Function at 0x140007220
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x3f]
sub rsp, 0x88
mov qword [rbp + 0x27], 0xfffffffffffffffe
mov rbx, rcx
mov rcx, qword [rcx + 8]
test rcx, rcx
je 0x140007251
lea rdx, str.Enter_PreserveFrmkPassword___n
call fcn.140025be0
xor esi, esi
mov qword [rbp + 0x7f], rsi
mov qword [rbp + 7], rsi
mov dword [rbp + 0x6f], 3
mov dword [rbp + 0x67], esi
mov dword [rbp + 0x77], esi
lea rdx, str.SOFTWAREIntelWireless.savAppFrameworkSettings
lea rcx, [rbp + 0x17]
call qword [sym.imp.mfc140.dll_Ordinal_310]
nop
lea rdx, str.SOFTWAREIntelWirelessCommonAppFrameworkSettings
lea rcx, [rbp + 0x1f]
call qword [sym.imp.mfc140.dll_Ordinal_310]
nop
lea rdx, str.PWFramework
lea rcx, [rbp + 0xf]
call qword [sym.imp.mfc140.dll_Ordinal_310]
nop
lea rcx, [rbp + 0x17]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 1]
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x14000730f
lea rdx, str.SOFTWAREIntelWirelessCommon.savAppFrameworkSettings
lea rcx, [rbp + 0x17]
call qword [sym.imp.mfc140.dll_Ordinal_1507]
lea rcx, [rbp + 0x17]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 1]
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000745d
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140007324
lea rdx, str.Enter_PreserveFrmkPassword__:_Key_Open_OK_n
call fcn.140025be0
lea rcx, [rbp + 0xf]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x6f]
xor r8d, r8d
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140007452
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000736d
lea rdx, str.Enter_PreserveFrmkPassword___RegQuery_OK_n
call fcn.140025be0
mov ecx, dword [rbp + 0x67]
call sub.mfc140.dll_Ordinal_265
mov rdi, rax
lea rcx, [rbp + 0xf]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f]
xor r8d, r8d
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140007445
mov qword [rbp + 0x7f], rsi
lea rcx, [rbp + 0x1f]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
lea rax, [rbp + 0x77]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 7]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
cmp qword [rbp + 7], 0
je 0x140007445
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000740f
lea rdx, str.Enter_PreserveFrmkPassword__:_New_Key_Create_OK_n
call fcn.140025be0
lea rcx, [rbp + 0xf]
call qword [sym.imp.mfc140.dll_Ordinal_1639]
mov rdx, rax
mov eax, dword [rbp + 0x67]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
mov rcx, qword [rbp + 7]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 7]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test rdi, rdi
je 0x140007452
mov rcx, rdi
call sub.mfc140.dll_Ordinal_266
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0xf]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rbp + 0x1f]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rbp + 0x17]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
add rsp, 0x88
pop rdi
pop rsi
pop rbx
pop rbp
ret