Function at 0x14000caf0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0xa8
mov qword [rsp + 0x88], 0xfffffffffffffffe
mov dword [rsp + 0x30], 0xfffffc19
lea rcx, [rsp + 0x40]
call fcn.1400084e0
nop
lea rcx, [rsp + 0x48]
call fcn.1400084e0
nop
lea rcx, [rsp + 0x38]
call fcn.1400084e0
nop
lea r8, str.Test_and_install_MSI:
mov edx, 8
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov rax, qword [rsp + 0xb0]
cmp dword [rax + 0x17c], 1
jne 0x14000cb77
mov rax, qword [rsp + 0xb0]
add rax, 0x3c8
lea rdx, [0x140061488]
mov rcx, rax
call fcn.140008610
lea rcx, [rsp + 0x38]
call fcn.140003f30
movzx eax, al
test eax, eax
jne 0x14000cbaa
mov rax, qword [rsp + 0xb0]
add rax, 0x488
lea rdx, [0x140061480]
mov rcx, rax
call fcn.140008610
jmp 0x14000cc7b
mov r9, qword [rsp + 0x38]
lea r8, str.____Found_MSI_folder:__s
mov edx, 8
lea rcx, [0x14007f0e0]
call fcn.140021a10
lea r8, str.msiexec.exe
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.140007a00
nop
lea rcx, [rsp + 0x50]
call fcn.140008670
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400043c0
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0xb0]
add rax, 0x488
mov rdx, qword [rsp + 0x98]
mov rcx, rax
call fcn.1400085e0
nop
lea rcx, [rsp + 0x78]
call fcn.1400085c0
mov rax, qword [rsp + 0xb0]
add rax, 0x488
mov rcx, rax
call fcn.140007c90
movzx eax, al
test eax, eax
je 0x14000cc71
mov rax, qword [rsp + 0xb0]
add rax, 0x488
lea rdx, [0x140061480]
mov rcx, rax
call fcn.140008610
nop
lea rcx, [rsp + 0x50]
call fcn.1400085c0
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x488]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0xb0]
mov r9, qword [rax + 0x3c8]
lea r8, str.____MSI_Version_required:__s_____MSI_Version_installed:__s
mov edx, 8
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov rax, qword [rsp + 0xb0]
add rax, 0x488
lea rdx, [0x1400613c8]
mov rcx, rax
call fcn.14000ebf0
movzx eax, al
test eax, eax
jne 0x14000cd02
mov rax, qword [rsp + 0xb0]
add rax, 0x3c8
lea rdx, [0x1400613c8]
mov rcx, rax
call fcn.14000ebf0
movzx eax, al
test eax, eax
je 0x14000cfaa
lea r8, str.DCOM_verification.
mov edx, 0xa
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov dword [rsp + 0x58], 4
lea rdx, [0x14005cb94]
lea rcx, [rsp + 0x40]
call fcn.140008610
lea rdx, [0x14005cb94]
lea rcx, [rsp + 0x48]
call fcn.140008610
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftOle
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000ce7a
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x6c]
xor r8d, r8d
lea rdx, [0x140061338]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000cdf1
cmp dword [rsp + 0x58], 0
jbe 0x14000cdf1
mov dword [rsp + 0x70], 0
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 1
jne 0x14000cdd4
lea rdx, [0x140061334]
lea rcx, [rsp + 0x40]
call fcn.140008610
mov r9d, dword [rsp + 0x70]
lea r8, str.____LegacyAuthenticationLevel:__d
mov edx, 8
lea rcx, [0x14007f0e0]
call fcn.140021a10
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x6c]
xor r8d, r8d
lea rdx, str.LegacyImpersonationLevel
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000ce6f
cmp dword [rsp + 0x58], 0
jbe 0x14000ce6f
mov dword [rsp + 0x70], 0
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 1
jne 0x14000ce52
lea rdx, [0x140061334]
lea rcx, [rsp + 0x48]
call fcn.140008610
mov r9d, dword [rsp + 0x70]
lea r8, str.____LegacyImpersonationLevel:__d
mov edx, 8
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [0x140061334]
lea rcx, [rsp + 0x40]
call fcn.14000eae0
movzx eax, al
test eax, eax
jne 0x14000ceae
lea rdx, [0x140061334]
lea rcx, [rsp + 0x48]
call fcn.14000eae0
movzx eax, al
test eax, eax
je 0x14000cf88
lea r8, str.Windows_compatibility_problem:__nSettings_are_not_compatible_to_MSI_due_to_Microsoft_article_http:__support.microsoft.com_default.aspx_scidkb_en_us_Q319624
xor edx, edx
lea rcx, [0x14007f0e0]
call fcn.140021a10
lea r8, str.____Please_change_DCOM_AuthenticationLevel_to_a_value_other_than_none_and_DCOM_ImpersonationLevel_to_a_value_other_than_anonymous___
mov edx, 8
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov rax, qword [rsp + 0xb0]
mov dword [rax + 0x1f0], 0
mov rax, qword [rsp + 0xb0]
add rax, 0x488
lea rdx, [0x1400613c8]
mov rcx, rax
call fcn.14000eb70
movzx eax, al
test eax, eax
je 0x14000cf6e
mov rax, qword [rsp + 0xb0]
add rax, 0x3c8
lea rdx, [0x1400613c8]
mov rcx, rax
call fcn.14000ebf0
movzx eax, al
test eax, eax
je 0x14000cf6e
mov dword [rsp + 0x80], 0xfffffffc
lea rcx, [rsp + 0x38]
call fcn.1400085c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400085c0
nop
lea rcx, [rsp + 0x40]
call fcn.1400085c0
mov eax, dword [rsp + 0x80]
jmp 0x14000cffc
lea r8, str._Setup_continued_but_maybe_an_error_will_occur_later__
mov edx, 1
lea rcx, [0x14007f0e0]
call fcn.140021a10
jmp 0x14000cfa8
mov dword [rsp + 0x30], 0
lea r8, str.DCOM_settings_O.K.
mov edx, 0xa
lea rcx, [0x14007f0e0]
call fcn.140021a10
jmp 0x14000cfb2
mov dword [rsp + 0x30], 0
lea r8, str._End_of_TestMSI.
mov edx, 8
lea rcx, [0x14007f0e0]
call fcn.140021a10
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x84], eax
lea rcx, [rsp + 0x38]
call fcn.1400085c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400085c0
nop
lea rcx, [rsp + 0x40]
call fcn.1400085c0
mov eax, dword [rsp + 0x84]
add rsp, 0xa8
ret