Function at 0x14005f2e0
Capabilities:
Check os version
Query environment variable
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1050]
mov eax, 0x1150
call fcn.14000c990
sub rsp, rax
mov rax, qword [0x14012bc80]
xor rax, rsp
mov qword [rbp + 0x1040], rax
xor eax, eax
xor r15d, r15d
mov r12, rcx
mov r13d, edx
lea rcx, [rbp + 0x31]
mov ebx, r15d
mov r8d, 0x1000
xor edx, edx
mov esi, r15d
mov byte [rbp], bl
mov r14d, r15d
mov dword [rsp + 0x44], r15d
mov dword [rsp + 0x40], r15d
mov qword [rbp + 1], rax
mov qword [rbp + 9], rax
mov qword [rbp + 0x11], rax
mov qword [rbp + 0x19], rax
mov dword [rbp + 0x21], eax
mov word [rbp + 0x25], ax
mov byte [rbp + 0x27], al
mov byte [rbp + 0x30], al
call fcn.14000cbf0
lea rcx, [rsp + 0x60]
xor r9d, r9d
xor edx, edx
mov r8d, __WSAFDIsSet
mov qword [rsp + 0x48], r15
call fcn.14002a5a0
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], __WSAFDIsSet
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x14005f3ac
cmp dword [rsp + 0x64], 6
mov rdi, 0xffffffff80000001
jae 0x14005f3b3
mov rdi, 0xffffffff80000002
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStrings]
lea rdx, str.SOFTWAREFLEXlm_License_Manager
mov r9d, 0x20019
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x48]
xor r8d, r8d
mov rcx, rdi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14005f4d4
mov rcx, qword [rsp + 0x48]
lea r15d, [rax + 1]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x30]
xor edi, edi
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x44]
lea r8, [rbp]
xor edx, edx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x44], 0x27
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x40], 0x1000
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x14005f4d4
nop word [rax + rax]
lea rdx, str._LICENSE_FILE
lea rcx, [rbp]
xor r8d, r8d
inc ebx
call fcn.14002ae90
test rax, rax
je 0x14005f489
lea rdx, str.LM_LICENSE_FILE
lea rcx, [rbp]
call fcn.14000ef90
test eax, eax
je 0x14005f489
test r13d, r13d
je 0x14005f480
lea rcx, [rbp]
xor edx, edx
call fcn.14002a9d0
jmp 0x14005f484
mov eax, dword [rsp + 0x40]
add r14, rax
inc esi
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x44]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x30]
lea r8, [rbp]
mov qword [rsp + 0x30], rax
mov edx, ebx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x44], 0x27
mov dword [rsp + 0x40], 0x1000
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
je 0x14005f440
mov rax, qword [rsp + 0x50]
mov rbx, rax
test rax, rax
je 0x14005f554
cmp byte [rbx], 0
je 0x14005f554
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 0x5f]
call fcn.14002a710
mov rdi, rax
test rax, rax
je 0x14005f542
lea rdx, str._LICENSE_FILE
mov r8d, InitCommonControls
mov rcx, rax
call fcn.140020650
test eax, eax
jne 0x14005f542
lea r8d, [rax + 0xf]
lea rdx, str.LM_LICENSE_FILE
mov rcx, rbx
call fcn.140020650
test eax, eax
je 0x14005f542
cmp byte [rdi + 0xd], 0x3d
jne 0x14005f542
xor edx, edx
mov rcx, rbx
call fcn.14002a9d0
add r14, rax
inc esi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cdqe
add rbx, rax
jne 0x14005f4e1
movsxd rdx, esi
mov rcx, r12
add rdx, r14
call fcn.140064770
mov r14, rax
mov rbx, rax
test r15d, r15d
je 0x14005f674
mov rcx, qword [rsp + 0x48]
xor esi, esi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x30]
lea r9, [rsp + 0x44]
mov qword [rsp + 0x30], rax
lea r8, [rbp]
xor edx, edx
mov qword [rsp + 0x28], rsi
mov edi, esi
mov dword [rsp + 0x44], 0x27
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x40], 0x1000
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x14005f669
lea rdx, str._LICENSE_FILE
lea rcx, [rbp]
xor r8d, r8d
inc edi
call fcn.14002ae90
test rax, rax
je 0x14005f61e
lea rdx, str.LM_LICENSE_FILE
lea rcx, [rbp]
call fcn.14000ef90
test eax, eax
je 0x14005f61e
cmp rbx, r14
jbe 0x14005f5f9
mov byte [rbx], 0x3b
inc rbx
xor r8d, r8d
mov rcx, rbx
lea rdx, [rbp]
test r13d, r13d
jne 0x14005f60c
lea rdx, [rbp + 0x30]
call fcn.14002a840
xor edx, edx
mov rcx, rbx
call fcn.14002a9d0
add rbx, rax
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x44]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x30]
lea r8, [rbp]
mov qword [rsp + 0x30], rax
mov edx, edi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x44], 0x27
mov dword [rsp + 0x40], 0x1000
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
je 0x14005f5c0
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r15, qword [rsp + 0x50]
mov rsi, r15
test r15, r15
je 0x14005f760
cmp byte [rsi], 0
je 0x14005f757
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 0x5f]
call fcn.14002a710
mov rdi, rax
test rax, rax
je 0x14005f741
lea rdx, str._LICENSE_FILE
mov r8d, InitCommonControls
mov rcx, rax
call fcn.140020650
test eax, eax
jne 0x14005f741
lea r8d, [rax + 0xf]
lea rdx, str.LM_LICENSE_FILE
mov rcx, rsi
call fcn.140020650
test eax, eax
je 0x14005f741
cmp byte [rdi + 0xd], 0x3d
lea rdx, [rdi + 0xd]
jne 0x14005f741
cmp rbx, r14
jbe 0x14005f6f2
mov byte [rbx], 0x3b
inc rbx
test r13d, r13d
jne 0x14005f714
movzx eax, byte [rdx]
cmp al, 0x3d
je 0x14005f702
cmp al, 0x20
jne 0x14005f707
inc rdx
jmp 0x14005f6f7
xor r8d, r8d
mov rcx, rbx
call fcn.14002a840
jmp 0x14005f734
mov r8, rdi
xor r9d, r9d
mov rdx, rsi
sub r8, rsi
mov rcx, rbx
add r8, 0xd
call fcn.14002aca0
sub rdi, rsi
mov byte [rdi + rbx + 0xd], 0
xor edx, edx
mov rcx, rbx
call fcn.14002a9d0
add rbx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cdqe
add rsi, rax
jne 0x14005f685
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
mov rax, r14
mov rcx, qword [rbp + 0x1040]
xor rcx, rsp
call fcn.14000c9f0
lea r11, [rsp + 0x1150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret