Function at 0x14000d790
Capabilities:
Delete registry value
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x90
mov qword [rbp + 0x17], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x140068080]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rsi, rcx
xor eax, eax
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
xor edi, edi
mov r15d, edi
mov dword [rbp + 7], edi
mov qword [rbp + 0xf], rdi
mov qword [rbp + 0x1f], rdi
lea rax, [rbp + 0x1f]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.AppID
mov rcx, 0xffffffff80000000
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000dac2
mov r15, qword [rbp + 0x1f]
mov qword [rbp - 1], r15
mov dword [rbp + 7], edi
xor eax, eax
mov qword [rbp - 0x11], rax
mov r12d, edi
mov qword [rbp - 0x19], rdi
mov dword [rbp - 0x11], edi
mov qword [rbp - 9], rdi
mov qword [rbp + 0x1f], rdi
lea rax, [rbp + 0x1f]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.84081F6F_8B2D_4FFE_AF7F_E72D488FABEB
mov rcx, r15
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
xor ecx, ecx
test eax, eax
jne 0x14000d940
mov r12, qword [rbp + 0x1f]
mov qword [rbp - 0x19], r12
mov dword [rbp - 0x11], edi
lea rdx, str.Registering_server
call fcn.140003fe0
mov ebx, edi
mov rsi, qword [0x14006a950]
mov rax, qword [0x14006a958]
cmp rsi, rax
jae 0x14000d8ec
nop word [rax + rax]
mov r14, qword [rsi]
test r14, r14
je 0x14000d8df
mov rbx, qword [r14 + 8]
mov rcx, rbx
call qword [fcn.140014fd0]
mov ecx, 1
call rbx
mov ebx, eax
test eax, eax
js 0x14000d8fc
mov rbx, qword [r14 + 0x30]
mov rcx, rbx
call qword [fcn.140014fd0]
call rbx
mov rdx, rax
mov r8d, 1
mov rcx, qword [r14]
call fcn.140008e50
mov ebx, eax
test eax, eax
js 0x14000d8fc
mov rax, qword [0x14006a958]
add rsi, 8
cmp rsi, rax
jb 0x14000d890
test ebx, ebx
js 0x14000d928
xor edx, edx
mov rcx, qword [0x14006a948]
call fcn.1400093c0
mov ebx, eax
test ebx, ebx
js 0x14000d928
mov rsi, qword [0x14006a928]
test rsi, rsi
je 0x14000d920
mov rcx, rsi
call qword [fcn.140014fd0]
mov rcx, qword [0x14006b3b8]
call rsi
mov ebx, eax
test ebx, ebx
jns 0x14000daae
mov r8d, ebx
lea rdx, str.Failed_to_register_typelib__hr__0x_x
xor ecx, ecx
call fcn.140003fe0
mov edi, ebx
jmp 0x14000daae
lea rdx, str.Registry_update_needed
call fcn.140003fe0
mov ecx, 1
call fcn.14000db10
mov ebx, eax
test eax, eax
jns 0x14000d974
mov r8d, eax
lea rdx, str.Registry_update_Failed__returned_value:_0x_x
xor ecx, ecx
call fcn.140003fe0
mov edi, ebx
jmp 0x14000daae
test r15, r15
je 0x14000d985
mov rcx, r15
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov r15, rdi
mov dword [rbp + 7], edi
mov qword [rbp + 0x1f], rdi
lea rax, [rbp + 0x1f]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, str.AppID
mov rcx, 0xffffffff80000000
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000daa5
mov eax, edi
test r15, r15
je 0x14000d9ca
mov rcx, r15
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov r15, qword [rbp + 0x1f]
mov qword [rbp - 1], r15
mov dword [rbp + 7], edi
test eax, eax
jne 0x14000daa5
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, str.84081F6F_8B2D_4FFE_AF7F_E72D488FABEB
mov rdx, r15
lea rcx, [rbp - 0x19]
call fcn.140009970
test eax, eax
je 0x14000da1d
mov ecx, eax
call fcn.140008b60
mov r12, qword [rbp - 0x19]
jmp 0x14000daac
lea rdx, str.LocalService
mov r12, qword [rbp - 0x19]
mov rcx, r12
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteValueW]
lea r8, [rsi + 0x68]
test r8, r8
je 0x14000da75
or rax, 0xffffffffffffffff
nop
lea rax, [rax + 1]
cmp word [r8 + rax*2], 0
jne 0x14000da40
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r8
mov r9d, 1
xor r8d, r8d
lea rdx, str.LocalService
mov rcx, r12
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, r12
call fcn.14000c9f0
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.14000bd70
mov ebx, eax
test eax, eax
jns 0x14000dab2
mov r8d, eax
lea rdx, str.Register_Server_Failed__returned_value:_0x_x
xor ecx, ecx
call fcn.140003fe0
jmp 0x14000dab0
mov ecx, eax
call fcn.140008b60
mov edi, eax
mov ebx, edi
mov edi, ebx
test r12, r12
je 0x14000daca
mov rcx, r12
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x14000daca
mov dword [rsi + 0x27c], eax
mov edi, eax
test r15, r15
je 0x14000dad8
mov rcx, r15
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov eax, edi
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140013c00
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret