Function at 0x180006d40
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov r15, rcx
xor r12d, r12d
mov dword [rbp - 0x48], r12d
lea rcx, [rbp - 0x30]
call fcn.1800011a0
nop
call fcn.180002c40
mov rcx, rax
test rax, rax
je 0x180007073
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp + 0x60], rdi
call fcn.180002c40
mov rcx, rax
test rax, rax
je 0x18000707e
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x48], 2
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x1000
or eax, ecx
jge 0x180006ddf
mov edx, 0x1000
lea rcx, [rbp - 0x40]
call fcn.180004d30
mov rbx, qword [rbp - 0x40]
mov dword [rbp + 0x50], 0x2000
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x58]
xor r8d, r8d
lea rdx, str.InstallPath
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x180006e29
mov eax, dword [rbp + 0x58]
dec eax
cmp eax, 1
ja 0x180006e29
test rbx, rbx
je 0x180006e29
cmp dword [rbp + 0x50], 0
jne 0x180006e29
mov word [rbx], r12w
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.18000e100
test eax, eax
js 0x180007068
cmp eax, dword [rbx - 0xc]
jg 0x180007068
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r12w
lea rsi, [rbx - 0x18]
lea r14, [rdi - 0x18]
mov rdi, 0xffffffffffffffff
cmp rsi, r14
je 0x180006eb3
cmp dword [r14 + 0x10], 0
jl 0x180006ea2
mov rax, qword [r14]
cmp qword [rsi], rax
jne 0x180006ea2
mov rcx, rsi
call fcn.180001750
mov rbx, rax
mov ecx, edi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x180006e98
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x60], rax
jmp 0x180006eb3
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x60]
call fcn.1800056c0
nop
mov eax, edi
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x180006ecb
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
mov rbx, qword [rbp + 0x60]
mov esi, dword [rbx - 0x10]
test esi, esi
jne 0x180006f5d
mov rcx, r15
call fcn.180006a40
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180006efd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x28]
lea rax, vtable.CCfgOPBaseT_int_.0
test rcx, rcx
mov qword [rbp - 0x30], rax
je 0x180006f1b
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x28], r12
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov dword [rbp - 0x20], r12d
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x180006f3a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x180006f49
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, r15
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea eax, [rsi - 1]
test eax, eax
js 0x18000705d
cmp eax, esi
jg 0x18000705d
movsxd rax, esi
cmp word [rbx + rax*2 - 2], 0x5c
je 0x180007030
lea r15, [0x1800218cc]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180006f90
mov r12, r15
sub r12, rbx
sar r12, 1
test eax, eax
js 0x180007089
movsxd rdx, eax
mov rcx, r15
call fcn.18000e100
mov r13, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, esi
jl 0x180007094
lea r14d, [rsi + rax]
test r14d, r14d
js 0x18000709f
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x180006ff8
mov edx, r14d
lea rcx, [rbp + 0x60]
call fcn.180004d30
mov rbx, qword [rbp + 0x60]
cmp r12, rsi
ja 0x180007001
lea r15, [rbx + r12*2]
movsxd rdx, r13d
lea rcx, [rbx + rsi*2]
mov r9d, r13d
mov r8, r15
call fcn.180006410
cmp r14d, dword [rbx - 0xc]
jg 0x1800070aa
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r12d, r12d
mov word [rbx + rax*2], r12w
mov r15, qword [rbp + 0x48]
lea rcx, [rbx - 0x18]
call fcn.180001750
add rax, 0x18
mov qword [r15], rax
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x180006efd
mov rcx, qword [rbx - 0x18]
lea rdx, [rbx - 0x18]
jmp 0x180006ef6
mov ecx, 0x80070057
call fcn.1800016f0
nop
mov ecx, 0x80070057
call fcn.1800016f0
nop
mov ecx, 0x80004005
call fcn.1800016f0
nop
mov ecx, 0x80004005
call fcn.1800016f0
nop
mov ecx, 0x80070057
call fcn.1800016f0
int3
mov ecx, 0x80070057
call fcn.1800016f0
int3
mov ecx, 0x80070057
call fcn.1800016f0
int3
mov ecx, 0x80070057
call fcn.1800016f0
int3