Function at 0x140004c70
Capabilities:
Get installed programs
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push r15
lea rbp, [rsp - 0x1ac0]
mov eax, 0x1bc0
call fcn.140021090
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1aa0], rax
mov r15, r8
mov rsi, rdx
test rdx, rdx
je 0x140005243
cmp qword [rdx + 0x410], 0
je 0x140005243
xor edx, edx
mov qword [rsp + 0x1be0], rbx
mov r8d, 0x104
lea rcx, [rbp + 0x750]
call fcn.140013380
mov rcx, qword [rsi]
lea rdx, [rbp + 0x750]
call fcn.14000cf00
lea rcx, [rbp + 0x750]
call qword [0x140022390]
cmp eax, 1
jb 0x140004d46
mov eax, eax
lea rdx, [rbp + 0x750]
add rdx, rax
lea rcx, [rbp + 0x750]
call qword [0x1400225b0]
lea rcx, [rbp + 0x750]
cmp rax, rcx
je 0x140004d46
nop word [rax + rax]
cmp byte [rax], 0x5c
je 0x140004d43
mov rdx, rax
lea rcx, [rbp + 0x750]
call qword [0x1400225b0]
lea rcx, [rbp + 0x750]
cmp rax, rcx
jne 0x140004d20
jmp 0x140004d46
mov byte [rax], 0
mov qword [rsp + 0x1bf8], rdi
lea rcx, [rbp + 0x970]
xor edx, edx
mov qword [rsp + 0x1bb0], r14
mov r8d, 0x104
call fcn.140013380
lea r9, [0x140029288]
lea r8, [rbp + 0x750]
lea rdx, [0x14002aa14]
lea rcx, [rbp + 0x970]
call qword [0x1400224f0]
mov rax, qword [rsi + 0x410]
cmp dword [rax], 2
je 0x140005032
lea rcx, [rbp + 0x750]
call qword [0x140022390]
cmp eax, 1
jb 0x140004df9
mov eax, eax
lea rdx, [rbp + 0x750]
add rdx, rax
lea rcx, [rbp + 0x750]
call qword [0x1400225b0]
lea rcx, [rbp + 0x750]
cmp rax, rcx
je 0x140004df9
cmp byte [rax], 0x5c
je 0x140004df6
mov rdx, rax
lea rcx, [rbp + 0x750]
call qword [0x1400225b0]
lea rcx, [rbp + 0x750]
cmp rax, rcx
jne 0x140004dd3
jmp 0x140004df9
mov byte [rax], 0
xor edx, edx
lea rcx, [rbp + 0x860]
mov r8d, 0x104
call fcn.140013380
xor edx, edx
lea rcx, [rbp + 0x12a0]
mov r8d, 0x400
call fcn.140013380
xor edx, edx
mov dword [rsp + 0x38], 0
mov r8d, 0x208
lea rcx, [rbp + 0xa80]
call fcn.140013380
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x804
call fcn.140013380
xor edx, edx
lea rcx, [rbp + 0xea0]
mov r8d, 0x400
call fcn.140013380
lea r9, [rbp + 0x750]
mov edx, 0x104
lea r8, str._sFJPRTLOGDISKSSetupFjprtLog64.exe
lea rcx, [rbp + 0x860]
call fcn.1400053b0
lea rax, [rbp + 0xa80]
mov dword [rsp + 0x28], 0x104
or r9d, 0xffffffff
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x860]
xor edx, edx
xor ecx, ecx
call qword [0x140022398]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xa80]
call fcn.140003220
mov r14d, eax
test eax, eax
je 0x140004fb0
lea rcx, [rsp + 0x40]
call qword [0x140022390]
test eax, eax
je 0x140004f7c
lea rax, [rsp + 0x40]
or r8, 0xffffffffffffffff
lea r9, [0x14002aa68]
mov qword [rsp + 0x20], rax
mov edx, 0x400
lea rcx, [rbp + 0xea0]
call fcn.140003640
mov ebx, dword [rbp + 0x340]
call qword [0x1400223d8]
mov edi, eax
call fcn.140007900
call fcn.1400079f0
lea rcx, [0x14002aa80]
call fcn.1400076d0
lea rcx, [rbp + 0xea0]
call fcn.1400076d0
mov r9d, ebx
lea r8, [0x14002b1e0]
lea rdx, str._s_d
lea rcx, [rbp + 0x16a0]
call qword [0x1400224f0]
lea rcx, [rbp + 0x16a0]
call fcn.1400076d0
lea rcx, [rbp + 0x344]
call fcn.1400076d0
lea rcx, [0x14002b174]
call fcn.1400076d0
mov ecx, edi
call qword [0x140022360]
jmp 0x140004f98
mov r8d, dword [rbp + 0x340]
lea r9, [rbp + 0x344]
xor edx, edx
lea rcx, [0x14002aa80]
call fcn.140007ac0
cmp r14d, 0x4de
je 0x140004fb0
mov dword [rsi + 0x430], 0x200
jmp 0x140005032
lea r9, [rbp + 0x860]
mov edx, 0x400
lea r8, str.__s___c__i
lea rcx, [rbp + 0x12a0]
call fcn.1400053b0
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x12a0]
call fcn.140005250
test eax, eax
jne 0x14000500c
call qword [0x1400223d8]
lea r9, [0x14002aac0]
xor edx, edx
mov r8d, eax
lea rcx, [0x14002aaf8]
call fcn.140007ac0
mov dword [rsi + 0x430], 0x200
mov ebx, dword [rsp + 0x38]
test ebx, ebx
je 0x140005032
lea r9, [0x14002ab18]
mov r8d, ebx
xor edx, edx
lea rcx, [0x14002aaf8]
call fcn.140007ac0
mov dword [rsi + 0x430], ebx
lea rcx, [rbp + 0x970]
call qword [0x140022388]
mov rbx, rax
test rax, rax
jne 0x14000506d
lea r9, [0x14002ab48]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14002aaf8]
call fcn.140007ac0
xor eax, eax
mov dword [r15], 3
jmp 0x1400051bd
lea rdx, str.setInstallFromPnavi2
mov qword [rsp + 0x1bb8], r12
mov rcx, rbx
call qword [0x140022380]
mov r12, rax
test rax, rax
jne 0x140005099
lea r9, [0x14002ab78]
jmp 0x140005192
mov rax, qword [rsi + 0x410]
mov edi, 1
cmp dword [rax], edi
jne 0x1400051f0
xor edx, edx
mov dword [rsp + 0x38], 0x104
mov r8d, 0x104
lea rcx, [rbp + 0x860]
call fcn.140013380
lea r9, [0x140029240]
lea r8, [0x140029250]
lea rdx, [0x14002aa14]
lea rcx, [rbp + 0x860]
call qword [0x1400224f0]
mov r8d, dword [rsp + 0x38]
lea r14, [rsi + 0x12c]
mov rcx, r14
xor edx, edx
call fcn.140013380
test r14, r14
je 0x140005177
lea rax, [rsp + 0x30]
mov qword [rsp + 0x30], 0
mov r9d, 0x20019
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x860]
mov rcx, 0xffffffff80000002
call qword [0x140022018]
test eax, eax
jne 0x140005177
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140005177
lea rax, [rsp + 0x38]
mov dword [rsp + 0x3c], edi
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x3c]
xor r8d, r8d
mov qword [rsp + 0x20], r14
lea rdx, [0x140029230]
call qword [0x140022010]
mov rcx, qword [rsp + 0x30]
call qword [0x140022020]
lea rdx, [0x14002aa22]
mov rcx, r14
call qword [0x140022370]
test eax, eax
jne 0x1400051f0
lea r9, [0x14002aba8]
xor r8d, r8d
lea rcx, [0x14002aaf8]
xor edx, edx
call fcn.140007ac0
mov rcx, rbx
mov dword [r15], 3
call qword [0x140022378]
xor eax, eax
mov r12, qword [rsp + 0x1bb8]
mov rdi, qword [rsp + 0x1bf8]
mov r14, qword [rsp + 0x1bb0]
mov rbx, qword [rsp + 0x1be0]
mov rcx, qword [rbp + 0x1aa0]
xor rcx, rsp
call fcn.14000feb0
add rsp, 0x1bc0
pop r15
pop rsi
pop rbp
ret
lea rdx, [rsi + 0x12c]
lea rcx, [rbp + 0xc90]
call qword [0x1400223a0]
lea rcx, [rbp + 0xc90]
call r12
test eax, eax
je 0x140005233
mov dword [r15], eax
cmp eax, 0xc
jne 0x140005231
mov rcx, rbx
mov dword [rsi + 0x430], 0x800
call qword [0x140022378]
mov eax, edi
jmp 0x1400051b5
xor edi, edi
mov rcx, rbx
call qword [0x140022378]
mov eax, edi
jmp 0x1400051b5
xor eax, eax
jmp 0x1400051d5