Function at 0x140007ac0
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x1a0
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x14006ee08]
xor rax, rsp
mov qword [rsp + 0x190], rax
mov rdi, rcx
mov rax, qword [0x140070820]
mov ecx, dword [rax + 4]
test ecx, ecx
jne 0x140007b03
dec dword [rax]
jmp 0x140007b0e
cmp ecx, 1
jne 0x140007d5d
inc dword [rax]
mov rdx, qword [0x140070820]
mov r8d, dword [rdx]
mov ecx, r8d
test r8d, r8d
je 0x140007d55
sub ecx, 1
je 0x140007d4b
sub ecx, 1
je 0x140007bae
cmp ecx, 1
je 0x140007b5d
mov eax, dword [rdx + 4]
test eax, eax
jne 0x140007b49
lea eax, [r8 + 1]
mov dword [rdx], eax
jmp 0x140007d5d
cmp eax, 1
jne 0x140007d5d
lea eax, [r8 - 1]
mov dword [rdx], eax
jmp 0x140007d5d
lea rcx, [rdi + 0xb88]
xor edx, edx
call fcn.140018c6c
lea rcx, [rdi + 0xae0]
xor edx, edx
call fcn.140018c6c
lea rcx, [rdi + 0xa38]
xor edx, edx
call fcn.140018c6c
call fcn.14000da90
test eax, eax
je 0x140007b9d
mov rcx, rdi
call fcn.140006070
jmp 0x140007d5d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x2b0]
jmp 0x140007d5d
add rdx, 8
lea rcx, [rdi + 0x840]
call fcn.1400153a0
mov rcx, qword [0x140070820]
add rcx, 8
lea rdx, [0x1400536b8]
call fcn.140006300
xor ebx, ebx
mov dword [rsp + 0x50], ebx
mov rax, qword [0x140070820]
mov rdx, qword [rax + 8]
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea r11, [rsp + 0x50]
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], ebx
lea r9, [0x140054a58]
xor r8d, r8d
lea rdx, str.SoftwareMSISetupDrv
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140007c74
mov dword [rsp + 0x28], 0x104
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 1]
xor r8d, r8d
lea rdx, str.MRUList
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [0x140070820]
mov rcx, qword [rax + 8]
sub rcx, 0x18
call fcn.1400018e0
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x68]
call fcn.14000e8a0
test eax, eax
js 0x140007cac
mov rcx, rdi
call fcn.140006cd0
jmp 0x140007d5d
call fcn.1400197c4
mov rcx, rax
test rax, rax
setne bl
test ebx, ebx
jne 0x140007cc9
mov ecx, 0x80004005
call fcn.140001010
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
mov ecx, 0x83
call fcn.1400197b0
test rax, rax
je 0x140007cff
mov r8d, 0x83
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140001410
mov rbx, qword [rsp + 0x58]
mov r9d, 0x30
lea r8, str.Setup
mov rdx, rbx
mov rcx, rdi
call fcn.14001262c
mov r11, qword [0x140070820]
dec dword [r11]
lea rcx, [rdi + 0x840]
call fcn.140018c9c
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140007d5d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.oledlg.dll_OleUIBusyA]
jmp 0x140007d5d
mov rcx, rdi
call fcn.140005d70
jmp 0x140007d5d
mov rcx, rdi
call fcn.140005bf0
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1400383f0
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
mov rax, qword [0x140070820]
mov dword [rax + 4], 1
jmp 0x140007ac0