Function at 0x140014314
Capabilities:
Set registry value

Disassembly:
mov r11, rsp
push rbp
push r12
push r15
lea rbp, [r11 - 0x5f]
sub rsp, 0x90
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov rax, qword [0x14002a370]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r15, rcx
xor r12d, r12d
mov qword [rbp + 7], r12
mov edi, r12d
mov qword [r11 - 0x68], r12
lea rax, [rbp + 7]
mov qword [r11 - 0x70], rax
mov qword [r11 - 0x78], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
je 0x140014418
lea rdx, str.Failed_to_create_open_settings_key
lea rcx, [rbp + 0x17]
call fcn.140009668
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
lea rcx, [rbp + 0x17]
call fcn.1400095c4
lea rbx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rbx, qword [rbp + 0x17]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov rdx, rbx
call fcn.1400088b0
mov edi, eax
test eax, eax
jns 0x1400143fc
mov ecx, eax
call fcn.140009328
nop
lea rcx, [rbp + 0x17]
call fcn.14000b844
jmp 0x1400144fa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
jns 0x1400143ee
mov ecx, edi
jmp 0x1400143e8
mov rax, qword [r15 + 0x538]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1400144fa
lea rsi, [rbx + 0x30]
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14001443c
mov rcx, qword [rsi]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r12w
jne 0x140014440
add eax, eax
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140014459
mov rcx, qword [rsi]
lea rdi, [rbx + 0x10]
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x14001446a
mov r8, qword [rdi]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
xor edx, edx
lea r9d, [rdx + 1]
mov rcx, qword [rbp + 7]
call qword [sym.imp.api_ms_win_core_registry_l2_1_0.dll_RegSetKeyValueW]
test eax, eax
je 0x1400144b6
cmp qword [rdi + 0x18], 8
jb 0x140014491
mov rdi, qword [rdi]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r8, rdi
lea rdx, str.Failed_to_write__s
call fcn.140008ad0
jmp 0x1400144de
cmp qword [rsi + 0x18], 8
jb 0x1400144c0
mov rsi, qword [rsi]
cmp qword [rdi + 0x18], 8
jb 0x1400144ca
mov rdi, qword [rdi]
mov r9, rsi
mov r8, rdi
lea rdx, str.Wrote_value_Name:__s__Value:__s
xor ecx, ecx
call fcn.140008ad0
test eax, eax
mov edi, eax
js 0x1400144f3
mov rbx, qword [rbx]
cmp rbx, qword [r15 + 0x538]
jmp 0x140014425
mov ecx, eax
call fcn.140009328
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x140014509
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov ecx, edi
call fcn.140009344
mov eax, edi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140018010
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r12
pop rbp
ret