Function at 0x140003130
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x428]
sub rsp, 0x500
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x14000a008]
xor rax, rsp
mov qword [rbp + 0x3f0], rax
lea rcx, [rbp - 0x50]
call fcn.140001020
nop
xor r15d, r15d
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x58], r15
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140003e71
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.CLSID645FF040_5081_101B_9F08_00AA002F954E_shellDRWUndelete
lea r13, [r15 - 1]
cmp rdx, 0x10000
jae 0x1400031cc
movzx edx, dx
lea rcx, [rbp - 0x70]
call fcn.140004220
jmp 0x1400031e7
mov rax, r13
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400031d0
mov r8d, eax
lea rcx, [rbp - 0x70]
call fcn.140004430
nop
mov qword [rbp - 0x48], r15
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rdi, qword [rbp - 0x70]
mov rdx, rdi
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140003226
mov eax, r15d
mov rcx, qword [rbp - 0x48]
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x50], r15d
lea rsi, str.DRW.exe
test eax, eax
je 0x1400032a9
mov r8, rdi
lea rcx, [rsp + 0x48]
call fcn.140004e50
test eax, eax
je 0x1400032a9
xor r9d, r9d
lea r8, str.Tips
lea rdx, str.Registar_Failed_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140003270
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
lea rdx, [rdi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140003290
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400037c4
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400037c4
mov r8d, 0x104
lea rdx, [rbp - 0x30]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edx, 0x5c
lea rcx, [rbp - 0x30]
call qword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov word [rax], r15w
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140003e7c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x30]
cmp rax, 0x10000
jae 0x14000330d
lea rax, [rbp - 0x30]
movzx edx, ax
lea rcx, [rsp + 0x60]
call fcn.140004220
jmp 0x140003330
lea rcx, [rbp - 0x30]
mov rax, r13
inc rax
cmp word [rcx + rax*2], 0
jne 0x140003314
mov r8d, eax
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x60]
call fcn.140004430
nop
mov rax, r13
inc rax
cmp word [rsi + rax*2], 0
jne 0x140003333
mov qword [rsp + 0x40], rsi
mov r14, rsi
mov rbx, qword [rsp + 0x60]
sub r14, rbx
sar r14, 1
mov r15d, dword [rbx - 0x10]
test eax, eax
js 0x140003e66
movsxd rdx, eax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r15d
jl 0x140003e66
lea esi, [rax + r15]
test esi, esi
js 0x140003e66
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400033a9
mov edx, esi
lea rcx, [rsp + 0x60]
call fcn.140004650
mov rbx, qword [rsp + 0x60]
cmp r14, r15
ja 0x1400033b7
lea rcx, [rbx + r14*2]
mov qword [rsp + 0x40], rcx
movsxd rdx, r12d
lea rcx, [rbx + r15*2]
mov r9d, r12d
mov r8, qword [rsp + 0x40]
call fcn.1400045c0
lea rax, [rbx - 0x18]
mov qword [rbp - 0x58], rax
cmp esi, dword [rax + 0xc]
jg 0x140003e66
mov dword [rax + 8], esi
movsxd rax, esi
xor ecx, ecx
mov word [rbx + rax*2], cx
test rbx, rbx
je 0x14000342a
mov rax, r13
lea rax, [rax + 1]
cmp word [rbx + rax*2], cx
jne 0x1400033f0
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 1
xor r8d, r8d
lea rdx, str.Icon
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x14000342f
mov rsi, qword [rsp + 0x48]
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140003474
mov rcx, r13
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x140003440
lea ecx, [rcx*2 + 2]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.MUIVerb
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rax, r13
lea rcx, str.command
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140003480
mov qword [rsp + 0x40], rcx
mov r14, rcx
sub r14, rdi
sar r14, 1
mov r15d, dword [rdi - 0x10]
test eax, eax
js 0x140003e66
movsxd rdx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r15d
jl 0x140003e66
lea esi, [rax + r15]
test esi, esi
js 0x140003e66
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400034ec
mov edx, esi
lea rcx, [rbp - 0x70]
call fcn.140004650
mov rdi, qword [rbp - 0x70]
cmp r14, r15
ja 0x1400034fa
lea rcx, [rdi + r14*2]
mov qword [rsp + 0x40], rcx
movsxd rdx, r12d
lea rcx, [rdi + r15*2]
mov r9d, r12d
mov r8, qword [rsp + 0x40]
call fcn.1400045c0
lea r14, [rdi - 0x18]
mov qword [rbp - 0x78], r14
cmp esi, dword [r14 + 0xc]
jg 0x140003e66
mov dword [r14 + 8], esi
movsxd rax, esi
xor r15d, r15d
mov word [rdi + rax*2], r15w
mov qword [rbp - 0x60], r15
mov rsi, qword [rsp + 0x58]
test rsi, rsi
je 0x1400035a9
cmp qword [rsi], r15
je 0x14000359c
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
jne 0x14000355a
lea eax, [r15 + 1]
jmp 0x1400035cb
lea rdx, str.RegOpenKeyTransactedW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400035a2
mov qword [rsp + 0x30], r15
mov rcx, qword [rsi]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000000
call rax
jmp 0x1400035cb
cmp dword [rsi + 8], 0
jne 0x1400035a9
mov eax, 1
jmp 0x1400035cb
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400035f0
mov eax, r15d
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400035e2
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x60]
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x50], r15d
test eax, eax
je 0x140003673
mov r8, rdi
lea rcx, [rsp + 0x48]
call fcn.140004e50
test eax, eax
je 0x140003673
xor r9d, r9d
lea r8, str.Tips
lea rdx, str.Registar_Failed_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140003633
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov eax, r13d
mov rdx, qword [rbp - 0x58]
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140003653
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x14000366e
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
jmp 0x1400037ad
lea rdi, str.__recycle
mov rax, r13
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x140003680
mov r14, rdi
sub r14, rbx
sar r14, 1
mov r15d, dword [rbx - 0x10]
test eax, eax
js 0x140003e66
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r15d
jl 0x140003e66
lea esi, [r15 + rax]
test esi, esi
js 0x140003e66
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400036ec
mov edx, esi
lea rcx, [rsp + 0x60]
call fcn.140004650
mov rbx, qword [rsp + 0x60]
cmp r14, r15
ja 0x1400036f5
lea rdi, [rbx + r14*2]
movsxd rdx, r12d
lea rcx, [rbx + r15*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400045c0
lea rdi, [rbx - 0x18]
cmp esi, dword [rdi + 0xc]
jg 0x140003e66
mov dword [rdi + 8], esi
movsxd rax, esi
xor r15d, r15d
mov word [rbx + rax*2], r15w
test rbx, rbx
je 0x140003e87
mov rax, r13
nop
inc rax
cmp word [rbx + rax*2], r15w
jne 0x140003730
inc eax
add eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test rbx, rbx
je 0x140003773
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x140003792
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
nop
mov eax, r13d
mov rdx, qword [rbp - 0x78]
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400037ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400037bd
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rsi, str.DRW.exe
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], r15d
mov qword [rbp - 0x80], r15
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140003e92
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.Directory_shellDRWUndelete
cmp rdx, 0x10000
jae 0x14000380f
movzx edx, dx
lea rcx, [rbp - 0x68]
call fcn.140004220
jmp 0x140003829
mov rax, r13
inc rax
cmp word [rdx + rax*2], 0
jne 0x140003812
mov r8d, eax
lea rcx, [rbp - 0x68]
call fcn.140004430
nop
mov qword [rbp - 0x58], r15
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rdi, qword [rbp - 0x68]
mov rdx, rdi
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140003868
mov eax, r15d
mov rbx, qword [rbp - 0x58]
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x78], r15d
test eax, eax
je 0x1400038d0
mov r8, rdi
lea rcx, [rsp + 0x70]
call fcn.140004e50
test eax, eax
je 0x1400038d0
xor r9d, r9d
lea r8, str.Tips
lea rdx, str.Registar_Failed_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400038ab
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], r15d
lea rdx, [rdi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400038cb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
jmp 0x140003dfc
mov r8d, 0x104
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edx, 0x5c
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov word [rax], r15w
call fcn.140004ac0
mov rcx, rax
test rax, rax
je 0x140003e9d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x1e0]
cmp rax, 0x10000
jae 0x140003940
lea rax, [rbp + 0x1e0]
movzx edx, ax
lea rcx, [rsp + 0x68]
call fcn.140004220
jmp 0x14000396f
lea rcx, [rbp + 0x1e0]
mov rax, r13
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140003950
mov r8d, eax
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x68]
call fcn.140004430
nop
mov rax, r13
inc rax
cmp word [rsi + rax*2], 0
jne 0x140003972
mov r14, rsi
mov rbx, qword [rsp + 0x68]
sub r14, rbx
sar r14, 1
mov r12d, dword [rbx - 0x10]
test eax, eax
js 0x140003e5b
movsxd rdx, eax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r15, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r12d
jl 0x140003e5b
lea esi, [r12 + rax]
test esi, esi
js 0x140003e5b
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400039e3
mov edx, esi
lea rcx, [rsp + 0x68]
call fcn.140004650
mov rbx, qword [rsp + 0x68]
cmp r14, r12
lea r8, [rbx + r14*2]
jbe 0x1400039f3
lea r8, str.DRW.exe
movsxd rdx, r15d
lea rcx, [rbx + r12*2]
mov r9d, r15d
call fcn.1400045c0
cmp esi, dword [rbx - 0xc]
jg 0x140003e5b
mov dword [rbx - 0x10], esi
movsxd rax, esi
xor ecx, ecx
mov word [rbx + rax*2], cx
test rbx, rbx
je 0x140003a5a
mov rax, r13
nop
lea rax, [rax + 1]
cmp word [rbx + rax*2], cx
jne 0x140003a20
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 1
xor r8d, r8d
lea rdx, str.Icon
mov r15, qword [rsp + 0x70]
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x140003a5f
mov r15, qword [rsp + 0x70]
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140003aa4
mov rcx, r13
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x140003a70
lea ecx, [rcx*2 + 2]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.MUIVerb
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rax, r13
lea rcx, str.command
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140003ab0
mov rsi, rcx
sub rsi, rdi
sar rsi, 1
mov r14d, dword [rdi - 0x10]
mov dword [rbp - 0x78], r14d
test eax, eax
js 0x140003e5b
movsxd rdx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r8, rax
mov qword [rsp + 0x40], rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r14d
jl 0x140003e5b
add r14d, eax
js 0x140003e5b
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, r14d
or eax, ecx
jge 0x140003b24
mov edx, r14d
lea rcx, [rbp - 0x68]
call fcn.140004650
mov rdi, qword [rbp - 0x68]
mov r8, qword [rsp + 0x40]
mov eax, dword [rbp - 0x78]
cmp rsi, rax
lea r10, [rdi + rsi*2]
jbe 0x140003b37
lea r10, str.command
movsxd rdx, r8d
lea rcx, [rdi + rax*2]
mov r9d, r8d
mov r8, r10
call fcn.1400045c0
lea rsi, [rdi - 0x18]
cmp r14d, dword [rsi + 0xc]
jg 0x140003e5b
mov dword [rsi + 8], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rdi + rax*2], cx
mov qword [rsp + 0x40], rcx
mov r14, qword [rbp - 0x80]
test r14, r14
je 0x140003be3
cmp qword [r14], rcx
je 0x140003bd5
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
jne 0x140003b90
mov eax, 1
jmp 0x140003c06
lea rdx, str.RegOpenKeyTransactedW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140003bdc
xor ecx, ecx
mov qword [rsp + 0x30], rcx
mov rdx, qword [r14]
mov qword [rsp + 0x28], rdx
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x20], rdx
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000000
call rax
jmp 0x140003c06
cmp dword [r14 + 8], 0
jne 0x140003be3
mov eax, 1
jmp 0x140003c06
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor r14d, r14d
test eax, eax
jne 0x140003c2d
mov eax, r14d
test r15, r15
je 0x140003c1e
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r15, qword [rsp + 0x40]
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], r14d
test eax, eax
je 0x140003cb0
mov r8, rdi
lea rcx, [rsp + 0x70]
call fcn.140004e50
test eax, eax
je 0x140003cb0
xor r9d, r9d
lea r8, str.Tips
lea rdx, str.Registar_Failed_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140003c70
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x70], r14
mov dword [rsp + 0x78], r14d
mov eax, r13d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x140003c91
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x140003cab
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
nop
jmp 0x140003dfc
lea rdi, str.__right
mov rax, r13
nop word [rax + rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x140003cc0
mov r15, rdi
sub r15, rbx
sar r15, 1
mov r14d, dword [rbx - 0x10]
mov dword [rbp - 0x78], r14d
test eax, eax
js 0x140003e5b
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov eax, 0x7fffffff
sub eax, r12d
cmp eax, r14d
jl 0x140003e5b
add r14d, r12d
js 0x140003e5b
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x140003d30
mov edx, r14d
lea rcx, [rsp + 0x68]
call fcn.140004650
mov rbx, qword [rsp + 0x68]
mov eax, dword [rbp - 0x78]
cmp r15, rax
ja 0x140003d3c
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + rax*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400045c0
lea rdi, [rbx - 0x18]
cmp r14d, dword [rdi + 0xc]
jg 0x140003e5b
mov dword [rdi + 8], r14d
movsxd rax, r14d
xor r14d, r14d
mov word [rbx + rax*2], r14w
test rbx, rbx
je 0x140003ea8
mov rax, r13
nop word [rax + rax]
inc rax
cmp word [rbx + rax*2], r14w
jne 0x140003d80
inc eax
add eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rbx, qword [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test rbx, rbx
je 0x140003dc3
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x70], r14
mov dword [rsp + 0x78], r14d
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x140003de2
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x140003dfc
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140003e0d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
sub r13d, 1
jg 0x140003e2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x3f0]
xor rcx, rsp
call fcn.140005270
lea r11, [rsp + 0x500]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.140004e20
nop
mov ecx, 0x80070057
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
nop
mov ecx, 0x80004005
call fcn.140004e20
int3