Function at 0x140114d70
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x107a0]
mov eax, 0x108a0
call fcn.1401e33b0
sub rsp, rax
mov rax, qword [0x1402a76c0]
xor rax, rsp
mov qword [rbp + 0x10790], rax
mov rdi, rdx
mov qword [rbp], rdx
mov rbx, rcx
lea rdx, str.CBaseInfoAddIn::RestoreAddInRegs
lea rcx, [rbp + 0x120]
call fcn.14001abe0
nop
lea rsi, [0x1402a8360]
lea r12, [0x1402bbdb0]
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x140114e4b
test byte [rcx + 0x1c], 1
je 0x140114e13
mov r9, r12
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, MsiOpenDatabaseW
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140001ad0
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x140114e4b
test byte [rcx + 0x1c], 1
je 0x140114e4b
mov r9, r12
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, MsiOpenDatabaseW
mov qword [rsp + 0x20], rdi
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.14001b1a0
xor r13d, r13d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
lfence
mov ecx, 0xa8
call fcn.1401baa78
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r13
test rdi, rdi
jne 0x140114ea7
mov r13d, 0x80010001
mov dword [0x1402bbd98], 1
mov r15, qword [rsp + 0x50]
jmp 0x140115d5e
mov rax, qword [rbx]
lea rdx, [rsp + 0x70]
mov rcx, rbx
mov rax, qword [rax + 0x40]
call qword [case.0x1400136d6.0]
test eax, eax
je 0x140115d27
lea rcx, [rbp - 0x60]
call fcn.14009ffa0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], 0
jne 0x140114ee4
mov rdx, rdi
lea rcx, [rbp + 0x28]
call fcn.140005520
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov rbx, qword [rax + 8]
mov qword [rsp + 0x40], rbx
mov r11, rbx
mov rdi, rax
mov qword [rsp + 0x60], rax
mov r15, qword [rbp + 0x40]
mov r12, qword [rbp + 0x38]
mov r14, qword [rbp + 0x28]
cmp byte [rbx + 0x19], 0
jne 0x140114fcb
cmp r15, 8
setae r13b
mov rbx, rax
nop word [rax + rax]
lea rdi, [r11 + 0x20]
lea r8, [rbp + 0x28]
cmp r15, 8
cmovae r8, r14
mov rcx, rdi
mov rsi, qword [rdi + 0x18]
cmp rsi, 8
jb 0x140114f60
mov rcx, qword [rdi]
mov rdx, qword [rdi + 0x10]
mov r9, r12
call fcn.140006570
shr eax, 0x1f
test al, al
je 0x140114f79
mov r11, qword [r11 + 0x10]
jmp 0x140114fb2
cmp byte [rbx + 0x19], 0
je 0x140114faa
cmp rsi, 8
jb 0x140114f88
mov rdi, qword [rdi]
lea rcx, [rbp + 0x28]
test r13b, r13b
cmovne rcx, r14
mov r9, rdx
mov r8, rdi
mov rdx, r12
call fcn.140006570
shr eax, 0x1f
test al, al
cmovne rbx, r11
mov qword [rsp + 0x38], r11
mov r11, qword [r11]
cmp byte [r11 + 0x19], 0
je 0x140114f40
mov qword [rsp + 0x60], rbx
mov rbx, qword [rsp + 0x40]
xor r13d, r13d
mov rdi, qword [rsp + 0x60]
cmp byte [rdi + 0x19], 0
jne 0x140114fd4
mov rbx, qword [rdi]
cmp byte [rbx + 0x19], 0
jne 0x140115025
nop word [rax + rax]
lea r8, [rbx + 0x20]
cmp qword [rbx + 0x38], 8
jb 0x140114fef
mov r8, qword [rbx + 0x20]
lea rcx, [rbp + 0x28]
cmp r15, 8
cmovae rcx, r14
mov r9, qword [rbx + 0x30]
mov rdx, r12
call fcn.140006570
shr eax, 0x1f
test al, al
je 0x140115016
mov rdi, rbx
mov rbx, qword [rbx]
jmp 0x14011501a
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x19], 0
je 0x140114fe0
mov qword [rsp + 0x60], rdi
cmp r15, 8
jb 0x14011503b
lea r8, [r15 + 1]
mov rdx, r14
lea rcx, [rbp + 0x28]
call fcn.140004cc0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
mov r12, qword [rsp + 0x38]
mov r15, qword [rsp + 0x50]
cmp r12, rdi
je 0x140115d0e
lea r14, vtable.CMap_class_ATL::CStringT_unsigned_short_int__class_StrTraitMFC_unsigned_short_int__class_ATL::ChTraitsCRT_unsigned_short_int_____unsigned_short_int_const____ptr64__unsigned_char____ptr64__unsigned_char____ptr64_.0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], r13w
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r13w
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r13
mov qword [rbp + 0x110], 7
mov word [rbp + 0xf8], r13w
lea rbx, [r12 + 0x40]
lea rax, [rbp + 0xb0]
cmp rax, rbx
je 0x1401150fa
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x1401150ea
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp + 0xb0]
call fcn.140004b70
lea r8, [rbx + 0x20]
lea rax, [rbp + 0xd0]
cmp rax, r8
je 0x140115127
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x140115117
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0xd0]
call fcn.140004b70
mov esi, dword [rbx + 0x40]
mov dword [rbp + 0xf0], esi
mov eax, dword [rbx + 0x44]
mov dword [rbp + 0xf4], eax
lea r8, [rbx + 0x48]
lea rax, [rbp + 0xf8]
cmp rax, r8
je 0x14011516c
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x140115156
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0xf8]
call fcn.140004b70
mov esi, dword [rbp + 0xf0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], r13w
movdqu xmmword [rbp - 0x80], xmm0
mov rdi, r13
mov qword [rbp - 0x70], r13
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 8
cmovae rdx, qword [rbp + 0xf8]
mov r8, qword [rbp + 0x108]
lea rcx, [rbp + 0x88]
call fcn.140004b70
cmp esi, 1
jne 0x140115bbf
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae rdx, qword [rbp + 0x88]
lea r9d, [rsi + 0x2b]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1400a1ec0
mov rcx, qword [0x1402a8360]
lea rsi, [0x1402a8360]
cmp rcx, rsi
je 0x140115248
test byte [rcx + 0x1c], 4
je 0x140115248
lea r9, [0x1402bbdb0]
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, MsiOpenDatabaseW
lea rax, [rbp + 0x170]
mov qword [rsp + 0x20], rax
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
mov rcx, qword [0x1402bbf58]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
mov rcx, rax
mov rax, qword [rax]
lea r8, [rbp + 0x170]
mov edx, 1
mov rax, qword [rax + 0x150]
call qword [case.0x1400136d6.0]
lea rcx, [rbp + 0x170]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
mov rdx, qword [rbp]
lea rcx, [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x1401152e3
test byte [rcx + 0x1c], 4
je 0x1401152e3
lea r9, [0x1402bbdb0]
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, MsiOpenDatabaseW
lea rax, [rbp + 0x170]
mov qword [rsp + 0x20], rax
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x38], reloc.COMCTL32.dll_InitCommonControls
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x14026f400]
movdqa xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
lfence
mov ecx, 0x48
call fcn.1401baa78
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x10], rax
mov qword [rbp - 0x50], r13
mov rcx, qword [rbp - 0x30]
mov rax, rcx
neg rax
sbb rdi, rdi
test rcx, rcx
je 0x140115495
nop dword [rax + rax]
call fcn.1401bb0c4
mov rcx, rax
test rax, rax
je 0x140115f49
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x68], rbx
mov r9, qword [rbp - 0x40]
test r9, r9
je 0x140115f43
mov rsi, rdi
test rdi, rdi
je 0x140115f43
mov r8d, dword [rbp - 0x38]
cmp rdi, 0xffffffffffffffff
jne 0x1401153bd
mov ecx, r13d
test r8d, r8d
je 0x1401153bd
mov eax, ecx
mov rsi, qword [r9 + rax*8]
test rsi, rsi
jne 0x1401153bd
inc ecx
cmp ecx, r8d
jb 0x1401153a2
test rsi, rsi
je 0x140115f43
mov rdi, qword [rsi + 0x10]
test rdi, rdi
jne 0x1401153e5
xor edx, edx
mov eax, dword [rsi + 0x18]
div r8d
inc edx
cmp edx, r8d
jae 0x1401153e5
mov rdi, qword [r9 + rdx*8]
test rdi, rdi
jne 0x1401153e5
inc edx
cmp edx, r8d
jb 0x1401153d5
mov rdx, qword [rsi]
lea rcx, [rdx - 0x18]
lea r14, [rbx - 0x18]
cmp rcx, r14
je 0x140115450
cmp dword [r14 + 0x10], 0
jl 0x14011543d
mov rax, qword [r14]
cmp qword [rcx], rax
jne 0x14011543d
call fcn.140004d00
mov rbx, rax
mov eax, 0xffffffff
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x140115432
lfence
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
add rbx, 0x18
mov qword [rsp + 0x68], rbx
jmp 0x140115450
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x68]
call fcn.140004e60
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14011545f
call fcn.1400079c0
nop
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140115485
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
test rdi, rdi
jne 0x140115350
lea rsi, [0x1402a8360]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140115508
mov edi, r13d
mov edx, dword [rbp - 0x38]
test edx, edx
je 0x1401154ff
nop dword [rax + rax]
mov eax, edi
mov rbx, qword [rcx + rax*8]
test rbx, rbx
je 0x1401154f9
nop dword [rax + rax]
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401154e9
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1401154c0
mov edx, dword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
inc edi
cmp edi, edx
jb 0x1401154b0
call fcn.1400079c0
mov qword [rbp - 0x40], r13
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov rcx, qword [rbp - 0x20]
call fcn.1401bc020
mov qword [rbp - 0x20], r13
mov rbx, qword [rbp - 0x10]
mov r8, qword [rbx + 8]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x10]
call fcn.140008f00
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [rbp - 8], r13
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rbp + 0x170]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov r14, qword [rbp - 0x80]
mov qword [rsp + 0x40], r14
test eax, eax
jne 0x140115b61
mov dword [rsp + 0x34], 0x10000
mov qword [rbp - 0x68], r13
lea r9, [rsp + 0x34]
lea r8, [rbp - 0x68]
lea rdx, str.Dependent_Files
lea rcx, [rbp - 0x50]
call fcn.140007cf0
mov r12d, dword [rsp + 0x34]
mov dword [rsp + 0x30], r12d
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x1401155ea
test byte [rcx + 0x1c], 4
je 0x1401155ea
lea r9, [0x1402bbdb0]
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, reloc.msi.dll_MsiOpenDatabaseW
mov dword [rsp + 0x20], r12d
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140001b40
mov r15, qword [rsp + 0x50]
test r12d, r12d
je 0x14011575e
mov rbx, qword [rbp - 0x68]
mov edi, r13d
cmp word [rbx], 0
je 0x140115750
nop dword [rax]
cmp edi, r12d
jae 0x140115750
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], r13
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rbx + r8*2], 0
jne 0x140115630
mov rdx, rbx
lea rcx, [rbp + 0x48]
call fcn.140005520
nop
cmp r15, qword [rsp + 0x58]
je 0x140115679
movups xmm0, xmmword [rbp + 0x48]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rbp + 0x58]
movups xmmword [r15 + 0x10], xmm1
mov qword [rbp + 0x58], r13
mov edx, 7
mov word [rbp + 0x48], r13w
add r15, 0x20
mov qword [rsp + 0x50], r15
jmp 0x140115693
lea r8, [rbp + 0x48]
mov rdx, r15
lea rcx, [rsp + 0x48]
call fcn.140005b80
mov r15, qword [rsp + 0x50]
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x1401156cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401156ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140115f60
call fcn.1400079c0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], r13w
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x140115723
test byte [rcx + 0x1c], 4
je 0x140115723
lea r9, [0x1402bbdb0]
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, 0x59
mov qword [rsp + 0x20], rbx
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
lea rbx, [rbx + rcx*2]
add rbx, 2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [rdi + rax*2]
add edi, 2
cmp word [rbx], 0
jne 0x140115610
add r12d, 0xfffffffe
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x34], r12d
mov edi, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov r14, r13
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r13w
mov rax, qword [rbp - 0x78]
mov rcx, qword [rsp + 0x40]
cmp rcx, rax
je 0x1401157d4
mov rbx, rcx
mov esi, r13d
lea rcx, [rbp + 8]
cmp rcx, rbx
je 0x1401157ba
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x1401157a6
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp + 8]
call fcn.140004b70
mov esi, dword [rbp + 0x18]
mov rax, qword [rbp - 0x78]
lea edi, [rdi + rsi*2]
add edi, 2
add rbx, 0x20
cmp rbx, rax
jne 0x140115790
mov r14, qword [rbp + 0x18]
mov rcx, qword [rsp + 0x40]
jmp 0x1401157d7
mov rsi, r13
add edi, 2
cmp edi, 0x10000
jae 0x1401159cd
cmp rcx, rax
je 0x1401159a8
mov rdi, rcx
lea rax, [rbp + 8]
cmp rax, rdi
je 0x14011581c
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140115808
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp + 8]
call fcn.140004b70
mov r14, qword [rbp + 0x18]
mov esi, r14d
lea r12d, [rsi + rsi]
mov rbx, qword [rsp + 0x48]
cmp rbx, r15
je 0x140115aab
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov rcx, r13
mov qword [rbp + 0x78], rcx
mov r10d, 7
mov qword [rbp + 0x80], r10
mov word [rbp + 0x68], r13w
lea rax, [rbp + 0x68]
cmp rax, rbx
je 0x140115882
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140115866
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp + 0x68]
call fcn.140004b70
mov r14, qword [rbp + 0x18]
mov r10, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x78]
lea rax, [rbp + 0x68]
cmp r10, 8
setae r11b
mov r9, qword [rbp + 0x68]
cmovae rax, r9
lea r8, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae r8, qword [rbp + 8]
cmp r14, rcx
jne 0x140115a5b
mov rdx, r14
test r14, r14
je 0x1401158d8
sub r8, rax
nop dword [rax + rax]
movzx ecx, word [rax]
cmp word [rax + r8], cx
jne 0x140115a5b
add rax, 2
sub rdx, 1
jne 0x1401158c0
test r11b, r11b
je 0x140115916
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14011590a
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140115f54
mov rcx, r9
call fcn.1400079c0
mov r14, qword [rbp + 0x18]
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], 7
mov word [rbp + 0x68], r13w
mov esi, r14d
cmp rbx, r15
je 0x140115aab
mov rcx, qword [0x1402a8360]
lea rax, [0x1402a8360]
cmp rcx, rax
je 0x140115995
test byte [rcx + 0x1c], 4
je 0x140115995
lea r9, [0x1402bbdb0]
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rax, qword [rbp + 8]
mov edx, 0x5a
mov qword [rsp + 0x20], rax
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
mov r14, qword [rbp + 0x18]
mov esi, r14d
mov r12d, dword [rsp + 0x30]
add rdi, 0x20
cmp rdi, qword [rbp - 0x78]
jne 0x1401157f2
mov eax, r12d
and rax, 0xfffffffffffffffe
cmp rax, 0x10000
jae 0x140115f5a
mov word [rbp + rax + 0x790], r13w
add r12d, 2
mov dword [rsp + 0x34], r12d
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x1401159fb
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x790]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Dependent_Files
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x140115a3b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140115a36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140115f60
call fcn.1400079c0
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r13w
mov r14, qword [rsp + 0x40]
mov r12, qword [rsp + 0x38]
jmp 0x140115bb0
test r11b, r11b
je 0x140115a99
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x140115a8d
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140115f54
mov rcx, r9
call fcn.1400079c0
mov r14, qword [rbp + 0x18]
add rbx, 0x20
cmp rbx, r15
je 0x14011592a
jmp 0x140115830
mov rcx, qword [0x1402a8360]
lea rax, [0x1402a8360]
cmp rcx, rax
je 0x140115b0a
test byte [rcx + 0x1c], 4
je 0x140115b0a
lea r9, [0x1402bbdb0]
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rax, qword [rbp + 8]
mov edx, 0x5b
mov qword [rsp + 0x20], rax
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
mov r14, qword [rbp + 0x18]
mov esi, r14d
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rdx, qword [rbp + 8]
mov r8d, r12d
mov ebx, dword [rsp + 0x30]
mov eax, ebx
shr rax, 1
lea rcx, [rbp + 0x790]
lea rcx, [rcx + rax*2]
call fcn.1401e7770
lea ecx, [r12 + rbx]
mov eax, ecx
and rax, 0xfffffffffffffffe
cmp rax, 0x10000
jae 0x140115f5a
mov word [rbp + rax + 0x790], r13w
lea r12d, [rcx + 2]
mov dword [rsp + 0x30], r12d
jmp 0x14011599a
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x140115bab
test byte [rcx + 0x1c], 4
je 0x140115bab
lea r9, [0x1402bbdb0]
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, 0x5c
lea rax, [rbp + 0x170]
mov qword [rsp + 0x20], rax
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
mov r15, qword [rsp + 0x50]
lea rcx, [rbp - 0x50]
call fcn.140007a90
mov rdi, qword [rbp - 0x70]
jmp 0x140115bc3
mov r14, qword [rbp - 0x80]
test r14, r14
je 0x140115c1d
mov rbx, r14
mov rsi, qword [rbp - 0x78]
cmp r14, rsi
je 0x140115be5
mov rcx, rbx
call fcn.1400048a0
add rbx, 0x20
cmp rbx, rsi
jne 0x140115bd4
sub rdi, r14
and rdi, 0xffffffffffffffe0
mov rax, r14
cmp rdi, 0x1000
jb 0x140115c11
add rdi, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140115f66
mov rdx, rdi
mov rcx, r14
call fcn.1400079c0
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x140115c63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140115c5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140115f6c
call fcn.1400079c0
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], r13w
lea rcx, [rbp + 0xf8]
call fcn.1400048a0
lea rcx, [rbp + 0xd0]
call fcn.1400048a0
lea rcx, [rbp + 0xb0]
call fcn.1400048a0
mov rax, qword [r12 + 0x10]
cmp byte [rax + 0x19], 0
je 0x140115cdc
mov rax, qword [r12 + 8]
cmp byte [rax + 0x19], 0
jne 0x140115cca
cmp r12, qword [rax + 0x10]
jne 0x140115cca
mov r12, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140115cb7
mov r12, rax
mov qword [rsp + 0x38], rax
cmp rax, qword [rsp + 0x60]
jmp 0x140115059
mov r12, rax
mov qword [rsp + 0x38], rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140115d04
nop dword [rax]
mov r12, rcx
mov qword [rsp + 0x38], rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140115cf0
cmp r12, qword [rsp + 0x60]
jmp 0x140115059
lea rcx, [rbp - 0x60]
call fcn.1400a0110
lea r12, [0x1402bbdb0]
lea rsi, [0x1402a8360]
jmp 0x140115d2c
mov r15, qword [rsp + 0x50]
mov rcx, qword [0x1402bbf50]
mov rax, qword [rcx]
mov rax, qword [rax + 0x48]
call qword [case.0x1400136d6.0]
mov rcx, rax
mov rax, qword [rax]
lea r8, [0x140252f48]
lea rdx, str.ADDIN_INSTALLED
mov rax, qword [rax + 0x20]
call qword [case.0x1400136d6.0]
mov byte [rbp + 0x128], 1
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x140115da5
test byte [rcx + 0x1c], 1
je 0x140115da5
mov r9, r12
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, 0x5d
mov dword [rsp + 0x20], r13d
lea r8, [0x1402608d8]
mov rcx, qword [rcx + 0x10]
call fcn.140001b40
nop
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x140115e04
cmp rbx, r15
je 0x140115dc5
mov rcx, rbx
call fcn.1400048a0
add rbx, 0x20
cmp rbx, r15
jne 0x140115db4
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x48]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140115dfb
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140115f3d
mov rcx, rbx
call fcn.1400079c0
nop
mov rax, qword [rsp + 0x70]
mov r14, qword [rax + 8]
cmp byte [r14 + 0x19], 0
jne 0x140115e7b
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [r14 + 0x10]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x70]
call fcn.1400f7100
mov rsi, r14
mov r14, qword [r14]
lea rcx, [rsi + 0x88]
call fcn.1400048a0
lea rcx, [rsi + 0x60]
call fcn.1400048a0
lea rcx, [rsi + 0x40]
call fcn.1400048a0
lea rcx, [rsi + 0x20]
call fcn.1400048a0
mov edx, 0xa8
mov rcx, rsi
call fcn.1400079c0
cmp byte [r14 + 0x19], 0
je 0x140115e20
lea rsi, [0x1402a8360]
mov edx, 0xa8
mov rcx, qword [rsp + 0x70]
call fcn.1400079c0
nop
lea rax, vtable.WppTrace.0
mov qword [rbp + 0x120], rax
cmp byte [rbp + 0x128], 0
jne 0x140115ef8
mov rcx, qword [0x1402a8360]
cmp rcx, rsi
je 0x140115ef8
test byte [rcx + 0x1c], 1
je 0x140115ef8
lea r8, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae r8, qword [rbp + 0x130]
cmp qword [0x1402bbdc8], 8
cmovae r12, qword [0x1402bbdb0]
mov edx, 0xa
mov qword [rsp + 0x20], r8
mov r9, r12
lea r8, [0x140252818]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
lea rcx, [rbp + 0x150]
call fcn.1400048a0
lea rcx, [rbp + 0x130]
call fcn.1400048a0
mov eax, r13d
mov rcx, qword [rbp + 0x10790]
xor rcx, rsp
call fcn.1401e2900
mov rbx, qword [rsp + 0x108f0]
add rsp, 0x108a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401ec41c
nop
call fcn.1401bb848
nop
mov ecx, 0x80004005
call fcn.140001470
nop
call fcn.1401ec41c
int3
call fcn.1401e3084
nop
call fcn.1401ec41c
nop
call fcn.1401ec41c
nop
call fcn.1401ec41c
int3