Function at 0x1400bf430
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rbx, r8
mov r13, rdx
xor r12d, r12d
mov dword [rbp + 0x58], r12d
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], r12b
cmp r9b, 1
jne 0x1400bf5cb
lea ecx, [r12 + 0x20]
call fcn.14019eb90
mov qword [rbp - 8], Ordinal_33
movzx ecx, byte [rbp - 0x20]
mov byte [rax], cl
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x10], r12
lea r14d, [r12 + 0x10]
mov ecx, dword [0x1402f5b28]
mov rax, qword gs:[0x58]
mov r15, qword [rax + rcx*8]
mov r12d, 0x4e90
mov r13d, 0x6228
mov esi, r13d
mov ebx, 0x6220
add r12, r15
movzx edi, byte [rbp + 0x58]
mov eax, dword [rbx + r15]
test al, 1
jne 0x1400bf4f6
or eax, 1
mov dword [rbx + r15], eax
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
mov rcx, r12
call fcn.1400c3580
nop
mov rsi, r13
mov eax, dword [rbx + r15]
test al, 2
jne 0x1400bf516
or eax, 2
mov dword [rbx + r15], eax
mov dword [r15 + rsi], 0x61
mov dword [r15 + rsi + 4], 0x7a
lea rcx, [r15 + rsi]
mov rdx, r12
call fcn.1400bfcf0
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp - 8]
cmp rdx, r8
jae 0x1400bf54e
lea rcx, [rdx + 1]
mov qword [rbp - 0x10], rcx
lea rcx, [rbp - 0x20]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x20]
mov byte [rcx + rdx], al
mov byte [rcx + rdx + 1], 0
jmp 0x1400bf564
movzx r9d, al
movzx r8d, dil
mov edx, 1
lea rcx, [rbp - 0x20]
call fcn.140070e10
sub r14, 1
jne 0x1400bf4d4
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov dword [rsp + 0x28], reloc.WS2_32.dll_recv
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 1]
xor r8d, r8d
mov rbx, qword [rbp + 0x50]
mov rdx, rbx
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdx, rbx
test eax, eax
jne 0x1400bf683
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova r8, qword [rbp - 0x20]
lea rcx, str.___set__s_to:__s_n
call fcn.140074900
jmp 0x1400bf690
cmp r9b, 2
jne 0x1400bf644
mov ecx, dword [0x1402f5b28]
mov rax, qword gs:[0x58]
mov rsi, qword [rax + rcx*8]
mov r15d, 0x75c0
mov eax, dword [r15 + rsi]
mov r14d, 0x6230
test al, 1
jne 0x1400bf613
or eax, 1
mov dword [r15 + rsi], eax
lea rdi, [rsi + r14]
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
mov rcx, rdi
call fcn.1400c3580
nop
mov ecx, dword [r15 + rsi]
mov eax, 0x75c8
test cl, 2
jne 0x1400bf634
or ecx, 2
mov dword [r15 + rsi], ecx
mov dword [rsi + rax], r12d
mov dword [rsi + rax + 4], 0xffffffff
lea rcx, [rsi + rax]
lea rdx, [rsi + r14]
call fcn.1400bfdc0
mov dword [rbp + 0x58], eax
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, rbx
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdx, rbx
test eax, eax
jne 0x1400bf683
mov r8d, dword [rbp + 0x58]
lea rcx, str.___set__s_to:__i_n
call fcn.140074900
jmp 0x1400bf690
lea rcx, str.____failed_to_set__s_n
call fcn.140074900
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400bf6ce
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400bf6c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400bf6c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14019ebcc
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret