Function at 0x140060c50
Capabilities:
Encode data using xor
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140078038]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor ebx, ebx
mov dword [rbp - 0x59], 0x12b212b9
mov rdi, rcx
mov word [rbp + 0x1b], bx
mov ecx, ebx
mov dword [rbp - 0x55], 0x12b912bf
mov dword [rbp - 0x51], 0x12a212ab
mov esi, 0x12ea
mov dword [rbp - 0x4d], 0x12b212ac
mov dword [rbp - 0x49], 0x12811287
mov dword [rbp - 0x45], 0x12901286
mov dword [rbp - 0x41], 0x12831298
mov dword [rbp - 0x3d], 0x129612bb
mov dword [rbp - 0x39], 0x128f1294
mov dword [rbp - 0x35], 0x1292128e
mov dword [rbp - 0x31], 0x12ac1292
mov dword [rbp - 0x2d], 0x13751365
mov dword [rbp - 0x29], 0x1340135e
mov dword [rbp - 0x25], 0x136b136b
mov dword [rbp - 0x21], 0x13751372
mov dword [rbp - 0x1d], 0x13651367
mov dword [rbp - 0x19], 0x13481356
mov dword [rbp - 0x15], 0x13601363
mov dword [rbp - 0x11], 0x137a137e
mov dword [rbp - 0xd], 0x13741364
mov dword [rbp - 9], 0x135d1360
mov dword [rbp - 5], 0x13781375
mov dword [rbp - 1], 0x134b1373
mov dword [rbp + 3], 0x1376135b
mov dword [rbp + 7], 0x136b1377
mov dword [rbp + 0xb], 0x13691369
mov dword [rbp + 0xf], 0x136d137b
mov dword [rbp + 0x13], 0x1340136e
mov dword [rbp + 0x17], 0x1346134f
mov byte [rbp + 0x1d], 1
lea eax, [rsi + rcx]
xor word [rbp + rcx*2 - 0x59], ax
inc rcx
cmp rcx, 0x3a
jb 0x140060d61
lea rax, [rbp + 0x27]
mov byte [rbp + 0x1d], bl
mov r9d, 2
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp - 0x59]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140060e38
cmp qword [rdi + 0x18], 8
mov rdx, rdi
jb 0x140060dad
mov rdx, qword [rdi]
mov dword [rbp - 0x79], 0x128412a9
mov rcx, rbx
mov dword [rbp - 0x75], 0x129d1281
mov dword [rbp - 0x71], 0x129b129b
mov dword [rbp - 0x6d], 0x12831295
mov dword [rbp - 0x69], 0x129212bc
mov dword [rbp - 0x65], 0x12901299
mov word [rbp - 0x61], bx
mov byte [rbp - 0x5f], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rsi + rcx]
xor word [rbp + rcx*2 - 0x79], ax
inc rcx
cmp rcx, 0xc
jb 0x140060df0
mov eax, dword [rdi + 0x10]
mov r9d, 1
mov rcx, qword [rbp + 0x27]
xor r8d, r8d
mov byte [rbp - 0x5f], bl
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x79]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rbp - 0x59], 0x12b212b9
mov rdx, rbx
mov dword [rbp - 0x55], 0x12b912bf
mov dword [rbp - 0x51], 0x12a212ab
mov dword [rbp - 0x4d], 0x12b212ac
mov dword [rbp - 0x49], 0x12811287
mov dword [rbp - 0x45], 0x12901286
mov dword [rbp - 0x41], 0x12831298
mov dword [rbp - 0x3d], 0x129612bb
mov dword [rbp - 0x39], 0x128f1294
mov dword [rbp - 0x35], 0x1292128e
mov dword [rbp - 0x31], 0x12ac1292
mov dword [rbp - 0x2d], 0x13751365
mov dword [rbp - 0x29], 0x1350135e
mov dword [rbp - 0x25], 0x13771361
mov dword [rbp - 0x21], 0x136e1370
mov dword [rbp - 0x1d], 0x136c136b
mov dword [rbp - 0x19], 0x13571379
mov dword [rbp - 0x15], 0x136e1358
mov dword [rbp - 0x11], 0x1366137e
mov dword [rbp - 0xd], 0x134d1360
mov dword [rbp - 9], 0x13721342
mov dword [rbp - 5], 0x13741366
mov dword [rbp - 1], 0x1372137b
mov dword [rbp + 3], 0x137c136c
mov dword [rbp + 7], 0x13681368
mov word [rbp + 0xb], bx
mov byte [rbp + 0xd], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rsi + rdx]
xor word [rbp + rdx*2 - 0x59], ax
inc rdx
cmp rdx, 0x32
jb 0x140060f00
lea rax, [rbp + 0x27]
mov byte [rbp + 0xd], bl
mov r9d, 2
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp - 0x59]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140061049
cmp qword [rdi + 0x18], 8
mov rdx, rdi
jb 0x140060f4c
mov rdx, qword [rdi]
mov dword [rbp - 0x79], 0x128412a2
mov rcx, rbx
mov dword [rbp - 0x75], 0x1299129f
mov dword [rbp - 0x71], 0x128e1280
mov dword [rbp - 0x6d], 0x1294129d
mov word [rbp - 0x69], bx
mov byte [rbp - 0x67], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rsi + rcx]
xor word [rbp + rcx*2 - 0x79], ax
inc rcx
cmp rcx, 8
jb 0x140060f80
mov eax, dword [rdi + 0x10]
mov r9d, 1
mov rcx, qword [rbp + 0x27]
xor r8d, r8d
mov byte [rbp - 0x67], bl
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x79]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp qword [rdi + 0x18], 8
mov rcx, rdi
jb 0x140060fcb
mov rcx, qword [rdi]
mov dword [rbp - 0x79], 0x12bd12a4
mov dword [rbp - 0x75], 0x12a512cc
mov dword [rbp - 0x71], 0x129c1281
mov dword [rbp - 0x6d], 0x129f1284
mov dword [rbp - 0x69], 0x129e1293
mov dword [rbp - 0x65], 0x1291
mov byte [rbp - 0x61], 1
nop dword [rax]
lea eax, [rsi + rbx]
xor word [rbp + rbx*2 - 0x79], ax
inc rbx
cmp rbx, 0xb
jb 0x140061000
mov eax, dword [rdi + 0x10]
lea rdx, [rbp - 0x79]
mov r9d, 1
mov byte [rbp - 0x61], 0
xor r8d, r8d
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x27]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [rdi + 0x18], 8
jb 0x140061053
mov rdi, qword [rdi]
mov rdx, rdi
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_SetComputerNameExW]
test eax, eax
jne 0x140061088
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str.Failed_to_set_new_name_
call fcn.140006ce0
mov rcx, rax
lea rdx, [0x140007a40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140061400
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret