Function at 0x140003310
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xf0
mov rax, qword [0x14371e080]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rdi, rdx
mov rbx, rcx
lea rcx, [rbp - 0x59]
call fcn.140009c10
nop
mov r8, qword [rax]
lea rcx, [rbp - 1]
call fcn.1400020f0
nop
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.140002430
nop
mov rdx, rax
lea rcx, [rbp - 0x41]
call fcn.140002e40
cmp qword [rax + 0x18], 7
jbe 0x140003372
mov rax, qword [rax]
xor esi, esi
mov qword [rsp + 0x40], rsi
lea rcx, [rbp + 0x17]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rdx, qword [rbp - 0x29]
cmp rdx, 7
jbe 0x1400033e9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036b0
call fcn.1400106d0
movdqa xmm0, xmmword [0x1437181a0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], si
mov rdx, qword [rbp - 9]
cmp rdx, 0xf
jbe 0x140003435
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003430
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036b6
call fcn.1400106d0
movdqa xmm0, xmmword [0x1437181b0]
movdqu xmmword [rbp - 0x11], xmm0
mov byte [rbp - 0x21], 0
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x14000348c
mov rdx, qword [rbp + 0xf]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000347b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036bc
call fcn.1400106d0
mov qword [rbp - 1], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 7], xmm0
mov rcx, qword [rbp - 0x59]
test rcx, rcx
je 0x1400034f9
mov rdx, qword [rbp - 0x51]
call fcn.14000ad70
mov rcx, qword [rbp - 0x49]
mov r8, qword [rbp - 0x59]
sub rcx, r8
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x1400034f1
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036c2
mov rcx, r8
call fcn.1400106d0
mov rdx, rbx
lea rcx, [rbp + 0x1f]
call fcn.140002e40
nop
mov r8, rdi
lea rcx, [rbp - 0x59]
call fcn.1400020f0
nop
mov rdx, rax
lea rcx, [rbp - 0x41]
call fcn.140002430
nop
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.140002e40
mov rdx, rax
lea rcx, [rbp + 0x1f]
cmp qword [rbp + 0x37], 7
cmova rcx, qword [rbp + 0x1f]
cmp qword [rax + 0x18], 7
jbe 0x140003547
mov rdx, qword [rax]
mov eax, dword [rbp + 0x2f]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp + 0x17]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rdx, qword [rbp - 9]
cmp rdx, 7
jbe 0x1400035ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036c8
call fcn.1400106d0
movdqa xmm0, xmmword [0x1437181a0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], si
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x1400035f9
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036ce
call fcn.1400106d0
movdqa xmm0, xmmword [0x1437181b0]
movdqu xmmword [rbp - 0x31], xmm0
mov byte [rbp - 0x41], 0
mov rcx, qword [rbp - 0x59]
test rcx, rcx
je 0x140003644
mov rdx, qword [rbp - 0x49]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000363f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036d4
call fcn.1400106d0
mov rcx, qword [rbp + 0x17]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp + 0x37]
cmp rdx, 7
jbe 0x14000368b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003686
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036aa
call fcn.1400106d0
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400106b0
mov rbx, qword [rsp + 0x120]
add rsp, 0xf0
pop rdi
pop rsi
pop rbp
ret
call fcn.14001a900
nop
call fcn.14001a900
nop
call fcn.14001a900
nop
call fcn.14001a900
nop
call fcn.14001a900
nop
call fcn.14001a900
nop
call fcn.14001a900
nop
call fcn.14001a900
int3