Function at 0x14001a190
Capabilities:
Delete registry value
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x920
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov rax, qword [0x14012ce40]
xor rax, rsp
mov qword [rsp + 0x910], rax
mov rbx, rcx
mov word [rsp + 0x710], 0
xor edx, edx
mov r8d, 0x1fe
lea rcx, [r11 - 0x236]
call fcn.1400b57e0
xor r8d, r8d
mov edx, 0x7d1
lea rcx, [rsp + 0x70]
call fcn.14008d664
nop
lea rax, method.CDialog.virtual_0
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x5c0]
call fcn.140090694
lea rdi, [0x1400def68]
mov qword [rsp + 0x5c0], rdi
lea rcx, [rsp + 0x668]
call fcn.140090694
mov qword [rsp + 0x668], rdi
xor ebp, ebp
mov qword [rsp + 0x158], rbp
mov qword [rsp + 0x160], rbp
mov qword [rsp + 0x168], rbp
mov qword [rsp + 0x170], rbp
mov word [rsp + 0x18c], bp
mov word [rsp + 0x38c], bp
mov qword [rsp + 0x5b8], rbp
xor eax, eax
mov dword [rsp + 0x5a4], eax
mov dword [rsp + 0x5a8], eax
mov dword [rsp + 0x5ac], eax
mov dword [rsp + 0x5b0], eax
mov dword [rsp + 0x184], ebp
mov dword [rsp + 0x58c], 1
mov dword [rsp + 0x590], ebp
mov dword [rsp + 0x188], ebp
mov ecx, 0x7d1
call fcn.1400708a0
nop
mov edx, 0x100
lea rcx, [rbx + 8]
call fcn.140028c40
mov dword [rsp + 0x5c], ebp
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a304
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a2fa
mov rcx, rax
call fcn.140050830
jmp 0x14001a2fd
mov rax, rbp
mov qword [0x1401370f0], rax
lea rdx, str.___InstallSequencer_____
mov rcx, rax
call fcn.140050c00
mov dword [rsp + 0x60], 8
mov qword [rsp + 0x48], rbp
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a354
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a34a
mov rcx, rax
call fcn.140050830
jmp 0x14001a34d
mov rax, rbp
mov qword [0x1401370f0], rax
lea r9, str.ProgressHndl
lea r8, [rbx + 8]
lea rdx, str.GetValueFromHKLM__s__s
mov rcx, rax
call fcn.140050c00
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x20], rdx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbx + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001a3d6
lea rax, [rbx + 0x628]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.ProgressHndl
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14001a41b
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a40a
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a400
mov rcx, rax
call fcn.140050830
jmp 0x14001a403
mov rax, rbp
mov qword [0x1401370f0], rax
lea r8, str.GetValueFromHKLM__RegOpenKeyEx_failed
mov edx, edi
mov rcx, rax
call fcn.140050e40
mov rax, qword [rbx + 0x628]
test rax, rax
je 0x14001a42e
mov qword [rbx + 0x638], rax
mov dword [rsp + 0x58], 0x404
mov qword [rsp + 0x40], rbp
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a46f
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a465
mov rcx, rax
call fcn.140050830
jmp 0x14001a468
mov rax, rbp
mov qword [0x1401370f0], rax
lea r9, str.SeqStack
lea r8, [rbx + 8]
lea rdx, str.GetValueFromHKLM__s__s
mov rcx, rax
call fcn.140050c00
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x20], rdx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbx + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001a4f3
lea rax, [rbx + 0x208]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, str.SeqStack
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14001a538
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a527
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a51d
mov rcx, rax
call fcn.140050830
jmp 0x14001a520
mov rax, rbp
mov qword [0x1401370f0], rax
lea r8, str.GetValueFromHKLM__RegOpenKeyEx_failed
mov edx, edi
mov rcx, rax
call fcn.140050e40
test edi, edi
jne 0x14001a5c3
movsxd rax, dword [rbx + 0x208]
cmp eax, 0xffffffff
jl 0x14001a5c3
cmp eax, 0x100
jge 0x14001a5c3
cmp eax, 0xffffffff
jne 0x14001a55c
mov esi, ebp
jmp 0x14001a563
mov esi, dword [rbx + rax*4 + 0x20c]
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a597
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a58d
mov rcx, rax
call fcn.140050830
jmp 0x14001a590
mov rax, rbp
mov qword [0x1401370f0], rax
mov r9d, dword [rbx + 0x208]
mov r8d, esi
lea rdx, str.Seqence_Step_from_last_install___d__tos___d
mov rcx, rax
call fcn.140050c00
cmp esi, 0x13
jne 0x14001a5cf
mov dword [rbx + 0x208], 0xffffffff
mov esi, ebp
jmp 0x14001a5cf
mov dword [rbx + 0x208], 0xffffffff
mov esi, ebp
lea r9, [rbx + 0x61c]
lea r8, str.InstallCrashed
lea rdx, [rbx + 8]
lea rcx, [rsp + 0x30]
call fcn.1400483b0
test eax, eax
je 0x14001a5f5
mov dword [rbx + 0x61c], ebp
cmp dword [rbx + 0x61c], 1
jne 0x14001a611
cmp dword [rbx + 0x208], 0
jle 0x14001a611
mov dword [rbx + 0x60c], 1
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a645
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a63b
mov rcx, rax
call fcn.140050830
jmp 0x14001a63e
mov rax, rbp
mov qword [0x1401370f0], rax
mov r8d, dword [rbx + 0x61c]
lea rdx, str.m_previousInstallCrashed___d
mov rcx, rax
call fcn.140050c00
cmp dword [rbx + 0x61c], 0
je 0x14001a6a7
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001a698
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001a68e
mov rcx, rax
call fcn.140050830
jmp 0x14001a691
mov rax, rbp
mov qword [0x1401370f0], rax
lea rdx, str.__________Previous_Install_Crashed._Must_clean_up_old_junk_before_proceeding__________
mov rcx, rax
call fcn.140050c00
mov eax, dword [rbx + 0x620]
mov dword [rbx + 0x124c], eax
lea rdi, [0x140000000]
mov r13d, dword [rsp + 0x58]
nop
cmp esi, 0x14
ja case.0x14001a6d6.15
movsxd rax, esi
mov ecx, dword [rdi + rax*4 + 0x1b364]
add rcx, rdi
jmp rcx
lea r12, str.BEGIN_STEP
jmp 0x14001a7a5
lea r12, str.INITIALIZE_STEP
jmp 0x14001a7a5
lea r12, str.INITUSB_STEP
jmp 0x14001a7a5
lea r12, str.LICENSE_STEP
jmp 0x14001a7a5
lea r12, str.GETIPADDR_STEP
jmp 0x14001a7a5
lea r12, str.CHOOSETYPE_STEP
jmp 0x14001a7a5
lea r12, str.WIFICREDS_STEP
jmp 0x14001a7a5
lea r12, str.PREINSTALL_STEP
jmp 0x14001a7a5
lea r12, str.VERIFY_NETWORK_CONNECTION_STEP
jmp 0x14001a7a5
lea r12, str.INSTALL_USB_VIA_USB_STEP
jmp 0x14001a7a5
lea r12, str.INSTALL_NTWK_VIA_USB_STEP
jmp 0x14001a7a5
lea r12, str.INSTALL_NTWK_VIA_EWS_STEP
jmp 0x14001a7a5
lea r12, str.POSTINSTALL_STEP
jmp 0x14001a7a5
lea r12, str.FINISH_STEP
jmp 0x14001a7a5
lea r12, str.INSTALL_MSI_STEP
jmp 0x14001a7a5
lea r12, str.CANCEL_STOP
jmp 0x14001a7a5
lea r12, str.SUCCESS_STOP
jmp 0x14001a7a5
lea r12, str.FAILED_STOP
jmp 0x14001a7a5
lea r12, str.CLEANUP_STEP
jmp 0x14001a7a5
lea r12, str.REBOOT_STEP
jmp 0x14001a7a5
lea r12, str.UNKNOWN_STEP
mov rbp, qword [0x1401370f0]
test rbp, rbp
jne 0x14001a866
mov ecx, 0x310
call fcn.140084d88
mov rbp, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001a85d
call fcn.140087bd0
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
je 0x14001b07f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp], rax
mov word [rbp + 0x64], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1400f5b5c]
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [0x1400f5b5c]
mov rcx, rbp
call fcn.140006070
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x26c]
mov word [rcx], 0
lea r8, [0x1400f6478]
mov edx, 0x50
call fcn.1400b1b70
nop
lea rdi, [0x140000000]
jmp 0x14001a85f
xor ebp, ebp
mov qword [0x1401370f0], rbp
mov r8, r12
lea rdx, str.InstallSequencer___step___s
mov rcx, rbp
call fcn.140050c00
cmp esi, 0x14
ja case.0x14001a88e.17
movsxd rax, esi
mov ecx, dword [rdi + rax*4 + 0x1b3b8]
add rcx, rdi
jmp rcx
cmp dword [rbx + 0x61c], 1
jne 0x14001a8a3
xor ebp, ebp
mov dword [rbx + 0x60c], ebp
jmp 0x14001a8a5
xor ebp, ebp
mov eax, dword [rbx + 0x60c]
test eax, eax
je 0x14001a8c2
cmp dword [rbx + 0x614], 0
je 0x14001a8c2
mov esi, 0x12
jmp 0x14001a6c0
test eax, eax
je 0x14001a8d0
mov esi, reloc.OLEAUT32.dll_SafeArrayGetDim
jmp 0x14001a6c0
mov dword [rbx + 0x61c], ebp
xor edx, edx
mov rcx, rbx
call fcn.140019520
mov esi, 1
mov r9d, esi
lea r8, str.InstallCrashed
lea rdx, [rbx + 8]
lea rcx, [rsp + 0x30]
call fcn.1400481e0
jmp 0x14001a6c0
mov edx, 1
mov rcx, rbx
call fcn.140019520
lea rcx, [rbx + 0x630]
mov r8d, dword [rbx + 0x610]
mov edx, dword [rbx + 0x60c]
call fcn.14001d060
mov r13d, eax
test eax, eax
jne 0x14001a94e
mov ecx, dword [rbx + 0x620]
test ecx, ecx
jne 0x14001a941
lea esi, [rax + 2]
jmp 0x14001a6c0
cmp ecx, 1
jne 0x14001a94e
lea esi, [rcx + 2]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 2
mov rcx, rbx
call fcn.140019520
lea rcx, [rbx + 0x630]
mov r8d, dword [rbx + 0x610]
mov edx, dword [rbx + 0x60c]
call fcn.14001e3f0
mov r13d, eax
test eax, eax
jne 0x14001a994
lea esi, [rax + 3]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 3
mov rcx, rbx
call fcn.140019520
xor r8d, r8d
mov edx, 0x469
mov rcx, qword [rbx + 0x628]
call fcn.140072000
xor r8d, r8d
mov edx, 0x467
mov rcx, qword [rbx + 0x628]
call fcn.140072000
lea rcx, [rbx + 0x630]
mov r8d, dword [rbx + 0x610]
mov edx, dword [rbx + 0x60c]
call fcn.14001f7c0
mov r13d, eax
test eax, eax
jne 0x14001aa19
mov eax, dword [rbx + 0x620]
test eax, eax
jne 0x14001aa0c
lea esi, [rax + 5]
jmp 0x14001a6c0
cmp eax, 1
jne 0x14001aa19
lea esi, [rax + 3]
jmp 0x14001a6c0
mov edx, r13d
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 4
mov rcx, rbx
call fcn.140019520
lea rcx, [rbx + 0x630]
mov r8d, dword [rbx + 0x610]
mov edx, dword [rbx + 0x60c]
call fcn.14001eea0
mov r13d, eax
test eax, eax
jne 0x14001aa60
lea esi, [rax + 0xe]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 5
mov rcx, rbx
call fcn.140019520
xor r8d, r8d
mov edx, 0x467
mov rcx, qword [rbx + 0x628]
call fcn.140072000
lea rcx, [rbx + 0x630]
mov r9d, dword [rbx + 0x610]
mov r8d, dword [rbx + 0x60c]
lea rdx, [rsp + 0x50]
call fcn.14001fd10
mov r13d, eax
test eax, eax
jne 0x14001aaf2
xor r8d, r8d
mov edx, 0x469
mov rcx, qword [rbx + 0x628]
call fcn.140072000
mov ecx, dword [rsp + 0x50]
cmp ecx, 2
jne 0x14001aadd
lea esi, [rcx + 6]
jmp 0x14001a6c0
mov esi, SafeArrayGetDim
cmp ecx, 3
mov eax, 6
cmove esi, eax
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140019930
mov edx, 6
mov rcx, rbx
call fcn.140019520
xor r8d, r8d
mov edx, 0x468
mov rcx, qword [rbx + 0x628]
call fcn.140072000
xor r8d, r8d
mov edx, 0x469
mov rcx, qword [rbx + 0x628]
call fcn.140072000
lea rcx, [rbx + 0x630]
mov r9d, dword [rbx + 0x610]
mov r8d, dword [rbx + 0x60c]
lea rdx, [rsp + 0x70]
call fcn.140020930
mov r13d, eax
test eax, eax
jne 0x14001ab73
lea esi, [rax + 8]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 6
mov rcx, rbx
call fcn.140019520
xor r8d, r8d
mov edx, 0x467
mov rcx, qword [rbx + 0x628]
call fcn.140072000
xor r8d, r8d
mov edx, 0x469
mov rcx, qword [rbx + 0x628]
call fcn.140072000
lea rcx, [rbx + 0x630]
mov r9d, dword [rbx + 0x610]
mov r8d, dword [rbx + 0x60c]
mov edx, dword [rsp + 0x50]
call fcn.1400224d0
mov r13d, eax
test eax, eax
jne 0x14001abe6
lea esi, [rax + 0xe]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140019930
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.140019520
xor r8d, r8d
mov edx, 0x468
mov rcx, qword [rbx + 0x628]
call fcn.140072000
xor r8d, r8d
mov edx, 0x469
mov rcx, qword [rbx + 0x628]
call fcn.140072000
lea rcx, [rbx + 0x630]
mov r9d, dword [rbx + 0x610]
mov r8d, dword [rbx + 0x60c]
lea rdx, [rsp + 0x70]
call fcn.140020f50
mov r13d, eax
test eax, eax
jne 0x14001ac67
lea esi, [rax + 7]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 7
mov rcx, rbx
call fcn.140019520
lea rcx, [rbx + 0x630]
mov r8d, dword [rbx + 0x610]
mov edx, dword [rbx + 0x60c]
call fcn.140021eb0
mov r13d, eax
test eax, eax
jne 0x14001ace1
mov eax, dword [rbx + 0x620]
test eax, eax
jne 0x14001acd4
mov ecx, dword [rsp + 0x50]
cmp ecx, 1
jne 0x14001acc0
lea esi, [rax + 9]
jmp 0x14001a6c0
cmp ecx, 3
je 0x14001acca
cmp ecx, 2
jne 0x14001acd4
mov esi, 0xa
jmp 0x14001a6c0
cmp eax, 1
jne 0x14001ace1
lea esi, [rax + 0xa]
jmp 0x14001a6c0
mov edx, r13d
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 9
mov rcx, rbx
call fcn.140019520
lea rcx, [rbx + 0x630]
mov eax, dword [rbx + 0x610]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x60c]
mov dword [rsp + 0x20], eax
mov r9d, 0x100
lea r8, [rsp + 0x710]
mov edx, dword [rsp + 0x50]
call fcn.1400233f0
mov r13d, eax
test eax, eax
jne 0x14001ad41
lea esi, [rax + 0xc]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, 0xa
mov rcx, rbx
call fcn.140019520
mov edi, dword [rbx + 0x60c]
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001ad98
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001ad8f
mov rcx, rax
call fcn.140050830
jmp 0x14001ad91
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, [0x1400efef4]
test edi, edi
lea rcx, str.____ROLLBACK___
cmovne r8, rcx
lea rdx, str.____InstallStep_NetworkViaUSB______s
mov rcx, rax
call fcn.140050c00
test edi, edi
je 0x14001adc7
mov r13d, 1
jmp 0x14001ae26
lea rcx, str.Spooler
call fcn.140062490
mov edx, 0x465
mov r8d, 0xf9
mov rcx, qword [rbx + 0x638]
call fcn.140072000
lea r9, [rsp + 0x5c]
mov r8d, 0x100
lea rdx, [rsp + 0x710]
lea rcx, [rbx + 0x630]
call fcn.1400230a0
test eax, eax
je 0x14001ae20
xor r13d, r13d
lea esi, [r13 + 0xc]
lea rdi, [0x140000000]
jmp 0x14001a6c0
mov r13d, 3
mov edx, r13d
mov rcx, rbx
call fcn.14001a030
mov esi, eax
lea rdi, [0x140000000]
jmp 0x14001a6c0
mov edx, reloc.WS2_32.dll_inet_addr
mov rcx, rbx
call fcn.140019520
mov edi, dword [rbx + 0x60c]
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001ae85
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001ae7c
mov rcx, rax
call fcn.140050830
jmp 0x14001ae7e
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, [0x1400efef4]
test edi, edi
lea rcx, str.____ROLLBACK___
cmovne r8, rcx
lea rdx, str.____InstallStep_NetworkViaEWS______s
mov rcx, rax
call fcn.140050c00
test edi, edi
je 0x14001aeb4
mov r13d, 1
jmp 0x14001aefc
lea rcx, str.Spooler
call fcn.140062490
lea rcx, [rbx + 0x630]
lea r9, [rsp + 0x5c]
mov r8d, 0x100
lea rdx, [rsp + 0x710]
call fcn.1400230a0
test eax, eax
je 0x14001aef6
xor r13d, r13d
lea esi, [r13 + 0xc]
lea rdi, [0x140000000]
jmp 0x14001a6c0
mov r13d, 3
mov edx, r13d
mov rcx, rbx
call fcn.14001a030
mov esi, eax
lea rdi, [0x140000000]
jmp 0x14001a6c0
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov rcx, rbx
call fcn.140019520
lea rcx, [rbx + 0x630]
mov r8d, dword [rbx + 0x610]
mov edx, dword [rbx + 0x60c]
call fcn.140023df0
mov r13d, eax
test eax, eax
jne 0x14001af4a
lea esi, [rax + 0xf]
jmp 0x14001a6c0
mov edx, eax
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, rbx
call fcn.140019520
lea rcx, [rbx + 0x630]
lea r8, [rsp + 0x710]
mov edx, dword [rbx + 0x60c]
call fcn.1400243c0
test r13d, r13d
jne 0x14001af90
lea esi, [r13 + 0xd]
jmp 0x14001a6c0
mov edx, r13d
mov rcx, rbx
call fcn.14001a030
mov esi, eax
jmp 0x14001a6c0
lea rdx, [rsp + 0x710]
lea rcx, [rbx + 0x630]
call fcn.140024ac0
mov rcx, rbx
call fcn.140019b50
mov dword [rsp + 0x48], 0
mov dword [0x140136cd8], 1
cmp dword [rbx + 0x630], 0
jne 0x14001b010
cmp dword [0x140136cd4], 0
jne 0x14001b010
test r13d, r13d
jne 0x14001aff7
lea esi, [r13 + 0x13]
lea rdi, [0x140000000]
jmp 0x14001a6c0
mov edx, r13d
mov rcx, rbx
call fcn.14001a030
mov esi, eax
lea rdi, [0x140000000]
jmp 0x14001a6c0
mov esi, 0x14
lea rdi, [0x140000000]
jmp 0x14001a6c0
lea rcx, [rbx + 0x630]
call fcn.140026380
mov ecx, dword [rsp + 0x48]
test eax, eax
mov eax, 9
cmovne ecx, eax
mov dword [rsp + 0x48], ecx
lea esi, [rax + 0xa]
jmp 0x14001a6c0
mov rcx, rbx
call fcn.140019b50
lea rcx, [rbx + 0x630]
call fcn.140026110
mov dword [rsp + 0x48], 1
mov esi, 0x13
jmp 0x14001a6c0
mov dword [rsp + 0x48], 2
mov esi, 0x13
jmp 0x14001a6c0
mov ecx, 0x80004005
call fcn.140006300
nop
mov edx, 0x13
mov rcx, rbx
call fcn.140019520
xor ebp, ebp
mov qword [rsp + 0x40], rbp
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001b0d2
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001b0c8
mov rcx, rax
call fcn.140050830
jmp 0x14001b0cb
mov rax, rbp
mov qword [0x1401370f0], rax
lea r9, str.SeqStack
lea r8, [rbx + 8]
lea rdx, str.DeleteValueFromHKLM__s__s
mov rcx, rax
call fcn.140050c00
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20006
xor r8d, r8d
lea rdx, [rbx + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001b136
lea rdx, str.SeqStack
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14001b17b
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001b16a
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001b160
mov rcx, rax
call fcn.140050830
jmp 0x14001b163
mov rax, rbp
mov qword [0x1401370f0], rax
lea r8, str.DeleteValueFromHKLM__RegOpenKeyEx_failed
mov edx, edi
mov rcx, rax
call fcn.140050e40
mov qword [rsp + 0x38], rbp
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001b1b4
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14001b1aa
mov rcx, rax
call fcn.140050830
jmp 0x14001b1ad
mov rax, rbp
mov qword [0x1401370f0], rax
lea r9, str.InstallCrashed
lea r8, [rbx + 8]
lea rdx, str.DeleteValueFromHKLM__s__s
mov rcx, rax
call fcn.140050c00
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, [rbx + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001b21c
lea rdx, str.InstallCrashed
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [rsp + 0x48]
jmp 0x14001b26e
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001b250
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001b246
mov rcx, rax
call fcn.140050830
jmp 0x14001b249
mov rax, rbp
mov qword [0x1401370f0], rax
lea r8, str.DeleteValueFromHKLM__RegOpenKeyEx_failed
mov edx, edi
mov rcx, rax
call fcn.140050e40
mov esi, dword [rsp + 0x48]
jmp 0x14001b26e
mov esi, 1
xor ebp, ebp
mov rcx, rbx
call fcn.140019c30
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001b2aa
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14001b2a0
mov rcx, rax
call fcn.140050830
jmp 0x14001b2a3
mov rax, rbp
mov qword [0x1401370f0], rax
mov r8, qword [rbx]
lea rdx, str.TerminateProgressThrd__x_
mov rcx, rax
call fcn.140050c00
cmp qword [rbx], 0
je 0x14001b308
xor r8d, r8d
mov edx, 0x464
mov rcx, qword [rbx + 0x628]
call fcn.140072000
mov edi, ebp
nop
nop
cmp dword [0x140136cdc], 0
je 0x14001b305
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
add edi, 1
cmp edi, 0xa
jl 0x14001b2e0
cmp dword [0x140136cdc], 0
jne 0x14001b308
mov qword [rbx], rbp
lea rcx, [rsp + 0x668]
call fcn.14008e638
nop
lea rcx, [rsp + 0x5c0]
call fcn.14008e638
nop
lea rcx, [rsp + 0x70]
call fcn.14008d55c
mov eax, esi
mov rcx, qword [rsp + 0x910]
xor rcx, rsp
call fcn.1400b09d0
lea r11, [rsp + 0x920]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret