Function at 0x14007cd90
Capabilities:
Get common file path
Get program files directory
Identify system language via api
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1260]
mov eax, 0x1360
call fcn.1400a3420
sub rsp, rax
mov rax, qword [0x140148020]
xor rax, rsp
mov qword [rbp + 0x1250], rax
mov rdi, rcx
xor esi, esi
mov dword [rbp - 0x18], esi
lea rbx, [rcx + 0x110]
lea r8d, [rsi + 7]
lea rdx, [0x140124f68]
mov rcx, rbx
call fcn.1400040b0
lea r14, [rdi + 0x130]
lea r8d, [rsi + 6]
lea rdx, str.500000
mov rcx, r14
call fcn.1400040b0
cmp qword [r14 + 0x18], 8
jb 0x14007ce14
mov r14, qword [r14]
cmp qword [rbx + 0x18], 8
jb 0x14007ce1e
mov rbx, qword [rbx]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rbx
lea rax, str.installerVersion:_s__installerChannel:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], InitCommonControls
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, str.ProductSource
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
mov rdx, rax
lea rcx, [rdi + 8]
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, [0x1401250b0]
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
lea rcx, [rdi + 0x28]
mov rdx, rax
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 0xb
lea rdx, str.InstallTime
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
lea rcx, [rdi + 0x48]
mov rdx, rax
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, str.InstallLocation
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
mov rdx, rax
lea rcx, [rdi + 0x68]
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
cmp qword [rdi + 0x78], 0
jne 0x14007d159
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, str.InstallLocation
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x4b
lea rdx, str.SoftwareWOW6432NodeMicrosoftWindowsCurrentVersionUninstallMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
mov rdx, rax
lea rcx, [rdi + 0x68]
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, str.InstallLangId
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
mov rdx, rax
lea rcx, [rdi + 0x88]
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
mov rcx, qword [rdi + 0x78]
test rcx, rcx
setne al
mov byte [rdi + 0xa8], al
lea r13, str.true
lea rax, str.false
test rcx, rcx
cmovne rax, r13
mov qword [rsp + 0x30], rax
lea rax, str.upgradeMode:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1c
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, InitCommonControls
lea rdx, [0x1401250b0]
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
mov dword [rbp - 0x18], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
mov r14d, 3
mov dword [rbp - 0x18], r14d
mov qword [rbp - 0x20], rsi
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14007d32e
mov dword [rbp - 0x14], esi
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x14]
xor r8d, r8d
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x14007d3f7
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, [0x1401250b0]
lea rcx, [rbp - 0x80]
call fcn.140004fe0
nop
mov dword [rbp - 0x18], 7
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov r8d, 0x2a
lea rdx, str.SoftwareWOW6432NodeMicrosoftMSPCManager
lea rcx, [rbp - 0x60]
call fcn.140004fe0
mov r14d, InitCommonControls
mov qword [rbp - 0x20], rsi
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14007d3fb
mov dword [rbp - 0x14], esi
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x14]
xor r8d, r8d
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x14007d3fb
mov al, 1
jmp 0x14007d3fd
xor al, al
mov byte [rdi + 0xa9], al
test r14b, 8
je 0x14007d417
and r14d, 0xfffffff7
lea rcx, [rbp - 0x60]
call fcn.1400053f0
nop
test r14b, 4
je 0x14007d42b
and r14d, 0xfffffffb
lea rcx, [rbp - 0x80]
call fcn.1400053f0
nop
test r14b, 2
je 0x14007d440
and r14d, 0xfffffffd
lea rcx, [rsp + 0x60]
call fcn.1400053f0
nop
test r14b, 1
je 0x14007d450
lea rcx, [rsp + 0x40]
call fcn.1400053f0
cmp byte [rdi + 0xa9], 0
je 0x14007d59f
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, [0x1401250b0]
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
mov rdx, rax
lea rcx, [rdi + 0xb0]
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
cmp qword [rdi + 0xc0], 0
jne 0x14007d59f
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, InitCommonControls
lea rdx, [0x1401250b0]
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x2a
lea rdx, str.SoftwareWOW6432NodeMicrosoftMSPCManager
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
mov rdx, rax
lea rcx, [rdi + 0xb0]
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
mov word [rdi + 0x150], ax
mov dword [rsp + 0x30], eax
lea rax, str.SystemLangId:_d
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x29
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
call fcn.140083d30
test eax, eax
setne cl
mov byte [rdi + 0x280], cl
lea rbx, str.false
mov rcx, rbx
test eax, eax
cmovne rcx, r13
mov qword [rsp + 0x30], rcx
lea rax, str.Current_process_is_running_as_local_system:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x2c
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
call fcn.1400839a0
mov byte [rdi + 0x281], al
mov rdx, rbx
test al, al
cmovne rdx, r13
mov qword [rsp + 0x30], rdx
lea rax, str.System_user_has_login:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], gethostbyname
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
cmp byte [rdi + 0x281], 0
jne 0x14007d6b5
mov dword [rbp - 0x18], esi
lea rdx, [rbp - 0x18]
lea rcx, [rdi + 0x88]
call fcn.140083dd0
test al, al
je 0x14007d6b5
movzx eax, word [rbp - 0x18]
mov word [rdi + 0x150], ax
lea rcx, [rdi + 0x178]
mov r8d, 0x13
lea r14, str.languagesen_us.xml
mov rdx, r14
call fcn.1400040b0
movzx ecx, word [rdi + 0x150]
mov edx, 0x804
movzx eax, cx
sub ax, dx
mov r8d, 0xf7ff
test r8w, ax
je 0x14007d75f
mov edx, 0x404
movzx eax, cx
sub ax, dx
mov edx, 0xe7ff
test dx, ax
jne 0x14007d717
mov eax, 0x1c04
cmp cx, ax
je 0x14007d717
lea r14, str.languageszh_tw.xml
jmp 0x14007d766
mov eax, 0x412
cmp cx, ax
jne 0x14007d72a
lea r14, str.languagesko_kr.xml
jmp 0x14007d766
mov eax, 0x411
cmp cx, ax
jne 0x14007d73d
lea r14, str.languagesja_jp.xml
jmp 0x14007d766
mov edx, 0x40a
movzx eax, cx
sub ax, dx
mov rbx, rdi
test r8w, ax
je 0x14007d756
lea ecx, [rdx - 1]
jmp 0x14007d769
lea r14, str.languageses_es.xml
jmp 0x14007d769
lea r14, str.languageszh_cn.xml
mov rbx, rdi
lea r15, [rbx + 0x158]
mov word [rbx + 0x152], cx
mov r8d, 0x13
mov rdx, r14
mov rcx, r15
call fcn.1400040b0
cmp qword [r15 + 0x18], 8
jb 0x14007d792
mov r15, qword [r15]
movzx eax, word [rbx + 0x152]
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], eax
lea rax, str.LanguageId:_d__LanguageFile:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x5d
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 0xb
lea rdx, str.MachineGuid
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x1f
lea rdx, str.SOFTWAREMicrosoftCryptography
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140085330
lea r15, [rdi + 0xd0]
mov rdx, rax
mov rcx, r15
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x40]
call fcn.1400a5270
xor r9d, r9d
lea r8d, [r9 + 0x26]
lea rdx, [rbp + 0x40]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov r14, 0xffffffffffffffff
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x80], xmm0
movdqu xmmword [rbp - 0x70], xmm1
test eax, eax
jne 0x14007d8bc
xor r8d, r8d
lea rdx, [0x14011205c]
jmp 0x14007d8d2
lea rax, [rbp + 0x40]
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x14007d8c3
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140004fe0
mov r8, qword [rbp - 0x80]
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovb r8, rax
lea r9, str.Microsoft_PC_Manager
lea rdx, [0x14010cef0]
lea rcx, [rbp - 0x10]
call fcn.1400838d0
lea rcx, [rdi + 0x198]
mov rdx, rax
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
nop
lea rcx, [rbp - 0x80]
call fcn.1400053f0
lea rcx, [rbp - 0x10]
call fcn.140083a40
lea r13, [rdi + 0x1b8]
mov rdx, rax
mov rcx, r13
call fcn.140004010
lea rcx, [rbp - 0x10]
call fcn.1400053f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8d, reloc.COMCTL32.dll_InitCommonControls
lea rdx, str.InstallRegionCode
lea rcx, [rbp - 0x10]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rbp - 0x40]
call fcn.140004fe0
nop
lea r9, [rbp - 0x10]
lea r8, [rbp - 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x18]
call fcn.140085330
nop
lea rcx, [rbp - 0x40]
call fcn.1400053f0
nop
lea rcx, [rbp - 0x10]
call fcn.1400053f0
cmp qword [rbp + 0x28], 0
jne 0x14007dca0
cmp qword [rdi + 0x18], 0
je 0x14007db93
lea r15, str.501000
nop
mov rdx, qword [r15]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8, r14
inc r8
cmp word [rdx + r8*2], 0
jne 0x14007d9f5
lea rcx, [rbp - 0x80]
call fcn.140004fe0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rdi + 8]
cmp qword [rdi + 0x20], 8
jb 0x14007da26
mov rcx, qword [rdi + 8]
call fcn.1400a9534
mov ebx, eax
lea rcx, [rbp - 0x80]
call fcn.1400053f0
test ebx, ebx
je 0x14007da4e
add r15, 8
lea rax, str.dc.applicationinsights.azure.com
cmp r15, rax
jne 0x14007d9e0
xor al, al
jmp 0x14007da50
mov al, 1
lea rcx, [0x1401254b4]
lea rdx, [0x140124e90]
test al, al
cmovne rdx, rcx
mov r8, r14
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14007da70
lea rcx, [rbp + 0x18]
call fcn.1400040b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, reloc.COMCTL32.dll_InitCommonControls
lea rdx, str.InstallRegionCode
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rbp - 0x80]
call fcn.140004fe0
mov qword [rbp - 0x20], rsi
lea rdx, [rbp - 0x80]
mov rcx, 0xffffffff80000002
call fcn.140085260
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14007db73
mov rax, qword [rbp + 0x28]
lea rax, [rax*2 + 2]
mov ecx, 0xffffffff
cmp rax, rcx
cmovbe esi, eax
lea rax, [rbp + 0x18]
cmp qword [rbp + 0x30], 8
cmovae rax, qword [rbp + 0x18]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x80]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
lea r15, [rdi + 0xd0]
jmp 0x14007dc96
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, reloc.COMCTL32.dll_InitCommonControls
lea rdx, str.InstallRegionCode
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov r8d, 0x20
lea rdx, str.SoftwareWOW6432NodeMSPCManager
lea rcx, [rbp - 0x60]
call fcn.140004fe0
mov qword [rbp - 0x20], rsi
lea rdx, [rbp - 0x60]
mov rcx, 0xffffffff80000002
call fcn.140085260
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14007dc82
mov rax, qword [r13 + 0x10]
lea rax, [rax*2 + 2]
mov ecx, 0xffffffff
cmp rax, rcx
cmovbe esi, eax
mov rax, r13
cmp qword [r13 + 0x18], 8
jb 0x14007dc4b
mov rax, qword [r13]
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x60]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
cmp qword [rbp + 0x28], 0
mov rdx, r13
je 0x14007dca4
lea rdx, [rbp + 0x18]
lea rbx, [rdi + 0x1d8]
cmp rbx, rdx
je 0x14007dcc6
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x14007dcbe
mov rdx, qword [rdx]
mov rcx, rbx
call fcn.1400040b0
cmp qword [rbx + 0x18], 8
jb 0x14007dcd0
mov rbx, qword [rbx]
cmp qword [r13 + 0x18], 8
jb 0x14007dcdb
mov r13, qword [r13]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r13
lea rax, str.SystemRegionCode:_s__UsingRegionCode:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x7d
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
mov word [rdi + 0x1f8], 0x100
lea rax, str.true
mov qword [rsp + 0x38], rax
lea rax, str.false
mov qword [rsp + 0x30], rax
lea rax, str.includeDriver:_s__includeADBlock:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x81
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 0x12
lea rdx, str.CurrentBuildNumber
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x2c
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x60]
call fcn.140085330
lea rbx, [rdi + 0x200]
mov rdx, rax
mov rcx, rbx
call fcn.140004010
lea rcx, [rbp - 0x60]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
cmp qword [rbx + 0x18], 8
jb 0x14007de13
mov rbx, qword [rbx]
mov qword [rsp + 0x30], rbx
lea rax, str.osVersion:_s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x84
lea r9, str.CommonOptions::Init
lea r8, str.D:_a1_sinstaller_cppPCManagerInstallerCommonLibCommonOptions.cpp
mov edx, 4
mov rcx, qword [0x1401515f8]
call fcn.140080e40
cmp qword [r15 + 0x18], 8
jb 0x14007de55
mov r15, qword [r15]
mov r8, r15
lea rdx, str._s_wic
lea rcx, [rsp + 0x40]
call fcn.1400838d0
lea rsi, [rdi + 0xf0]
mov rdx, rax
mov rcx, rsi
call fcn.140004010
lea rcx, [rsp + 0x40]
call fcn.1400053f0
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x250]
call fcn.1400a5270
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14007dea6
mov rdx, qword [rsi]
lea r8, [rbp + 0x250]
call fcn.14008b480
test al, al
je 0x14007df19
lea rax, [rbp + 0x250]
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x14007dec0
lea rdx, [rbp + 0x250]
mov rcx, rsi
call fcn.1400040b0
mov rax, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x14007def1
mov r15, qword [rsi]
mov rbx, r15
lea r12, [r15 + rax*2]
jmp 0x14007defb
lea r12, [rsi + rax*2]
mov rbx, rsi
mov r15, rsi
cmp rbx, r12
je 0x14007df19
sub r15, rbx
movzx ecx, word [rbx]
call fcn.1400af58c
mov word [rbx + r15], ax
add rbx, 2
cmp rbx, r12
jne 0x14007df03
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 9
lea rdx, str.MachineId
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x1c
lea rdx, str.SoftwareMicrosoftSQMClient
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x60]
call fcn.140085330
lea rbx, [rdi + 0x240]
mov rdx, rax
mov rcx, rbx
call fcn.140004010
lea rcx, [rbp - 0x60]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x40]
call fcn.1400053f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400053f0
cmp qword [rbx + 0x18], 8
jb 0x14007dfc0
mov rbx, qword [rbx]
mov r8, rbx
lea rdx, str._s_wic
lea rcx, [rsp + 0x40]
call fcn.1400838d0
lea rsi, [rdi + 0x260]
mov rdx, rax
mov rcx, rsi
call fcn.140004010
lea rcx, [rsp + 0x40]
call fcn.1400053f0
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0xa50]
call fcn.1400a5270
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14007e011
mov rdx, qword [rsi]
lea r8, [rbp + 0xa50]
call fcn.14008b480
test al, al
je 0x14007e08c
lea rax, [rbp + 0xa50]
nop dword [rax + rax]
inc r14
cmp word [rax + r14*2], 0
jne 0x14007e030
mov r8, r14
lea rdx, [rbp + 0xa50]
mov rcx, rsi
call fcn.1400040b0
mov rax, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x14007e064
mov r14, qword [rsi]
mov rbx, r14
lea r15, [r14 + rax*2]
jmp 0x14007e06e
lea r15, [rsi + rax*2]
mov rbx, rsi
mov r14, rsi
cmp rbx, r15
je 0x14007e08c
sub r14, rbx
movzx ecx, word [rbx]
call fcn.1400af58c
mov word [rbx + r14], ax
add rbx, 2
cmp rbx, r15
jne 0x14007e076
mov dword [rbp - 0x18], 0x60
mov dword [rbp - 0x14], 0x60
mov dword [rbp - 0x20], 1
mov dword [rbp - 0x1c], 1
mov edx, 2
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.USER32.dll_MonitorFromPoint]
lea r9, [rbp - 0x14]
lea r8, [rbp - 0x18]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_shcore_scaling_l1_1_1.dll_GetDpiForMonitor]
mov edx, 0x64
lea r8d, [rdx - 4]
mov ecx, dword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rdi + 0x284], eax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x10], 0x28
mov dword [rbp - 0x20], 1
mov dword [rbp - 0x1c], 1
lea edx, [rax + 2]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.USER32.dll_MonitorFromPoint]
lea rdx, [rbp - 0x10]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [rbp - 4]
sub eax, dword [rbp - 0xc]
mov dword [rdi + 0x288], eax
mov rcx, qword [rbp - 0xc]
shr rcx, 0x20
mov rax, qword [rbp - 4]
shr rax, 0x20
sub eax, ecx
mov dword [rdi + 0x28c], eax
lea rcx, [rbp + 0x18]
call fcn.1400053f0
mov rcx, qword [rbp + 0x1250]
xor rcx, rsp
call fcn.1400a24f0
lea r11, [rsp + 0x1360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret