Function at 0x140099aa0
Capabilities:
Create process on windows
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x308
movaps xmmword [rsp + 0x2f0], xmm7
movaps xmmword [rsp + 0x2e0], xmm6
mov r15, rdx
mov r12, rcx
mov rax, qword [0x1402b7040]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
lea rsi, [rdx + 8]
mov rdx, qword [rdx + 8]
mov rcx, r15
call fcn.140107140
mov qword [r15], rsi
xorps xmm0, xmm0
movups xmmword [r15 + 8], xmm0
lea rax, [rsp + 0x262]
mov byte [rax + 0x15], 2
lea rcx, [0x14027ce70]
lea rsi, [rsp + 0x260]
cmp rsi, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
mov word [rsp + 0x260], 0x7670
mov byte [rsp + 0x262], 0
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x200], rax
movaps xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x1d0], 0
cmp byte [r12 + 0x5f], 0
js 0x140099c7d
lea rdx, [r12 + 0x48]
jmp 0x140099c82
mov dword [r12 + 0xd8], Ordinal_117
lea rcx, [rsp + 0xe0]
mov edx, 0x6c
call fcn.14002d150
lea rax, [rsp + 0x265]
mov byte [rax + 0x12], 5
lea rcx, str.error
cmp rsi, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
mov dword [rsp + 0x260], 0x6f727265
mov word [rsp + 0x264], Ordinal_117
lea rax, [rsp + 0x1e0]
mov qword [rax], rsi
lea rcx, [rsp + 0x240]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x14027b1a8]
lea rbx, [rsp + 0x200]
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call fcn.14018af40
mov rax, qword [rbx]
lea rdi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x140099c1c
mov rcx, qword [rdi]
call fcn.14019cac4
mov rax, qword [rsp + 0xf0]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0xe0]
movups xmmword [rdi], xmm0
xor eax, eax
mov byte [rsp + 0xf7], al
mov byte [rsp + 0xe0], al
cmp byte [rsp + 0x277], al
jns 0x140099d54
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
cmp byte [rsp + 0xf7], 0
jns 0x140099d54
mov rcx, qword [rsp + 0xe0]
call fcn.14019cac4
jmp 0x140099d54
mov rdx, qword [r12 + 0x48]
lea rax, [rsp + 0x200]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000001
xor r8d, r8d
mov r9d, 0x20019
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
mov qword [rsp + 0x40], r12
jne 0x140099d1e
mov dword [rsp + 0x1e0], 0
mov dword [rsp + 0x240], 0xaaaaaaaa
cmp byte [rsp + 0x277], 0
mov rdx, rsi
jns 0x140099cd9
mov rdx, qword [rsp + 0x260]
mov rcx, qword [rsp + 0x200]
lea rdi, [rsp + 0x1e0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x14009b5b3
mov rcx, qword [rsp + 0x200]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [rsp + 0x277], 0
jns 0x140099d35
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
movsx rax, byte [rsp + 0x1d7]
test rax, rax
jns 0x140099d4b
mov rax, qword [rsp + 0x1c8]
test rax, rax
je 0x140099b73
lea rdx, [r12 + 0x60]
mov rcx, r12
call fcn.14009c340
test al, al
jne 0x140099d7a
lea rdx, [r12 + 0x78]
mov rcx, r12
call fcn.14009c340
test al, al
je 0x14009a727
movabs r8, 0x8000000000000000
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x1b0], rax
movaps xmm6, xmmword [0x140275a70]
movaps xmmword [rsp + 0x1a0], xmm6
movsx rdi, byte [r12 + 0xbf]
mov rsi, rdi
test rdi, rdi
jns 0x140099dbe
mov rsi, qword [r12 + 0xb0]
lea rbx, [rsi + 1]
lea rcx, [r8 - 9]
mov qword [rsp + 0xf0], rax
movaps xmmword [rsp + 0xe0], xmm6
mov qword [rsp + 0x80], rcx
cmp rbx, rcx
ja 0x14009c306
lea rcx, [r12 + 0xa8]
cmp rbx, 0xb
jb 0x140099ecb
mov r13, rcx
mov rax, rbx
or rax, 3
lea rcx, [rax + 1]
cmp rax, 0xb
mov r14d, Ordinal_14
cmovne r14, rcx
test r14, r14
js 0x14009c2c8
lea rcx, [r14 + r14]
call fcn.14019ca88
movabs r8, 0x8000000000000000
or r14, r8
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rbx
mov rcx, r13
mov rdx, r13
test dil, dil
jns 0x140099e5a
mov rdx, qword [rcx]
lea rdi, [rax + rsi*2]
cmp rdx, rax
jb 0x140099e6c
cmp rdx, rdi
jb 0x14009b554
mov qword [rsp + 0x50], rcx
test rsi, rsi
je 0x140099e8e
add rsi, rsi
mov rcx, rax
mov r8, rsi
call fcn.1401d8080
movabs r8, 0x8000000000000000
lea rax, [rdi + 2]
lea rdx, [0x14027cdd6]
cmp rdi, rdx
seta cl
cmp rax, rdx
setbe al
or al, cl
je 0x14009b554
mov dword [rdi], 0x5c
movsx rdi, byte [r12 + 0xd7]
test rdi, rdi
js 0x140099f0a
lea rdx, [r12 + 0xc0]
jmp 0x140099f1a
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], 0
mov byte [rsp + 0xf7], bl
mov rdx, rcx
test dil, dil
jns 0x140099ef4
mov rdx, qword [rcx]
test rsi, rsi
js 0x14009b554
lea rax, [rsp + 0xe0]
jmp 0x140099e5a
mov rdi, qword [r12 + 0xc8]
mov rdx, qword [r12 + 0xc0]
test rdi, rdi
sete al
test rdx, rdx
setne cl
or cl, al
je 0x14009b554
movsx rcx, byte [rsp + 0xf7]
dec r8
mov eax, 0xa
mov rsi, rcx
test rcx, rcx
jns 0x140099f5d
mov rax, qword [rsp + 0xf0]
and rax, r8
dec rax
mov rsi, qword [rsp + 0xe8]
mov qword [rsp + 0x90], r8
mov r8, rax
sub r8, rsi
cmp r8, rdi
jb 0x140099f87
test rdi, rdi
je 0x14009a012
test cl, cl
js 0x140099fbb
lea rbx, [rsp + 0xe0]
jmp 0x140099fc3
lea r8, [rsi + rdi]
sub r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xe0]
mov rdx, rax
mov r9, rsi
call fcn.140140960
jmp 0x14009a012
mov rbx, qword [rsp + 0xe0]
test rdi, rdi
js 0x14009b554
lea rcx, [rbx + rsi*2]
lea rax, [rcx + rdi*2]
cmp rdx, rcx
setb r8b
cmp rdx, rax
setae al
or al, r8b
je 0x14009b554
lea r8, [rdi + rdi]
call fcn.1401d8080
add rsi, rdi
cmp byte [rsp + 0xf7], 0
jns 0x14009b5a3
mov qword [rsp + 0xe8], rsi
mov word [rbx + rsi*2], 0
lea rcx, [rsp + 0xe0]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x1b0], rax
movaps xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x1a0], xmm0
mov r8d, 0xc0
xor edx, edx
call fcn.1401d8720
cmp byte [rsp + 0x1b7], 0
js 0x14009a052
lea r9, [rsp + 0x1a0]
jmp 0x14009a05a
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009a069
mov rdx, qword [r12]
lea r8, str.Name
lea rcx, [rsp + 0x260]
call fcn.14009cb90
cmp byte [rsp + 0xf7], 0
jns 0x14009a094
mov rcx, qword [rsp + 0xe0]
call fcn.14019cac4
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0x260]
movaps xmmword [rsp + 0xe0], xmm0
cmp byte [rsp + 0x1b7], 0
jns 0x14009a0c8
mov r9, qword [rsp + 0x1a0]
jmp 0x14009a0d0
lea r9, [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009a0df
mov rdx, qword [r12]
lea rsi, [rsp + 0xf8]
lea r8, [0x14027ce84]
lea rcx, [rsp + 0x260]
call fcn.14009cb90
cmp byte [rsi + 0x17], 0
jns 0x14009a10e
mov rcx, qword [rsp + 0xf8]
call fcn.14019cac4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x14009a139
lea r9, [rsp + 0x1a0]
jmp 0x14009a141
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009a150
mov rdx, qword [r12]
lea rdi, [rsp + 0x110]
lea r8, [0x14027ce94]
lea rcx, [rsp + 0x260]
call fcn.14009cb90
mov rcx, rdi
cmp byte [rdi + 0x17], 0
jns 0x14009a18a
mov rcx, qword [rsp + 0x110]
call fcn.14019cac4
lea rcx, [rsp + 0x110]
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x14009a1b5
lea r9, [rsp + 0x1a0]
jmp 0x14009a1bd
mov r9, qword [rsp + 0x1a0]
mov qword [rsp + 0x78], rsi
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009a1d1
mov rdx, qword [r12]
lea rsi, [rsp + 0x128]
lea r8, str.URL1
lea rcx, [rsp + 0x260]
call fcn.14009cb90
cmp byte [rsi + 0x17], 0
jns 0x14009a200
mov rcx, qword [rsp + 0x128]
call fcn.14019cac4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
cmp byte [rsp + 0x1b7], 0
jns 0x14009a22b
mov r9, qword [rsp + 0x1a0]
jmp 0x14009a233
lea r9, [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009a242
mov rdx, qword [r12]
lea rsi, [rsp + 0x140]
lea r8, [0x14027cea6]
lea rcx, [rsp + 0x260]
call fcn.14009cb90
cmp byte [rsi + 0x17], 0
jns 0x14009a271
mov rcx, qword [rsp + 0x140]
call fcn.14019cac4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x14009a29c
lea r9, [rsp + 0x1a0]
jmp 0x14009a2a4
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009a2b3
mov rdx, qword [r12]
lea rdi, [rsp + 0x158]
lea r8, str.ServerFileName
lea rcx, [rsp + 0x260]
call fcn.14009cb90
mov rcx, rdi
cmp byte [rdi + 0x17], 0
jns 0x14009a2ed
mov rcx, qword [rsp + 0x158]
call fcn.14019cac4
lea rcx, [rsp + 0x158]
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x14009a318
lea r9, [rsp + 0x1a0]
jmp 0x14009a320
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009a32f
mov rdx, qword [r12]
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x60], r15
lea rdi, [rsp + 0x170]
lea r8, str.UpdatedApplications
lea rcx, [rsp + 0x260]
call fcn.14009cb90
cmp byte [rdi + 0x17], 0
jns 0x14009a36b
mov rcx, qword [rsp + 0x170]
call fcn.14019cac4
mov rax, qword [rsp + 0x270]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rdi], xmm0
lea rsi, [rsp + 0xc0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rax
movaps xmmword [rsi], xmm6
mov rcx, rsi
mov qword [rsp + 0x70], rdi
mov rdx, rdi
mov r8b, 0x3b
call fcn.14009cd20
mov r15, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x98], rax
cmp r15, rax
je 0x14009a3d4
movabs rbx, 0x6db6db6db6db6db7
xorps xmm7, xmm7
jmp 0x14009b20e
movsx rax, byte [rsp + 0xf7]
test rax, rax
jns 0x14009a3ea
mov rax, qword [rsp + 0xe8]
test rax, rax
mov r15, qword [rsp + 0x60]
je 0x14009a4a8
movsx rax, byte [rsp + 0x10f]
test rax, rax
jns 0x14009a40e
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x14009a4a8
movsx rax, byte [rsp + 0x127]
test rax, rax
jns 0x14009a42d
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x14009a4a8
movsx rax, byte [rsp + 0x157]
test rax, rax
jns 0x14009a448
mov rax, qword [rsp + 0x148]
test rax, rax
je 0x14009a4a8
movsx rax, byte [rsp + 0x16f]
test rax, rax
jns 0x14009a463
mov rax, qword [rsp + 0x160]
test rax, rax
je 0x14009a4a8
movsx rax, byte [rsp + 0x187]
test rax, rax
jns 0x14009a47e
mov rax, qword [rsp + 0x178]
test rax, rax
je 0x14009a4a8
lea r12, [rsp + 0x1c0]
mov rcx, r12
call fcn.14009d3a0
mov rcx, qword [rsp + 0x188]
mov rdx, qword [rsp + 0x190]
jmp 0x14009a87f
mov dword [r12 + 0xd8], 0x67
lea rcx, [rsp + 0x260]
mov edx, 0x67
call fcn.14002d150
lea rax, [rsp + 0x205]
mov byte [rax + 0x12], 5
lea rcx, str.error
lea r8, [rsp + 0x200]
cmp r8, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
mov dword [rsp + 0x200], 0x6f727265
mov word [rsp + 0x204], Ordinal_117
lea rax, [rsp + 0x240]
mov qword [rax], r8
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x1e0]
mov rcx, r15
mov rdx, rsi
call fcn.14018af40
mov rax, qword [rsi]
lea rsi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x14009a556
mov rcx, qword [rsi]
call fcn.14019cac4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
xor eax, eax
mov byte [rsp + 0x277], al
mov byte [rsp + 0x260], al
cmp byte [rsp + 0x217], al
js 0x14009a5ba
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
jne 0x14009a823
mov rsi, qword [rsp + 0x188]
test rsi, rsi
je 0x14009a61a
mov rdi, qword [rsp + 0x190]
mov rcx, rsi
cmp rsi, rdi
je 0x14009a60d
add rdi, 0xffffffffffffffc8
jmp 0x14009a5f4
mov rcx, qword [rsp + 0x200]
call fcn.14019cac4
cmp byte [rsp + 0x277], 0
jns 0x14009a586
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
jmp 0x14009a586
mov rcx, qword [rdi]
call fcn.14019cac4
lea rax, [rdi - 0x38]
cmp rdi, rsi
mov rdi, rax
je 0x14009a605
test rdi, rdi
je 0x14009b554
cmp byte [rdi + 0x17], 0
jns 0x14009a5e8
jmp 0x14009a5e0
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x190], rsi
call fcn.14019cac4
cmp byte [rsp + 0x187], 0
jns 0x14009a631
mov rcx, qword [rsp + 0x170]
call fcn.14019cac4
cmp byte [rsp + 0x16f], 0
jns 0x14009a648
mov rcx, qword [rsp + 0x158]
call fcn.14019cac4
cmp byte [rsp + 0x157], 0
jns 0x14009a65f
mov rcx, qword [rsp + 0x140]
call fcn.14019cac4
cmp byte [rsp + 0x13f], 0
jns 0x14009a676
mov rcx, qword [rsp + 0x128]
call fcn.14019cac4
cmp byte [rsp + 0x127], 0
jns 0x14009a68d
mov rcx, qword [rsp + 0x110]
call fcn.14019cac4
cmp byte [rsp + 0x10f], 0
jns 0x14009a6a4
mov rcx, qword [rsp + 0xf8]
call fcn.14019cac4
cmp byte [rsp + 0xf7], 0
jns 0x14009a6bb
mov rcx, qword [rsp + 0xe0]
call fcn.14019cac4
cmp byte [rsp + 0x1b7], 0
jns 0x14009a6d2
mov rcx, qword [rsp + 0x1a0]
call fcn.14019cac4
cmp byte [rsp + 0x1d7], 0
jns 0x14009a6e9
mov rcx, qword [rsp + 0x1c0]
call fcn.14019cac4
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
cmp rcx, qword [0x1402b7040]
je 0x14009a703
call fcn.14019f290
int3
movaps xmm6, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2f0]
add rsp, 0x308
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov edx, dword [r12 + 0xd8]
lea rcx, [rsp + 0xe0]
call fcn.14002d150
lea rax, [rsp + 0x265]
mov byte [rax + 0x12], 5
lea rcx, str.error
cmp rsi, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
mov dword [rsp + 0x260], 0x6f727265
mov word [rsp + 0x264], Ordinal_117
lea rax, [rsp + 0x1e0]
mov qword [rax], rsi
lea rcx, [rsp + 0x240]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x14027b1a8]
lea rdi, [rsp + 0x200]
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call fcn.14018af40
mov rax, qword [rdi]
lea rsi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x14009a7c7
mov rcx, qword [rsi]
call fcn.14019cac4
mov rax, qword [rsp + 0xf0]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0xe0]
movups xmmword [rsi], xmm0
xor eax, eax
mov byte [rsp + 0xf7], al
mov byte [rsp + 0xe0], al
cmp byte [rsp + 0x277], al
jns 0x14009a6d2
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
cmp byte [rsp + 0xf7], 0
jns 0x14009a6d2
mov rcx, qword [rsp + 0xe0]
jmp 0x14009a6cd
mov rdi, qword [rsp + 0xc8]
mov rcx, rsi
cmp rsi, rdi
je 0x14009a85a
add rdi, 0xffffffffffffffe8
test rdi, rdi
je 0x14009b554
cmp byte [rdi + 0x17], 0
js 0x14009a86c
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
jne 0x14009a837
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rsi
call fcn.14019cac4
jmp 0x14009a597
mov rcx, qword [rdi]
call fcn.14019cac4
jmp 0x14009a846
cmp rax, r8
ja 0x14009a897
add rcx, 0x38
cmp rcx, rdx
je 0x14009ab06
mov r8, qword [rcx + 0x18]
cmp byte [rcx + 0x20], 1
jne 0x14009a876
cmp rax, r8
jb 0x14009a87b
mov r8, qword [rcx + 0x28]
cmp byte [rcx + 0x30], 1
je 0x14009a8a8
cmp rax, r8
jae 0x14009a87b
jmp 0x14009a8ad
cmp rax, r8
ja 0x14009a87b
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], 0
call fcn.1400a24a0
mov rsi, rax
mov r8, qword [rsp + 0x40]
mov dword [r8 + 0xd8], 0
mov rax, qword [r8 + 0xf8]
mov rcx, qword [r8 + 0x100]
mov rdx, rcx
sub rdx, rax
dec rcx
cmp rdx, rcx
ja 0x14009b554
mov qword [r8 + 0x100], rax
cmp byte [rsp + 0x127], 0
lea r8, [rsp + 0x110]
jns 0x14009a91d
mov r8, qword [rsp + 0x110]
mov rcx, rsi
mov edx, 0x2712
call fcn.1400a2440
mov rcx, rsi
mov edx, 0x40
xor r8d, r8d
call fcn.1400a2440
mov rcx, rsi
mov edx, 0x51
xor r8d, r8d
call fcn.1400a2440
lea r8, [0x14009d550]
mov rcx, rsi
mov edx, 0x4e2b
call fcn.1400a2440
mov rcx, rsi
mov edx, 0x2711
mov r8, qword [rsp + 0x40]
call fcn.1400a2440
mov rcx, rsi
mov edx, Ordinal_14
mov r8d, 0x708
call fcn.1400a2440
mov rcx, rsi
call fcn.1400a25b0
mov qword [rsp + 0x260], rsi
test rsi, rsi
je 0x14009a9a5
lea rcx, [rsp + 0x260]
call fcn.1400b1730
mov rax, qword [rsp + 0x40]
mov rdx, qword [rax + 0xf8]
mov r8, qword [rax + 0x100]
cmp rdx, r8
je 0x14009bb51
sub r8d, edx
lea rsi, [rsp + 0x200]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rax
movaps xmmword [rsi], xmm6
lea rbp, [rsp + 0x260]
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x40], xmm6
movaps xmmword [rbp + 0x50], xmm6
movups xmmword [rbp + 0x5c], xmm6
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x10], xmm6
mov byte [rbp], 0
mov qword [rbp + 0x44], 0
mov dword [rbp + 0x4c], 0x67452301
movabs rax, 0x98badcfeefcdab89
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x58], 0x10325476
mov rcx, rbp
call fcn.140092db0
mov rcx, rbp
call fcn.140092e70
mov rcx, rbp
mov rdx, rsi
call fcn.140093ab0
movsx rbx, byte [rsi + 0x17]
mov r8, rbx
test rbx, rbx
jns 0x14009aa59
mov r8, qword [rsp + 0x208]
movsx rax, byte [rsp + 0x157]
mov rcx, rax
test rax, rax
jns 0x14009aa72
mov rcx, qword [rsp + 0x148]
cmp r8, rcx
jne 0x14009aaaf
test al, al
jns 0x14009aa8b
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x88], rax
test bl, bl
jns 0x14009aa97
mov rsi, qword [rsp + 0x200]
mov rcx, rsi
mov rdx, qword [rsp + 0x88]
call fcn.1401d7ed0
test eax, eax
je 0x14009b6f4
mov rax, qword [rsp + 0x40]
mov dword [rax + 0xd8], 0x6a
xor edi, edi
test bl, bl
jns 0x14009aad1
mov rcx, qword [rsp + 0x200]
call fcn.14019cac4
test dil, dil
je 0x14009bb44
cmp byte [rsp + 0xb7], 0
js 0x14009b7da
lea r8, [rsp + 0xa0]
jmp 0x14009b7e2
mov qword [rax + 0x40], Ordinal_26
mov rax, qword [rax + 0x38]
jmp 0x14009ab9f
lea r14, [rsp + 0x266]
mov byte [r14 + 0x11], 6
lea rax, str.status
lea r8, [rsp + 0x260]
cmp r8, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x14009b554
mov word [rsp + 0x264], 0x7375
mov dword [rsp + 0x260], 0x74617473
mov byte [rsp + 0x266], 0
lea rdi, [rsp + 0x1e0]
mov qword [rdi], r8
lea rbx, [rsp + 0x240]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
call fcn.14018af40
mov rax, qword [rsi]
cmp byte [rax + 0x4f], 0
js 0x14009aaf5
mov byte [rax + 0x4f], 0x13
add rax, 0x38
movups xmm0, xmmword [str.no_update_available]
movups xmmword [rax], xmm0
mov dword [rax + 0xf], 0x656c6261
mov byte [rax + 0x13], 0
cmp byte [rsp + 0x277], 0
lea r8, [rsp + 0x260]
jns 0x14009abdb
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
lea r8, [rsp + 0x260]
mov byte [rsp + 0x277], 6
lea rax, str.ver_pv
cmp r8, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x14009b554
mov word [rsp + 0x264], 0x7670
mov dword [rsp + 0x260], 0x5f726576
mov byte [rsp + 0x266], 0
mov qword [rsp + 0x1e0], r8
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
call fcn.14018af40
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
cmp rcx, r12
je 0x14009ac86
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x1d7]
js 0x14009bcdf
test r8b, r8b
js 0x14009ad67
mov rax, qword [rsp + 0x1d0]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x277], 0
jns 0x14009ac9d
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
lea rax, [rsp + 0x26e]
mov byte [rax + 9], reloc.WLDAP32.dll_Ordinal_14
lea rcx, str.verToBeUpdated
lea r8, [rsp + 0x260]
cmp r8, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
movabs rax, 0x6465746164705565
mov qword [rsp + 0x266], rax
movabs rax, 0x5565426f54726576
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x26e], 0
mov qword [rsp + 0x1e0], r8
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
call fcn.14018af40
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
lea rdx, [rsp + 0x170]
cmp rcx, rdx
je 0x14009a5c7
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x187]
js 0x14009bcc0
test r8b, r8b
js 0x14009ad81
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
jmp 0x14009a5c7
mov rdx, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x1c8]
call fcn.1401078c0
jmp 0x14009ac86
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x178]
call fcn.1401078c0
jmp 0x14009a5c7
cmp rcx, rax
ja 0x14009c2f9
mov eax, ecx
and al, 0x7f
mov byte [rsp + 0x217], al
lea r8, [rsp + 0x200]
jmp 0x14009ae90
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
lea rcx, [rsp + 0x200]
call fcn.14010ba70
jmp 0x14009ae0e
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x210], rax
movaps xmmword [rsp + 0x200], xmm6
cmp byte [rsi + 0x2f], 0
js 0x14009adbc
add rsi, 0x18
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x210], rax
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x200], xmm0
movsx rax, byte [rsp + 0x217]
test rax, rax
mov rdx, qword [rsp + 0x208]
mov rcx, rax
cmovs rcx, rdx
dec rcx
test rax, rax
jns 0x14009c2f0
cmp rcx, rdx
jae 0x14009c2f9
test al, al
mov r8, qword [rsp + 0x200]
lea r9, [rsp + 0x200]
cmovs r9, r8
movzx r9d, byte [r9 + rcx]
xor r10d, r10d
cmp r9d, 0x29
je 0x14009ae6f
cmp r9d, 0x5d
jne 0x14009b032
mov r10b, 1
test al, al
lea rsi, [rsp + 0x1e0]
jns 0x14009ad9b
cmp rcx, rdx
ja 0x14009c2f9
mov qword [rsp + 0x208], rcx
mov byte [r8 + rcx], 0
mov rax, qword [rsp + 0x260]
cmp qword [rsp + 0x268], rax
je 0x14009b554
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x1f0], rcx
movaps xmmword [rsp + 0x1e0], xmm6
cmp byte [rax + 0x17], 0
mov qword [rsp + 0x58], r10
js 0x14009afd6
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1f0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1e0], xmm0
movsx rdi, byte [rsp + 0x1f7]
test rdi, rdi
mov rbp, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x1e8]
cmovs rsi, rbp
mov rbx, rdi
cmovs rbx, r13
test rbx, rbx
je 0x14009af45
xor edi, edi
movsx ecx, byte [rsi + rdi]
call fcn.14019ce08
mov byte [rsi + rdi], al
inc rdi
cmp rbx, rdi
jne 0x14009af19
mov rbp, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x1e8]
mov dil, byte [rsp + 0x1f7]
lea rcx, [rsp + 0x1f0]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rsp + 0x243], ecx
mov dword [rsp + 0x240], eax
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x1f0], rax
movaps xmmword [rsp + 0x1e0], xmm6
lea rcx, [rsp + 0x1e0]
lea rdx, [rsp + 0x200]
mov r8b, Ordinal_46
call fcn.14009cd20
mov rbx, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e8]
sub rax, rbx
sar rax, 3
movabs rcx, 0xaaaaaaaaaaaaaaab
imul rax, rcx
cmp rax, 2
mov qword [rsp + 0x48], rbp
je 0x14009afea
cmp rax, 1
je 0x14009b0c6
xor ebp, ebp
xor r14d, r14d
jmp 0x14009b0dc
mov rdx, qword [rax]
mov r8, qword [rax + 8]
mov rcx, rsi
call fcn.14010ba70
jmp 0x14009aeeb
mov rcx, rbx
call fcn.14009d3a0
mov rbp, rax
mov rcx, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e8]
sub rax, rcx
sar rax, 3
movabs rdx, 0xaaaaaaaaaaaaaaab
imul rax, rdx
cmp rax, 1
jbe 0x14009b554
add rcx, 0x18
call fcn.14009d3a0
jmp 0x14009b0d1
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x48], 0
xor r13d, r13d
xor edi, edi
xor ebp, ebp
xor r14d, r14d
jmp 0x14009b0f6
mov rcx, qword [rsi]
call fcn.14019cac4
jmp 0x14009b080
mov rsi, qword [rsp + 0x1e8]
mov rcx, rbx
cmp rbx, rsi
je 0x14009b094
add rsi, 0xffffffffffffffe8
test rsi, rsi
je 0x14009b554
cmp byte [rsi + 0x17], 0
js 0x14009b053
lea rax, [rsi - 0x18]
cmp rsi, rbx
mov rsi, rax
jne 0x14009b071
mov rcx, qword [rsp + 0x1e0]
mov qword [rsp + 0x1e8], rbx
call fcn.14019cac4
jmp 0x14009b0e5
mov rcx, qword [r14]
call fcn.14019cac4
add r14, 0x38
cmp r14, rbp
je 0x14009b114
test r14, r14
je 0x14009b554
cmp byte [r14 + 0x17], 0
jns 0x14009b0ab
jmp 0x14009b0a3
mov rcx, rbx
call fcn.14009d3a0
mov rbp, rax
mov r14, rax
mov rbx, qword [rsp + 0x1e0]
test rbx, rbx
jne 0x14009b05d
mov al, byte [rsp + 0x217]
movabs rbx, 0x6db6db6db6db6db7
test al, al
jns 0x14009b107
mov rcx, qword [rsp + 0x200]
call fcn.14019cac4
mov rsi, qword [rsp + 0x260]
jmp 0x14009b346
mov r14, qword [rsp + 0x188]
imul rax, rsi, 0x38
add rbx, rax
add r12, 0x38
mov qword [rsp + 0x188], r13
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x198], rbx
test r14, r14
je 0x14009b14c
mov rcx, r14
call fcn.14019cac4
movabs rbx, 0x6db6db6db6db6db7
jmp 0x14009b1e0
mov rcx, r12
mov rdx, qword [rsp + 0x48]
mov r8, r13
call fcn.14010ba70
jmp 0x14009b1a6
test r12, r12
je 0x14009b554
test dil, dil
js 0x14009b15b
mov rax, qword [rsp + 0x48]
mov qword [r12], rax
mov qword [r12 + 8], r13
mov eax, dword [rsp + 0x240]
mov ecx, dword [rsp + 0x243]
mov dword [r12 + 0x10], eax
mov dword [r12 + 0x13], ecx
mov byte [r12 + 0x17], dil
mov qword [r12 + 0x18], rbp
mov rax, qword [rsp + 0x68]
mov byte [r12 + 0x20], al
mov eax, dword [rsp + 0x220]
mov ecx, dword [rsp + 0x223]
mov dword [r12 + 0x21], eax
mov dword [r12 + 0x24], ecx
mov qword [r12 + 0x28], r14
mov rax, qword [rsp + 0x58]
mov byte [r12 + 0x30], al
add r12, 0x38
mov qword [rsp + 0x190], r12
mov r12, qword [rsp + 0x40]
test dil, dil
jns 0x14009b1fc
mov rcx, qword [rsp + 0x48]
call fcn.14019cac4
add r15, 0x18
cmp r15, qword [rsp + 0x98]
je 0x14009a3d4
mov eax, 0xaaaaaaaa
mov dword [rsp + 0x223], eax
mov dword [rsp + 0x220], eax
xor eax, eax
mov dword [rsp + 0x240], eax
mov dword [rsp + 0x243], eax
movsx rax, byte [r15 + 0x17]
test rax, rax
jns 0x14009b23f
mov rax, qword [r15 + 8]
test rax, rax
je 0x14009b2ee
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x270], rax
movaps xmmword [rsp + 0x260], xmm6
lea rcx, [rsp + 0x260]
mov rdx, r15
mov r8b, Ordinal_41
call fcn.14009cd20
mov rsi, qword [rsp + 0x260]
mov rax, qword [rsp + 0x268]
mov rcx, rax
sub rcx, rsi
cmp rcx, 0x30
je 0x14009b315
lea rcx, [rsp + 0x200]
mov rdx, r15
mov r8b, 0x5b
call fcn.14009cd20
mov rsi, qword [rsp + 0x260]
test rsi, rsi
jne 0x14009b556
mov rsi, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x260], rsi
mov qword [rsp + 0x268], rax
mov rcx, qword [rsp + 0x210]
mov qword [rsp + 0x270], rcx
mov r14b, 1
jmp 0x14009b318
mov qword [rsp + 0x48], 0
xor r13d, r13d
xor edi, edi
xor ebp, ebp
mov qword [rsp + 0x68], 0
xor r14d, r14d
mov qword [rsp + 0x58], 0
jmp 0x14009b34f
xor r14d, r14d
sub rax, rsi
cmp rax, 0x30
mov qword [rsp + 0x68], r14
je 0x14009add3
mov qword [rsp + 0x48], 0
xor r13d, r13d
xor edi, edi
xor ebp, ebp
xor r14d, r14d
mov qword [rsp + 0x58], 0
test rsi, rsi
jne 0x14009b505
test dil, dil
movzx eax, dil
cmovs rax, r13
test rbp, rbp
je 0x14009b1ed
test rax, rax
je 0x14009b1ed
test r14, r14
je 0x14009b1ed
mov r12, qword [rsp + 0x190]
mov rax, qword [rsp + 0x198]
cmp r12, rax
jb 0x14009b16d
mov rcx, qword [rsp + 0x188]
sub r12, rcx
sar r12, 3
imul r12, rbx
lea rsi, [r12 + 1]
movabs rdx, 0x492492492492492
cmp rsi, rdx
ja 0x14009c2c3
sub rax, rcx
sar rax, 3
imul rax, rbx
lea rcx, [rax + rax]
cmp rcx, rsi
cmova rsi, rcx
movabs rcx, 0x249249249249249
cmp rax, rcx
cmovae rsi, rdx
test rsi, rsi
je 0x14009b4df
cmp rsi, rdx
ja 0x14009c2c8
imul rcx, rsi, 0x38
call fcn.14019ca88
mov rbx, rax
imul r12, r12, 0x38
add r12, rbx
je 0x14009b554
test dil, dil
js 0x14009b4e6
mov rax, qword [rsp + 0x48]
mov qword [r12], rax
mov qword [r12 + 8], r13
mov eax, dword [rsp + 0x240]
mov ecx, dword [rsp + 0x243]
mov dword [r12 + 0x10], eax
mov dword [r12 + 0x13], ecx
mov byte [r12 + 0x17], dil
mov qword [r12 + 0x18], rbp
mov rax, qword [rsp + 0x68]
mov byte [r12 + 0x20], al
mov eax, dword [rsp + 0x220]
mov ecx, dword [rsp + 0x223]
mov dword [r12 + 0x21], eax
mov dword [r12 + 0x24], ecx
mov qword [r12 + 0x28], r14
mov rax, qword [rsp + 0x58]
mov byte [r12 + 0x30], al
mov r14, qword [rsp + 0x188]
mov rbp, qword [rsp + 0x190]
mov rax, r14
sub rax, rbp
lea r13, [r12 + rax]
je 0x14009b11c
mov rax, r14
mov rcx, r13
test rcx, rcx
je 0x14009b554
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
movups xmm0, xmmword [rax + 0x18]
movups xmm1, xmmword [rax + 0x21]
movups xmmword [rcx + 0x21], xmm1
movups xmmword [rcx + 0x18], xmm0
add rax, 0x38
add rcx, 0x38
cmp rax, rbp
jne 0x14009b49b
jmp 0x14009b0b4
xor ebx, ebx
jmp 0x14009b3fe
mov rcx, r12
mov rdx, qword [rsp + 0x48]
mov r8, r13
call fcn.14010ba70
jmp 0x14009b43f
mov rcx, qword [rbx]
call fcn.14019cac4
jmp 0x14009b524
mov rbx, qword [rsp + 0x268]
mov rcx, rsi
cmp rsi, rbx
je 0x14009b538
add rbx, 0xffffffffffffffe8
test rbx, rbx
je 0x14009b554
cmp byte [rbx + 0x17], 0
js 0x14009b4fb
lea rax, [rbx - 0x18]
cmp rbx, rsi
mov rbx, rax
jne 0x14009b519
mov rcx, qword [rsp + 0x260]
mov qword [rsp + 0x268], rsi
call fcn.14019cac4
movabs rbx, 0x6db6db6db6db6db7
jmp 0x14009b34f
ud2
mov rdi, qword [rsp + 0x268]
mov rcx, rsi
cmp rsi, rdi
je 0x14009b591
add rdi, 0xffffffffffffffe8
test rdi, rdi
je 0x14009b554
cmp byte [rdi + 0x17], 0
jns 0x14009b57d
mov rcx, qword [rdi]
call fcn.14019cac4
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
jne 0x14009b56a
mov rcx, qword [rsp + 0x260]
mov qword [rsp + 0x268], rsi
call fcn.14019cac4
jmp 0x14009b2b9
mov eax, esi
and al, 0x7f
mov byte [rsp + 0xf7], al
jmp 0x14009a00c
mov eax, dword [rsp + 0x240]
dec eax
cmp eax, 1
ja 0x140099d10
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xf0], rax
movaps xmm0, xmmword [0x140275a70]
movaps xmmword [rsp + 0xe0], xmm0
mov ebx, dword [rsp + 0x1e0]
cmp rbx, 0x17
jae 0x14009bd01
lea r14, [rsp + 0xe0]
mov byte [r14 + 0x17], bl
test rbx, rbx
je 0x14009b615
mov rcx, r14
xor edx, edx
mov r8, rbx
call fcn.1401d8720
mov byte [r14 + rbx], 0
cmp byte [rsp + 0xf7], 0
js 0x14009b62e
lea rax, [rsp + 0xe0]
jmp 0x14009b636
mov rax, qword [rsp + 0xe0]
cmp byte [rsp + 0x277], 0
js 0x14009b64a
lea rdx, [rsp + 0x260]
jmp 0x14009b652
mov rdx, qword [rsp + 0x260]
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x14009b694
cmp byte [rsp + 0xf7], 0
jns 0x140099d10
mov rcx, qword [rsp + 0xe0]
call fcn.14019cac4
jmp 0x140099d10
cmp byte [rsp + 0x1d7], 0
movzx r8d, byte [rsp + 0xf7]
js 0x14009bd52
test r8b, r8b
js 0x14009b6d5
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x1d0], rax
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1c0], xmm0
jmp 0x140099d10
mov rdx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
lea rcx, [rsp + 0x1c0]
call fcn.1401078c0
jmp 0x14009b674
lea rax, [rsp + 0x268]
movups xmmword [rax], xmm6
mov byte [rax + 0xf], 4
lea rcx, str..msi
cmp rbp, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
movabs rax, 0x690073006d002e
mov qword [rsp + 0x260], rax
mov word [rsp + 0x268], 0
movsx rax, byte [rsp + 0x16f]
test rax, rax
lea rcx, [rsp + 0x158]
jns 0x14009b760
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x160]
lea r13, [rax + rcx]
inc r13
xor edi, edi
mov rcx, r13
cmp rax, rdi
je 0x14009be39
mov rsi, rdi
inc rdi
lea rbx, [rcx - 1]
cmp byte [rcx - 2], 0x2e
mov rcx, rbx
jne 0x14009b76c
jmp 0x14009bdc3
test r8b, r8b
cmovs r8, qword [rsp + 0x1c8]
cmovs r12, qword [rsp + 0x1c0]
mov rdx, r12
call fcn.1401079b0
jmp 0x14009b970
mov rdx, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x1c8]
call fcn.1401078c0
jmp 0x14009b970
mov qword [rax + 0x40], 0x10
mov rax, qword [rax + 0x38]
jmp 0x14009b89d
mov r8, qword [rsp + 0xa0]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.open
lea r9, [0x14027cf26]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea r14, [rsp + 0x266]
mov byte [r14 + 0x11], 6
lea rax, str.status
cmp rbp, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x14009b554
mov word [rsp + 0x264], 0x7375
mov dword [rsp + 0x260], 0x74617473
mov byte [rsp + 0x266], 0
lea rdi, [rsp + 0x1e0]
mov qword [rdi], rbp
lea rbx, [rsp + 0x240]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.14018af40
mov rax, qword [rsi]
cmp byte [rax + 0x4f], 0
js 0x14009b7c9
mov byte [rax + 0x4f], 0x10
add rax, 0x38
movups xmm0, xmmword [str.Update_initiated]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
cmp byte [rsp + 0x277], 0
jns 0x14009b8c2
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
mov byte [rsp + 0x277], 6
lea rax, str.ver_pv
cmp rbp, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x14009b554
mov word [rsp + 0x264], 0x7670
mov dword [rsp + 0x260], 0x5f726576
mov byte [rsp + 0x266], 0
mov qword [rsp + 0x1e0], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.14018af40
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
cmp rcx, r12
je 0x14009b970
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x1d7]
js 0x14009b78d
test r8b, r8b
js 0x14009b7af
mov rax, qword [rsp + 0x1d0]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x277], 0
jns 0x14009b987
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
lea rax, [rsp + 0x26e]
mov byte [rax + 9], reloc.WLDAP32.dll_Ordinal_14
lea rcx, str.verToBeUpdated
cmp rbp, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
movabs rax, 0x6465746164705565
mov qword [rsp + 0x266], rax
movabs rax, 0x5565426f54726576
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x26e], 0
mov qword [rsp + 0x1e0], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.14018af40
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
lea rdx, [rsp + 0x170]
cmp rcx, rdx
je 0x14009ba47
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x187]
js 0x14009bc92
test r8b, r8b
js 0x14009bb10
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x277], 0
jns 0x14009ba5e
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
lea rax, [rsp + 0x271]
mov byte [rax + 6], 0x11
lea rcx, str.newVerToInstalled
cmp rbp, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
movups xmm0, xmmword [str.newVerToInstalled]
movaps xmmword [rsp + 0x260], xmm0
mov word [rsp + 0x270], 0x64
mov qword [rsp + 0x1e0], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.14018af40
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
lea rdx, [rsp + 0xf8]
cmp rcx, rdx
je 0x14009bc3a
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x10f]
js 0x14009bc6c
test r8b, r8b
js 0x14009bb2a
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
jmp 0x14009bc3a
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x178]
call fcn.1401078c0
jmp 0x14009ba47
mov rdx, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x100]
call fcn.1401078c0
jmp 0x14009bc3a
mov rax, qword [rsp + 0x40]
mov edx, dword [rax + 0xd8]
jmp 0x14009bb60
mov dword [rax + 0xd8], 0x69
mov edx, 0x69
lea rcx, [rsp + 0x260]
call fcn.14002d150
lea rax, [rsp + 0x205]
mov byte [rax + 0x12], 5
lea rcx, str.error
lea r8, [rsp + 0x200]
cmp r8, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14009b554
mov dword [rsp + 0x200], 0x6f727265
mov word [rsp + 0x204], Ordinal_117
lea rax, [rsp + 0x240]
mov qword [rax], r8
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x14027b1a8]
lea rsi, [rsp + 0x1e0]
mov rcx, r15
mov rdx, rsi
call fcn.14018af40
mov rax, qword [rsi]
lea rsi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x14009bbfd
mov rcx, qword [rsi]
call fcn.14019cac4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
xor eax, eax
mov byte [rsp + 0x277], al
mov byte [rsp + 0x260], al
cmp byte [rsp + 0x217], al
jns 0x14009bc51
mov rcx, qword [rsp + 0x200]
call fcn.14019cac4
cmp byte [rsp + 0x277], 0
jns 0x14009bc51
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
cmp byte [rsp + 0xb7], 0
jns 0x14009a586
mov rcx, qword [rsp + 0xa0]
jmp 0x14009a5d9
test r8b, r8b
jns 0x14009bc86
mov r8, qword [rsp + 0x100]
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0x78]
call fcn.1401079b0
jmp 0x14009bc3a
test r8b, r8b
jns 0x14009bcac
mov r8, qword [rsp + 0x178]
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x70]
call fcn.1401079b0
mov r15, qword [rsp + 0x60]
jmp 0x14009ba47
test r8b, r8b
jns 0x14009bcd5
mov r8, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x170]
call fcn.1401079b0
jmp 0x14009a5c7
test r8b, r8b
cmovs r8, qword [rsp + 0x1c8]
cmovs r12, qword [rsp + 0x1c0]
mov rdx, r12
call fcn.1401079b0
jmp 0x14009ac86
mov rax, rbx
or rax, 7
lea rcx, [rax + 1]
cmp rax, 0x17
mov r12, r15
mov r15d, Ordinal_26
cmovne r15, rcx
mov rcx, r15
call fcn.14019ca88
mov r14, rax
mov qword [rsp + 0xe0], rax
bts r15, 0x3f
mov qword [rsp + 0xf0], r15
mov r15, r12
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0xe8], rbx
jmp 0x14009b608
test r8b, r8b
lea rdx, [rsp + 0xe0]
cmovs r8, qword [rdx + 8]
cmovs rdx, qword [rdx]
lea rcx, [rsp + 0x1c0]
call fcn.1401079b0
jmp 0x14009b674
mov rax, rsi
or rax, 7
lea rcx, [rax + 1]
cmp rax, 0x17
mov r15d, Ordinal_26
cmovne r15, rcx
mov rcx, r15
call fcn.14019ca88
mov r14, rax
mov qword [rsp + 0x1e0], rax
movabs rax, 0x8000000000000000
or r15, rax
mov qword [rsp + 0x1f0], r15
mov qword [rsp + 0x1e8], rsi
jmp 0x14009be01
lea rcx, [rax + 1]
cmp rcx, rdi
je 0x14009be39
mov rcx, rax
sub rcx, rdi
cmp rcx, rax
jae 0x14009c320
cmp rsi, qword [rsp + 0x80]
ja 0x14009c32d
sub r13, rdi
cmp rsi, 0x16
ja 0x14009bd78
lea eax, [rdi - 1]
lea r14, [rsp + 0x1e0]
mov byte [r14 + 0x17], al
cmp r13, r14
jb 0x14009be16
lea rax, [r14 + rdi]
dec rax
cmp r13, rax
jb 0x14009b554
cmp rdi, 1
je 0x14009be2a
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.1401d8080
mov byte [r14 + rdi - 1], 0
mov al, byte [rsp + 0x1f7]
jmp 0x14009be49
xor eax, eax
