Function at 0x1400043d0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x1400b8010]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rdi, rcx
mov qword [rbp + 0x10], rcx
xor esi, esi
mov dword [rbp - 0x18], esi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], rax
lea rax, [rcx + 0x10]
mov qword [rax], rsi
mov byte [rcx + 8], sil
and dword [rcx + 8], 0xfffffeff
lea rcx, [rbp + 0x18]
cmp rax, rcx
je 0x140004432
mov qword [rax], rsi
mov qword [rdi + 0x18], rsi
mov qword [rdi + 0x20], rsi
mov dword [rbp - 0x18], 1
lea rax, vtable.Windows::RegistryHelper.0
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x38], 0x100
mov qword [rbp + 0x18], rsi
mov qword [rbp - 0x10], rsi
mov qword [rbp], rsi
mov qword [rbp + 8], 7
mov word [rbp - 0x10], si
mov r8d, 0x2d
lea rdx, str.SOFTWARESophosEndpointDefenseDynamicUpdate
lea rcx, [rbp - 0x10]
call fcn.14000f8e0
nop
mov dword [rsp + 0x20], 0x20019
lea r9, [rbp - 0x10]
mov r8, 0xffffffff80000002
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x30]
call fcn.14001ba60
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x1400044e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000552f
call fcn.14005a750
mov qword [rbp], rsi
mov qword [rbp + 8], 7
mov word [rbp - 0x10], si
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 0xb
lea r14, [0x1400a0748]
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
cmp qword [rsp + 0x50], 0
je 0x140005535
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
je 0x140004573
cmp eax, 2
jne 0x14000556c
xor bl, bl
jmp 0x140004575
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1400045b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400055a3
call fcn.14005a750
test bl, bl
je 0x14000478e
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 0xb
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x40]
mov rdx, qword [rbp + 0x18]
lea rcx, [rbp - 0x80]
call fcn.140003170
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140003b10
mov rbx, rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0xb
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r9, qword [rax + 0x18]
cmp r9, 0x10
jb 0x140004647
mov rcx, qword [rax]
mov r8, qword [rax + 0x10]
add r8, rcx
cmp r9, 0x10
jb 0x140004657
mov rdx, qword [rax]
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
mov rcx, rbx
call fcn.14004b5b0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1400046a8
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400055a9
call fcn.14005a750
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov edx, dword [rbp - 0x38]
movzx ecx, dl
sub ecx, 4
je 0x140004707
sub ecx, 2
je 0x1400046d0
cmp ecx, 1
jne 0x140004718
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x140004718
mov r8, qword [rbx]
mov r8, qword [r8 + 8]
mov rdx, rbx
mov rcx, rbx
call fcn.14004d7e0
mov edx, 0x58
mov rcx, qword [rbx]
call fcn.14005a750
mov edx, 0x10
mov rcx, rbx
call fcn.14005a750
jmp 0x140004718
shr edx, 8
test dl, 1
je 0x140004718
mov rcx, qword [rbp - 0x40]
call fcn.140067da0
mov qword [rbp - 0x40], rsi
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x14000474c
lea r9, [fcn.14000f590]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
mov rcx, rbx
call fcn.14005af58
nop
mov edx, 0x60
mov rcx, rbx
call fcn.14005a750
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14000478e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004789
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400055af
call fcn.14005a750
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 0x10
lea r14, str.transitionTimeMs
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
cmp qword [rsp + 0x50], 0
je 0x1400055b5
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
je 0x14000480b
cmp eax, 2
jne 0x1400055ec
xor bl, bl
jmp 0x14000480d
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14000484f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000484a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005623
call fcn.14005a750
test bl, bl
je 0x140004a51
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 0x10
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x40]
call fcn.140003440
cmp byte [rax + 8], 0
je 0x1400048a1
mov rdx, qword [rax]
jmp 0x1400048a4
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.140002410
nop
mov byte [rbp - 0x38], 4
or dword [rbp - 0x38], 0x100
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rsi
mov edx, dword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x1400048d2
mov rax, qword [rax]
mov rcx, rax
call fcn.14004ac50
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0x10
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r8, qword [rax + 0x18]
cmp r8, 0x10
jb 0x140004918
mov rcx, qword [rax]
mov r9, qword [rax + 0x10]
add r9, rcx
cmp r8, 0x10
jb 0x140004928
mov rdx, qword [rax]
mov r8, r9
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b5b0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14000497b
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004976
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005629
call fcn.14005a750
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
lea rcx, [rbp - 0x40]
call fcn.14004c780
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x1400049c4
lea r9, [fcn.14000f590]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
mov rcx, rbx
call fcn.14005af58
nop
mov edx, 0x60
mov rcx, rbx
call fcn.14005a750
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1400049ff
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400049fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000562f
call fcn.14005a750
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140004a51
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005635
call fcn.14005a750
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 0xa
lea r14, str.prepTimeMs
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
cmp qword [rsp + 0x50], 0
je 0x14000563b
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
je 0x140004ace
cmp eax, 2
jne 0x140005672
xor bl, bl
jmp 0x140004ad0
mov bl, 1
mov r8, qword [rsp + 0x58]
cmp r8, 8
jb 0x140004aed
inc r8
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.14000fbe0
test bl, bl
je 0x140004c35
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 0xa
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x40]
call fcn.140003440
cmp byte [rax + 8], 0
je 0x140004b3f
mov rdx, qword [rax]
jmp 0x140004b42
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.140002410
mov rbx, rax
mov qword [rbp - 0x30], rsi
mov r8b, 1
mov edx, 4
lea rcx, [rbp - 0x40]
call fcn.14004c570
mov edx, dword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x140004b70
mov rbx, qword [rbx]
mov rcx, rbx
call fcn.14004ac50
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0xa
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r8, qword [rax + 0x18]
cmp r8, 0x10
jb 0x140004bb6
mov rcx, qword [rax]
mov r9, qword [rax + 0x10]
add r9, rcx
cmp r8, 0x10
jb 0x140004bc6
mov rdx, qword [rax]
mov r8, r9
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b5b0
nop
lea rcx, [rbp - 0x80]
call fcn.14000f590
nop
lea rcx, [rbp - 0x40]
call fcn.14004c780
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x140004c21
lea r9, [fcn.14000f590]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
mov rcx, rbx
call fcn.14005af58
nop
mov edx, 0x60
mov rcx, rbx
call fcn.14005a750
nop
lea rcx, [rbp - 0x60]
call fcn.14000f590
nop
lea rcx, [rsp + 0x60]
call fcn.140002590
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 0x16
lea r14, str.outstandingAsyncEvents
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
cmp qword [rsp + 0x50], 0
je 0x1400056a9
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
je 0x140004cb2
cmp eax, 2
jne 0x1400056e0
xor bl, bl
jmp 0x140004cb4
mov bl, 1
mov r8, qword [rsp + 0x58]
cmp r8, 8
jb 0x140004cd1
inc r8
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.14000fbe0
test bl, bl
je 0x140004e19
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 0x16
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x40]
call fcn.140003440
cmp byte [rax + 8], 0
je 0x140004d23
mov rdx, qword [rax]
jmp 0x140004d26
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.140002410
mov rbx, rax
mov qword [rbp - 0x30], rsi
mov r8b, 1
mov edx, 4
lea rcx, [rbp - 0x40]
call fcn.14004c570
mov edx, dword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x140004d54
mov rbx, qword [rbx]
mov rcx, rbx
call fcn.14004ac50
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0x16
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r8, qword [rax + 0x18]
cmp r8, 0x10
jb 0x140004d9a
mov rcx, qword [rax]
mov r9, qword [rax + 0x10]
add r9, rcx
cmp r8, 0x10
jb 0x140004daa
mov rdx, qword [rax]
mov r8, r9
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b5b0
nop
lea rcx, [rbp - 0x80]
call fcn.14000f590
nop
lea rcx, [rbp - 0x40]
call fcn.14004c780
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x140004e05
lea r9, [fcn.14000f590]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
mov rcx, rbx
call fcn.14005af58
nop
mov edx, 0x60
mov rcx, rbx
call fcn.14005a750
nop
lea rcx, [rbp - 0x60]
call fcn.14000f590
nop
lea rcx, [rsp + 0x60]
call fcn.140002590
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 0x12
lea r14, str.numberOfEvaluators
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
cmp qword [rsp + 0x50], 0
je 0x140005717
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
je 0x140004e96
cmp eax, 2
jne 0x14000574e
xor bl, bl
jmp 0x140004e98
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.140002590
test bl, bl
je 0x140004fea
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 0x12
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x40]
call fcn.140003440
cmp byte [rax + 8], 0
je 0x140004ef4
mov rdx, qword [rax]
jmp 0x140004ef7
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.140002410
mov rbx, rax
mov qword [rbp - 0x30], rsi
mov r8b, 1
mov edx, 4
lea rcx, [rbp - 0x40]
call fcn.14004c570
mov edx, dword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x140004f25
mov rbx, qword [rbx]
mov rcx, rbx
call fcn.14004ac50
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0x12
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r8, qword [rax + 0x18]
cmp r8, 0x10
jb 0x140004f6b
mov rcx, qword [rax]
mov r9, qword [rax + 0x10]
add r9, rcx
cmp r8, 0x10
jb 0x140004f7b
mov rdx, qword [rax]
mov r8, r9
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b5b0
nop
lea rcx, [rbp - 0x80]
call fcn.14000f590
nop
lea rcx, [rbp - 0x40]
call fcn.14004c780
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x140004fd6
lea r9, [fcn.14000f590]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
mov rcx, rbx
call fcn.14005af58
nop
mov edx, 0x60
mov rcx, rbx
call fcn.14005a750
nop
lea rcx, [rbp - 0x60]
call fcn.14000f590
nop
lea rcx, [rsp + 0x60]
call fcn.140002590
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 9
lea r14, str.lastError
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
cmp qword [rsp + 0x50], 0
je 0x140005785
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
je 0x140005067
cmp eax, 2
jne 0x1400057bc
xor bl, bl
jmp 0x140005069
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.140002590
test bl, bl
je 0x140005199
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 9
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
mov rdx, qword [rbp + 0x18]
lea rcx, [rsp + 0x40]
call fcn.140003170
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x1400050c9
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.140059280
nop
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b3e0
nop
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 9
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r9, qword [rax + 0x18]
cmp r9, 0x10
jb 0x140005134
mov rcx, qword [rax]
mov r8, qword [rax + 0x10]
add r8, rcx
cmp r9, 0x10
jb 0x140005144
mov rdx, qword [rax]
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b5b0
nop
lea rcx, [rbp - 0x80]
call fcn.14000f590
nop
lea rcx, [rbp - 0x40]
call fcn.14004c780
mov qword [rbp - 0x40], rsi
lea rcx, [rbp - 0x30]
call fcn.14004b2d0
nop
lea rcx, [rbp - 0x60]
call fcn.14000f590
nop
lea rcx, [rsp + 0x40]
call fcn.140002590
nop
lea rcx, [rsp + 0x60]
call fcn.140002590
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], si
mov r8d, 0x11
lea r14, str.lastFailedVersion
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.14000f8e0
nop
cmp qword [rsp + 0x50], 0
je 0x1400057f3
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
je 0x140005216
cmp eax, 2
jne 0x1400054f8
xor bl, bl
jmp 0x140005218
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.140002590
test bl, bl
je 0x140005348
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 0x11
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
mov rdx, qword [rbp + 0x18]
lea rcx, [rsp + 0x40]
call fcn.140003170
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140005278
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.140059280
nop
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b3e0
nop
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0x11
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r9, qword [rax + 0x18]
cmp r9, 0x10
jb 0x1400052e3
mov rcx, qword [rax]
mov r8, qword [rax + 0x10]
add r8, rcx
cmp r9, 0x10
jb 0x1400052f3
mov rdx, qword [rax]
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b5b0
nop
lea rcx, [rbp - 0x80]
call fcn.14000f590
nop
lea rcx, [rbp - 0x40]
call fcn.14004c780
mov qword [rbp - 0x40], rsi
lea rcx, [rbp - 0x30]
call fcn.14004b2d0
nop
lea rcx, [rbp - 0x60]
call fcn.14000f590
nop
lea rcx, [rsp + 0x40]
call fcn.140002590
nop
lea rcx, [rsp + 0x60]
call fcn.140002590
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 0x11
lea r14, str.lastLocalRepError
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
mov rdx, qword [rbp + 0x18]
lea rcx, [rsp + 0x30]
call fcn.14001b980
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140002590
test bl, bl
je 0x1400054c2
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
mov r8d, 0x11
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.14000f8e0
nop
lea r8, [rsp + 0x60]
mov rdx, qword [rbp + 0x18]
lea rcx, [rsp + 0x40]
call fcn.140003170
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x1400053f1
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.140059280
nop
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b3e0
nop
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0x11
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140059280
mov rdx, rax
mov rcx, rax
mov r9, qword [rax + 0x18]
cmp r9, 0x10
jb 0x14000545c
mov rcx, qword [rax]
mov r8, qword [rax + 0x10]
add r8, rcx
cmp r9, 0x10
jb 0x14000546c
mov rdx, qword [rax]
mov rcx, rdi
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004b5b0
nop
lea rcx, [rbp - 0x80]
call fcn.14000f590
nop
lea rcx, [rbp - 0x40]
call fcn.14004c780
mov qword [rbp - 0x40], rsi
lea rcx, [rbp - 0x30]
call fcn.14004b2d0
nop
lea rcx, [rbp - 0x60]
call fcn.14000f590
nop
lea rcx, [rsp + 0x40]
call fcn.140002590
nop
lea rcx, [rsp + 0x60]
call fcn.140002590
nop
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x1400054d1
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, rdi
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.14005a730
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
call fcn.14006538c
nop
lea rdx, str.Invalid_registry_value_name
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
call fcn.14006538c
nop
call fcn.14006538c
nop
call fcn.14006538c
nop
lea rdx, str.Invalid_registry_value_name
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
call fcn.14006538c
nop
call fcn.14006538c
nop
call fcn.14006538c
nop
call fcn.14006538c
nop
lea rdx, str.Invalid_registry_value_name
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.Invalid_registry_value_name
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.Invalid_registry_value_name
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.Invalid_registry_value_name
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
nop
lea rdx, str.Invalid_registry_value_name
lea rcx, [rbp - 0x80]
call fcn.140002f20
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14001b460
lea rdx, [0x1400b6340]
lea rcx, [rbp - 0x60]
call fcn.14005f880
int3