Function at 0x140002d90
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x18b0]
mov eax, 0x19b0
call fcn.14000c390
sub rsp, rax
mov rax, qword [0x140046058]
xor rax, rsp
mov qword [rbp + 0x1868], rax
movdqa xmm0, xmmword [0x1400407b0]
lea rcx, [rsp + 0x30]
pxor xmm0, xmmword [0x1400408d0]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [0x1400407c0]
xor edi, edi
pxor xmm1, xmmword [0x1400408e0]
mov r8d, 0x860
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [0x1400407d0]
pxor xmm0, xmmword [0x1400408f0]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [0x1400407e0]
pxor xmm1, xmmword [0x140040900]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [0x1400407f0]
pxor xmm0, xmmword [0x140040910]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [0x140040800]
pxor xmm1, xmmword [0x140040920]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [0x140040810]
pxor xmm0, xmmword [0x140040930]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [0x140040820]
pxor xmm1, xmmword [0x140040940]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [0x140040830]
pxor xmm0, xmmword [0x140040950]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [0x140040840]
pxor xmm1, xmmword [0x140040960]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [0x140040850]
pxor xmm0, xmmword [0x140040970]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [0x140040860]
pxor xmm1, xmmword [0x140040980]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [0x140040870]
pxor xmm0, xmmword [0x140040990]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [0x140040880]
pxor xmm1, xmmword [0x1400409a0]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [0x140040890]
pxor xmm0, xmmword [0x1400409b0]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [0x1400408a0]
pxor xmm1, xmmword [0x1400409c0]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [0x1400408b0]
pxor xmm0, xmmword [0x1400409d0]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [0x1400408c0]
pxor xmm1, xmmword [0x1400409e0]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
mov qword [rbp + 0x1850], rdi
mov dword [rbp + 0x1864], 4
mov dword [rbp + 0x1858], edi
mov dword [rbp + 0x185c], edi
mov dword [rbp + 0x1860], 4
call fcn.14000d920
lea r8, [rbp + 0x1850]
mov rcx, 0xffffffff80000002
lea rdx, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x140002fd0
xor al, al
jmp 0x14000425f
mov qword [rsp + 0x19c0], rbx
lea rcx, [rbp + 0x790]
movaps xmmword [rsp + 0x19a0], xmm6
movabs rax, 0x18addb88cf24572a
mov qword [rsp + 0x30], rax
xorps xmm5, xmm5
movaps xmmword [rsp + 0x1990], xmm7
movabs rax, 0xaa3c234f22233ec
mov qword [rsp + 0x38], rax
xorps xmm6, xmm6
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x2c138ae18adef23
mov qword [rsp + 0x40], rax
xorps xmm7, xmm7
movabs rax, 0x147f4782c0e772fe
movaps xmmword [rsp + 0x1980], xmm8
mov qword [rsp + 0x48], rax
xorps xmm2, xmm2
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0xee02edfcf25427a
mov qword [rsp + 0x50], rax
xorps xmm3, xmm3
movabs rax, 0x778a0d1d6f135e6
movaps xmmword [rsp + 0x1970], xmm9
mov qword [rsp + 0x58], rax
xorps xmm4, xmm4
movabs rax, 0x18d9dbe9cf41576c
pxor xmm5, xmm2
mov qword [rbp - 0x70], rax
pxor xmm6, xmm3
movabs rax, 0xaf0c251f2503399
movdqa xmmword [rbp + 0x7c0], xmm5
mov qword [rbp - 0x68], rax
pxor xmm7, xmm4
pxor xmm0, xmmword [rbp - 0x70]
movabs rax, 0x2a838da18d9ef46
mov qword [rbp - 0x60], rax
mov ebx, 6
movabs rax, 0x143047f1c0807290
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov edx, ebx
mov qword [rbp - 0x58], rax
movabs rax, 0xe922eadcf40420c
pxor xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x778a0b4d695358f
mov qword [rbp - 0x48], rax
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7d0], xmm6
movdqa xmmword [rbp + 0x7e0], xmm7
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003130
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x1860]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x1864]
lea rax, [rbp + 0x1858]
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x14000351d
movabs rax, 0xf46d3ac06f4917d
lea rcx, [rbp + 0x790]
mov qword [rsp + 0x30], rax
xorps xmm5, xmm5
movabs rax, 0x1ecbae1aa8a7900
xorps xmm6, xmm6
mov qword [rsp + 0x38], rax
xorps xmm7, xmm7
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x1a3e6f470f46e6f3
mov qword [rsp + 0x40], rax
xorps xmm2, xmm2
movabs rax, 0x12140523be86746a
xorps xmm3, xmm3
mov qword [rsp + 0x48], rax
xorps xmm4, xmm4
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x5a2a5a246f578e9
mov qword [rsp + 0x50], rax
pxor xmm5, xmm2
movabs rax, 0x1e0a18234f597e72
movdqa xmmword [rbp + 0x7c0], xmm5
mov qword [rsp + 0x58], rax
pxor xmm6, xmm3
movabs rax, 0xf32d3cd0691913b
movdqa xmmword [rbp + 0x7d0], xmm6
mov qword [rbp - 0x70], rax
pxor xmm7, xmm4
movabs rax, 0x1bfba84aaf87975
movdqa xmmword [rbp + 0x7e0], xmm7
mov qword [rbp - 0x68], rax
mov rdx, rbx
pxor xmm0, xmmword [rbp - 0x70]
movabs rax, 0x1a576f330f32e696
mov qword [rbp - 0x60], rax
movabs rax, 0x125b0550bee17404
mov qword [rbp - 0x58], rax
movabs rax, 0x5d0a5d04690789f
pxor xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x1e0a18464f3d7e1b
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp - 0x48], rax
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
nop dword [rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x1400032f0
movdqa xmm0, xmmword [0x140040570]
lea rcx, [rbp + 0xff0]
pxor xmm0, xmmword [0x140040690]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [0x140040580]
mov r8d, 0x860
pxor xmm1, xmmword [0x1400406a0]
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [0x140040590]
pxor xmm0, xmmword [0x1400406b0]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [0x1400405a0]
pxor xmm1, xmmword [0x1400406c0]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [0x1400405b0]
pxor xmm0, xmmword [0x1400406d0]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [0x1400405c0]
pxor xmm1, xmmword [0x1400406e0]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [0x1400405d0]
pxor xmm0, xmmword [0x1400406f0]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [0x1400405e0]
pxor xmm1, xmmword [0x140040700]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [0x1400405f0]
pxor xmm0, xmmword [0x140040710]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [0x140040600]
pxor xmm1, xmmword [0x140040720]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [0x140040610]
pxor xmm0, xmmword [0x140040730]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [0x140040620]
pxor xmm1, xmmword [0x140040740]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [0x140040630]
pxor xmm0, xmmword [0x140040750]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [0x140040640]
pxor xmm1, xmmword [0x140040760]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [0x140040650]
pxor xmm0, xmmword [0x140040770]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [0x140040660]
pxor xmm1, xmmword [0x140040780]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [0x140040670]
pxor xmm0, xmmword [0x140040790]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [0x140040680]
pxor xmm1, xmmword [0x1400407a0]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
call fcn.14000d920
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xff0]
call fcn.140002cf0
movabs rdx, 0x1fffffffe0000000
movabs rcx, 0xe0000000200001f4
movabs rax, 0xbd1136cd4a0e3cb
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x30], rax
xorps xmm5, xmm5
movabs rax, 0xdac742ef654e7ed
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x38], rax
xorps xmm6, xmm6
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x1173b9618d02dd38
mov qword [rsp + 0x40], rax
xorps xmm7, xmm7
movabs rax, 0x6bf2db7e0f0790b0
mov qword [rbp - 0x50], rdx
mov qword [rsp + 0x48], rax
xorps xmm2, xmm2
