Function at 0x140014498
Capabilities:
Delete registry value
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r15
push rbp
lea rbp, [rax - 0x198]
sub rsp, 0x290
mov rax, qword [0x140051580]
xor rax, rsp
mov qword [rbp + 0x180], rax
xor esi, esi
mov ebx, ecx
cmp dword [0x1400537a0], esi
mov qword [rsp + 0x50], rsi
je 0x140014558
call fcn.14001592c
call fcn.140015264
cmp dword [0x1400537a4], esi
je 0x140014584
cmp qword [0x140053798], rsi
je 0x140014584
call fcn.140016684
test rax, rax
je 0x140014584
call fcn.140016684
xor edx, edx
mov rcx, rax
call fcn.14002b214
test rax, rax
je 0x140014536
call fcn.140016684
mov rdi, rax
call fcn.140016684
xor edx, edx
mov rcx, rax
call fcn.14002b214
jmp 0x14001454b
call fcn.140016684
mov rdi, rax
call fcn.140016684
mov rcx, rax
call fcn.14002b318
mov rdx, rax
mov rcx, rdi
call fcn.14002d4d0
jmp 0x140014577
test ebx, ebx
je 0x140014584
cmp dword [0x1400537a4], esi
je 0x140014584
cmp qword [0x140053798], rsi
je 0x140014584
call fcn.140016684
test rax, rax
je 0x140014584
call fcn.140016684
mov rcx, rax
call fcn.14002d24c
mov qword [rsp + 0x40], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
lea rdx, str.SoftwareMicrosoftMediaPlayerPreferences
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 2
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x20], esi
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
nop dword [rax + rax]
mov edi, 4
lea r15, str.AcceptedPrivacyStatement
test eax, eax
jne 0x140014637
cmp dword [0x140051d90], esi
mov dword [rsp + 0x58], 1
jne 0x140014612
test ebx, ebx
je 0x140014626
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
mov dword [rsp + 0x28], edi
mov r9d, edi
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
jmp 0x140014626
mov rcx, qword [rsp + 0x50]
mov rdx, r15
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop dword [rax + rax]
lea rcx, [rsp + 0x60]
call fcn.14003bd0c
or word [rsp + 0x6c], di
lea rcx, [rsp + 0x60]
call fcn.140015354
test eax, eax
js 0x140014730
mov rdx, qword [rsp + 0x60]
lea rax, [rsp + 0x50]
mov r9d, 3
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
nop dword [rax + rax]
test eax, eax
jne 0x140014730
cmp dword [0x140051d90], esi
mov dword [rsp + 0x58], 1
jne 0x1400146c9
test ebx, ebx
je 0x140014711
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
mov dword [rsp + 0x28], edi
mov r9d, edi
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
jmp 0x1400146e1
mov rcx, qword [rsp + 0x50]
mov rdx, r15
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
nop dword [rax + rax]
test ebx, ebx
je 0x140014711
mov rcx, qword [rsp + 0x50]
lea r15, [0x1400537b4]
mov dword [rsp + 0x28], edi
lea rdx, str.UsageTracking
mov r9d, edi
mov qword [rsp + 0x20], r15
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
jmp 0x140014718
lea r15, [0x1400537b4]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop dword [rax + rax]
mov qword [rsp + 0x50], rsi
jmp 0x140014737
lea r15, [0x1400537b4]
test ebx, ebx
je 0x14001490d
mov qword [rsp + 0x40], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
lea rdx, str.SoftwareMicrosoftMediaPlayerPreferences
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 3
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x20], esi
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
nop dword [rax + rax]
test eax, eax
jne 0x140014908
mov rcx, qword [rsp + 0x50]
lea rax, [0x1400537e0]
mov dword [rsp + 0x28], edi
lea rdx, str.MetadataRetrieval
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
lea rax, [0x140053800]
mov dword [rsp + 0x28], 1
lea rdx, str.SendUserGUID
mov r9d, 3
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
lea rax, [0x1400537e8]
mov dword [rsp + 0x28], edi
lea rdx, str.SilentAcquisition
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
lea rdx, str.UsageTracking
mov r9d, edi
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
lea rax, [0x1400537ac]
mov dword [rsp + 0x28], edi
lea rdx, str.DisableMRUMusic
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
lea rax, [0x1400537fc]
mov dword [rsp + 0x28], edi
lea rdx, str.DisableMRUPictures
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
lea rax, [0x1400537c8]
mov dword [rsp + 0x28], edi
lea rdx, str.DisableMRUVideo
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
lea rax, [0x1400537cc]
mov dword [rsp + 0x28], edi
lea rdx, str.DisableMRUPlaylists
mov r9d, edi
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop dword [rax + rax]
call fcn.14001d334
mov rcx, qword [0x1400537d0]
movzx eax, si
mov word [rsp + 0x70], ax
mov r15d, 0x104
test rcx, rcx
je 0x140014985
mov rdx, qword [rcx + 0x50]
test rdx, rdx
je 0x140014938
cmp word [rdx], si
setne al
jmp 0x14001493a
mov eax, esi
test al, al
je 0x140014956
mov r8d, r15d
lea rdx, [rsp + 0x70]
add rcx, 0x50
call fcn.14003bf94
mov rcx, qword [0x1400537d0]
call fcn.140017e00
mov rcx, qword [0x1400537d0]
mov rax, qword [rcx]
movabs r10, 0xbaac1f10365eb170
mov rax, qword [rax + 0x10]
call qword [0x1400401a8]
movzx eax, word [rsp + 0x70]
mov qword [0x1400537d0], rsi
test ebx, ebx
je 0x140014a43
test ax, ax
je 0x140014a28
mov edx, reloc.ATL.DLL_AtlInternalQueryInterface
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcschr]
nop dword [rax + rax]
test rax, rax
je 0x140014a28
mov eax, 0x22
cmp ax, word [rsp + 0x70]
je 0x140014a28
or rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x70]
mov rbx, rcx
inc rbx
cmp word [rdx + rbx*2], si
jne 0x1400149c9
add rbx, 5
mov eax, 2
mul rbx
cmovo rax, rcx
mov rcx, rax
call fcn.14000130c
mov rdi, rax
test rax, rax
je 0x140014a23
lea r9, [rsp + 0x70]
mov rdx, rbx
lea r8, str.__s_
mov rcx, rax
call fcn.1400104f4
mov r8, rdi
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.1400104bc
mov rcx, rdi
call fcn.1400012c0
jmp 0x140014a28
mov word [rsp + 0x70], si
cmp dword [0x1400515d8], esi
je 0x140014a3e
lea rcx, [rsp + 0x70]
call fcn.140014e58
test eax, eax
jne 0x140014a43
call fcn.1400193a0
test byte [0x140051d80], 1
je 0x140014a5e
mov r8d, 1
lea rdx, [0x1400427b8]
call fcn.140011e14
lea rcx, [rsp + 0x60]
call fcn.14003bff8
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.140001660
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r15, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret