Function at 0x14003fee0
Capabilities:
Set registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x50], 0xfffffffffffffffe
lea rsi, vtable.CUtlXProperty.0
mov qword [rbp - 0x30], rsi
lea rcx, [rbp - 0x28]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::constructor_void____ptr64]
lea r14, vtable.CUtlX.0
mov qword [rbp - 0x28], r14
mov edx, 2
lea rcx, [rbp - 0x28]
call qword [sym.imp.SetupXML.dll_public:_void___cdecl_CXMLFileManagerInterface::SetFileIndex_enum_XMLFILENAMES____ptr64]
nop
call fcn.140069614
mov rdx, rax
xor edi, edi
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x14003ff4a
mov ecx, 0x80004005
call fcn.140011b60
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
xor r8d, r8d
lea rdx, [0x140296e0c]
lea rcx, [rbp - 0x48]
call fcn.140011b80
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14003ff85
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
lea rdx, str.HKEY_CURRENT_USERSOFTWAREMicrosoftInternet_ExplorerMain
lea rcx, [rbp - 0x48]
call fcn.140067990
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x20], rcx
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, qword [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rbp - 0x38], eax
test eax, eax
jne 0x140040030
lea r8, str.Display_Inline_Images
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.140067740
nop
mov r8, qword [rax]
lea rdx, str.Display_Inline_Images
lea rcx, [rbp - 0x30]
call fcn.1400536a0
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140040003
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rbp - 0x40], 0
je 0x140040029
lea rdx, [0x14029d928]
lea rcx, [rbp - 0x48]
call fcn.140067ec0
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140040029
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
mov qword [rbp + 0x38], rdi
mov dword [rbp + 0x30], edi
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsZones0
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140040096
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.1400
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp + 0x38], rdi
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsZones0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400400fa
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.1400
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140040109
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x40], rdi
mov dword [rbp - 0x38], edi
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140040129
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], r14
lea rcx, [rbp - 0x28]
call qword [sym.imp.SetupXML.dll_public_virtual:_void___cdecl_CXMLFileManagerInterface::destructor_void____ptr64]
add rsp, 0x80
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret