Function at 0x14005fc58
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
mov rbp, rsp
sub rsp, 0x30
mov rbx, rcx
lea r8, [rbp + 0x10]
mov rcx, 0xffffffff80000001
lea rdx, str.SoftwareMicrosoftSpy11.0
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x14005fef1
cmp dword [0x1400c3424], eax
lea edi, [rax + 3]
je 0x14005fcc8
mov rcx, qword [rbp + 0x10]
lea rax, [rbx + 0x198]
mov dword [rsp + 0x28], 0x5c
lea rdx, str.DefaultFont
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [rbx + 0x1f8], 0
je 0x14005fcfc
mov rcx, qword [rbp + 0x10]
lea rax, [rbx + 0x208]
mov dword [rsp + 0x28], 0x2c
lea rdx, str.MainWindowPosition
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c31f4]
mov r14d, 4
lea rdx, str.MaximizeMDI
mov dword [rsp + 0x28], r14d
mov r9d, r14d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c17e8]
mov dword [rsp + 0x28], r14d
lea rdx, str.AlwaysOnTop
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c320c]
mov dword [rsp + 0x28], r14d
lea rdx, str.WindowTreeOnStartup
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c3208]
mov dword [rsp + 0x28], r14d
lea rdx, str.ProcessTreeOnStartup
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c3204]
mov dword [rsp + 0x28], r14d
lea rdx, str.ThreadTreeOnStartup
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [rbx + 0x1fc], 0
je 0x14005fdfe
mov rcx, qword [rbp + 0x10]
lea rax, [rbx + 0x234]
mov dword [rsp + 0x28], 0x2c
lea rdx, str.WindowTreePosition
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [rbx + 0x200], 0
je 0x14005fe32
mov rcx, qword [rbp + 0x10]
lea rax, [rbx + 0x260]
mov dword [rsp + 0x28], 0x2c
lea rdx, str.ProcessTreePosition
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [rbx + 0x204], 0
je 0x14005fe66
mov rcx, qword [rbp + 0x10]
lea rax, [rbx + 0x28c]
mov dword [rsp + 0x28], 0x2c
lea rdx, str.ThreadTreePosition
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c3200]
mov dword [rsp + 0x28], r14d
lea rdx, str.WindowTreeActive
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c31fc]
mov dword [rsp + 0x28], r14d
lea rdx, str.ProcessTreeActive
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
lea rax, [0x1400c31f8]
mov dword [rsp + 0x28], r14d
lea rdx, str.ThreadTreeActive
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x10]
call fcn.14005371c
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [rbx + 0x2d8], 0
je 0x14005ff07
mov rcx, 0xffffffff80000004
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdi, [0x1400c2c50]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005ff20
mov edx, 2
call fcn.1400617bc
add rdi, 8
lea rax, [0x1400c31f0]
cmp rdi, rax
jl 0x14005ff0e
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CWnd::EnableScrollBarCtrl]
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
add rsp, 0x30
pop rbp
ret