Function at 0x180003780
Capabilities:
Set registry value

Disassembly:
push rbx
sub rsp, 0x30
mov rcx, qword [0x18000a308]
xor ebx, ebx
lea rax, [rsp + 0x40]
lea rdx, [0x180009ba8]
lea r9d, [rbx + 4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5e0], ebx
mov dword [0x18000a598], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bac]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a59c], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bb0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5a0], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bb4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5a4], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bb8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5a8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bbc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5ac], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180006438]
call fcn.180003440
mov rcx, qword [0x18000a308]
lea rax, [0x18000a464]
lea r9d, [rbx + 4]
lea rdx, [0x180009bc4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a464], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5b0], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x180009bc8]
mov rcx, qword [0x18000a308]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bcc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5b4], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bd0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5b8], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bd4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5bc], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180006438]
call fcn.180003510
mov rcx, qword [0x18000a308]
lea rax, [0x18000a3d8]
lea r9d, [rbx + 4]
lea rdx, [0x180009bdc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a3d8], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009be0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5c0], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009be4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5c4], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009be8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5c8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5cc], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x180009bec]
mov rcx, qword [0x18000a308]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180006438]
call fcn.1800035e0
mov rcx, qword [0x18000a308]
lea rax, [0x18000a468]
lea r9d, [rbx + 4]
lea rdx, [0x180009bf4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a468], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bf8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5d0], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009bfc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5d4], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c00]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5d8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a308]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c04]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5dc], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180006438]
call fcn.1800036b0
mov rcx, qword [0x18000a308]
lea rax, [0x18000a424]
lea r9d, [rbx + 4]
lea rdx, [0x180009c0c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a424], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor r11d, r11d
mov dword [0x18000a414], ebx
mov qword [0x18000a3e0], r11
mov qword [0x18000a3e8], r11
mov qword [0x18000a3f0], r11
mov qword [0x18000a3f8], r11
mov qword [0x18000a400], r11
mov qword [0x18000a408], r11
mov word [0x18000a410], r11w
mov dword [0x18000a418], ebx
mov dword [0x18000a41c], ebx
mov dword [0x18000a420], ebx
add rsp, 0x30
pop rbx
ret