Function at 0x14001d400
Capabilities:
Set registry value

Disassembly:
push rdi
mov eax, 0x1170
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0xb0], 0xfffffffffffffffe
mov qword [rsp + 0x1188], rbx
mov qword [rsp + Ordinal_4500], rbp
mov qword [rsp + Ordinal_4511], rsi
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x1168], rax
mov rbx, rcx
lea rcx, [rsp + 0x110]
call fcn.140023580
nop
mov rdx, rbx
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
nop
lea rdx, str.WindowsSystem32configSYSTEM
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const____ptr64____ptr64]
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov rsi, rax
mov qword [rsp + 0x30], rax
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rbx, rax
mov qword [rsp + 0x38], rax
xor ebp, ebp
mov qword [rsp + 0x110], rbp
cmp qword [rax + 0x20], 8
jb 0x14001d4ca
lea rdi, [rax + 8]
mov rdx, qword [rdi]
jmp 0x14001d4d1
lea rdi, [rax + 8]
mov rdx, rdi
lea r8, [rsp + 0x110]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001d501
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001d587
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], 0xffffffff80000002
mov rdx, rbx
lea rcx, [rsp + 0x1128]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_AEBV01__Z]
lea rcx, [rsp + 0x110]
call fcn.140024820
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], al
test al, al
je 0x14001d57e
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [rbx + 0x20], 8
jb 0x14001d54e
mov rdi, qword [rdi]
lea r8, [rsp + 0x110]
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001d57e
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001d587
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001d5a1
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp qword [rsi + 0x20], 8
jb 0x14001d5ae
mov rdx, qword [rsi + 8]
jmp 0x14001d5b2
lea rdx, [rsi + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
test eax, eax
je 0x14001d5d7
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rsi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001d5e0
mov rcx, rsi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
lea rax, [rsp + 0x88]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rbx, rax
mov qword [rsp + 0x30], rax
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov rdi, rax
cmp qword [rbx + 0x20], 8
jb 0x14001d62d
mov r8, qword [rbx + 8]
jmp 0x14001d631
lea r8, [rbx + 8]
cmp qword [rax + 0x20], 8
jb 0x14001d63e
mov rdx, qword [rax + 8]
jmp 0x14001d642
lea rdx, [rax + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
test eax, eax
je 0x14001d6ad
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov r8d, 0x141
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
lea rdx, str.ToGoSystemControlSet001Control
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
nop
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rbx, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x110], rbp
cmp qword [rax + 0x20], 8
jb 0x14001d709
lea rdi, [rax + 8]
mov rdx, qword [rdi]
jmp 0x14001d710
lea rdi, [rax + 8]
mov rdx, rdi
lea r8, [rsp + 0x110]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001d740
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001d7c3
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], 0xffffffff80000002
mov rdx, rbx
lea rcx, [rsp + 0x1128]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_AEBV01__Z]
lea rcx, [rsp + 0x110]
call fcn.140024820
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], al
test al, al
je 0x14001d971
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [rbx + 0x20], 8
jb 0x14001d791
mov rdi, qword [rdi]
lea r8, [rsp + 0x110]
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001d971
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov r8d, Ordinal_332
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov rdi, rax
mov qword [rsp + 0x38], rax
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x110], rbp
cmp qword [rax + 0x20], 8
jb 0x14001d827
lea rsi, [rax + 8]
mov rdx, qword [rsi]
jmp 0x14001d82e
lea rsi, [rax + 8]
mov rdx, rsi
lea r8, [rsp + 0x110]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001d85e
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001d8e4
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], 0xffffffff80000002
mov rdx, rbx
lea rcx, [rsp + 0x1128]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_AEBV01__Z]
lea rcx, [rsp + 0x110]
call fcn.140024820
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], al
test al, al
je 0x14001d8db
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [rbx + 0x20], 8
jb 0x14001d8ab
mov rsi, qword [rsi]
lea r8, [rsp + 0x110]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001d8db
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001d8e4
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001d8fe
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp qword [rdi + 0x20], 8
jb 0x14001d90b
mov rdx, qword [rdi + 8]
jmp 0x14001d90f
lea rdx, [rdi + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
test eax, eax
je 0x14001d934
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001d93e
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
lea rdx, str.BootDriverFlags
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov rbx, rax
mov dword [rsp + 0x30], 6
cmp qword [rax + 0x20], 8
jb 0x14001d9a4
mov rdx, qword [rax + 8]
jmp 0x14001d9a8
lea rdx, [rax + 8]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x14001dbe4
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov r8d, Ordinal_340
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001da35
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001da35
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001da4f
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov rdi, rax
mov qword [rsp + 0x38], rax
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x110], rbp
cmp qword [rax + 0x20], 8
jb 0x14001da9a
lea rsi, [rax + 8]
mov rdx, qword [rsi]
jmp 0x14001daa1
lea rsi, [rax + 8]
mov rdx, rsi
lea r8, [rsp + 0x110]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001dad1
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001db57
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], 0xffffffff80000002
mov rdx, rbx
lea rcx, [rsp + 0x1128]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_AEBV01__Z]
lea rcx, [rsp + 0x110]
call fcn.140024820
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], al
test al, al
je 0x14001db4e
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [rbx + 0x20], 8
jb 0x14001db1e
mov rsi, qword [rsi]
lea r8, [rsp + 0x110]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x14001db4e
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001db57
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001db71
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp qword [rdi + 0x20], 8
jb 0x14001db7e
mov rdx, qword [rdi + 8]
jmp 0x14001db82
lea rdx, [rdi + 8]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
test eax, eax
je 0x14001dba7
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
jmp 0x14001dbb1
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001dc1e
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001dc1e
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001dc38
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystemControlSet001ControlCrashControl
lea rcx, [rsp + 0xb8]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_PEB_W_Z]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140023c50
test al, al
jne 0x14001dcf1
mov r8d, 0x158
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
lea rdx, str.AutoReboot
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov rbx, rax
mov dword [rsp + 0x30], ebp
cmp qword [rax + 0x20], 8
jb 0x14001dd17
mov rdx, qword [rax + 8]
jmp 0x14001dd1b
lea rdx, [rax + 8]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x14001de1f
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov r8d, Ordinal_355
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001dda8
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001dda8
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001ddc2
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001de59
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001de59
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001de73
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystemControlSet001ControlPnp
lea rcx, [rsp + 0xb8]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_PEB_W_Z]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140023c50
test al, al
jne 0x14001df2c
mov r8d, Ordinal_365
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
lea rdx, str.PollBootPartitionTimeout
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8d, 0x7530
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140024140
test al, al
jne 0x14001e01d
mov r8d, Ordinal_369
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001dfa6
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001dfa6
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001dfc0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001e04e
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001e04e
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001e068
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystemControlSet001ControlPower
lea rcx, [rsp + 0xb8]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_PEB_W_Z]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140023c50
test al, al
jne 0x14001e121
mov r8d, reloc.MFC80U.DLL_Ordinal_376
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
lea rdx, str.HibernateEnabled
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140024140
test al, al
jne 0x14001e20f
mov r8d, 0x17f
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001e198
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001e198
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001e1b2
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001e240
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001e240
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001e25a
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystemControlSet001ControlSession_ManagerMemory_Management
lea rcx, [rsp + 0xb8]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_PEB_W_Z]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140023c50
test al, al
jne 0x14001e313
mov r8d, Ordinal_393
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x80], rbp
lea rax, [rsp + 0x88]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x88]
call fcn.140015d30
mov rbx, rax
lea rdx, str.PagingFiles
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140024320
test al, al
jne 0x14001e47b
mov r8d, Ordinal_403
lea rdx, str..win8setup.cpp
lea rcx, str._s__d_:ToSurportWin7_faild
call fcn.140021570
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001e3bf
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001e3bf
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001e3d9
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x14001e436
mov rdi, qword [rsp + 0x78]
cmp rbx, rdi
je 0x14001e42e
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
add rbx, 0x28
cmp rbx, rdi
jne 0x14001e417
mov rbx, qword [rsp + 0x70]
mov rcx, rbx
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x80], rbp
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x14001e71f
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001e4ac
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001e4ac
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001e4c6
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rax, [rsp + 0x88]
mov qword [rsp + 0x38], rax
lea rdx, str.ExistingPageFiles
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov rbx, rax
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
nop
mov r9, rbx
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140023d80
lea rdx, str.ToGoSystemControlSet002Control
lea rcx, [rsp + 0xb8]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_PEB_W_Z]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140023c50
lea rdx, str.BootDriverFlags
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8d, 6
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140024140
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001e5b1
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001e5b1
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001e5cb
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystemControlSet002ControlPnp
lea rcx, [rsp + 0xb8]
call qword [reloc.MSVCP80.dll___4__basic_string__WU__char_traits__W_std__V__allocator__W_2__std__QEAAAEAV01_PEB_W_Z]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140023c50
lea rdx, str.PollBootPartitionTimeout
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8d, 0x7530
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140024140
cmp byte [rsp + reloc.MFC80U.DLL_Ordinal_4384], 0
je 0x14001e663
lea r8, [rsp + 0x120]
mov edx, 4
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
test eax, eax
je 0x14001e663
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x14001e67d
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.ToGoSystem
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
mov r8, rax
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x110]
call fcn.140024740
nop
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x14001e6df
mov rdi, qword [rsp + 0x78]
cmp rbx, rdi
je 0x14001e6d7
nop
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
add rbx, 0x28
cmp rbx, rdi
jne 0x14001e6c0
mov rbx, qword [rsp + 0x70]
mov rcx, rbx
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x80], rbp
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov al, 1
mov rcx, qword [rsp + 0x1168]
xor rcx, rsp
call fcn.140161080
lea r11, [rsp + 0x1170]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret