Function at 0x140005eb4
Capabilities:
Delete registry key
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov r14, rcx
mov eax, dword [rcx + 0x10]
mov dword [rbp + 0x40], eax
mov ebx, 4
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.AutoStart
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [r14 + 0x14]
mov dword [rbp + 0x40], eax
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.Minimized
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [r14 + 0x18]
mov dword [rbp + 0x40], eax
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.UpdateCheck
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [r14 + 0x1c]
mov dword [rbp + 0x40], eax
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.wSensors
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [r14 + 0x20]
mov dword [rbp + 0x40], eax
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.eSensors
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [r14 + 0x24]
mov dword [rbp + 0x40], eax
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.bSensors
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [r14 + 0x28]
mov dword [rbp + 0x40], eax
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.Refresh
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rdx, [0x14002ce50]
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeA]
lea rsi, [r14 + 8]
xor r15d, r15d
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14002ce50]
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], r15b
mov rax, qword [r14 + 0xc8]
mov rbx, qword [rax]
mov r13d, 0x1000
cmp rbx, rax
je 0x1400064c2
cmp qword [rbx + 0x70], r15
je 0x14000617f
mov edx, dword [rbx + 0x20]
lea rcx, [rsp + 0x70]
call fcn.1400057a0
nop
mov r9d, 2
lea r8, [0x14002d190]
mov rcx, rax
call fcn.140002ca0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.1400020e0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14000610a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, r13
jb 0x140006104
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006519
call fcn.14000bc60
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140006142
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r13
jb 0x14000613d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000651f
call fcn.14000bc60
lea rcx, [rbx + 0x60]
cmp qword [rcx + 0x18], 0x10
jb 0x140006150
mov rcx, qword [rcx]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
mov eax, dword [rbx + 0x70]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rsi]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rdi, [rbx + 0x58]
cmp dword [rdi], r15d
je 0x140006279
mov edx, dword [rbx + 0x20]
lea rcx, [rsp + 0x70]
call fcn.1400057a0
nop
mov r9d, 2
lea r8, [0x14002d194]
mov rcx, rax
call fcn.140002ca0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400020e0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140006213
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, r13
jb 0x14000620d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006525
call fcn.14000bc60
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14000624b
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r13
jb 0x140006246
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000652b
call fcn.14000bc60
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
mov eax, 4
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor r8d, r8d
mov rcx, qword [rsi]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rdi, [rbx + 0x84]
cmp dword [rdi], 0xffffff
je 0x140006379
mov edx, dword [rbx + 0x20]
lea rcx, [rsp + 0x70]
call fcn.1400057a0
nop
mov r9d, 2
lea r8, [0x14002d198]
mov rcx, rax
call fcn.140002ca0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400020e0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140006313
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, r13
jb 0x14000630d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006531
call fcn.14000bc60
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14000634b
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r13
jb 0x140006346
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006537
call fcn.14000bc60
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
mov eax, 4
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor r8d, r8d
mov rcx, qword [rsi]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rdi, [rbx + 0x5c]
cmp dword [rdi], r15d
je 0x140006473
mov edx, dword [rbx + 0x20]
lea rcx, [rsp + 0x70]
call fcn.1400057a0
nop
mov r9d, 2
lea r8, [0x14002d19c]
mov rcx, rax
call fcn.140002ca0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1400020e0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14000640d
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, r13
jb 0x140006407
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000653d
call fcn.14000bc60
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140006445
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r13
jb 0x140006440
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006543
call fcn.14000bc60
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
mov eax, 4
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor r8d, r8d
mov rcx, qword [rsi]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], r15b
je 0x14000649b
mov rax, qword [rbx + 8]
jmp 0x140006490
cmp rbx, qword [rax + 0x10]
jne 0x140006496
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r15b
je 0x140006483
mov rbx, rax
jmp 0x1400064b6
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], r15b
jne 0x1400064b6
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], r15b
je 0x1400064a7
cmp rbx, qword [r14 + 0xc8]
jmp 0x140006073
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400064f7
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r13
jb 0x1400064f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006513
call fcn.14000bc60
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
int3