Function at 0x140225c14
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x368]
sub rsp, 0x430
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1403bf028]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov rdi, r8
mov r15, rdx
mov r13, rcx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov rdx, r8
lea rcx, [rsp + 0x70]
call fcn.140148cc0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rax, qword [rbp - 0x78]
cmp rax, 8
jb 0x140225cc9
lea rax, [rax*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
cmp rax, 0x1000
jb 0x140225cc4
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
ja 0x140225e31
call fcn.140261814
movdqa xmm0, xmmword [0x140333fe0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r12w
mov r10, qword [rdi + 0x10]
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x140225ced
mov rax, qword [rdi]
lea rdx, [rsp + 0x50]
mov rbx, qword [rsp + 0x50]
mov r14, qword [rsp + 0x68]
cmp r14, 8
cmovae rdx, rbx
mov rcx, qword [rsp + 0x60]
cmp rcx, r10
jne 0x140225d46
test rcx, rcx
je 0x140225d88
movzx r8d, word [rdx]
movzx r9d, word [rax]
cmp r8w, r9w
jb 0x140225d46
sub rdx, rax
cmp r8w, r9w
ja 0x140225d46
cmp rcx, 1
je 0x140225d88
dec rcx
add rax, 2
movzx r8d, word [rdx + rax]
movzx r9d, word [rax]
cmp r8w, r9w
jae 0x140225d28
mov sil, 1
mov rcx, qword [r13 + 0x30]
test rcx, rcx
je 0x140225e3d
cmp qword [r15 + 0x10], 0x3fff
ja 0x140225e76
mov eax, 0xffffffff
cmp r10, rax
ja 0x140225eb8
lea r8d, [r10*2 + 2]
test r10, r10
jne 0x140225d8d
lea rax, [0x140324358]
jmp 0x140225d9a
mov sil, r12b
jmp 0x140225d49
mov rax, rdi
cmp qword [rdi + 0x18], 8
jb 0x140225d9a
mov rax, qword [rdi]
mov rdx, r15
cmp qword [r15 + 0x18], 8
jb 0x140225da7
mov rdx, qword [r15]
movzx r9d, sil
inc r9d
mov dword [rsp + 0x28], r8d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r8d, eax
test eax, eax
jne 0x140225ebe
cmp r14, 8
jb 0x140225dfe
mov rcx, rbx
lea rax, [r14*2 + 2]
cmp rax, 0x1000
jb 0x140225df6
mov rbx, qword [rbx - 8]
sub rcx, rbx
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140225e28
mov rcx, rbx
call fcn.140261814
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.1402361b0
mov rbx, qword [rsp + 0x488]
add rsp, 0x430
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140261a5c
nop
jmp 0x140225e30
nop
call fcn.140261a5c
nop
jmp 0x140225e3c
nop
lea rcx, str.EXPAND_SZ
lea rax, [0x140332830]
test sil, sil
cmovne rax, rcx
mov qword [rsp + 0x40], rax
lea r9, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140225670
lea rdx, [0x14033b8e8]
lea rcx, [rbp - 0x70]
call fcn.1402395b8
int3
lea rcx, str.EXPAND_SZ
lea rax, [0x140332830]
test sil, sil
cmovne rax, rcx
mov qword [rsp + 0x40], rax
lea rax, [r13 + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140225770
lea rdx, [0x14033b8e8]
lea rcx, [rbp - 0x70]
call fcn.1402395b8
int3
call fcn.140009dd4
int3
lea rcx, str.EXPAND_SZ
lea rax, [0x140332830]
test sil, sil
cmovne rax, rcx
mov qword [rsp + 0x40], rax
lea rcx, [r13 + 0x10]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x70]
call fcn.140225af0
lea rdx, [0x14033b8e8]
lea rcx, [rbp - 0x70]
call fcn.1402395b8
int3