mov byte [rsp + 0x1f7], al
mov byte [rsp + 0x1e0], al
test al, al
js 0x14009be52
movzx ecx, al
jmp 0x14009be5a
mov rcx, qword [rsp + 0x1e8]
cmp rcx, 3
jne 0x14009be8f
test al, al
js 0x14009be6e
lea rcx, [rsp + 0x1e0]
jmp 0x14009be76
mov rcx, qword [rsp + 0x1e0]
movzx edx, word [rcx]
xor edx, 0x7865
movzx ecx, byte [rcx + 2]
xor ecx, 0x65
or cx, dx
sete sil
jmp 0x14009be91
xor esi, esi
test al, al
jns 0x14009bea2
mov rcx, qword [rsp + 0x1e0]
call fcn.14019cac4
test sil, sil
je 0x14009bee5
cmp byte [rsp + 0x277], 0
js 0x14009bebe
mov byte [rsp + 0x277], 4
mov rax, rbp
jmp 0x14009bed2
mov qword [rsp + 0x268], 4
mov rax, qword [rsp + 0x260]
movabs rcx, 0x6500780065002e
mov qword [rax], rcx
mov word [rax + 8], 0
lea rsi, [rsp + 0x1e0]
movabs rbx, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rbx
movaps xmmword [rsi], xmm6
lea r8, [rsp + 0x260]
mov rcx, rsi
mov rdi, qword [rsp + 0x40]
mov rdx, rdi
call fcn.1401e97f0
mov qword [rsp + 0x250], rbx
movaps xmmword [rsp + 0x240], xmm6
movsx rdi, byte [rdi + 0xbf]
mov rbx, rdi
test rdi, rdi
jns 0x14009bf42
mov rax, qword [rsp + 0x40]
mov rbx, qword [rax + 0xb0]
lea r14, [rbx + 1]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x230], rax
movaps xmmword [rsp + 0x220], xmm6
cmp r14, qword [rsp + 0x80]
ja 0x14009c313
cmp r14, 0xb
jb 0x14009bfd3
mov rax, r14
or rax, 3
lea rcx, [rax + 1]
cmp rax, 0xb
mov r15d, Ordinal_14
cmovne r15, rcx
test r15, r15
js 0x14009c2c8
lea rcx, [r15 + r15]
call fcn.14019ca88
movabs rcx, 0x8000000000000000
or rcx, r15
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], r14
test dil, dil
jns 0x14009c015
mov rdx, qword [rsp + 0x50]
mov rdx, qword [rdx]
jmp 0x14009c01a
xorps xmm0, xmm0
movaps xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], 0
mov byte [rsp + 0x237], r14b
test dil, dil
jns 0x14009c004
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
test rbx, rbx
js 0x14009b554
lea rax, [rsp + 0x220]
mov rdx, qword [rsp + 0x50]
lea rdi, [rax + rbx*2]
cmp rdx, rax
jb 0x14009c02c
cmp rdx, rdi
jb 0x14009b554
test rbx, rbx
je 0x14009c03f
add rbx, rbx
mov rcx, rax
mov r8, rbx
call fcn.1401d8080
lea rax, [rdi + 2]
lea rdx, [0x14027cdd6]
cmp rdi, rdx
seta cl
cmp rax, rdx
setbe al
or al, cl
je 0x14009b554
mov dword [rdi], 0x5c
movsx rdi, byte [rsp + 0x1f7]
test rdi, rdi
cmovs rdi, qword [rsp + 0x1e8]
cmovs rsi, qword [rsp + 0x1e0]
test rdi, rdi
sete al
test rsi, rsi
setne cl
or cl, al
je 0x14009b554
movsx rax, byte [rsp + 0x237]
mov edx, 0xa
mov rbx, rax
test rax, rax
jns 0x14009c0c7
mov rdx, qword [rsp + 0x90]
and rdx, qword [rsp + 0x230]
dec rdx
mov rbx, qword [rsp + 0x228]
mov rcx, rdx
sub rcx, rbx
cmp rcx, rdi
jb 0x14009c179
test rdi, rdi
je 0x14009c145
test al, al
js 0x14009c0f6
lea r14, [rsp + 0x220]
jmp 0x14009c0fe
mov eax, ebx
and al, 0x7f
mov byte [rsp + 0x237], al
jmp 0x14009c13e
mov r14, qword [rsp + 0x220]
test rdi, rdi
js 0x14009b554
lea rcx, [r14 + rbx*2]
cmp rsi, rcx
jb 0x14009c11d
lea rax, [rcx + rdi*2]
cmp rsi, rax
jb 0x14009b554
lea r8, [rdi + rdi]
mov rdx, rsi
call fcn.1401d8080
add rbx, rdi
cmp byte [rsp + 0x237], 0
jns 0x14009c0e9
mov qword [rsp + 0x228], rbx
mov word [r14 + rbx*2], 0
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x250], rax
movaps xmm0, xmmword [rsp + 0x220]
movaps xmmword [rsp + 0x240], xmm0
cmp byte [rsp + 0x257], 0
js 0x14009c1aa
lea rcx, [rsp + 0x240]
jmp 0x14009c1b2
lea r8, [rbx + rdi]
sub r8, rdx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x220]
mov r9, rbx
call fcn.140140960
jmp 0x14009c145
mov rcx, qword [rsp + 0x240]
lea rdx, [0x14027cbe8]
call fcn.1401bafc0
test rax, rax
setne dil
je 0x14009c293
mov rsi, rax
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax + 0xf8]
mov r8, qword [rax + 0x100]
sub r8, rcx
mov edx, 1
mov r9, rsi
call fcn.1401be7d0
mov rcx, rsi
call fcn.1401bcc74
cmp byte [rsp + 0xb7], 0
movzx r8d, byte [rsp + 0x257]
js 0x14009c2cd
test r8b, r8b
js 0x14009c274
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0xb0], rax
movaps xmm0, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0xa0], xmm0
mov r15, qword [rsp + 0x60]
cmp byte [rsp + 0x1f7], 0
jns 0x14009c251
mov rcx, qword [rsp + 0x1e0]
call fcn.14019cac4
cmp byte [rsp + 0x277], 0
jns 0x14009c268
mov rcx, qword [rsp + 0x260]
call fcn.14019cac4
mov bl, byte [rsp + 0x217]
jmp 0x14009aac0
mov rdx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x248]
lea rcx, [rsp + 0xa0]
call fcn.14000bbb0
jmp 0x14009c2a2
mov rax, qword [rsp + 0x40]
mov dword [rax + 0xd8], 0x6b
cmp byte [rsp + 0x257], 0
mov r15, qword [rsp + 0x60]
jns 0x14009c23a
mov rcx, qword [rsp + 0x240]
call fcn.14019cac4
jmp 0x14009c23a
call fcn.1401dca40
call fcn.1401dc2e0
test r8b, r8b
lea rdx, [rsp + 0x240]
cmovs r8, qword [rdx + 8]
cmovs rdx, qword [rdx]
lea rcx, [rsp + 0xa0]
call fcn.14000bcb0
jmp 0x14009c2a2
cmp rcx, rax
jb 0x14009ae3e
lea rcx, [rsp + 0x200]
call fcn.1401dc300
lea rcx, [rsp + 0xe0]
call fcn.1401dc2a0
lea rcx, [rsp + 0x220]
call fcn.1401dc2a0
lea rcx, [rsp + 0x1e0]
call fcn.1401dc300
lea rcx, [rsp + 0x1e0]
call fcn.1401dc2a0
int3