Function at 0x1400581d0
Capabilities:
Delete registry value
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xa0
mov rax, qword [0x140072040]
xor rax, rsp
mov qword [rbp + 0x37], rax
movups xmm3, xmmword [str.ajgaszdzOINXPK]
movzx eax, word [0x14006d640]
xor ecx, ecx
cmp dword [0x140072090], 2
movups xmm0, xmmword [0x14006d620]
mov qword [rbp + 0x2f], rcx
movups xmm1, xmmword [0x14006d630]
mov word [rbp + 0x27], ax
movups xmmword [rbp - 9], xmm3
movups xmmword [rbp + 7], xmm0
movups xmmword [rbp + 0x17], xmm1
jl 0x140058498
movdqa xmm4, xmmword [0x14006da60]
movdqa xmm2, xmmword [0x14006d990]
movdqa xmm5, xmmword [str.5555::::]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movaps xmmword [r11 - 0x18], xmm6
movdqa xmm6, xmmword [0x14006da20]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movq xmm1, xmm3
movdqa xmm3, xmmword [0x14006d9a0]
paddw xmm2, xmm6
xorps xmm2, xmm1
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
movdqa xmm1, xmm3
pmuldq xmm0, xmm4
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movq qword [rbp - 9], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
movdqa xmm3, xmmword [0x14006d9b0]
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp - 1]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
paddw xmm2, xmm6
xorps xmm2, xmm0
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
movq qword [rbp - 1], xmm2
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
movdqa xmm3, xmmword [0x14006d9c0]
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp + 7]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
paddw xmm2, xmm6
xorps xmm2, xmm0
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
movq qword [rbp + 7], xmm2
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
mov ecx, 0x18
movdqa xmm3, xmmword [0x14006d9d0]
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp + 0xf]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
paddw xmm2, xmm6
xorps xmm2, xmm0
pmuldq xmm1, xmm4
movq qword [rbp + 0xf], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
movdqa xmm3, xmmword [0x14006d9e0]
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp + 0x17]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
paddw xmm2, xmm6
punpckldq xmm1, xmm3
xorps xmm2, xmm0
pmuldq xmm1, xmm4
movq qword [rbp + 0x17], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp + 0x1f]
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm6
movaps xmm6, xmmword [r11 - 0x18]
xorps xmm2, xmm0
movq qword [rbp + 0x1f], xmm2
mov eax, ecx
lea r8, [rbp - 9]
lea r8, [r8 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
lea r8, [r8 + 2]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x35
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x32
xor word [r8 - 2], ax
cmp ecx, 0x19
jl 0x1400584b0
movzx eax, word [0x14006d348]
lea rdx, [rbp - 9]
movsd xmm0, qword [0x14006d340]
xor ax, 0x36
movsd qword [rbp - 0x19], xmm0
mov ecx, 0x54
xor word [rbp - 0x17], 0x33
mov r9d, 0x10002
xor word [rbp - 0x15], 0x34
xor r8d, r8d
xor word [rbp - 0x13], 0x35
mov word [rbp - 0x11], ax
lea rax, [rbp + 0x2f]
mov word [rbp - 0x19], cx
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140058554
mov rcx, qword [rbp + 0x2f]
lea rdx, [rbp - 0x19]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rcx, qword [rbp + 0x2f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400621a0
add rsp, 0xa0
pop rbp
ret