Function at 0x1400e7530
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rbx, r8
mov r13, rdx
xor r12d, r12d
mov dword [rbp + 0x58], r12d
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], r12b
cmp r9b, 1
jne 0x1400e76cb
lea ecx, [r12 + 0x20]
call fcn.1401cb054
mov qword [rbp - 8], Ordinal_33
movzx ecx, byte [rbp - 0x20]
mov byte [rax], cl
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x10], r12
lea r14d, [r12 + 0x10]
mov ecx, dword [0x14031a0e8]
mov rax, qword gs:[0x58]
mov r15, qword [rax + rcx*8]
mov r12d, 0x4e90
mov r13d, 0x6228
mov esi, r13d
mov ebx, 0x6220
add r12, r15
movzx edi, byte [rbp + 0x58]
mov eax, dword [rbx + r15]
test al, 1
jne 0x1400e75f6
or eax, 1
mov dword [rbx + r15], eax
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
mov rcx, r12
call fcn.1400ea3d0
nop
mov rsi, r13
mov eax, dword [rbx + r15]
test al, 2
jne 0x1400e7616
or eax, 2
mov dword [rbx + r15], eax
mov dword [r15 + rsi], 0x61
mov dword [r15 + rsi + 4], 0x7a
lea rcx, [r15 + rsi]
mov rdx, r12
call fcn.1400e7df0
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp - 8]
cmp rdx, r8
jae 0x1400e764e
lea rcx, [rdx + 1]
mov qword [rbp - 0x10], rcx
lea rcx, [rbp - 0x20]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x20]
mov byte [rcx + rdx], al
mov byte [rcx + rdx + 1], 0
jmp 0x1400e7664
movzx r9d, al
movzx r8d, dil
mov edx, 1
lea rcx, [rbp - 0x20]
call fcn.14009e320
sub r14, 1
jne 0x1400e75d4
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov dword [rsp + 0x28], reloc.WS2_32.dll_recv
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 1]
xor r8d, r8d
mov rbx, qword [rbp + 0x50]
mov rdx, rbx
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdx, rbx
test eax, eax
jne 0x1400e7783
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova r8, qword [rbp - 0x20]
lea rcx, str.___set__s_to:__s_n
call fcn.140082ae0
jmp 0x1400e7790
cmp r9b, 2
jne 0x1400e7744
mov ecx, dword [0x14031a0e8]
mov rax, qword gs:[0x58]
mov rsi, qword [rax + rcx*8]
mov r15d, 0x75c0
mov eax, dword [r15 + rsi]
mov r14d, 0x6230
test al, 1
jne 0x1400e7713
or eax, 1
mov dword [r15 + rsi], eax
lea rdi, [rsi + r14]
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
mov rcx, rdi
call fcn.1400ea3d0
nop
mov ecx, dword [r15 + rsi]
mov eax, 0x75c8
test cl, 2
jne 0x1400e7734
or ecx, 2
mov dword [r15 + rsi], ecx
mov dword [rsi + rax], r12d
mov dword [rsi + rax + 4], 0xffffffff
lea rcx, [rsi + rax]
lea rdx, [rsi + r14]
call fcn.1400e7ec0
mov dword [rbp + 0x58], eax
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, rbx
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdx, rbx
test eax, eax
jne 0x1400e7783
mov r8d, dword [rbp + 0x58]
lea rcx, str.___set__s_to:__i_n
call fcn.140082ae0
jmp 0x1400e7790
lea rcx, str.____failed_to_set__s_n
call fcn.140082ae0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400e77ce
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e77c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e77c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401cb090
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret