Function at 0x14003fdd0
Capabilities:
Set registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x50], 0xfffffffffffffffe
lea rsi, vtable.CUtlXProperty.0
mov qword [rbp - 0x30], rsi
lea rcx, [rbp - 0x28]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::constructor_void____ptr64]
lea r14, vtable.CUtlX.0
mov qword [rbp - 0x28], r14
mov edx, 2
lea rcx, [rbp - 0x28]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::SetFileIndex_enum_XMLFILENAMES____ptr64]
nop
call fcn.1400694ec
mov rdx, rax
xor edi, edi
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x14003fe3a
mov ecx, 0x80004005
call fcn.140011b60
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
xor r8d, r8d
lea rdx, [0x140296e0c]
lea rcx, [rbp - 0x48]
call fcn.140011b80
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14003fe75
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
lea rdx, str.HKEY_CURRENT_USERSOFTWAREMicrosoftInternet_ExplorerMain
lea rcx, [rbp - 0x48]
call fcn.140067880
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x20], rcx
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, qword [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rbp - 0x38], eax
test eax, eax
jne 0x14003ff20
lea r8, str.Display_Inline_Images
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.140067630
nop
mov r8, qword [rax]
lea rdx, str.Display_Inline_Images
lea rcx, [rbp - 0x30]
call fcn.140053590
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003fef3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rbp - 0x40], 0
je 0x14003ff19
lea rdx, [0x14029d8f8]
lea rcx, [rbp - 0x48]
call fcn.140067db0
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14003ff19
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
mov qword [rbp + 0x38], rdi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsZones0
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003ff86
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.1400
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp + 0x38], rdi
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsZones0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003ffea
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.1400
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14003fff9
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140040019
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], r14
lea rcx, [rbp - 0x28]
call qword [sym.imp.SetupXML.dll_public_virtual:_void___cdecl_CXMLFileManagerInterface::destructor_void____ptr64]
add rsp, 0x80
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret