Function at 0x140040e34
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x1f0
mov qword [rbp - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rax, qword [0x1401600b0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov r14, r8
mov rsi, rcx
xor r15d, r15d
mov dword [rsp + 0x50], r15d
mov dword [rcx + 8], 0x100337
mov byte [rsp + 0x30], r15b
lea rcx, [rsp + 0x30]
call fcn.1400448b8
mov rcx, rsi
call fcn.1400407a8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsi + 0x254c], eax
lea r12d, [r15 + 1]
mov byte [rsi + 0xd], r12b
call fcn.14008b144
mov r9d, r12d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Enter
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.DetectOSInfo
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.____
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea r13, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], r13
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
mov rcx, rsi
call fcn.1400433c4
mov edi, eax
call fcn.14008b144
mov r9d, r12d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Exit
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.DetectOSInfo
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.____
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
mov qword [rbp + 0x48], r13
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
lea r13d, [r15 + 2]
test edi, edi
je 0x140040fa8
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Detect_OS_info_failed_
mov edx, r13d
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r12d
lea rdx, [0x140052420]
lea rcx, [rsp + 0x38]
call fcn.14005234c
lea rdx, [0x1400525e0]
lea rcx, [rsp + 0x38]
call fcn.14005234c
lea rdx, [0x140052820]
lea rcx, [rsp + 0x38]
call fcn.14005234c
lea rdx, [0x140052980]
lea rcx, [rsp + 0x38]
call fcn.14005234c
lea rdx, [0x140052b40]
lea rcx, [rsp + 0x38]
call fcn.14005234c
lea rdx, [0x140052ca0]
lea rcx, [rsp + 0x38]
call fcn.14005234c
lea rdx, [0x140052df0]
lea rcx, [rsp + 0x38]
call fcn.14005234c
lea rbx, [rsi + 0x24a8]
lea rax, [rsp + 0x38]
cmp rbx, rax
je 0x140041073
mov rcx, rbx
call fcn.14000cbb8
mov rax, qword [rsp + 0x38]
mov qword [rbx], rax
mov rax, qword [rsp + 0x40]
mov qword [rbx + 8], rax
mov rax, qword [rsp + 0x48]
mov qword [rbx + 0x10], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r15
mov eax, r12d
and eax, 0xfffffffe
mov dword [rsp + 0x50], eax
lea rcx, [rsp + 0x38]
call fcn.14000cbb8
mov rcx, rsi
call fcn.1400430d8
mov rdx, r14
mov rcx, rsi
call fcn.140040a68
mov ebx, 0x3e8
cmp eax, ebx
jne 0x1400410c9
call fcn.14008b144
mov rcx, qword [rax]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x38]
lea r8, str.updtShimAPIClass::Probe:_device_enumeration_got_a_Cancel_Event_
mov edx, r13d
call qword [case.0x14007c430.0]
mov eax, ebx
jmp 0x140041916
mov byte [rsi + 0xf], r12b
call fcn.14008b144
mov r9d, r12d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Enter
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.CpuEnum
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.____
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea r12, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], r12
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
lea rcx, [rsi + 0x2368]
mov qword [rcx + 8], r14
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14007c430.0]
mov edi, eax
call fcn.14008b144
mov r14d, 1
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Exit
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.CpuEnum
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.____
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
mov qword [rbp + 0x48], r12
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
cmp edi, 0x3e8
jne 0x1400411e2
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.CPU_Get_Cancel_Event_
mov edx, r13d
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
jmp 0x1400418d9
test edi, edi
je 0x140041205
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Detect_CPU_info_failed_
mov edx, r13d
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
mov byte [rsi + 0xe], r14b
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Enter
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.DetectComputerSystem
mov rcx, rbx
call fcn.1400098d0
lea rdi, str.____
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
mov qword [rbp + 0x48], r12
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
mov rcx, rsi
call fcn.14004238c
mov r12d, eax
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Exit
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.DetectComputerSystem
mov rcx, rbx
call fcn.1400098d0
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
test r12d, r12d
je 0x140041300
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Detect_CS_info_failed_
mov edx, r13d
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
lea rax, vtable.updtSMBFetcherClass.0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x6a], r15
mov dword [rsp + 0x72], r15d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x76], xmm0
mov qword [rbp - 0x7a], r15
lea rax, vtable.updtSMBIOSClass.0
mov qword [rsp + 0x60], rax
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Enter
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.SMBUtility
mov rcx, rbx
call fcn.1400098d0
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
lea rcx, [rsp + 0x60]
call fcn.140050618
test al, al
je 0x140041841
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Enter
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.SysMemoryInfo
mov rcx, rbx
call fcn.1400098d0
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
lea rcx, [rsp + 0x60]
call fcn.140047a2c
mov qword [rsi + 0x28], rax
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Exit
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.SysMemoryInfo
mov rcx, rbx
call fcn.1400098d0
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
cmp qword [rsi + 0x28], r15
jne 0x1400414a2
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Detect_System_Memory_failed_
mov edx, r13d
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
jmp 0x1400414a5
mov r12d, r15d
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Enter
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.MoboInfo
mov rcx, rbx
call fcn.1400098d0
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
lea rcx, [rsp + 0x60]
call fcn.140047c00
mov qword [rsi + 0x30], rax
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Exit
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.MoboInfo
mov rcx, rbx
call fcn.1400098d0
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
mov rcx, qword [rsi + 0x30]
test rcx, rcx
jne 0x1400415a8
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Detect_MOBOInfo_failed_
mov edx, r13d
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
jmp 0x140041833
add rcx, 0x160
call fcn.140044148
mov r12d, r15d
mov rdi, qword [rsi + 0x30]
add rdi, 0xa0
mov r8d, 7
lea rdx, str.Unknown
mov rcx, rdi
call fcn.140005dd4
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, r14d
xor r8d, r8d
lea rdx, str.SOFTWARENVIDIA_Corporation_nForce
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400416ee
mov dword [rsp + 0x34], r15d
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
lea rdx, str.PackageVersion
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov word [rsp + 0x30], r15w
mov edx, dword [rsp + 0x34]
shr rdx, 1
add rdx, r14
lea r8, [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140044d08
nop
test ebx, ebx
jne 0x1400416a2
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.PackageVersion
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400416a2
mov rdx, qword [rsp + 0x38]
or r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], r15w
jne 0x14004168e
mov rcx, rdi
call fcn.140005dd4
jmp 0x1400416d6
mov r8d, ntohl
lea rdx, str.Unsupported
mov rcx, rdi
call fcn.140005dd4
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Cannot_get_PackageVersion
mov edx, r13d
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x38]
call fcn.140044f6c
jmp 0x14004170f
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Cannot_find_nv_chipset_
mov edx, 4
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
mov rax, qword [rsi + 0x30]
lea r15, [rax + 0x80]
lea rdi, [rax + 0x140]
lea rbx, [rax + 0x120]
lea r14, [rax + 0x60]
mov r8, r13
lea r13, [0x140122760]
mov rdx, r13
mov rcx, r14
call fcn.140005dd4
mov r8d, 2
mov rdx, r13
mov rcx, r15
call fcn.140005dd4
mov r8d, 2
mov rdx, r13
mov rcx, rbx
call fcn.140005dd4
mov r8d, 2
mov rdx, r13
mov rcx, rdi
call fcn.140005dd4
lea rcx, [rbp - 0x60]
call fcn.140052f40
nop
lea rcx, [rbp - 0x60]
call fcn.14005f3b8
test al, al
je 0x1400417f6
mov r8, qword [rbp + 0x70]
test r8, r8
je 0x1400417b3
lea rax, [rbp + 0x60]
cmp r14, rax
je 0x1400417b3
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rdx, qword [rbp + 0x60]
mov rcx, r14
call fcn.140005dd4
mov r8, qword [rbp + 0x90]
test r8, r8
je 0x1400417eb
lea rax, [rbp + 0x80]
cmp r15, rax
je 0x1400417eb
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 8
cmovae rdx, qword [rbp + 0x80]
mov rcx, r15
call fcn.140005dd4
nop
mov r14d, 1
mov bl, r14b
jmp 0x1400417fe
xor bl, bl
mov r14d, 1
lea rcx, [rbp - 0x60]
call fcn.14005300c
test bl, bl
jne 0x14004182c
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Cannot_get_complete_chipset_info
mov edx, 3
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
lea rdi, str.____
call fcn.140048034
mov qword [rsi + 0x24e8], rax
jmp 0x140041862
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.SMBUtility.Fetch_failed_
mov edx, 3
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
call fcn.14008b144
mov r9d, r14d
mov r8, qword [rax]
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14000499c
nop
lea rbx, [rax + 0x10]
lea rdx, str.____Exit
mov rcx, rbx
call fcn.1400098d0
lea rdx, str.SMBUtility
mov rcx, rbx
call fcn.1400098d0
mov rdx, rdi
mov rcx, rbx
call fcn.1400098d0
nop
lea rcx, [rbp + 0x48]
call fcn.140004938
nop
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.140002658
nop
lea rcx, [rsp + 0x60]
call fcn.140047a04
cmp r12d, 0x3e8
jne 0x1400418e0
mov eax, 0x3e8
jmp 0x140041916
mov byte [rsi + 0x2548], r14b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsi + 0x2550], eax
call fcn.14008b144
mov rcx, qword [rax]
mov rax, qword [rcx]
lea r8, str.Now_exit_updtShimAPIClass::Probe
mov edx, 3
mov rax, qword [rax + 0x38]
call qword [case.0x14007c430.0]
xor eax, eax
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.140095410
mov rbx, qword [rsp + 0x238]
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret