Function at 0x1400f8a70
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push r13
push r14
sub rsp, 0x8c0
mov rax, qword [0x14049f3c0]
xor rax, rsp
mov qword [rsp + 0x8a0], rax
mov r14, qword [rsp + 0x910]
mov r13d, r9d
mov qword [rsp + 0x50], rcx
mov rbp, r8
mov dword [rsp + 0x58], 0x800
mov rax, rdx
mov rsi, rcx
mov ebx, 0xc000000d
test r8, r8
je 0x1400f8bfd
test r14, r14
je 0x1400f8bfd
lea rcx, [rsp + 0x60]
mov qword [r11 + 0x20], rdi
mov qword [rsp + 0x20], rcx
mov r9d, 0x20019
mov rcx, rax
mov qword [r11 - 0x38], r15
xor r8d, r8d
mov qword [r14], 0
mov rdx, rsi
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
je 0x1400f8b50
call fcn.14001e910
mov dword [rsp + 0x40], edi
lea rcx, str.Failed_to_open__ws__x
mov qword [rsp + 0x38], rsi
lea r15, str.MbCommonSigVerify
mov qword [rsp + 0x30], rcx
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
mov r10, qword [rax]
lea rdx, str.FindCertBy
mov qword [rsp + 0x28], r15
mov r9d, 0x5cb
mov rcx, rax
mov dword [rsp + 0x20], 5
call qword [r10 + 0x20]
jmp 0x1400f8bed
mov rcx, qword [rsp + 0x60]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rdx, str.Blob
lea rax, [rsp + 0xa0]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400f8be2
mov r9d, dword [rsp + 0x58]
lea rax, [rsp + 0xa0]
xor r8d, r8d
mov qword [rsp + 0x8b8], r12
nop dword [rax + rax]
cmp dword [rax], 0x20
je 0x1400f8c1e
mov ecx, dword [rax + 8]
lea rdx, [rsp + 0xa0]
add rax, 0xc
add rdx, r9
add rax, rcx
cmp rax, rdx
ja 0x1400f8bda
lea rcx, [rsp + 0xa0]
cmp rax, rcx
jb 0x1400f8bda
inc r8d
cmp r8d, 0xf
jl 0x1400f8ba0
mov ebx, 0xc000000d
mov r12, qword [rsp + 0x8b8]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r15, qword [rsp + 0x8b0]
mov rdi, qword [rsp + 0x908]
mov eax, ebx
mov rcx, qword [rsp + 0x8a0]
xor rcx, rsp
call fcn.1402ba9b0
add rsp, 0x8c0
pop r14
pop r13
pop rsi
pop rbp
pop rbx
ret
mov ebx, dword [rax + 8]
lea r12, [rax + 0xc]
test ebx, ebx
je 0x1400f8bd5
lea rax, [rsp + 0xa0]
cmp r12, rax
jb 0x1400f8bd5
sub r9d, r12d
lea eax, [rsp + 0xa0]
add eax, r9d
cmp ebx, eax
ja 0x1400f8bd5
mov ecx, 0x80
call fcn.1402da4d8
mov rsi, rax
test rax, rax
je 0x1400f8f35
xorps xmm0, xmm0
mov ecx, 0x568
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
call fcn.1402da4d8
mov rdi, rax
test rax, rax
je 0x1400f8f23
call fcn.14001e910
mov qword [rsp + 0x38], rdi
lea rcx, str.Base_Certificate__p
mov qword [rsp + 0x30], rcx
lea r15, str.MbCommonSigVerify
mov qword [rsp + 0x28], r15
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
mov r10, qword [rax]
lea rdx, str.FindCertBy
mov r9d, 0x5f5
mov dword [rsp + 0x20], 5
mov rcx, rax
call qword [r10 + 0x20]
xorps xmm0, xmm0
xor edx, edx
mov r8d, 0x568
mov rcx, rdi
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rsp + 0x88], xmm0
call fcn.14030b3a0
lea rax, [rsp + 0x68]
mov dword [rsi + 0xc], ebx
mov qword [rsi + 0x40], rax
lea rdx, [0x1400fe380]
xor eax, eax
mov qword [rsi], r12
mov rcx, rsi
mov qword [rsi + 0x68], rax
mov qword [rsi + 0x70], rax
mov qword [rsi + 0x78], rax
mov dword [rsi + 8], ebx
mov qword [rsi + 0x20], rdi
call fcn.1400fbec0
mov ebx, eax
call fcn.14001e910
mov rcx, qword [rsp + 0x50]
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
mov dword [rsp + 0x40], ebx
lea rdx, str.FindCertBy
mov qword [rsp + 0x38], rcx
mov r9d, 0x602
mov r10, qword [rax]
lea rcx, str.Parsed__ws____x
mov qword [rsp + 0x30], rcx
mov rcx, rax
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 5
call qword [r10 + 0x20]
test ebx, ebx
jne 0x1400f8ee7
cmp r13d, 1
jne 0x1400f8df6
lea rdx, [rbp + 0x288]
lea rcx, [rdi + 0x2b8]
call fcn.1400fb8e0
test al, al
je 0x1400f8ee7
call fcn.14001e910
lea rcx, str.Found_Cert__
mov r9d, 0x60a
mov r10, qword [rax]
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
mov qword [rsp + 0x30], rcx
lea rdx, str.FindCertBy
mov qword [rsp + 0x28], r15
mov rcx, rax
mov dword [rsp + 0x20], 3
call qword [r10 + 0x20]
mov rcx, rsi
mov qword [r14], rdi
call fcn.1402cab34
jmp 0x1400f8bda
cmp r13d, 3
jne 0x1400f8e2b
lea rdx, [rbp + 0x288]
lea rcx, [rdi + 0x2b8]
call fcn.1400fb8e0
test al, al
je 0x1400f8ee7
call fcn.14001e910
lea rcx, str.Found_intermediate_Cert__
mov r9d, 0x616
jmp 0x1400f8dbc
cmp r13d, 2
jne 0x1400f8eec
cmp word [rbp + 0x250], 3
jb 0x1400f8e9e
call fcn.14001e910
movzx ecx, byte [rdi + 0x254]
mov r9d, 0x625
movzx edx, byte [rdi + 0x253]
movzx r8d, byte [rdi + 0x252]
mov r10, qword [rax]
mov dword [rsp + 0x48], ecx
lea rcx, str.Looking_for_Serial:__2.2x_2.2x_2.2x
mov dword [rsp + 0x40], edx
lea rdx, str.FindCertBy
mov dword [rsp + 0x38], r8d
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
mov qword [rsp + 0x30], rcx
mov rcx, rax
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 5
call qword [r10 + 0x20]
movzx r12d, word [rbp + 0x250]
cmp word [rdi + 0x250], r12w
jne 0x1400f8ee7
mov r8d, r12d
lea rdx, [rbp + 0x252]
lea rcx, [rdi + 0x252]
call fcn.14030b2a0
test eax, eax
je 0x1400f8ed0
test r12w, r12w
jne 0x1400f8ee7
call fcn.14001e910
lea rcx, str.Found_Cert_by_serial__
mov r9d, 0x62c
jmp 0x1400f8dbc
mov ebx, 0xc000000d
cmp qword [r14], rdi
je 0x1400f8f0a
test ebx, ebx
jne 0x1400f8f0e
mov rcx, rdi
call fcn.1400fbc40
mov rcx, rsi
call fcn.1402cab34
jmp 0x1400f8bda
test ebx, ebx
je 0x1400f8f28
mov rcx, rdi
call fcn.1400fbc40
mov rcx, rsi
call fcn.1402cab34
jmp 0x1400f8bda
mov ebx, 0xc000009a
mov rcx, rsi
call fcn.1402cab34
jmp 0x1400f8bda
mov ebx, 0xc000009a
jmp 0x1400f8bda