Function at 0x14000b350
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
movaps xmmword [rsp + 0x110], xmm6
mov rax, qword [0x14001a040]
xor rax, rsp
mov qword [rbp], rax
mov r12, rdx
mov r14, rcx
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rsp + 0x70], eax
movdqu xmmword [rsp + 0x3c], xmm0
mov dword [rsp + 0x4c], esi
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x34], edx
mov dword [rsp + 0x38], ecx
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rsi
lea rax, [rsp + 0x30]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000b3d0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x40]
call fcn.140006fb0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movdqa xmm6, xmmword [0x140014520]
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
lea rcx, [rbp - 0x40]
mov r15, qword [rbp - 0x40]
mov r13, qword [rbp - 0x28]
cmp r13, 0xf
cmova rcx, r15
mov rbx, qword [rbp - 0x30]
cmp rbx, 0xc
jne 0x14000b45e
mov r8, rbx
lea rdx, str.GenuineIntel
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000b45e
mov r12, qword [r14]
mov rdi, qword [r14 + 8]
cmp r12, rdi
je 0x14000b4d5
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdqe
sub rdi, r12
sar rdi, 5
xor edx, edx
div rdi
shl rdx, 5
add rdx, qword [r14]
jmp 0x14000b4b5
lea rcx, [rbp - 0x40]
cmp r13, 0xf
cmova rcx, r15
cmp rbx, 0xc
jne 0x14000ba5f
mov r8, rbx
lea rdx, str.AuthenticAMD
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000ba5f
mov r14, qword [r12]
mov rdi, qword [r12 + 8]
cmp r14, rdi
je 0x14000b4d5
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdqe
sub rdi, r14
sar rdi, 5
xor edx, edx
div rdi
shl rdx, 5
add rdx, qword [r12]
lea rax, [rbp - 0x60]
cmp rax, rdx
je 0x14000b4d5
cmp qword [rdx + 0x18], 0xf
mov r8, qword [rdx + 0x10]
jbe 0x14000b4cc
mov rdx, qword [rdx]
lea rcx, [rbp - 0x60]
call fcn.140006490
lea rcx, [rbp - 0x20]
call fcn.140009b80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r14, [rbp - 0x40]
cmp r13, 0xf
cmova r14, r15
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x14000bb0f
cmp rbx, 0xf
ja 0x14000b52c
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x80], xmm0
jmp 0x14000b5b9
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x14000b565
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400102a0
test rax, rax
je 0x14000ba03
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000b59d
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
je 0x14000b59d
cmp rcx, 0x1000
jb 0x14000b595
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000bb15
jmp 0x14000b546
call fcn.1400102a0
mov rsi, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
lea r8, [rbx + 1]
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0x13
lea rdx, str.ProcessorNameString
lea rcx, [rsp + 0x30]
call fcn.140006fb0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0x2e
lea rdx, str.HARDWAREDESCRIPTIONSystemCentralProcessor0
lea rcx, [rsp + 0x50]
call fcn.140006fb0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000b68b
mov eax, dword [rbp - 0x50]
inc eax
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rcx, qword [rbp - 0x60]
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000b6cb
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000b716
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b711
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b711
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0xa
lea rdx, str.Identifier
lea rcx, [rsp + 0x30]
call fcn.140006fb0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0x2e
lea rdx, str.HARDWAREDESCRIPTIONSystemCentralProcessor0
lea rcx, [rsp + 0x50]
call fcn.140006fb0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000b7e8
mov eax, dword [rbp - 0x10]
inc eax
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rcx, qword [rbp - 0x20]
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000b828
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b823
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b823
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000b873
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b86e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b86e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0x10
lea rdx, str.VendorIdentifier
lea rcx, [rsp + 0x30]
call fcn.140006fb0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 0x2e
lea rdx, str.HARDWAREDESCRIPTIONSystemCentralProcessor0
lea rcx, [rsp + 0x50]
call fcn.140006fb0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000b945
mov eax, dword [rbp - 0x70]
inc eax
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000b985
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b980
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b980
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000b9d1
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b9cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000ba0f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ba0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000ba56
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ba51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
movdqu xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14000ba9d
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ba98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001051c
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
cmp r13, 0xf
jbe 0x14000bae0
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000bad8
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bad8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14001051c
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.140010160
mov rbx, qword [rsp + 0x170]
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400011c0
nop
call fcn.140001120
int3