Function at 0x180009130
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x60
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov rbp, r9
mov r12, r8
mov r13, rdx
mov r14, rcx
xor esi, esi
mov qword [rax - 0x50], rsi
mov dword [rax - 0x48], esi
mov qword [rax - 0x40], rsi
lea rdx, str.SoftwareCAHE_
lea rcx, [rax - 0x60]
call qword [sym.imp.mfc100.dll_Ordinal_310]
nop
mov r8, qword [rsp + 0xc0]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180007150
mov rdx, qword [rax]
lea rcx, [rsp + 0x48]
call fcn.18000aa00
test eax, eax
sete bl
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc100.dll_Ordinal_889]
test bl, bl
je 0x18000936b
mov rdi, qword [r14]
mov eax, esi
test rdi, rdi
setne al
mov rbx, qword [rsp + 0x48]
test eax, eax
je 0x18000920a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
lea r9d, [rsi + 1]
xor r8d, r8d
lea rdx, str.code
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdi, qword [r13]
mov eax, esi
test rdi, rdi
setne al
test eax, eax
je 0x180009247
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.name
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdi, qword [r12]
mov eax, esi
test rdi, rdi
setne al
test eax, eax
je 0x180009284
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.email
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdi, qword [rbp]
mov eax, esi
test rdi, rdi
setne al
test eax, eax
je 0x1800092c1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, [0x180042610]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsi]
xor eax, eax
test rdi, rdi
setne al
test eax, eax
je 0x180009305
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.online
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test rbx, rbx
je 0x180009315
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
test rbx, rbx
je 0x180009324
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, r14
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, r13
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, r12
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, rbp
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, rsi
call qword [sym.imp.mfc100.dll_Ordinal_889]
mov eax, 1
jmp 0x1800093c3
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x18000937c
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, r14
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, r13
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, r12
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, rbp
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.mfc100.dll_Ordinal_889]
nop
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.mfc100.dll_Ordinal_889]
xor eax, eax
add rsp, 0x60
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret