Function at 0x140024af0
Capabilities:
Set registry value

Disassembly:
mov dword [rsp + 8], ecx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x2c0
mov qword [rsp + 0x220], 0xfffffffffffffffe
mov r14d, ecx
call fcn.14000d980
mov rcx, rax
test rax, rax
je 0x1400252d4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
xor r15d, r15d
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x58], r15
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_Settings
lea rcx, [rsp + 0x60]
call fcn.14000c760
nop
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x48]
call fcn.14005acb0
mov dword [rsp + 0x2f8], eax
test eax, eax
je 0x140024d1b
lea rdx, str.Failed_to_create_the_registry_Internet_Settings
lea rcx, [rsp + 0x40]
call fcn.14000c480
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140024b99
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x290], rax
lea rax, [rsp + 0x198]
mov qword [rsp + 0x298], rax
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
mov qword [rsp + 0x2a8], rdi
mov rcx, rdi
call fcn.14000d070
mov qword [rsp + 0x1b8], rax
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.ProxyEnableAndSettingsIE_KB_10634
lea rcx, [rsp + 0x198]
call fcn.14000c6f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14005c670
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x1c0], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x1c8], rax
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x1d0], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0x1a0]
call fcn.14000c6f0
mov rsi, rax
mov qword [rsp + 0x1d8], rdi
mov rcx, rdi
call fcn.14000d070
mov qword [rsp + 0x1e0], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0x80], rcx
lea rdx, str.Failure
lea rcx, [rsp + 0x1a8]
call fcn.14000c6f0
nop
mov r9, rsi
lea r8, [rsp + 0x80]
mov rdx, rax
mov ecx, r14d
call fcn.14005d170
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x1b0], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x140024cd7
mov rdx, qword [rsp + 0x1b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140024cec
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0xc8], rdi
lock xadd dword [rdi + 0x10], ebx
sub ebx, 1
jg 0x140024d14
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
jmp 0x1400252c5
mov dword [rsp + 0x300], 1
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x300]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x2f8], eax
test eax, eax
je 0x140024f17
lea rdx, str._Failed_to_update_the_registry_ProxyEnable
lea rcx, [rsp + 0x40]
call fcn.14000c2e0
test rsi, rsi
je 0x140024d8c
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
lea rax, [rsp + 0x88]
mov qword [rsp + 0x1e8], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x1f0], rax
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
mov qword [rsp + 0x1f8], rdi
mov rcx, rdi
call fcn.14000d070
mov qword [rsp + 0x200], rax
add rax, 0x18
mov qword [rsp + 0x88], rax
lea rdx, str.ProxyEnableAndSettingsIE_KB_10634
lea rcx, [rsp + 0xd0]
call fcn.14000c6f0
nop
mov rbx, 0xffffffffffffffff
mov r8d, ebx
lea rdx, [rsp + 0x88]
mov rcx, rax
call fcn.14005c670
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x208], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x210], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x218], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0xd8]
call fcn.14000c6f0
mov rsi, rax
mov qword [rsp + 0x268], rdi
mov rcx, rdi
call fcn.14000d070
mov qword [rsp + 0x228], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0x90], rcx
lea rdx, str.Failure
lea rcx, [rsp + 0xe0]
call fcn.14000c6f0
nop
mov r9, rsi
lea r8, [rsp + 0x90]
mov rdx, rax
mov ecx, r14d
call fcn.14005d170
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xe8], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x140024ed3
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140024ee8
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0xf0], rdi
lock xadd dword [rdi + 0x10], ebx
sub ebx, 1
jg 0x140024f10
mov rdx, qword [rsp + 0xf0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
jmp 0x1400252c5
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x238], rax
lea rax, [rsp + 0x108]
mov qword [rsp + 0x240], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0xf8]
call fcn.14000c6f0
mov rdi, rax
lea rdx, str.Updated_Internet_Explorer_Settings__Please_restart_Internet_Explorer.
lea rcx, [rsp + 0x100]
call fcn.14000c6f0
mov rbx, rax
lea rdx, str.Success
lea rcx, [rsp + 0x108]
call fcn.14000c6f0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
mov ecx, r14d
call fcn.14005d170
lea rdx, str._local_
lea rcx, [rsp + 0x68]
call fcn.14000c6f0
nop
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x1400252df
mov rbx, 0xffffffffffffffff
mov rcx, rbx
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140024fc5
inc ecx
mov dword [rsp + 0x308], ecx
add ecx, ecx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.ProxyOverride
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x2f8], eax
test eax, eax
je 0x1400251e2
lea rdx, str._Failed_to_update_the_registry_ProxyOverride
lea rcx, [rsp + 0x40]
call fcn.14000c2e0
test rsi, rsi
je 0x14002502f
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
lea rax, [rsp + 0x98]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x250], rax
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
mov qword [rsp + 0x258], rdi
mov rcx, rdi
call fcn.14000d070
mov qword [rsp + 0x260], rax
add rax, 0x18
mov qword [rsp + 0x98], rax
lea rdx, str.ProxyEnableAndSettingsIE_KB_10634
lea rcx, [rsp + 0x110]
call fcn.14000c6f0
nop
mov r8d, ebx
lea rdx, [rsp + 0x98]
mov rcx, rax
call fcn.14005c670
lea rax, [rsp + 0x118]
mov qword [rsp + 0x2b0], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x270], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x278], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0x118]
call fcn.14000c6f0
mov rsi, rax
mov qword [rsp + 0x280], rdi
mov rcx, rdi
call fcn.14000d070
mov qword [rsp + 0x288], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0xa0], rcx
lea rdx, str.Failure
lea rcx, [rsp + 0x120]
call fcn.14000c6f0
nop
mov r9, rsi
lea r8, [rsp + 0xa0]
mov rdx, rax
mov ecx, r14d
call fcn.14005d170
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x128], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x14002516f
mov rdx, qword [rsp + 0x128]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x130], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x14002519e
mov rdx, qword [rsp + 0x130]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400251b3
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x138], rdi
lock xadd dword [rdi + 0x10], ebx
sub ebx, 1
jg 0x1400251db
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
jmp 0x1400252c5
test rsi, rsi
je 0x1400251f5
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x140], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x140025229
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x148], rcx
mov eax, ebx
lock xadd dword [rcx + 0x10], eax
sub eax, 1
jg 0x140025258
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14002526d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov rax, qword [rsp + 0x40]
add rax, 0xffffffffffffffe8
mov qword [rsp + 0x150], rax
lock xadd dword [rax + 0x10], ebx
sub ebx, 1
jg 0x14002529e
mov rdx, qword [rsp + 0x150]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov al, 1
jmp 0x1400252c5
add rsp, 0x2c0
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
mov ecx, 0x80004005
call fcn.14000dd90
nop
mov ecx, 0x80004005
call fcn.14000dd90
int3