Function at 0x1400d1b90
Capabilities:
Persist via run registry key

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2d0
movaps xmmword [rsp + 0x2c0], xmm6
mov rdx, rcx
mov rax, qword [0x14026c040]
xor rax, rsp
mov qword [rsp + 0x2b8], rax
movaps xmm6, xmmword [0x14023d9f0]
lea rbx, [rsp + 0xf0]
movaps xmmword [rbx + 0x40], xmm6
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
lea r14, [rsp + 0x140]
mov rcx, r14
call fcn.1400d0460
mov rcx, rbx
mov rdx, r14
call fcn.1400e6e70
mov rcx, r14
call fcn.14013e3c0
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
call fcn.1400d00e0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x2a0], xmm0
mov ecx, 0x10
call fcn.140167c6c
mov qword [rsp + 0x270], rax
lea rcx, [rax + 0x10]
mov qword [rsp + 0x280], rcx
test rax, rax
je 0x1400d1d8b
movaps xmm0, xmmword [rsp + 0x2a0]
movups xmmword [rax], xmm0
mov qword [rsp + 0x278], rcx
call fcn.1400d0080
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x290], xmm0
mov ecx, 0x10
call fcn.140167c6c
mov qword [rsp + 0xa8], rax
lea rcx, [rax + 0x10]
mov qword [rsp + 0xb8], rcx
test rax, rax
je 0x1400d1d8b
movaps xmm0, xmmword [rsp + 0x290]
movups xmmword [rax], xmm0
lea rsi, [rsp + 0xa8]
mov qword [rsi + 8], rcx
lea rdi, [rsp + 0x90]
mov rcx, rdi
call fcn.1400d04f0
mov rcx, r14
xor edx, edx
call fcn.1400e6e00
lea r15, [rsp + 0x78]
mov rcx, r15
call fcn.1400d00f0
lea r12, [rsp + 0x60]
mov rcx, r12
call fcn.1400d0330
lea rax, [rsp + 0x270]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0xc0]
mov rdx, r12
mov r8, r15
mov r9d, 3
call fcn.1401abee0
cmp byte [r12 + 0x17], 0
jns 0x1400d1d33
mov rcx, qword [rsp + 0x60]
call fcn.140167ca8
cmp byte [rsp + 0x8f], 0
jns 0x1400d1d47
mov rcx, qword [rsp + 0x78]
call fcn.140167ca8
lea rcx, [rsp + 0x140]
call fcn.1400e7380
cmp byte [rsp + 0xa7], 0
jns 0x1400d1d6b
mov rcx, qword [rsp + 0x90]
call fcn.140167ca8
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x1400d1d9a
mov rax, qword [rsp + 0xb0]
cmp rax, rcx
je 0x1400d1d8d
add rax, 0xfffffffffffffff0
jne 0x1400d1d80
ud2
mov qword [rsp + 0xb0], rcx
call fcn.140167ca8
mov rcx, qword [rsp + 0x270]
test rcx, rcx
je 0x1400d1dc9
mov rax, qword [rsp + 0x278]
cmp rax, rcx
je 0x1400d1dbc
add rax, 0xfffffffffffffff0
jne 0x1400d1daf
jmp 0x1400d1d8b
mov qword [rsp + 0x278], rcx
call fcn.140167ca8
lea r14, [rsp + 0xc0]
mov rcx, r14
mov dl, 1
call fcn.1401b2af0
xor ebx, ebx
mov rcx, r14
xor edx, edx
call fcn.1401b2b00
mov rcx, r14
call fcn.1401b2a90
test al, al
je 0x1400d1e27
lea rbx, [rsp + 0x140]
mov rcx, rbx
call fcn.1400d0330
mov rcx, rbx
call fcn.1400d18c0
mov ebp, eax
cmp byte [rbx + 0x17], 0
jns 0x1400d1e20
mov rcx, qword [rsp + 0x140]
call fcn.140167ca8
test bpl, bpl
jne 0x1400d1e88
xor ebx, ebx
lea rcx, [rsp + 0xc0]
call fcn.1401abf80
lea rcx, [rsp + 0xf0]
call fcn.1400e7380
mov rcx, qword [rsp + 0x2b8]
xor rcx, rsp
cmp rcx, qword [0x14026c040]
je 0x1400d1e5b
call fcn.140169190
int3
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x2c0]
add rsp, 0x2d0
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
lea rcx, [rsp + 0xa8]
mov byte [rcx + 0x17], r14b
jmp 0x1400d1f41
lea rax, str.interactive
lea rdx, [rsp + 0x50]
mov qword [rdx], rax
mov qword [rdx + 8], 0xb
lea rcx, [rsp + 0xf0]
call fcn.1400e7820
mov rcx, rdi
call fcn.1400d0330
cmp byte [rsp + 0xa7], 0
jns 0x1400d1ec6
mov rdi, qword [rsp + 0x90]
test rdi, rdi
je 0x1400d1d8b
movabs r15, 0x7ffffffffffffff7
mov rcx, rdi
call fcn.140187d04
cmp rax, r15
ja 0x1400d20af
mov r14, rax
cmp rax, 0xa
jbe 0x1400d1e77
mov rax, r14
or rax, 3
lea rcx, [rax + 1]
cmp rax, 0xb
mov r12d, 0xd
cmovne r12, rcx
test r12, r12
js 0x1400d20aa
lea rcx, [r12 + r12]
call fcn.140167c6c
mov rcx, rax
mov qword [rsp + 0xa8], rax
lea rax, [r15 + r12]
add rax, 9
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xb0], r14
lea r15, [rcx + r14*2]
cmp rdi, rcx
jb 0x1400d1f53
cmp rdi, r15
jb 0x1400d1d8b
test r14, r14
je 0x1400d1f66
add r14, r14
mov rdx, rdi
mov r8, r14
call fcn.1401a2ec0
mov word [r15], 0
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rdi, [rsp + 0x270]
mov qword [rdi + 0x10], rax
movaps xmmword [rdi], xmm6
lea r8, str.SoftwareMicrosoftWindowsCurrentVersionRun
mov rcx, rdi
mov rdx, 0xffffffff80000002
mov r9d, 0x20006
call fcn.1400d8720
cmp qword [rdi], 0
je 0x1400d204b
lea rcx, [rsp + 0xf0]
mov rdx, rbx
call fcn.1400e91c0
cmp byte [rsp + 0x157], 0
jns 0x1400d1fcd
mov rbx, qword [rsp + 0x140]
cmp byte [rsp + 0xbf], 0
jns 0x1400d1fdf
mov rsi, qword [rsp + 0xa8]
lea rcx, [rsp + 0x270]
mov rdx, rsi
mov r8, rbx
call fcn.1400d8fb0
cmp byte [rsp + 0x157], 0
jns 0x1400d2009
mov rcx, qword [rsp + 0x140]
call fcn.140167ca8
lea rcx, [rsp + 0x270]
call fcn.1400d8950
cmp byte [rsp + 0xbf], 0
jns 0x1400d202d
mov rcx, qword [rsp + 0xa8]
call fcn.140167ca8
cmp byte [rsp + 0xa7], 0
jns 0x1400d2044
mov rcx, qword [rsp + 0x90]
call fcn.140167ca8
mov bl, 1
jmp 0x1400d1e27
lea rcx, str....._brave_browser_brave_vpnwin_brave_vpn_wireguard_serviceinstall_utils.cc
mov edx, 0x4f
call fcn.14013de20
test eax, eax
jle 0x1400d2009
lea rdx, str....._brave_browser_brave_vpnwin_brave_vpn_wireguard_serviceinstall_utils.cc
lea rsi, [rsp + 0x140]
mov rcx, rsi
mov r8d, 0x3a
mov r9d, 0xffffffff
call fcn.1400e3120
lea rcx, [rsp + 0x150]
lea rdx, str.Failed_to_write_wireguard_service_to_startup
mov r8d, 0x2c
call fcn.14011f4a0
mov rcx, rsi
call fcn.1400e3710
jmp 0x1400d2009
call fcn.1401a40e0
lea rcx, [rsp + 0xa8]
call fcn.1401a40a0
int3