Function at 0x140001530
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0xa0
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x90], rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov esi, eax
mov eax, 0x29f1868f
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x1869f
sub esi, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov edi, eax
mov eax, 0x29f1868f
imul edi
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1869f
sub edi, ecx
add edi, 0x2710
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ebx, eax
mov eax, 0x29f1868f
imul ebx
xor eax, eax
sar edx, 0xe
mov ecx, edx
mov qword [rsp + 0x4a], rax
shr ecx, 0x1f
add edx, ecx
mov word [rsp + 0x52], ax
imul ecx, edx, 0x1869f
sub ebx, ecx
add ebx, 0x2710
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1a
sub r8d, ecx
add r8w, 0x41
mov word [rsp + 0x48], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1a
sub r8d, ecx
add r8w, 0x41
mov word [rsp + 0x4a], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1a
sub r8d, ecx
add r8w, 0x41
mov word [rsp + 0x4c], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1a
sub r8d, ecx
add r8w, 0x41
mov word [rsp + 0x4e], r8w
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xorps xmm0, xmm0
lea r9d, [rsi + 0x2710]
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
movups xmmword [rsp + 0x5a], xmm0
movups xmmword [rsp + 0x6a], xmm0
xor eax, eax
sar edx, 3
mov ecx, edx
mov word [rsp + 0x58], ax
shr ecx, 0x1f
lea rax, [rsp + 0x48]
add edx, ecx
mov qword [rsp + 0x30], rax
imul ecx, edx, 0x1a
mov edx, 0x19
mov dword [rsp + 0x28], ebx
movups xmmword [rsp + 0x7a], xmm0
mov dword [rsp + 0x20], edi
sub r8d, ecx
lea rcx, [rsp + 0x58]
add r8w, 0x41
mov word [rsp + 0x50], r8w
lea r8, str._i__i__i__ls
call fcn.140001010
lea rax, [rsp + 0x40]
mov r9d, 0xf003f
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000177b
lea rcx, [rsp + 0x58]
mov rax, 0xffffffffffffffff
cmp word [rcx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x140001730
mov rcx, qword [rsp + 0x40]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
lea rdx, str.ProductId
lea rax, [rsp + 0x58]
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14000177b
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400021b0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret