Function at 0x1401000a0
Capabilities:
Set registry value

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x140214ba0]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov r11, r9
mov r13, r8
mov r12, rdx
mov r14, rcx
mov qword [rsp + 0x50], rcx
xor esi, esi
mov qword [rsp + 0x68], rsi
mov rbx, qword [r9 + 0x10]
mov rdi, qword [r9 + 0x18]
cmp rdi, 8
jb 0x1401000eb
mov r9, qword [r9]
cmp rbx, 3
jne 0x140100134
mov rdx, rbx
lea rax, [0x1401e6d00]
movzx ecx, word [r9]
mov r8d, 0x53
cmp cx, r8w
jb 0x140100134
sub r9, rax
cmp cx, r8w
ja 0x140100134
cmp rdx, 1
je 0x1401002e0
dec rdx
add rax, 2
movzx ecx, word [r9 + rax]
movzx r8d, word [rax]
cmp cx, r8w
jae 0x140100112
mov r9, r11
cmp rdi, 8
jb 0x140100140
mov r9, qword [r11]
cmp rbx, 3
jne 0x140100189
mov rdx, rbx
lea rax, [0x1401ccff8]
movzx ecx, word [r9]
mov r8d, 0x4e
cmp cx, r8w
jb 0x140100189
sub r9, rax
cmp cx, r8w
ja 0x140100189
cmp rdx, 1
je 0x140100377
dec rdx
add rax, 2
movzx ecx, word [r9 + rax]
movzx r8d, word [rax]
cmp cx, r8w
jae 0x140100167
mov r10, r11
cmp rdi, 8
jb 0x140100195
mov r10, qword [r11]
mov r8d, 5
cmp rbx, r8
jne 0x1401001e3
mov edx, r8d
lea rax, str.DWORD
movzx ecx, word [r10]
mov r9d, 0x44
cmp cx, r9w
jb 0x1401001e3
sub r10, rax
cmp cx, r9w
ja 0x1401001e3
cmp rdx, 1
je 0x140100377
dec rdx
add rax, 2
movzx ecx, word [r10 + rax]
movzx r9d, word [rax]
cmp cx, r9w
jae 0x1401001c1
mov r9, r11
cmp rdi, 8
jb 0x1401001ef
mov r9, qword [r11]
cmp rbx, 5
jne 0x140100230
lea rax, str.QWORD
movzx ecx, word [r9]
mov edx, 0x51
cmp cx, dx
jb 0x140100230
sub r9, rax
cmp cx, dx
ja 0x140100230
cmp r8, 1
je 0x140100419
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x140100210
mov r9, r11
cmp rdi, 8
jb 0x14010023c
mov r9, qword [r11]
cmp rbx, 3
jne 0x140100285
mov rdx, rbx
lea rax, [0x1401cd070]
movzx ecx, word [r9]
mov r8d, 0x42
cmp cx, r8w
jb 0x140100285
sub r9, rax
cmp cx, r8w
ja 0x140100285
cmp rdx, 1
je 0x140100498
dec rdx
add rax, 2
movzx ecx, word [rax + r9]
movzx r8d, word [rax]
cmp cx, r8w
jae 0x140100263
cmp rdi, 8
jb 0x14010028e
mov r11, qword [r11]
mov qword [rsp + 0x28], r11
lea rax, str.Unknown_registry_key_type:__s
mov qword [rsp + 0x20], rax
mov r9d, 0x91
lea r8, str.NWebAdvisor::NXmlUpdater::SetRegistryKey
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterRegistryCommand.cpp
mov ecx, 1
call fcn.1400ebbc0
nop
xor al, al
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.14014f8e0
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov esi, 1
mov eax, dword [r14 + 0x10]
lea r15d, [rax*2 + 2]
mov edi, r15d
mov ecx, r15d
call fcn.14014ff50
mov rbx, rax
mov qword [rsp + 0x68], rax
cmp qword [r14 + 0x18], 8
jb 0x14010030e
mov r14, qword [r14]
test r15d, r15d
je 0x14010057b
test rbx, rbx
je 0x14010033b
mov r8, rdi
mov rcx, rbx
test r14, r14
je 0x140100334
mov rdx, r14
call fcn.140152550
jmp 0x14010057b
xor edx, edx
call fcn.140152110
call fcn.140156ec0
mov dword [rax], 0x16
call fcn.140156ae0
lea rax, str.memcpy_s_failed_in_NWebAdvisor::NXmlUpdater::SetRegistryKey
mov qword [rsp + 0x20], rax
mov r9d, 0x56
lea r8, str.NWebAdvisor::NXmlUpdater::SetRegistryKey
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterRegistryCommand.cpp
mov ecx, esi
call fcn.1400ebbc0
jmp 0x14010073a
call fcn.140156ec0
mov rbx, rax
cmp qword [r14 + 0x18], 8
jb 0x140100389
mov r14, qword [r14]
mov dword [rax], esi
mov r8d, 0xa
lea rdx, [rsp + 0x58]
mov rcx, r14
call fcn.140158470
mov edi, eax
cmp r14, qword [rsp + 0x58]
je 0x140100750
cmp dword [rbx], 0x22
je 0x14010075c
mov esi, 4
mov r15d, esi
mov ecx, esi
call fcn.14014ff50
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x14010040d
call fcn.140156ec0
mov dword [rax], 0x16
call fcn.140156ae0
lea r9d, [rsi + 0x67]
lea rax, str.memcpy_s_failed_in_NWebAdvisor::NXmlUpdater::SetRegistryKey
mov qword [rsp + 0x20], rax
lea r8, str.NWebAdvisor::NXmlUpdater::SetRegistryKey
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterRegistryCommand.cpp
mov ecx, 1
call fcn.1400ebbc0
jmp 0x1401002be
mov dword [rax], edi
jmp 0x14010057b
call fcn.140156ec0
mov rbx, rax
cmp qword [r14 + 0x18], 8
jb 0x14010042b
mov r14, qword [r14]
mov dword [rax], esi
mov r8d, 0xa
lea rdx, [rsp + 0x58]
mov rcx, r14
call fcn.1401584a0
mov rdi, rax
cmp r14, qword [rsp + 0x58]
je 0x140100769
cmp dword [rbx], 0x22
je 0x140100775
mov esi, 0xb
mov r15d, 8
mov ecx, r15d
call fcn.14014ff50
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x140100490
call fcn.140156ec0
mov dword [rax], 0x16
call fcn.140156ae0
lea r9d, [rsi + 0x75]
jmp 0x1401003e4
mov qword [rax], rdi
jmp 0x14010057b
mov rax, qword [r14 + 0x10]
inc rax
shr rax, 1
mov r15d, eax
mov ecx, eax
call fcn.14014ff50
mov rbx, rax
mov qword [rsp + 0x68], rax
mov r8, r14
cmp qword [r14 + 0x18], 8
jb 0x1401004c1
mov r8, qword [r14]
test r8, r8
je 0x140100700
mov r9, rsi
test r15d, r15d
je 0x140100576
nop word [rax + rax]
movzx edx, word [r8]
lea eax, [rdx - 0x30]
cmp ax, 9
ja 0x1401004f2
lea ecx, [rdx - 0x30]
jmp 0x14010050c
lea eax, [rdx - 0x61]
cmp ax, 5
ja 0x140100500
lea ecx, [rdx - 0x57]
jmp 0x14010050c
lea eax, [rdx - 0x41]
cmp ax, 5
ja 0x14010056d
lea ecx, [rdx - 0x37]
cmp cl, 0xff
je 0x14010056d
movzx edx, word [r8 + 2]
lea eax, [rdx - 0x30]
cmp ax, 9
ja 0x140100524
lea eax, [rdx - 0x30]
jmp 0x14010053e
lea eax, [rdx - 0x61]
cmp ax, 5
ja 0x140100532
lea eax, [rdx - 0x57]
jmp 0x14010053e
lea eax, [rdx - 0x41]
cmp ax, 5
ja 0x14010055b
lea eax, [rdx - 0x37]
cmp al, 0xff
je 0x14010055b
and al, 0xf
shl cl, 4
or al, cl
mov byte [r9 + rbx], al
add r8, 4
inc r9
cmp r9, r15
jae 0x140100576
jmp 0x1401004e0
test dx, dx
jne 0x140100700
shl cl, 4
mov byte [r9 + rbx], cl
jmp 0x140100576
test dx, dx
jne 0x140100700
mov esi, 3
xor r14d, r14d
mov qword [rsp + 0x60], r14
mov rdx, r12
cmp qword [r12 + 0x18], 8
jb 0x140100592
mov rdx, qword [r12]
movzx ecx, byte [rsp + 0xe0]
mov qword [rsp + 0x40], r14
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov eax, dword [rsp + 0xe8]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x140100632
cmp qword [r12 + 0x18], 8
jb 0x1401005e0
mov r12, qword [r12]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
lea rax, str.Error___d__creating_registry_key:__s
mov qword [rsp + 0x20], rax
mov r9d, 0x9b
lea r8, str.NWebAdvisor::NXmlUpdater::SetRegistryKey
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterRegistryCommand.cpp
mov ecx, 1
call fcn.1400ebbc0
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14010073a
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x60], r14
jmp 0x14010073a
cmp qword [r13 + 0x10], 0
jne 0x140100645
lea rdi, str._Default_
mov rdx, rdi
jmp 0x14010065a
mov rdx, r13
cmp qword [r13 + 0x18], 8
jb 0x140100653
mov rdx, qword [r13]
lea rdi, str._Default_
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rbx
mov r9d, esi
xor r8d, r8d
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x1401006d7
cmp qword [r12 + 0x18], 8
jb 0x140100685
mov r12, qword [r12]
cmp qword [r13 + 0x10], 0
je 0x14010069a
mov rdi, r13
cmp qword [r13 + 0x18], 8
jb 0x14010069a
mov rdi, qword [r13]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
lea rax, str.Error___d__setting_value___s__under_registry_key:__s
mov qword [rsp + 0x20], rax
mov r9d, 0xa3
lea r8, str.NWebAdvisor::NXmlUpdater::SetRegistryKey
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterRegistryCommand.cpp
mov ecx, 1
call fcn.1400ebbc0
jmp 0x140100614
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1401006ec
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x60], r14
test rbx, rbx
je 0x1401006f9
mov rcx, rbx
call fcn.14014f900
mov al, 1
jmp 0x1401002c0
cmp qword [r14 + 0x18], 8
jb 0x14010070a
mov r14, qword [r14]
mov qword [rsp + 0x28], r14
lea rax, str.Unable_to_convert__s_to_hex
mov qword [rsp + 0x20], rax
mov r9d, 0x8a
lea r8, str.NWebAdvisor::NXmlUpdater::SetRegistryKey
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterRegistryCommand.cpp
mov ecx, 1
call fcn.1400ebbc0
nop
test rbx, rbx
je 0x1401002be
mov rcx, rbx
call fcn.14014f900
jmp 0x1401002be
lea rcx, str.invalid_stoul_argument
call fcn.140128650
lea rcx, str.stoul_argument_out_of_range
call fcn.1401286b0
nop
lea rcx, str.invalid_stoull_argument
call fcn.140128650
lea rcx, str.stoull_argument_out_of_range
call fcn.1401286b0
int3