Function at 0x14000d670
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x1b8
mov qword [rsp + 0x180], 0xfffffffffffffffe
mov dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x1c8]
mov dword [rax + 0x68], 0
mov rax, qword [rsp + 0x1c8]
mov dword [rax + 0x70], 0
mov rax, qword [rsp + 0x1c0]
cmp dword [rax + 0x178], 1
jne 0x14000d6e3
mov rax, qword [rsp + 0x1c8]
add rax, 0x80
lea rdx, [0x140061a88]
mov rcx, rax
call fcn.140008610
jmp 0x14000d741
mov rax, qword [rsp + 0x1c8]
add rax, 0x80
lea rdx, [0x140061a78]
mov rcx, rax
call fcn.140008610
mov rax, qword [rsp + 0x1c0]
add rax, 0x488
lea rdx, [0x1400613c8]
mov rcx, rax
call fcn.14000ebb0
movzx eax, al
test eax, eax
je 0x14000d741
mov rax, qword [rsp + 0x1c8]
add rax, 0x80
lea rdx, [0x140061a74]
mov rcx, rax
call fcn.140007280
mov rax, qword [rsp + 0x1c8]
add rax, 0x98
mov r9, rax
mov r8, qword [0x14005f4f0]
lea rdx, str.SOFTWARESiemensShared_ToolsCompSetup
mov rcx, 0xffffffff80000002
call fcn.1400055b0
mov rax, qword [rsp + 0x1c8]
mov r9, qword [rax + 0x98]
lea r8, str.Clientname_from_registry:__s
mov edx, 0xa
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov rax, qword [rsp + 0x1c8]
add rax, 0x98
mov rcx, rax
call fcn.140007c90
movzx eax, al
test eax, eax
je 0x14000dc71
mov rax, qword [rsp + 0x1c0]
cmp dword [rax + 0x184], 1
jne 0x14000d7f6
mov rax, qword [rsp + 0x1c8]
add rax, 0x1a0
lea rdx, str._ADSCOMMANDLINE__FORCEINTERNAL__NODIALOG
mov rcx, rax
call fcn.140007280
mov rax, qword [rsp + 0x1c8]
mov dword [rax + 0x68], 1
jmp 0x14000dc1f
mov rax, qword [rsp + 0x1c0]
cmp dword [rax + 0x180], 1
jne 0x14000d9b9
lea rdx, str.__nur_zum_Test
lea rcx, [rsp + 0x118]
call fcn.140008540
nop
lea rcx, [rsp + 0x40]
call fcn.14001f590
nop
lea r8, [rsp + 0x40]
xor edx, edx
mov rcx, qword [rsp + 0x1c8]
call fcn.140017b40
cmp eax, 2
jne 0x14000d8dd
lea rax, [rsp + 0x160]
mov qword [rsp + 0x168], rax
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x168]
call fcn.140008510
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x120]
mov r8, qword [rsp + 0x188]
lea rdx, [rsp + 0x114]
mov rcx, qword [rsp + 0x1c8]
call fcn.140013450
cmp dword [rsp + 0x114], 1
jb 0x14000d8dd
mov rax, qword [rsp + 0x1c8]
add rax, 0x1a0
lea rdx, str._ADSCOMMANDLINE__UPDATE__NODIALOG
mov rcx, rax
call fcn.140007280
mov rax, qword [rsp + 0x1c8]
mov dword [rax + 0x68], 1
mov rax, qword [rsp + 0x1c8]
cmp dword [rax + 0x68], 0
jne 0x14000d99c
lea rcx, [rsp + 0x128]
call fcn.1400084e0
nop
lea rdx, str._Internal_mode_activated__Internal_messages_only_in_English:__n_n
lea rcx, [rsp + 0x128]
call fcn.140008610
lea rdx, str.Update_mode_not_possible___Component_not_installed_for_a_regular_client._n
lea rcx, [rsp + 0x128]
call fcn.140007280
lea rdx, str.Please_use_correct_input_parameters._n
lea rcx, [rsp + 0x128]
call fcn.140007280
lea rcx, [rsp + 0x128]
call fcn.140008670
mov r9d, 0x30
lea r8, [0x140060f10]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, qword [rsp + 0x1c0]
add rax, 0x1f8
lea rdx, [0x1400601d4]
mov rcx, rax
call fcn.1400146f0
mov edx, 0xfffffc0e
mov rcx, qword [rsp + 0x1c0]
call fcn.14000e310
nop
lea rcx, [rsp + 0x128]
call fcn.1400085c0
nop
lea rcx, [rsp + 0x40]
call fcn.14001f6c0
nop
lea rcx, [rsp + 0x118]
call fcn.1400085c0
jmp 0x14000dc1f
lea rcx, [rsp + 0x148]
call fcn.1400084e0
nop
lea rcx, [rsp + 0x138]
call fcn.1400084e0
nop
lea rax, [rsp + 0x140]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rdx, qword [str.SoftwareSiemensShared_Tools]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000dc04
mov dword [rsp + 0x130], 0x800
mov edx, dword [rsp + 0x130]
lea rcx, [rsp + 0x138]
call fcn.1400086a0
lea rcx, [rsp + 0x130]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x150]
xor r8d, r8d
lea rdx, str.InternalMode
mov rcx, qword [rsp + 0x140]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000dbea
mov edx, 0xffffffff
lea rcx, [rsp + 0x138]
call fcn.140008700
lea rcx, [rsp + 0x138]
call fcn.1400086e0
test eax, eax
jle 0x14000dbe8
lea r8, [rsp + 0x138]
lea rdx, str._ADSCOMMANDLINE_
lea rcx, [rsp + 0x170]
call fcn.140007ae0
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x198], rax
lea r8, [0x1400617b0]
mov rdx, qword [rsp + 0x198]
lea rcx, [rsp + 0x178]
call fcn.140007a00
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x1c8]
add rax, 0x1a0
mov rdx, qword [rsp + 0x1a8]
mov rcx, rax
call fcn.14000eab0
nop
lea rcx, [rsp + 0x178]
call fcn.1400085c0
nop
lea rcx, [rsp + 0x170]
call fcn.1400085c0
mov rax, qword [rsp + 0x1c8]
add rax, 0x1a0
mov edx, 0xffffffff
mov rcx, rax
call fcn.140008700
mov rax, qword [rsp + 0x1c8]
add rax, 0x1a0
mov rcx, rax
call fcn.1400075b0
mov rax, qword [rsp + 0x1c8]
add rax, 0x1a0
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.140008510
xor r8d, r8d
lea rdx, str._FORCEINTERNAL
lea rcx, [rsp + 0x158]
call fcn.140007490
cmp eax, 0xffffffff
jg 0x14000dbcc
xor r8d, r8d
lea rdx, str._UPDATE
lea rcx, [rsp + 0x158]
call fcn.140007490
cmp eax, 0xffffffff
jg 0x14000dbcc
xor r8d, r8d
lea rdx, str._AUTO
lea rcx, [rsp + 0x158]
call fcn.140007490
cmp eax, 0xffffffff
jle 0x14000dbdb
mov rax, qword [rsp + 0x1c8]
mov dword [rax + 0x68], 1
lea rcx, [rsp + 0x158]
call fcn.1400085c0
jmp 0x14000dbf5
mov eax, dword [rsp + 0x30]
or eax, 0xfffffffe
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x140]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x138]
call fcn.1400085c0
nop
lea rcx, [rsp + 0x148]
call fcn.1400085c0
mov rax, qword [rsp + 0x1c8]
mov r9, qword [rax + 0x1a0]
lea r8, str.Commandline_until_now:__s
mov edx, 0xa
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov rax, qword [rsp + 0x1c8]
cmp dword [rax + 0x68], 0
je 0x14000dc71
mov rax, qword [rsp + 0x1c8]
add rax, 0x98
lea rdx, str.__INTERNAL_CLIENT
mov rcx, rax
call fcn.140008610
mov eax, dword [rsp + 0x30]
add rsp, 0x1b8
ret