Function at 0x140060054
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1400c2270]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
mov r8d, dword [rcx]
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140060fe4
nop
xor r12d, r12d
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [rsp + 0x50], eax
test eax, eax
je 0x14006025f
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x70], r12
lea r15d, [r12 + 7]
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
lea r8d, [r12 + 0x39]
lea rdx, str.Couldnt_create_registry_key._n_winerr___1__n_sub_key:__2_
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r15
mov word [rbp - 0x60], r12w
lea r8d, [r12 + 0xa]
lea rdx, str.Publishing
lea rcx, [rbp - 0x60]
call fcn.1400030f0
nop
call fcn.140007558
lea r8, [rbp - 0x80]
lea rdx, [rbp + 8]
call fcn.14003a428
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x20]
call fcn.14003a658
mov dword [rbp], 0x136
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140009480
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000edac
mov r9, rbx
lea r8, [rbp - 0x60]
lea esi, [r12 + 1]
mov edx, esi
lea rcx, [rbp - 0x20]
call fcn.14003a5d4
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400601d1
inc rdx
mov r8d, esi
mov rcx, qword [rbp - 0x20]
call fcn.140002ec0
nop
lea rcx, [rbp + 8]
call fcn.14003ace4
nop
mov edi, 2
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400601fa
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x60]
call fcn.140002ec0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140060213
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14006022f
add rax, rsi
jmp 0x140060236
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400c3688]
call fcn.14000f3ec
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x262700000000
jmp 0x14006060a
mov rax, qword [r14 + 0x18]
inc rax
mov ebx, 0xffffffff
cmp rax, rbx
jbe 0x140060276
call fcn.140014b88
int3
mov ecx, eax
add rcx, rcx
mov rax, rcx
shr rax, 0x20
test eax, eax
je 0x14006028c
call fcn.140014b88
int3
lea rax, [r14 + 8]
cmp qword [rax + 0x18], 8
jb 0x14006029a
mov rax, qword [rax]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov esi, 1
mov r9d, esi
lea r8, [0x140097d60]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov dword [rsp + 0x50], eax
test eax, eax
je 0x140060436
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x50], r12
lea r15d, [rsi + 6]
mov qword [rbp - 0x48], r15
mov word [rbp - 0x60], r12w
lea r8d, [rsi + 0x4c]
lea rdx, str.Couldnt_set_registry_key_value._n_winerr___1__n_sub_key:__2__n_value_name:__3_
lea rcx, [rbp - 0x60]
call fcn.1400030f0
nop
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
lea r8d, [rsi + 9]
lea rdx, str.Publishing
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
call fcn.140007558
lea r8, [rbp - 0x60]
lea rdx, [rbp + 8]
call fcn.14003a428
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x20]
call fcn.14003a658
mov dword [rbp], 0x144
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140009480
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000edac
lea rdx, str.__t_
mov rcx, rbx
call fcn.14000edac
mov r9, rbx
lea r8, [rbp - 0x80]
mov edx, esi
lea rcx, [rbp - 0x20]
call fcn.14003a5d4
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400603a8
inc rdx
mov r8d, esi
mov rcx, qword [rbp - 0x20]
call fcn.140002ec0
nop
lea rcx, [rbp + 8]
call fcn.14003ace4
nop
mov edi, 2
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400603d1
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400603ea
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x60]
call fcn.140002ec0
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x140060406
add rax, rsi
jmp 0x14006040d
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400c3688]
call fcn.14000f3ec
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x282700000000
jmp 0x14006060a
cmp qword [r14 + 0x38], rbx
jbe 0x140060442
call fcn.140014b88
int3
mov eax, dword [r14 + 0x38]
add rax, rsi
cmp rax, rbx
ja 0x14006071c
mov ecx, eax
add rcx, rcx
mov rax, rcx
shr rax, 0x20
test eax, eax
je 0x140060468
call fcn.140014b88
int3
lea rax, [r14 + 0x28]
cmp qword [rax + 0x18], 8
jb 0x140060476
mov rax, qword [rax]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [0x140097d58]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov dword [rsp + 0x50], eax
mov r15d, 7
test eax, eax
je 0x140060612
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r15
mov word [rbp - 0x60], r12w
lea r8d, [r15 + 0x46]
lea rdx, str.Couldnt_set_registry_key_value._n_winerr___1__n_sub_key:__2__n_value_name:__3_
lea rcx, [rbp - 0x60]
call fcn.1400030f0
nop
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
lea r8d, [r15 + 3]
lea rdx, str.Publishing
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
call fcn.140007558
lea r8, [rbp - 0x60]
lea rdx, [rbp + 8]
call fcn.14003a428
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x20]
call fcn.14003a658
mov dword [rbp], 0x151
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140009480
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000edac
lea rdx, str.X_t_
mov rcx, rbx
call fcn.14000edac
mov r9, rbx
lea r8, [rbp - 0x80]
mov edx, esi
lea rcx, [rbp - 0x20]
call fcn.14003a5d4
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140060581
inc rdx
mov r8, rsi
mov rcx, qword [rbp - 0x20]
call fcn.140002ec0
nop
lea rcx, [rbp + 8]
call fcn.14003ace4
nop
mov edi, 2
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400605aa
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400605c3
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x60]
call fcn.140002ec0
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x1400605df
add rax, rsi
jmp 0x1400605e6
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400c3688]
call fcn.14000f3ec
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x2a2700000000
or rbx, rax
jmp 0x1400606e9
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
mov r8d, 6
lea rdx, [0x140097d48]
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
lea r9, [r14 + 0x48]
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x40]
mov rcx, qword [rsp + 0x60]
call fcn.14006074c
mov rbx, rax
mov edi, 2
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14006066d
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
mov rax, rbx
shr rax, 0x27
not eax
test sil, al
jne 0x1400606e9
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
mov r8d, 4
lea rdx, str.User
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
lea r9, [r14 + 0x54]
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x40]
mov rcx, qword [rsp + 0x60]
call fcn.14006074c
mov rbx, rax
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400606d1
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
mov rax, rbx
shr rax, 0x27
not eax
test sil, al
jne 0x1400606e9
movabs rbx, 0x8000000000
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400606fe
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x60], r12
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140060717
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x40]
call fcn.140002ec0
mov rax, rbx
jmp 0x140060722
call fcn.140014b88
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140065760
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret