Function at 0x1400e7f10
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
xor r15d, r15d
mov dword [rbp + 0x17], 0x7b037933
xor eax, eax
mov qword [rbp + 0x67], r15
movzx edi, byte [rbp + 0x67]
xorps xmm0, xmm0
mov dword [rbp + 0x39], eax
mov r14, 0xffffffffffffffff
mov dword [rbp + 0x1b], 0x7f077d04
mov dword [rbp + 0x1f], 0x7304710b
mov dword [rbp + 0x23], 0x77067515
mov word [rbp + 0x27], 0x8976
movups xmmword [rbp + 0x29], xmm0
call fcn.140139bd0
mov rbx, qword [rax]
call fcn.140139be0
nop dword [rax]
mov r10, qword [rax]
mov r8, r15
cmp r8, 0x26
jae 0x1400e83d4
movzx r9d, byte [rbp + r8 + 0x17]
mov ecx, r9d
nop dword [rax]
cmp rbx, r8
ja 0x1400e83cb
lea rdx, [r10 + 1]
cmp rbx, rdx
jae 0x1400e7fcd
lea rdi, [r8 + 0xf46f]
movzx eax, dil
and al, cl
add al, al
sub dil, al
sub dil, 9
add dil, r9b
jmp 0x1400e7fe0
je 0x1400e837c
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400e832a
cmp r10, r8
ja 0x1400e83c2
cmp rbx, rdx
jae 0x1400e8005
lea rax, [r8 + 0x140d1b]
and cl, al
add cl, cl
sub al, cl
lea edi, [r9 + rax]
add dil, 0x43
jmp 0x1400e8020
je 0x1400e82eb
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400e82c7
nop dword [rax + rax]
lea rdx, [r10 + rbx]
cmp rdx, r8
jbe 0x1400e80a9
nop dword [rax]
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1400e8086
lea rbx, [rax + 2]
cmp rax, rbx
jb 0x1400e83a5
lea r10, [rbx + 1]
lea rax, [r10 + 1]
cmp rbx, rax
ja 0x1400e805c
mov rbx, rax
lea r10, [rax + 1]
jmp 0x1400e8030
lea ecx, [r8 - 0x18]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r8 + 0x17]
add rax, r10
add r8, rax
lea edi, [r9 + rcx]
sub dil, 0x58
inc r8
jmp 0x1400e7f86
lea edx, [r8 - 0x4e]
mov ecx, reloc.WS2_32.dll_recvfrom
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
movzx edx, r8b
add dil, r9b
jmp 0x1400e8304
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x1400e813e
lea ecx, [r8 + 0x6f]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 9
cmp rdx, 1
je 0x1400e8289
lea rax, [r10 + 1]
cmp rbx, rax
jbe 0x1400e8196
lea ecx, [r8 + 0x73]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x25
cmp rbx, 1
jae 0x1400e823f
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1400e81e7
lea edx, [r8 + 0x6c]
mov ecx, 6
movzx eax, dl
and al, r9b
sub cl, al
movzx eax, byte [rbp + r8 + 0x17]
add rax, r10
add r8, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
inc r8
jmp 0x1400e7f86
jne 0x1400e816a
lea ecx, [r8 + 0x36]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r8 + 0x17]
add rax, r10
add r8, rax
lea edi, [r9 + rcx]
sub dil, 0x7a
inc r8
jmp 0x1400e7f86
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400e80cc
lea edx, [r8 + 0x14]
mov ecx, Ordinal_60
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x1400e833f
jne 0x1400e81b6
movzx edx, r8b
lea ecx, [rdx + 0x51]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x37
jmp 0x1400e8304
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400e80f9
lea ecx, [r8 + 0x2f]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x49
inc r10
dec r8
inc r8
jmp 0x1400e7f86
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400e820b
lea ecx, [r8 + 0x4a]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 6
jmp 0x1400e833f
cmp r10, 1
jb 0x1400e8232
movzx edx, r8b
lea ecx, [rdx + 0x3a]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
add cl, r9b
lea edi, [rcx*2 - 0x2c]
jmp 0x1400e8304
mov byte [rbp + r8 + 0x17], dil
inc r8
jmp 0x1400e7f86
lea edx, [r8 + 0x18]
movzx ecx, r9b
movzx eax, dl
and al, r9b
sub cl, al
add cl, 0x2c
add cl, cl
add cl, dl
movzx edi, cl
lea ecx, [r8 - 0x79]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x4f
add cl, r9b
add cl, dil
mov byte [rbp + r8 + 0x17], cl
add rbx, r10
mov rcx, r14
sub rcx, rdi
add r8, rcx
inc r8
jmp 0x1400e7f86
lea edx, [r8 - 0xa]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
lea ecx, [r8 + 0x65]
inc r10
movzx eax, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x3d
add cl, r9b
movzx eax, cl
mov byte [rbp + r8 + 0x17], al
add rax, r10
sub r8, rax
jmp 0x1400e833f
lea ecx, [r8 - 0x29]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x1f
inc r10
dec r8
inc r8
jmp 0x1400e7f86
movzx edx, r8b
lea ecx, [rdx - 7]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x31
sub dl, 0x57
movzx eax, dl
and al, r9b
add al, al
sub dl, al
add dl, 0x61
add dl, r9b
mov byte [rbp + r8 + 0x17], dl
inc r10
dec r8
inc r8
jmp 0x1400e7f86
lea rax, [r8 + 0x4c62b]
and cl, al
add cl, cl
sub al, cl
lea edi, [r9 + rax]
sub dil, 0x2d
lea edx, [r8 - 0x2c]
inc rbx
movzx eax, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
and al, r9b
sub cl, al
mov rax, r14
sub rax, rbx
add cl, cl
add cl, dl
add cl, r9b
mov byte [rbp + r8 + 0x17], cl
add r8, rax
movzx eax, byte [rbp + r8 + 0x17]
add rax, r10
add r8, rax
inc r8
jmp 0x1400e7f86
lea rax, [r8 + 0x2dd4d]
and cl, al
add cl, cl
sub al, cl
lea edi, [r9 + rax]
sub dil, 0x1b
movzx eax, byte [rbp + r8 + 0x17]
add rax, r10
add r8, rax
inc r8
jmp 0x1400e7f86
sub r8b, 0x33
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
add dil, 0x65
jmp 0x1400e7f70
lea rsi, [rbp + 0x1643aab]
jmp 0x1400e83d8
lea rsi, [rbp + 0xe52f1a]
jmp 0x1400e83d8
lea rsi, [rbp + 0x17]
movzx edi, byte [rbp + 0x67]
xorps xmm0, xmm0
movups xmmword [rbp - 5], xmm0
mov dword [rbp - 9], 0x3020130
nop word [rax + rax]
call fcn.140139bd0
mov rbx, qword [rax]
call fcn.140139be0
nop dword [rax]
mov rdx, qword [rax]
mov r8, r15
cmp r8, 0x14
jae 0x1400e8a83
movzx r9d, byte [rbp + r8 - 9]
mov r10d, r9d
mov ecx, r9d
nop dword [rax]
cmp rbx, r8
ja 0x1400e8a7a
lea rax, [rdx + 1]
cmp rbx, rax
jae 0x1400e8447
movzx eax, r8b
movzx edi, r9b
and al, r10b
add al, al
sub dil, al
add dil, r8b
jmp 0x1400e8474
je 0x1400e8a34
lea rax, [rdx + 2]
cmp rbx, rax
je 0x1400e8a0e
lea rax, [rdx + 7]
cmp rbx, rax
je 0x1400e89f0
lea rax, [rdx + 5]
cmp rbx, rax
je 0x1400e89cf
cmp rdx, r8
ja 0x1400e8a71
lea rax, [rdx + 6]
cmp rbx, rax
jae 0x1400e849b
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
jmp 0x1400e84d0
lea rax, [rdx + 1]
cmp rbx, rax
je 0x1400e89a5
lea rax, [rdx + 3]
cmp rbx, rax
je 0x1400e89f0
lea rax, [rdx + 5]
cmp rbx, rax
je 0x1400e897a
lea rax, [rdx + 2]
cmp rbx, rax
je 0x1400e8917
nop
lea rcx, [rdx + rbx]
cmp rcx, r8
jbe 0x1400e8686
nop dword [rax]
lea rax, [rdx + 0x400]
cmp rbx, rax
je 0x1400e89a5
lea rax, [rdx + 0x10]
cmp rbx, rax
je 0x1400e89f0
lea rax, [rdx + 1]
cmp rbx, rax
je 0x1400e8814
lea rax, [rdx + 0x200]
cmp rbx, rax
je 0x1400e866e
lea rbx, [rdx + 9]
lea rdx, [rbx + 9]
lea rax, [rdx + 9]
cmp rbx, rax
jb 0x1400e8a59
lea rax, [rdx + 0x5a]
cmp rbx, rax
jb 0x1400e85c6
lea rax, [rdx + 0x64]
cmp rbx, rax
jb 0x1400e85ae
lea rax, [rdx + 6]
cmp rbx, rax
jb 0x1400e8626
lea rax, [rdx + 0x7a]
cmp rbx, rax
jb 0x1400e84e0
mov rbx, rax
lea rdx, [rax + 0x7a]
lea rax, [rdx + 0x7a]
cmp rbx, rax
ja 0x1400e85ff
lea rax, [rdx + 0x40]
cmp rbx, rax
ja 0x1400e866e
lea rax, [rdx + 4]
cmp rbx, rax
ja 0x1400e8814
lea rax, [rdx + 0x1000]
cmp rbx, rax
ja 0x1400e85e1
lea rax, [rdx + 0x20]
cmp rbx, rax
ja 0x1400e89a5
mov rbx, rax
lea rdx, [rax + 0x20]
jmp 0x1400e84e0
movzx eax, r8b
movzx edi, r8b
and al, r9b
add al, al
sub dil, al
add dil, r9b
jmp 0x1400e84d0
movzx eax, r9b
movzx edi, r9b
and al, r8b
mov rcx, r10
add al, al
sub dil, al
add dil, r8b
jmp 0x1400e8420
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
dec r8
inc r8
jmp 0x1400e8406
movzx eax, r8b
movzx edi, r8b
and al, r9b
add al, al
sub dil, al
movzx eax, byte [rbp + r8 - 9]
add rax, rdx
add dil, r9b
add r8, rax
inc r8
jmp 0x1400e8406
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
cmp rdx, 0x28
jb 0x1400e88a6
movzx eax, r8b
movzx ecx, r8b
and al, r9b
inc rdx
add al, al
sub cl, al
add cl, r9b
mov byte [rbp + r8 - 9], cl
movzx edi, cl
add dil, dil
dec r8
inc r8
jmp 0x1400e8406
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
jmp 0x1400e8943
lea rax, [rdx + 0x1000]
cmp rbx, rax
jae 0x1400e86a7
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
jmp 0x1400e86ef
lea rax, [rdx + 1]
cmp rbx, rax
jne 0x1400e86bd
movzx eax, r9b
movzx edi, r9b
jmp 0x1400e8a3a
lea rax, [rdx + 3]
cmp rbx, rax
jne 0x1400e86e2
movzx ecx, r9b
movzx eax, r9b
and al, r8b
movzx r10d, r8b
add al, al
sub cl, al
lea edi, [rcx + r8]
jmp 0x1400e892e
lea rax, [rdx + 2]
cmp rbx, rax
je 0x1400e89a5
cmp rcx, 0xa
je 0x1400e88f6
lea rax, [rdx + 0xa]
cmp rbx, rax
jbe 0x1400e8744
movzx eax, r8b
movzx edi, r8b
and al, r9b
add al, al
sub dil, al
add dil, r9b
cmp rbx, 0x41
jae 0x1400e88b3
lea rax, [rdx + 0x41]
cmp rbx, rax
jbe 0x1400e87f5
movzx eax, r8b
movzx edi, r8b
and al, r9b
add al, al
sub dil, al
add dil, r9b
jmp 0x1400e8639
lea rax, [rdx + 1]
cmp rbx, rax
je 0x1400e89a5
lea rax, [rdx + 3]
cmp rbx, rax
jne 0x1400e8792
movzx eax, r9b
movzx r10d, r8b
and al, r8b
mov rcx, r14
add al, al
add rbx, rdx
sub r9b, al
lea edi, [r9 + r8]
lea eax, [r10 + rdi]
add al, r9b
mov byte [rbp + r8 - 9], al
movzx eax, dil
sub rcx, rax
add r8, rcx
inc r8
jmp 0x1400e8406
lea rax, [rdx + 4]
cmp rbx, rax
jne 0x1400e87c6
movzx eax, r8b
movzx edi, r8b
and al, r9b
mov rcx, r14
add al, al
add rbx, rdx
sub dil, al
add dil, r9b
movzx eax, dil
sub rcx, rax
add r8, rcx
inc r8
jmp 0x1400e8406
lea rax, [rdx + 2]
cmp rbx, rax
jne 0x1400e87db
movzx eax, r8b
and al, r9b
jmp 0x1400e891e
lea rax, [rdx + 9]
cmp rbx, rax
jne 0x1400e8715
movzx eax, r9b
movzx edi, r9b
jmp 0x1400e8a3a
lea rax, [rdx + 1]
cmp rbx, rax
jne 0x1400e880b
movzx eax, r9b
movzx edi, r9b
jmp 0x1400e8a3a
lea rax, [rdx + 2]
cmp rbx, rax
jne 0x1400e8821
movzx eax, r9b
movzx edi, r9b
jmp 0x1400e8a14
lea rax, [rdx + 6]
cmp rbx, rax
jne 0x1400e8862
movzx eax, r9b
movzx r10d, r8b
and al, r8b
mov rcx, r14
add al, al
add rbx, rdx
sub r9b, al
lea edi, [r9 + r10]
lea eax, [r10 + rdi]
add al, r9b
mov byte [rbp + r8 - 9], al
movzx eax, dil
sub rcx, rax
add r8, rcx
inc r8
jmp 0x1400e8406
lea rax, [rdx + 7]
cmp rbx, rax
je 0x1400e89f0
lea rax, [rdx + 5]
cmp rbx, rax
jne 0x1400e8639
movzx eax, r8b
movzx edi, r8b
and al, r9b
inc rdx
add al, al
sub dil, al
add dil, r9b
movzx ecx, dil
mov byte [rbp + r8 - 9], cl
dec r8
inc r8
jmp 0x1400e8406
mov byte [rbp + r8 - 9], dil
inc r8
jmp 0x1400e8406
movzx ecx, byte [rbp + r8 - 9]
movzx eax, r9b
and al, r8b
movzx r10d, r8b
add al, al
sub cl, al
lea edi, [r10 + r9]
movzx r9d, cl
add dil, cl
lea eax, [r10 + rdi]
add rbx, rdx
add al, cl
mov rcx, r14
mov byte [rbp + r8 - 9], al
movzx eax, dil
sub rcx, rax
add r8, rcx
inc r8
jmp 0x1400e8406
movzx eax, r9b
movzx ecx, r9b
and al, r8b
movzx edi, r8b
sub dil, byte [rbp + r8 - 9]
add al, al
sub cl, al
movzx r10d, r8b
add dil, cl
jmp 0x1400e892e
movzx eax, r9b
and al, r8b
movzx ecx, r9b
add al, al
sub cl, al
movzx r10d, r8b
lea edi, [rcx + r10]
add r10b, cl
inc rdx
movzx eax, r10b
mov byte [rbp + r8 - 9], al
add rax, rdx
sub r8, rax
movzx eax, r8b
movzx ecx, r8b
and cl, r9b
inc rbx
add cl, cl
sub al, cl
add al, r9b
mov byte [rbp + r8 - 9], al
mov rax, r14
sub rax, rbx
add r8, rax
movzx eax, byte [rbp + r8 - 9]
add rax, rdx
add r8, rax
inc r8
jmp 0x1400e8406
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
movzx eax, dil
mov rcx, r14
sub rcx, rax
add rbx, rdx
add r8, rcx
inc r8
jmp 0x1400e8406
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
movzx ecx, dil
mov byte [rbp + r8 - 9], cl
inc rdx
dec r8
inc r8
jmp 0x1400e8406
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
inc rdx
dec r8
inc r8
jmp 0x1400e8406
movzx eax, r8b
movzx edi, r8b
and al, r9b
add al, al
sub dil, al
add dil, r9b
dec r8
inc r8
jmp 0x1400e8406
movzx eax, cl
movzx edi, cl
and al, r8b
add al, al
sub dil, al
add dil, r8b
movzx eax, dil
mov rcx, r14
sub rcx, rax
add r8, rcx
inc r8
jmp 0x1400e8406
movzx eax, cl
movzx edi, cl
and al, r8b
add al, al
sub dil, al
add dil, r8b
movzx eax, byte [rbp + r8 - 9]
add rax, rdx
add r8, rax
inc r8
jmp 0x1400e8406
movzx eax, r9b
movzx edi, r9b
and al, r8b
add al, al
sub dil, al
add dil, r8b
jmp 0x1400e83f0
lea rbx, [rbp + 0x1665bf7]
jmp 0x1400e8a87
lea rbx, [rbp + 0xe0a0f7]
jmp 0x1400e8a87
lea rbx, [rbp - 9]
mov qword [rsp + 0x40], r15
lea rax, [rbp + 0x67]
mov qword [rsp + 0x38], rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov dword [rsp + 0x28], 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x20], r15d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400e8b0d
nop word [rax + rax]
cmp word [rbx + r14*2 + 2], r15w
lea r14, [r14 + 1]
jne 0x1400e8ad0
mov rcx, qword [rbp + 0x67]
lea eax, [r14*2 + 2]
mov dword [rsp + 0x28], eax
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x67]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret