Function at 0x140098040
Capabilities:
Create process on windows
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x308
movaps xmmword [rsp + 0x2f0], xmm7
movaps xmmword [rsp + 0x2e0], xmm6
mov r15, rdx
mov r12, rcx
mov rax, qword [0x1402b3040]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
lea rsi, [rdx + 8]
mov rdx, qword [rdx + 8]
mov rcx, r15
call fcn.140105130
mov qword [r15], rsi
xorps xmm0, xmm0
movups xmmword [r15 + 8], xmm0
lea rax, [rsp + 0x262]
mov byte [rax + 0x15], 2
lea rcx, [0x140279d60]
lea rsi, [rsp + 0x260]
cmp rsi, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
mov word [rsp + 0x260], 0x7670
mov byte [rsp + 0x262], 0
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x200], rax
movaps xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x1d0], 0
cmp byte [r12 + 0x5f], 0
js 0x14009821d
lea rdx, [r12 + 0x48]
jmp 0x140098222
mov dword [r12 + 0xd8], Ordinal_117
lea rcx, [rsp + 0xe0]
mov edx, 0x6c
call fcn.14002d150
lea rax, [rsp + 0x265]
mov byte [rax + 0x12], 5
lea rcx, str.error
cmp rsi, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
mov dword [rsp + 0x260], 0x6f727265
mov word [rsp + 0x264], Ordinal_117
lea rax, [rsp + 0x1e0]
mov qword [rax], rsi
lea rcx, [rsp + 0x240]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x140278198]
lea rbx, [rsp + 0x200]
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call fcn.140188f30
mov rax, qword [rbx]
lea rdi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x1400981bc
mov rcx, qword [rdi]
call fcn.14019aab4
mov rax, qword [rsp + 0xf0]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0xe0]
movups xmmword [rdi], xmm0
xor eax, eax
mov byte [rsp + 0xf7], al
mov byte [rsp + 0xe0], al
cmp byte [rsp + 0x277], al
jns 0x1400982f4
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
cmp byte [rsp + 0xf7], 0
jns 0x1400982f4
mov rcx, qword [rsp + 0xe0]
call fcn.14019aab4
jmp 0x1400982f4
mov rdx, qword [r12 + 0x48]
lea rax, [rsp + 0x200]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000001
xor r8d, r8d
mov r9d, 0x20019
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
mov qword [rsp + 0x40], r12
jne 0x1400982be
mov dword [rsp + 0x1e0], 0
mov dword [rsp + 0x240], 0xaaaaaaaa
cmp byte [rsp + 0x277], 0
mov rdx, rsi
jns 0x140098279
mov rdx, qword [rsp + 0x260]
mov rcx, qword [rsp + 0x200]
lea rdi, [rsp + 0x1e0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x140099b53
mov rcx, qword [rsp + 0x200]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [rsp + 0x277], 0
jns 0x1400982d5
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
movsx rax, byte [rsp + 0x1d7]
test rax, rax
jns 0x1400982eb
mov rax, qword [rsp + 0x1c8]
test rax, rax
je 0x140098113
lea rdx, [r12 + 0x60]
mov rcx, r12
call fcn.14009a8e0
test al, al
jne 0x14009831a
lea rdx, [r12 + 0x78]
mov rcx, r12
call fcn.14009a8e0
test al, al
je 0x140098cc7
movabs r8, 0x8000000000000000
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x1b0], rax
movaps xmm6, xmmword [0x140272a70]
movaps xmmword [rsp + 0x1a0], xmm6
movsx rdi, byte [r12 + 0xbf]
mov rsi, rdi
test rdi, rdi
jns 0x14009835e
mov rsi, qword [r12 + 0xb0]
lea rbx, [rsi + 1]
lea rcx, [r8 - 9]
mov qword [rsp + 0xf0], rax
movaps xmmword [rsp + 0xe0], xmm6
mov qword [rsp + 0x80], rcx
cmp rbx, rcx
ja 0x14009a8a6
lea rcx, [r12 + 0xa8]
cmp rbx, 0xb
jb 0x14009846b
mov r13, rcx
mov rax, rbx
or rax, 3
lea rcx, [rax + 1]
cmp rax, 0xb
mov r14d, Ordinal_14
cmovne r14, rcx
test r14, r14
js 0x14009a868
lea rcx, [r14 + r14]
call fcn.14019aa78
movabs r8, 0x8000000000000000
or r14, r8
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rbx
mov rcx, r13
mov rdx, r13
test dil, dil
jns 0x1400983fa
mov rdx, qword [rcx]
lea rdi, [rax + rsi*2]
cmp rdx, rax
jb 0x14009840c
cmp rdx, rdi
jb 0x140099af4
mov qword [rsp + 0x50], rcx
test rsi, rsi
je 0x14009842e
add rsi, rsi
mov rcx, rax
mov r8, rsi
call fcn.1401d6070
movabs r8, 0x8000000000000000
lea rax, [rdi + 2]
lea rdx, [0x140279d30]
cmp rdi, rdx
seta cl
cmp rax, rdx
setbe al
or al, cl
je 0x140099af4
mov dword [rdi], 0x5c
movsx rdi, byte [r12 + 0xd7]
test rdi, rdi
js 0x1400984aa
lea rdx, [r12 + 0xc0]
jmp 0x1400984ba
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], 0
mov byte [rsp + 0xf7], bl
mov rdx, rcx
test dil, dil
jns 0x140098494
mov rdx, qword [rcx]
test rsi, rsi
js 0x140099af4
lea rax, [rsp + 0xe0]
jmp 0x1400983fa
mov rdi, qword [r12 + 0xc8]
mov rdx, qword [r12 + 0xc0]
test rdi, rdi
sete al
test rdx, rdx
setne cl
or cl, al
je 0x140099af4
movsx rcx, byte [rsp + 0xf7]
dec r8
mov eax, 0xa
mov rsi, rcx
test rcx, rcx
jns 0x1400984fd
mov rax, qword [rsp + 0xf0]
and rax, r8
dec rax
mov rsi, qword [rsp + 0xe8]
mov qword [rsp + 0x90], r8
mov r8, rax
sub r8, rsi
cmp r8, rdi
jb 0x140098527
test rdi, rdi
je 0x1400985b2
test cl, cl
js 0x14009855b
lea rbx, [rsp + 0xe0]
jmp 0x140098563
lea r8, [rsi + rdi]
sub r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xe0]
mov rdx, rax
mov r9, rsi
call fcn.14013e950
jmp 0x1400985b2
mov rbx, qword [rsp + 0xe0]
test rdi, rdi
js 0x140099af4
lea rcx, [rbx + rsi*2]
lea rax, [rcx + rdi*2]
cmp rdx, rcx
setb r8b
cmp rdx, rax
setae al
or al, r8b
je 0x140099af4
lea r8, [rdi + rdi]
call fcn.1401d6070
add rsi, rdi
cmp byte [rsp + 0xf7], 0
jns 0x140099b43
mov qword [rsp + 0xe8], rsi
mov word [rbx + rsi*2], 0
lea rcx, [rsp + 0xe0]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x1b0], rax
movaps xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x1a0], xmm0
mov r8d, 0xc0
xor edx, edx
call fcn.1401d6710
cmp byte [rsp + 0x1b7], 0
js 0x1400985f2
lea r9, [rsp + 0x1a0]
jmp 0x1400985fa
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x140098609
mov rdx, qword [r12]
lea r8, str.Name
lea rcx, [rsp + 0x260]
call fcn.14009b130
cmp byte [rsp + 0xf7], 0
jns 0x140098634
mov rcx, qword [rsp + 0xe0]
call fcn.14019aab4
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0x260]
movaps xmmword [rsp + 0xe0], xmm0
cmp byte [rsp + 0x1b7], 0
jns 0x140098668
mov r9, qword [rsp + 0x1a0]
jmp 0x140098670
lea r9, [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x14009867f
mov rdx, qword [r12]
lea rsi, [rsp + 0xf8]
lea r8, [0x140279d74]
lea rcx, [rsp + 0x260]
call fcn.14009b130
cmp byte [rsi + 0x17], 0
jns 0x1400986ae
mov rcx, qword [rsp + 0xf8]
call fcn.14019aab4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x1400986d9
lea r9, [rsp + 0x1a0]
jmp 0x1400986e1
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x1400986f0
mov rdx, qword [r12]
lea rdi, [rsp + 0x110]
lea r8, [0x140279d84]
lea rcx, [rsp + 0x260]
call fcn.14009b130
mov rcx, rdi
cmp byte [rdi + 0x17], 0
jns 0x14009872a
mov rcx, qword [rsp + 0x110]
call fcn.14019aab4
lea rcx, [rsp + 0x110]
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x140098755
lea r9, [rsp + 0x1a0]
jmp 0x14009875d
mov r9, qword [rsp + 0x1a0]
mov qword [rsp + 0x78], rsi
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x140098771
mov rdx, qword [r12]
lea rsi, [rsp + 0x128]
lea r8, str.URL1
lea rcx, [rsp + 0x260]
call fcn.14009b130
cmp byte [rsi + 0x17], 0
jns 0x1400987a0
mov rcx, qword [rsp + 0x128]
call fcn.14019aab4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
cmp byte [rsp + 0x1b7], 0
jns 0x1400987cb
mov r9, qword [rsp + 0x1a0]
jmp 0x1400987d3
lea r9, [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x1400987e2
mov rdx, qword [r12]
lea rsi, [rsp + 0x140]
lea r8, [0x140279d96]
lea rcx, [rsp + 0x260]
call fcn.14009b130
cmp byte [rsi + 0x17], 0
jns 0x140098811
mov rcx, qword [rsp + 0x140]
call fcn.14019aab4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x14009883c
lea r9, [rsp + 0x1a0]
jmp 0x140098844
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x140098853
mov rdx, qword [r12]
lea rdi, [rsp + 0x158]
lea r8, str.ServerFileName
lea rcx, [rsp + 0x260]
call fcn.14009b130
mov rcx, rdi
cmp byte [rdi + 0x17], 0
jns 0x14009888d
mov rcx, qword [rsp + 0x158]
call fcn.14019aab4
lea rcx, [rsp + 0x158]
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x1b7], 0
js 0x1400988b8
lea r9, [rsp + 0x1a0]
jmp 0x1400988c0
mov r9, qword [rsp + 0x1a0]
cmp byte [r12 + 0x17], 0
mov rdx, r12
jns 0x1400988cf
mov rdx, qword [r12]
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x60], r15
lea rdi, [rsp + 0x170]
lea r8, str.UpdatedApplications
lea rcx, [rsp + 0x260]
call fcn.14009b130
cmp byte [rdi + 0x17], 0
jns 0x14009890b
mov rcx, qword [rsp + 0x170]
call fcn.14019aab4
mov rax, qword [rsp + 0x270]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rdi], xmm0
lea rsi, [rsp + 0xc0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rax
movaps xmmword [rsi], xmm6
mov rcx, rsi
mov qword [rsp + 0x70], rdi
mov rdx, rdi
mov r8b, 0x3b
call fcn.14009b2c0
mov r15, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x98], rax
cmp r15, rax
je 0x140098974
movabs rbx, 0x6db6db6db6db6db7
xorps xmm7, xmm7
jmp 0x1400997ae
movsx rax, byte [rsp + 0xf7]
test rax, rax
jns 0x14009898a
mov rax, qword [rsp + 0xe8]
test rax, rax
mov r15, qword [rsp + 0x60]
je 0x140098a48
movsx rax, byte [rsp + 0x10f]
test rax, rax
jns 0x1400989ae
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x140098a48
movsx rax, byte [rsp + 0x127]
test rax, rax
jns 0x1400989cd
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x140098a48
movsx rax, byte [rsp + 0x157]
test rax, rax
jns 0x1400989e8
mov rax, qword [rsp + 0x148]
test rax, rax
je 0x140098a48
movsx rax, byte [rsp + 0x16f]
test rax, rax
jns 0x140098a03
mov rax, qword [rsp + 0x160]
test rax, rax
je 0x140098a48
movsx rax, byte [rsp + 0x187]
test rax, rax
jns 0x140098a1e
mov rax, qword [rsp + 0x178]
test rax, rax
je 0x140098a48
lea r12, [rsp + 0x1c0]
mov rcx, r12
call fcn.14009b940
mov rcx, qword [rsp + 0x188]
mov rdx, qword [rsp + 0x190]
jmp 0x140098e1f
mov dword [r12 + 0xd8], 0x67
lea rcx, [rsp + 0x260]
mov edx, 0x67
call fcn.14002d150
lea rax, [rsp + 0x205]
mov byte [rax + 0x12], 5
lea rcx, str.error
lea r8, [rsp + 0x200]
cmp r8, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
mov dword [rsp + 0x200], 0x6f727265
mov word [rsp + 0x204], Ordinal_117
lea rax, [rsp + 0x240]
mov qword [rax], r8
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x140278198]
lea rsi, [rsp + 0x1e0]
mov rcx, r15
mov rdx, rsi
call fcn.140188f30
mov rax, qword [rsi]
lea rsi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x140098af6
mov rcx, qword [rsi]
call fcn.14019aab4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
xor eax, eax
mov byte [rsp + 0x277], al
mov byte [rsp + 0x260], al
cmp byte [rsp + 0x217], al
js 0x140098b5a
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
jne 0x140098dc3
mov rsi, qword [rsp + 0x188]
test rsi, rsi
je 0x140098bba
mov rdi, qword [rsp + 0x190]
mov rcx, rsi
cmp rsi, rdi
je 0x140098bad
add rdi, 0xffffffffffffffc8
jmp 0x140098b94
mov rcx, qword [rsp + 0x200]
call fcn.14019aab4
cmp byte [rsp + 0x277], 0
jns 0x140098b26
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
jmp 0x140098b26
mov rcx, qword [rdi]
call fcn.14019aab4
lea rax, [rdi - 0x38]
cmp rdi, rsi
mov rdi, rax
je 0x140098ba5
test rdi, rdi
je 0x140099af4
cmp byte [rdi + 0x17], 0
jns 0x140098b88
jmp 0x140098b80
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x190], rsi
call fcn.14019aab4
cmp byte [rsp + 0x187], 0
jns 0x140098bd1
mov rcx, qword [rsp + 0x170]
call fcn.14019aab4
cmp byte [rsp + 0x16f], 0
jns 0x140098be8
mov rcx, qword [rsp + 0x158]
call fcn.14019aab4
cmp byte [rsp + 0x157], 0
jns 0x140098bff
mov rcx, qword [rsp + 0x140]
call fcn.14019aab4
cmp byte [rsp + 0x13f], 0
jns 0x140098c16
mov rcx, qword [rsp + 0x128]
call fcn.14019aab4
cmp byte [rsp + 0x127], 0
jns 0x140098c2d
mov rcx, qword [rsp + 0x110]
call fcn.14019aab4
cmp byte [rsp + 0x10f], 0
jns 0x140098c44
mov rcx, qword [rsp + 0xf8]
call fcn.14019aab4
cmp byte [rsp + 0xf7], 0
jns 0x140098c5b
mov rcx, qword [rsp + 0xe0]
call fcn.14019aab4
cmp byte [rsp + 0x1b7], 0
jns 0x140098c72
mov rcx, qword [rsp + 0x1a0]
call fcn.14019aab4
cmp byte [rsp + 0x1d7], 0
jns 0x140098c89
mov rcx, qword [rsp + 0x1c0]
call fcn.14019aab4
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
cmp rcx, qword [0x1402b3040]
je 0x140098ca3
call fcn.14019d280
int3
movaps xmm6, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2f0]
add rsp, 0x308
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov edx, dword [r12 + 0xd8]
lea rcx, [rsp + 0xe0]
call fcn.14002d150
lea rax, [rsp + 0x265]
mov byte [rax + 0x12], 5
lea rcx, str.error
cmp rsi, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
mov dword [rsp + 0x260], 0x6f727265
mov word [rsp + 0x264], Ordinal_117
lea rax, [rsp + 0x1e0]
mov qword [rax], rsi
lea rcx, [rsp + 0x240]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x140278198]
lea rdi, [rsp + 0x200]
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call fcn.140188f30
mov rax, qword [rdi]
lea rsi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x140098d67
mov rcx, qword [rsi]
call fcn.14019aab4
mov rax, qword [rsp + 0xf0]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0xe0]
movups xmmword [rsi], xmm0
xor eax, eax
mov byte [rsp + 0xf7], al
mov byte [rsp + 0xe0], al
cmp byte [rsp + 0x277], al
jns 0x140098c72
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
cmp byte [rsp + 0xf7], 0
jns 0x140098c72
mov rcx, qword [rsp + 0xe0]
jmp 0x140098c6d
mov rdi, qword [rsp + 0xc8]
mov rcx, rsi
cmp rsi, rdi
je 0x140098dfa
add rdi, 0xffffffffffffffe8
test rdi, rdi
je 0x140099af4
cmp byte [rdi + 0x17], 0
js 0x140098e0c
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
jne 0x140098dd7
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rsi
call fcn.14019aab4
jmp 0x140098b37
mov rcx, qword [rdi]
call fcn.14019aab4
jmp 0x140098de6
cmp rax, r8
ja 0x140098e37
add rcx, 0x38
cmp rcx, rdx
je 0x1400990a6
mov r8, qword [rcx + 0x18]
cmp byte [rcx + 0x20], 1
jne 0x140098e16
cmp rax, r8
jb 0x140098e1b
mov r8, qword [rcx + 0x28]
cmp byte [rcx + 0x30], 1
je 0x140098e48
cmp rax, r8
jae 0x140098e1b
jmp 0x140098e4d
cmp rax, r8
ja 0x140098e1b
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], 0
call fcn.1400a0490
mov rsi, rax
mov r8, qword [rsp + 0x40]
mov dword [r8 + 0xd8], 0
mov rax, qword [r8 + 0xf8]
mov rcx, qword [r8 + 0x100]
mov rdx, rcx
sub rdx, rax
dec rcx
cmp rdx, rcx
ja 0x140099af4
mov qword [r8 + 0x100], rax
cmp byte [rsp + 0x127], 0
lea r8, [rsp + 0x110]
jns 0x140098ebd
mov r8, qword [rsp + 0x110]
mov rcx, rsi
mov edx, 0x2712
call fcn.1400a0430
mov rcx, rsi
mov edx, 0x40
xor r8d, r8d
call fcn.1400a0430
mov rcx, rsi
mov edx, 0x51
xor r8d, r8d
call fcn.1400a0430
lea r8, [0x14009baf0]
mov rcx, rsi
mov edx, 0x4e2b
call fcn.1400a0430
mov rcx, rsi
mov edx, 0x2711
mov r8, qword [rsp + 0x40]
call fcn.1400a0430
mov rcx, rsi
mov edx, Ordinal_14
mov r8d, 0x708
call fcn.1400a0430
mov rcx, rsi
call fcn.1400a05a0
mov qword [rsp + 0x260], rsi
test rsi, rsi
je 0x140098f45
lea rcx, [rsp + 0x260]
call fcn.1400af720
mov rax, qword [rsp + 0x40]
mov rdx, qword [rax + 0xf8]
mov r8, qword [rax + 0x100]
cmp rdx, r8
je 0x14009a0f1
sub r8d, edx
lea rsi, [rsp + 0x200]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rax
movaps xmmword [rsi], xmm6
lea rbp, [rsp + 0x260]
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x40], xmm6
movaps xmmword [rbp + 0x50], xmm6
movups xmmword [rbp + 0x5c], xmm6
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x10], xmm6
mov byte [rbp], 0
mov qword [rbp + 0x44], 0
mov dword [rbp + 0x4c], 0x67452301
movabs rax, 0x98badcfeefcdab89
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x58], 0x10325476
mov rcx, rbp
call fcn.140092db0
mov rcx, rbp
call fcn.140092e70
mov rcx, rbp
mov rdx, rsi
call fcn.140093ab0
movsx rbx, byte [rsi + 0x17]
mov r8, rbx
test rbx, rbx
jns 0x140098ff9
mov r8, qword [rsp + 0x208]
movsx rax, byte [rsp + 0x157]
mov rcx, rax
test rax, rax
jns 0x140099012
mov rcx, qword [rsp + 0x148]
cmp r8, rcx
jne 0x14009904f
test al, al
jns 0x14009902b
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x88], rax
test bl, bl
jns 0x140099037
mov rsi, qword [rsp + 0x200]
mov rcx, rsi
mov rdx, qword [rsp + 0x88]
call fcn.1401d5ec0
test eax, eax
je 0x140099c94
mov rax, qword [rsp + 0x40]
mov dword [rax + 0xd8], 0x6a
xor edi, edi
test bl, bl
jns 0x140099071
mov rcx, qword [rsp + 0x200]
call fcn.14019aab4
test dil, dil
je 0x14009a0e4
cmp byte [rsp + 0xb7], 0
js 0x140099d7a
lea r8, [rsp + 0xa0]
jmp 0x140099d82
mov qword [rax + 0x40], Ordinal_26
mov rax, qword [rax + 0x38]
jmp 0x14009913f
lea r14, [rsp + 0x266]
mov byte [r14 + 0x11], 6
lea rax, str.status
lea r8, [rsp + 0x260]
cmp r8, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x140099af4
mov word [rsp + 0x264], 0x7375
mov dword [rsp + 0x260], 0x74617473
mov byte [rsp + 0x266], 0
lea rdi, [rsp + 0x1e0]
mov qword [rdi], r8
lea rbx, [rsp + 0x240]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x140278198]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
call fcn.140188f30
mov rax, qword [rsi]
cmp byte [rax + 0x4f], 0
js 0x140099095
mov byte [rax + 0x4f], 0x13
add rax, 0x38
movups xmm0, xmmword [str.no_update_available]
movups xmmword [rax], xmm0
mov dword [rax + 0xf], 0x656c6261
mov byte [rax + 0x13], 0
cmp byte [rsp + 0x277], 0
lea r8, [rsp + 0x260]
jns 0x14009917b
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
lea r8, [rsp + 0x260]
mov byte [rsp + 0x277], 6
lea rax, str.ver_pv
cmp r8, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x140099af4
mov word [rsp + 0x264], 0x7670
mov dword [rsp + 0x260], 0x5f726576
mov byte [rsp + 0x266], 0
mov qword [rsp + 0x1e0], r8
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x140278198]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
call fcn.140188f30
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
cmp rcx, r12
je 0x140099226
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x1d7]
js 0x14009a27f
test r8b, r8b
js 0x140099307
mov rax, qword [rsp + 0x1d0]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x277], 0
jns 0x14009923d
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
lea rax, [rsp + 0x26e]
mov byte [rax + 9], reloc.WLDAP32.dll_Ordinal_14
lea rcx, str.verToBeUpdated
lea r8, [rsp + 0x260]
cmp r8, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
movabs rax, 0x6465746164705565
mov qword [rsp + 0x266], rax
movabs rax, 0x5565426f54726576
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x26e], 0
mov qword [rsp + 0x1e0], r8
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x140278198]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
call fcn.140188f30
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
lea rdx, [rsp + 0x170]
cmp rcx, rdx
je 0x140098b67
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x187]
js 0x14009a260
test r8b, r8b
js 0x140099321
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
jmp 0x140098b67
mov rdx, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x1c8]
call fcn.1401058b0
jmp 0x140099226
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x178]
call fcn.1401058b0
jmp 0x140098b67
cmp rcx, rax
ja 0x14009a899
mov eax, ecx
and al, 0x7f
mov byte [rsp + 0x217], al
lea r8, [rsp + 0x200]
jmp 0x140099430
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
lea rcx, [rsp + 0x200]
call fcn.140109a60
jmp 0x1400993ae
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x210], rax
movaps xmmword [rsp + 0x200], xmm6
cmp byte [rsi + 0x2f], 0
js 0x14009935c
add rsi, 0x18
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x210], rax
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x200], xmm0
movsx rax, byte [rsp + 0x217]
test rax, rax
mov rdx, qword [rsp + 0x208]
mov rcx, rax
cmovs rcx, rdx
dec rcx
test rax, rax
jns 0x14009a890
cmp rcx, rdx
jae 0x14009a899
test al, al
mov r8, qword [rsp + 0x200]
lea r9, [rsp + 0x200]
cmovs r9, r8
movzx r9d, byte [r9 + rcx]
xor r10d, r10d
cmp r9d, 0x29
je 0x14009940f
cmp r9d, 0x5d
jne 0x1400995d2
mov r10b, 1
test al, al
lea rsi, [rsp + 0x1e0]
jns 0x14009933b
cmp rcx, rdx
ja 0x14009a899
mov qword [rsp + 0x208], rcx
mov byte [r8 + rcx], 0
mov rax, qword [rsp + 0x260]
cmp qword [rsp + 0x268], rax
je 0x140099af4
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x1f0], rcx
movaps xmmword [rsp + 0x1e0], xmm6
cmp byte [rax + 0x17], 0
mov qword [rsp + 0x58], r10
js 0x140099576
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1f0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1e0], xmm0
movsx rdi, byte [rsp + 0x1f7]
test rdi, rdi
mov rbp, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x1e8]
cmovs rsi, rbp
mov rbx, rdi
cmovs rbx, r13
test rbx, rbx
je 0x1400994e5
xor edi, edi
movsx ecx, byte [rsi + rdi]
call fcn.14019adf8
mov byte [rsi + rdi], al
inc rdi
cmp rbx, rdi
jne 0x1400994b9
mov rbp, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x1e8]
mov dil, byte [rsp + 0x1f7]
lea rcx, [rsp + 0x1f0]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rsp + 0x243], ecx
mov dword [rsp + 0x240], eax
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x1f0], rax
movaps xmmword [rsp + 0x1e0], xmm6
lea rcx, [rsp + 0x1e0]
lea rdx, [rsp + 0x200]
mov r8b, Ordinal_46
call fcn.14009b2c0
mov rbx, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e8]
sub rax, rbx
sar rax, 3
movabs rcx, 0xaaaaaaaaaaaaaaab
imul rax, rcx
cmp rax, 2
mov qword [rsp + 0x48], rbp
je 0x14009958a
cmp rax, 1
je 0x140099666
xor ebp, ebp
xor r14d, r14d
jmp 0x14009967c
mov rdx, qword [rax]
mov r8, qword [rax + 8]
mov rcx, rsi
call fcn.140109a60
jmp 0x14009948b
mov rcx, rbx
call fcn.14009b940
mov rbp, rax
mov rcx, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e8]
sub rax, rcx
sar rax, 3
movabs rdx, 0xaaaaaaaaaaaaaaab
imul rax, rdx
cmp rax, 1
jbe 0x140099af4
add rcx, 0x18
call fcn.14009b940
jmp 0x140099671
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x48], 0
xor r13d, r13d
xor edi, edi
xor ebp, ebp
xor r14d, r14d
jmp 0x140099696
mov rcx, qword [rsi]
call fcn.14019aab4
jmp 0x140099620
mov rsi, qword [rsp + 0x1e8]
mov rcx, rbx
cmp rbx, rsi
je 0x140099634
add rsi, 0xffffffffffffffe8
test rsi, rsi
je 0x140099af4
cmp byte [rsi + 0x17], 0
js 0x1400995f3
lea rax, [rsi - 0x18]
cmp rsi, rbx
mov rsi, rax
jne 0x140099611
mov rcx, qword [rsp + 0x1e0]
mov qword [rsp + 0x1e8], rbx
call fcn.14019aab4
jmp 0x140099685
mov rcx, qword [r14]
call fcn.14019aab4
add r14, 0x38
cmp r14, rbp
je 0x1400996b4
test r14, r14
je 0x140099af4
cmp byte [r14 + 0x17], 0
jns 0x14009964b
jmp 0x140099643
mov rcx, rbx
call fcn.14009b940
mov rbp, rax
mov r14, rax
mov rbx, qword [rsp + 0x1e0]
test rbx, rbx
jne 0x1400995fd
mov al, byte [rsp + 0x217]
movabs rbx, 0x6db6db6db6db6db7
test al, al
jns 0x1400996a7
mov rcx, qword [rsp + 0x200]
call fcn.14019aab4
mov rsi, qword [rsp + 0x260]
jmp 0x1400998e6
mov r14, qword [rsp + 0x188]
imul rax, rsi, 0x38
add rbx, rax
add r12, 0x38
mov qword [rsp + 0x188], r13
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x198], rbx
test r14, r14
je 0x1400996ec
mov rcx, r14
call fcn.14019aab4
movabs rbx, 0x6db6db6db6db6db7
jmp 0x140099780
mov rcx, r12
mov rdx, qword [rsp + 0x48]
mov r8, r13
call fcn.140109a60
jmp 0x140099746
test r12, r12
je 0x140099af4
test dil, dil
js 0x1400996fb
mov rax, qword [rsp + 0x48]
mov qword [r12], rax
mov qword [r12 + 8], r13
mov eax, dword [rsp + 0x240]
mov ecx, dword [rsp + 0x243]
mov dword [r12 + 0x10], eax
mov dword [r12 + 0x13], ecx
mov byte [r12 + 0x17], dil
mov qword [r12 + 0x18], rbp
mov rax, qword [rsp + 0x68]
mov byte [r12 + 0x20], al
mov eax, dword [rsp + 0x220]
mov ecx, dword [rsp + 0x223]
mov dword [r12 + 0x21], eax
mov dword [r12 + 0x24], ecx
mov qword [r12 + 0x28], r14
mov rax, qword [rsp + 0x58]
mov byte [r12 + 0x30], al
add r12, 0x38
mov qword [rsp + 0x190], r12
mov r12, qword [rsp + 0x40]
test dil, dil
jns 0x14009979c
mov rcx, qword [rsp + 0x48]
call fcn.14019aab4
add r15, 0x18
cmp r15, qword [rsp + 0x98]
je 0x140098974
mov eax, 0xaaaaaaaa
mov dword [rsp + 0x223], eax
mov dword [rsp + 0x220], eax
xor eax, eax
mov dword [rsp + 0x240], eax
mov dword [rsp + 0x243], eax
movsx rax, byte [r15 + 0x17]
test rax, rax
jns 0x1400997df
mov rax, qword [r15 + 8]
test rax, rax
je 0x14009988e
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x270], rax
movaps xmmword [rsp + 0x260], xmm6
lea rcx, [rsp + 0x260]
mov rdx, r15
mov r8b, Ordinal_41
call fcn.14009b2c0
mov rsi, qword [rsp + 0x260]
mov rax, qword [rsp + 0x268]
mov rcx, rax
sub rcx, rsi
cmp rcx, 0x30
je 0x1400998b5
lea rcx, [rsp + 0x200]
mov rdx, r15
mov r8b, 0x5b
call fcn.14009b2c0
mov rsi, qword [rsp + 0x260]
test rsi, rsi
jne 0x140099af6
mov rsi, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x260], rsi
mov qword [rsp + 0x268], rax
mov rcx, qword [rsp + 0x210]
mov qword [rsp + 0x270], rcx
mov r14b, 1
jmp 0x1400998b8
mov qword [rsp + 0x48], 0
xor r13d, r13d
xor edi, edi
xor ebp, ebp
mov qword [rsp + 0x68], 0
xor r14d, r14d
mov qword [rsp + 0x58], 0
jmp 0x1400998ef
xor r14d, r14d
sub rax, rsi
cmp rax, 0x30
mov qword [rsp + 0x68], r14
je 0x140099373
mov qword [rsp + 0x48], 0
xor r13d, r13d
xor edi, edi
xor ebp, ebp
xor r14d, r14d
mov qword [rsp + 0x58], 0
test rsi, rsi
jne 0x140099aa5
test dil, dil
movzx eax, dil
cmovs rax, r13
test rbp, rbp
je 0x14009978d
test rax, rax
je 0x14009978d
test r14, r14
je 0x14009978d
mov r12, qword [rsp + 0x190]
mov rax, qword [rsp + 0x198]
cmp r12, rax
jb 0x14009970d
mov rcx, qword [rsp + 0x188]
sub r12, rcx
sar r12, 3
imul r12, rbx
lea rsi, [r12 + 1]
movabs rdx, 0x492492492492492
cmp rsi, rdx
ja 0x14009a863
sub rax, rcx
sar rax, 3
imul rax, rbx
lea rcx, [rax + rax]
cmp rcx, rsi
cmova rsi, rcx
movabs rcx, 0x249249249249249
cmp rax, rcx
cmovae rsi, rdx
test rsi, rsi
je 0x140099a7f
cmp rsi, rdx
ja 0x14009a868
imul rcx, rsi, 0x38
call fcn.14019aa78
mov rbx, rax
imul r12, r12, 0x38
add r12, rbx
je 0x140099af4
test dil, dil
js 0x140099a86
mov rax, qword [rsp + 0x48]
mov qword [r12], rax
mov qword [r12 + 8], r13
mov eax, dword [rsp + 0x240]
mov ecx, dword [rsp + 0x243]
mov dword [r12 + 0x10], eax
mov dword [r12 + 0x13], ecx
mov byte [r12 + 0x17], dil
mov qword [r12 + 0x18], rbp
mov rax, qword [rsp + 0x68]
mov byte [r12 + 0x20], al
mov eax, dword [rsp + 0x220]
mov ecx, dword [rsp + 0x223]
mov dword [r12 + 0x21], eax
mov dword [r12 + 0x24], ecx
mov qword [r12 + 0x28], r14
mov rax, qword [rsp + 0x58]
mov byte [r12 + 0x30], al
mov r14, qword [rsp + 0x188]
mov rbp, qword [rsp + 0x190]
mov rax, r14
sub rax, rbp
lea r13, [r12 + rax]
je 0x1400996bc
mov rax, r14
mov rcx, r13
test rcx, rcx
je 0x140099af4
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
movups xmm0, xmmword [rax + 0x18]
movups xmm1, xmmword [rax + 0x21]
movups xmmword [rcx + 0x21], xmm1
movups xmmword [rcx + 0x18], xmm0
add rax, 0x38
add rcx, 0x38
cmp rax, rbp
jne 0x140099a3b
jmp 0x140099654
xor ebx, ebx
jmp 0x14009999e
mov rcx, r12
mov rdx, qword [rsp + 0x48]
mov r8, r13
call fcn.140109a60
jmp 0x1400999df
mov rcx, qword [rbx]
call fcn.14019aab4
jmp 0x140099ac4
mov rbx, qword [rsp + 0x268]
mov rcx, rsi
cmp rsi, rbx
je 0x140099ad8
add rbx, 0xffffffffffffffe8
test rbx, rbx
je 0x140099af4
cmp byte [rbx + 0x17], 0
js 0x140099a9b
lea rax, [rbx - 0x18]
cmp rbx, rsi
mov rbx, rax
jne 0x140099ab9
mov rcx, qword [rsp + 0x260]
mov qword [rsp + 0x268], rsi
call fcn.14019aab4
movabs rbx, 0x6db6db6db6db6db7
jmp 0x1400998ef
ud2
mov rdi, qword [rsp + 0x268]
mov rcx, rsi
cmp rsi, rdi
je 0x140099b31
add rdi, 0xffffffffffffffe8
test rdi, rdi
je 0x140099af4
cmp byte [rdi + 0x17], 0
jns 0x140099b1d
mov rcx, qword [rdi]
call fcn.14019aab4
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
jne 0x140099b0a
mov rcx, qword [rsp + 0x260]
mov qword [rsp + 0x268], rsi
call fcn.14019aab4
jmp 0x140099859
mov eax, esi
and al, 0x7f
mov byte [rsp + 0xf7], al
jmp 0x1400985ac
mov eax, dword [rsp + 0x240]
dec eax
cmp eax, 1
ja 0x1400982b0
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xf0], rax
movaps xmm0, xmmword [0x140272a70]
movaps xmmword [rsp + 0xe0], xmm0
mov ebx, dword [rsp + 0x1e0]
cmp rbx, 0x17
jae 0x14009a2a1
lea r14, [rsp + 0xe0]
mov byte [r14 + 0x17], bl
test rbx, rbx
je 0x140099bb5
mov rcx, r14
xor edx, edx
mov r8, rbx
call fcn.1401d6710
mov byte [r14 + rbx], 0
cmp byte [rsp + 0xf7], 0
js 0x140099bce
lea rax, [rsp + 0xe0]
jmp 0x140099bd6
mov rax, qword [rsp + 0xe0]
cmp byte [rsp + 0x277], 0
js 0x140099bea
lea rdx, [rsp + 0x260]
jmp 0x140099bf2
mov rdx, qword [rsp + 0x260]
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x140099c34
cmp byte [rsp + 0xf7], 0
jns 0x1400982b0
mov rcx, qword [rsp + 0xe0]
call fcn.14019aab4
jmp 0x1400982b0
cmp byte [rsp + 0x1d7], 0
movzx r8d, byte [rsp + 0xf7]
js 0x14009a2f2
test r8b, r8b
js 0x140099c75
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x1d0], rax
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1c0], xmm0
jmp 0x1400982b0
mov rdx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
lea rcx, [rsp + 0x1c0]
call fcn.1401058b0
jmp 0x140099c14
lea rax, [rsp + 0x268]
movups xmmword [rax], xmm6
mov byte [rax + 0xf], 4
lea rcx, str..msi
cmp rbp, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
movabs rax, 0x690073006d002e
mov qword [rsp + 0x260], rax
mov word [rsp + 0x268], 0
movsx rax, byte [rsp + 0x16f]
test rax, rax
lea rcx, [rsp + 0x158]
jns 0x140099d00
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x160]
lea r13, [rax + rcx]
inc r13
xor edi, edi
mov rcx, r13
cmp rax, rdi
je 0x14009a3d9
mov rsi, rdi
inc rdi
lea rbx, [rcx - 1]
cmp byte [rcx - 2], 0x2e
mov rcx, rbx
jne 0x140099d0c
jmp 0x14009a363
test r8b, r8b
cmovs r8, qword [rsp + 0x1c8]
cmovs r12, qword [rsp + 0x1c0]
mov rdx, r12
call fcn.1401059a0
jmp 0x140099f10
mov rdx, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x1c8]
call fcn.1401058b0
jmp 0x140099f10
mov qword [rax + 0x40], 0x10
mov rax, qword [rax + 0x38]
jmp 0x140099e3d
mov r8, qword [rsp + 0xa0]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.open
lea r9, [0x140279e16]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea r14, [rsp + 0x266]
mov byte [r14 + 0x11], 6
lea rax, str.status
cmp rbp, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x140099af4
mov word [rsp + 0x264], 0x7375
mov dword [rsp + 0x260], 0x74617473
mov byte [rsp + 0x266], 0
lea rdi, [rsp + 0x1e0]
mov qword [rdi], rbp
lea rbx, [rsp + 0x240]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x140278198]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.140188f30
mov rax, qword [rsi]
cmp byte [rax + 0x4f], 0
js 0x140099d69
mov byte [rax + 0x4f], 0x10
add rax, 0x38
movups xmm0, xmmword [str.Update_initiated]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
cmp byte [rsp + 0x277], 0
jns 0x140099e62
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
mov byte [rsp + 0x277], 6
lea rax, str.ver_pv
cmp rbp, rax
seta cl
cmp r14, rax
setbe al
or al, cl
je 0x140099af4
mov word [rsp + 0x264], 0x7670
mov dword [rsp + 0x260], 0x5f726576
mov byte [rsp + 0x266], 0
mov qword [rsp + 0x1e0], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x140278198]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.140188f30
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
cmp rcx, r12
je 0x140099f10
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x1d7]
js 0x140099d2d
test r8b, r8b
js 0x140099d4f
mov rax, qword [rsp + 0x1d0]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x277], 0
jns 0x140099f27
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
lea rax, [rsp + 0x26e]
mov byte [rax + 9], reloc.WLDAP32.dll_Ordinal_14
lea rcx, str.verToBeUpdated
cmp rbp, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
movabs rax, 0x6465746164705565
mov qword [rsp + 0x266], rax
movabs rax, 0x5565426f54726576
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x26e], 0
mov qword [rsp + 0x1e0], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x140278198]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.140188f30
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
lea rdx, [rsp + 0x170]
cmp rcx, rdx
je 0x140099fe7
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x187]
js 0x14009a232
test r8b, r8b
js 0x14009a0b0
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
cmp byte [rsp + 0x277], 0
jns 0x140099ffe
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
lea rax, [rsp + 0x271]
mov byte [rax + 6], 0x11
lea rcx, str.newVerToInstalled
cmp rbp, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
movups xmm0, xmmword [str.newVerToInstalled]
movaps xmmword [rsp + 0x260], xmm0
mov word [rsp + 0x270], 0x64
mov qword [rsp + 0x1e0], rbp
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
lea r9, [0x140278198]
lea rsi, [rsp + 0x200]
mov rcx, r15
mov rdx, rsi
mov r8, rbp
call fcn.140188f30
mov rax, qword [rsi]
lea rcx, [rax + 0x38]
lea rdx, [rsp + 0xf8]
cmp rcx, rdx
je 0x14009a1da
cmp byte [rax + 0x4f], 0
movzx r8d, byte [rsp + 0x10f]
js 0x14009a20c
test r8b, r8b
js 0x14009a0ca
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
jmp 0x14009a1da
mov rdx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x178]
call fcn.1401058b0
jmp 0x140099fe7
mov rdx, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x100]
call fcn.1401058b0
jmp 0x14009a1da
mov rax, qword [rsp + 0x40]
mov edx, dword [rax + 0xd8]
jmp 0x14009a100
mov dword [rax + 0xd8], 0x69
mov edx, 0x69
lea rcx, [rsp + 0x260]
call fcn.14002d150
lea rax, [rsp + 0x205]
mov byte [rax + 0x12], 5
lea rcx, str.error
lea r8, [rsp + 0x200]
cmp r8, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x140099af4
mov dword [rsp + 0x200], 0x6f727265
mov word [rsp + 0x204], Ordinal_117
lea rax, [rsp + 0x240]
mov qword [rax], r8
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [0x140278198]
lea rsi, [rsp + 0x1e0]
mov rcx, r15
mov rdx, rsi
call fcn.140188f30
mov rax, qword [rsi]
lea rsi, [rax + 0x38]
cmp byte [rax + 0x4f], 0
jns 0x14009a19d
mov rcx, qword [rsi]
call fcn.14019aab4
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [rsi], xmm0
xor eax, eax
mov byte [rsp + 0x277], al
mov byte [rsp + 0x260], al
cmp byte [rsp + 0x217], al
jns 0x14009a1f1
mov rcx, qword [rsp + 0x200]
call fcn.14019aab4
cmp byte [rsp + 0x277], 0
jns 0x14009a1f1
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
cmp byte [rsp + 0xb7], 0
jns 0x140098b26
mov rcx, qword [rsp + 0xa0]
jmp 0x140098b79
test r8b, r8b
jns 0x14009a226
mov r8, qword [rsp + 0x100]
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0x78]
call fcn.1401059a0
jmp 0x14009a1da
test r8b, r8b
jns 0x14009a24c
mov r8, qword [rsp + 0x178]
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x70]
call fcn.1401059a0
mov r15, qword [rsp + 0x60]
jmp 0x140099fe7
test r8b, r8b
jns 0x14009a275
mov r8, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x170]
call fcn.1401059a0
jmp 0x140098b67
test r8b, r8b
cmovs r8, qword [rsp + 0x1c8]
cmovs r12, qword [rsp + 0x1c0]
mov rdx, r12
call fcn.1401059a0
jmp 0x140099226
mov rax, rbx
or rax, 7
lea rcx, [rax + 1]
cmp rax, 0x17
mov r12, r15
mov r15d, Ordinal_26
cmovne r15, rcx
mov rcx, r15
call fcn.14019aa78
mov r14, rax
mov qword [rsp + 0xe0], rax
bts r15, 0x3f
mov qword [rsp + 0xf0], r15
mov r15, r12
mov r12, qword [rsp + 0x40]
mov qword [rsp + 0xe8], rbx
jmp 0x140099ba8
test r8b, r8b
lea rdx, [rsp + 0xe0]
cmovs r8, qword [rdx + 8]
cmovs rdx, qword [rdx]
lea rcx, [rsp + 0x1c0]
call fcn.1401059a0
jmp 0x140099c14
mov rax, rsi
or rax, 7
lea rcx, [rax + 1]
cmp rax, 0x17
mov r15d, Ordinal_26
cmovne r15, rcx
mov rcx, r15
call fcn.14019aa78
mov r14, rax
mov qword [rsp + 0x1e0], rax
movabs rax, 0x8000000000000000
or r15, rax
mov qword [rsp + 0x1f0], r15
mov qword [rsp + 0x1e8], rsi
jmp 0x14009a3a1
lea rcx, [rax + 1]
cmp rcx, rdi
je 0x14009a3d9
mov rcx, rax
sub rcx, rdi
cmp rcx, rax
jae 0x14009a8c0
cmp rsi, qword [rsp + 0x80]
ja 0x14009a8cd
sub r13, rdi
cmp rsi, 0x16
ja 0x14009a318
lea eax, [rdi - 1]
lea r14, [rsp + 0x1e0]
mov byte [r14 + 0x17], al
cmp r13, r14
jb 0x14009a3b6
lea rax, [r14 + rdi]
dec rax
cmp r13, rax
jb 0x140099af4
cmp rdi, 1
je 0x14009a3ca
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.1401d6070
mov byte [r14 + rdi - 1], 0
mov al, byte [rsp + 0x1f7]
jmp 0x14009a3e9
xor eax, eax
mov byte [rsp + 0x1f7], al
mov byte [rsp + 0x1e0], al
test al, al
js 0x14009a3f2
movzx ecx, al
jmp 0x14009a3fa
mov rcx, qword [rsp + 0x1e8]
cmp rcx, 3
jne 0x14009a42f
test al, al
js 0x14009a40e
lea rcx, [rsp + 0x1e0]
jmp 0x14009a416
mov rcx, qword [rsp + 0x1e0]
movzx edx, word [rcx]
xor edx, 0x7865
movzx ecx, byte [rcx + 2]
xor ecx, 0x65
or cx, dx
sete sil
jmp 0x14009a431
xor esi, esi
test al, al
jns 0x14009a442
mov rcx, qword [rsp + 0x1e0]
call fcn.14019aab4
test sil, sil
je 0x14009a485
cmp byte [rsp + 0x277], 0
js 0x14009a45e
mov byte [rsp + 0x277], 4
mov rax, rbp
jmp 0x14009a472
mov qword [rsp + 0x268], 4
mov rax, qword [rsp + 0x260]
movabs rcx, 0x6500780065002e
mov qword [rax], rcx
mov word [rax + 8], 0
lea rsi, [rsp + 0x1e0]
movabs rbx, 0xaaaaaaaaaaaaaaaa
mov qword [rsi + 0x10], rbx
movaps xmmword [rsi], xmm6
lea r8, [rsp + 0x260]
mov rcx, rsi
mov rdi, qword [rsp + 0x40]
mov rdx, rdi
call fcn.1401e6bf0
mov qword [rsp + 0x250], rbx
movaps xmmword [rsp + 0x240], xmm6
movsx rdi, byte [rdi + 0xbf]
mov rbx, rdi
test rdi, rdi
jns 0x14009a4e2
mov rax, qword [rsp + 0x40]
mov rbx, qword [rax + 0xb0]
lea r14, [rbx + 1]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x230], rax
movaps xmmword [rsp + 0x220], xmm6
cmp r14, qword [rsp + 0x80]
ja 0x14009a8b3
cmp r14, 0xb
jb 0x14009a573
mov rax, r14
or rax, 3
lea rcx, [rax + 1]
cmp rax, 0xb
mov r15d, Ordinal_14
cmovne r15, rcx
test r15, r15
js 0x14009a868
lea rcx, [r15 + r15]
call fcn.14019aa78
movabs rcx, 0x8000000000000000
or rcx, r15
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], r14
test dil, dil
jns 0x14009a5b5
mov rdx, qword [rsp + 0x50]
mov rdx, qword [rdx]
jmp 0x14009a5ba
xorps xmm0, xmm0
movaps xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], 0
mov byte [rsp + 0x237], r14b
test dil, dil
jns 0x14009a5a4
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
test rbx, rbx
js 0x140099af4
lea rax, [rsp + 0x220]
mov rdx, qword [rsp + 0x50]
lea rdi, [rax + rbx*2]
cmp rdx, rax
jb 0x14009a5cc
cmp rdx, rdi
jb 0x140099af4
test rbx, rbx
je 0x14009a5df
add rbx, rbx
mov rcx, rax
mov r8, rbx
call fcn.1401d6070
lea rax, [rdi + 2]
lea rdx, [0x140279d30]
cmp rdi, rdx
seta cl
cmp rax, rdx
setbe al
or al, cl
je 0x140099af4
mov dword [rdi], 0x5c
movsx rdi, byte [rsp + 0x1f7]
test rdi, rdi
cmovs rdi, qword [rsp + 0x1e8]
cmovs rsi, qword [rsp + 0x1e0]
test rdi, rdi
sete al
test rsi, rsi
setne cl
or cl, al
je 0x140099af4
movsx rax, byte [rsp + 0x237]
mov edx, 0xa
mov rbx, rax
test rax, rax
jns 0x14009a667
mov rdx, qword [rsp + 0x90]
and rdx, qword [rsp + 0x230]
dec rdx
mov rbx, qword [rsp + 0x228]
mov rcx, rdx
sub rcx, rbx
cmp rcx, rdi
jb 0x14009a719
test rdi, rdi
je 0x14009a6e5
test al, al
js 0x14009a696
lea r14, [rsp + 0x220]
jmp 0x14009a69e
mov eax, ebx
and al, 0x7f
mov byte [rsp + 0x237], al
jmp 0x14009a6de
mov r14, qword [rsp + 0x220]
test rdi, rdi
js 0x140099af4
lea rcx, [r14 + rbx*2]
cmp rsi, rcx
jb 0x14009a6bd
lea rax, [rcx + rdi*2]
cmp rsi, rax
jb 0x140099af4
lea r8, [rdi + rdi]
mov rdx, rsi
call fcn.1401d6070
add rbx, rdi
cmp byte [rsp + 0x237], 0
jns 0x14009a689
mov qword [rsp + 0x228], rbx
mov word [r14 + rbx*2], 0
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x250], rax
movaps xmm0, xmmword [rsp + 0x220]
movaps xmmword [rsp + 0x240], xmm0
cmp byte [rsp + 0x257], 0
js 0x14009a74a
lea rcx, [rsp + 0x240]
jmp 0x14009a752
lea r8, [rbx + rdi]
sub r8, rdx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x220]
mov r9, rbx
call fcn.14013e950
jmp 0x14009a6e5
mov rcx, qword [rsp + 0x240]
lea rdx, [0x140279b94]
call fcn.1401b8fb0
test rax, rax
setne dil
je 0x14009a833
mov rsi, rax
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax + 0xf8]
mov r8, qword [rax + 0x100]
sub r8, rcx
mov edx, 1
mov r9, rsi
call fcn.1401bc7c0
mov rcx, rsi
call fcn.1401bac64
cmp byte [rsp + 0xb7], 0
movzx r8d, byte [rsp + 0x257]
js 0x14009a86d
test r8b, r8b
js 0x14009a814
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0xb0], rax
movaps xmm0, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0xa0], xmm0
mov r15, qword [rsp + 0x60]
cmp byte [rsp + 0x1f7], 0
jns 0x14009a7f1
mov rcx, qword [rsp + 0x1e0]
call fcn.14019aab4
cmp byte [rsp + 0x277], 0
jns 0x14009a808
mov rcx, qword [rsp + 0x260]
call fcn.14019aab4
mov bl, byte [rsp + 0x217]
jmp 0x140099060
mov rdx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x248]
lea rcx, [rsp + 0xa0]
call fcn.14000bbb0
jmp 0x14009a842
mov rax, qword [rsp + 0x40]
mov dword [rax + 0xd8], 0x6b
cmp byte [rsp + 0x257], 0
mov r15, qword [rsp + 0x60]
jns 0x14009a7da
mov rcx, qword [rsp + 0x240]
call fcn.14019aab4
jmp 0x14009a7da
call fcn.1401daa30
call fcn.1401da2d0
test r8b, r8b
lea rdx, [rsp + 0x240]
cmovs r8, qword [rdx + 8]
cmovs rdx, qword [rdx]
lea rcx, [rsp + 0xa0]
call fcn.14000bcb0
jmp 0x14009a842
cmp rcx, rax
jb 0x1400993de
lea rcx, [rsp + 0x200]
call fcn.1401da2f0
lea rcx, [rsp + 0xe0]
call fcn.1401da290
lea rcx, [rsp + 0x220]
call fcn.1401da290
lea rcx, [rsp + 0x1e0]
call fcn.1401da2f0
lea rcx, [rsp + 0x1e0]
call fcn.1401da290
int3