Function at 0x1400ba2b0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0x88
mov qword [rbp + 0x1f], 0xfffffffffffffffe
mov rdi, rcx
mov rax, qword [0x1404672c0]
call qword [rax + 0x1c40]
mov r14d, eax
add rdi, reloc.mfc120u.dll_Ordinal_320
mov rcx, rdi
test eax, eax
lea rdx, str.http:__content.nitropdf.com_nitropro___version___content___source_____lang___trial_notification.htm
je 0x1400ba2fc
lea rdx, str.http:__content.nitropdf.com_nitropro___version___content___source_____lang___trial_notification_subscription.htm
call qword [sym.imp.mfc120u.dll_Ordinal_1498]
lea rcx, [rbp + 0x67]
call sym.NitroFree.exe_public:_class_CxFile____ptr64___cdecl_CxFile::operator_class_CxFile_const____ptr64____ptr64
nop
lea rax, [rbp + 0xf]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x17]
lea r8, [rbp + 0x13]
lea rdx, [rbp + 0x77]
lea rcx, [rbp + 0x67]
call fcn.140161fc0
lea rcx, [rbp - 0x11]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov r8d, dword [rbp + 0x77]
lea rdx, [0x1402dc4f0]
lea rcx, [rbp - 0x11]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
lea rcx, [rbp - 0x11]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov r8, rax
lea rdx, str.__version__
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_12313]
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
xor r15d, r15d
mov qword [rbp - 9], r15
mov dword [rbp - 1], r15d
mov qword [rbp + 7], r15
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rdx, [rbp - 0x19]
lea ecx, [r15 + 3]
call fcn.140195770
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov r8, rax
mov rdx, 0xffffffff80000002
mov r9d, 0x20019
lea rcx, [rbp - 9]
call fcn.14008ff80
test eax, eax
jne 0x1400ba44b
mov edx, Ordinal_261
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc120u.dll_Ordinal_4855]
mov rbx, rax
mov dword [rbp + 0x6f], Ordinal_521
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x7f]
xor r8d, r8d
lea rdx, str.installsource
mov rsi, qword [rbp - 9]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400ba423
mov eax, dword [rbp + 0x7f]
dec eax
cmp eax, 1
ja 0x1400ba423
test rbx, rbx
je 0x1400ba423
cmp dword [rbp + 0x6f], r15d
jne 0x1400ba423
mov word [rbx], r15w
or edx, 0xffffffff
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc120u.dll_Ordinal_12110]
test rsi, rsi
je 0x1400ba445
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rsi, r15
mov qword [rbp - 9], r15
mov dword [rbp - 1], r15d
jmp 0x1400ba44f
mov rsi, qword [rbp - 9]
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov r8, rax
lea rdx, str.__source__
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_12313]
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov rbx, qword [0x14046c078]
lea rcx, str.AppType::Lenovo
mov rax, qword [0x140467260]
call qword [rax + 0x28]
cmp rbx, rax
jne 0x1400ba4b8
lea rcx, [rbp + 0x6f]
call fcn.140191de0
nop
mov rdx, rax
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc120u.dll_Ordinal_1496]
nop
lea rcx, [rbp + 0x6f]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
jmp 0x1400ba4c1
lea rcx, [rbp - 0x21]
call fcn.14013dd50
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov r8, rax
lea rdx, str.__lang__
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_12313]
test r14d, r14d
jne 0x1400ba55b
mov rcx, qword [0x1404694c8]
call fcn.140134350
test al, al
je 0x1400ba5c6
mov rcx, qword [0x1404694c8]
call sym.NitroFree.exe_public:_unsigned_long_int___cdecl_CxImage::GetNumColors_void_const___ptr64
test eax, eax
je 0x1400ba5b5
cmp eax, 2
je 0x1400ba51e
cmp eax, 4
je 0x1400ba5b5
jmp 0x1400ba5c6
mov rcx, qword [0x1404694c8]
call fcn.1401326f0
mov ebx, eax
lea rcx, [rbp + 0x6f]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov r8d, ebx
lea rdx, str._statetrial_in_progresstrial_remain_d
lea rcx, [rbp + 0x6f]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
lea rdx, [rbp + 0x6f]
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_2372]
nop
jmp 0x1400ba5a9
mov rax, qword [0x1404672c0]
call qword [rax + 0x1c48]
dec eax
je 0x1400ba5b5
dec eax
jne 0x1400ba5c6
mov rax, qword [0x140467388]
call qword [rax + 0x48]
mov ebx, eax
lea rcx, [rbp + 0x6f]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov r8d, ebx
lea rdx, str._statetrial_in_progresstrial_remain_d
lea rcx, [rbp + 0x6f]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
lea rdx, [rbp + 0x6f]
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_2372]
nop
lea rcx, [rbp + 0x6f]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
jmp 0x1400ba5c6
lea rdx, str._statetrial_expired
mov rcx, rdi
call qword [sym.imp.mfc120u.dll_Ordinal_2373]
nop
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
test rsi, rsi
je 0x1400ba5eb
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp - 0x11]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp + 0x67]
call fcn.14019c590
add rsp, 0x88
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret