Function at 0x1400010f4
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x330
mov rax, qword [0x140008020]
xor rax, rsp
mov qword [rsp + 0x320], rax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], edx
lea rcx, [rsp + 0x110]
lea rdx, [0x140005498]
mov r8d, 0x32
call sub.MSVCR90.dll_memcpy
lea rcx, [rsp + 0x142]
xor edx, edx
mov r8d, 0x1d6
call sub.MSVCR90.dll_memset
lea rdx, [rsp + 0x50]
mov rdi, 0xffffffff80000002
mov qword [rsp + 0x20], rdx
lea rdx, [rsp + 0x110]
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400011bf
lea rax, [rsp + 0x68]
lea rdx, [rsp + 0x110]
xor r9d, r9d
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x38], rax
and qword [rsp + 0x30], 0
mov rcx, rdi
mov dword [rsp + 0x28], 0x20006
and dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x140001358
mov rcx, qword [rsp + 0x50]
mov esi, 4
lea rax, [rsp + 0x64]
lea rdx, str.VERSION_Value
mov r9d, esi
xor r8d, r8d
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x64], 0x4e2d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
or rcx, 0xffffffffffffffff
lea rdx, [0x1400054d0]
xor eax, eax
mov rdi, rdx
lea r9d, [rsi - 3]
repne scasw ax, word [rdi]
xor r8d, r8d
not rcx
lea eax, [rcx + rcx + 2]
mov rcx, qword [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
lea rdx, [0x1400055c0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
or rcx, 0xffffffffffffffff
lea rdx, str.ff3487rbea4775grsn9_.uvu_a35_7754_bml_22114i81
xor eax, eax
mov rdi, rdx
lea r9d, [rsi - 3]
repne scasw ax, word [rdi]
xor r8d, r8d
not rcx
lea eax, [rcx + rcx + 2]
mov rcx, qword [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
lea rdx, [0x1400055e0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x60]
lea rdx, [0x140005600]
mov r9d, esi
xor r8d, r8d
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
lea rdx, [0x140005618]
mov r9d, esi
xor r8d, r8d
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor ecx, ecx
call qword [sym.imp.MSVCR90.dll__time64]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x70], rax
call qword [sym.imp.MSVCR90.dll__localtime64]
lea rcx, [rsp + 0x78]
lea r8d, [rsi + 0x20]
mov rdx, rax
call sub.MSVCR90.dll_memcpy
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x80]
shr rdx, 0x20
lea r9d, [rax + 1]
shr rax, 0x20
mov dword [rsp + 0x20], edx
lea r8d, [rax + 0x76c]
lea rdx, str._04d_02d_02d
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCR90.dll_sprintf]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCR90.dll_atol]
mov dword [rsp + 0x28], esi
mov r9d, esi
sub eax, 0xbc614e
mov dword [rsp + 0x5c], eax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x50]
lea rdx, str.SubNet_Value
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140001368
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x320]
xor rcx, rsp
call fcn.140003e30
mov rsi, qword [rsp + 0x350]
add rsp, 0x330
pop rdi
ret