Function at 0x1401368f0
Capabilities:
Set registry value

Disassembly:
mov dword [rsp + 0x18], r8d
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rbx, rdx
mov rdi, rcx
mov dword [rbp + 0x90], r8d
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
cmp qword [rdx + 0x18], 0xf
jbe 0x14013692a
mov rdx, qword [rdx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp - 0x70]
call fcn.140131a68
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
mov r9d, 4
mov dword [rsp + 0x28], r9d
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, qword [rdi]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [rbp + 0x98], eax
test eax, eax
jne 0x1401369bb
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1401369aa
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401369a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401369b5
call fcn.140c4bba0
add rsp, 0x170
pop rdi
pop rbx
pop rbp
ret
call fcn.140c5acfc
nop
movabs rax, 0x583db2a5f0007781
mov qword [rsp + 0x40], rax
movabs rax, 0x1813c94a2d31c8a6
mov qword [rsp + 0x48], rax
movabs rax, 0xc9d7332fa5fd1e5d
mov qword [rsp + 0x50], rax
movabs rax, 0x3897c82ab567b4db
mov qword [rsp + 0x58], rax
movabs rax, 0xf3db0a0388b6f075
mov qword [rsp + 0x60], rax
movabs rax, 0xe40b4fd6f51cd421
mov qword [rsp + 0x68], rax
movabs rax, 0x64fe0c08e536685c
mov qword [rsp + 0x70], rax
movabs rax, 0x1d0f9aec953c2ca2
mov qword [rsp + 0x78], rax
movabs rax, 0xe29a424382f5daa9
mov qword [rbp - 0x80], rax
movabs rcx, 0xdcf99a8b24ef63a4
mov qword [rbp - 0x78], rcx
movabs rax, 0x214fc6d6996712d3
mov qword [rbp - 0x50], rax
movabs rax, 0x7c76a5234c77e89c
mov qword [rbp - 0x48], rax
movabs rax, 0xbdbe415885926a7d
mov qword [rbp - 0x40], rax
movabs rax, 0x4ce4a14dd01594be
mov qword [rbp - 0x38], rax
movabs rax, 0x96ae6662fe968907
mov qword [rbp - 0x30], rax
movabs rax, 0x9f2b75af9057f400
mov qword [rbp - 0x28], rax
movabs rax, 0x5e9b796484604821
mov qword [rbp - 0x20], rax
movabs rax, 0x727de8a9b5415782
mov qword [rbp - 0x18], rax
movabs rax, 0xe29a423ef9d5e0db
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rcx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp - 0x40]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x18]
call fcn.14012d810
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x28]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x38]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xa0]
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x48]
call fcn.1401370cc
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.140135d10
lea rdx, [0x140db1a28]
lea rcx, [rbp]
call fcn.140c4d970
int3