Function at 0x140001620
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x90
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov eax, dword [0x140003438]
lea rcx, [rsp + 0x38]
movsd xmm0, qword [str.sc_start_nvraid]
mov dword [rsp + 0x40], eax
movzx eax, word [0x14000343c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x14000343e]
mov byte [rsp + 0x46], al
mov qword [rsp + 0x48], 0xf
mov qword [rsp + 0x50], 0xf
movsd qword [rsp + 0x38], xmm0
mov byte [rsp + 0x47], 0
call fcn.1400011c0
call fcn.1400014d0
mov dword [0x140005718], eax
test eax, eax
jne 0x1400016af
nop
call fcn.1400014d0
mov dword [0x140005718], eax
test eax, eax
je 0x1400016a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Process_ID:
call fcn.140001900
mov edx, dword [0x140005718]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140003484]
call fcn.140001900
cmp qword [0x140005710], 0
jne 0x140001701
nop word [rax + rax]
call fcn.1400013e0
mov qword [0x140005710], rax
test rax, rax
je 0x1400016f0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Base_Address:
call fcn.140001900
mov rdx, qword [0x140005710]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140003484]
call fcn.140001900
xor ebx, ebx
lea rdi, [0x140005708]
nop dword [rax]
cmp byte [0x140005074], bl
mov eax, dword [0x140005718]
mov dword [rsp + 0x58], eax
mov rax, qword [0x140005710]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x70], 8
je 0x14000179e
mov r9d, 0xf003f
mov byte [0x140005074], bl
xor r8d, r8d
mov qword [rsp + 0x20], rdi
lea rdx, str.SOFTWAREMicrosoftIdentityCRL
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rcx, qword [0x140005708]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400017ef
lea rax, [rsp + 0x58]
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x40], rax
lea rdx, str.GlobalDeviceUpdateTime
lea rax, [rsp + 0x38]
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rax
mov r9d, 0xb
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Read:
call fcn.140001900
mov rdx, qword [rsp + 0x78]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140003484]
call fcn.140001900
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001740