Function at 0x1400146c4
Capabilities:
Set registry value

Disassembly:
mov r11, rsp
push rbp
push r12
push r15
lea rbp, [r11 - 0x5f]
sub rsp, 0x90
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov rax, qword [0x140032370]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r15, rcx
xor r12d, r12d
mov qword [rbp + 7], r12
mov edi, r12d
mov qword [r11 - 0x68], r12
lea rax, [rbp + 7]
mov qword [r11 - 0x70], rax
mov qword [r11 - 0x78], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
test eax, eax
je 0x1400147c8
lea rdx, str.Failed_to_create_open_settings_key
lea rcx, [rbp + 0x17]
call fcn.140009758
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion_rempl_settings
lea rcx, [rbp + 0x17]
call fcn.140009638
lea rbx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rbx, qword [rbp + 0x17]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov rdx, rbx
call fcn.140008a40
mov edi, eax
test eax, eax
jns 0x1400147ac
mov ecx, eax
call fcn.140009374
nop
lea rcx, [rbp + 0x17]
call fcn.14000b958
jmp 0x1400148aa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
jns 0x14001479e
mov ecx, edi
jmp 0x140014798
mov rax, qword [r15 + 0x4e0]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1400148aa
lea rsi, [rbx + 0x30]
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400147ec
mov rcx, qword [rsi]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r12w
jne 0x1400147f0
add eax, eax
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140014809
mov rcx, qword [rsi]
lea rdi, [rbx + 0x10]
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x14001481a
mov r8, qword [rdi]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
xor edx, edx
lea r9d, [rdx + 1]
mov rcx, qword [rbp + 7]
call qword [sym.imp.api_ms_win_core_registry_l2_1_0.dll_RegSetKeyValueW]
test eax, eax
je 0x140014866
cmp qword [rdi + 0x18], 8
jb 0x140014841
mov rdi, qword [rdi]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r8, rdi
lea rdx, str.Failed_to_write__s
call fcn.140008c60
jmp 0x14001488e
cmp qword [rsi + 0x18], 8
jb 0x140014870
mov rsi, qword [rsi]
cmp qword [rdi + 0x18], 8
jb 0x14001487a
mov rdi, qword [rdi]
mov r9, rsi
mov r8, rdi
lea rdx, str.Wrote_value_Name:__s__Value:__s
xor ecx, ecx
call fcn.140008c60
test eax, eax
mov edi, eax
js 0x1400148a3
mov rbx, qword [rbx]
cmp rbx, qword [r15 + 0x4e0]
jmp 0x1400147d5
mov ecx, eax
call fcn.140009374
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x1400148b9
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov ecx, edi
call fcn.140009390
mov eax, edi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14001c430
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r12
pop rbp
ret