Function at 0x140007d70
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1e0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400341a0]
xor rax, rsp
mov qword [rbp + 0x180], rax
movabs rax, 0x8f5a50ee6f79bddc
mov qword [rbp + 0x20], rax
movabs rax, 0xfe8c47e74fa880b9
mov qword [rbp + 0x28], rax
movabs rax, 0x7addf1f89d8cedee
mov qword [rbp + 0x30], rax
movabs rax, 0x9c878995fff3f14a
mov qword [rbp + 0x38], rax
movabs rax, 0xd2d61d28adb24e4e
mov qword [rbp + 0x40], rax
movabs rax, 0xad5d6f52dfabc391
mov qword [rbp + 0x48], rax
movabs r14, 0x8f0d50b26f43bd9f
mov qword [rbp + 0x140], r14
movabs r15, 0xfee347834fc680d0
mov qword [rbp + 0x148], r15
movabs r12, 0x7a8bf1a49dffed99
mov qword [rbp + 0x150], r12
movabs r13, 0x9cb789adffcbf17a
mov qword [rbp + 0x158], r13
movabs rax, 0xd2f81d46addd4e03
mov qword [rbp + 0x160], rax
movabs rax, 0xad5d6f37dfd3c3f4
mov qword [rbp + 0x168], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmm0, xmmword [rbp + 0x40]
vpxor xmm0, xmm0, xmmword [rbp + 0x160]
vmovdqa xmmword [rbp + 0x40], xmm0
xor esi, esi
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], si
lea rax, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
mov rdx, rdi
vzeroupper
nop
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140007eb0
lea rcx, [rbp + 0x60]
cmp rdx, 7
ja 0x140007edf
mov qword [rbp + 0x70], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x20]
call fcn.140013870
mov word [rbp + rbx + 0x60], si
jmp 0x140007ee9
lea r9, [rbp + 0x20]
call fcn.14000cff0
nop
mov qword [rbp + 8], rsi
movabs rax, 0x8f5950f46f0cbdcc
mov qword [rbp + 0x80], rax
movabs rax, 0xfea647d14f878087
mov qword [rbp + 0x88], rax
movabs rax, 0x7ae8f1cd9db2edc5
mov qword [rbp + 0x90], rax
movabs rax, 0x9cd889deffa4f108
mov qword [rbp + 0x98], rax
movabs rax, 0xd2af1d1aada94e65
mov qword [rbp + 0xa0], rax
movabs rax, 0xad326f53dfbdc39d
mov qword [rbp + 0xa8], rax
movabs rax, 0x5eab23647e2ceb0a
mov qword [rbp + 0xb0], rax
movabs rax, 0xef0ca593e1ff2d4b
mov qword [rbp + 0xb8], rax
movabs rax, 0x20ac308ce1dbd189
mov qword [rbp + 0xc0], rax
movabs rax, 0x2bb0bf022794b66a
mov qword [rbp + 0xc8], rax
movabs rax, 0x47e1e5e69a162cf
mov qword [rbp + 0xd0], rax
movabs rax, 0x4deda0f505c2e1ac
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], r13
movabs rax, 0xd2f81d46addd4e03
mov qword [rbp + 0x100], rax
movabs rax, 0xad5d6f37dfd3c3f4
mov qword [rbp + 0x108], rax
movabs rax, 0x5ee823387e5feb7d
mov qword [rbp + 0x110], rax
movabs rax, 0xef69a5e1e18d2d3e
mov qword [rbp + 0x118], rax
movabs rax, 0x20c930dae1afd1e7
mov qword [rbp + 0x120], rax
movabs rax, 0x2bdfbf6b27e7b618
mov qword [rbp + 0x128], rax
movabs rax, 0x40b1e0c69fd62a1
mov qword [rbp + 0x130], rax
movabs rax, 0x4deda0f505c2e1c2
mov qword [rbp + 0x138], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], si
lea rax, [rbp + 0x80]
mov rdx, rdi
vzeroupper
inc rdx
cmp word [rax + rdx*2], 0
jne 0x1400080c6
lea rcx, [rbp + 0x20]
cmp rdx, 7
ja 0x1400080f8
mov qword [rbp + 0x30], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x80]
call fcn.140013870
mov word [rbp + rbx + 0x20], si
jmp 0x140008105
lea r9, [rbp + 0x80]
call fcn.14000cff0
nop
mov qword [rbp], rsi
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
lea rax, [rbp]
mov qword [rsp + 0x20], rax
mov r9d, 0x2011f
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400084bb
mov rbx, qword [rbp]
mov qword [rbp + 8], rbx
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x140008186
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008181
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400084e4
call fcn.140011a4c
movabs rax, 0x8f6350db6f31bdcf
mov qword [rbp + 0xe0], rax
movabs rax, 0xfe9147e74fe680a4
mov qword [rbp + 0xe8], rax
movabs rax, 0x7af9f1c19d89edf0
mov qword [rbp + 0xf0], rax
movabs rax, 0x9cc489c2ffa3f15a
mov qword [rbp + 0xf8], rax
movabs rax, 0xd2971d20adfd4e77
mov qword [rbp + 0x100], rax
movabs rax, 0xad2d6f56dff3c386
mov qword [rbp + 0x108], rax
movabs rax, 0x5e8b23517e33eb0d
mov qword [rbp + 0x110], rax
movabs rax, 0xef06a588e1f92d5f
mov qword [rbp + 0x118], rax
movabs rax, 0x20c930dae1dcd189
mov qword [rbp + 0x120], rax
movabs rcx, 0x2bdfbf6b27e7b618
mov qword [rbp + 0x128], rcx
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], r13
movabs rax, 0xd2f81d46addd4e03
mov qword [rbp + 0xa0], rax
movabs rax, 0xad5d6f37dfd3c3f4
mov qword [rbp + 0xa8], rax
movabs rax, 0x5ee823387e5feb7d
mov qword [rbp + 0xb0], rax
movabs rax, 0xef69a5e1e18d2d3e
mov qword [rbp + 0xb8], rax
movabs rax, 0x20c930dae1afd1e7
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rcx
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqa xmm0, xmmword [rbp + 0x120]
vpxor xmm0, xmm0, xmmword [rbp + 0xc0]
vmovdqa xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], si
lea rax, [rbp + 0xe0]
vzeroupper
nop
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140008310
lea rcx, [rbp + 0x20]
cmp rdi, 7
ja 0x140008341
mov qword [rbp + 0x30], rdi
add rdi, rdi
mov r8, rdi
lea rdx, [rbp + 0xe0]
call fcn.140013870
mov word [rbp + rdi + 0x20], si
jmp 0x140008351
lea r9, [rbp + 0xe0]
mov rdx, rdi
call fcn.14000cff0
nop
mov eax, dword [rbp + 0x70]
lea eax, [rax*2 + 2]
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rcx, qword [rbp + 0x60]
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x1400084ea
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x1400083da
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400083d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008513
call fcn.140011a4c
mov edi, 0x80000000
test rbx, rbx
je 0x140008415
lea rax, [rbx + rdi]
cmp rax, 5
jbe 0x140008412
cmp rbx, 0xffffffff80000007
je 0x140008412
cmp rbx, 0xffffffff80000060
je 0x140008412
cmp rbx, 0xffffffff80000050
je 0x140008412
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, rsi
test rbx, rbx
je 0x140008449
lea rax, [rbx + rdi]
cmp rax, 5
jbe 0x140008449
cmp rbx, 0xffffffff80000007
je 0x140008449
cmp rbx, 0xffffffff80000060
je 0x140008449
cmp rbx, 0xffffffff80000050
je 0x140008449
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x140008485
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008480
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400084b5
call fcn.140011a4c
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.140011530
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140017e08
nop
lea r8, str.RegOpenKeyExW_failed.
mov edx, eax
lea rcx, [rbp + 0x140]
call fcn.140007490
lea rdx, [0x140032d30]
lea rcx, [rbp + 0x140]
call fcn.140013798
nop
call fcn.140017e08
nop
lea r8, str.Cannot_write_string_value:_RegSetValueExW_failed.
mov edx, eax
lea rcx, [rbp + 0x140]
call fcn.140007490
lea rdx, [0x140032d30]
lea rcx, [rbp + 0x140]
call fcn.140013798
nop
call fcn.140017e08
int3