Function at 0x140024ce0
Capabilities:
Set registry value

Disassembly:
mov dword [rsp + 8], ecx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x2c0
mov qword [rsp + 0x220], 0xfffffffffffffffe
mov r14d, ecx
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x1400254c4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
xor r15d, r15d
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x58], r15
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_Settings
lea rcx, [rsp + 0x60]
call fcn.14000c950
nop
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x48]
call fcn.14005aea0
mov dword [rsp + 0x2f8], eax
test eax, eax
je 0x140024f0b
lea rdx, str.Failed_to_create_the_registry_Internet_Settings
lea rcx, [rsp + 0x40]
call fcn.14000c670
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140024d89
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x290], rax
lea rax, [rsp + 0x198]
mov qword [rsp + 0x298], rax
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
mov qword [rsp + 0x2a8], rdi
mov rcx, rdi
call fcn.14000d260
mov qword [rsp + 0x1b8], rax
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.ProxyEnableAndSettingsIE_KB_10634
lea rcx, [rsp + 0x198]
call fcn.14000c8e0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14005c860
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x1c0], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x1c8], rax
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x1d0], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0x1a0]
call fcn.14000c8e0
mov rsi, rax
mov qword [rsp + 0x1d8], rdi
mov rcx, rdi
call fcn.14000d260
mov qword [rsp + 0x1e0], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0x80], rcx
lea rdx, str.Failure
lea rcx, [rsp + 0x1a8]
call fcn.14000c8e0
nop
mov r9, rsi
lea r8, [rsp + 0x80]
mov rdx, rax
mov ecx, r14d
call fcn.14005d360
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x1b0], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x140024ec7
mov rdx, qword [rsp + 0x1b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140024edc
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0xc8], rdi
lock xadd dword [rdi + 0x10], ebx
sub ebx, 1
jg 0x140024f04
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
jmp 0x1400254b5
mov dword [rsp + 0x300], 1
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x300]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x2f8], eax
test eax, eax
je 0x140025107
lea rdx, str._Failed_to_update_the_registry_ProxyEnable
lea rcx, [rsp + 0x40]
call fcn.14000c4d0
test rsi, rsi
je 0x140024f7c
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
lea rax, [rsp + 0x88]
mov qword [rsp + 0x1e8], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x1f0], rax
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
mov qword [rsp + 0x1f8], rdi
mov rcx, rdi
call fcn.14000d260
mov qword [rsp + 0x200], rax
add rax, 0x18
mov qword [rsp + 0x88], rax
lea rdx, str.ProxyEnableAndSettingsIE_KB_10634
lea rcx, [rsp + 0xd0]
call fcn.14000c8e0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
lea rdx, [rsp + 0x88]
mov rcx, rax
call fcn.14005c860
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x208], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x210], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x218], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0xd8]
call fcn.14000c8e0
mov rsi, rax
mov qword [rsp + 0x268], rdi
mov rcx, rdi
call fcn.14000d260
mov qword [rsp + 0x228], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0x90], rcx
lea rdx, str.Failure
lea rcx, [rsp + 0xe0]
call fcn.14000c8e0
nop
mov r9, rsi
lea r8, [rsp + 0x90]
mov rdx, rax
mov ecx, r14d
call fcn.14005d360
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xe8], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x1400250c3
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400250d8
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0xf0], rdi
lock xadd dword [rdi + 0x10], ebx
sub ebx, 1
jg 0x140025100
mov rdx, qword [rsp + 0xf0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
jmp 0x1400254b5
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x238], rax
lea rax, [rsp + 0x108]
mov qword [rsp + 0x240], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0xf8]
call fcn.14000c8e0
mov rdi, rax
lea rdx, str.Updated_Internet_Explorer_Settings__Please_restart_Internet_Explorer.
lea rcx, [rsp + 0x100]
call fcn.14000c8e0
mov rbx, rax
lea rdx, str.Success
lea rcx, [rsp + 0x108]
call fcn.14000c8e0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
mov ecx, r14d
call fcn.14005d360
lea rdx, str._local_
lea rcx, [rsp + 0x68]
call fcn.14000c8e0
nop
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x1400254cf
mov rbx, 0xffffffffffffffff
mov rcx, rbx
inc rcx
cmp word [rax + rcx*2], 0
jne 0x1400251b5
inc ecx
mov dword [rsp + 0x308], ecx
add ecx, ecx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.ProxyOverride
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x2f8], eax
test eax, eax
je 0x1400253d2
lea rdx, str._Failed_to_update_the_registry_ProxyOverride
lea rcx, [rsp + 0x40]
call fcn.14000c4d0
test rsi, rsi
je 0x14002521f
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
lea rax, [rsp + 0x98]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x250], rax
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
mov qword [rsp + 0x258], rdi
mov rcx, rdi
call fcn.14000d260
mov qword [rsp + 0x260], rax
add rax, 0x18
mov qword [rsp + 0x98], rax
lea rdx, str.ProxyEnableAndSettingsIE_KB_10634
lea rcx, [rsp + 0x110]
call fcn.14000c8e0
nop
mov r8d, ebx
lea rdx, [rsp + 0x98]
mov rcx, rax
call fcn.14005c860
lea rax, [rsp + 0x118]
mov qword [rsp + 0x2b0], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x270], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x278], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0x118]
call fcn.14000c8e0
mov rsi, rax
mov qword [rsp + 0x280], rdi
mov rcx, rdi
call fcn.14000d260
mov qword [rsp + 0x288], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0xa0], rcx
lea rdx, str.Failure
lea rcx, [rsp + 0x120]
call fcn.14000c8e0
nop
mov r9, rsi
lea r8, [rsp + 0xa0]
mov rdx, rax
mov ecx, r14d
call fcn.14005d360
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x128], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x14002535f
mov rdx, qword [rsp + 0x128]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x130], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x14002538e
mov rdx, qword [rsp + 0x130]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400253a3
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x138], rdi
lock xadd dword [rdi + 0x10], ebx
sub ebx, 1
jg 0x1400253cb
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
jmp 0x1400254b5
test rsi, rsi
je 0x1400253e5
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x140], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x140025419
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x148], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x140025448
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002545d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov rax, qword [rsp + 0x40]
add rax, 0xffffffffffffffe8
mov qword [rsp + 0x150], rax
lock xadd dword [rax + 0x10], ebx
sub ebx, 1
jg 0x14002548e
mov rdx, qword [rsp + 0x150]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov al, 1
jmp 0x1400254b5
add rsp, 0x2c0
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
mov ecx, 0x80004005
call fcn.14000df80
nop
mov ecx, 0x80004005
call fcn.14000df80
int3