Function at 0x1400146f4
Capabilities:
Set registry value

Disassembly:
mov r11, rsp
push rbp
push r12
push r15
lea rbp, [r11 - 0x5f]
sub rsp, 0x90
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov rax, qword [0x140032370]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r15, rcx
xor r12d, r12d
mov qword [rbp + 7], r12
mov edi, r12d
mov qword [r11 - 0x68], r12
lea rax, [rbp + 7]
mov qword [r11 - 0x70], rax
mov qword [r11 - 0x78], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
je 0x1400147f8
lea rdx, str.Failed_to_create_open_settings_key
lea rcx, [rbp + 0x17]
call fcn.140009778
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
lea rcx, [rbp + 0x17]
call fcn.140009658
lea rbx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rbx, qword [rbp + 0x17]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov rdx, rbx
call fcn.140008a60
mov edi, eax
test eax, eax
jns 0x1400147dc
mov ecx, eax
call fcn.140009394
nop
lea rcx, [rbp + 0x17]
call fcn.14000b978
jmp 0x1400148da
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
jns 0x1400147ce
mov ecx, edi
jmp 0x1400147c8
mov rax, qword [r15 + 0x510]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1400148da
lea rsi, [rbx + 0x30]
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14001481c
mov rcx, qword [rsi]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r12w
jne 0x140014820
add eax, eax
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140014839
mov rcx, qword [rsi]
lea rdi, [rbx + 0x10]
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x14001484a
mov r8, qword [rdi]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
xor edx, edx
lea r9d, [rdx + 1]
mov rcx, qword [rbp + 7]
call qword [sym.imp.api_ms_win_core_registry_l2_1_0.dll_RegSetKeyValueW]
test eax, eax
je 0x140014896
cmp qword [rdi + 0x18], 8
jb 0x140014871
mov rdi, qword [rdi]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r8, rdi
lea rdx, str.Failed_to_write__s
call fcn.140008c80
jmp 0x1400148be
cmp qword [rsi + 0x18], 8
jb 0x1400148a0
mov rsi, qword [rsi]
cmp qword [rdi + 0x18], 8
jb 0x1400148aa
mov rdi, qword [rdi]
mov r9, rsi
mov r8, rdi
lea rdx, str.Wrote_value_Name:__s__Value:__s
xor ecx, ecx
call fcn.140008c80
test eax, eax
mov edi, eax
js 0x1400148d3
mov rbx, qword [rbx]
cmp rbx, qword [r15 + 0x510]
jmp 0x140014805
mov ecx, eax
call fcn.140009394
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x1400148e9
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov ecx, edi
call fcn.1400093b0
mov eax, edi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14001c780
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r12
pop rbp
ret