Function at 0x1400abf20
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x14047b0a0]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rdi, rdx
mov r9, rdx
cmp qword [rdx + 0x18], 8
jb 0x1400abf60
mov r9, qword [rdx]
lea r8, [rcx + 0x10]
cmp qword [r8 + 0x18], 8
jb 0x1400abf6e
mov r8, qword [r8]
lea rdx, [0x1403fea10]
lea rcx, [rbp + 0x17]
call fcn.1401349c0
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400abf8c
mov rdx, qword [rdi]
movdqa xmm0, xmmword [0x140415690]
movdqu xmmword [rbp + 7], xmm0
xor r14d, r14d
mov word [rbp - 9], r14w
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], r14w
jne 0x1400abfb0
lea rcx, [rbp - 9]
call fcn.14007ece0
lea r8, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae r8, qword [rbp + 0x17]
mov qword [rbp - 0x29], r14
mov dword [rbp - 0x21], r14d
mov qword [rbp - 0x19], r14
mov dword [rsp + 0x28], 0xf003f
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x29]
call fcn.1400a5100
test eax, eax
jne 0x1400ac052
lea rcx, [rbp - 9]
mov rsi, qword [rbp - 0x29]
cmp qword [rbp + 0xf], 8
jb 0x1400ac011
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x1400ac048
mov rax, rbx
lea rax, [rax + 1]
cmp word [rcx + rax*2], r14w
jne 0x1400ac014
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140400dd8]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test rsi, rsi
je 0x1400ac061
mov rcx, rsi
jmp 0x1400ac05b
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x1400ac061
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 9]
call fcn.14007ec70
lea rdx, [rdi + 0x20]
cmp qword [rdx + 0x18], 8
jb 0x1400ac078
mov rdx, qword [rdx]
movdqa xmm0, xmmword [0x140415690]
movdqu xmmword [rbp + 7], xmm0
mov word [rbp - 9], r14w
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rdx + r8*2], r14w
jne 0x1400ac090
lea rcx, [rbp - 9]
call fcn.14007ece0
lea r8, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae r8, qword [rbp + 0x17]
mov qword [rbp - 0x29], r14
mov dword [rbp - 0x21], r14d
mov qword [rbp - 0x19], r14
mov dword [rsp + 0x28], 0xf003f
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x29]
call fcn.1400a5100
test eax, eax
jne 0x1400ac12f
lea rcx, [rbp - 9]
mov rsi, qword [rbp - 0x29]
cmp qword [rbp + 0xf], 8
jb 0x1400ac0f1
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x1400ac125
lea rbx, [rbx + 1]
cmp word [rcx + rbx*2], r14w
jne 0x1400ac0f1
lea eax, [rbx*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140400db8]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test rsi, rsi
je 0x1400ac13e
mov rcx, rsi
jmp 0x1400ac138
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x1400ac13e
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 9]
call fcn.14007ec70
movzx r9d, byte [rdi + 0x40]
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rdx, qword [rbp + 0x17]
lea r8, str.manual
call fcn.140136bb0
nop
lea rcx, [rbp + 0x17]
call fcn.14007ec70
mov al, 1
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1401aed20
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret