Function at 0x14008b7a0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x140467f78]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov rsi, rdx
mov r14, rcx
mov qword [rsp + 0x78], rcx
xor r12d, r12d
mov dword [rsp + 0x30], r12d
lea rax, vtable.SIConnectorBase.0
mov qword [rcx], rax
lea rax, vtable.SIConnectorL5.0
mov qword [rcx], rax
mov qword [rcx + 8], r12
test rdx, rdx
jne 0x14008b810
lea rdx, str.SIConnectorL5::SIConnectorL5_failed__NULL__pL4TransportEnumerator__n
lea ecx, [rsi + 1]
call fcn.140093500
jmp 0x14008c3c7
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
lea rdx, [0x1403f0cc0]
lea rcx, [rsp + 0x38]
call fcn.14008f3f0
mov dword [rsp + 0x30], 1
mov dword [rbp - 0x70], 0x80
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.Softwaredatronicsoft_spacedesk
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008b89a
mov r9d, eax
lea r8, str.Softwaredatronicsoft_spacedesk
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008b900
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, str.EncryptionPassword
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008b91d
lea r8, str.EncryptionPassword
mov ecx, 1
cmp eax, 2
jne 0x14008b8e7
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008b8f6
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.EncryptionPassword
lea rdx, str.SISettings::Layer4EncryptionPasswordGet_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
jmp 0x14008b9c0
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.EncryptionPassword
lea r8, str.Softwaredatronicsoft_spacedesk
mov ecx, 0x40
cmp dword [rbp - 0x68], 1
jne 0x14008b957
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008b963
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
lea rax, [rbp - 0x20]
mov rdx, 0xffffffffffffffff
nop
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14008b970
mov rax, qword [rsp + 0x50]
cmp rdx, rax
ja 0x14008b9b2
lea rdi, [rsp + 0x38]
cmp rax, 8
cmovae rdi, qword [rsp + 0x38]
mov qword [rsp + 0x48], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp - 0x20]
mov rcx, rdi
call fcn.1402ad790
mov word [rbx + rdi], r12w
jmp 0x14008b9c0
lea r9, [rbp - 0x20]
lea rcx, [rsp + 0x38]
call fcn.14008ff70
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r12w
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x58]
call fcn.14008d760
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14008ba43
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ba3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008c3f8
call fcn.1402ab340
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov eax, 1
and eax, 0xfffffffe
mov dword [rsp + 0x30], eax
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14008baa5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008baa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008c3fe
call fcn.1402ab340
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r12w
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.14008c5a0
nop
mov rax, qword [rsi]
mov r15, qword [rax + 0x20]
mov dword [rbp - 0x70], r12d
mov dword [rbp - 0x68], 4
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServices_spacedeskService
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008bb20
mov r9d, eax
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008bb86
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
xor r8d, r8d
lea rdx, str.EncryptionSslCountMaxPipelines
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008bba5
lea r8, str.EncryptionSslCountMaxPipelines
mov ecx, 1
cmp eax, 2
jne 0x14008bb6d
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008bb7c
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.EncryptionSslCountMaxPipelines
lea rdx, str.SISettings::Layer4EncryptionSslCountPipelinesGet_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
mov ebx, 1
jmp 0x14008bbee
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.EncryptionSslCountMaxPipelines
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
mov ecx, 0x40
cmp dword [rbp - 0x78], 1
jne 0x14008bbdf
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008bbeb
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
mov ebx, dword [rbp - 0x70]
lea rdi, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rdi, qword [rbp - 0x60]
mov dword [rbp - 0x70], r12d
mov dword [rbp - 0x78], 4
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServices_spacedeskService
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008bc4e
mov r9d, eax
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008bcb4
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, str.EncryptionSslEnable
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008bcd0
lea r8, str.EncryptionSslEnable
mov ecx, 1
cmp eax, 2
jne 0x14008bc9b
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008bcaa
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.EncryptionSslEnable
lea rdx, str.SISettings::Layer4EncryptionSslIsEnabled_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
xor edx, edx
jmp 0x14008bd27
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.EncryptionSslEnable
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
mov ecx, 0x40
cmp dword [rbp - 0x68], 1
jne 0x14008bd0a
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008bd16
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
mov eax, dword [rbp - 0x70]
test eax, eax
jne 0x14008bd21
xor edx, edx
jmp 0x14008bd27
cmp eax, 1
sete dl
mov dword [rsp + 0x20], ebx
lea r9, str.Client_identity
mov r8, rdi
mov rcx, rsi
call r15
mov ecx, 0x10
call fcn.1402ab348
mov rdi, rax
mov qword [rbp - 0x80], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rax, vtable.IspcdskCommLayer5Connector.0
mov qword [rdi], rax
lea rax, vtable.L5Connector.0
mov qword [rdi], rax
mov qword [rdi + 8], rsi
mov qword [r14 + 8], rdi
mov rax, qword [rdi]
mov rsi, qword [rax + 0x28]
mov dword [rbp - 0x70], r12d
mov dword [rbp - 0x78], 4
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServices_spacedeskService
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008bdc7
mov r9d, eax
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008be2d
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, str.NetApplicationLayerFlowControlTimeoutInMs
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008be4c
lea r8, str.NetApplicationLayerFlowControlTimeoutInMs
mov ecx, 1
cmp eax, 2
jne 0x14008be14
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008be23
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.NetApplicationLayerFlowControlTimeoutInMs
lea rdx, str.SISettings::Layer5FlowControlTimeoutMsGet_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
mov ebx, 0xbb8
jmp 0x14008be95
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.NetApplicationLayerFlowControlTimeoutInMs
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
mov ecx, 0x40
cmp dword [rbp - 0x68], 1
jne 0x14008be86
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008be92
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
mov ebx, dword [rbp - 0x70]
mov dword [rbp - 0x70], r12d
mov dword [rbp - 0x78], 4
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServices_spacedeskService
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008bee7
mov r9d, eax
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008bf4d
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, str.NetApplicationLayerFlowControlTransmitWindowsSize
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008bf6c
lea r8, str.NetApplicationLayerFlowControlTransmitWindowsSize
mov ecx, 1
cmp eax, 2
jne 0x14008bf34
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008bf43
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.EncryptionSslCountMaxPipelines
lea rdx, str.SISettings::Layer5FlowControlTransmitWindowSizeGet_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
mov edx, 2
jmp 0x14008bfb5
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.NetApplicationLayerFlowControlTransmitWindowsSize
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
mov ecx, 0x40
cmp dword [rbp - 0x68], 1
jne 0x14008bfa6
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008bfb2
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
mov edx, dword [rbp - 0x70]
mov r8d, ebx
mov rcx, rdi
call rsi
mov rsi, qword [r14 + 8]
mov rax, qword [rsi]
mov r15, qword [rax + 0x30]
mov dword [rbp - 0x70], r12d
mov dword [rbp - 0x78], 4
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServices_spacedeskService
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008c01a
mov r9d, eax
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008c080
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, str.DisconnectTimeoutMs
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008c09f
lea r8, str.DisconnectTimeoutMs
mov ecx, 1
cmp eax, 2
jne 0x14008c067
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008c076
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.DisconnectTimeoutMs
lea rdx, str.SISettings::Layer5DisconnectTimeoutMsGet_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
mov edi, 0xafc8
jmp 0x14008c0e8
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.DisconnectTimeoutMs
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
mov ecx, 0x40
cmp dword [rbp - 0x68], 1
jne 0x14008c0d9
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008c0e5
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
mov edi, dword [rbp - 0x70]
mov dword [rbp - 0x70], r12d
mov dword [rbp - 0x78], 4
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServices_spacedeskService
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008c13a
mov r9d, eax
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008c1a0
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, str.PingEchoReplyCheckIntervalInMs
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008c1bf
lea r8, str.PingEchoReplyCheckIntervalInMs
mov ecx, 1
cmp eax, 2
jne 0x14008c187
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008c196
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.PingEchoReplyCheckIntervalInMs
lea rdx, str.SISettings::Layer5PingEchoReplyCheckIntervalMsGet_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
mov ebx, 0x3a98
jmp 0x14008c208
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.PingEchoReplyCheckIntervalInMs
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
mov ecx, 0x40
cmp dword [rbp - 0x68], 1
jne 0x14008c1f9
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008c205
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
mov ebx, dword [rbp - 0x70]
mov dword [rbp - 0x70], r12d
mov dword [rbp - 0x78], 4
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServices_spacedeskService
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14008c25a
mov r9d, eax
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
lea rdx, str.SIUtilRegistryValueGet_RegOpenKeyEx_failed___s__d_n
mov ecx, 1
call fcn.140093500
jmp 0x14008c2c0
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, str.PingEchoRequestIntervalInMs
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x14008c2df
lea r8, str.PingEchoRequestIntervalInMs
mov ecx, 1
cmp eax, 2
jne 0x14008c2a7
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s_ERROR_FILE_NOT_FOUND_n
call fcn.140093500
jmp 0x14008c2b6
mov r9d, eax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW_failed___s__d_n
call fcn.140093500
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r8, str.PingEchoRequestIntervalInMs
lea rdx, str.SISettings::Layer5PingEchoRequestIntervalMsGet_failed__SIUtilRegistryValueGet__s_n
mov ecx, 0x20
call fcn.140093500
mov edx, 0x2710
jmp 0x14008c328
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.PingEchoRequestIntervalInMs
lea r8, str.SYSTEMCurrentControlSetServices_spacedeskService
mov ecx, 0x40
cmp dword [rbp - 0x68], 1
jne 0x14008c319
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_Data:__s_n
call fcn.140093500
jmp 0x14008c325
lea rdx, str.SIUtilRegistryValueGet_RegQueryValueExW__s__s_n
call fcn.140093500
mov edx, dword [rbp - 0x70]
mov r9d, edi
mov r8d, ebx
mov rcx, rsi
call r15
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14008c370
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c36b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008c404
call fcn.1402ab340
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14008c3b7
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c3b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008c3f2
call fcn.1402ab340
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rax, r14
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1402ab320
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1402b2324
nop
call fcn.1402b2324
nop
call fcn.1402b2324
int3
call fcn.1402b2324
int3