Function at 0x140002190
Capabilities:
Encode data using xor
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x140040020]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov eax, dword [0x14003a6f8]
mov rbx, 0xffffffffffffffff
movsd xmm0, qword [str._RUNASADMIN]
mov dword [rbp + 0x3f], eax
movzx eax, byte [0x14003a6fc]
mov byte [rbp + 0x43], al
lea rax, [rbp + 0x37]
movsd qword [rbp + 0x37], xmm0
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400021e0
movdqa xmm0, xmmword [0x14003b390]
mov ecx, 0x42
movdqa xmm1, xmmword [0x14003b4d0]
xor eax, eax
movdqa xmmword [rbp - 9], xmm0
movdqa xmm0, xmmword [0x14003b4b0]
movdqa xmmword [rbp + 0x17], xmm0
mov dword [rbp - 0x19], ecx
mov dword [rbp - 0x15], 0xc1d2dce1
mov dword [rbp - 0x11], 0xdccad6c1
mov dword [rbp - 0xd], 0xded5f6e6
movdqa xmmword [rbp + 7], xmm1
mov dword [rbp + 0x27], 0x94898ea2
mov dword [rbp + 0x2b], 0xf48080
nop dword [rax]
mov ecx, eax
lea rdx, [rbp - 0x15]
add rdx, rcx
lea ecx, [rax - 0x4e]
inc eax
xor byte [rdx], cl
mov ecx, dword [rbp - 0x19]
cmp eax, ecx
jb 0x140002240
mov byte [rbp + rcx - 0x15], 0
lea rax, [rbp + 0x37]
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeDental_DesktopDentalDesktop.exe
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeOrtho_Control_PanelOrthoControlPanel.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeApplianceDesignerApplianceDesigner.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeOrthoAnalyzerOrthoAnalyzer.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeOrthoSystemApplianceDesignerApplianceDesigner.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeOrthoSystemScanItManagerScanItManager.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeOrthoSystemOrthoAnalyzerOrthoAnalyzer.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeTRIOS_SoftwareTRIOS.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeDentalManagerDentalManager.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, str.C:Program_Files3ShapeDental_System_Control_PanelControlPanel.exe
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea rax, [rbp + 0x37]
mov dword [rsp + 0x28], ebx
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, [0x14003a9c0]
mov rcx, 0xffffffff80000001
lea rdx, [rbp - 0x15]
call qword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140006c00
mov rbx, qword [rsp + 0xb0]
add rsp, 0xa0
pop rbp
ret