Function at 0x140007fe0
Capabilities:
Check if file exists
Create process on windows
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov rax, qword [0x1402f8c60]
xor rax, rsp
mov qword [rbp + 0x2f], rax
lea rax, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5dynabookecoserviceecoserver_toshibasystemmodules.cpp
mov dword [rbp - 9], 0x2d6
mov qword [rbp - 0x11], rax
lea r8, str.RestorePowerSettings
lea rax, str.__RestorePowerSettings_
mov qword [rbp - 0x19], r8
mov esi, edx
mov qword [rbp - 1], rax
mov ebx, ecx
mov dword [rbp + 0xf], 3
lea r15, [0x1402a214c]
lea rdx, str.ENTER__s
mov qword [rbp + 7], r15
lea rcx, [rbp - 0x11]
call fcn.140008d50
test ebx, ebx
jne 0x140008411
mov qword [rsp + 0x120], r12
lea r8, str.TecoPower::IsBIOSEcoGUISupportable
mov qword [rsp + 0x128], r13
lea r12, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5dynabookecoservice_tecopower_tecopower.cpp
lea r13, str.__TecoPower::IsBIOSEcoGUISupportable_
mov qword [rbp - 0x49], r8
lea rdx, str.ENTER__s
mov qword [rbp - 0x31], r13
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x41], r12
mov dword [rbp - 0x39], 0x77d
mov qword [rbp - 0x29], r15
mov dword [rbp - 0x21], 3
call fcn.140008d50
xor r14d, r14d
lea r8d, [rbx + 1]
mov qword [rsp + 0x30], r14
lea rcx, str..TVALZ
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov edi, r14d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x140008124
mov qword [rsp + 0x30], r14
lea r8d, [r14 + 1]
mov dword [rsp + 0x28], 0x80
lea rcx, str..DVALZ
xor r9d, r9d
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rbx, 0xffffffffffffffff
jne 0x140008148
mov r8, qword [rbp - 0x49]
lea rdx, str.LEAVE__s
lea rcx, [rbp - 0x41]
call fcn.140008d50
call fcn.140048560
jmp 0x14000821b
mov dword [rbp + 0x17], 0xf300
xorps xmm0, xmm0
mov dword [rbp + 0x1b], 0x15f
movdqu xmmword [rbp + 0x1f], xmm0
test rbx, rbx
je 0x1400081ae
mov qword [rsp + 0x38], r14
lea rax, [rbp - 0x51]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x17]
lea rax, [rbp + 0x17]
mov dword [rsp + 0x28], reloc.OLEAUT32.dll_SafeArrayGetElement
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov qword [rsp + 0x20], rax
mov edx, 0x222880
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1400081a5
cmp dword [rbp + 0x17], edi
sete dil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, str.true
mov qword [rbp - 0x79], r12
test edi, edi
mov dword [rbp - 0x71], 0x792
lea r9, str.false
mov qword [rbp - 0x69], r13
cmovne r9, rax
mov qword [rbp - 0x61], r15
lea r8, str.result
mov dword [rbp - 0x59], 3
lea rdx, str._s___s
lea rcx, [rbp - 0x79]
call fcn.140008d50
mov r8, qword [rbp - 0x49]
lea rdx, str.LEAVE__s
lea rcx, [rbp - 0x41]
call fcn.140008d50
test edi, edi
jne 0x140008212
call fcn.140048560
jmp 0x14000821b
xor edx, edx
mov cl, 1
call fcn.140007b70
call fcn.140048750
mov r13, qword [rsp + 0x128]
mov r12, qword [rsp + 0x120]
test esi, esi
jne 0x14000823e
call fcn.1400460d0
jmp 0x14000841a
lea rsi, vtable.RegConfigAccess.0
mov qword [rbp + 0x1f], r14
lea rbx, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5_toscommonlib_rs5include_regconfig.h
mov qword [rbp + 0x17], rsi
lea rdi, str.__RegConfigAccess::Open_
mov qword [rbp - 0x79], rbx
lea r9, [0x1402a2f28]
mov qword [rbp - 0x69], rdi
lea r8, str.pszSubKey
mov dword [rbp - 0x71], 0x63
lea rdx, str._s___s
mov qword [rbp - 0x61], r15
lea rcx, [rbp - 0x79]
mov dword [rbp - 0x59], 3
call fcn.140008d50
lea rax, [rbp + 0x1f]
mov r9d, 0x20006
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1402a2f28]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400082f1
jle 0x1400082c7
movzx eax, ax
or eax, 0x80070000
mov r8d, eax
mov qword [rbp - 0x79], rbx
lea rdx, str.Error_Code:_0x_x
mov dword [rbp - 0x71], 0x67
lea rcx, [rbp - 0x79]
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], r15
mov dword [rbp - 0x59], r14d
call fcn.140008d50
mov rcx, qword [rbp + 0x1f]
mov dword [rbp - 0x51], r14d
test rcx, rcx
jne 0x14000830d
mov dword [rbp - 0x71], 0x15f
mov r8d, 0x80070006
jmp 0x14000834c
lea rax, [rbp - 0x51]
mov dword [rsp + 0x28], 4
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, str.DisclaimerAccepted
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x140008373
jle 0x140008342
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x71], 0x163
mov r8d, eax
lea rcx, str.__RegConfigAccess::SetValue_
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x69], rcx
lea rdx, str.Error_Code:_0x_x
lea rcx, [rbp - 0x79]
mov qword [rbp - 0x61], r15
mov dword [rbp - 0x59], r14d
call fcn.140008d50
lea rcx, [rbp + 0x17]
call fcn.140005d10
lea rcx, str.C:Program_FilesApoint2KApEcoLed.exe
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1400083fb
lea rax, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5dynabookecoserviceecoserver_toshibasystemmodules.cpp
mov dword [rbp - 0x71], 0x2fb
mov qword [rbp - 0x79], rax
lea rdx, str.ApEcoLED.exe_set_off
lea rax, str.__RestorePowerSettings_
mov qword [rbp - 0x61], r15
lea rcx, [rbp - 0x79]
mov qword [rbp - 0x69], rax
mov dword [rbp - 0x59], 3
call fcn.140008d50
lea r9, str._off
mov dword [rsp + 0x28], r14d
lea r8, str.C:Program_FilesApoint2KApEcoLed.exe
mov qword [rsp + 0x20], r14
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x17], rsi
call fcn.140005d10
jmp 0x14000841a
xor ecx, ecx
call fcn.14001e050
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x17], rsi
call fcn.140005d10
jmp 0x14000841a
xor edx, edx
xor ecx, ecx
call fcn.140007b70
mov r8, qword [rbp - 0x19]
lea rdx, str.LEAVE__s
lea rcx, [rbp - 0x11]
call fcn.140008d50
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140072680
mov rbx, qword [rsp + 0x130]
add rsp, 0xf0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret