Function at 0x1400017a0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x180
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [section.sect_2]
xor rax, rsp
mov qword [rbp + 0x100], rax
movabs rax, 0x186df6b5a76edad8
movabs rsi, 0xe8678c2d81a06934
mov qword [rbp + 0xa0], rax
movabs r14, 0x770998dcf032e09b
mov rax, qword [rbp + 0xa0]
movabs r15, 0x6d2ad4e99ace9c30
mov qword [rbp + 0x60], rax
movabs r12, 0xa6696fd274af7f25
movabs rax, 0x85ea790c992ef47
movabs r13, 0x25e9ad37b5583f22
mov qword [rbp + 0xa0], rax
movabs rcx, 0xa8478c50e177d46f
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x68], rax
movabs rax, 0xc80706a5289d4c48
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x70], rax
movabs rax, 0x58cd5529b6a0c56
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x78], rax
movabs rax, 0xa86da970c346f14d
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vmovdqa xmm2, xmmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
mov qword [rbp + 0xe8], rax
movabs rax, 0x325bd98ba474afc8
vxorps xmm2, xmm2, xmmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqa xmmword [rbp + 0x80], xmm2
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x20], rax
movabs rax, 0x1e4fa79afba2df6c
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x28], rax
movabs rax, 0xc30506b411d71a79
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x30], rax
movabs rax, 0x57b5c15bd0304c7e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
movabs rax, 0xc528ef0c9216ba1a
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x40], rax
movabs rax, 0xe8678c2de5ce0859
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
lea rdx, [rbp + 0x20]
mov qword [rbp + 0xc8], rax
xor edi, edi
mov qword [rbp + 0xa0], r12
xor r9d, r9d
mov rax, qword [rbp + 0xa0]
xor r8d, r8d
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xa0], r13
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xa0], rcx
mov rcx, 0xffffffff80000002
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
mov qword [rsp + 0x40], rdi
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
vmovdqa xmm2, xmmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0xa0]
vxorps xmm2, xmm2, xmmword [rbp + 0xe0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], edi
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmmword [rbp + 0x40], xmm2
vzeroupper
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov rbx, 0xffffffffffffffff
lea rcx, [rbp + 0x60]
mov rax, rbx
inc rax
cmp byte [rcx + rax], dil
jne 0x140001af7
mov rcx, qword [rbp + 0xa0]
mov r9d, 1
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rbp + 0x60]
xor edx, edx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
movabs rax, 0x325bd98ba474afc8
mov qword [rsp + 0x40], rdi
mov qword [rbp], rax
lea rdx, [rbp + 0x20]
mov rax, qword [rbp]
xor r9d, r9d
mov qword [rbp + 0x20], rax
xor r8d, r8d
movabs rax, 0x1e4fa79afba2df6c
mov rcx, 0xffffffff80000002
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xc30506b411d71a79
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x4ab5c15bd0304c7e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0xc52ae333bd19b11f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xe8678c2d81c40755
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xa8478c50e177d46f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0xa0]
vxorps xmm2, xmm2, xmmword [rbp + 0xe0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], edi
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmmword [rbp + 0x40], xmm2
vzeroupper
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
lea rax, [rbp + 0x60]
inc rbx
cmp byte [rax + rbx], dil
jne 0x140001c71
mov rcx, qword [rbp + 0xa0]
lea rax, [rbp + 0x60]
mov dword [rsp + 0x28], ebx
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.140002840
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret