Function at 0x14000f460
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xf0
mov rax, qword [0x140067040]
xor rax, rsp
mov qword [rbp + 7], rax
mov r15, r9
mov rdi, r8
mov rsi, rcx
mov qword [rbp - 0x61], rcx
mov rax, qword [rbp + 0x77]
mov qword [rbp - 0x61], rax
xor eax, eax
mov qword [rbp - 1], rax
mov rax, qword [0x14006a060]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
mov qword [rbp - 0x71], rax
mov rcx, qword [r8 + 0x10]
mov qword [rbp - 9], rcx
movabs r14, 0x7ffffffffffffffe
mov rax, r14
sub rax, rcx
cmp rax, 9
jb 0x14000f8b3
mov qword [rbp - 0x69], r8
cmp qword [r8 + 0x18], 7
jbe 0x14000f4eb
mov rax, qword [r8]
mov qword [rbp - 0x69], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
lea r13, [rcx + 9]
mov ebx, 7
mov eax, ebx
lea r12, [rbp - 0x59]
lea ecx, [rbx + 3]
cmp r13, rbx
jbe 0x14000f54c
mov rbx, r13
or rbx, rax
cmp rbx, r14
jbe 0x14000f521
mov rbx, r14
jmp 0x14000f528
cmp rbx, rcx
cmovb rbx, rcx
inc rbx
mov qword [rbp - 0x11], rbx
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.14001b6c0
mov r12, rax
lea rax, [rbx - 1]
mov qword [rbp - 0x59], r12
mov ebx, 7
mov qword [rbp - 0x49], r13
mov qword [rbp - 0x41], rax
movups xmm0, xmmword [0x14005b140]
movups xmmword [r12], xmm0
movzx eax, word [0x14005b150]
mov word [r12 + 0x10], ax
lea rcx, [r12 + 0x12]
mov r8, qword [rbp - 9]
add r8, r8
mov rdx, qword [rbp - 0x69]
call fcn.14004bcc0
xor eax, eax
mov word [r12 + r13*2], ax
lea rdx, [0x14005b13c]
lea rcx, [rbp - 0x59]
call fcn.14000d430
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], rbx
mov word [rax], r12w
mov rdx, r15
cmp qword [r15 + 0x18], 7
jbe 0x14000f5d7
mov rdx, qword [r15]
mov r8, qword [r15 + 0x10]
lea rcx, [rsp + 0x50]
call fcn.14000ba20
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x29], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x29], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], rbx
mov word [rax], r12w
lea rdx, [rbp - 0x39]
mov rcx, qword [0x14006a060]
call qword [rbp - 0x71]
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14000f65e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f659
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8b9
call fcn.140028848
movdqa xmm0, xmmword [0x14005d240]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r12w
mov rdx, qword [rbp - 0x79]
cmp rdx, 7
jbe 0x14000f6b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f6ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8bf
call fcn.140028848
movdqa xmm0, xmmword [0x14005d240]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x14000f705
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f700
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f8c5
call fcn.140028848
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14000f712
mov rdx, qword [rdi]
mov qword [rsp + 0x40], r12
lea rax, [rbp - 1]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jns 0x14000f827
mov r13, qword [rdi + 0x10]
mov rax, r14
sub rax, r13
cmp rax, 0x13
jb 0x14000f8ad
cmp qword [rdi + 0x18], 7
jbe 0x14000f76b
mov rdi, qword [rdi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
lea r12, [r13 + 0x13]
lea r15, [rsp + 0x50]
cmp r12, 7
jbe 0x14000f7bf
mov rax, r12
or rax, 7
cmp rax, r14
ja 0x14000f79e
mov r14, rax
cmp rax, 0xa
mov eax, 0xa
cmovb r14, rax
lea rbx, [r14 + 1]
mov qword [rbp - 0x71], rbx
lea rdx, [rbp - 0x71]
lea rcx, [rsp + 0x50]
call fcn.14001b6c0
mov r15, rax
dec rbx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r12
mov qword [rbp - 0x79], rbx
movups xmm0, xmmword [str.Couldnt_Open_HKLM]
movups xmmword [r15], xmm0
movups xmm1, xmmword [0x14005b168]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [0x14005b178]
mov dword [r15 + 0x20], eax
movzx eax, word [0x14005b17c]
mov word [r15 + 0x24], ax
lea rcx, [r15 + 0x26]
lea r8, [r13*2]
mov rdx, rdi
call fcn.14004bcc0
xor eax, eax
mov word [r15 + r12*2], ax
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x10], xmm1
mov byte [rsi + 0x20], 1
jmp 0x14000f883
cmp qword [r15 + 0x18], 7
jbe 0x14000f831
mov r15, qword [r15]
mov eax, dword [rbp + 0x7f]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x61]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8, r15
xor edx, edx
mov rcx, qword [rbp - 1]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov rcx, qword [rbp - 1]
test eax, eax
jns 0x14000f879
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, str.Couldnt_Write_HKLM
mov rcx, rsi
call fcn.14000bbc0
mov byte [rsi + 0x20], 1
jmp 0x14000f883
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [rsi + 0x20], 0
mov rax, rsi
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400284c0
mov rbx, qword [rsp + 0x138]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001340
int3
call fcn.140001340
nop
call fcn.140035764
nop
call fcn.140035764
nop
call fcn.140035764
int3