Function at 0x1401962d0
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xcb0
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
mov rax, qword [0x1402be5c8]
xor rax, rsp
mov qword [rsp + 0xc80], rax
mov r15, rdx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rdx
xor r13d, r13d
mov dword [rsp + 0x44], r13d
mov qword [rdx], r13
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], 7
mov word [rdx], r13w
lea rax, [rdx + 0x20]
mov qword [rsp + 0x48], rax
mov qword [rax], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov dword [rsp + 0x44], 1
mov qword [r11 - 0xae8], r13
mov qword [r11 - 0xad8], r13
mov qword [r11 - 0xad0], 7
mov word [r11 - 0xae8], r13w
lea r8d, [r13 + 7]
lea rdx, str.0.0.0.0
lea rcx, [r11 - 0xae8]
call fcn.140018360
nop
mov qword [rsp + 0x1d0], r13
mov qword [rsp + 0x1e0], r13
mov qword [rsp + 0x1e8], 7
mov word [rsp + 0x1d0], r13w
lea r8d, [r13 + 7]
lea rdx, str.0.0.0.0
lea rcx, [rsp + 0x1d0]
call fcn.140018360
nop
movups xmm7, xmmword [str.Not_Installed]
movaps xmmword [rsp + 0x230], xmm7
movsd xmm6, qword [0x140261b78]
movsd qword [rsp + 0x240], xmm6
mov ebx, dword [0x140261b80]
mov dword [rsp + 0x248], ebx
xor edx, edx
mov r8d, 0x1ec
lea rcx, [rsp + 0x24c]
call fcn.1401cff00
movaps xmmword [rsp + 0x440], xmm7
movsd qword [rsp + 0x450], xmm6
mov dword [rsp + 0x458], ebx
xor edx, edx
mov r8d, 0x1ec
lea rcx, [rsp + 0x45c]
call fcn.1401cff00
mov qword [rsp + 0xd8], r13
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x860]
call fcn.1401cff00
lea r8, str.SoftwareMicrosoftVisualStudio14.0VCRuntimesx64_
mov edx, 0x104
lea rcx, [rsp + 0x860]
call fcn.1401dfdd8
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0x860]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
xor bl, bl
test eax, eax
je 0x1401964f1
lea r8, str.SOFTWAREClassesInstallerDependenciesMicrosoft.VS.VC_RuntimeMinimumVSU_amd64_v14_
mov edx, 0x104
lea rcx, [rsp + 0x860]
call fcn.1401dfdd8
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0x860]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
movzx ebx, cl
test cl, cl
je 0x140196587
mov word [rsp + 0x650], r13w
mov dword [rsp + 0x110], r13d
mov dword [rsp + 0xe8], 0x208
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x650]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x110]
xor r8d, r8d
lea rdx, [0x140233938]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140196579
mov edx, 0x104
lea rcx, [rsp + 0x230]
test bl, bl
lea r8, [rsp + 0x650]
jne 0x140196574
lea r8, [rsp + 0x652]
call fcn.1401dfdd8
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x230]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1401965a0
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x1f0]
call fcn.140018360
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1f0]
cmp qword [rsp + 0x208], 8
cmovae rax, qword [rsp + 0x1f0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009d740
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0x79
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b0fe0
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x14019675f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019675a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401977c3
call fcn.1401a9460
mov qword [rsp + 0xe0], r13
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0xa70]
call fcn.1401cff00
lea r8, str.SoftwareMicrosoftVisualStudio14.0VCRuntimesx86_
mov edx, 0x104
lea rcx, [rsp + 0xa70]
call fcn.1401dfdd8
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0xa70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
xor bl, bl
test eax, eax
je 0x140196817
lea r8, str.SOFTWAREClassesInstallerDependenciesMicrosoft.VS.VC_RuntimeMinimumVSU_x86_v14_
mov edx, 0x104
lea rcx, [rsp + 0xa70]
call fcn.1401dfdd8
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0xa70]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete cl
movzx ebx, cl
test cl, cl
je 0x1401968ad
mov word [rsp + 0x650], r13w
mov dword [rsp + 0xe8], r13d
mov dword [rsp + 0x110], 0x208
lea rax, [rsp + 0x110]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x650]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xe8]
xor r8d, r8d
lea rdx, [0x140233938]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14019689f
mov edx, 0x104
lea rcx, [rsp + 0x440]
test bl, bl
lea r8, [rsp + 0x650]
jne 0x14019689a
lea r8, [rsp + 0x652]
call fcn.1401dfdd8
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x440]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1401968c0
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x1d0]
call fcn.140018360
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rax, qword [rsp + 0x1d0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009d740
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0x95
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b0fe0
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x140196a80
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140196a7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401977c9
call fcn.1401a9460
nop
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREClassesInstallerDependencies
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
jne 0x1401977cf
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x44], 3
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov word [rsp + 0x118], r13w
mov r8d, 7
lea rdx, str.0.0.0.0
lea rcx, [rsp + 0x118]
call fcn.140018360
nop
mov qword [rsp + 0x210], r13
mov qword [rsp + 0x220], r13
mov qword [rsp + 0x228], 7
mov word [rsp + 0x210], r13w
mov r8d, 7
lea rdx, str.0.0.0.0
lea rcx, [rsp + 0x210]
call fcn.140018360
nop
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x60]
call fcn.140076ef0
nop
mov rbx, qword [rsp + 0x140]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov rdi, qword [rbx]
lea rax, str.microsoft_visual_c
mov qword [rsp + 0x68], rax
mov rsi, qword [rsp + 0x60]
movabs rcx, 0x7ffffffffffffffe
mov qword [rsp + 0xd0], rdi
cmp rdi, rbx
je 0x1401972c3
lea r15, [rdi + 0x10]
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], r13
mov rbx, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 8
jb 0x140196bd1
mov r15, qword [r15]
cmp rbx, 8
jae 0x140196bf3
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0xf0], xmm0
mov r14d, 7
mov r12, qword [rsp + 0xf0]
jmp 0x140196c3a
mov r14, rbx
or r14, 7
cmp r14, rcx
cmova r14, rcx
lea rdx, [r14 + 1]
lea rcx, [rsp + 0xf0]
call fcn.140023c30
mov r12, rax
mov qword [rsp + 0xf0], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1401cf850
movabs rcx, 0x7ffffffffffffffe
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x150], r13
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r13
lea r15, [rsp + 0xf0]
cmp r14, 8
cmovae r15, r12
cmp rbx, 8
jae 0x140196c94
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x150], xmm0
mov r14d, 7
jmp 0x140196cce
mov r14, rbx
or r14, 7
cmp r14, rcx
cmova r14, rcx
lea rdx, [r14 + 1]
lea rcx, [rsp + 0x150]
call fcn.140023c30
mov qword [rsp + 0x150], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1401cf850
mov qword [rsp + 0x168], r14
mov qword [rsp + 0x160], rbx
lea rax, [rsp + 0x150]
mov qword [rsp + 0xe8], rax
lea r8, [rsp + 0x150]
cmp r14, 8
cmovae r8, qword [rsp + 0x150]
mov r9d, 0x2001f
mov rdx, rsi
lea rcx, [rsp + 0x110]
call fcn.14005cea0
mov r15d, dword [rsp + 0x44]
or r15d, 4
mov dword [rsp + 0x44], r15d
lea rcx, [rsp + 0x150]
call fcn.1400272a0
nop
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9d, 2
lea r8, [0x14024ad20]
lea rdx, [0x14022de70]
mov rbx, qword [rsp + 0x110]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov r14d, eax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x150], xmm1
mov qword [rsp + 0x160], r13
mov edx, dword [rsp + 0xe8]
shr rdx, 1
je 0x140196db0
lea r8, [rsp + 0x42]
lea rcx, [rsp + 0x150]
call fcn.14003eb20
nop
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 2
lea r8, [0x14024ad20]
lea rdx, [0x14022de70]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x140197802
mov qword [rsp + 0x1b0], r13
mov qword [rsp + 0x1c0], r13
mov qword [rsp + 0x1c8], 7
mov word [rsp + 0x1b0], r13w
mov rdx, qword [rsp + 0x150]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140196e30
lea rcx, [rsp + 0x1b0]
call fcn.140018360
or r15d, 8
mov dword [rsp + 0x44], r15d
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x140196eae
mov rax, qword [rsp + 0x160]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140196e95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140197836
call fcn.1401a9460
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], r13
lea r15, [rsp + 0x1b0]
mov rax, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1c0]
cmp rax, 8
jb 0x140196edd
mov r15, qword [rsp + 0x1b0]
mov r14, r15
lea r13, [r15 + r12*2]
jmp 0x140196ef2
lea r13, [rsp + 0x1b0]
lea r13, [r13 + r12*2]
lea r14, [rsp + 0x1b0]
cmp r14, r13
je 0x140196f1e
movzx ecx, word [r14]
call fcn.1401df178
mov word [r15], ax
add r14, 2
add r15, 2
mov rax, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1c0]
jmp 0x140196ef2
lea r11, [rsp + 0x1b0]
cmp rax, 8
setae byte [rsp + 0x42]
mov r14, qword [rsp + 0x1b0]
cmovae r11, r14
xor r13d, r13d
cmp r12, 0x14
jb 0x14019718a
lea r15, [r12 - 0x13]
lea r15, [r11 + r15*2]
mov rax, r11
nop dword [rax]
nop dword [rax + rax]
mov rcx, r15
sub rcx, rax
sar rcx, 1
mov rdx, r13
je 0x140196f8a
cmp word [rax], 0x6d
je 0x140196f87
cmp rcx, 1
je 0x140196f8a
dec rcx
add rax, 2
cmp word [rax], 0x6d
jne 0x140196f74
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14019718a
mov r9d, 0x14
lea rcx, str.microsoft_visual_c
movzx edx, word [rdx]
mov r8d, 0x6d
cmp dx, r8w
jb 0x140196fdc
mov r10, rax
sub r10, qword [rsp + 0x68]
cmp dx, r8w
ja 0x140196fdc
cmp r9, 1
je 0x140196fe5
dec r9
add rcx, 2
movzx edx, word [rcx + r10]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x140196fbe
add rax, 2
jmp 0x140196f60
sub rax, r11
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14019718a
lea r11, [rsp + 0x1b0]
cmp byte [rsp + 0x42], r13b
cmovne r11, r14
cmp r12, 4
jb 0x14019718a
lea r14, [r11 - 6]
lea r14, [r14 + r12*2]
mov rax, r11
lea r15, str.2022
mov rcx, r14
sub rcx, rax
sar rcx, 1
mov rdx, r13
je 0x14019704c
cmp word [rax], 0x32
je 0x140197049
cmp rcx, 1
je 0x14019704c
dec rcx
add rax, 2
cmp word [rax], 0x32
jne 0x140197036
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14019718a
mov r9d, 4
mov rcx, r15
movzx edx, word [rdx]
mov r8d, 0x32
cmp dx, r8w
jb 0x140197098
mov r10, rax
sub r10, r15
cmp dx, r8w
ja 0x140197098
cmp r9, 1
je 0x14019709e
dec r9
add rcx, 2
movzx edx, word [rcx + r10]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14019707a
add rax, 2
jmp 0x140197022
sub rax, r11
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14019718a
xor r8d, r8d
lea rdx, [0x140261f20]
lea rcx, [rsp + 0x1b0]
call fcn.1400233f0
cmp rax, 0xffffffffffffffff
je 0x1401971b6
mov byte [rsp + 0x20], 1
lea r9, [0x140233938]
lea r8, [0x14022de70]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x110]
call fcn.140076cf0
nop
lea r8, [rsp + 0x170]
cmp qword [rsp + 0x188], 8
setae r15b
mov rbx, qword [rsp + 0x170]
cmovae r8, rbx
lea rcx, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
cmovae rcx, qword [rsp + 0x118]
mov r14, qword [rsp + 0x180]
mov r9, r14
mov rdx, qword [rsp + 0x128]
call fcn.14002b9b0
cmp eax, 0xffffffff
jg 0x140197175
mov byte [rsp + 0x40], 1
lea rdx, [rsp + 0x170]
test r15b, r15b
cmovne rdx, rbx
mov r8, r14
lea rcx, [rsp + 0x118]
call fcn.140018360
nop
lea rcx, [rsp + 0x170]
call fcn.1400272a0
mov rbx, qword [rsp + 0x110]
lea rcx, [rsp + 0x1b0]
call fcn.1400272a0
nop
test rbx, rbx
je 0x1401971a7
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rbx, qword [rsp + 0x50]
mov r15, qword [rsp + 0x70]
jmp 0x1401972ae
xor r8d, r8d
lea rdx, [0x140261f28]
lea rcx, [rsp + 0x1b0]
call fcn.1400233f0
cmp rax, 0xffffffffffffffff
je 0x14019718a
mov byte [rsp + 0x20], 1
lea r9, [0x140233938]
lea r8, [0x14022de70]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x110]
call fcn.140076cf0
nop
lea r8, [rsp + 0x170]
cmp qword [rsp + 0x188], 8
setae r15b
mov rbx, qword [rsp + 0x170]
cmovae r8, rbx
lea rcx, [rsp + 0x210]
cmp qword [rsp + 0x228], 8
cmovae rcx, qword [rsp + 0x210]
mov r14, qword [rsp + 0x180]
mov r9, r14
mov rdx, qword [rsp + 0x220]
call fcn.14002b9b0
cmp eax, 0xffffffff
jg 0x140197279
mov byte [rsp + 0x41], 1
lea rdx, [rsp + 0x170]
test r15b, r15b
cmovne rdx, rbx
mov r8, r14
lea rcx, [rsp + 0x210]
call fcn.140018360
nop
jmp 0x140197175
lea rcx, [rsp + 0xf0]
call fcn.1400272a0
mov rdi, qword [rdi]
jmp 0x140196b8c
lea rcx, [rsp + 0x140]
call fcn.140022320
cmp byte [rsp + 0x40], 0
je 0x140197363
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
setae dil
cmovae rdx, qword [rsp + 0x118]
lea rcx, [rsp + 0x1f0]
cmp qword [rsp + 0x208], 8
cmovae rcx, qword [rsp + 0x1f0]
mov rbx, qword [rsp + 0x200]
mov r8, rbx
mov r14, qword [rsp + 0x128]
cmp r14, rbx
cmovb r8, r14
call fcn.140028450
test eax, eax
je 0x14019733a
jns 0x140197363
jmp 0x14019733f
cmp rbx, r14
jae 0x140197363
lea rdx, [rsp + 0x118]
test dil, dil
cmovne rdx, qword [rsp + 0x118]
mov r8, r14
lea rcx, [rsp + 0x1f0]
call fcn.140018360
cmp byte [rsp + 0x41], 0
je 0x1401973f7
lea rdx, [rsp + 0x210]
cmp qword [rsp + 0x228], 8
setae dil
cmovae rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rcx, qword [rsp + 0x1d0]
mov rbx, qword [rsp + 0x1e0]
mov r8, rbx
mov r14, qword [rsp + 0x220]
cmp r14, rbx
cmovb r8, r14
call fcn.140028450
test eax, eax
je 0x1401973cd
jns 0x1401973f7
jmp 0x1401973d2
cmp rbx, r14
jae 0x1401973f7
lea rdx, [rsp + 0x210]
test dil, dil
cmovne rdx, qword [rsp + 0x210]
mov r8, r14
lea rcx, [rsp + 0x1d0]
call fcn.140018360
nop
lea rcx, [rsp + 0x210]
call fcn.1400272a0
nop
lea rcx, [rsp + 0x118]
call fcn.1400272a0
nop
test rsi, rsi
je 0x140197422
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
jmp 0x14019742c
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1f0]
cmp qword [rsp + 0x208], 8
cmovae rax, qword [rsp + 0x1f0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_64_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009d740
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0xc0
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b0fe0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400272a0
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rsp + 0xf0]
call fcn.140023b20
nop
lea rax, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rax, qword [rsp + 0x1d0]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, str.___CSystemSoftware____________VCRedist_86_Version__ls
mov r8, 0xffffffffffffffff
call fcn.14009d740
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rbx, qword [rsp + 0xf0]
mov dword [rsp + 0xe8], r13d
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], 7
mov r8d, 0x23
lea rdx, str.CSystemSoftware::GetVCRedistVersion
lea rcx, [rsp + 0x170]
call fcn.140018360
nop
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], 7
mov r8d, MsiRecordSetStreamA
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreDetectionMan_systemsoftware.cpp
lea rcx, [rsp + 0x118]
call fcn.140018360
movaps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x140]
mov r8d, 0xc1
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x118]
call fcn.1400b0fe0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400272a0
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x170]
call fcn.140018e70
nop
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x190]
call fcn.140018e70
nop
lea rcx, [r15 + 0x20]
lea rdx, [rsp + 0x190]
call fcn.140023a40
lea rdx, [rsp + 0x170]
mov rcx, r15
call fcn.140023a40
lea rcx, [rsp + 0x190]
call fcn.1400272a0
lea rcx, [rsp + 0x170]
call fcn.1400272a0
nop
lea rcx, [rsp + 0x1d0]
call fcn.1400272a0
nop
lea rcx, [rsp + 0x1f0]
call fcn.1400272a0
mov rax, r15
mov rcx, qword [rsp + 0xc80]
xor rcx, rsp
call fcn.1401a9440
lea r11, [rsp + 0xcb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1401e37cc
int3
call fcn.1401e37cc
nop
call fcn.140015e70
mov r8, rax
lea r9, str.Unable_to_open_registry_key
mov edx, ebx
lea rcx, [rsp + 0x80]
call fcn.140045e00
lea rdx, [0x1402b97a8]
lea rcx, [rsp + 0x80]
call fcn.1401cf69c
nop
call fcn.140015e70
mov r8, rax
lea r9, str.Unable_to_get_registry_value
mov edx, r14d
lea rcx, [rsp + 0xa8]
call fcn.140045e00
lea rdx, [0x1402b97a8]
lea rcx, [rsp + 0xa8]
call fcn.1401cf69c
nop
call fcn.1401e37cc
int3