Function at 0x1400146f0
Capabilities:
Set registry value

Disassembly:
mov r11, rsp
push rbp
push r12
push r15
lea rbp, [r11 - 0x5f]
sub rsp, 0x90
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov rax, qword [0x14002d670]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r15, rcx
xor r12d, r12d
mov qword [rbp + 7], r12
mov edi, r12d
mov qword [r11 - 0x68], r12
lea rax, [rbp + 7]
mov qword [r11 - 0x70], rax
mov qword [r11 - 0x78], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
je 0x1400147f4
lea rdx, str.Failed_to_create_open_settings_key
lea rcx, [rbp + 0x17]
call fcn.140009378
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
lea rcx, [rbp + 0x17]
call fcn.1400092d4
lea rbx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rbx, qword [rbp + 0x17]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov rdx, rbx
call fcn.140008768
mov edi, eax
test eax, eax
jns 0x1400147d8
mov ecx, eax
call fcn.1400091d8
nop
lea rcx, [rbp + 0x17]
call fcn.14000a404
jmp 0x1400148d6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
jns 0x1400147ca
mov ecx, edi
jmp 0x1400147c4
mov rax, qword [r15 + 0x538]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1400148d6
lea rsi, [rbx + 0x30]
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140014818
mov rcx, qword [rsi]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r12w
jne 0x14001481c
add eax, eax
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140014835
mov rcx, qword [rsi]
lea rdi, [rbx + 0x10]
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x140014846
mov r8, qword [rdi]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
xor edx, edx
lea r9d, [rdx + 1]
mov rcx, qword [rbp + 7]
call qword [sym.imp.api_ms_win_core_registry_l2_1_0.dll_RegSetKeyValueW]
test eax, eax
je 0x140014892
cmp qword [rdi + 0x18], 8
jb 0x14001486d
mov rdi, qword [rdi]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r8, rdi
lea rdx, str.Failed_to_write__s
call fcn.140008980
jmp 0x1400148ba
cmp qword [rsi + 0x18], 8
jb 0x14001489c
mov rsi, qword [rsi]
cmp qword [rdi + 0x18], 8
jb 0x1400148a6
mov rdi, qword [rdi]
mov r9, rsi
mov r8, rdi
lea rdx, str.Wrote_value_Name:__s__Value:__s
xor ecx, ecx
call fcn.140008980
test eax, eax
mov edi, eax
js 0x1400148cf
mov rbx, qword [rbx]
cmp rbx, qword [r15 + 0x538]
jmp 0x140014801
mov ecx, eax
call fcn.1400091d8
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x1400148e5
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov ecx, edi
call fcn.1400091f4
mov eax, edi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140018830
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r12
pop rbp
ret