Function at 0x14000d1e0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x1400ed1f8]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov dword [rsp + 0x40], edx
xor esi, esi
mov qword [rbp + 8], rsi
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x20], 7
mov word [rbp + 8], si
lea rdx, [0x140000000]
lea rcx, [rbp + 0x28]
call fcn.140051250
nop
cmp byte [rbp + 0x48], 1
je 0x14000d26f
mov ebx, dword [rbp + 0x28]
cmove ebx, esi
movzx eax, byte [0x1400ede84]
cmp al, 4
ja 0x14000d615
mov r8d, ebx
lea edx, [rsi + 4]
lea rcx, str.0N_f_
call fcn.140021870
jmp 0x14000d615
lea rdx, [rbp + 0x28]
lea rcx, [rbp - 0x18]
call fcn.140007e00
nop
lea r11, [rbp - 0x18]
cmp qword [rbp], 8
setae sil
mov rdi, qword [rbp - 0x18]
cmovae r11, rdi
mov rbx, qword [rbp - 8]
lea rdx, [r11 + rbx*2]
mov rcx, r11
call fcn.140003c40
cmp rax, rdx
je 0x14000d2dc
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14000d2b6
cmp cx, 0x2f
jne 0x14000d2c0
add rax, 2
jmp 0x14000d2a2
lea r8, [rdx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14000d2dc
cmp cx, 0x2f
je 0x14000d2dc
mov rdx, r8
cmp rax, r8
jne 0x14000d2c0
sub rdx, r11
sar rdx, 1
cmp rbx, rdx
jb 0x14000d7e3
lea rax, [rbp - 0x18]
test sil, sil
cmovne rax, rdi
mov qword [rbp - 8], rdx
xor esi, esi
mov word [rax + rdx*2], si
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x38]
call fcn.140007e00
movups xmm0, xmmword [rbp - 0x38]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rbp - 0x28]
movups xmmword [rbp + 0x18], xmm1
mov rdi, qword [0x1400f4048]
mov r15, qword [0x1400f4050]
cmp rdi, r15
je 0x14000d5c3
mov r12, qword [rbp - 0x20]
mov r14, qword [rbp - 0x28]
mov r13, qword [rbp - 0x38]
mov rdx, rdi
lea rcx, [rbp - 0x38]
call fcn.140007e00
nop
mov r8d, 1
lea rdx, [0x1400c4b50]
lea rcx, [rbp - 0x38]
call fcn.140007c50
lea rdx, [0x1400edf48]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x1400edf48]
mov r8, qword [0x1400edf58]
mov rcx, rax
call fcn.140007c50
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], esi
mov qword [rsp + 0x60], rsi
lea r8, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae r8, qword [rbp - 0x38]
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], esi
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x50]
call fcn.14000ce00
mov ebx, eax
test eax, eax
jne 0x14000d75a
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
lea rsi, [rbp + 8]
cmp r12, 8
cmovae rsi, r13
cmp r14, 8
jae 0x14000d3fe
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x40], 7
jmp 0x14000d491
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14000d7f5
add rcx, rcx
cmp rcx, 0x1000
jb 0x14000d468
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d7f5
mov rcx, rax
call fcn.140068e20
mov rcx, rax
test rax, rax
je 0x14000d7ef
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000d476
test rcx, rcx
je 0x14000d474
call fcn.140068e20
jmp 0x14000d476
xor eax, eax
mov qword [rbp - 0x58], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1400875f0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x48], r14
lea rdx, [rdi + 0x20]
cmp qword [rdi + 0x38], 8
jb 0x14000d4a3
mov rdx, qword [rdx]
mov r8, qword [rdi + 0x30]
lea rcx, [rbp - 0x58]
call fcn.140007c50
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
jb 0x14000d4c8
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14000d6e1
mov rax, 0xffffffffffffffff
nop
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x14000d4d0
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
lea rdx, [0x1400c4150]
mov rsi, qword [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
test eax, eax
jne 0x14000d6e6
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x14000d553
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d54e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d7ef
call fcn.14005ce30
xor eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], ax
test rsi, rsi
je 0x14000d574
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x14000d5b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d5af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d7fb
call fcn.14005ce30
add rdi, 0x40
xor esi, esi
cmp rdi, r15
jne 0x14000d340
mov ebx, esi
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x14000d605
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d600
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d7e9
call fcn.14005ce30
mov qword [rbp - 8], rsi
mov qword [rbp], 7
mov word [rbp - 0x18], si
movzx ecx, byte [rbp + 0x48]
test ecx, ecx
je 0x14000d672
cmp ecx, 1
jne 0x14000d672
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x14000d662
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d65d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d801
call fcn.14005ce30
mov qword [rbp + 0x38], rsi
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], si
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x14000d6b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d6ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d7dd
call fcn.14005ce30
mov eax, ebx
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.140068e00
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ebx, 0xd
movzx eax, byte [0x1400ede84]
cmp al, 4
ja 0x14000d706
mov r8d, ebx
mov edx, 4
lea rcx, str._O_f_
call fcn.140021870
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x14000d746
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d741
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d7ef
call fcn.14005ce30
xor esi, esi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], si
jmp 0x14000d787
movzx eax, byte [0x1400ede84]
cmp al, 4
ja 0x14000d787
cmp qword [rdi + 0x18], 8
jb 0x14000d76f
mov rdi, qword [rdi]
mov r9d, ebx
mov r8, rdi
mov edx, 4
lea rcx, str.Error_creating_regkey__s_Error:__d
call fcn.140021870
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000d798
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x14000d5c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d7d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d7fb
call fcn.14005ce30
jmp 0x14000d5c5
call fcn.14008c3ec
nop
call fcn.14000a970
nop
call fcn.14008c3ec
nop
call fcn.14008c3ec
int3
call fcn.140002540
nop
call fcn.14008c3ec
nop
call fcn.14008c3ec
int3