Function at 0x1800836f8
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rdx
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4f0
xor ebx, ebx
mov qword [r11 - 0x488], rbx
mov dword [rsp + 0xa8], ebx
mov qword [r11 - 0x478], rbx
or eax, 0xffffffff
mov dword [r11 + 0x20], eax
mov dword [rsp + 0x90], eax
lea rcx, [rsp + 0x68]
call fcn.18001002c
nop
lea rcx, [rsp + 0xb8]
call fcn.18000d560
nop
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.18000d6ac
mov dil, al
mov rdx, qword [rsp + 0xd8]
mov r14d, 0x1000
cmp rdx, 0x10
jb 0x1800837a8
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, r14
jb 0x1800837a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e66
call fcn.18009d1f4
test dil, dil
je 0x180083e01
lea rdx, str.ConfigOSSProxySettings
lea rcx, [rsp + 0x68]
call fcn.18000d480
lea rdx, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae rdx, qword [rsp + 0x70]
mov qword [rsp + 0x98], rbx
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
mov r9d, 0x20219
xor r8d, r8d
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180083dc0
mov rdi, qword [rsp + 0x98]
mov qword [rsp + 0xa0], rdi
mov dword [rsp + 0xa8], 0x200
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x18008385f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x180083859
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e7e
call fcn.18009d1f4
nop
mov dword [rsp + 0x540], ebx
lea rax, [rsp + 0x540]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x98]
xor r8d, r8d
mov rdx, qword [str.BufOffsets]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsp + 0x540]
test eax, eax
jne 0x1800838af
test rdi, rdi
je 0x180083e51
mov rcx, rdi
jmp 0x180083e4b
lea ecx, [rax + 1]
lea rdx, [0x1800db740]
call fcn.18009d8d0
mov rsi, rax
test rax, rax
je 0x18008389e
lea rax, [rsp + 0x540]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x98]
xor r8d, r8d
mov rdx, qword [str.BufOffsets]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x180083db3
cmp dword [rsp + 0x98], 3
jne 0x180083db3
cmp dword [rsp + 0x540], ebx
je 0x180083db3
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], bl
mov rdx, qword [str.BufOffsetsKey337]
lea rcx, [rsp + 0x48]
call fcn.180003104
nop
lea r12, [rsp + 0x48]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x60]
cmp r9, 0x10
cmovae r12, r8
lea rcx, [rsp + 0x48]
cmovae rcx, r8
mov r13, qword [rsp + 0x58]
add r13, rcx
lea r15, [rsp + 0x48]
cmp r9, 0x10
cmovae r15, r8
cmp r15, r13
je 0x18008399a
sub r12, r15
mov cl, byte [r15]
call fcn.180099128
mov byte [r15 + r12], al
inc r15
cmp r15, r13
jne 0x18008397c
mov r9, qword [rsp + 0x60]
mov r8, qword [rsp + 0x48]
lea rdx, [rsp + 0x48]
mov r12d, reloc.WS2_32.dll_recv
cmp r9, r12
cmovae rdx, r8
mov r8d, dword [rsp + 0x58]
lea rcx, [rsp + 0xe0]
call fcn.180098fb8
mov r8d, dword [rsp + 0x540]
mov rdx, rsi
lea rcx, [rsp + 0xe0]
call fcn.180098f4c
mov r15d, dword [rsp + 0x540]
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rbx
lea r13d, [r12 - 1]
mov qword [rsp + 0x80], r13
mov byte [rsp + 0x68], bl
lea rcx, [rsp + 0x68]
cmp r15, r13
ja 0x180083a17
mov qword [rsp + 0x78], r15
mov r8d, r15d
call fcn.18009fc20
mov byte [rsp + r15 + 0x68], bl
jmp 0x180083a26
mov r9, rsi
mov r8b, bl
mov rdx, r15
call fcn.180003a38
nop
mov rcx, rsi
call fcn.18009d1f4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
lea r8, [rsp + 0x30]
mov dl, 0x3a
lea rcx, [rsp + 0x68]
call fcn.180007510
mov r15, qword [rsp + 0x38]
mov rax, r15
mov rsi, qword [rsp + 0x30]
sub rax, rsi
sar rax, 5
cmp rax, 3
je 0x180083b2e
test rsi, rsi
je 0x180083aa7
cmp rsi, r15
je 0x180083b7a
xor edx, edx
mov rcx, rsi
call fcn.1800078c8
add rsi, 0x20
cmp rsi, r15
jne 0x180083a79
jmp 0x180083b75
mov rcx, rsi
call fcn.18009d1f4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov rdx, qword [rsp + 0x80]
cmp rdx, r12
jb 0x180083ae3
mov rcx, qword [rsp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180083add
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e78
call fcn.18009d1f4
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, r12
jb 0x180083b1b
mov rcx, qword [rsp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, r14
jb 0x180083b16
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e6c
call fcn.18009d1f4
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], r13
mov byte [rsp + 0x48], bl
jmp 0x18008389e
cmp qword [rsi + 0x18], r12
jb 0x180083b37
mov rsi, qword [rsi]
lea rdx, [0x18010b0a0]
mov rcx, rsi
call fcn.1800a8764
test eax, eax
je 0x180083bb0
mov rsi, qword [rsp + 0x30]
test rsi, rsi
je 0x180083aa7
mov r15, qword [rsp + 0x38]
cmp rsi, r15
je 0x180083b7a
xor edx, edx
mov rcx, rsi
call fcn.1800078c8
add rsi, 0x20
cmp rsi, r15
jne 0x180083b62
mov rsi, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
sub rdx, rsi
and rdx, 0xffffffffffffffe0
mov rax, rsi
cmp rdx, r14
jb 0x180083a91
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e72
jmp 0x180083a91
mov rcx, qword [rsp + 0x30]
add rcx, 0x20
cmp qword [rcx + 0x18], r12
jb 0x180083bc2
mov rcx, qword [rcx]
lea r8, [rsp + 0x548]
lea rdx, [0x1800d448c]
call fcn.18005f2c8
cmp eax, 1
jne 0x180083d7f
cmp dword [rsp + 0x548], ebx
jl 0x180083d7f
mov rcx, qword [rsp + 0x30]
add rcx, 0x40
cmp qword [rcx + 0x18], r12
jb 0x180083bfe
mov rcx, qword [rcx]
lea r8, [rsp + 0x90]
lea rdx, [0x1800d448c]
call fcn.18005f2c8
cmp eax, 1
jne 0x180083d4b
mov ecx, dword [rsp + 0x90]
test ecx, ecx
js 0x180083d4b
mov eax, dword [rsp + 0x548]
mov rdx, qword [rsp + 0x530]
mov dword [rdx], eax
mov rax, qword [rsp + 0x538]
mov dword [rax], ecx
mov rsi, qword [rsp + 0x30]
test rsi, rsi
je 0x180083cb4
mov r15, qword [rsp + 0x38]
cmp rsi, r15
je 0x180083c71
xor edx, edx
mov rcx, rsi
call fcn.1800078c8
add rsi, 0x20
cmp rsi, r15
jne 0x180083c59
mov rsi, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
sub rdx, rsi
and rdx, 0xffffffffffffffe0
mov rax, rsi
cmp rdx, r14
jb 0x180083c9e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e72
mov rcx, rsi
call fcn.18009d1f4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov rdx, qword [rsp + 0x80]
cmp rdx, r12
jb 0x180083cf0
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, r14
jb 0x180083cea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e78
call fcn.18009d1f4
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, r12
jb 0x180083d28
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, r14
jb 0x180083d23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e6c
call fcn.18009d1f4
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], r13
mov byte [rsp + 0x48], bl
test rdi, rdi
je 0x180083d44
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
jmp 0x180083e53
mov rsi, qword [rsp + 0x30]
test rsi, rsi
je 0x180083aa7
mov r15, qword [rsp + 0x38]
cmp rsi, r15
je 0x180083b7a
xor edx, edx
mov rcx, rsi
call fcn.1800078c8
add rsi, 0x20
cmp rsi, r15
jne 0x180083d67
jmp 0x180083b75
mov rsi, qword [rsp + 0x30]
test rsi, rsi
je 0x180083aa7
mov r15, qword [rsp + 0x38]
cmp rsi, r15
je 0x180083b7a
xor edx, edx
mov rcx, rsi
call fcn.1800078c8
add rsi, 0x20
cmp rsi, r15
jne 0x180083d9b
jmp 0x180083b75
mov rcx, rsi
call fcn.18009d1f4
jmp 0x18008389e
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x180083dfd
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x180083df7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e7e
call fcn.18009d1f4
nop
xor al, al
jmp 0x180083e53
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x180083e3a
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x180083e34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083e7e
call fcn.18009d1f4
nop
xor al, al
jmp 0x180083e53
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
add rsp, 0x4f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
int3