Function at 0x140009250
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0x90
mov qword [rbp + 7], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov rax, qword [0x140036038]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov dword [rbp - 5], 0
mov dword [rbp - 9], 0x80
lea rax, [rbp - 1]
mov qword [r11 - 0x78], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionUninstallHonorSuite
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x1400092cb
lea rcx, str.error_get_hKey_error
call fcn.14000a500
xor eax, eax
jmp 0x140009695
mov ecx, dword [rbp - 9]
call fcn.140011900
mov rdi, rax
test rax, rax
je 0x1400092c4
lea rax, [rbp - 9]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DisplayIcon
mov rcx, qword [rbp - 1]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov esi, eax
mov edx, dword [rbp - 9]
inc edx
mov rcx, rdi
call fcn.140015150
mov rbx, rax
test rax, rax
jne 0x140009326
mov rcx, rdi
call fcn.140011814
xor eax, eax
jmp 0x140009695
test esi, esi
je 0x140009345
mov rcx, rbx
call fcn.140011814
lea rcx, str.error_get_szAppNameReg_error
call fcn.14000a500
xor eax, eax
jmp 0x140009695
mov rcx, qword [rbp - 1]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp + 0x1f], 0
mov edi, 0xf
mov qword [rbp + 0x27], rdi
mov byte [rbp + 0xf], 0
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140009370
mov rdx, rbx
lea rcx, [rbp + 0xf]
call fcn.140004420
nop
mov rcx, rbx
call fcn.140011814
lea rcx, [rbp + 0xf]
mov rsi, qword [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rcx, rsi
mov qword [rsp + 0x20], 0xe
lea r9, str.HonorSuite.exe
mov rbx, qword [rbp + 0x1f]
mov rdx, rbx
call fcn.140004bd0
mov rdx, rax
cmp rbx, rax
jb 0x1400096c0
mov rax, rbx
sub rax, rdx
cmp rax, 0xf
cmovb rdi, rax
lea rcx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rcx, rsi
add rcx, rdx
sub rbx, rdi
mov qword [rbp + 0x1f], rbx
sub rbx, rdx
lea r8, [rbx + 1]
lea rdx, [rcx + rdi]
call fcn.14000f120
nop
movdqa xmm0, xmmword [0x140030c50]
movdqu xmmword [rbp + 0x3f], xmm0
mov byte [rbp + 0x2f], 0
mov dword [rbp - 5], 1
mov rdx, qword [rbp + 0x1f]
add rdx, 0x17
lea rcx, [rbp + 0x2f]
call fcn.1400070a0
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rdx, qword [rbp + 0xf]
mov r8, qword [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.140004570
mov r8d, 0x17
lea rdx, str.hwtoolshwtransport.exe
lea rcx, [rbp + 0x2f]
call fcn.140004570
lea rdx, [rbp + 0x2f]
lea rbx, [0x140036e88]
mov rcx, rbx
call fcn.1400040f0
nop
mov rdx, qword [rbp + 0x47]
cmp rdx, 0x10
jb 0x1400094a7
inc rdx
mov rcx, qword [rbp + 0x2f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400094a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400096c6
call fcn.14000d4b4
cmp qword [0x140036ea0], 0x10
cmovae rbx, qword [0x140036e88]
mov rdx, rbx
lea rcx, str.m_strSerPath___s
call fcn.14000a500
nop
movdqa xmm0, xmmword [0x140030c50]
movdqu xmmword [rbp + 0x3f], xmm0
mov byte [rbp + 0x2f], 0
mov dword [rbp - 5], 2
mov rdx, qword [rbp + 0x1f]
add rdx, 0xa
lea rcx, [rbp + 0x2f]
call fcn.1400070a0
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rdx, qword [rbp + 0xf]
mov r8, qword [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.140004570
mov r8d, 0xa
lea rdx, str.CheckPort
lea rcx, [rbp + 0x2f]
call fcn.140004570
lea rdx, [rbp + 0x2f]
lea rbx, [0x140036ea8]
mov rcx, rbx
call fcn.1400040f0
nop
mov rdx, qword [rbp + 0x47]
cmp rdx, 0x10
jb 0x140009570
inc rdx
mov rcx, qword [rbp + 0x2f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000956b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400096cc
call fcn.14000d4b4
cmp qword [0x140036ec0], 0x10
cmovae rbx, qword [0x140036ea8]
mov rdx, rbx
lea rcx, str.g_strDllPath___s
call fcn.14000a500
nop
movdqa xmm0, xmmword [0x140030c50]
movdqu xmmword [rbp + 0x3f], xmm0
mov byte [rbp + 0x2f], 0
mov dword [rbp - 5], 4
mov rdx, qword [rbp + 0x1f]
add rdx, 0x11
lea rcx, [rbp + 0x2f]
call fcn.1400070a0
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rdx, qword [rbp + 0xf]
mov r8, qword [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.140004570
mov r8d, 0x11
lea rdx, str.MiniPopWindow.exe
lea rcx, [rbp + 0x2f]
call fcn.140004570
lea rdx, [rbp + 0x2f]
lea rbx, [0x140036ec8]
mov rcx, rbx
call fcn.1400040f0
nop
mov rdx, qword [rbp + 0x47]
cmp rdx, 0x10
jb 0x140009639
inc rdx
mov rcx, qword [rbp + 0x2f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009634
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400096d2
call fcn.14000d4b4
cmp qword [0x140036ee0], 0x10
cmovae rbx, qword [0x140036ec8]
mov rdx, rbx
lea rcx, str.g_strMiniPopPath___s
call fcn.14000a500
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x140009690
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000968b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400096ba
call fcn.14000d4b4
mov eax, 1
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14000d490
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.14001179c
nop
call fcn.1400046d0
nop
call fcn.14001179c
int3
call fcn.14001179c
int3
call fcn.14001179c
int3