Function at 0x140029080
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x28]
sub rsp, 0x128
mov qword [rbp + 0x10], 0xfffffffffffffffe
mov r15, rcx
lea rsi, [rcx + 0x4c]
mov dword [rsi], 0xb
xor r14b, r14b
mov eax, dword [rcx + 0x50]
xor edi, edi
movabs r13, 0x1fffffffffffffff
or r12d, 0xffffffff
cmp eax, 4
je 0x1400290d7
cmp eax, 7
je 0x1400290d7
cmp eax, 8
jne 0x14002932d
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
lea rdx, [rbp - 0x78]
mov rcx, r15
call fcn.1400241d0
mov rbx, qword [rbp - 0x78]
test al, al
je 0x1400292ab
cmp dword [rbx - 0x10], 0
je 0x1400292ab
lea rcx, [rbp - 0x78]
mov rax, qword [rbp - 0x60]
mov rdi, qword [rbp - 0x58]
cmp rcx, rdi
jae 0x1400291e4
lea rcx, [rbp - 0x78]
cmp rax, rcx
ja 0x1400291e4
lea rsi, [rbp - 0x78]
sub rsi, rax
sar rsi, 3
mov rdx, qword [rbp - 0x50]
cmp rdi, rdx
jne 0x1400291ba
mov rcx, rdi
sub rcx, rax
sar rcx, 3
movabs r8, 0x1ffffffffffffffe
cmp rcx, r8
jbe 0x14002917b
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x1400291ba
mov r8, rdx
shr r8, 1
mov rax, r13
sub rax, r8
cmp rax, rdx
jae 0x14002919f
xor edx, edx
jmp 0x1400291a2
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x60]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x58]
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rdi
test rdi, rdi
je 0x1400291df
mov rcx, qword [rax + rsi*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x58]
jmp 0x140029270
mov rdx, qword [rbp - 0x50]
cmp rdi, rdx
jne 0x14002924f
mov rcx, rdi
sub rcx, rax
sar rcx, 3
movabs r8, 0x1ffffffffffffffe
cmp rcx, r8
jbe 0x140029214
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x14002924f
mov r8, rdx
shr r8, 1
mov rax, r13
sub rax, r8
cmp rax, rdx
jae 0x140029238
xor edx, edx
jmp 0x14002923b
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x60]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x58]
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rdi
test rdi, rdi
je 0x140029270
lea rcx, [rbx - 0x18]
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x58]
add rdi, 8
mov qword [rbp - 0x58], rdi
mov edi, 1
mov dword [rbp - 0x40], edi
mov rax, qword [r15]
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [rax + reloc.ATL100.DLL_Ordinal_32]
xor r9d, r9d
lea r8, [rbp - 0x60]
mov edx, dword [r15 + 0x50]
mov rcx, qword [r15 + 0x30]
call fcn.140076d10
movzx r14d, r14b
test eax, eax
cmovns r14d, edi
mov rdi, qword [rbp - 0x60]
test rdi, rdi
je 0x1400292f7
mov rsi, qword [rbp - 0x58]
cmp rdi, rsi
je 0x1400292ef
nop dword [rax]
mov rdx, qword [rdi]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400292de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rdi, 8
cmp rdi, rsi
jne 0x1400292c0
mov rbx, qword [rbp - 0x78]
mov rdi, qword [rbp - 0x60]
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029320
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
test r14b, r14b
jne 0x140029f44
lea rsi, [r15 + 0x4c]
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov r8d, dword [r15 + 0x50]
lea rdx, [0x1400de14c]
lea rcx, [rsp + 0x78]
call fcn.140004440
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rdi
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x80]
mov rcx, qword [r15 + 0x30]
call fcn.140067910
lea r11, [rsp + 0x78]
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
cmp r11, rbx
jae 0x14002949c
lea rcx, [rsp + 0x78]
cmp rax, rcx
ja 0x14002949c
lea rdi, [rsp + 0x78]
sub rdi, rax
sar rdi, 3
mov rdx, qword [rsp + 0x40]
cmp rbx, rdx
jne 0x140029460
mov r8, rbx
sub r8, rax
sar r8, 3
movabs rcx, 0x1ffffffffffffffe
cmp r8, rcx
jbe 0x140029413
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc r8
mov rcx, rdx
sub rcx, rax
sar rcx, 3
cmp r8, rcx
jbe 0x140029460
mov rdx, rcx
shr rdx, 1
mov rax, r13
sub rax, rdx
cmp rax, rcx
jae 0x14002943a
xor ecx, ecx
jmp 0x14002943d
add rcx, rdx
cmp rcx, r8
cmovb rcx, r8
mov rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.14000dcf0
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rbx
mov qword [rbp - 0x70], rbx
test rbx, rbx
je 0x140029491
mov rcx, qword [rax + rdi*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rbx], rax
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
add rbx, 8
xor edi, edi
jmp 0x140029551
mov rdx, qword [rsp + 0x40]
cmp rbx, rdx
jne 0x14002951b
mov r8, rbx
sub r8, rax
sar r8, 3
movabs rcx, 0x1ffffffffffffffe
cmp r8, rcx
jbe 0x1400294cd
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc r8
mov rcx, rdx
sub rcx, rax
sar rcx, 3
cmp r8, rcx
jbe 0x14002951b
mov rdx, rcx
shr rdx, 1
mov rax, r13
sub rax, rdx
cmp rax, rcx
jae 0x1400294f5
mov rcx, rdi
jmp 0x1400294f8
add rcx, rdx
cmp rcx, r8
cmovb rcx, r8
mov rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.14000dcf0
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rbx
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x14002954d
mov rcx, qword [rsp + 0x78]
add rcx, 0xffffffffffffffe8
call fcn.140001b90
add rax, 0x18
mov qword [rbx], rax
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
add rbx, 8
mov qword [rsp + 0x38], rbx
lea rcx, [rbp - 0x80]
cmp rcx, rbx
jae 0x14002962a
lea rcx, [rbp - 0x80]
cmp rax, rcx
ja 0x14002962a
lea rdi, [rbp - 0x80]
sub rdi, rax
sar rdi, 3
cmp rbx, rdx
jne 0x1400295f4
mov r8, rbx
sub r8, rax
sar r8, 3
movabs rcx, 0x1ffffffffffffffe
cmp r8, rcx
jbe 0x1400295a7
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc r8
mov rcx, rdx
sub rcx, rax
sar rcx, 3
cmp r8, rcx
jbe 0x1400295f4
mov rdx, rcx
shr rdx, 1
mov rax, r13
sub rax, rdx
cmp rax, rcx
jae 0x1400295ce
xor ecx, ecx
jmp 0x1400295d1
add rcx, rdx
cmp rcx, r8
cmovb rcx, r8
mov rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.14000dcf0
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rbx
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x140029625
mov rcx, qword [rax + rdi*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rbx], rax
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
jmp 0x1400296d5
cmp rbx, rdx
jne 0x1400296a4
mov r8, rbx
sub r8, rax
sar r8, 3
movabs rcx, 0x1ffffffffffffffe
cmp r8, rcx
jbe 0x140029656
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc r8
mov rcx, rdx
sub rcx, rax
sar rcx, 3
cmp r8, rcx
jbe 0x1400296a4
mov rdx, rcx
shr rdx, 1
mov rax, r13
sub rax, rdx
cmp rax, rcx
jae 0x14002967e
mov rcx, rdi
jmp 0x140029681
add rcx, rdx
cmp rcx, r8
cmovb rcx, r8
mov rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.14000dcf0
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rbx
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x1400296d5
mov rcx, qword [rbp - 0x80]
add rcx, 0xffffffffffffffe8
call fcn.140001b90
add rax, 0x18
mov qword [rbx], rax
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
add rbx, 8
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x70]
cmp rcx, rbx
jae 0x14002979d
lea rcx, [rsp + 0x70]
cmp rax, rcx
ja 0x14002979d
lea rdi, [rsp + 0x70]
sub rdi, rax
sar rdi, 3
cmp rbx, rdx
jne 0x140029771
mov rcx, rbx
sub rcx, rax
sar rcx, 3
movabs r8, 0x1ffffffffffffffe
cmp rcx, r8
jbe 0x140029732
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140029771
mov rax, rdx
shr rax, 1
sub r13, rax
cmp r13, rdx
jae 0x140029753
xor edx, edx
jmp 0x140029756
add rdx, rax
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.14000dcf0
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rbx
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x140029798
mov rcx, qword [rax + rdi*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rbx], rax
mov rbx, qword [rsp + 0x38]
jmp 0x14002982b
cmp rbx, rdx
jne 0x140029803
mov rcx, rbx
sub rcx, rax
sar rcx, 3
movabs r8, 0x1ffffffffffffffe
cmp rcx, r8
jbe 0x1400297c9
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140029803
mov rax, rdx
shr rax, 1
sub r13, rax
cmp r13, rdx
jae 0x1400297ea
xor edx, edx
jmp 0x1400297ed
add rdx, rax
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.14000dcf0
mov rbx, qword [rsp + 0x38]
mov qword [rbp - 0x70], rbx
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x14002982b
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140001b90
add rax, 0x18
mov qword [rbx], rax
mov rbx, qword [rsp + 0x38]
add rbx, 8
mov qword [rsp + 0x38], rbx
xor r13d, r13d
mov dword [rsp + 0x60], r13d
mov rax, qword [r15]
lea rdx, [rsp + 0x60]
mov rcx, r15
call qword [rax + reloc.ATL100.DLL_Ordinal_32]
mov byte [r15 + 0x5c], r13b
mov rax, qword [r15]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, r15
call qword [rax + 0x18]
mov r11d, dword [r15 + 0x50]
lea rbx, str.SOFTWARESony_CorporationVAIO_Update
cmp r11d, 7
je 0x14002987a
cmp r11d, 8
jne 0x140029d18
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x28], r13
mov dword [rbp - 0x20], r13d
mov qword [rbp - 0x18], r13
mov r9d, 0x2001f
mov r8, rbx
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x28]
call fcn.140008440
test eax, eax
jne 0x140029cc8
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
test rbx, 0xffffffffffff0000
jne 0x140029920
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.1400017e0
test rax, rax
je 0x140029934
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140001f70
jmp 0x140029934
mov r8d, 0x25
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.140001e80
nop
lea r8, [0x1400ddd20]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 8]
call fcn.140002ce0
nop
lea r8, str.TaskManager
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140002ce0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400299be
cmp dword [rbx + 0x10], 0
jl 0x1400299af
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400299af
call fcn.140001b90
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1400299a4
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x1400299be
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140001e80
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400299de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400299fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r9d, 0x2001f
mov rsi, qword [rsp + 0x50]
mov r8, rsi
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x28]
call fcn.140008440
mov r14, qword [rbp - 0x28]
test eax, eax
jne 0x140029c71
lea rdx, str.Task
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rbp + 0x70], r13d
lea rax, [rbp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
xor r8d, r8d
lea rdx, str.AppStartupPath
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140029b2a
mov eax, dword [rbp - 0x30]
cmp eax, 1
je 0x140029a79
cmp eax, 2
jne 0x140029b2a
mov edi, dword [rbp + 0x70]
shr edi, 1
jns 0x140029a8b
mov ecx, 0x80070057
call fcn.140001000
int3
mov rbx, qword [rsp + 0x58]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140029ab2
mov edx, edi
lea rcx, [rsp + 0x58]
call fcn.140001c20
mov rbx, qword [rsp + 0x58]
lea eax, [rdi + rdi]
mov dword [rbp + 0x78], eax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x38]
xor r8d, r8d
lea rdx, str.AppStartupPath
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140029afd
mov eax, dword [rbp - 0x38]
cmp eax, 1
je 0x140029aee
cmp eax, 2
jne 0x140029afd
test rbx, rbx
je 0x140029afd
cmp dword [rbp + 0x78], 0
jne 0x140029afd
mov word [rbx], r13w
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_wcsnlen]
test eax, eax
js 0x140029b1f
cmp eax, dword [rbx - 0xc]
jg 0x140029b1f
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r13w
jmp 0x140029b2f
mov ecx, 0x80070057
call fcn.140001000
int3
mov rbx, qword [rsp + 0x58]
mov dword [rbp + 0x80], r13d
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x3c]
xor r8d, r8d
lea rdx, str.AppStartupOption
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140029c3f
mov eax, dword [rbp - 0x3c]
cmp eax, 1
je 0x140029b77
cmp eax, 2
jne 0x140029c3f
mov r13d, dword [rbp + 0x80]
shr r13d, 1
jns 0x140029b8e
mov ecx, 0x80070057
call fcn.140001000
int3
mov rdi, qword [rbp - 0x68]
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, r13d
or eax, ecx
jge 0x140029bb4
mov edx, r13d
lea rcx, [rbp - 0x68]
call fcn.140001c20
mov rdi, qword [rbp - 0x68]
lea eax, [r13 + r13]
mov dword [rbp + 0x88], eax
lea rax, [rbp + 0x88]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x34]
xor r8d, r8d
lea rdx, str.AppStartupOption
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140029c0f
mov eax, dword [rbp - 0x34]
cmp eax, 1
je 0x140029bf8
cmp eax, 2
jne 0x140029c0f
xor r13d, r13d
test rdi, rdi
je 0x140029c12
cmp dword [rbp + 0x88], r13d
jne 0x140029c12
mov word [rdi], r13w
jmp 0x140029c12
xor r13d, r13d
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
call qword [sym.imp.MSVCR100.dll_wcsnlen]
test eax, eax
js 0x140029c34
cmp eax, dword [rdi - 0xc]
jg 0x140029c34
mov dword [rdi - 0x10], eax
cdqe
mov word [rdi + rax*2], r13w
jmp 0x140029c3f
mov ecx, 0x80070057
call fcn.140001000
int3
lea rdx, str.AppName
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rdx, str.AppStartupPath
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rdx, str.AppStartupOption
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
jmp 0x140029c76
mov rbx, qword [rsp + 0x58]
cmp dword [rbx - 0x10], 0
je 0x140029c90
xor r9d, r9d
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x58]
mov rcx, r15
call fcn.140023140
test r14, r14
je 0x140029ca2
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x28], r13
mov dword [rbp - 0x20], r13d
lea rdx, [rsi - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029cc1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rbx, str.SOFTWARESony_CorporationVAIO_Update
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x140029cd8
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029cf8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029d18
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
test rbx, 0xffffffffffff0000
jne 0x140029d5e
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.1400017e0
test rax, rax
je 0x140029d72
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140001f70
jmp 0x140029d72
mov r8d, 0x25
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.140001e80
nop
lea r8, [0x1400ddd20]
lea rdx, [rsp + 0x68]
lea rcx, [rbp]
call fcn.140002ce0
nop
lea r8, str.TaskManager
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.140002ce0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140029dfc
cmp dword [rbx + 0x10], 0
jl 0x140029ded
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140029ded
call fcn.140001b90
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140029de2
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x68], rax
jmp 0x140029dfc
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x68]
call fcn.140001e80
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029e1c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029e3b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x68]
mov rdx, rbx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [r15 + 0x60], r13d
mov eax, dword [r15 + 0x50]
cmp eax, 7
je 0x140029e62
cmp eax, 8
jne 0x140029e66
mov dword [r15 + 0x50], r13d
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029e82
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x140029ed4
mov rdi, qword [rsp + 0x38]
cmp rbx, rdi
je 0x140029ecc
nop word [rax + rax]
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029ebe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rbx, 8
cmp rbx, rdi
jne 0x140029ea0
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029f04
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140029f25
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x140029f44
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rsp, 0x128
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret