Function at 0x53a220
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x160
mov eax, dword [0x75868c]
xor eax, ebp
mov dword [ebp - 4], eax
movups xmm0, xmmword [str.jchhxsc]
mov ax, word [0x709730]
xor ecx, ecx
cmp dword [0x7a6ba4], 2
movups xmmword [ebp - 0x154], xmm0
mov word [ebp - 0x124], ax
movups xmm0, xmmword [0x709710]
mov al, byte [0x709732]
mov byte [ebp - 0x122], al
movups xmmword [ebp - 0x144], xmm0
movups xmm0, xmmword [0x709720]
movups xmmword [ebp - 0x134], xmm0
jl 0x53a3e0
movaps xmm0, xmmword [0x70b6b0]
mov eax, 4
movaps xmm4, xmmword [0x70b600]
movaps xmm3, xmmword [0x70b770]
movaps xmm6, xmmword [0x70b630]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x120], xmm0
mov edx, dword [ebp - 0x120]
movd xmm7, eax
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x70b680]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x154]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + ecx - 0x154], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x70b680]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x150]
pxor xmm1, xmm0
movd dword [ebp + ecx - 0x150], xmm1
add ecx, 8
cmp ecx, 0x30
jl 0x53a2d2
cmp ecx, 0x33
jge 0x53a40b
nop word [eax + eax]
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, cl
movsx eax, al
imul eax, eax, 0x32
sub dl, al
add dl, 0x39
xor byte [ebp + ecx - 0x154], dl
inc ecx
cmp ecx, 0x33
jl 0x53a3e0
lea eax, [ebp - 0x15c]
push eax
push 0x20119
push 0
lea eax, [ebp - 0x154]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x53a4e5
movq xmm0, qword [str.qUHHS_R_A]
xor edx, edx
mov al, byte [0x7096f4]
mov dword [ebp - 0x160], 0x100
movq qword [ebp - 0x11c], xmm0
mov byte [ebp - 0x114], al
mov dword [ebp - 0x158], edx
mov eax, 0x51eb851f
mul edx
shr edx, 4
movsx eax, dl
mov edx, dword [ebp - 0x158]
mov cl, dl
imul eax, eax, 0x32
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x11c], cl
inc edx
mov dword [ebp - 0x158], edx
cmp edx, 9
jl 0x53a460
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x108]
push eax
push 0
push 0
lea eax, [ebp - 0x11c]
push eax
push dword [ebp - 0x15c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x53a4e5
push dword [ebp - 0x15c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x108]
push eax
call fcn.0065c345
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00617a25
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 4]
mov eax, 0x6eed93
xor ecx, ebp
call fcn.00617a25
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret