Function at 0x140005d40
Capabilities:
Create process on windows
Get common file path
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
push rbp
push r14
push r15
lea rbp, [rsp - 0x6a0]
sub rsp, 0x7a0
mov rax, qword [0x14006b1e0]
xor rax, rsp
mov qword [rbp + 0x690], rax
movdqa xmm0, xmmword [0x14005ed00]
xor r14d, r14d
or rsi, 0xffffffffffffffff
mov word [rbp + 0x30], r14w
mov rdx, rsi
mov r9, r8
movdqu xmmword [rbp + 0x40], xmm0
nop
inc rdx
cmp word [r8 + rdx*2], r14w
jne 0x140005d90
lea rcx, [rbp + 0x30]
cmp rdx, 7
ja 0x140005dbf
lea rbx, [rdx + rdx]
mov qword [rbp + 0x40], rdx
mov r8, rbx
mov rdx, r9
call fcn.14002a930
mov word [rbp + rbx + 0x30], r14w
jmp 0x140005dc4
call fcn.1400029f0
movdqa xmm0, xmmword [0x14005ed00]
lea r9, str._compute
mov edx, 8
mov word [rbp + 0x10], r14w
lea rcx, [rbp + 0x10]
movdqu xmmword [rbp + 0x20], xmm0
call fcn.1400029f0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.140008c20
cmp eax, 0xffffffff
movabs r15, 0x7fffffffffffffff
mov rax, qword [rbp + 0x28]
setne bl
cmp rax, 8
jb 0x140005e5c
mov rcx, qword [rbp + 0x10]
inc rax
cmp rax, r15
ja 0x1400064b9
add rax, rax
cmp rax, 0x1000
jb 0x140005e57
test cl, 0x1f
jne 0x1400064b9
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400064b9
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1400064b9
mov rcx, rax
call fcn.14000b84c
movdqa xmm0, xmmword [0x14005ed00]
mov qword [rsp + 0x7c0], rdi
test bl, bl
je 0x1400060aa
lea r9, str._PnPEnable
mov word [rbp - 0x10], r14w
mov edx, 0xa
lea rcx, [rbp - 0x10]
movdqu xmmword [rbp], xmm0
call fcn.1400029f0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x30]
call fcn.140008c20
cmp eax, 0xffffffff
mov rax, qword [rbp + 8]
setne dil
cmp rax, 8
jb 0x140005efb
mov rcx, qword [rbp - 0x10]
inc rax
cmp rax, r15
ja 0x1400064bf
add rax, rax
cmp rax, 0x1000
jb 0x140005ef6
test cl, 0x1f
jne 0x1400064bf
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400064bf
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1400064bf
mov rcx, rax
call fcn.14000b84c
movdqa xmm0, xmmword [0x14005ed00]
lea r9, str.schtasks__delete__TN__AMD_COMPUTE___F
mov edx, 0x25
mov word [rbp + 0x10], r14w
lea rcx, [rbp + 0x10]
movdqu xmmword [rbp + 0x20], xmm0
call fcn.1400029f0
movdqa xmm0, xmmword [0x14005ed00]
lea r9, str.C:WindowsSystem32
mov edx, 0x13
mov word [rbp - 0x10], r14w
lea rcx, [rbp - 0x10]
movdqu xmmword [rbp], xmm0
call fcn.1400029f0
cmp qword [rbp + 0x28], 8
lea rbx, [rbp + 0x10]
lea rcx, [rbp - 0x80]
cmovae rbx, qword [rbp + 0x10]
xor edx, edx
lea r8d, [rdx + 0x68]
call fcn.14002b210
xor eax, eax
mov dword [rbp - 0x80], 0x68
cmp qword [rbp + 8], 8
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x48], rcx
mov rdx, rbx
mov qword [rsp + 0x58], rax
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rax, [rbp - 0x10]
cmovae rax, qword [rbp - 0x10]
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov qword [rsp + 0x30], r14
xor ecx, ecx
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140005fe3
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140005fe9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbp + 8]
cmp rax, 8
jb 0x14000603d
mov rcx, qword [rbp - 0x10]
inc rax
cmp rax, r15
ja 0x1400064c5
add rax, rax
cmp rax, 0x1000
jb 0x140006038
test cl, 0x1f
jne 0x1400064c5
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400064c5
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1400064c5
mov rcx, rax
call fcn.14000b84c
movzx ecx, dil
call fcn.140004850
mov r14d, eax
mov rax, qword [rbp + 0x28]
cmp rax, 8
jb 0x14000643e
lea rcx, [rax + 1]
mov rax, qword [rbp + 0x10]
cmp rcx, r15
ja 0x1400064cb
add rcx, rcx
cmp rcx, 0x1000
jb 0x14000609d
test al, 0x1f
jne 0x1400064cb
mov rcx, qword [rax - 8]
cmp rcx, rax
jae 0x1400064cb
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x1400064cb
mov rax, rcx
mov rcx, rax
call fcn.14000b84c
jmp 0x14000643e
lea r9, str._AMDLinkUpdate
mov word [rbp + 0x10], r14w
mov edx, 0xe
lea rcx, [rbp + 0x10]
movdqu xmmword [rbp + 0x20], xmm0
call fcn.1400029f0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.140008c20
cmp eax, 0xffffffff
mov rax, qword [rbp + 0x28]
setne bl
cmp rax, 8
jb 0x140006130
mov rcx, qword [rbp + 0x10]
inc rax
cmp rax, r15
ja 0x1400064d1
add rax, rax
cmp rax, 0x1000
jb 0x14000612b
test cl, 0x1f
jne 0x1400064d1
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400064d1
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1400064d1
mov rcx, rax
call fcn.14000b84c
movdqa xmm0, xmmword [0x14005ed00]
test bl, bl
je 0x14000639c
xor edx, edx
mov word [rbp - 0x10], r14w
lea rcx, [rbp - 0x80]
movdqu xmmword [rbp], xmm0
lea r8d, [rdx + 0x68]
call fcn.14002b210
xor eax, eax
mov dword [rbp - 0x80], 0x68
mov qword [rsp + 0x58], rax
lea rdx, str.SOFTWAREAMDCN
mov qword [rsp + 0x60], rax
mov r9d, 0x20019
mov qword [rsp + 0x68], rax
xor r8d, r8d
lea rax, [rsp + 0x70]
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], rax
xor bl, bl
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140006325
mov rcx, qword [rsp + 0x70]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x54]
lea rax, [rbp + 0x50]
mov word [rbp + 0x50], r14w
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.ExtractedPath
mov dword [rsp + 0x54], 1
mov dword [rsp + 0x50], 0x104
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140006240
lea rax, [rbp + 0x50]
nop dword [rax]
inc rsi
cmp word [rax + rsi*2], r14w
jne 0x1400061f0
mov rax, qword [rbp + 8]
cmp rsi, rax
ja 0x14000622e
cmp rax, 8
mov qword [rbp], rsi
lea rdi, [rbp - 0x10]
cmovae rdi, qword [rbp - 0x10]
lea rbx, [rsi + rsi]
mov rcx, rdi
lea rdx, [rbp + 0x50]
mov r8, rbx
call fcn.14002a930
mov word [rbx + rdi], r14w
jmp 0x14000623e
lea r9, [rbp + 0x50]
mov rdx, rsi
lea rcx, [rbp - 0x10]
call fcn.1400029f0
mov bl, 1
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test bl, bl
je 0x140006325
call fcn.140008b00
lea rcx, [rbp - 0x10]
lea rdx, str.Bin64RadeonInstaller.exe__AMDLINKUPDATE__HIDEEULA__WHQL0__HIDEFINISHSCREEN
test al, al
jne 0x14000626e
lea rdx, str.BinRadeonInstaller.exe__AMDLINKUPDATE__HIDEEULA__WHQL0__HIDEFINISHSCREEN
call fcn.140002c20
xor edx, edx
lea rcx, [rbp + 0x50]
mov r8d, 0x208
call fcn.14002b210
mov edx, 0x104
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor edx, edx
lea rcx, [rbp + 0x260]
mov r8d, 0x430
call fcn.14002b210
cmp qword [rbp + 8], 8
lea rax, [rbp - 0x10]
lea r9, [rbp + 0x50]
mov edx, 0x218
cmovae rax, qword [rbp - 0x10]
lea r8, str.__scmd.exe___C___s_
lea rcx, [rbp + 0x260]
mov qword [rsp + 0x20], rax
call fcn.140007e10
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x260]
lea rax, [rbp - 0x80]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140006382
lea rcx, str.InstallManagerApp.exe:_Launching_WHQL_build_failed_r_n
call fcn.140001570
mov rax, qword [rbp + 8]
cmp rax, 8
jb 0x14000643e
mov rcx, qword [rbp - 0x10]
inc rax
cmp rax, r15
ja 0x1400064d7
add rax, rax
cmp rax, 0x1000
jb 0x140006378
test cl, 0x1f
jne 0x1400064d7
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400064d7
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1400064d7
mov rcx, rax
call fcn.14000b84c
jmp 0x14000643e
lea rcx, str.InstallManagerApp.exe:_Launching_WHQL_build_success_r_n
call fcn.140001570
lea rcx, [rbp - 0x10]
call fcn.140001f50
jmp 0x14000643e
lea r9, str._UpdateCurrentUser
mov word [rbp + 0x10], r14w
mov edx, 0x12
lea rcx, [rbp + 0x10]
movdqu xmmword [rbp + 0x20], xmm0
call fcn.1400029f0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.140008c20
cmp eax, 0xffffffff
mov rax, qword [rbp + 0x28]
setne bl
cmp rax, 8
jb 0x140006422
mov rcx, qword [rbp + 0x10]
inc rax
cmp rax, r15
ja 0x1400064dd
add rax, rax
cmp rax, 0x1000
jb 0x14000641d
test cl, 0x1f
jne 0x1400064dd
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400064dd
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1400064dd
mov rcx, rax
call fcn.14000b84c
test bl, bl
je 0x140006432
call fcn.140005820
call fcn.140004f80
jmp 0x14000643e
lea rcx, [rbp + 0x30]
call fcn.140004c10
mov r14d, eax
mov rax, qword [rbp + 0x48]
cmp rax, 8
jb 0x140006486
mov rcx, qword [rbp + 0x30]
inc rax
cmp rax, r15
ja 0x1400064e3
add rax, rax
cmp rax, 0x1000
jb 0x140006481
test cl, 0x1f
jne 0x1400064e3
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400064e3
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x1400064e3
mov rcx, rax
call fcn.14000b84c
mov eax, r14d
mov rdi, qword [rsp + 0x7c0]
mov rcx, qword [rbp + 0x690]
xor rcx, rsp
call fcn.14000b460
lea r11, [rsp + 0x7a0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140030cc0
int3
call fcn.140030cc0
int3
call fcn.140030cc0
int3
call fcn.140030cc0
int3
call fcn.140030cc0
int3
call fcn.140030cc0
int3
call fcn.140030cc0
int3
call fcn.140030cc0
int3