Function at 0x1800030c0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
mov rcx, qword [0x1800087f8]
xor ebx, ebx
lea rax, [rsp + 0x40]
lea rdx, [0x1800080b8]
lea r9d, [rbx + 4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008ab8], ebx
mov dword [0x18000897c], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080bc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008a84], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080c0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008a88], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080c4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008a8c], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080c8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008a90], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080cc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008a94], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea edx, [rbx + 2]
lea rcx, [0x180006408]
call fcn.180002ea0
mov rcx, qword [0x1800087f8]
lea rax, [0x180008914]
lea r9d, [rbx + 4]
lea rdx, [0x1800080d4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008914], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008a98], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
mov rcx, qword [0x1800087f8]
lea rdx, [0x1800080d8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080dc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008a9c], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080e0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008aa0], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080e4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008aa4], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea edx, [rbx + 2]
lea rcx, [0x180006408]
call fcn.180002f50
mov rcx, qword [0x1800087f8]
lea rax, [0x1800088c8]
lea r9d, [rbx + 4]
lea rdx, [0x1800080ec]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x1800088c8], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080f0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008aa8], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080f4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008aac], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800087f8]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800080f8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008ab0], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008ab4], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
mov rcx, qword [0x1800087f8]
lea rdx, [0x1800080fc]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [0x180006408]
repne scasb al, byte [rdi]
not rcx
dec rcx
test ecx, ecx
jle 0x180003482
call fcn.180003000
mov rcx, qword [0x1800087f8]
lea rax, [0x180008954]
lea rdx, [0x180008104]
mov r9d, 4
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008954], 0x37f1
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor edx, edx
mov dword [0x180008904], ebx
mov dword [0x180008908], ebx
mov dword [0x18000890c], ebx
mov dword [0x180008910], ebx
mov rbx, qword [rsp + 0x48]
mov qword [0x1800088d0], rdx
mov qword [0x1800088d8], rdx
mov qword [0x1800088e0], rdx
mov qword [0x1800088e8], rdx
mov qword [0x1800088f0], rdx
mov qword [0x1800088f8], rdx
mov word [0x180008900], dx
add rsp, 0x30
pop rdi
ret