Function at 0x1401fd624
Capabilities:
Set registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov qword [rbp + 0x17], 0xfffffffffffffffe
mov rsi, rdx
mov r13, rcx
mov rax, qword [rcx + 0x20]
xor r14d, r14d
cmp byte [rax + 1], r14b
jne 0x1401fd96e
mov qword [rbp - 0x79], r14
mov qword [rbp - 0x71], r14
mov qword [rbp - 0x69], r14
mov rcx, qword [rdx]
add rcx, 0x20
lea r8, [rbp - 0x79]
lea rdx, [0x1403524b0]
call fcn.1402e46c0
mov rdi, qword [rbp - 0x79]
mov rbx, qword [rbp - 0x71]
cmp rdi, rbx
je 0x1401fd947
mov qword [rbp - 0x11], r14
mov dword [rbp - 9], r14d
mov qword [rbp - 1], r14
lea rax, vtable.Piriform::Registry::CRegKeyEx.0
mov qword [rbp - 0x19], rax
or eax, 0xffffffff
mov dword [rbp + 7], eax
mov dword [rbp + 0xb], eax
mov dword [rbp + 0xf], r14d
mov rbx, qword [rsi]
mov rcx, rdi
call fcn.1402244d8
mov qword [rbx + 0x38], rax
mov rdx, qword [rbp - 0x79]
lea rcx, [rbp - 0x39]
call fcn.140224318
nop
mov rcx, qword [rsi]
add rcx, 0x40
mov rdx, rax
call fcn.14000c244
nop
mov rdx, qword [rbp - 0x39]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1401fd6fe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsi]
add rcx, 0x48
xor r8d, r8d
lea rdx, [0x140330de8]
call fcn.14000c9f8
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp - 0x71]
mov rcx, qword [rbp - 0x79]
sub rax, rcx
sar rax, 3
cmp rax, 1
jbe 0x1401fd7db
mov qword [rbp - 0x59], r14
mov qword [rbp - 0x51], r14
mov qword [rbp - 0x49], r14
add rcx, 8
lea r8, [rbp - 0x59]
lea rdx, [0x1403631b8]
call fcn.1402e46c0
mov r11, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x59]
sub r11, rdx
sar r11, 3
mov rcx, qword [rsi]
add rcx, 0x48
cmp r11, 1
jbe 0x1401fd79e
call fcn.14000c244
mov rdx, qword [rbp - 0x59]
add rdx, 8
lea rcx, [rbp + 0x7f]
call fcn.14000c244
mov rbx, qword [rbp + 0x7f]
jmp 0x1401fd7ac
mov rdx, qword [rbp - 0x79]
add rdx, 8
call fcn.14000c244
nop
mov rdi, qword [rbp - 0x59]
test rdi, rdi
je 0x1401fd7db
mov r12, qword [rbp - 0x51]
cmp rdi, r12
je 0x1401fd7d3
mov rcx, rdi
call fcn.140082b80
add rdi, 8
cmp rdi, r12
jne 0x1401fd7be
mov rdi, qword [rbp - 0x59]
mov rcx, rdi
call fcn.1400be0f4
cmp dword [rbx - 0x10], r14d
je 0x1401fd86a
mov rax, qword [rsi]
mov r13, qword [rax + 0x48]
mov qword [rbp - 0x31], r14
mov dword [rbp - 0x29], r14d
mov qword [rbp - 0x21], r14
mov r9d, 0x2001f
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x38]
lea rcx, [rbp - 0x31]
call fcn.140010dd0
mov r12d, eax
mov rdi, qword [rbp - 0x31]
test eax, eax
jne 0x1401fd847
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [rax + rax + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
lea r9d, [r12 + 1]
xor r8d, r8d
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r12d, eax
test rdi, rdi
je 0x1401fd855
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r12d, r12d
jne 0x1401fd91a
mov rax, qword [rsi]
mov byte [rax + 0x70], 1
jmp 0x1401fd91a
mov rdi, qword [rsi]
mov rax, qword [rdi + 0x48]
lea r9, [rdi + 0x74]
mov byte [rsp + 0x20], r14b
cmp dword [rax - 0x10], r14d
je 0x1401fd8cd
mov r8, rax
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x38]
call fcn.140224098
mov byte [rdi + 0x70], al
lea rcx, [rbp + 0x67]
call fcn.14023dc9c
cmp dword [rbp + 0x67], r14d
je 0x1401fd91a
mov rdi, qword [rsi]
cmp byte [rdi + 0x70], r14b
je 0x1401fd8b1
cmp dword [rdi + 0x74], 2
jne 0x1401fd91a
lea r9, [rdi + 0x74]
mov byte [rsp + 0x20], 1
mov r8, qword [rdi + 0x48]
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x38]
call fcn.140224098
jmp 0x1401fd917
mov r8, qword [rdi + 0x40]
mov rdx, qword [rdi + 0x38]
mov rcx, r13
call fcn.1401fd584
mov byte [rdi + 0x70], al
lea rcx, [rbp + 0x77]
call fcn.14023dc9c
cmp dword [rbp + 0x77], r14d
je 0x1401fd91a
mov rdi, qword [rsi]
cmp byte [rdi + 0x70], r14b
je 0x1401fd8fe
cmp dword [rdi + 0x74], 2
jne 0x1401fd91a
lea r9, [rdi + 0x74]
mov byte [rsp + 0x20], 1
mov r8, qword [rdi + 0x40]
mov rdx, qword [rdi + 0x38]
mov rcx, r13
call fcn.1401fd584
mov byte [rdi + 0x70], al
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1401fd936
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x19]
call fcn.140224148
mov rbx, qword [rbp - 0x71]
mov rdi, qword [rbp - 0x79]
test rdi, rdi
je 0x1401fd96e
cmp rdi, rbx
je 0x1401fd966
mov rcx, rdi
call fcn.140082b80
add rdi, 8
cmp rdi, rbx
jne 0x1401fd951
mov rdi, qword [rbp - 0x79]
mov rcx, rdi
call fcn.1400be0f4
add rsp, 0xd0
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret