Function at 0x140073e70
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
cmp byte [0x14018f51f], 0
je 0x1400745ed
mov qword [rax + 8], rbx
lea rbx, [rcx + 0x600]
mov rcx, qword [0x14018f4a8]
mov rdx, rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax - 0x10], r14
mov qword [rax - 0x18], r15
call fcn.140082270
movzx r8d, word [0x14018d480]
mov rsi, rax
test r8w, r8w
jne 0x140073ecd
mov r8d, 0xace1
movdqa xmm0, xmmword [0x1401313e0]
lea rdi, [rax + 0x34]
movzx ecx, r8w
lea rax, [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
mov edx, ecx
shr edx, 2
xor r14d, r14d
xor edx, ecx
mov qword [rbp - 0x39], rax
shr edx, 1
movabs r15, 0x9117321122125032
xor edx, ecx
shr r8w, 1
shr edx, 2
xor edx, ecx
mov qword [rbp - 0x49], rdi
mov rcx, qword [0x14018f4a8]
and edx, 1
mov dword [0x14018ee30], edx
shl dx, 0xf
or dx, r8w
mov qword [rbp - 0x41], 0x10
cmp qword [rcx + 0x20], 0xf
mov rax, qword [rcx + 0x28]
movups xmm0, xmmword [rbp - 0x49]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 0x31], r14
movups xmm1, xmmword [rbp - 0x39]
mov word [0x14018d480], dx
lea rdx, [rcx + 8]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov dword [rbp - 0x29], 2
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x37], rax
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp + 7], r15
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x140073f88
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
movzx edx, word [0x14018d480]
test dx, dx
jne 0x140073fbc
mov edx, 0xace1
movdqa xmm0, xmmword [0x140131430]
movzx eax, dx
mov ecx, eax
movdqa xmmword [rbp - 0x19], xmm0
shr ecx, 2
xor ecx, eax
shr dx, 1
shr ecx, 1
xor ecx, eax
mov qword [rbp - 0x49], rdi
shr ecx, 2
xor ecx, eax
mov qword [rbp - 0x41], 0x10
movups xmm0, xmmword [rbp - 0x49]
and ecx, 1
mov qword [rbp - 0x31], r14
mov dword [0x14018ee30], ecx
lea rax, [rbp - 0x19]
mov qword [rbp - 0x39], rax
movups xmm1, xmmword [rbp - 0x39]
shl cx, 0xf
or cx, dx
mov dword [rbp - 0x29], 2
mov word [0x14018d480], cx
mov rcx, qword [0x14018f4a8]
cmp qword [rcx + 0x20], 0xf
lea rdx, [rcx + 8]
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 7], r15
mov rax, qword [rcx + 0x28]
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov qword [rbp + 0x37], rax
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x140074063
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x14018f4a8]
mov rdx, rbx
call fcn.140082270
movzx r8d, word [0x14018d480]
test r8w, r8w
jne 0x1400740a9
mov r8d, 0xace1
movdqa xmm0, xmmword [0x140131420]
lea rbx, [rax + 0x64]
movzx ecx, r8w
lea rax, [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
mov edx, ecx
shr edx, 2
xor edx, ecx
mov qword [rbp - 0x39], rax
shr edx, 1
xor edx, ecx
shr r8w, 1
shr edx, 2
xor edx, ecx
mov qword [rbp - 0x49], rbx
mov rcx, qword [0x14018f4a8]
and edx, 1
mov dword [0x14018ee30], edx
shl dx, 0xf
or dx, r8w
mov qword [rbp - 0x41], 0x10
cmp qword [rcx + 0x20], 0xf
mov rax, qword [rcx + 0x28]
movups xmm0, xmmword [rbp - 0x49]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 0x31], r14
movups xmm1, xmmword [rbp - 0x39]
mov word [0x14018d480], dx
lea rdx, [rcx + 8]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov dword [rbp - 0x29], 2
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x37], rax
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp + 7], r15
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x140074157
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
movzx edx, word [0x14018d480]
test dx, dx
jne 0x14007418b
mov edx, 0xace1
movdqa xmm0, xmmword [0x1401313f0]
movzx eax, dx
mov ecx, eax
movdqa xmmword [rbp - 0x19], xmm0
shr ecx, 2
xor ecx, eax
shr dx, 1
shr ecx, 1
xor ecx, eax
mov qword [rbp - 0x49], rbx
shr ecx, 2
xor ecx, eax
mov qword [rbp - 0x41], 0x10
movups xmm0, xmmword [rbp - 0x49]
and ecx, 1
mov qword [rbp - 0x31], r14
mov dword [0x14018ee30], ecx
lea rax, [rbp - 0x19]
mov qword [rbp - 0x39], rax
movups xmm1, xmmword [rbp - 0x39]
shl cx, 0xf
or cx, dx
mov dword [rbp - 0x29], 2
mov word [0x14018d480], cx
mov rcx, qword [0x14018f4a8]
cmp qword [rcx + 0x20], 0xf
lea rdx, [rcx + 8]
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 7], r15
mov rax, qword [rcx + 0x28]
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov qword [rbp + 0x37], rax
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x140074232
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
movzx edx, word [0x14018d480]
test dx, dx
jne 0x140074266
mov edx, 0xace1
movdqa xmm0, xmmword [0x140131440]
movzx eax, dx
mov ecx, eax
movdqa xmmword [rbp - 0x19], xmm0
shr ecx, 2
xor ecx, eax
shr dx, 1
shr ecx, 1
xor ecx, eax
mov qword [rbp - 0x49], rdi
shr ecx, 2
xor ecx, eax
mov qword [rbp - 0x41], 0x10
movups xmm0, xmmword [rbp - 0x49]
and ecx, 1
mov qword [rbp - 0x31], r14
mov dword [0x14018ee30], ecx
lea rax, [rbp - 0x19]
mov qword [rbp - 0x39], rax
movups xmm1, xmmword [rbp - 0x39]
shl cx, 0xf
or cx, dx
mov dword [rbp - 0x29], 2
mov word [0x14018d480], cx
mov rcx, qword [0x14018f4a8]
cmp qword [rcx + 0x20], 0xf
lea rdx, [rcx + 8]
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 7], r15
mov rax, qword [rcx + 0x28]
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov qword [rbp + 0x37], rax
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x14007430d
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
movzx edx, word [0x14018d480]
test dx, dx
jne 0x140074341
mov edx, 0xace1
movdqa xmm0, xmmword [0x140131410]
movzx eax, dx
mov ecx, eax
movdqa xmmword [rbp - 0x19], xmm0
shr ecx, 2
xor ecx, eax
shr dx, 1
shr ecx, 1
xor ecx, eax
mov qword [rbp - 0x49], rdi
mov rdi, qword [rsp + 0xf0]
shr ecx, 2
xor ecx, eax
mov qword [rbp - 0x41], 0x10
movups xmm0, xmmword [rbp - 0x49]
and ecx, 1
mov qword [rbp - 0x31], r14
mov dword [0x14018ee30], ecx
lea rax, [rbp - 0x19]
mov qword [rbp - 0x39], rax
movups xmm1, xmmword [rbp - 0x39]
shl cx, 0xf
or cx, dx
mov dword [rbp - 0x29], 2
mov word [0x14018d480], cx
mov rcx, qword [0x14018f4a8]
cmp qword [rcx + 0x20], 0xf
lea rdx, [rcx + 8]
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 7], r15
mov rax, qword [rcx + 0x28]
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov qword [rbp + 0x37], rax
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x1400743f0
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
movzx edx, word [0x14018d480]
test dx, dx
jne 0x140074424
mov edx, 0xace1
movdqa xmm0, xmmword [0x140131440]
lea rbx, [rsi + 0x64]
mov rsi, qword [rsp + 0xe8]
movzx eax, dx
mov ecx, eax
movdqa xmmword [rbp - 0x19], xmm0
shr ecx, 2
xor ecx, eax
shr dx, 1
shr ecx, 1
xor ecx, eax
mov qword [rbp - 0x49], rbx
shr ecx, 2
xor ecx, eax
mov qword [rbp - 0x41], 0x10
movups xmm0, xmmword [rbp - 0x49]
and ecx, 1
mov qword [rbp - 0x31], r14
mov dword [0x14018ee30], ecx
lea rax, [rbp - 0x19]
mov qword [rbp - 0x39], rax
movups xmm1, xmmword [rbp - 0x39]
shl cx, 0xf
or cx, dx
mov dword [rbp - 0x29], 2
mov word [0x14018d480], cx
mov rcx, qword [0x14018f4a8]
cmp qword [rcx + 0x20], 0xf
lea rdx, [rcx + 8]
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 7], r15
mov rax, qword [rcx + 0x28]
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov qword [rbp + 0x37], rax
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x1400744d7
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
movzx edx, word [0x14018d480]
test dx, dx
jne 0x14007450b
mov edx, 0xace1
movdqa xmm0, xmmword [0x140131400]
movzx eax, dx
mov ecx, eax
movdqa xmmword [rbp - 0x19], xmm0
shr ecx, 2
xor ecx, eax
shr dx, 1
shr ecx, 1
xor ecx, eax
mov qword [rbp - 0x49], rbx
mov rbx, qword [rsp + 0xe0]
shr ecx, 2
xor ecx, eax
mov qword [rbp - 0x31], r14
mov r14, qword [rsp + 0xc8]
lea rax, [rbp - 0x19]
and ecx, 1
mov qword [rbp - 0x39], rax
movups xmm1, xmmword [rbp - 0x39]
mov dword [0x14018ee30], ecx
shl cx, 0xf
or cx, dx
mov qword [rbp - 0x41], 0x10
movups xmm0, xmmword [rbp - 0x49]
mov word [0x14018d480], cx
mov rcx, qword [0x14018f4a8]
cmp qword [rcx + 0x20], 0xf
lea rdx, [rcx + 8]
mov dword [rbp - 0x29], 2
movups xmmword [rbp + 0xf], xmm0
mov rax, qword [rcx + 0x28]
movsd xmm0, qword [rbp - 0x29]
mov qword [rbp - 9], rax
mov rax, qword [0x14018ee50]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x49]
mov qword [rbp + 7], r15
mov r15, qword [rsp + 0xc0]
mov qword [rbp + 0x37], rax
movups xmmword [rbp + 0x1f], xmm1
movsd qword [rbp + 0x2f], xmm0
jbe 0x1400745ca
mov rdx, qword [rdx]
mov rcx, qword [rcx]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], 0x48
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
add rsp, 0xd0
pop rbp
ret