Function at 0x14001fdc4
Capabilities:
Delete registry value
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r13
push r14
sub rsp, 0x30
lea rbx, [rcx + 0x426]
mov rsi, rcx
mov rdi, rdx
mov rcx, rbx
call fcn.14005bc90
mov r12d, 1
lea rdx, [0x1400981a8]
add eax, r12d
lea ebp, [r12 + 2]
xor r8d, r8d
mov dword [rsp + 0x28], eax
mov r9d, ebp
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x51e]
lea rdx, str.DevClass
mov r9d, ebp
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x521]
lea rdx, str.Features
mov r9d, ebp
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r14d, [r12 + 3]
lea r11, [rsi + 0x540]
lea rdx, str.TimeStamp
xor r8d, r8d
mov rcx, rdi
mov r9d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x544]
mov rcx, rbx
call fcn.14005bc90
lea rdx, str.FTPAuthorizationExpires
mov r9d, ebp
add eax, r12d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x648]
mov rcx, rbx
call fcn.14005bc90
lea rdx, str.OPPAuthorizationExpires
mov r9d, ebp
add eax, r12d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x74c]
mov rcx, rbx
call fcn.14005bc90
lea rdx, str.BIPAuthorizationExpires
mov r9d, ebp
add eax, r12d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x850]
mov rcx, rbx
call fcn.14005bc90
mov r9d, ebp
add eax, r12d
xor r8d, r8d
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
lea rdx, str.BPPAuthorizationExpires
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x954]
lea rdx, str.DoNotAutoConfigure
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r13d, r13d
lea rdx, str.LinkKey
mov rcx, rdi
cmp dword [rsi + 0x53c], r13d
je 0x14002002a
lea rbx, [rsi + 0x529]
mov r9d, ebp
xor r8d, r8d
mov dword [rsp + 0x28], socket
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x14001fff0
lea rdx, str.LinkKey
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea r8d, [r12 + 0xf]
xor edx, edx
mov rcx, rbx
mov dword [rsi + 0x53c], r13d
call fcn.14005bab0
jmp 0x140020030
lea rbx, [rsi + 0x958]
cmp word [rbx], r13w
je 0x140020030
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.PairedUserName
mov r9d, ebp
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x140020030
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rax, [rsi + 0xb5c]
lea rdx, str.AllowWakeup
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xb60]
lea rdx, str.HidDisabled
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xb64]
lea rdx, str.DefaultAudio
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xb68]
lea rdx, str.Manufacturer
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xb6c]
lea rdx, str.LmpVersion
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xb70]
lea rdx, str.LmpSubVersion
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xb74]
lea rdx, str.BRCMStack
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0xb78]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.Code
mov r9d, ebp
add eax, 2
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0xd80]
mov rcx, rbx
call fcn.14005bc90
lea rdx, str.RemoteName
mov r9d, ebp
add eax, r12d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe7c]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
lea rdx, str.HandsfreeCfg
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe80]
lea rdx, str.ConnectHfIfAvConnected
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe84]
lea rdx, str.HandsFreeVersion
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe88]
lea rdx, str.PopUpGenForAccessPIM
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe8c]
lea rdx, str.ShowUI
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe90]
lea rdx, str.DisableCallNumber
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe94]
lea rdx, str.ManualDun
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe98]
lea rdx, str.DesktopShortcutRemovedByBTW
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe9c]
lea rdx, str.ProgramFilesShortcutRemovedByBTW
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xea0]
lea rdx, str.PIMSyncInit
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xea4]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
mov r9d, r14d
lea rdx, str.PIMAcceptBizcard
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xea8]
lea rdx, str.PIMAcceptCalendarItems
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xeac]
lea rdx, str.PIMAcceptEmailMessages
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xeb0]
lea rdx, str.PIMAcceptNotes
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x10bc]
lea rdx, str.AllowHFCalls
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0xeb4]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.IconPath
mov r9d, ebp
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x10c0]
lea rdx, str.VoiceRecognitionEnabled
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x10c4]
lea rdx, str.SupportBroadcomFeatures
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x10c8]
lea rdx, str.BroadcomFeatures
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x10cc]
lea rdx, str.ImageFileOption
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x10d0]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.ImageSaveFolder
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x12d8]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.ImageOpenCommand
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x14e0]
lea rdx, str.AudioFileOption
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x14e4]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.AudioSaveFolder
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x16ec]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.AudioOpenCommand
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x18f4]
lea rdx, str.VideoFileOption
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x18f8]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.VideoSaveFolder
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x1b00]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.VideoOpenCommand
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0xe78]
lea rdx, str.ConnectMapAtStartup
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x1d08]
lea rdx, str.ConnectHeadset
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x1d0c]
lea rdx, str.NeedSCO
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x1d10]
lea rdx, str.PairedAsHID
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x1d14]
lea rdx, str.HidHost
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x1d18]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.RASEntryUserName
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x1f20]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.RASEntryPassword
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x2128]
mov rcx, rbx
call fcn.14005d25c
lea rdx, str.RASEntryPhoneNumber
mov r9d, r12d
lea ecx, [rax + rax + 2]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [rsi + 0x2330]
mov rcx, rbx
call fcn.14005d25c
mov r9d, r12d
xor r8d, r8d
lea ecx, [rax + rax + 2]
lea rdx, str.RASEntryModemString
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rbx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r11, [rsi + 0x2538]
lea rdx, str.RASEntryRequestResult
mov r9d, r14d
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r14
pop r13
pop r12
ret