Function at 0x14005fa94
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1400c1270]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
mov r8d, dword [rcx]
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140060a24
nop
xor r12d, r12d
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [rsp + 0x50], eax
test eax, eax
je 0x14005fc9f
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x70], r12
lea r15d, [r12 + 7]
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
lea r8d, [r12 + 0x39]
lea rdx, str.Couldnt_create_registry_key._n_winerr___1__n_sub_key:__2_
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r15
mov word [rbp - 0x60], r12w
lea r8d, [r12 + 0xa]
lea rdx, str.Publishing
lea rcx, [rbp - 0x60]
call fcn.1400030f0
nop
call fcn.140007558
lea r8, [rbp - 0x80]
lea rdx, [rbp + 8]
call fcn.140039d08
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x20]
call fcn.140039f38
mov dword [rbp], 0x136
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140009480
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000edac
mov r9, rbx
lea r8, [rbp - 0x60]
lea esi, [r12 + 1]
mov edx, esi
lea rcx, [rbp - 0x20]
call fcn.140039eb4
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14005fc11
inc rdx
mov r8d, esi
mov rcx, qword [rbp - 0x20]
call fcn.140002ec0
nop
lea rcx, [rbp + 8]
call fcn.14003a5c4
nop
mov edi, 2
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14005fc3a
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x60]
call fcn.140002ec0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14005fc53
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005fc6f
add rax, rsi
jmp 0x14005fc76
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400c2688]
call fcn.14000f3ec
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x262700000000
jmp 0x14006004a
mov rax, qword [r14 + 0x18]
inc rax
mov ebx, 0xffffffff
cmp rax, rbx
jbe 0x14005fcb6
call fcn.140014b88
int3
mov ecx, eax
add rcx, rcx
mov rax, rcx
shr rax, 0x20
test eax, eax
je 0x14005fccc
call fcn.140014b88
int3
lea rax, [r14 + 8]
cmp qword [rax + 0x18], 8
jb 0x14005fcda
mov rax, qword [rax]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov esi, 1
mov r9d, esi
lea r8, [0x140097c70]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov dword [rsp + 0x50], eax
test eax, eax
je 0x14005fe76
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x50], r12
lea r15d, [rsi + 6]
mov qword [rbp - 0x48], r15
mov word [rbp - 0x60], r12w
lea r8d, [rsi + 0x4c]
lea rdx, str.Couldnt_set_registry_key_value._n_winerr___1__n_sub_key:__2__n_value_name:__3_
lea rcx, [rbp - 0x60]
call fcn.1400030f0
nop
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
lea r8d, [rsi + 9]
lea rdx, str.Publishing
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
call fcn.140007558
lea r8, [rbp - 0x60]
lea rdx, [rbp + 8]
call fcn.140039d08
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x20]
call fcn.140039f38
mov dword [rbp], 0x144
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140009480
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000edac
lea rdx, str.p_t_
mov rcx, rbx
call fcn.14000edac
mov r9, rbx
lea r8, [rbp - 0x80]
mov edx, esi
lea rcx, [rbp - 0x20]
call fcn.140039eb4
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14005fde8
inc rdx
mov r8d, esi
mov rcx, qword [rbp - 0x20]
call fcn.140002ec0
nop
lea rcx, [rbp + 8]
call fcn.14003a5c4
nop
mov edi, 2
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14005fe11
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14005fe2a
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x60]
call fcn.140002ec0
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14005fe46
add rax, rsi
jmp 0x14005fe4d
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400c2688]
call fcn.14000f3ec
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x282700000000
jmp 0x14006004a
cmp qword [r14 + 0x38], rbx
jbe 0x14005fe82
call fcn.140014b88
int3
mov eax, dword [r14 + 0x38]
add rax, rsi
cmp rax, rbx
ja 0x14006015c
mov ecx, eax
add rcx, rcx
mov rax, rcx
shr rax, 0x20
test eax, eax
je 0x14005fea8
call fcn.140014b88
int3
lea rax, [r14 + 0x28]
cmp qword [rax + 0x18], 8
jb 0x14005feb6
mov rax, qword [rax]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [0x140097d98]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov dword [rsp + 0x50], eax
mov r15d, 7
test eax, eax
je 0x140060052
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r15
mov word [rbp - 0x60], r12w
lea r8d, [r15 + 0x46]
lea rdx, str.Couldnt_set_registry_key_value._n_winerr___1__n_sub_key:__2__n_value_name:__3_
lea rcx, [rbp - 0x60]
call fcn.1400030f0
nop
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
lea r8d, [r15 + 3]
lea rdx, str.Publishing
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
call fcn.140007558
lea r8, [rbp - 0x60]
lea rdx, [rbp + 8]
call fcn.140039d08
mov rbx, rax
lea rdx, str.AppV::Client::Publishing::Configurations::ServerRegRecord::WriteRegServerRecord
lea rcx, [rbp - 0x20]
call fcn.140039f38
mov dword [rbp], 0x151
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140009480
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14000edac
lea rdx, [0x140076500]
mov rcx, rbx
call fcn.14000edac
mov r9, rbx
lea r8, [rbp - 0x80]
mov edx, esi
lea rcx, [rbp - 0x20]
call fcn.140039eb4
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14005ffc1
inc rdx
mov r8, rsi
mov rcx, qword [rbp - 0x20]
call fcn.140002ec0
nop
lea rcx, [rbp + 8]
call fcn.14003a5c4
nop
mov edi, 2
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14005ffea
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140060003
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x60]
call fcn.140002ec0
mov edx, 0x5c
lea rcx, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
test rax, rax
je 0x14006001f
add rax, rsi
jmp 0x140060026
lea rax, str.admin_appman_appvclientpublishingconfigurations_serverregrecord.cpp
mov rdx, rax
lea rcx, [0x1400c2688]
call fcn.14000f3ec
shl rax, 0x34
mov ebx, dword [rsp + 0x50]
or rbx, rax
movabs rax, 0x2a2700000000
or rbx, rax
jmp 0x140060129
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
mov r8d, 6
lea rdx, [0x140097d88]
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
lea r9, [r14 + 0x48]
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x40]
mov rcx, qword [rsp + 0x60]
call fcn.14006018c
mov rbx, rax
mov edi, 2
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400600ad
inc rdx
mov r8d, edi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
mov rax, rbx
shr rax, 0x27
not eax
test sil, al
jne 0x140060129
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r15
mov word [rbp - 0x80], r12w
mov r8d, 4
lea rdx, str.User
lea rcx, [rbp - 0x80]
call fcn.1400030f0
nop
lea r9, [r14 + 0x54]
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x40]
mov rcx, qword [rsp + 0x60]
call fcn.14006018c
mov rbx, rax
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140060111
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x80]
call fcn.140002ec0
mov rax, rbx
shr rax, 0x27
not eax
test sil, al
jne 0x140060129
movabs rbx, 0x8000000000
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14006013e
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x60], r12
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140060157
inc rdx
mov r8, rdi
mov rcx, qword [rbp - 0x40]
call fcn.140002ec0
mov rax, rbx
jmp 0x140060162
call fcn.140014b88
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400651a0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret