm9, xmmword [0x14011a260]
jmp 0x1400774d1
movups xmmword [rdi - 0x60], xmm1
xchg rbp, rdi
movups xmm0, xmmword [0x14011b460]
movups xmmword [rbp - 0x50], xmm0
xchg rbp, rbp
movups xmm1, xmmword [0x14011b470]
movups xmmword [rbp - 0x40], xmm1
jmp 0x1400773cd
mov r12, qword [rbp + 0x10]
xchg r12, rcx
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
mov rcx, rcx
jmp 0x140077e3d
movups xmm0, xmmword [0x14011b400]
xchg rbp, r12
movups xmmword [r12 - 0x50], xmm0
xchg rbp, r12
movups xmm1, xmmword [0x14011b410]
xchg rbp, r12
movups xmmword [r12 - 0x40], xmm1
jmp 0x14007772f
mov qword [rbp + 0x150], rax
mov rsi, rsi
mov rbx, rcx
movups xmm0, xmmword [0x14011b3e0]
xchg rdx, rbp
movups xmmword [rdx - 0x70], xmm0
jmp 0x140077869
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp - 0x44], 0xe45ac1b
xchg r12, rcx
jmp 0x14007765b
movzx eax, word [0x14011b438]
mov dword [rsp - 0x34], esi
mov word [rbp - 0x18], ax
movzx eax, byte [0x14011b43a]
jmp 0x140077c7b
cmovae rdi, rbx
lea r15, [rsp + 0x68]
xchg rdx, rdx
mov r14, qword [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae r15, r14
mov rbx, rbx
jmp 0x1400775c1
mov dword [rsp - 0x1c], ebx
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
mov dword [rsp - 0x30], ebp
punpckhdq xmm0, xmm2
jmp 0x140077447
xchg r12, rbp
movups xmm0, xmmword [0x14011b420]
mov r12, r12
jmp 0x14007791f
mov r10, r10
movzx eax, r8w
sub ax, cx
add ax, 0x32
mov dword [rsp - 0x28], ecx
jmp 0x140077f37
sub eax, 0x406a84aa
imul r8d
sar edx, 1
mov dword [rsp - 0x18], ebp
mov eax, edx
jmp 0x14007776d
shr eax, 0x1d
shr eax, 1
shr eax, 1
add edx, eax
movzx eax, dx
imul ecx, eax, 0x37
jmp 0x140077741
xchg r11, rax
mov r11, rcx
xchg r11, rax
cmp rdx, 0x1000
jb 0x140077e87
jmp 0x140077aaf
movdqa xmm0, xmmword [0x14011a270]
xchg rbx, rbp
movdqa xmmword [rbx + 0x10], xmm0
xchg rbp, rbx
lea rcx, [rbp - 0x6c]
mov edx, dword [rbp + 0x10]
jmp 0x140077cec
movd xmm0, dword [rcx]
pxor xmm2, xmm0
mov dword [rsp - 0x24], esp
jmp 0x140077a91
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x20], ecx
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
jmp 0x140077ac4
xchg r8, rbx
mov r8, r13
xchg r8, rbx
jmp 0x1400780d5
sub byte [rsp + 0x60], 0xd
add byte [rsp + 0x60], 0x4c
sub byte [rsp + 0x60], 0x29
add byte [rsp + 0x60], 0x29
xor byte [rsp + 0x60], 0x1f
jmp 0x1400775e1
xor qword [rbp - 0x80], 0x58d9854e
xor qword [rbp - 0x80], 0x69e1e9e9
add qword [rbp - 0x80], 0x2addd5f4
sub qword [rbp - 0x80], 0x29a3fe06
xor qword [rbp - 0x80], 0x48fe1ae9
lea rax, [rbp + 0x50]
jmp 0x140077eef
add r9, rax
mov dword [rsp - 0x20], 0xb715c0f
mov eax, 0x623272aa
xor eax, 0x125736ff
sub eax, 0x8511c06
jmp 0x140077954
xchg rbp, rdx
movups xmm1, xmmword [0x14011b3f0]
mov dword [rsp - 0x38], 0x531d5740
xchg rsi, rbp
movups xmmword [rsi - 0x60], xmm1
xchg rsi, rbp
jmp 0x140077670
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
mov dword [rsp - 0x38], 0x366495ca
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x140077de4
shr eax, 0x10
shr eax, 1
shr eax, 1
add edx, eax
jmp 0x140077419
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
xchg r14, r14
movq xmm0, qword [rcx]
jmp 0x140077d5b
sar edx, 1
mov eax, edx
shr eax, 3
shr eax, 5
shr eax, 5
jmp 0x1400778b1
cmp r8d, 0x5b
mov rsi, rsi
jge 0x140077e7b
movsxd rax, r8d
lea r9, [rbp - 0x70]
jmp 0x14007784a
xor r9d, 0x4e7d5f0e
xor r8d, r8d
mov dword [rsp - 0x20], 0x5e73928b
lea rdx, [rbp - 0x70]
jmp 0x140077f0d
movups xmmword [rbp - 0x30], xmm0
movsd xmm1, qword [0x14011b430]
movsd qword [rbp - 0x20], xmm1
jmp 0x1400776d0
call fcn.1400b48b0
nop
movzx ecx, word [0x14011b490]
mov word [rsp + 0x60], cx
mov dword [rsp - 0x3c], 0x17748f76
jmp 0x140077c64
xor eax, 0x341a5384
sub eax, 0x2786f29b
sub eax, 0x26d17e4
sub eax, 0x20c46a4e
add eax, 0x41064f41
jmp 0x140077bb7
mov rdi, qword [rbp + 8]
xchg rdi, rdx
cmp rdx, 0x10
mov dword [rsp - 0x34], edx
jmp 0x140077ed7
mov dword [rsp - 0x40], ebp
cmp edi, 2
jl 0x1400774b5
jmp 0x140077604
mov dword [rsp + 0x60], r13d
mov r8, r8
mov rbx, qword [rbp + 0x28]
cmp dword [rbp + 0x20], r13d
jbe 0x140078305
jmp 0x140077aff
pshuflw xmm0, xmm2, 0xd8
mov r14, r14
pshufhw xmm1, xmm0, 0xd8
jmp 0x140077fc0
movzx eax, r8b
mov rbp, rbp
sub al, cl
jmp 0x1400775f8
mov qword [rsp + 0x30], rbp
xchg rbp, r13
mov qword [rsp + 0x28], r13
mov r8, r8
mov qword [rsp + 0x20], r13
jmp 0x1400776b8
punpckldq xmm1, xmm3
xchg rdi, rdi
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
mov r11, r11
jmp 0x14007788a
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x28]
mov dword [rsp - 0x44], 0x7e11b369
call fcn.1400766e0
nop
xchg rdx, rdi
jmp 0x140077972
mov dword [rsp - 0x18], esp
mov edi, dword [0x1402557d0]
cmp edi, 2
jl 0x1400778f8
jmp 0x140077b8a
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x10], ecx
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
jmp 0x140077d41
mov qword [rsp + 0x20], r13
mov r9, r9
lea r9, [rbp + 0x24]
jmp 0x140077fac
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
mov dword [rsp - 0x2c], 0x34a29a52
jmp 0x1400777ca
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
mov rsp, rsp
cmp r8d, 0x58
jl 0x140077cf9
jmp 0x1400778eb
mov dword [rsp - 0x28], edx
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
jmp 0x140077cd1
paddd xmm0, xmm1
xchg rbp, rbp
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x24], esp
pshufhw xmm1, xmm0, 0xd8
jmp 0x1400778bf
xchg r15, rax
movaps xmmword [r15 - 0x68], xmm9
xchg r15, rax
mov rax, qword [0x1402557f0]
xor rax, rsp
jmp 0x140077698
mov rsi, qword [rbp + 0x38]
xchg r12, r12
nop dword [rax + rax]
mov dword [rbp + 0x24], 0x6f730e3b
sub dword [rbp + 0x24], 0x2c6d181e
add dword [rbp + 0x24], 0x299255a4
sub dword [rbp + 0x24], 0x5bb236c2
jmp 0x140077e03
xor rcx, 0x469af45d
sub rcx, 0x1eee55b2
add rcx, 0x186ca8d9
add rcx, 0x7fffffff
sub rcx, 0x72686d17
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jmp 0x140077c17
xchg rsi, rbp
movups xmm1, xmmword [0x14011b450]
xchg r13, r13
xchg rdi, rbp
jmp 0x140077636
psrld xmm0, xmm8
paddd xmm0, xmm1
xchg r13, r13
pmulld xmm0, xmm7
jmp 0x140077e1d
xchg rsp, rsp
movdqa xmm5, xmmword [0x140118390]
movdqa xmm4, xmmword [0x140119620]
movd xmm6, esi
movdqa xmm7, xmmword [str.7777]
mov dword [rsp - 0x44], ebp
movd xmm8, r14d
jmp 0x14007779a
sub eax, 0x490d35aa
imul r8d
mov dword [rsp - 0x28], 0x30682cd4
jmp 0x1400778d9
add r9d, 0x4d589a1
add r9d, 0x50c36f8
add r9d, 0x6dad415
sub r9d, 0xa3d1905
jmp 0x140077904
paddd xmm2, xmm5
movdqa xmm1, xmm2
xchg r9, r9
jmp 0x140077a77
mov qword [rsp - 8], rbp
sub rsp, 8
push r12
mov r15, r15
push r13
nop
sub rsp, 8
jmp 0x140077595
xchg rbx, rbx
jne 0x140078103
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
mov dword [rsp - 0x24], 0x49d2e326
jb 0x140077f50
xchg rdx, rcx
jmp 0x140077f4a
cmp r8d, 0x27
jl 0x14007756d
mov edx, r10d
jmp 0x1400773f1
mov qword [rbp], rdx
xchg rdx, r13
mov qword [rbp + 8], 0x4dc23f27
jmp 0x140077f62
cmp byte [0x14011b491], 0
je 0x140077a09
mov byte [rsp + 0x60], 0x2e
jmp 0x1400777fb
mov byte [rbp - 0x16], al
xchg r10, r10
xor r13d, r13d
mov r8d, r13d
lea esi, [r13 + 1]
lea r14d, [r13 + 0x1f]
jmp 0x140077a2b
xchg r9, rax
mov qword [rsp + 0x20], r9
xchg r9, rax
mov r9d, 0x4832abf
add r9d, 0x436fb8c9
jmp 0x140077bcc
mov r11, r11
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x1400774e6
mov dword [rsp - 0x20], esp
cmp r8d, 0x27
jmp 0x1400774af
sub rax, 0xffffffffc90488a7
add rax, 0xffffffffc904889f
cmp rax, 0x1f
ja 0x1400783b4
jmp 0x140077e84
mov dword [rsp - 0x18], esp
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
mov dword [rsp - 0x2c], 0x592077cd
paddd xmm2, xmm5
jmp 0x1400774f8
xor qword [rbp + 8], 0x3cbd2f3b
xor qword [rbp + 8], 0x7780324e
add qword [rbp + 8], 0x49b6597b
sub qword [rbp + 8], 0x70b95ec2
mov byte [rbp - 0x10], 0x36
xor byte [rbp - 0x10], 1
jmp 0x140077427
paddd xmm0, xmm1
mov dword [rsp - 0x20], 0x567ab32e
pmulld xmm0, xmm7
psubd xmm2, xmm0
jmp 0x1400779b3
pxor xmm3, xmm0
movq qword [rcx], xmm3
mov dword [rsp - 0x2c], 0x5faa62f3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
jmp 0x14007770d
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
jmp 0x1400779ed
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x68]
call fcn.140019590
jmp 0x14007755b
sub r8, 0x5685579f
xor r8, 0x5f5686a2
sub r8, 0x57dd9b97
add r8, 0x337e6702
sub r8, 0x1676a011
jmp 0x14007800c
movaps xmmword [r12 - 0x48], xmm7
xchg r12, rax
xchg rbp, rax
movaps xmmword [rbp - 0x58], xmm8
xchg rbp, rax
jmp 0x140077ae7
mov dword [rsp - 0x40], ebx
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
mov rcx, rcx
pshufhw xmm1, xmm0, 0xd8
jmp 0x140077feb
add dword [rbp + 0x24], 0x4625d7c4
sub dword [rbp + 0x24], 0x298c006a
xor dword [rbp + 0x24], 0x19649370
jmp 0x140077536
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x20], 0x2efb851d
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
jmp 0x140077465
test eax, eax
jne 0x1400782e6
xchg rdx, r14
mov r14, rbx
xchg r14, rdx
lea rcx, [rbp - 0x10]
mov dword [rsp - 0x3c], 0x573b12f7
jmp 0x140077935
mov r10, r10
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x5b
mov dword [rsp - 0x1c], 0x34b12cdf
jl 0x140077855
lea rax, [rbp + 0x10]
jmp 0x140077c94
xchg rbp, rbp
call fcn.1400e8bd0
xchg r13, rdx
jmp 0x140077c50
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
mov rdi, rdi
jne 0x14007808f
xchg rcx, r13
mov qword [rsp + 0x68], rcx
jmp 0x140077f7f
xchg r13, r14
mov qword [rsp + 0x40], r13
mov dword [rsp - 0x1c], 0x7879061c
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
xchg r13, rbp
jmp 0x1400779d3
jb 0x140077e8c
inc rdx
xchg rcx, rdi
mov rdi, qword [rbp - 0x10]
xchg rdi, rcx
jmp 0x140077781
nop
movabs r8, 0xffffffff3e4fae5d
xor r8, 0xbc63cbc
add r8, 0x249fa199
jmp 0x140077da6
nop
movabs rcx, 0xffffffff5dae19eb
xor rcx, 0x63def444
jmp 0x140077b2f
movzx eax, word [0x14011b48c]
mov word [rbp - 0x24], ax
mov r8d, r13d
jmp 0x140077986
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
xchg r11, r11
jmp 0x140077c3e
mov rcx, qword [rbx]
xchg rdx, rcx
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov r10d, eax
jmp 0x140077489
xor qword [rbp + 8], 0x6edf7c68
add qword [rbp + 8], 0x26dab513
add qword [rbp + 8], 0x22461fc1
jmp 0x140077d14
xchg rcx, r13
mov qword [rsp + 0x78], r13
mov dword [rsp - 0x40], 0x9248a97
mov qword [rbp - 0x80], 0x749d0465
sub qword [rbp - 0x80], 0x3eb03fc3
add qword [rbp - 0x80], 0x410f69bd
jmp 0x140077819
lea r8, [rbp + 0x50]
mov edx, r12d
mov dword [rsp - 0x3c], 0x7e462584
jmp 0x140077e94
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401183d0]
packuswb xmm2, xmm2
mov dword [rsp - 0xc], 0x23beac65
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
jmp 0x1400775a4
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401183d0]
packuswb xmm2, xmm2
mov r11, r11
movd xmm0, edx
paddb xmm2, xmm0
jmp 0x1400777b9
add r8, 0x7fffffff
add r8, 0x5de07a2d
inc r8
cmp byte [rax + r8], 0
mov rdx, rdx
jne 0x14007801a
jmp 0x140077d93
sub rax, rsi
lea r12, [rax + r15]
movsx r13d, byte [rdi]
mov r10, r10
lea r8, [r12 + 1]
jmp 0x1400781f4
add rdx, 0xffffffffffffffd9
neg rdx
mov r14, qword [r14 - 8]
mov dword [rsp - 0x3c], 0x39f233c7
sub rax, r14
add rax, 0xfffffffffffffff8
jmp 0x1400781bf
mov r14, qword [rbp + 0x40]
xchg r14, rax
cmp rax, 0x10
mov rdi, rdi
jb 0x1400782e6
lea rdx, [rax + 1]
xchg rsp, rax
jmp 0x14007824d
xchg rbx, rsi
mov rsi, qword [rbp + 0x28]
xchg rbx, rsi
inc r12d
mov r13, r13
jmp 0x1400782ee
mov dword [rsp - 0x20], 0x27408805
test eax, eax
je 0x14007839b
inc rbx
lea r8, [r12 + 1]
mov dword [rsp - 0x38], ebp
jmp 0x14007828a
test rax, rax
mov r8, r8
jne 0x14007837d
mov r12d, dword [rsp + 0x60]
xor r13d, r13d
nop
jmp 0x1400781d7
mov rax, qword [rbp - 0x80]
mov dword [rsp - 0x1c], ebp
cmp rax, 0x10
jb 0x140078351
lea rdx, [rax + 1]
mov dword [rsp - 0x24], 0x55fb847b
xchg rdi, r14
jmp 0x140078267
mov dword [rsp - 0x1c], 0x2d2d559b
xchg r8, rcx
mov r8, qword [rbp + 0x150]
xchg r8, rcx
xor rcx, rsp
mov dword [rsp - 0x34], 0x57fa0859
call fcn.1400e8cf0
jmp 0x14007819e
xchg rdi, r14
mov rcx, rdi
xchg rdi, r14
jmp 0x140078344
call fcn.1400eba70
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
test rax, rax
jmp 0x14007836a
xor rbx, 0xbc5c394
sub rbx, 0x2afa6a25
sub rbx, 0x511a1bb
add rbx, 0x4e8ee5fc
add rbx, 0x7fffffff
xor rbx, 0x712be34
jmp 0x1400780d5
movaps xmm7, xmmword [r10 - 0x20]
xchg r10, r11
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
jmp 0x14007822b
add rsp, 8
pop r14
pop r13
xchg rbp, rbp
nop
jmp 0x14007823b
lea r11, [rsp + 0x2a0]
xchg rbx, r15
mov r15, qword [r11 + 0x38]
xchg r15, rbx
xchg r13, rsi
mov r13, qword [r11 + 0x40]
xchg rsi, r13
jmp 0x14007830c
cmp rax, 0x1f
ja 0x1400783ae
mov r15, r15
jmp 0x140078125
mov rbp, qword [rsp - 8]
ret
movabs rbx, 0xffffffff18d2d785
add rbx, 0x4e22768e
xor rbx, 0x375aea37
jmp 0x140078147
sub r8, r15
mov edx, r13d
xchg rsp, rsp
mov rcx, r15
jmp 0x140078133
mov rsp, qword [rbp + 0x10]
xchg rsp, rcx
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov rbp, rbp
jmp 0x140078085
xchg rdi, rdx
mov rdi, rdx
xchg rdi, rdx
xchg rdi, rcx
jmp 0x14007838b
xchg rsi, rsi
mov rsp, r11
nop
mov r15, qword [rsp]
jmp 0x14007818d
mov r12, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp 0x1400781d1
mov rsp, rbx
xchg rsp, rax
cmp rdx, 0x1000
jb 0x1400782d6
mov r10, r10
jmp 0x14007832a
mov rax, rdi
xchg rdi, r14
cmp rdx, 0x1000
jb 0x140078125
mov dword [rsp - 0x40], 0x11e65fff
neg rdx
jmp 0x140078048
sub r8, rbx
mov edx, r13d
xchg rbx, rcx
mov rbx, rcx
jmp 0x14007829b
xchg rbx, rcx
call fcn.1400eba70
xchg r15, r15
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
jmp 0x1400780bb
mov rdx, qword [rbp + 0x10]
xchg rcx, rdx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400780fb
mov dword [rsp - 0x38], 0x45222da9
cmp rax, 0x1f
ja 0x1400783c3
mov rcx, rbx
call fcn.1400e8bd0
mov dword [rsp - 0x34], 0x6dbcb91c
xchg rdx, rcx
jmp 0x1400782b2
mov dword [rsp + 0x60], r12d
cmp r12d, dword [rbp + 0x20]
jb 0x140077b0e
mov dword [rsp - 0x38], 0x599bdabd
xchg r14, rax
jmp 0x140078067
xchg r10, rdi
mov r10, qword [r11 + 0x48]
xchg r10, rdi
xchg r12, r11
movaps xmm6, xmmword [r12 - 0x10]
xchg r12, r11
xchg r11, r10
jmp 0x140078176
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rbx, qword [rbx - 8]
sub rax, rbx
sub rax, 8
jmp 0x1400782c4
call fcn.1400e8bd0
mov dword [rsp - 0x20], 0x2b6e5769
cmp rbx, 0xffffffffffffffff
je 0x140078085
lea rdx, [rbp + 0x50]
mov rdx, rdx
xchg rsp, rcx
jmp 0x140078205
mov dword [rsp - 0x38], ebp
je 0x1400780c7
nop word [rax + rax]
xchg r8, rbp
mov rbp, rsi
xchg rbp, r8
jmp 0x14007821a
mov rdi, rbx
xchg rdi, rcx
call fcn.1400eb990
jmp 0x14007809a
sub rbx, r15
mov r12d, dword [rsp + 0x60]
xchg r9, r9
xor r13d, r13d
jmp 0x1400780d5
call fcn.1400ef88c
int3
call fcn.1400ef88c
mov dword [rsp - 0x20], esp
nop
jmp 0x1400783c3
call fcn.1400ef88c
int3