Function at 0x14000f8d0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xf0
mov rax, qword [0x140067040]
xor rax, rsp
mov qword [rbp + 7], rax
mov r15, r9
mov rdi, r8
mov rsi, rcx
mov qword [rbp - 0x61], rcx
mov rax, qword [rbp + 0x77]
mov qword [rbp - 0x61], rax
xor eax, eax
mov qword [rbp - 1], rax
mov rax, qword [0x14006a060]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
mov qword [rbp - 0x71], rax
mov rcx, qword [r8 + 0x10]
mov qword [rbp - 9], rcx
movabs r14, 0x7ffffffffffffffe
mov rax, r14
sub rax, rcx
cmp rax, 9
jb 0x14000fd24
mov qword [rbp - 0x69], r8
cmp qword [r8 + 0x18], 7
jbe 0x14000f95b
mov rax, qword [r8]
mov qword [rbp - 0x69], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
lea r13, [rcx + 9]
mov ebx, 7
mov eax, ebx
lea r12, [rbp - 0x59]
lea ecx, [rbx + 3]
cmp r13, rbx
jbe 0x14000f9bc
mov rbx, r13
or rbx, rax
cmp rbx, r14
jbe 0x14000f991
mov rbx, r14
jmp 0x14000f998
cmp rbx, rcx
cmovb rbx, rcx
inc rbx
mov qword [rbp - 0x11], rbx
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.14001b6c0
mov r12, rax
lea rax, [rbx - 1]
mov qword [rbp - 0x59], r12
mov ebx, 7
mov qword [rbp - 0x49], r13
mov qword [rbp - 0x41], rax
movups xmm0, xmmword [0x14005b140]
movups xmmword [r12], xmm0
movzx eax, word [0x14005b150]
mov word [r12 + 0x10], ax
lea rcx, [r12 + 0x12]
mov r8, qword [rbp - 9]
add r8, r8
mov rdx, qword [rbp - 0x69]
call fcn.14004bcc0
xor eax, eax
mov word [r12 + r13*2], ax
lea rdx, [0x14005b13c]
lea rcx, [rbp - 0x59]
call fcn.14000d430
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], rbx
mov word [rax], r12w
mov rdx, r15
cmp qword [r15 + 0x18], 7
jbe 0x14000fa47
mov rdx, qword [r15]
mov r8, qword [r15 + 0x10]
lea rcx, [rsp + 0x50]
call fcn.14000ba20
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x29], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x29], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], rbx
mov word [rax], r12w
lea rdx, [rbp - 0x39]
mov rcx, qword [0x14006a060]
call qword [rbp - 0x71]
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14000face
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fac9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fd2a
call fcn.140028848
movdqa xmm0, xmmword [0x14005d240]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r12w
mov rdx, qword [rbp - 0x79]
cmp rdx, 7
jbe 0x14000fb21
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fb1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fd30
call fcn.140028848
movdqa xmm0, xmmword [0x14005d240]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x14000fb75
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fb70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fd36
call fcn.140028848
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14000fb82
mov rdx, qword [rdi]
mov qword [rsp + 0x40], r12
lea rax, [rbp - 1]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jns 0x14000fc97
mov r13, qword [rdi + 0x10]
mov rax, r14
sub rax, r13
cmp rax, 0x13
jb 0x14000fd1e
cmp qword [rdi + 0x18], 7
jbe 0x14000fbdb
mov rdi, qword [rdi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
lea r12, [r13 + 0x13]
lea r15, [rsp + 0x50]
cmp r12, 7
jbe 0x14000fc2f
mov rax, r12
or rax, 7
cmp rax, r14
ja 0x14000fc0e
mov r14, rax
cmp rax, 0xa
mov eax, 0xa
cmovb r14, rax
lea rbx, [r14 + 1]
mov qword [rbp - 0x71], rbx
lea rdx, [rbp - 0x71]
lea rcx, [rsp + 0x50]
call fcn.14001b6c0
mov r15, rax
dec rbx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r12
mov qword [rbp - 0x79], rbx
movups xmm0, xmmword [str.Couldnt_Open_HKLM]
movups xmmword [r15], xmm0
movups xmm1, xmmword [0x14005b168]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [0x14005b178]
mov dword [r15 + 0x20], eax
movzx eax, word [0x14005b17c]
mov word [r15 + 0x24], ax
lea rcx, [r15 + 0x26]
lea r8, [r13*2]
mov rdx, rdi
call fcn.14004bcc0
xor eax, eax
mov word [r15 + r12*2], ax
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x10], xmm1
mov byte [rsi + 0x20], 1
jmp 0x14000fcf4
cmp qword [r15 + 0x18], 7
jbe 0x14000fca1
mov r15, qword [r15]
mov dword [rsp + 0x28], 4
mov rax, qword [rbp - 0x61]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov r8, r15
xor edx, edx
mov rcx, qword [rbp - 1]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov rcx, qword [rbp - 1]
test eax, eax
jns 0x14000fcea
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, str.Couldnt_Write_HKLM
mov rcx, rsi
call fcn.14000bbc0
mov byte [rsi + 0x20], 1
jmp 0x14000fcf4
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [rsi + 0x20], 0
mov rax, rsi
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400284c0
mov rbx, qword [rsp + 0x138]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001340
int3
call fcn.140001340
nop
call fcn.140035764
nop
call fcn.140035764
nop
call fcn.140035764
int3