Function at 0x1400042a5
Capabilities:
Delete registry value
Set registry value

Disassembly:
jmp 0x14000f120
mov qword [rsp + 0x20], rbp
push r14
sub rsp, 0x80
movzx r14d, dl
mov rbp, rcx
call fcn.140002d01
test eax, eax
jne 0x14000f155
mov eax, 0x80004005
mov rbp, qword [rsp + 0xa8]
add rsp, 0x80
pop r14
ret
mov rcx, qword [0x14009d758]
lea rax, str.APPID
mov edx, 0x65
mov qword [rsp + 0x90], rbx
xorps xmm0, xmm0
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], rdi
lea r9, [rsp + 0x58]
lea rdi, str.D5D53ADA_EAFD_4AA8_BD6B_DA32F20171C4
mov qword [rsp + 0x58], rax
lea r8d, [rdx - 0x64]
mov qword [rsp + 0x60], rdi
movdqu xmmword [rsp + 0x68], xmm0
call fcn.1400012bc
mov ebx, eax
test eax, eax
js 0x14000f260
xor ebx, ebx
lea r8, str.AppID
mov r9d, 0x20006
mov qword [rsp + 0x40], rbx
mov rdx, 0xffffffff80000000
mov dword [rsp + 0x48], ebx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x50], rbx
call fcn.140002545
test eax, eax
je 0x14000f1f9
mov ecx, eax
call fcn.140002f4a
mov rcx, qword [rsp + 0x40]
mov ebx, eax
test rcx, rcx
je 0x14000f260
jmp 0x14000f25a
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x58]
mov r8, rdi
mov qword [rsp + 0x30], rbx
mov rdi, qword [rsp + 0x40]
xor r9d, r9d
mov rdx, rdi
mov dword [rsp + 0x28], 0x2001f
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x60], ebx
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x20], ebx
call fcn.1400012da
test eax, eax
je 0x14000f26d
mov ecx, eax
call fcn.140002f4a
mov rcx, qword [rsp + 0x58]
mov ebx, eax
test rcx, rcx
je 0x14000f252
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test rdi, rdi
je 0x14000f260
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test ebx, ebx
jns 0x14000f33f
jmp 0x14000f35a
mov rsi, qword [rsp + 0x58]
lea rdx, str.LocalService
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteValueW]
test r14b, r14b
jne 0x14000f2ac
test rsi, rsi
je 0x14000f295
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test rdi, rdi
je 0x14000f35a
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x14000f35a
lea rcx, [rbp + 0x48]
test rcx, rcx
je 0x14000f2f4
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp word [rcx + rax*2 + 2], bx
lea rax, [rax + 1]
jne 0x14000f2c0
lea eax, [rax*2 + 2]
mov r9d, 1
mov dword [rsp + 0x28], eax
lea rdx, str.LocalService
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, rbp
call fcn.140002af4
test eax, eax
jne 0x14000f323
test rsi, rsi
je 0x14000f30e
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test rdi, rdi
je 0x14000f31c
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov eax, 0x80004005
jmp 0x14000f35c
test rsi, rsi
je 0x14000f331
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test rdi, rdi
je 0x14000f33f
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test r14b, r14b
je 0x14000f35a
mov rcx, rbp
call fcn.140003576
test eax, eax
je 0x14000f35a
xor edx, edx
mov rcx, rbp
call fcn.140001f96
mov eax, ebx
mov rsi, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xa0]
mov rbp, qword [rsp + 0xa8]
add rsp, 0x80
pop r14
ret