Function at 0x140014d40
Capabilities:
Set registry value

Disassembly:
mov dword [rsp + 8], ecx
push rbx
push rsi
push rdi
sub rsp, 0x160
mov qword [rsp + 0xe8], 0xfffffffffffffffe
mov esi, ecx
call fcn.14000db70
mov rcx, rax
test rax, rax
je 0x140015084
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
xor ebx, ebx
mov qword [rsp + 0x40], rbx
lea rax, [rsp + 0x198]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREWOW6432NodeMicrosoftOffice16.0lync
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov edi, eax
mov dword [rsp + 0x190], eax
mov dword [rsp + 0x188], ebx
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x188]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.EnableP2PScreenSharingOverVideo
mov rcx, qword [rsp + 0x198]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x188]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.EnableConferenceScreenSharingOverVideo
mov rcx, qword [rsp + 0x198]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov qword [rsp + 0x40], rbx
lea rax, [rsp + 0x198]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftOffice16.0Lync
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x188]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.EnableP2PScreenSharingOverVideo
mov rcx, qword [rsp + 0x198]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x188]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.EnableConferenceScreenSharingOverVideo
mov rcx, qword [rsp + 0x198]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test edi, edi
je 0x140014fd2
lea rdx, str.Failed_to_create_the_registry
lea rcx, [rsp + 0x50]
call fcn.14000c670
lea rax, [rsp + 0x68]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xf8], rax
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x100], rbx
mov rcx, rbx
call fcn.14000d260
mov qword [rsp + 0x108], rax
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, str.ErrorInRegistryCreation
lea rcx, [rsp + 0xa8]
call fcn.14000c8e0
nop
mov r8d, edi
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.14005c860
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x110], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x120], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0xb0]
call fcn.14000c8e0
mov rdi, rax
mov qword [rsp + 0x128], rbx
mov rcx, rbx
call fcn.14000d260
mov qword [rsp + 0x130], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0x70], rcx
lea rdx, str.Failure
lea rcx, [rsp + 0xb8]
call fcn.14000c8e0
nop
lea r8, [rsp + 0x70]
jmp 0x140015048
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x148], rax
lea rdx, [0x140098d49]
lea rcx, [rsp + 0xc0]
call fcn.14000c8e0
mov rdi, rax
lea rdx, str.Necessary_changes_have_been_done.
lea rcx, [rsp + 0xc8]
call fcn.14000c8e0
mov rbx, rax
lea rdx, str.Success
lea rcx, [rsp + 0xd0]
call fcn.14000c8e0
nop
mov r8, rbx
mov r9, rdi
mov rdx, rax
mov ecx, esi
call fcn.14005d360
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140015077
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rsp, 0x160
pop rdi
pop rsi
pop rbx
ret
mov ecx, 0x80004005
call fcn.14000df80
int3