Function at 0x140045d70
Capabilities:
Query or enumerate registry value
Reference processor manufacturer constants

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x170
mov rax, qword [0x1400fc0c0]
xor rax, rsp
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x30]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesDiskEnum
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140046067
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rdx, str.046789DEFGHIJKLMNOPQRSTUVW
lea rax, [rsp + 0x60]
mov dword [rsp + 0x38], 0x100
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x14004605c
xorps xmm0, xmm0
lea rax, [rsp + 0x60]
movups xmmword [rsp + 0x40], xmm0
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x140045e20
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
ja 0x140046097
cmp rbx, 0xf
ja 0x140045e7b
mov r8, rbx
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
lea rcx, [rsp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x40], 0
mov rsi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x40]
jmp 0x140045f13
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x140045eb4
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400bcabc
test rax, rax
je 0x140046002
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140045ef0
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov rsi, rax
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140045ed0
xor edi, edi
jmp 0x140045ef0
cmp rcx, 0x1000
jb 0x140045ee8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004609d
jmp 0x140045e95
call fcn.1400bcabc
mov rdi, rax
mov r8, rbx
mov qword [rsp + 0x40], rdi
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x50], rbx
mov rcx, rdi
mov qword [rsp + 0x58], rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
cmp rsi, 0xf
lea rbp, [rsp + 0x40]
cmova rbp, rdi
cmp rbx, 6
jb 0x140045f7e
lea r14, [rbx + rbp]
mov edx, 0x56
lea r8, [r14 - 5]
mov rcx, rbp
sub r8, rbp
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140045f7e
cmp dword [rax], 0x61774d56
jne 0x140045f53
cmp word [rax + 4], 0x6572
je 0x140045f71
inc rax
lea r8, [r14 - 5]
sub r8, rax
mov rcx, rax
mov edx, 0x56
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140045f43
jmp 0x140045f7e
sub rax, rbp
cmp rax, 0xffffffffffffffff
jne 0x140046012
cmp rsi, 0xf
lea rbp, [rsp + 0x40]
cmova rbp, rdi
cmp rbx, 4
jb 0x140045fd7
lea r8, [rbp - 3]
mov edx, 0x56
add r8, rbx
mov rcx, rbp
sub r8, rbp
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140045fd7
nop dword [rax]
cmp dword [rax], 0x584f4256
je 0x140046009
inc rax
lea r8, [rbp - 3]
add r8, rbx
mov edx, 0x56
sub r8, rax
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140045fb0
cmp rsi, 0xf
jbe 0x14004605c
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140046054
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046054
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rax, rbp
cmp rax, 0xffffffffffffffff
je 0x140045fd7
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp rsi, 0xf
jbe 0x140046050
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140046048
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046002
mov rcx, rdi
call fcn.1400bc7a4
mov al, 1
jmp 0x140046069
mov rcx, rdi
call fcn.1400bc7a4
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.1400bc390
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
call fcn.140036a40
int3
call fcn.1400369a0
int3