Function at 0x1800035d0
Capabilities:
Set registry value

Disassembly:
push rbx
sub rsp, 0x30
mov rcx, qword [0x18000a348]
xor ebx, ebx
lea rax, [rsp + 0x40]
lea rdx, [0x180009c0c]
lea r9d, [rbx + 4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a60c], ebx
mov dword [0x18000a5d4], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c10]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5d8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c14]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5dc], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c18]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5e0], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c1c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5e4], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c20]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5e8], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180007428]
call fcn.180003310
mov rcx, qword [0x18000a348]
lea rax, [0x18000a464]
lea r9d, [rbx + 4]
lea rdx, [0x180009c28]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a464], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5ec], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x180009c2c]
mov rcx, qword [0x18000a348]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c30]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5f0], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c34]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5f4], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c38]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a5f8], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180007428]
call fcn.180003430
mov rcx, qword [0x18000a348]
lea rax, [0x18000a418]
lea r9d, [rbx + 4]
lea rdx, [0x180009c40]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a418], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c44]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a5fc], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c48]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a600], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x18000a348]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180009c4c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a604], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000a608], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x180009c50]
mov rcx, qword [0x18000a348]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x180007428]
call fcn.180003500
mov rcx, qword [0x18000a348]
lea rax, [0x18000a4a4]
lea r9d, [rbx + 4]
lea rdx, [0x180009c58]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000a4a4], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor r11d, r11d
mov dword [0x18000a454], ebx
mov qword [0x18000a420], r11
mov qword [0x18000a428], r11
mov qword [0x18000a430], r11
mov qword [0x18000a438], r11
mov qword [0x18000a440], r11
mov qword [0x18000a448], r11
mov word [0x18000a450], r11w
mov dword [0x18000a458], ebx
mov dword [0x18000a45c], ebx
mov dword [0x18000a460], ebx
add rsp, 0x30
pop rbx
ret