Function at 0x180003af0
Capabilities:
Set registry value

Disassembly:
push rbx
sub rsp, 0x30
mov rcx, qword [0x18000b368]
xor ebx, ebx
lea rax, [rsp + 0x40]
lea rdx, [0x18000ac10]
lea r9d, [rbx + 4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b640], ebx
mov dword [0x18000b5f8], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac14]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b5fc], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac18]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b600], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac1c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b604], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac20]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b608], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac24]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b60c], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180008428]
call fcn.180003710
mov rcx, qword [0x18000b368]
lea rax, [0x18000b4c4]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac2c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b4c4], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b610], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x18000ac30]
mov rcx, qword [0x18000b368]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac34]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b614], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac38]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b618], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac3c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b61c], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180008428]
call fcn.1800037e0
mov rcx, qword [0x18000b368]
lea rax, [0x18000b438]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac44]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b438], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac48]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b620], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac4c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b624], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac50]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b628], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b62c], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x18000ac54]
mov rcx, qword [0x18000b368]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180008428]
call fcn.180003900
mov rcx, qword [0x18000b368]
lea rax, [0x18000b4c8]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac5c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b4c8], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac60]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b630], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac64]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b634], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac68]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b638], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b368]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac6c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b63c], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180008428]
call fcn.180003a20
mov rcx, qword [0x18000b368]
lea rax, [0x18000b484]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac74]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b484], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor r11d, r11d
mov dword [0x18000b474], ebx
mov qword [0x18000b440], r11
mov qword [0x18000b448], r11
mov qword [0x18000b450], r11
mov qword [0x18000b458], r11
mov qword [0x18000b460], r11
mov qword [0x18000b468], r11
mov word [0x18000b470], r11w
mov dword [0x18000b478], ebx
mov dword [0x18000b47c], ebx
mov dword [0x18000b480], ebx
add rsp, 0x30
pop rbx
ret