Function at 0x1400b77c0
Capabilities:
Set registry value

Disassembly:
push rbp
push rsi
push r12
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x140136e20]
xor rax, rsp
mov qword [rbp + 0x20], rax
lea rax, [rsp + 0x6c]
mov r12, rcx
lea rdx, [0x140108a28]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor eax, eax
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], eax
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, eax
test eax, eax
jne 0x1400b86ec
mov rcx, qword [r12 + 0x68]
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], rdi
mov dword [rbp - 0x70], 0x2c
call qword [sym.imp.USER32.dll_GetWindowPlacement]
mov rcx, qword [rsp + 0x58]
lea rax, [rbp - 0x70]
lea r9d, [rsi + 3]
lea rdx, [0x140108a68]
xor r8d, r8d
mov dword [rsp + 0x28], 0x2c
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0x1b90]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108a80]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee10]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108aa0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed48]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108ac0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed4c]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108ae0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed50]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108af8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed58]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108b18]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed5c]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
lea r9d, [rsi + 4]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x58]
lea rdx, [0x140108b30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed60]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108b60]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed64]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108b88]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed70]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108bb8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed74]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108be0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0x1b84]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108c08]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee20]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108c28]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed54]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108c50]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed78]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
lea r9d, [rsi + 4]
xor r8d, r8d
lea rdx, [0x140108c78]
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed7c]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108cb0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedf8]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108c98]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed84]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108cf8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed88]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108d18]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee00]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108d40]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee04]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108d60]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed8c]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108d78]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed94]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 4]
xor r8d, r8d
lea rdx, [0x140108da8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed98]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108dc8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed9c]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108df0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xeda8]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108e18]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedfc]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108e40]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xeda0]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108e68]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedb4]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108e98]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedac]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108ec8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedb0]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108ef0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedb8]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108f28]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedbc]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108f50]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedc0]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108f78]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedc4]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108f98]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xeda4]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108fb8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xed68]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140108ff8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedcc]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109020]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedd0]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109048]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedf4]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109060]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x50], r11d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedd4]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109088]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedd8]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x1401090c0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedc8]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109110]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedec]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x1401090e8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xedf0]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109158]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rdi, qword [rsp + 0x58]
lea rbx, [r12 + 0x1748]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9d, [rsi + 1]
lea rdx, [0x140109180]
add eax, eax
xor r8d, r8d
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0x1b58]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x1401091a0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee0c]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x1401091b8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee08]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x1401091e0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee24]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109200]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee14]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109228]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee18]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109250]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee1c]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109278]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee28]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x1401092a0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xee2c]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x1401092d0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xeddc]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109300]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x50], r11d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xede4]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109330]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0xede8]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109358]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r11d, dword [r12 + 0x1b64]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x50]
lea r9d, [rsi + 4]
lea rdx, [0x140109388]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x50], r11d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [r12 + 0x80]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x806b
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r12 + 0x80]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8067
mov dword [rsp + 0x68], eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r12 + 0x80]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8071
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r12 + 0x80]
lea r8, [rsp + 0x70]
xor r9d, r9d
mov edx, 0x806f
mov dword [rsp + 0x64], eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x68]
lea r9d, [rsi + 3]
lea rdx, [0x1401093b0]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x60]
lea r9d, [rsi + 3]
lea rdx, [0x1401093d8]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rax, [rsp + 0x64]
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x58]
lea r9d, [rsi + 3]
lea rdx, [0x140109408]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x70]
lea r8, [rbp - 0x40]
lea edx, [rsi + 0x5c]
call qword [sym.imp.GDI32.dll_GetObjectW]
mov rcx, qword [rsp + 0x58]
lea rax, [rbp - 0x40]
lea r9d, [rsi + 3]
lea rdx, [0x140109430]
xor r8d, r8d
mov dword [rsp + 0x28], 0x5c
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [r12 + 0xb0]
lea rax, [0x140109448]
lea r9, [rsp + 0x78]
mov qword [rbp - 0x80], rax
lea rax, str.ToolbarState
lea r8d, [rsi + 1]
mov edx, 0x44c
mov qword [rsp + 0x78], 0xffffffff80000001
mov qword [rbp - 0x78], rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdi, qword [rsp + 0x160]
mov rbx, qword [rsp + 0x158]
mov eax, esi
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.14004ae00
add rsp, 0x130
pop r12
pop rsi
pop rbp
ret
mov rcx, qword [rcx + 0x10]
jmp 0x1400b77c0