Function at 0x1400141cc
Capabilities:
Set registry value

Disassembly:
mov r11, rsp
push rbp
push r12
push r15
lea rbp, [r11 - 0x5f]
sub rsp, 0x90
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov rax, qword [0x140033670]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r15, rcx
xor r12d, r12d
mov qword [rbp + 7], r12
mov edi, r12d
mov qword [r11 - 0x68], r12
lea rax, [rbp + 7]
mov qword [r11 - 0x70], rax
mov qword [r11 - 0x78], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
je 0x1400142d0
lea rdx, str.Failed_to_create_open_settings_key
lea rcx, [rbp + 0x17]
call fcn.140008d08
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
lea rcx, [rbp + 0x17]
call fcn.140008c6c
lea rbx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rbx, qword [rbp + 0x17]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov rdx, rbx
call fcn.14000821c
mov edi, eax
test eax, eax
jns 0x1400142b4
mov ecx, eax
call fcn.140008b48
nop
lea rcx, [rbp + 0x17]
call fcn.140009ee8
jmp 0x1400143b2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
jns 0x1400142a6
mov ecx, edi
jmp 0x1400142a0
mov rax, qword [r15 + 0x4e0]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1400143b2
lea rsi, [rbx + 0x30]
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400142f4
mov rcx, qword [rsi]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r12w
jne 0x1400142f8
add eax, eax
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140014311
mov rcx, qword [rsi]
lea rdi, [rbx + 0x10]
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x140014322
mov r8, qword [rdi]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
xor edx, edx
lea r9d, [rdx + 1]
mov rcx, qword [rbp + 7]
call qword [sym.imp.api_ms_win_core_registry_l2_1_0.dll_RegSetKeyValueW]
test eax, eax
je 0x14001436e
cmp qword [rdi + 0x18], 8
jb 0x140014349
mov rdi, qword [rdi]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r8, rdi
lea rdx, str.Failed_to_write__s
call fcn.140008434
jmp 0x140014396
cmp qword [rsi + 0x18], 8
jb 0x140014378
mov rsi, qword [rsi]
cmp qword [rdi + 0x18], 8
jb 0x140014382
mov rdi, qword [rdi]
mov r9, rsi
mov r8, rdi
lea rdx, str.Wrote_value_Name:__s__Value:__s
xor ecx, ecx
call fcn.140008434
test eax, eax
mov edi, eax
js 0x1400143ab
mov rbx, qword [rbx]
cmp rbx, qword [r15 + 0x4e0]
jmp 0x1400142dd
mov ecx, eax
call fcn.140008b48
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x1400143c1
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov ecx, edi
call fcn.140008b64
mov eax, edi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14001c1f0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r12
pop rbp
ret