Function at 0x14001e318
Capabilities:
Set registry value

Disassembly:
push rsi
push rdi
push r12
push r13
push r14
mov eax, 0x1100
call fcn.1400332d0
sub rsp, rax
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rsp + 0x1138], rbx
mov qword [rsp + 0x1140], rbp
mov rax, qword [0x140051040]
xor rax, rsp
mov qword [rsp + 0x10f0], rax
mov r13, rcx
lea rcx, [rsp + 0xb0]
call fcn.14001e178
nop
xor r14d, r14d
mov rdi, r14
mov qword [rsp + 0x90], r14
mov dword [rsp + 0x98], r14d
lea rdx, str.SoftwareMicrosoftInternet_ExplorerTypedURLs
lea rcx, [rsp + 0x80]
call fcn.140004c38
nop
mov qword [rsp + 0x40], r14
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rdx, qword [rsp + 0x80]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, r14d
jne 0x14001e3df
mov rdi, qword [rsp + 0x40]
mov qword [rsp + 0x90], rdi
mov dword [rsp + 0x98], r14d
lea rcx, [rsp + 0x78]
call fcn.140004508
nop
mov ebp, 1
mov dword [rsp + 0x88], 0x400
mov dword [rsp + 0xf0], r14d
xor edx, edx
mov r8d, 0x7fc
lea rcx, [rsp + 0xf4]
call fcn.140021ef0
lea rcx, [rsp + 0x40]
call fcn.140004508
nop
lea rdx, str.url_d
lea rcx, [rsp + 0x58]
call fcn.140004c38
nop
mov r8d, ebp
mov rdx, qword [rax]
lea rcx, [rsp + 0x40]
call fcn.1400054b0
nop
lea rcx, [rsp + 0x58]
call fcn.140004268
lea r9, [rsp + 0x88]
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x90]
call fcn.14001a620
cmp eax, r14d
jne 0x14001e510
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x78]
call fcn.140004544
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.1400052d4
nop
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0xb0]
call fcn.14001e1dc
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140004ca8
nop
lea rcx, [rsp + 0x68]
call fcn.140004268
lea rdx, [0x14003bb28]
lea rcx, [rsp + 0x50]
call fcn.140004c38
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.14000451c
nop
lea rcx, [rsp + 0x50]
call fcn.140004268
nop
lea rcx, [rsp + 0x40]
call fcn.140004268
inc ebp
cmp ebp, 0x100
jl 0x14001e3ef
jmp 0x14001e51a
lea rcx, [rsp + 0x40]
call fcn.140004268
lea rcx, [rsp + 0x60]
call fcn.140004508
nop
lea rdx, str.url_d
lea rcx, [rsp + 0x58]
call fcn.140004c38
nop
mov r8d, ebp
mov rdx, qword [rax]
lea rcx, [rsp + 0x60]
call fcn.1400054b0
nop
lea rcx, [rsp + 0x58]
call fcn.140004268
xor r9d, r9d
xor r8d, r8d
mov edx, 0x406
mov rcx, qword [r13 + 0x4018]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x146
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, rax
mov esi, r14d
cmp eax, r14d
jle 0x14001e6f2
mov dword [rsp + 0xf0], r14d
xor edx, edx
mov r8d, 0xffc
lea rcx, [rsp + 0xf4]
call fcn.140021ef0
mov r9d, 0x800
lea r8, [rsp + 0xf0]
mov edx, esi
mov rcx, r13
call fcn.140019744
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x50]
call fcn.1400052d4
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xb0]
call fcn.14001cf58
lea rcx, [rsp + 0x50]
call fcn.140004268
mov rbx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x40]
cmp rax, r14
je 0x14001e611
cmp rax, qword [rsp + 0xb0]
je 0x14001e616
call fcn.140024350
cmp qword [rsp + 0x48], rbx
jne 0x14001e6e7
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x70], r14d
lea rdx, str.url_d
lea rcx, [rsp + 0x58]
call fcn.140004c38
nop
mov r8d, ebp
mov rdx, qword [rax]
lea rcx, [rsp + 0x60]
call fcn.1400054b0
nop
lea rcx, [rsp + 0x58]
call fcn.140004268
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], r14d
xor r9d, r9d
mov r8, qword [rsp + 0x80]
mov rdx, 0xffffffff80000001
lea rcx, [rsp + 0x68]
call fcn.14000d94c
mov rbx, qword [rsp + 0x60]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
add eax, eax
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
mov rdx, rbx
mov rbx, qword [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
inc ebp
cmp rbx, r14
je 0x14001e6e2
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x70], r14d
inc esi
cmp esi, r12d
jl 0x14001e58d
lea rcx, [rsp + 0x60]
call fcn.140004268
nop
lea rcx, [rsp + 0x78]
call fcn.140004268
nop
lea rcx, [rsp + 0x80]
call fcn.140004268
nop
cmp rdi, r14
je 0x14001e725
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0xb0]
call fcn.14001dd64
nop
mov rcx, qword [rsp + 0xb0]
call fcn.1400216b8
mov rcx, qword [rsp + 0x10f0]
xor rcx, rsp
call fcn.140021e20
lea r11, [rsp + 0x1100]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret