Function at 0x180001950
Capabilities:
Set registry value

Disassembly:
push rbx
sub rsp, 0x30
mov rcx, qword [0x180008848]
xor ebx, ebx
lea rax, [rsp + 0x40]
lea rdx, [0x180008184]
lea r9d, [rbx + 4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x1800089a0], ebx
mov dword [0x180008968], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180008188]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000896c], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x18000818c]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008970], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180008190]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008974], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180008194]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008978], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x180008198]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x18000897c], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x18000637c]
call fcn.1800016e0
mov rcx, qword [0x180008848]
lea rax, [0x180008854]
lea r9d, [rbx + 4]
lea rdx, [0x1800081a0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008854], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008980], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x1800081a4]
mov rcx, qword [0x180008848]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800081a8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008984], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800081ac]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008988], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800081b0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000898c], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x18000637c]
call fcn.1800017b0
mov rcx, qword [0x180008848]
lea rax, [0x180008844]
lea r9d, [rbx + 4]
lea rdx, [0x1800081b8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008844], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800081bc]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008990], ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800081c0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008994], ebx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x180008848]
lea rax, [rsp + 0x40]
lea r9d, [rbx + 4]
lea rdx, [0x1800081c4]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x180008998], ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [0x18000899c], ebx
mov dword [rsp + 0x40], ebx
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, [0x1800081c8]
mov rcx, qword [0x180008848]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [0x18000637c]
call fcn.180001880
mov rcx, qword [0x180008848]
lea rax, [0x180008894]
lea r9d, [rbx + 4]
lea rdx, [0x1800081d0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [0x180008894], 0x37f1
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor r11d, r11d
mov dword [0x180008834], ebx
mov qword [0x180008800], r11
mov qword [0x180008808], r11
mov qword [0x180008810], r11
mov qword [0x180008818], r11
mov qword [0x180008820], r11
mov qword [0x180008828], r11
mov word [0x180008830], r11w
mov dword [0x180008838], ebx
mov dword [0x18000883c], ebx
mov dword [0x180008840], ebx
add rsp, 0x30
pop rbx
ret