Function at 0x1401968c0
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xcb0
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
mov rax, qword [0x1402bf5c8]
xor rax, rsp
mov qword [rsp + 0xc80], rax
mov r15, rdx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rdx
xor r13d, r13d
mov dword [rsp + 0x44], r13d
mov qword [rdx], r13
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], 7
mov word [rdx], r13w
lea rax, [rdx + 0x20]
mov qword [rsp + 0x48], rax
mov qword [rax], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov dword [rsp + 0x44], 1
mov qword [r11 - 0xae8], r13
mov qword [r11 - 0xad8], r13
mov qword [r11 - 0xad0], 7
mov word [r11 - 0xae8], r13w
lea r8d, [r13 + 7]
lea rdx, str.0.0.0.0
lea rcx, [r11 - 0xae8]
call fcn.140018360
nop
mov qword [rsp + 0x1d0], r13
mov qword [rsp + 0x1e0], r13
mov qword [rsp + 0x1e8], 7
mov word [rsp + 0x1d0], r13w
lea r8d, [r13 + 7]
lea rdx, str.0.0.0.0
lea rcx, [rsp + 0x1d0]
call fcn.140018360
nop
movups xmm7, xmmword [str.Not_Installed]
movaps xmmword [rsp + 0x230], xmm7
movsd xmm6, qword [0x140262b78]
movsd qword [rsp + 0x240], xmm6
mov ebx, dword [0x140262b80]
mov dword [rsp + 0x248], ebx
xor edx, edx
mov r8d, 0x1ec
lea rcx, [rsp + 0x24c]
call fcn.1401d04f0
movaps xmmword [rsp + 0x440], xmm7
movsd qword [rsp + 0x450], xmm6
mov dword [rsp + 0x458], ebx
xor edx, edx
mov r8d, 0x1ec
lea rcx, [rsp + 0x45c]
call fcn.1401d04f0
mov qword [rsp + 0xd8], r13
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x860]
call fcn.1401d04f0
lea r8, str.SoftwareMicrosoftVisualStudio14.0VCRuntimesx64_
mov edx, 0x104
lea rcx, [rsp + 0x860]
call fcn.1401e03c8
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0x860]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
xor bl, bl
test eax, eax
je 0x140196ae1
lea r8, str.SOFTWAREClassesInstallerDependenciesMicrosoft.VS.VC_RuntimeMinimumVSU_amd64_v14_
mov edx, 0x104
lea rcx, [rsp + 0x860]
call fcn.1401e03c8
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0x860]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
movzx ebx, cl
test cl, cl
je 0x140196b77
mov word [rsp + 0x650], r13w
mov dword [rsp + 0x110], r13d
mov dword [rsp + 0xe8], 0x208
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x650]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x110]
xor r8d, r8d
lea rdx, [0x140234938]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140196b69
mov edx, 0x104
lea rcx, [rsp + 0x230]
test bl, bl
lea r8, [rsp + 0x650]
jne 0x140196b64
lea r8, [rsp + 0x652]
call fcn.1401e03c8
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x230]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140196b90
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x1f0]
call fcn.140018360
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1f0]
cmp qword [rsp + 0x208], 8
cmovae rax, qword [rsp + 0x1f0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009de10
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0x79
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b16b0
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x140196d4f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140196d4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140197db3
call fcn.1401a9a50
mov qword [rsp + 0xe0], r13
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0xa70]
call fcn.1401d04f0
lea r8, str.SoftwareMicrosoftVisualStudio14.0VCRuntimesx86_
mov edx, 0x104
lea rcx, [rsp + 0xa70]
call fcn.1401e03c8
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0xa70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
xor bl, bl
test eax, eax
je 0x140196e07
lea r8, str.SOFTWAREClassesInstallerDependenciesMicrosoft.VS.VC_RuntimeMinimumVSU_x86_v14_
mov edx, 0x104
lea rcx, [rsp + 0xa70]
call fcn.1401e03c8
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0xa70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
movzx ebx, cl
test cl, cl
je 0x140196e9d
mov word [rsp + 0x650], r13w
mov dword [rsp + 0xe8], r13d
mov dword [rsp + 0x110], 0x208
lea rax, [rsp + 0x110]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x650]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xe8]
xor r8d, r8d
lea rdx, [0x140234938]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140196e8f
mov edx, 0x104
lea rcx, [rsp + 0x440]
test bl, bl
lea r8, [rsp + 0x650]
jne 0x140196e8a
lea r8, [rsp + 0x652]
call fcn.1401e03c8
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x440]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140196eb0
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x1d0]
call fcn.140018360
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rax, qword [rsp + 0x1d0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009de10
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0x95
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b16b0
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x140197070
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019706a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140197db9
call fcn.1401a9a50
nop
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREClassesInstallerDependencies
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
jne 0x140197dbf
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x44], 3
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov word [rsp + 0x118], r13w
mov r8d, 7
lea rdx, str.0.0.0.0
lea rcx, [rsp + 0x118]
call fcn.140018360
nop
mov qword [rsp + 0x210], r13
mov qword [rsp + 0x220], r13
mov qword [rsp + 0x228], 7
mov word [rsp + 0x210], r13w
mov r8d, 7
lea rdx, str.0.0.0.0
lea rcx, [rsp + 0x210]
call fcn.140018360
nop
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x60]
call fcn.1400774f0
nop
mov rbx, qword [rsp + 0x140]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov rdi, qword [rbx]
lea rax, str.microsoft_visual_c
mov qword [rsp + 0x68], rax
mov rsi, qword [rsp + 0x60]
movabs rcx, 0x7ffffffffffffffe
mov qword [rsp + 0xd0], rdi
cmp rdi, rbx
je 0x1401978b3
lea r15, [rdi + 0x10]
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], r13
mov rbx, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 8
jb 0x1401971c1
mov r15, qword [r15]
cmp rbx, 8
jae 0x1401971e3
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0xf0], xmm0
mov r14d, 7
mov r12, qword [rsp + 0xf0]
jmp 0x14019722a
mov r14, rbx
or r14, 7
cmp r14, rcx
cmova r14, rcx
lea rdx, [r14 + 1]
lea rcx, [rsp + 0xf0]
call fcn.140023c30
mov r12, rax
mov qword [rsp + 0xf0], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1401cfe40
movabs rcx, 0x7ffffffffffffffe
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x150], r13
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r13
lea r15, [rsp + 0xf0]
cmp r14, 8
cmovae r15, r12
cmp rbx, 8
jae 0x140197284
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x150], xmm0
mov r14d, 7
jmp 0x1401972be
mov r14, rbx
or r14, 7
cmp r14, rcx
cmova r14, rcx
lea rdx, [r14 + 1]
lea rcx, [rsp + 0x150]
call fcn.140023c30
mov qword [rsp + 0x150], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1401cfe40
mov qword [rsp + 0x168], r14
mov qword [rsp + 0x160], rbx
lea rax, [rsp + 0x150]
mov qword [rsp + 0xe8], rax
lea r8, [rsp + 0x150]
cmp r14, 8
cmovae r8, qword [rsp + 0x150]
mov r9d, 0x2001f
mov rdx, rsi
lea rcx, [rsp + 0x110]
call fcn.14005d240
mov r15d, dword [rsp + 0x44]
or r15d, 4
mov dword [rsp + 0x44], r15d
lea rcx, [rsp + 0x150]
call fcn.1400272a0
nop
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9d, 2
lea r8, [0x14024bd20]
lea rdx, [0x14022ee70]
mov rbx, qword [rsp + 0x110]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov r14d, eax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x150], xmm1
mov qword [rsp + 0x160], r13
mov edx, dword [rsp + 0xe8]
shr rdx, 1
je 0x1401973a0
lea r8, [rsp + 0x42]
lea rcx, [rsp + 0x150]
call fcn.14003eb20
nop
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 2
lea r8, [0x14024bd20]
lea rdx, [0x14022ee70]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x140197df2
mov qword [rsp + 0x1b0], r13
mov qword [rsp + 0x1c0], r13
mov qword [rsp + 0x1c8], 7
mov word [rsp + 0x1b0], r13w
mov rdx, qword [rsp + 0x150]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140197420
lea rcx, [rsp + 0x1b0]
call fcn.140018360
or r15d, 8
mov dword [rsp + 0x44], r15d
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x14019749e
mov rax, qword [rsp + 0x160]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140197485
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140197e26
call fcn.1401a9a50
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], r13
lea r15, [rsp + 0x1b0]
mov rax, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1c0]
cmp rax, 8
jb 0x1401974cd
mov r15, qword [rsp + 0x1b0]
mov r14, r15
lea r13, [r15 + r12*2]
jmp 0x1401974e2
lea r13, [rsp + 0x1b0]
lea r13, [r13 + r12*2]
lea r14, [rsp + 0x1b0]
cmp r14, r13
je 0x14019750e
movzx ecx, word [r14]
call fcn.1401df768
mov word [r15], ax
add r14, 2
add r15, 2
mov rax, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1c0]
jmp 0x1401974e2
lea r11, [rsp + 0x1b0]
cmp rax, 8
setae byte [rsp + 0x42]
mov r14, qword [rsp + 0x1b0]
cmovae r11, r14
xor r13d, r13d
cmp r12, 0x14
jb 0x14019777a
lea r15, [r12 - 0x13]
lea r15, [r11 + r15*2]
mov rax, r11
nop dword [rax]
nop dword [rax + rax]
mov rcx, r15
sub rcx, rax
sar rcx, 1
mov rdx, r13
je 0x14019757a
cmp word [rax], 0x6d
je 0x140197577
cmp rcx, 1
je 0x14019757a
dec rcx
add rax, 2
cmp word [rax], 0x6d
jne 0x140197564
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14019777a
mov r9d, 0x14
lea rcx, str.microsoft_visual_c
movzx edx, word [rdx]
mov r8d, 0x6d
cmp dx, r8w
jb 0x1401975cc
mov r10, rax
sub r10, qword [rsp + 0x68]
cmp dx, r8w
ja 0x1401975cc
cmp r9, 1
je 0x1401975d5
dec r9
add rcx, 2
movzx edx, word [rcx + r10]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x1401975ae
add rax, 2
jmp 0x140197550
sub rax, r11
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14019777a
lea r11, [rsp + 0x1b0]
cmp byte [rsp + 0x42], r13b
cmovne r11, r14
cmp r12, 4
jb 0x14019777a
lea r14, [r11 - 6]
lea r14, [r14 + r12*2]
mov rax, r11
lea r15, str.2022
mov rcx, r14
sub rcx, rax
sar rcx, 1
mov rdx, r13
je 0x14019763c
cmp word [rax], 0x32
je 0x140197639
cmp rcx, 1
je 0x14019763c
dec rcx
add rax, 2
cmp word [rax], 0x32
jne 0x140197626
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14019777a
mov r9d, 4
mov rcx, r15
movzx edx, word [rdx]
mov r8d, 0x32
cmp dx, r8w
jb 0x140197688
mov r10, rax
sub r10, r15
cmp dx, r8w
ja 0x140197688
cmp r9, 1
je 0x14019768e
dec r9
add rcx, 2
movzx edx, word [rcx + r10]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14019766a
add rax, 2
jmp 0x140197612
sub rax, r11
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14019777a
xor r8d, r8d
lea rdx, [0x140262f20]
lea rcx, [rsp + 0x1b0]
call fcn.1400233f0
cmp rax, 0xffffffffffffffff
je 0x1401977a6
mov byte [rsp + 0x20], 1
lea r9, [0x140234938]
lea r8, [0x14022ee70]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x110]
call fcn.1400772f0
nop
lea r8, [rsp + 0x170]
cmp qword [rsp + 0x188], 8
setae r15b
mov rbx, qword [rsp + 0x170]
cmovae r8, rbx
lea rcx, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
cmovae rcx, qword [rsp + 0x118]
mov r14, qword [rsp + 0x180]
mov r9, r14
mov rdx, qword [rsp + 0x128]
call fcn.14002b9b0
cmp eax, 0xffffffff
jg 0x140197765
mov byte [rsp + 0x40], 1
lea rdx, [rsp + 0x170]
test r15b, r15b
cmovne rdx, rbx
mov r8, r14
lea rcx, [rsp + 0x118]
call fcn.140018360
nop
lea rcx, [rsp + 0x170]
call fcn.1400272a0
mov rbx, qword [rsp + 0x110]
lea rcx, [rsp + 0x1b0]
call fcn.1400272a0
nop
test rbx, rbx
je 0x140197797
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rbx, qword [rsp + 0x50]
mov r15, qword [rsp + 0x70]
jmp 0x14019789e
xor r8d, r8d
lea rdx, [0x140262f28]
lea rcx, [rsp + 0x1b0]
call fcn.1400233f0
cmp rax, 0xffffffffffffffff
je 0x14019777a
mov byte [rsp + 0x20], 1
lea r9, [0x140234938]
lea r8, [0x14022ee70]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x110]
call fcn.1400772f0
nop
lea r8, [rsp + 0x170]
cmp qword [rsp + 0x188], 8
setae r15b
mov rbx, qword [rsp + 0x170]
cmovae r8, rbx
lea rcx, [rsp + 0x210]
cmp qword [rsp + 0x228], 8
cmovae rcx, qword [rsp + 0x210]
mov r14, qword [rsp + 0x180]
mov r9, r14
mov rdx, qword [rsp + 0x220]
call fcn.14002b9b0
cmp eax, 0xffffffff
jg 0x140197869
mov byte [rsp + 0x41], 1
lea rdx, [rsp + 0x170]
test r15b, r15b
cmovne rdx, rbx
mov r8, r14
lea rcx, [rsp + 0x210]
call fcn.140018360
nop
jmp 0x140197765
lea rcx, [rsp + 0xf0]
call fcn.1400272a0
mov rdi, qword [rdi]
jmp 0x14019717c
lea rcx, [rsp + 0x140]
call fcn.140022320
cmp byte [rsp + 0x40], 0
je 0x140197953
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
setae dil
cmovae rdx, qword [rsp + 0x118]
lea rcx, [rsp + 0x1f0]
cmp qword [rsp + 0x208], 8
cmovae rcx, qword [rsp + 0x1f0]
mov rbx, qword [rsp + 0x200]
mov r8, rbx
mov r14, qword [rsp + 0x128]
cmp r14, rbx
cmovb r8, r14
call fcn.140028450
test eax, eax
je 0x14019792a
jns 0x140197953
jmp 0x14019792f
cmp rbx, r14
jae 0x140197953
lea rdx, [rsp + 0x118]
test dil, dil
cmovne rdx, qword [rsp + 0x118]
mov r8, r14
lea rcx, [rsp + 0x1f0]
call fcn.140018360
cmp byte [rsp + 0x41], 0
je 0x1401979e7
lea rdx, [rsp + 0x210]
cmp qword [rsp + 0x228], 8
setae dil
cmovae rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rcx, qword [rsp + 0x1d0]
mov rbx, qword [rsp + 0x1e0]
mov r8, rbx
mov r14, qword [rsp + 0x220]
cmp r14, rbx
cmovb r8, r14
call fcn.140028450
test eax, eax
je 0x1401979bd
jns 0x1401979e7
jmp 0x1401979c2
cmp rbx, r14
jae 0x1401979e7
lea rdx, [rsp + 0x210]
test dil, dil
cmovne rdx, qword [rsp + 0x210]
mov r8, r14
lea rcx, [rsp + 0x1d0]
call fcn.140018360
nop
lea rcx, [rsp + 0x210]
call fcn.1400272a0
nop
lea rcx, [rsp + 0x118]
call fcn.1400272a0
nop
test rsi, rsi
je 0x140197a12
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
jmp 0x140197a1c
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1f0]
cmp qword [rsp + 0x208], 8
cmovae rax, qword [rsp + 0x1f0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_64_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009de10
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0xc0
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b16b0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400272a0
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rax, qword [rsp + 0x1d0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_86_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009de10
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0xc1
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b16b0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400272a0
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x170]
call fcn.140018e70
nop
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x190]
call fcn.140018e70
nop
lea rcx, [r15 + 0x20]
lea rdx, [rsp + 0x190]
call fcn.140023a40
lea rdx, [rsp + 0x170]
mov rcx, r15
call fcn.140023a40
lea rcx, [rsp + 0x190]
call fcn.1400272a0
lea rcx, [rsp + 0x170]
call fcn.1400272a0
nop
lea rcx, [rsp + 0x1d0]
call fcn.1400272a0
nop
lea rcx, [rsp + 0x1f0]
call fcn.1400272a0
mov rax, r15
mov rcx, qword [rsp + 0xc80]
xor rcx, rsp
call fcn.1401a9a30
lea r11, [rsp + 0xcb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1401e3dbc
int3
call fcn.1401e3dbc
nop
call fcn.140015e70
mov r8, rax
lea r9, str.Unable_to_open_registry_key
mov edx, ebx
lea rcx, [rsp + 0x80]
call fcn.140046020
lea rdx, [0x1402ba948]
lea rcx, [rsp + 0x80]
call fcn.1401cfc8c
nop
call fcn.140015e70
mov r8, rax
lea r9, str.Unable_to_get_registry_value
mov edx, r14d
lea rcx, [rsp + 0xa8]
call fcn.140046020
lea rdx, [0x1402ba948]
lea rcx, [rsp + 0xa8]
call fcn.1401cfc8c
nop
call fcn.1401e3dbc
int3