Function at 0x140070440
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x140401ac0]
xor rax, rsp
mov qword [rbp + 0x80], rax
xor r14d, r14d
lea edx, [r14 + 5]
lea rcx, [rbp + 0x38]
call fcn.14007bdf0
mov rsi, rax
lea edx, [r14 + 5]
lea rcx, [rbp + 0x18]
call fcn.14007bdf0
mov rdi, rax
lea edx, [r14 + 5]
lea rcx, [rbp - 8]
call fcn.14007bdf0
mov rbx, rax
lea edx, [r14 + 5]
lea rcx, [rbp - 0x28]
call fcn.14007bdf0
mov r10, rax
mov rdx, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
mov rcx, r8
sub rcx, rdx
cmp rcx, 1
jb 0x1400704e8
lea rax, [rdx + 1]
mov qword [r10 + 0x10], rax
mov rax, r10
cmp r8, 0xf
jbe 0x1400704e0
mov rax, qword [r10]
mov word [rax + rdx], reloc.WLDAP32.dll_Ordinal_45
jmp 0x14007050a
mov qword [rsp + 0x20], 1
lea r9, [0x14026c360]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r10
call fcn.1400617f0
mov r10, rax
movups xmm0, xmmword [r10]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [r10 + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [r10 + 0x10], r14
mov qword [r10 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r10], 0
mov r9, rbx
lea r8, [rbp - 0x48]
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x58]
call fcn.140067440
nop
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14007057d
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov word [rax + rcx], reloc.WLDAP32.dll_Ordinal_45
lea rax, [rsp + 0x58]
jmp 0x14007059e
mov qword [rsp + 0x20], 1
lea r9, [0x14026c360]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x58]
call fcn.1400617f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp - 0x68]
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140067440
nop
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14007060e
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], reloc.WLDAP32.dll_Ordinal_45
lea rax, [rsp + 0x38]
jmp 0x14007062f
mov qword [rsp + 0x20], 1
lea r9, [0x14026c360]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x38]
call fcn.1400617f0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rsi
lea r8, [rsp + 0x78]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.140067440
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1400706a2
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007069c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400709f6
call fcn.140222bac
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1400706df
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400706da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400709fc
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rsp + 0x48], xmm0
mov byte [rsp + 0x38], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x14007072e
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070728
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070a02
call fcn.140222bac
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x14007076b
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070766
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070a08
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x1400707ba
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400707b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070a0e
call fcn.140222bac
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400707f5
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400707f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070a14
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140070841
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007083c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070a1a
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x14007088d
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070888
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070a20
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x1400708d9
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400708d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070a26
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
mov qword [rbp + 0x58], r14
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rdx, qword [rbp + 0x60]
lea r8, [rbp + 0x60]
cmova r8, qword [rbp + 0x60]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], 0
jne 0x140070932
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r8
mov r9d, 1
xor r8d, r8d
lea rdx, str.ProductId
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 0xa
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Success..__n
lea rcx, [0x140412ac0]
call fcn.14005bdd0
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400709c4
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400709bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400709f0
call fcn.140222bac
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.140222c70
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
int3