Function at 0x14000b520
Capabilities:
Set registry value

Disassembly:
test rcx, rcx
je 0x14000b7e8
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x50
mov rdi, rcx
mov qword [rsp + 0x78], rbx
xor ecx, ecx
mov qword [rsp + 0x80], r14
mov rsi, rdx
call fcn.140035ae0
mov edx, 8
lea rcx, [rbp + 0x20]
lea rbx, [rax - 0x54a48e00]
call fcn.140054ac0
mov rdx, qword [rbp + 0x20]
lea r9, [0x1401b70c0]
and edx, 0x1ffffff
movabs rax, 0x4400000000000000
shl rdx, 0x20
mov rcx, rdi
or rdx, rbx
mov rbx, 0xffffffffffffffff
or rdx, rax
mov r8, rbx
mov qword [rsp + 0x20], rdx
mov rdx, rsi
call fcn.140003a90
lea rax, [rbp + 0x20]
xor r14d, r14d
mov r9d, 0x20119
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov qword [rbp + 0x20], r14
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14000b63e
lea rax, [rbp + 0x20]
mov qword [rbp + 0x20], r14
mov r9d, 0x20106
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14000b63e
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
lea rdx, str.SOFTWAREMetaQuotes_Software
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov dword [rsp + 0x28], 0x100
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x20], r14d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x14000b648
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, rbx
nop dword [rax + rax]
cmp word [rdi + rax*2 + 2], r14w
lea rax, [rax + 1]
jne 0x14000b650
lea esi, [rax*2 + 2]
test esi, esi
je 0x14000b6c0
lea rax, [rbp + 0x20]
mov qword [rbp + 0x20], r14
mov r9d, 0x20106
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000b6c0
mov rcx, qword [rbp + 0x20]
lea r9d, [rax + 1]
mov dword [rsp + 0x28], esi
lea rdx, [0x1401b6784]
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp + 0x20]
mov qword [rbp + 0x20], r14
mov r9d, 0x20119
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14000b75a
lea rax, [rbp + 0x20]
mov qword [rbp + 0x20], r14
mov r9d, 0x20106
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14000b75a
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
lea rdx, str.SOFTWAREMetaQuotes_Software
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov dword [rsp + 0x28], 0x100
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x20], r14d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x14000b764
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp word [rdi + rbx*2 + 2], r14w
lea rbx, [rbx + 1]
jne 0x14000b764
lea ebx, [rbx*2 + 2]
test ebx, ebx
je 0x14000b7d4
lea rax, [rbp + 0x20]
mov qword [rbp + 0x20], r14
mov r9d, 0x20106
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000b7d4
mov rcx, qword [rbp + 0x20]
lea r9d, [rax + 1]
mov dword [rsp + 0x28], ebx
lea rdx, [0x1401b6784]
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret