Function at 0x140090cc0
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x14033e810]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov r13, rcx
xor esi, esi
mov dword [rsp + 0x30], esi
movups xmm0, xmmword [str.REGISTRYHKEY_CURRENT_USER_]
movaps xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x1402f6b58]
movaps xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [0x1402f6b68]
movaps xmmword [rbp + 0x50], xmm0
movsd xmm1, qword [0x1402f6b78]
movsd qword [rbp + 0x60], xmm1
xor edx, edx
mov r8d, 0x3c8
lea rcx, [rbp + 0x68]
call fcn.140241ba0
lea rcx, [rbp - 0x40]
call fcn.14001fb40
nop
cmp dword [r13 + 0x360], esi
jne 0x140090d67
lea r8, [0x1402e82f0]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x30]
call fcn.140057530
lea rcx, [rbp - 0x80]
call fcn.1400a64e0
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x1400915a0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x30]
mov r14, 0xffffffffffffffff
cmp rax, 0x10000
jae 0x140090db7
lea rax, [rbp + 0x30]
movzx edx, ax
lea rcx, [rsp + 0x38]
call fcn.14000d610
jmp 0x140090ddc
lea rcx, [rbp + 0x30]
mov rax, r14
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140090dc0
mov r8d, eax
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.14000df90
nop
mov rbx, qword [rsp + 0x38]
lea r12, [rbx - 0x18]
mov rcx, qword [r12]
test rcx, rcx
je 0x140090dfc
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140090e0e
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400915ab
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 1
lea r9, str.SoftwareClasses
mov rax, r14
nop dword [rax + rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x140090e40
mov dword [rsp + 0x20], eax
mov r8d, dword [r12 + 8]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.1400220f0
lea r8, [rsp + 0x40]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400a67e0
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140090e97
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [r12]
test rcx, rcx
je 0x140090eae
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140090ec0
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400915b6
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x30], 2
lea r9, str.SoftwareClassesExtensions
mov rax, r14
nop word [rax + rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x140090ef0
mov dword [rsp + 0x20], eax
mov r8d, dword [r12 + 8]
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x48]
call fcn.1400220f0
lea r8, [rsp + 0x48]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400a67e0
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140090f49
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [r12]
test rcx, rcx
je 0x140090f60
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140090f72
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400915c1
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 4
lea r9, str.SoftwareClassesLocal_SettingsMrtCache
mov rax, r14
nop dword [rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x140090fa0
mov dword [rsp + 0x20], eax
mov r8d, dword [r12 + 8]
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.1400220f0
lea r8, [rsp + 0x50]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400a67e0
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140090ff9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [r12]
test rcx, rcx
je 0x140091010
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140091022
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400915cc
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x30], 8
lea r9, str.SoftwareMicrosoftTracingWPPMediaPerApp
mov rax, r14
nop dword [rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x140091050
mov dword [rsp + 0x20], eax
mov r8d, dword [r12 + 8]
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x58]
call fcn.1400220f0
lea r8, [rsp + 0x58]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400a67e0
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400910a9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [r12]
test rcx, rcx
je 0x1400910c0
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x1400910d2
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400915d7
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x30], FDICreate
lea r9, str.SOFTWAREClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppModel
mov rax, r14
nop dword [rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x140091100
mov dword [rsp + 0x20], eax
mov r8d, dword [r12 + 8]
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.1400220f0
lea r8, [rsp + 0x60]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400a67e0
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140091159
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [r12]
test rcx, rcx
je 0x140091170
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140091182
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400915e2
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x30], 0x20
lea r9, str.SOFTWAREClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppContainer
mov rax, r14
nop dword [rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x1400911b0
mov dword [rsp + 0x20], eax
mov r8d, dword [r12 + 8]
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x68]
call fcn.1400220f0
lea r8, [rsp + 0x68]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400a67e0
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140091209
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [r12]
test rcx, rcx
je 0x140091220
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140091232
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x1400915ed
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x30], 0x40
lea r9, str.REGISTRYHKEY_LOCAL_MACHINESOFTWAREClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppModel
mov rax, r14
nop dword [rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x140091260
mov dword [rsp + 0x20], eax
mov r8d, dword [r12 + 8]
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x70]
call fcn.1400220f0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400a67e0
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400912b5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x70]
movsxd rdi, eax
mov qword [rbp - 0x58], rdi
test eax, eax
jle 0x14009153c
mov r15, rsi
nop dword [rax + rax]
test r15, r15
js 0x14009159a
cmp r15, rax
jge 0x14009159a
mov rax, qword [rbp - 0x78]
mov rcx, qword [rax + r15*8]
sub rcx, 0x18
call fcn.14000de80
lea rbx, [rax + 0x18]
mov qword [rbp - 0x50], rbx
mov rdx, rbx
mov rcx, qword [r13 + 0x3f0]
call fcn.1400554e0
mov rcx, rax
test rax, rax
je 0x14009148c
test r15, r15
jne 0x1400914c8
mov rdi, qword [rax + 8]
test rdi, rdi
je 0x140091488
nop dword [rax]
mov rsi, qword [rdi + 0x10]
mov rbx, qword [rdi]
call fcn.1400a2364
nop
test rax, rax
je 0x1400915f8
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
test rbx, rbx
je 0x14009138c
cmp rbx, 0x10000
jae 0x140091375
movzx edx, bx
lea rcx, [rsp + 0x78]
call fcn.14000d610
jmp 0x14009139f
mov rax, r14
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140091380
jmp 0x14009138e
xor eax, eax
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.14000df90
nop
mov rbx, qword [rsp + 0x78]
mov rcx, r14
lea rdx, str.Applications
nop
movzx eax, word [rbx + rcx*2 + 2]
cmp ax, word [rdx + rcx*2 + 2]
jne 0x1400913d0
add rcx, 2
cmp rcx, 0xd
je 0x140091433
movzx eax, word [rbx + rcx*2]
cmp ax, word [rdx + rcx*2]
je 0x1400913b0
sbb eax, eax
or eax, 1
test eax, eax
je 0x14009145e
cmp dword [rbx - 0x10], 0
jl 0x14009145e
lea rdx, [0x1402f9bc8]
mov rcx, rbx
call fcn.14024112c
test rax, rax
je 0x14009145e
sub rax, rbx
sar rax, 1
test eax, eax
jne 0x14009145e
mov r9, qword [r13 + 0x3f0]
mov rdx, qword [rdi + 0x18]
mov rdx, qword [rdx + 8]
cmp rdx, rdi
jne 0x140091437
mov r8, qword [rdx + 0x18]
mov rax, qword [rdx + 0x10]
mov qword [r8 + 8], rax
mov qword [rdx + 0x10], 0
mov rcx, r9
call fcn.140054eb0
jmp 0x14009145e
xor eax, eax
jmp 0x1400913d5
test rdx, rdx
je 0x140091451
nop dword [rax]
lea rcx, [rdx]
mov rdx, qword [rdx + 0x10]
cmp rdx, rdi
je 0x1400914bb
test rdx, rdx
jne 0x140091440
lea rcx, str.ERROR_RU_0x00000005
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, rsi
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14009147b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test rsi, rsi
jne 0x140091330
mov rbx, qword [rbp - 0x50]
mov rdi, qword [rbp - 0x58]
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400914a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r15
cmp r15, rdi
jge 0x14009153c
mov rax, qword [rbp - 0x70]
jmp 0x1400912d0
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
jmp 0x140091421
mov r9, qword [r13 + 0x3f0]
mov rax, qword [rax + 0x18]
mov rdx, qword [rax + 8]
cmp rdx, rcx
jne 0x1400914f6
mov r8, qword [rdx + 0x18]
mov rax, qword [rdx + 0x10]
mov qword [r8 + 8], rax
mov qword [rdx + 0x10], rsi
mov rcx, r9
call fcn.140054eb0
jmp 0x14009148c
test rdx, rdx
je 0x140091511
nop dword [rax + rax]
lea r8, [rdx]
mov rdx, qword [rdx + 0x10]
cmp rdx, rcx
je 0x140091523
test rdx, rdx
jne 0x140091500
lea rcx, str.ERROR_RU_0x00000005
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14009148c
mov rax, qword [rdx + 0x10]
mov qword [r8 + 0x10], rax
mov qword [rdx + 0x10], rsi
mov rcx, r9
call fcn.140054eb0
jmp 0x14009148c
lock xadd dword [r12 + 0x10], r14d
sub r14d, 1
jg 0x140091557
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x80]
call fcn.1400a6500
nop
lea rcx, [rbp - 0x40]
call fcn.14001feb0
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1402155d0
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400a2cd8
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
int3