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x7fb0762af4fdc990
mov qword [rbp - 0x70], rax
xorps xmm3, xmm3
movabs rax, 0x64d8004ba5319598
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x68], rax
lea rcx, [rbp + 0x790]
pxor xmm0, xmmword [rbp - 0x70]
movabs rax, 0x6301dc17c271ba56
mov qword [rbp - 0x60], rax
xorps xmm4, xmm4
movabs rax, 0x6187fe5e3562f4d9
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
pxor xmm5, xmm2
pxor xmm0, xmmword [rbp - 0x50]
pxor xmm6, xmm3
mov qword [rbp - 0x58], rax
pxor xmm7, xmm4
pxor xmm1, xmmword [rbp - 0x60]
lea rax, [rsp + 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
mov edx, 4
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7c0], xmm5
movdqa xmmword [rbp + 0x7d0], xmm6
movdqa xmmword [rbp + 0x7e0], xmm7
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003640
movups xmm0, xmmword [rcx]
mov edx, dword [rbp + 0x1858]
lea rcx, [rsp + 0x30]
movups xmmword [rax], xmm0
call fcn.1400010e0
cmp dword [rbp + 0x1858], 3
je 0x140003876
movabs rax, 0x514cb257e140b56
mov dword [rbp + 0x1858], 3
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x790]
movabs rax, 0x10a2c7323779ee17
xorps xmm5, xmm5
mov qword [rsp + 0x38], rax
xorps xmm6, xmm6
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x1103e5150514de12
mov qword [rsp + 0x40], rax
xorps xmm7, xmm7
movabs rax, 0x19ee8d81c6e06c63
xorps xmm2, xmm2
mov qword [rsp + 0x48], rax
xorps xmm3, xmm3
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x1b9d9b9d3e14ee8a
mov qword [rsp + 0x50], rax
xorps xmm4, xmm4
movabs rax, 0x913230a5904f201
pxor xmm5, xmm2
mov qword [rsp + 0x58], rax
pxor xmm6, xmm3
movabs rax, 0x560cb447e710b10
movdqa xmmword [rbp + 0x7c0], xmm5
mov qword [rbp - 0x70], rax
pxor xmm7, xmm4
movabs rax, 0x10f1c757370bee62
movdqa xmmword [rbp + 0x7d0], xmm6
mov qword [rbp - 0x68], rax
movabs rax, 0x116ae5610560de77
pxor xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0x19a18df2c6876c0d
mov qword [rbp - 0x58], rax
movabs rax, 0x1bef9bef3e71eefc
pxor xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x913236f5960f268
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp - 0x48], rax
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7e0], xmm7
nop dword [rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rbx, 1
jne 0x1400037f0
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x1858]
mov dword [rsp + 0x28], 4
lea r9d, [rbx + 4]
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rbp + 0x1858], edi
movabs rax, 0x1d09c46bb713467c
movabs rcx, 0xc06944019be4c19
mov qword [rsp + 0x30], rax
xorps xmm6, xmm6
movabs rax, 0x1307c967f9a52c0d
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm7, xmm7
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x9bc1d09fd09d712
mov qword [rsp + 0x40], rax
xorps xmm8, xmm8
movabs rax, 0xff265e6df5b5a8a
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x13b613b5b714265c
mov qword [rsp + 0x50], rax
xorps xmm9, xmm9
movabs rax, 0x1dffb76beb101cf7
xorps xmm2, xmm2
mov qword [rsp + 0x58], rax
xorps xmm3, xmm3
movabs rax, 0x1f30ff85fc46a
xorps xmm4, xmm4
mov qword [rsp + 0x60], rax
xorps xmm5, xmm5
movabs rax, 0x1d7dc40ab776463a
pxor xmm6, xmm2
mov qword [rbp - 0x50], rax
pxor xmm7, xmm3
movabs rax, 0x1354c902f9d72c78
movdqa xmmword [rbp + 0x7d0], xmm6
mov qword [rbp - 0x48], rax
pxor xmm8, xmm4
pxor xmm0, xmmword [rbp - 0x50]
movabs rax, 0x9d51d7dfd7dd777
mov qword [rbp - 0x40], rax
pxor xmm9, xmm5
movabs rax, 0xfbd6595df3c5ae4
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov ebx, 7
mov qword [rbp - 0x38], rax
mov edx, ebx
pxor xmm1, xmmword [rbp - 0x40]
movabs rax, 0x13c413c7b771262a
mov qword [rbp - 0x30], rax
movabs rax, 0x1db2b70eeb741c9e
mov qword [rbp - 0x28], rax
movabs rax, 0x1f364f82cc40b
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp - 0x20], rax
lea rax, [rsp + 0x30]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7e0], xmm7
movdqa xmmword [rbp + 0x7f0], xmm8
movdqa xmmword [rbp + 0x800], xmm9
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003a01
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x1860]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x1864]
lea rax, [rbp + 0x185c]
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x140003e4d
movabs rax, 0x1229bb53ad9b3fec
movabs rcx, 0xc0690b816465279
mov qword [rsp + 0x30], rax
xorps xmm6, xmm6
movabs rax, 0x1e27d278033d24c5
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm7, xmm7
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x1fe41229f229cd9a
mov qword [rsp + 0x40], rax
xorps xmm8, xmm8
movabs rax, 0xcaa6246dbbb588a
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x9060905ad9c1b4c
mov qword [rsp + 0x50], rax
xorps xmm9, xmm9
movabs rax, 0x1a0fb3fbe7e820ff
xorps xmm2, xmm2
mov qword [rsp + 0x58], rax
xorps xmm3, xmm3
movabs rax, 0x1e907ed97bb52
xorps xmm4, xmm4
mov qword [rsp + 0x60], rax
xorps xmm5, xmm5
movabs rax, 0x125dbb32adfe3faa
pxor xmm6, xmm2
mov qword [rbp - 0x50], rax
pxor xmm7, xmm3
movabs rax, 0x1e74d21d034f24b0
movdqa xmmword [rbp + 0x7d0], xmm6
mov qword [rbp - 0x48], rax
pxor xmm8, xmm4
pxor xmm0, xmmword [rbp - 0x50]
movabs rax, 0x1f8d125df25dcdff
mov qword [rbp - 0x40], rax
pxor xmm9, xmm5
movabs rax, 0xce56235dbdc58e4
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov rdx, rbx
mov qword [rbp - 0x38], rax
movabs rax, 0x9740977adf91b3a
pxor xmm1, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0x1a42b39ee78c2096
mov qword [rbp - 0x28], rax
movabs rax, 0x1e96cede4bb33
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp - 0x20], rax
lea rax, [rsp + 0x30]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7e0], xmm7
movdqa xmmword [rbp + 0x7f0], xmm8
movdqa xmmword [rbp + 0x800], xmm9
nop dword [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003c20
movdqa xmm0, xmmword [0x1400409f0]
lea rcx, [rbp + 0xff0]
pxor xmm0, xmmword [0x140040b10]
lea rdx, [rbp + 0x790]
movdqa xmm1, xmmword [0x140040a00]
mov r8d, 0x860
pxor xmm1, xmmword [0x140040b20]
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [0x140040a10]
pxor xmm0, xmmword [0x140040b30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [0x140040a20]
pxor xmm1, xmmword [0x140040b40]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmm0, xmmword [0x140040a30]
pxor xmm0, xmmword [0x140040b50]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmm1, xmmword [0x140040a40]
pxor xmm1, xmmword [0x140040b60]
movdqa xmmword [rbp + 0x7d0], xmm0
movdqa xmm0, xmmword [0x140040a50]
pxor xmm0, xmmword [0x140040b70]
movdqa xmmword [rbp + 0x7e0], xmm1
movdqa xmm1, xmmword [0x140040a60]
pxor xmm1, xmmword [0x140040b80]
movdqa xmmword [rbp + 0x7f0], xmm0
movdqa xmm0, xmmword [0x140040a70]
pxor xmm0, xmmword [0x140040b90]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [0x140040ba0]
pxor xmm1, xmmword [0x140040a80]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [0x140040a90]
pxor xmm0, xmmword [0x140040bb0]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm1, xmmword [0x140040aa0]
pxor xmm1, xmmword [0x140040bc0]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm0, xmmword [0x140040ab0]
pxor xmm0, xmmword [0x140040bd0]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm1, xmmword [0x140040ac0]
pxor xmm1, xmmword [0x140040be0]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm0, xmmword [0x140040ad0]
pxor xmm0, xmmword [0x140040bf0]
movdqa xmmword [rbp + 0x860], xmm1
movdqa xmm1, xmmword [0x140040ae0]
pxor xmm1, xmmword [0x140040c00]
movdqa xmmword [rbp + 0x870], xmm0
movdqa xmm0, xmmword [0x140040af0]
pxor xmm0, xmmword [0x140040c10]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [0x140040b00]
pxor xmm1, xmmword [0x140040c20]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmmword [rbp + 0x8a0], xmm1
call fcn.14000d920
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xff0]
call fcn.140002cf0
movabs rcx, 0xdab61b379abcc
movabs rax, 0x19354d8067a76926
mov qword [rsp + 0x30], rax
xorps xmm5, xmm5
movabs rax, 0x889bbdc7ad619e
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x38], rax
xorps xmm6, xmm6
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x389468a80b3435b
mov qword [rsp + 0x40], rax
xorps xmm7, xmm7
movabs rax, 0x589778d26103904b
mov qword [rbp - 0x48], rcx
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x2efaead9c4
mov qword [rsp + 0x50], rax
xorps xmm2, xmm2
movabs rax, 0x6d5428c647fa437d
xorps xmm3, xmm3
mov qword [rbp - 0x70], rax
xorps xmm4, xmm4
movabs rax, 0x69fcefd894c813eb
pxor xmm5, xmm2
mov qword [rbp - 0x68], rax
pxor xmm6, xmm3
pxor xmm0, xmmword [rbp - 0x70]
movabs rax, 0x71fb23fccfc02435
mov qword [rbp - 0x60], rax
pxor xmm7, xmm4
movabs rax, 0x62fc0bb32c66f422
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
mov edx, 4
mov qword [rbp - 0x58], rax
movabs rax, 0x2ef09ffce4
pxor xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
lea rax, [rsp + 0x30]
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmmword [rbp + 0x7c0], xmm5
movdqa xmmword [rbp + 0x7d0], xmm6
movdqa xmmword [rbp + 0x7e0], xmm7
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140003f71
movups xmm0, xmmword [rcx]
mov edx, dword [rbp + 0x185c]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
lea rcx, [rsp + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmmword [rax + 0x40], xmm0
call fcn.1400010e0
cmp dword [rbp + 0x185c], 3
je 0x140004226
movabs rax, 0xf1aced9e9d3588
mov dword [rbp + 0x185c], 3
mov qword [rsp + 0x30], rax
movabs rcx, 0xc069bda219043a1
movabs rax, 0x112fe26213ab1873
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x38], rax
xorps xmm6, xmm6
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x104e00f1e0f1be9c
mov qword [rsp + 0x40], rax
xorps xmm7, xmm7
movabs rax, 0x17106e0ee76355ba
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x790]
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0x1819f8199e9e09c8
mov qword [rsp + 0x50], rax
xorps xmm8, xmm8
movabs rax, 0x96bc307f5521685
xorps xmm9, xmm9
mov qword [rsp + 0x58], rax
xorps xmm2, xmm2
movabs rax, 0x1d925dc85acec
xorps xmm3, xmm3
mov qword [rsp + 0x60], rax
xorps xmm4, xmm4
movabs rax, 0x85ac8c9ef835ce
xorps xmm5, xmm5
mov qword [rbp - 0x50], rax
pxor xmm6, xmm2
movabs rax, 0x117ce20713d91806
movdqa xmmword [rbp + 0x7d0], xmm6
mov qword [rbp - 0x48], rax
pxor xmm7, xmm3
pxor xmm0, xmmword [rbp - 0x50]
movabs rax, 0x10270085e085bef9
mov qword [rbp - 0x40], rax
pxor xmm8, xmm4
movabs rax, 0x175f6e7de70455d4
movdqa xmmword [rbp + 0x790], xmm0
movdqa xmm0, xmmword [rsp + 0x50]
pxor xmm9, xmm5
mov qword [rbp - 0x38], rax
movabs rax, 0x186bf86b9efb09be
pxor xmm1, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0x926c362f53616ec
mov qword [rbp - 0x28], rax
movabs rax, 0x1d94edcf6ac8d
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x7a0], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
mov qword [rbp - 0x20], rax
lea rax, [rsp + 0x30]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x7c0], xmm1
movdqa xmmword [rbp + 0x7b0], xmm0
movdqa xmmword [rbp + 0x7e0], xmm7
movdqa xmmword [rbp + 0x7f0], xmm8
movdqa xmmword [rbp + 0x800], xmm9
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rbx, 1
jne 0x1400041a0
mov rcx, qword [rbp + 0x1850]
lea rax, [rbp + 0x185c]
mov dword [rsp + 0x28], 4
lea r9d, [rbx + 4]
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rbp + 0x185c], edi
mov rcx, qword [rbp + 0x1850]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movaps xmm9, xmmword [rsp + 0x1970]
mov al, 1
movaps xmm8, xmmword [rsp + 0x1980]
movaps xmm7, xmmword [rsp + 0x1990]
movaps xmm6, xmmword [rsp + 0x19a0]
mov rbx, qword [rsp + 0x19c0]
mov rcx, qword [rbp + 0x1868]
xor rcx, rsp
call fcn.14000ba80
mov rdi, qword [rsp + 0x19c8]
add rsp, 0x19b0
pop rbp
ret