Function at 0x140154a90
Capabilities:
Accept command line arguments
Check for time delay via queryperformancecounter
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xcd8]
sub rsp, 0xdb0
mov qword [rbp + 0x38], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140462840]
xor rax, rsp
mov qword [rbp + 0xc90], rax
mov rsi, rcx
xor r12d, r12d
mov edi, r12d
mov dword [rsp + 0x40], r12d
lea rcx, [rbp - 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rcx, [rbp - 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rcx, [rbp - 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rcx, [rbp + 0x28]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rcx, [rbp - 8]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov r15d, r12d
mov qword [rbp - 0x48], r12
mov dword [rbp - 0x40], r12d
mov qword [rbp - 0x38], r12
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x30]
call sym.NitroFree.exe_public:_class_CxFile____ptr64___cdecl_CxFile::operator_class_CxFile_const____ptr64____ptr64
nop
lea rax, [rbp]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x30]
lea r8, [rbp - 0x58]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140161fc0
lea rcx, [rbp - 0x68]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov r8d, dword [rsp + 0x70]
lea rdx, str.SoftwareNitroPro_d.0Settings
lea rcx, [rbp - 0x68]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
mov qword [rbp - 0x70], r12
lea rcx, [rbp - 0x68]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rdx, rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r14d, 1
mov r9d, r14d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140154c33
mov dword [rsp + 0x34], r12d
mov dword [rsp + 0x60], 4
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.allowMultipleInstances
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140154c20
cmp dword [rsp + 0x34], 4
je 0x140154c25
mov dword [rsp + 0x50], r12d
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x70], r12
xor edx, edx
mov rcx, rsi
call fcn.140157960
mov byte [rsp + 0x31], al
test al, al
je 0x140154c4f
mov dword [rsp + 0x50], r14d
jmp 0x140154cf0
cmp dword [rsp + 0x50], 0
jne 0x140154cf0
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rdx, [0x1403228a8]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc120u.dll_Ordinal_13477]
cmp qword [rsi + 0x29d0], 0
jne 0x140154cac
mov ecx, 0x20
call sub.mfc120u.dll_Ordinal_1484
test rax, rax
je 0x140154ca2
mov byte [rax], 0
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
jmp 0x140154ca5
mov rax, r12
mov qword [rsi + Ordinal_10707], rax
mov rbx, qword [rsi + 0x29d0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rdx, rax
mov rcx, rbx
call fcn.140155e00
test eax, eax
je 0x140154ce6
mov rax, qword [rsi + 0x29d0]
cmp byte [rax], 0
je 0x140154ce6
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
jmp 0x140154cf0
lea rcx, [rsp + 0x40]
jmp 0x140155c10
call fcn.1400c59a0
test al, al
je 0x140154dbb
call fcn.1400c5980
lea rcx, [rsi + 0x47c]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
call fcn.140161fc0
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp - 0x80]
mov r8d, dword [rsp + 0x40]
lea rdx, [0x1402dc5c0]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
lea rcx, [rsp + 0x38]
call fcn.1401776e0
mov rbx, rax
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.mfc120u.dll_Ordinal_2861]
test eax, eax
setne bl
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
test bl, bl
je 0x140154daa
call fcn.1400c5a70
call fcn.1400c59e0
nop
lea rcx, [rsp + 0x48]
jmp 0x140155c10
call fcn.1400c59e0
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
lea rdx, str.NitroPDF
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc120u.dll_Ordinal_286]
lea r8, [rsi + 0x2890]
mov dl, 1
mov rcx, rax
call fcn.140192050
mov qword [0x1404697a0], rax
xor r8d, r8d
lea rdx, [0x14043b708]
lea rcx, [0x1404697b8]
call sub.gdiplus.dll_GdiplusStartup
call qword [sym.imp.COMCTL32.dll_InitCommonControls]
mov rcx, rsi
call sub.mfc120u.dll_Ordinal_7600
call sub.mfc120u.dll_Ordinal_2231
test eax, eax
je 0x140155c16
mov rcx, rsi
call fcn.1401563a0
mov edx, InitCommonControls
mov rcx, rsi
call fcn.140157bc0
lea rdx, [0x1403228d8]
lea rcx, [rsi + 0x178]
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_wchar_t_const____ptr64___cdecl_CBCGPWorkspace::SetRegistryBase_wchar_t_const____ptr64____ptr64]
xor ecx, ecx
call sub.mfc120u.dll_Ordinal_2136
call sub.mfc120u.dll_Ordinal_2170
mov rcx, qword [rax + 0x18]
mov qword [rsi + Ordinal_10422], rcx
lea rcx, [rsi + 0x178]
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_int___cdecl_CBCGPWorkspace::InitContextMenuManager_void____ptr64]
lea rcx, [rsi + 0x178]
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_int___cdecl_CBCGPWorkspace::InitKeyboardManager_void____ptr64]
lea rcx, [rsi + 0x178]
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_int___cdecl_CBCGPWorkspace::InitTooltipManager_void____ptr64]
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_static_int___cdecl_CBCGPToolBarImages::Is32BitTransparencySupported_void_]
mov dword [rsi + Ordinal_10691], eax
mov r8d, Ordinal_261
lea rdx, [rbp + 0x870]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0x870]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov rcx, r12
nop
movzx eax, word [rbp + rcx + 0x870]
mov word [rbp + rcx + 0xa80], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140154eb0
lea rdx, str.npdf.dll
lea rcx, [rbp + 0xa80]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rcx, [rbp + 0xa80]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
mov qword [0x1404697a8], rax
test rax, rax
jne 0x140154f2c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, 0x1a6
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_8043]
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call sub.mfc120u.dll_Ordinal_2228
jmp 0x140155c16
xor eax, eax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x30], 0x28
mov byte [rbp - 0x2c], 1
mov qword [rbp - 0x28], rcx
mov eax, dword [rsp + 0x70]
mov dword [rbp - 0x20], eax
mov eax, dword [rbp - 0x58]
mov dword [rbp - 0x1c], eax
mov byte [rbp - 0x18], 1
lea rax, [0x140153e90]
mov qword [rbp - 0x10], rax
lea rdx, [rbp - 0x30]
call fcn.1400899a0
mov rcx, qword [0x1404697a8]
call fcn.1400898c0
call fcn.140136d10
xor edx, edx
mov r8d, Ordinal_528
lea rcx, [rbp + 0xd0]
call sub.MSVCR120.dll_memset
mov dword [rbp + 0xd0], Ordinal_528
mov qword [rsp + 0x68], r12
lea rdx, [rsp + 0x78]
mov ecx, r14d
call fcn.140195770
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rdx, rax
lea r8, [rsp + 0x68]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x140155081
mov dword [rsp + 0x34], Ordinal_266
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.PluginLog
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
movzx ecx, byte [rbp + 0xd4]
test eax, eax
cmovne ecx, r12d
mov byte [rbp + 0xd4], cl
mov dword [rsp + 0x34], Ordinal_266
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1d8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.NitroLog
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
movzx ecx, byte [rbp + 0x1d8]
test eax, eax
cmovne ecx, r12d
mov byte [rbp + 0x1d8], cl
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x68], r12
lea rcx, [rbp + 0xd0]
call qword [0x140469620]
lea rdx, [rsp + 0x78]
mov ecx, 3
call fcn.140195770
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov r8, rax
mov rdx, 0xffffffff80000002
mov r9d, 0x20019
lea rcx, [rbp - 0x48]
call fcn.14008ff80
test eax, eax
jne 0x140155157
mov edx, Ordinal_261
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_4855]
mov rbx, rax
mov dword [rsp + 0x34], Ordinal_521
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
xor r8d, r8d
lea rdx, str.installsource
mov r15, qword [rbp - 0x48]
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14015512e
mov eax, dword [rsp + 0x40]
dec eax
cmp eax, 1
ja 0x14015512e
test rbx, rbx
je 0x14015512e
cmp dword [rsp + 0x34], 0
jne 0x14015512e
mov word [rbx], r12w
or edx, 0xffffffff
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_12110]
test r15, r15
je 0x140155151
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r15, r12
mov qword [rbp - 0x48], r12
mov dword [rbp - 0x40], r12d
jmp 0x14015515b
mov r15, qword [rbp - 0x48]
lea rdx, [0x140322918]
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_2861]
test eax, eax
jne 0x14015517a
lea rcx, str.AppType::VLP
jmp 0x1401551a2
xor r8d, r8d
lea rdx, str.lenovo
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_4467]
cmp eax, 0xffffffff
lea rcx, str.AppType::Lenovo
jne 0x1401551a2
lea rcx, str.AppType::Regular
mov rax, qword [0x140467260]
call qword [rax + 0x28]
mov qword [rsi + 0x2888], rax
call fcn.14013c150
lea rdx, [rbp - 0x50]
mov ecx, 5
call fcn.140195770
lea rcx, [rsi + 0x238]
call fcn.140161d80
mov rcx, rsi
call fcn.14015be50
mov rcx, rsi
call fcn.140152250
test al, al
je 0x14015523f
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCR120.dll__time64]
mov ecx, 0x148
call sub.mfc120u.dll_Ordinal_1484
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140155213
xor edx, edx
mov rcx, rax
call fcn.1400b97f0
mov rcx, rax
jmp 0x140155216
mov rcx, r12
mov qword [rsi + 0x28a8], rcx
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0x307
call qword [rax + 0x2d0]
mov edx, 5
mov rcx, qword [rsi + 0x28a8]
call sub.mfc120u.dll_Ordinal_13723
mov edx, 0x78
lea rcx, [rbp - 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_8043]
mov ecx, 0x90
call sub.mfc120u.dll_Ordinal_1484
mov rbx, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140155286
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_280]
mov r8, rax
mov edx, 9
mov rcx, rbx
call fcn.140131fa0
jmp 0x140155289
mov rax, r12
mov qword [0x1404694c8], rax
mov rcx, rax
call fcn.140134350
test al, al
je 0x1401552e1
mov rcx, qword [0x1404694c8]
call fcn.140132740
mov rcx, qword [0x1404694c8]
call sym.NitroFree.exe_public:_unsigned_long_int___cdecl_CxImage::GetNumColors_void_const___ptr64
cmp eax, 1
je 0x1401552c5
mov rcx, qword [0x1404694c8]
call fcn.140132bc0
mov rcx, qword [0x1404694c8]
call sym.NitroFree.exe_public:_unsigned_long_int___cdecl_CxImage::GetNumColors_void_const___ptr64
test eax, eax
jne 0x1401552e1
mov rcx, qword [0x1404694c8]
call fcn.140132740
lea rcx, str.AppType::Lenovo
mov rax, qword [0x140467260]
call qword [rax + 0x28]
cmp qword [rsi + 0x2888], rax
jne 0x140155338
lea rdx, str.BCGCBProRes
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc120u.dll_Ordinal_286]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140192050
mov qword [0x1404697b0], rax
test rax, rax
je 0x14015544f
mov rcx, rax
call qword [sym.imp.BCGCBPRO2300u120.dll_void___cdecl_BCGCBProSetResourceHandle_struct_HINSTANCE______ptr64_]
jmp 0x14015544f
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x40]
call fcn.14013dd50
lea rdx, [0x14031e460]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc120u.dll_Ordinal_2861]
test eax, eax
je 0x140155444
mov qword [rbp - 0x80], r12
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x38]
mov r8b, 1
mov edx, 0x1b
mov ecx, r14d
mov rax, qword [0x1404672c0]
call qword [rax + 0xac0]
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x2e0]
call fcn.14018e540
nop
lea rcx, [rbp + 0x2e0]
call fcn.14018ec50
mov rdx, rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_286]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov r9, qword [rsp + 0x40]
mov r8, qword [rsp + 0x60]
lea rdx, str._s_sBCGCBProRes.dll
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_7775]
test al, al
jne 0x14015541f
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1404697b0], rax
test rax, rax
je 0x14015541f
mov rcx, rax
call qword [sym.imp.BCGCBPRO2300u120.dll_void___cdecl_BCGCBProSetResourceHandle_struct_HINSTANCE______ptr64_]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp + 0x2e0]
call fcn.14018e600
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
mov rcx, rsi
call fcn.140151ae0
mov r9d, 5
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.140162100
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
lea rdx, str._w64
lea rcx, [rbp - 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_2373]
mov ecx, InitCommonControls
call sub.mfc120u.dll_Ordinal_1484
mov rbx, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140155504
lea rcx, [rbp - 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
lea rcx, [rbp + 0x48]
mov qword [rbp + 0x40], rcx
mov r8d, 3
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140002910
nop
mov edi, r14d
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x40]
lea r8, [0x140322990]
lea rdx, str.nitro_pro7_reader2
mov rcx, rbx
call qword [sym.imp.BugSplat64.dll_public:_void___cdecl_MiniDmpSender::constructor_char_const____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64__unsigned_long_int____ptr64]
lea rax, vtable.MiniDmpSender.0
mov qword [rbx], rax
jmp 0x140155507
mov rbx, r12
mov qword [0x1404697c8], rbx
test dil, 1
je 0x14015552e
lea rax, [rbp + 0x48]
mov rcx, qword [rbp + 0x40]
cmp rcx, rax
je 0x14015552e
call qword [sym.imp.MSVCR120.dll_free]
mov rbx, qword [0x1404697c8]
lea rdx, [0x14015ce90]
mov rcx, rbx
call qword [sym.imp.BugSplat64.dll_public:_void___cdecl_MiniDmpSender::setCallback_bool____cdecl___unsigned_int__void____ptr64__void____ptr64_____ptr64]
mov rcx, qword [rsi + 0xb8]
test rcx, rcx
je 0x14015555a
mov rax, qword [rcx]
mov edx, r14d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsi + 0xb8], r12
mov ecx, 0x90
call sub.mfc120u.dll_Ordinal_1484
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140155578
mov rcx, rax
call fcn.14013ed30
jmp 0x14015557b
mov rax, r12
mov qword [rsi + 0xb8], rax
mov ecx, reloc.mfc120u.dll_Ordinal_320
call sub.mfc120u.dll_Ordinal_1484
mov r12, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1401555ca
call fcn.140118ff0
mov rdi, rax
call fcn.14012d4c0
mov rbx, rax
call fcn.14012aba0
mov r8, rax
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov edx, 0x81
mov rcx, r12
call sub.mfc120u.dll_Ordinal_801
xor ebx, ebx
jmp 0x1401555ce
xor ebx, ebx
mov eax, ebx
mov rdx, rax
mov rcx, rsi
call sub.mfc120u.dll_Ordinal_1802
call fcn.1400bcbf0
mov rcx, rax
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_static_void___cdecl_CBCGPVisualManager::SetDefaultManager_struct_CRuntimeClass____ptr64_]
mov rcx, rsi
call fcn.140157d30
mov rcx, rsi
call fcn.14015bf70
lea rcx, [rsi + 0x28d8]
call fcn.14008fae0
mov ecx, 0xd110
call sub.mfc120u.dll_Ordinal_1484
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140155624
mov rcx, rax
call fcn.14015d350
mov rdi, rax
jmp 0x140155627
mov rdi, rbx
mov rax, qword [rdi]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov edx, 0x80
mov r8d, 0xcf8000
mov rcx, rdi
call qword [rax + 0x2d8]
test eax, eax
je 0x140155c08
mov qword [rsi + 0x40], rdi
call sub.mfc120u.dll_Ordinal_2170
mov rcx, qword [rax + 0x18]
mov qword [0x1404697a0], rcx
mov rax, qword [0x14046c0a0]
mov qword [0x1404671a0], rax
mov rax, qword [rdi + 0x40]
mov qword [0x1404673a0], rax
call section..text
test eax, eax
je 0x14015568d
cmp eax, 0x800704df
mov eax, ebx
jne 0x140155690
mov eax, r14d
mov byte [rsi + 0x240], al
test al, al
jne 0x1401556d9
mov rbx, qword [0x140467260]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rax, str.CNxAVApp::InitInstance
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], Ordinal_2134
lea r9, str.CNxAVApp.cpp
mov edx, 0x10000001
lea rcx, str.Cannot_initialize_Active_Directory_Rights_Management_Services.
call qword [rbx + 0x98]
xor ebx, ebx
cmp byte [rsp + 0x31], 0
jne 0x1401556ff
lea rcx, [0x14046c3f0]
call fcn.140175b00
xor r8d, r8d
lea edx, [r8 + 3]
lea rcx, [0x14046c3f0]
call fcn.140175e20
lea rcx, [0x1404673c0]
call fcn.14008a170
mov rcx, rsi
call fcn.140156c50
test al, al
je 0x140155c08
mov dword [rsi + Ordinal_1146], ebx
mov qword [rsi + 0x28c8], rbx
mov qword [rsi + 0x28c0], rbx
mov rcx, rsi
call fcn.140155fb0
call fcn.1401030d0
call fcn.140108bf0
call fcn.1401054c0
call fcn.140107f10
call fcn.1400acbe0
mov rbx, qword [0x1404672c0]
call qword [rbx + 0xa0]
mov rcx, rax
mov dl, 1
call qword [rbx + 0xa8]
call fcn.14012df60
call fcn.14012d810
mov rcx, rsi
call fcn.140156b80
mov rcx, rsi
call fcn.1401564a0
call fcn.140121900
mov ecx, 0x278
call sub.mfc120u.dll_Ordinal_1484
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1401557a6
xor edx, edx
mov rcx, rax
call fcn.1400e6410
nop
mov qword [rsi + Ordinal_10308], rax
mov edx, r14d
mov rcx, rdi
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_void___cdecl_CBCGPMDIFrameWnd::EnableLoadDockState_int____ptr64]
lea rcx, [rdi + 0xbac8]
mov rax, qword [rcx]
call qword [rax + Ordinal_1089]
mov rcx, qword [rsi + 0x2840]
call fcn.1400e73b0
mov rcx, rsi
call fcn.140152310
lea rcx, [rsi + 0x2848]
call fcn.140176510
xor r9d, r9d
lea r8, [0x140150820]
mov rdx, qword [0x1404671a0]
mov ecx, 0x3ed
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
xor r9d, r9d
lea r8, [0x1401506f0]
mov rdx, qword [0x1404671a0]
mov ecx, 0x3f1
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
xor r9d, r9d
lea r8, [0x140151020]
mov rdx, qword [0x1404671a0]
mov ecx, 0x3f0
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
xor r9d, r9d
lea r8, [0x1401505d0]
mov rdx, qword [0x1404671a0]
mov ecx, 0x3eb
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
xor r9d, r9d
lea r8, [0x140151060]
mov rdx, qword [0x1404671a0]
mov ecx, 0x3f7
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
xor r9d, r9d
lea r8, [0x140151580]
mov rdx, qword [0x1404671a0]
mov ecx, 0x410
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
xor r9d, r9d
lea r8, [0x140151110]
mov rdx, qword [0x1404671a0]
lea ecx, [r9 + 0x13]
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
xor r9d, r9d
lea r8, [0x1401511b0]
mov rdx, qword [0x1404671a0]
mov ecx, Ordinal_1030
mov rax, qword [0x1404672c0]
call qword [rax + 0x158]
call fcn.1400f7630
call fcn.140121970
mov rax, qword [0x1404672c0]
call qword [rax + 0x1168]
mov r8, qword [rax]
lea rdx, [0x140157b60]
lea rcx, [0x1404673c0]
call fcn.140089f60
mov ecx, r14d
call fcn.14013e760
xor ecx, ecx
call fcn.14013e760
mov rcx, rsi
call fcn.14014f740
call fcn.140140ef0
xor edx, edx
lea rcx, [rsi + 0x178]
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_void___cdecl_CBCGPWorkspace::EnableTaskBarInteraction_int____ptr64]
lea rcx, [0x1404697e0]
call fcn.1400bbf50
mov rcx, rsi
call fcn.140156660
mov rax, qword [0x1404672c0]
call qword [rax + 0x1448]
test al, al
je 0x1401559f1
xor edx, edx
mov rcx, rsi
call fcn.140157700
test al, al
jne 0x1401559f1
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov edx, 0x41
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_8043]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140190f20
nop
mov rbx, qword [0x1404672c0]
mov rcx, rax
call fcn.140191980
mov rcx, rax
call qword [rbx + Ordinal_6578]
nop
lea rcx, [rsp + 0x38]
call fcn.1401918b0
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
jmp 0x140155a05
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rdx, rax
xor r8d, r8d
mov rcx, rsi
call fcn.140159980
cmp byte [rsp + 0x31], 0
jne 0x140155c08
lea rcx, str.kPreferences
mov rax, qword [0x1404672c0]
call qword [rax + 0x1190]
mov rbx, rax
xor r8d, r8d
lea rdx, str.kWasCrashKM
mov rcx, rax
mov r9, qword [0x1404672d8]
call qword [r9 + 0x188]
test al, al
je 0x140155a6c
xor r8d, r8d
lea rdx, str.kWasCrashKM
mov rcx, rbx
mov rax, qword [0x1404672d8]
call qword [rax + 0x190]
lea rcx, [rsi + 0x238]
call fcn.140161f30
call fcn.14008fed0
xor edx, edx
lea rcx, [rsi + 0x28d8]
test al, al
lea r8, str.ProFirstRun
jne 0x140155a8c
lea r8, str.ProStarted
call fcn.1400900a0
call sub.mfc120u.dll_Ordinal_2180
mov rdx, qword [rax + 0x80]
xor ebx, ebx
test rdx, rdx
je 0x140155aa8
mov qword [rdx + 0x48], rbx
mov r8, rsi
lea rdx, [0x140158200]
lea rcx, [0x1404673c0]
call fcn.140089f60
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbp + 8]
sub rax, qword [rbp + 0x18]
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsd xmm6, qword [0x1402dbd78]
mulsd xmm2, xmm6
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp + 0x10]
divsd xmm2, xmm0
movq r8, xmm2
lea rdx, str.StartPerformanceInitProcess___.2f__r_t
lea rcx, [rbp + 0x800]
call qword [sym.imp.MSVCR120.dll_sprintf]
lea rdx, [rbp + 0x800]
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc120u.dll_Ordinal_290]
nop
mov rcx, rax
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
lea rdx, [rbp + 0x48]
mov qword [rbp + 0x40], rdx
mov r8d, 3
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140002910
nop
xor r8d, r8d
mov rdx, qword [rbp + 0x40]
lea rcx, [0x14046c3f0]
call fcn.140175d30
nop
lea rax, [rbp + 0x48]
mov rcx, qword [rbp + 0x40]
cmp rcx, rax
je 0x140155b69
call qword [sym.imp.MSVCR120.dll_free]
nop
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
cmp qword [rsi + 0x28a8], 0
je 0x140155d4c
lea rcx, str.AppType::Lenovo
mov rax, qword [0x140467260]
call qword [rax + 0x28]
cmp qword [rsi + 0x2888], rax
jne 0x140155bd7
lea rcx, [rsp + 0x38]
call qword [sym.imp.MSVCR120.dll__time64]
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.MSVCR120.dll__difftime64]
movsd xmm1, qword [0x140320300]
comisd xmm1, xmm0
jbe 0x140155bd7
subsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si rcx, xmm1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsi + 0x28a8]
mov rax, qword [rcx]
call qword [rax + 0xd0]
mov rcx, qword [rsi + 0x28a8]
test rcx, rcx
je 0x140155bfc
mov rax, qword [rcx]
mov edx, r14d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsi + 0x28a8], rbx
jmp 0x140155d4c
xor r14d, r14d
jmp 0x140155d4c
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
mov rbx, qword [rsi + 0x2840]
test rbx, rbx
je 0x140155c39
mov rcx, rbx
call fcn.1400e6530
mov rcx, rbx
call sub.mfc120u.dll_Ordinal_1486
mov qword [rsi + Ordinal_10308], r12
mov rcx, qword [0x1404697c8]
test rcx, rcx
je 0x140155c54
mov rax, qword [rcx]
mov edx, r14d
call qword [rax]
mov qword [0x1404697c8], r12
mov rcx, qword [0x1404697b0]
test rcx, rcx
je 0x140155c6d
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1404697b0], r12
mov rbx, qword [0x1404694c8]
test rbx, rbx
je 0x140155c90
mov rcx, rbx
call fcn.1401320c0
mov rcx, rbx
call sub.mfc120u.dll_Ordinal_1486
mov qword [0x1404694c8], r12
lea rcx, [rsi + 0x238]
call fcn.140161c60
mov rcx, qword [0x1404697a8]
test rcx, rcx
je 0x140155cc1
call fcn.1400899d0
mov rcx, qword [0x1404697a8]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1404697a8], r12
mov rcx, qword [0x1404697b8]
test rcx, rcx
je 0x140155cd9
call sub.gdiplus.dll_GdiplusShutdown
mov qword [0x1404697b8], r12
mov rcx, qword [0x1404697a0]
test rcx, rcx
je 0x140155cf2
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1404697a0], r12
mov rbx, qword [rsi + 0x29d0]
test rbx, rbx
je 0x140155d49
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140155d11
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0x10], r12
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140155d24
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov qword [rbx + 0x18], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140155d37
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 8], r12
mov byte [rbx], 0
mov rcx, rbx
call sub.mfc120u.dll_Ordinal_1486
mov qword [rsi + Ordinal_10707], r12
mov r14d, r12d
lea rcx, [rbp - 0x68]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x30]
call fcn.14019c590
nop
test r15, r15
je 0x140155d71
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp - 8]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp + 0x28]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp - 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp - 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp - 0x78]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
mov eax, r14d
mov rcx, qword [rbp + 0xc90]
xor rcx, rsp
call fcn.140289bf0
lea r11, [rsp + 0xdb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret