Function at 0x140009300
Capabilities:
Query or enumerate registry value

Disassembly:
sub rsp, 0x788
mov rax, qword [0x1400770b8]
xor rax, rsp
mov qword [rsp + 0x770], rax
mov byte [0x1400787d8], 0
mov edx, 1
lea rcx, [rsp + 0x110]
call fcn.140010ef0
nop
lea rcx, [rsp + 0x3b0]
call fcn.140010ce0
nop
lea rdx, [rsp + 0x3b0]
mov ecx, 0x26
call fcn.140025f20
lea rax, [rsp + 0x120]
lea rdx, [rsp + 0x3b0]
mov rcx, rax
call fcn.14000bb30
lea rax, [rsp + 0x230]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x110]
call fcn.140020780
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x50]
call fcn.14001b210
mov rdx, rax
mov rcx, qword [rsp + 0x58]
call fcn.140010a10
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x410]
call fcn.1400222c0
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x70]
mov rcx, rax
call fcn.14000bb30
nop
lea rcx, [rsp + 0x410]
call fcn.140012c60
nop
lea rcx, [rsp + 0x430]
call fcn.140012c60
lea rax, [rsp + 0x120]
lea rdx, str.AMD_CIM
mov rcx, rax
call fcn.14000b720
lea rax, [rsp + 0x210]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x110]
call fcn.140020780
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x80]
call fcn.14001b210
mov rdx, rax
mov rcx, qword [rsp + 0x88]
call fcn.140010a10
mov qword [rsp + 0x90], rax
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x450]
call fcn.1400222c0
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0xa0]
mov rcx, rax
call fcn.14000bb30
nop
lea rcx, [rsp + 0x450]
call fcn.140012c60
nop
lea rcx, [rsp + 0x4f0]
call fcn.140012c60
lea rax, [rsp + 0x120]
lea rdx, str.LogInstaller.log
mov rcx, rax
call fcn.14000b720
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x110]
call fcn.140020780
nop
lea rdx, [0x14005b7c4]
lea rcx, [rsp + 0x3f0]
call fcn.140010a10
nop
lea rdx, [0x14005b7ec]
lea rcx, [rsp + 0x3d0]
call fcn.140010a10
nop
lea r8, [rsp + 0x3f0]
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x390]
call fcn.14002d4c0
nop
lea rcx, [rsp + 0x3d0]
call fcn.140012c60
nop
lea rcx, [rsp + 0x3f0]
call fcn.140012c60
lea rdx, [0x14005b82c]
lea rcx, [0x14005b988]
call fcn.140009030
lea rcx, [rsp + 0x390]
call fcn.14001b210
mov rdx, rax
lea rcx, [0x14005b998]
call fcn.140009030
lea rdx, [0x14005b854]
lea rcx, [0x14005b9a8]
call fcn.140009030
lea rdx, [0x14005b9b8]
lea rcx, [0x14005b9c8]
call fcn.140009030
nop
lea rcx, [rsp + 0x390]
call fcn.140012c60
nop
lea rcx, [rsp + 0x3b0]
call fcn.140012c60
nop
lea rcx, [rsp + 0x110]
call fcn.140014940
mov eax, 2
imul rax, rax, 0
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0x208
jae 0x140009608
jmp 0x14000960d
call fcn.140032d94
xor eax, eax
mov rcx, qword [rsp + 0x38]
mov word [rsp + rcx + 0x560], ax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREATI_TechnologiesLog
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14000964c
jmp 0x1400098c7
mov dword [rsp + 0x34], 0
mov dword [rsp + 0x30], 0x208
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x560]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.File
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000972b
lea rax, [rsp + 0x250]
mov qword [rsp + 0xa8], rax
lea rdx, [rsp + 0x560]
mov rcx, qword [rsp + 0xa8]
call fcn.140010a10
mov qword [rsp + 0xb0], rax
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0x510]
call fcn.14002e050
nop
mov byte [0x1400787d8], 1
lea rdx, [rsp + 0x470]
lea rcx, [rsp + 0x510]
call fcn.14002da20
mov qword [rsp + 0xb8], rax
mov rdx, qword [rsp + 0xb8]
lea rcx, [0x1400786b0]
call fcn.140013490
lea rcx, [rsp + 0x470]
call fcn.140012c60
nop
lea rcx, [rsp + 0x510]
call fcn.14002e0c0
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movzx eax, byte [0x1400787d8]
test eax, eax
jne 0x140009746
jmp 0x1400098c7
mov edx, 1
lea rcx, [rsp + 0x290]
call fcn.140010ef0
nop
lea rax, [rsp + 0x270]
mov qword [rsp + 0xc0], rax
lea rcx, [0x1400786b0]
call fcn.14001b210
mov rdx, rax
mov rcx, qword [rsp + 0xc0]
call fcn.140010a10
mov qword [rsp + 0xc8], rax
mov rdx, qword [rsp + 0xc8]
lea rcx, [rsp + 0x490]
call fcn.1400222c0
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0x2a0]
lea rdx, [0x1400786b0]
mov rcx, rax
call fcn.14000bb30
mov qword [rsp + 0xe8], rax
mov rdx, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
call fcn.14000bb30
lea rdx, [0x14005ba28]
mov rcx, rax
call fcn.14000b720
nop
lea rcx, [rsp + 0x490]
call fcn.140012c60
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x290]
call fcn.140020780
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xf8], rax
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x4b0]
call fcn.140021620
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x108]
call fcn.14001b1f0
mov r9d, 0x40
mov r8d, 0xa
mov rdx, rax
lea rcx, [0x1400786d0]
call fcn.14001ecc0
nop
lea rcx, [rsp + 0x4b0]
call fcn.140012c30
nop
lea rcx, [rsp + 0x4d0]
call fcn.140012c60
nop
lea rcx, [rsp + 0x290]
call fcn.140014940
mov rcx, qword [rsp + 0x770]
xor rcx, rsp
call fcn.140033040
add rsp, 0x788
ret