Function at 0x1400462c0
Capabilities:
Delete registry value
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
mov rax, qword [0x1400b02e8]
xor rax, rsp
mov qword [rbp + 0x120], rax
lea rcx, [rbp + 0xa0]
call fcn.140046020
nop
lea rcx, [rbp - 0x38]
call fcn.14003ea88
nop
xor r14d, r14d
mov qword [rsp + 0x78], r14
lea rax, [rsp + 0x78]
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], r14
mov byte [rbp - 0x70], 1
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x2011f
xor r8d, r8d
mov rdx, qword [str.SOFTWAREMicrosoftAppVClientVirtualizationLocalVFSSecuredUsers]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
nop dword [rax + rax]
mov dword [rsp + 0x60], eax
lea rcx, [rbp - 0x80]
call fcn.1400472a8
cmp dword [rsp + 0x60], r14d
je 0x14004646c
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp - 8]
call fcn.14003c848
mov dword [rbp + 0x18], 0x41
call fcn.14000a8e4
mov qword [rbp + 0x30], r14
lea edi, [r14 + 7]
mov qword [rbp + 0x38], rdi
mov word [rbp + 0x20], r14w
lea rdx, str.Cannot_open_key__1_.
lea rcx, [rbp + 0x20]
call fcn.140003b34
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x40]
call fcn.14003c478
nop
lea rdx, str.SOFTWAREMicrosoftAppVClientVirtualizationLocalVFSSecuredUsers
mov rcx, rax
call fcn.1400126e0
mov rbx, rax
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Client
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 0x28]
lea esi, [rdi + 1]
mov edx, esi
lea rcx, [rbp - 8]
call fcn.14003c72c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046417
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rcx, [rbp + 0x40]
call fcn.14003cd5c
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, rsi
jb 0x140046448
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
call fcn.140003d24
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], rdi
mov word [rbp + 0x20], r14w
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14004723c
mov rcx, qword [rbp - 8]
jmp 0x140047234
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r14
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x64]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
nop dword [rax + rax]
mov dword [rsp + 0x60], eax
test eax, eax
je 0x1400465c4
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp - 8]
call fcn.14003c848
mov dword [rbp + 0x18], 0x4d
call fcn.14000a8e4
mov qword [rbp + 0x30], r14
mov edi, 7
mov qword [rbp + 0x38], rdi
mov word [rbp + 0x20], r14w
lea rdx, str.Cannot_get_registry_limits_for_key__1_._Error:__2_.
lea rcx, [rbp + 0x20]
call fcn.140003b34
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x40]
call fcn.14003c478
nop
lea rdx, str.SOFTWAREMicrosoftAppVClientVirtualizationLocalVFSSecuredUsers
mov rcx, rax
call fcn.1400126e0
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14000cd18
mov rbx, rax
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Client
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 0x28]
lea esi, [rdi + 1]
mov edx, esi
lea rcx, [rbp - 8]
call fcn.14003c72c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046581
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rcx, [rbp + 0x40]
call fcn.14003cd5c
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, rsi
jb 0x1400465b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
call fcn.140003d24
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], rdi
mov word [rbp + 0x20], r14w
jmp 0x140046455
cmp dword [rbp - 0x68], r14d
je 0x140047169
mov ecx, dword [rsp + 0x64]
test ecx, ecx
je 0x140047169
mov edx, dword [rsp + 0x68]
test edx, edx
je 0x140047169
add ecx, 2
mov dword [rsp + 0x64], ecx
add edx, 2
mov dword [rsp + 0x68], edx
mov ecx, 0x20a
call fcn.140066c80
mov rdi, rax
mov qword [rbp - 0x48], rax
mov ecx, dword [rsp + 0x64]
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140066c80
mov r12, rax
mov qword [rbp - 0x50], rax
mov ecx, dword [rsp + 0x68]
call fcn.140066c80
mov rbx, rax
mov qword [rbp - 0x60], rax
test rdi, rdi
je 0x14004708e
test r12, r12
je 0x14004708e
test rax, rax
je 0x14004708e
mov ecx, r14d
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov r13, r14
mov qword [rbp - 0x70], r14
mov edi, 7
lea esi, [rdi + 1]
mov r15, qword [rbp - 0x78]
jmp 0x14004667a
mov rbx, qword [rbp - 0x60]
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x70], eax
mov edx, ecx
inc ecx
mov dword [rbp - 0x64], ecx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x6c]
mov r8, r12
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
nop dword [rax + rax]
mov dword [rsp + 0x60], eax
test eax, eax
jne 0x140046dff
cmp dword [rsp + 0x6c], r14d
je 0x140046cec
mov eax, dword [rsp + 0x70]
test eax, eax
je 0x140046cec
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], rdi
mov word [rbp + 0x20], r14w
mov edx, eax
shr rdx, 1
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rcx, [rbp - 0x28]
cmp rdx, rdi
ja 0x14004672a
mov qword [rbp - 0x18], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, qword [rbp - 0x60]
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov word [rbp + rbx - 0x28], r14w
jmp 0x140046733
mov r9, rbx
call fcn.140003bc8
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x28]
call fcn.14006396c
test al, al
sete bl
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x14004675f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
test bl, bl
je 0x14004685c
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], 0x83
call fcn.14000a8e4
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Failed_to_expand_environment_variables_for_path__1_.
lea rcx, [rbp - 8]
call fcn.140003b34
nop
lea r8, [rbp - 8]
lea rdx, [rbp + 0x70]
call fcn.14003c478
mov rbx, rax
lea rdx, [rbp + 0x20]
mov rcx, rax
call fcn.140038058
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Client
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 0x28]
mov edx, esi
lea rcx, [rbp + 0x40]
call fcn.14003c72c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046808
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rcx, [rbp + 0x70]
call fcn.14003cd5c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046839
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14004685c
inc rdx
mov rcx, qword [rbp + 0x40]
call fcn.140003d24
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x20]
call fcn.140063a68
mov r14, rax
mov rcx, rax
shr rcx, 0x27
not ecx
test cl, 1
je 0x1400469a9
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], 0x8a
call fcn.14000a8e4
xor eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], ax
lea rdx, str.Failed_to_get_the_full_path_name_for__1_._Error:__2_.
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x70]
call fcn.14003c478
mov rbx, rax
lea rdx, [rbp + 0x20]
mov rcx, rax
call fcn.140038058
mov qword [rbp - 0x40], r14
lea rdx, [rbp - 0x40]
mov rcx, rbx
call fcn.14003ce18
mov rbx, rax
xor r14d, r14d
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 8]
mov edx, esi
lea rcx, [rbp + 0x40]
call fcn.14003c72c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046936
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rcx, [rbp + 0x70]
call fcn.14003cd5c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046967
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14004698b
inc rdx
mov rcx, qword [rbp + 0x40]
call fcn.140003d24
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, rsi
jb 0x140046df0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
jmp 0x140046deb
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], rsi
setae r8b
mov rdx, qword [rbp + 0x20]
cmovae rax, rdx
xor r14d, r14d
cmp word [rax], 0x5c
jne 0x140046ac6
lea rax, [rbp + 0x20]
test r8b, r8b
cmovne rax, rdx
cmp word [rax + 2], 0x5c
jne 0x140046ac6
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], SysAllocStringByteLen
call fcn.14000a8e4
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Found_UNC_path__1_.
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x70]
call fcn.14003c478
mov rbx, rax
lea rdx, [rbp + 0x20]
mov rcx, rax
call fcn.140038058
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 8]
lea edx, [r14 + 4]
lea rcx, [rbp + 0x40]
call fcn.14003c72c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046a83
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rcx, [rbp + 0x70]
call fcn.14003cd5c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046ab4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
jmp 0x140046974
lea rcx, [rbp + 0x20]
test r8b, r8b
cmovne rcx, rdx
lea r8, [rbp - 0x58]
mov rdx, qword [rbp - 0x48]
call fcn.14004625c
test al, al
jne 0x140046af5
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], rsi
cmovae rdx, qword [rbp + 0x20]
mov qword [rbp - 0x58], rdx
jmp 0x140046af9
mov rdx, qword [rbp - 0x58]
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rcx, [rbp - 8]
call fcn.140003b34
lea rdx, [0x1400b0910]
cmp qword [reloc.OLEAUT32.dll_VariantInit], rsi
cmovae rdx, qword [0x1400b0910]
lea rcx, [rbp - 8]
cmp qword [rbp + 0x10], rsi
cmovae rcx, qword [rbp - 8]
mov r8, qword [0x1400b0920]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsnicmp]
nop dword [rax + rax]
test eax, eax
sete bl
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046b64
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
test bl, bl
je 0x14004698b
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], LoadRegTypeLib
call fcn.14000a8e4
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Found_temporary_profile_path:__1_.
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x70]
call fcn.14003c478
mov rbx, rax
lea rdx, [rbp + 0x20]
mov rcx, rax
call fcn.140038058
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 8]
mov edx, 4
lea rcx, [rbp + 0x40]
call fcn.14003c72c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046c10
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rcx, [rbp + 0x70]
call fcn.14003cd5c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046c41
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140046c64
inc rdx
mov rcx, qword [rbp + 0x40]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
mov rdx, r12
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
cmp r15, r13
je 0x140046cb6
mov qword [r15 + 0x10], r14
mov qword [r15 + 0x18], r14
movups xmm0, xmmword [rbp - 0x28]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rbp - 0x18]
movups xmmword [r15 + 0x10], xmm1
mov qword [rbp - 0x18], r14
mov rdx, rdi
mov qword [rbp - 0x10], rdx
mov word [rbp - 0x28], r14w
add r15, 0x20
mov qword [rbp - 0x78], r15
jmp 0x140046cd2
lea r8, [rbp - 0x28]
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140040238
mov r13, qword [rbp - 0x70]
mov r15, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x14004698b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
jmp 0x140046985
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], 0x7b
call fcn.14000a8e4
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Dont_process_this_Value_name___1___Value_data___2_.
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x70]
call fcn.14003c478
nop
lea rdx, [rsp + 0x6c]
mov rcx, rax
call fcn.14000cd18
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.14000cd18
mov rbx, rax
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 8]
mov edx, esi
lea rcx, [rbp + 0x40]
call fcn.14003c72c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046d9c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rcx, [rbp + 0x70]
call fcn.14003cd5c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046dcd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140046df0
inc rdx
mov rcx, qword [rbp + 0x40]
call fcn.140003d24
mov eax, dword [rsp + 0x60]
test eax, eax
mov ecx, dword [rbp - 0x64]
je 0x140046676
mov r12, qword [rbp - 0x80]
cmp eax, 0x103
je 0x140046f0d
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], 0xa9
call fcn.14000a8e4
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Failed_enumerating_registry_values._Error:__1_
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x70]
call fcn.14003c478
nop
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14000cd18
mov rbx, rax
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 8]
mov edx, esi
lea rcx, [rbp + 0x40]
call fcn.14003c72c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046eb1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rcx, [rbp + 0x70]
call fcn.14003cd5c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046ee2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140046f05
inc rdx
mov rcx, qword [rbp + 0x40]
call fcn.140003d24
mov bl, r14b
jmp 0x140047047
mov r14, r12
cmp r12, r15
je 0x140047044
xor r12d, r12d
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], 0xb0
call fcn.14000a8e4
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r12w
lea rdx, str.Deleting_value__1_.
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x70]
call fcn.14003c478
mov rbx, rax
mov rdx, r14
mov rcx, rax
call fcn.140038058
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r12w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
mov r9, rbx
lea r8, [rbp - 8]
mov edx, 4
lea rcx, [rbp + 0x40]
call fcn.14003c72c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140046fbf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r12w
lea rcx, [rbp + 0x70]
call fcn.14003cd5c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140046ff0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r12w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140047013
inc rdx
mov rcx, qword [rbp + 0x40]
call fcn.140003d24
mov rdx, r14
cmp qword [r14 + 0x18], rsi
jb 0x14004701f
mov rdx, qword [r14]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
nop dword [rax + rax]
add r14, 0x20
cmp r14, r15
jne 0x140046f1c
mov r12, qword [rbp - 0x80]
cmp r12, r15
setne bl
test r12, r12
je 0x140047069
mov rdx, r15
mov rcx, r12
call fcn.140037d9c
sub r13, r12
and r13, 0xffffffffffffffe0
mov rdx, r13
mov rcx, r12
call fcn.140003d24
mov r12, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x60]
call fcn.140066d0c
nop
mov rcx, r12
call fcn.140066d0c
nop
mov rcx, qword [rbp - 0x48]
call fcn.140066d0c
jmp 0x14004723f
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], 0x62
mov qword [rbp - 0x18], r14
mov edi, 7
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.Failed_to_allocate_memory_for_registry_values.
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
lea r9, [rbp - 0x28]
lea r8, [rbp - 8]
lea esi, [rdi + 1]
mov edx, esi
lea rcx, [rbp + 0x40]
call fcn.14003c4b0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x140047117
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x14004713e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140047161
inc rdx
mov rcx, qword [rbp + 0x40]
call fcn.140003d24
mov bl, r14b
jmp 0x14004706d
lea rdx, str.AppV::Client::Common::CleanupTemporaryPersistedVfsLocks
lea rcx, [rbp + 0x40]
call fcn.14003c848
mov dword [rbp + 0x60], 0x54
mov qword [rbp - 0x18], r14
mov edi, 7
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
lea rdx, str.No_SID_file_name_values_in_the_key.
lea rcx, [rbp - 0x28]
call fcn.140003b34
nop
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
lea rdx, str.Client
lea rcx, [rbp - 8]
call fcn.140003b34
nop
lea r9, [rbp - 0x28]
lea r8, [rbp - 8]
lea esi, [rdi + 1]
mov edx, esi
lea rcx, [rbp + 0x40]
call fcn.14003c4b0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, rsi
jb 0x1400471f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
call fcn.140003d24
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rdi
mov word [rbp - 8], r14w
mov rdx, qword [rbp - 0x10]
cmp rdx, rsi
jb 0x140047219
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140003d24
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rdi
mov word [rbp - 0x28], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14004723c
mov rcx, qword [rbp + 0x40]
inc rdx
call fcn.140003d24
mov bl, r14b
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140047256
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop dword [rax + rax]
nop
lea rcx, [rbp - 0x38]
call fcn.14003eb20
nop
lea rcx, [rbp + 0xa0]
call fcn.14004610c
mov al, bl
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140066410
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret