Function at 0x1800038d0
Capabilities:
Set registry value

Disassembly:
push rbx
sub rsp, 0x30
mov rcx, qword [0x18000b308]
xor ebx, ebx
lea rax, [rsp + 0x40]
lea rdx, [0x18000abb0]
lea r9d, [rbx + 4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5e0], ebx
mov dword [0x18000b598], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abb4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b59c], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abb8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5a0], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abbc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5a4], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abc0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b5a8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abc4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5ac], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180007438]
call fcn.180003590
mov rcx, qword [0x18000b308]
lea rax, [0x18000b464]
lea r9d, [rbx + 4]
lea rdx, [0x18000abcc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b464], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b5b0], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x18000abd0]
mov rcx, qword [0x18000b308]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abd4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5b4], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abd8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5b8], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abdc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b5bc], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180007438]
call fcn.180003660
mov rcx, qword [0x18000b308]
lea rax, [0x18000b3d8]
lea r9d, [rbx + 4]
lea rdx, [0x18000abe4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b3d8], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abe8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5c0], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abec]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5c4], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000abf0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b5c8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b5cc], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x18000abf4]
mov rcx, qword [0x18000b308]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180007438]
call fcn.180003730
mov rcx, qword [0x18000b308]
lea rax, [0x18000b468]
lea r9d, [rbx + 4]
lea rdx, [0x18000abfc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b468], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac00]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5d0], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac04]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5d4], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac08]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000b5d8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000b308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac0c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b5dc], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180007438]
call fcn.180003800
mov rcx, qword [0x18000b308]
lea rax, [0x18000b424]
lea r9d, [rbx + 4]
lea rdx, [0x18000ac14]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000b424], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor r11d, r11d
mov dword [0x18000b414], ebx
mov qword [0x18000b3e0], r11
mov qword [0x18000b3e8], r11
mov qword [0x18000b3f0], r11
mov qword [0x18000b3f8], r11
mov qword [0x18000b400], r11
mov qword [0x18000b408], r11
mov word [0x18000b410], r11w
mov dword [0x18000b418], ebx
mov dword [0x18000b41c], ebx
mov dword [0x18000b420], ebx
add rsp, 0x30
pop rbx
ret