Function at 0x14005c7dc
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x58]
sub rsp, 0x140
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1400bc178]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov rsi, rcx
mov r8d, dword [rcx]
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.14005d780
nop
xor r14d, r14d
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
lea rdx, [rbp - 0x18]
cmp qword [rbp], 8
cmovae rdx, qword [rbp - 0x18]
mov qword [rsp + 0x40], r14
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [rsp + 0x50], eax
test eax, eax
je 0x14005c9f3
lea rax, [rbp - 0x18]
cmp qword [rbp], 8
cmovae rax, qword [rbp - 0x18]
mov qword [rsp + 0x58], rax
lea ebx, [r14 + 7]
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x70], r14
mov word [rbp - 0x80], r14w
lea r8d, [r14 + 0x39]
lea rdx, str.Couldnt_create_registry_key._n_winerr___1__n_sub_key:__2_
lea rcx, [rbp - 0x80]
call fcn.140003394
nop
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x28], r14
mov word [rbp - 0x38], r14w
movzx eax, word [str.Publishing]
neg ax
sbb r8, r8
and r8d, 0xa
lea rdx, str.Publishing
lea rcx, [rbp - 0x38]
call fcn.140003394
nop
call fcn.140007e38
lea r8, [rbp - 0x80]
lea rdx, [rbp + 8]
call fcn.1400377c0
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x60]
call fcn.140003144
mov dword [rbp - 0x40], 0x136
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14000a520
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000e71c
mov r9, rax
lea r8, [rbp - 0x38]
lea edi, [r14 + 1]
mov edx, edi
lea rcx, [rbp - 0x60]
call fcn.1400379a4
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14005c95d
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x60]
call fcn.1400029dc
mov qword [rbp - 0x48], SafeArrayGetDim
mov qword [rbp - 0x50], r14
mov byte [rbp - 0x60], r14b
lea rax, vtable.AppV::LogFormatter.0
mov qword [rbp + 8], rax
xor r8d, r8d
mov dl, dil
lea rcx, [rbp + 0x18]
call fcn.14000328c
nop
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x38]
call fcn.14000328c
nop
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x80]
call fcn.14000328c
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005c9c3
add rax, rdi
jmp 0x14005c9ca
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400bd408]
call fcn.14000fa54
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x262700000000
jmp 0x14005cdc3
lea rcx, [rsi + 8]
mov rax, qword [rcx + 0x10]
inc rax
mov ebx, 0xffffffff
cmp rax, rbx
jbe 0x14005ca0e
call fcn.140015790
int3
mov edx, eax
add rdx, rdx
mov rax, rdx
shr rax, 0x20
test eax, eax
je 0x14005ca24
call fcn.140015790
int3
cmp qword [rcx + 0x18], 8
jb 0x14005ca2e
mov rcx, qword [rcx]
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rcx
mov edi, 1
mov r9d, edi
lea r8, [0x140093100]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov dword [rsp + 0x50], eax
test eax, eax
je 0x14005cbdd
lea rax, [rbp - 0x18]
cmp qword [rbp], 8
cmovae rax, qword [rbp - 0x18]
mov qword [rsp + 0x58], rax
lea ebx, [rdi + 6]
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x28], r14
mov word [rbp - 0x38], r14w
lea r8d, [rdi + 0x4c]
lea rdx, str.Couldnt_set_registry_key_value._n_winerr___1__n_sub_key:__2__n_value_name:__3_
lea rcx, [rbp - 0x38]
call fcn.140003394
nop
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x70], r14
mov word [rbp - 0x80], r14w
movzx eax, word [str.Publishing]
neg ax
sbb r8, r8
and r8d, 0xa
lea rdx, str.Publishing
lea rcx, [rbp - 0x80]
call fcn.140003394
nop
call fcn.140007e38
lea r8, [rbp - 0x38]
lea rdx, [rbp + 8]
call fcn.1400377c0
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x60]
call fcn.140003144
mov dword [rbp - 0x40], 0x144
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14000a520
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000e71c
mov rcx, rax
lea rdx, [0x140072508]
call fcn.14000e71c
mov r9, rax
lea r8, [rbp - 0x80]
mov edx, edi
lea rcx, [rbp - 0x60]
call fcn.1400379a4
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14005cb47
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x60]
call fcn.1400029dc
mov qword [rbp - 0x48], SafeArrayGetDim
mov qword [rbp - 0x50], r14
mov byte [rbp - 0x60], r14b
lea rax, vtable.AppV::LogFormatter.0
mov qword [rbp + 8], rax
xor r8d, r8d
mov dl, dil
lea rcx, [rbp + 0x18]
call fcn.14000328c
nop
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x80]
call fcn.14000328c
nop
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x38]
call fcn.14000328c
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005cbad
add rax, rdi
jmp 0x14005cbb4
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400bd408]
call fcn.14000fa54
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x282700000000
jmp 0x14005cdc3
lea rcx, [rsi + 0x28]
cmp qword [rcx + 0x10], rbx
jbe 0x14005cbed
call fcn.140015790
int3
mov eax, dword [rcx + 0x10]
add rax, rdi
cmp rax, rbx
ja 0x14005ceda
mov edx, eax
add rdx, rdx
mov rax, rdx
shr rax, 0x20
test eax, eax
je 0x14005cc12
call fcn.140015790
int3
cmp qword [rcx + 0x18], 8
jb 0x14005cc1c
mov rcx, qword [rcx]
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rcx
mov r9d, edi
lea r8, [0x1400930f8]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov dword [rsp + 0x50], eax
test eax, eax
je 0x14005cdcb
lea rax, [rbp - 0x18]
cmp qword [rbp], 8
cmovae rax, qword [rbp - 0x18]
mov qword [rsp + 0x58], rax
mov ebx, 7
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x28], r14
mov word [rbp - 0x38], r14w
lea r8d, [rbx + 0x46]
lea rdx, str.Couldnt_set_registry_key_value._n_winerr___1__n_sub_key:__2__n_value_name:__3_
lea rcx, [rbp - 0x38]
call fcn.140003394
nop
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x70], r14
mov word [rbp - 0x80], r14w
movzx eax, word [str.Publishing]
neg ax
sbb r8, r8
and r8d, 0xa
lea rdx, str.Publishing
lea rcx, [rbp - 0x80]
call fcn.140003394
nop
call fcn.140007e38
lea r8, [rbp - 0x38]
lea rdx, [rbp + 8]
call fcn.1400377c0
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x60]
call fcn.140003144
mov dword [rbp - 0x40], 0x151
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14000a520
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000e71c
mov rcx, rax
lea rdx, [0x140072510]
call fcn.14000e71c
mov r9, rax
lea r8, [rbp - 0x80]
mov edx, edi
lea rcx, [rbp - 0x60]
call fcn.1400379a4
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14005cd32
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x60]
call fcn.1400029dc
mov qword [rbp - 0x48], SafeArrayGetDim
mov qword [rbp - 0x50], r14
mov byte [rbp - 0x60], r14b
lea rax, vtable.AppV::LogFormatter.0
mov qword [rbp + 8], rax
xor r8d, r8d
mov dl, dil
lea rcx, [rbp + 0x18]
call fcn.14000328c
nop
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x80]
call fcn.14000328c
nop
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x38]
call fcn.14000328c
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005cd98
add rax, rdi
jmp 0x14005cd9f
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400bd408]
call fcn.14000fa54
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x2a2700000000
or rbx, rax
jmp 0x14005ceb1
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.14000328c
movzx eax, word [0x1400930e8]
neg ax
sbb r8, r8
and r8d, 6
lea rdx, [0x1400930e8]
lea rcx, [rbp - 0x80]
call fcn.140003394
nop
lea r9, [rsi + 0x48]
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x18]
mov rcx, qword [rsp + 0x60]
call fcn.14005cf0c
mov rbx, rax
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x80]
call fcn.14000328c
mov rax, rbx
shr rax, 0x27
not eax
test dil, al
jne 0x14005ceb1
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.14000328c
movzx eax, word [str.User]
neg ax
sbb r8, r8
and r8d, 4
lea rdx, str.User
lea rcx, [rbp - 0x80]
call fcn.140003394
nop
lea r9, [rsi + 0x54]
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x18]
mov rcx, qword [rsp + 0x60]
call fcn.14005cf0c
mov rbx, rax
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x80]
call fcn.14000328c
mov rax, rbx
shr rax, 0x27
not eax
test dil, al
jne 0x14005ceb1
movabs rbx, 0x8000000000
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14005cec6
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x60], r14
xor r8d, r8d
mov dl, dil
lea rcx, [rbp - 0x18]
call fcn.14000328c
mov rax, rbx
jmp 0x14005cee0
call fcn.140015790
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140061880
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret