Function at 0x18006afb0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x5358]
mov eax, 0x5458
call fcn.18006ece0
sub rsp, rax
lea eax, [rcx + 0x70]
mov r13, rdx
cmp ecx, eax
jae 0x18006ba6f
mov qword [rsp + 0x5478], rbx
lea r9, [0x180000000]
mov qword [rsp + 0x5450], rsi
xor ebx, ebx
mov esi, 0x10
mov qword [rsp + 0x5448], rdi
mov rdi, qword [rbp + 0x5380]
mov qword [rsp + 0x5440], r12
lea r12d, [rcx - 0x49]
mov qword [rsp + 0x5438], r14
mov r14, qword [rbp + 0x5380]
lea edx, [rsi - 0xe]
mov qword [rsp + 0x5430], r15
lea r11d, [rsi - 0xc]
mov r15, qword [rbp + 0x5380]
lea r8d, [rsi - 0xf]
lea r10d, [rsi - 0xd]
mov qword [rbp + 8], rsi
cmp r12d, 0xae
ja case.0x18006b062.16
movzx eax, byte [r9 + r12 + 0x6bac0]
mov ecx, dword [r9 + rax*4 + 0x6ba7c]
add rcx, r9
jmp rcx
lea rcx, [rbp + 0x4e0]
lea rax, [rbp + 0xc0]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x18006b072
mov eax, dword [rax]
lea r8d, [rdx + 0x1d]
mov dword [rcx], eax
lea r9, [rbp + 0x5388]
mov rax, qword [r13]
lea rcx, [rbp + 0x4e0]
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0xa0]
mov byte [rbp + 0x5370], dl
lea rdx, [rbp + 0x5370]
mov qword [rsp + 0x20], rax
mov word [rbp + 0x5388], r11w
call fcn.180012d20
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, 2
lea r9, [0x180000000]
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
mov r8d, 7
lea rdx, str.winspo
lea rcx, [rbp + 0x20]
call fcn.180073094
movsd xmm0, qword [str.l.dr]
lea r9, [0x180000000]
movzx eax, word [0x1800a0ce0]
mov edx, 2
mov dword [rbp + 0x2c], 0x6f
movsd qword [rbp + 0x2e], xmm0
mov word [rbp + 0x36], ax
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
mov byte [rbp - 0x4e], 0
jmp case.0x18006b062.16
xor edx, edx
mov qword [rbp - 0x58], rbx
mov r8d, 0x800
lea rcx, [rbp + 0xb30]
call fcn.180070440
xor edx, edx
mov qword [rsp + 0x20], rbx
mov eax, 1
lea r9, [rsp + 0x68]
mov word [rsp + 0x68], ax
lea rcx, [rbp + 0xa8]
mov rax, qword [r13]
lea r8d, [rdx + 0x28]
mov qword [rbp + 0xa8], rax
call fcn.180068730
movsxd rbx, eax
lea r9, [rbp + 0x40]
mov eax, 2
mov qword [rbp + 0x18], rbx
mov word [rsp + 0x70], ax
lea rdx, [rsp + 0x70]
mov rax, qword [r13]
lea rcx, [rbp + 0xb30]
mov r8d, 0x10c
mov qword [rbp + 0x40], rax
call fcn.180059270
mov edx, 2
lea r9, [0x180000000]
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
mov dword [rsp + 0x64], ebx
mov rdi, rbx
mov dword [rsp + 0x60], ebx
mov qword [rbp + 0x18], rbx
jmp case.0x18006b062.16
mov dword [rbp + 0x36], 0x76
jmp case.0x18006b062.16
mov ebx, 0xe1
nop dword [rax]
mov eax, ebx
sub eax, 0xe1
je 0x18006b2c9
sub eax, 0x23
je 0x18006b276
sub eax, 0x721f
je 0x18006b301
cmp eax, 0x11e9
je 0x18006b301
jmp 0x18006b2ef
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
movsxd rcx, eax
sub rcx, 0x471
je 0x18006b29f
cmp rcx, 0xf
jne 0x18006b2b8
test qword [0x1800d57d0], 0x4000
jmp 0x18006b2aa
test qword [0x1800d57d0], 0x100
je 0x18006b2b8
mov rcx, qword [rbp + 0x20]
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
mov r8d, 1
mov ebx, 0x104
mov dword [rbp + 0x10], r8d
jmp 0x18006b2ef
xor r8d, r8d
lea rcx, [rbp + 0x20]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, rax
lea rdx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x10], rax
mov r8d, 1
add ebx, 0x7242
cmp ebx, 0x1c908
jbe 0x18006b250
mov r15, qword [rbp + 0x10]
lea r9, [rbp + 0x48]
mov eax, 0x2c
mov word [rsp + 0x78], r8w
mov word [rbp - 0x38], ax
lea rdx, [rsp + 0x78]
mov word [rbp - 0x68], ax
lea rcx, [rbp + 0x2e0]
mov rax, qword [r13]
mov r8d, 0x10c
mov qword [rbp + 0x48], rax
call fcn.180059270
mov edx, 2
lea r9, [0x180000000]
mov r14, rax
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
movzx eax, word [0x1800a0ce4]
movsd xmm0, qword [str.efaultPrint]
mov word [rbp - 0x4e], ax
mov eax, dword [0x1800a0cf0]
mov dword [rbp - 0x44], eax
mov eax, 0x65
mov word [rbp - 0x41], ax
movzx eax, word [0x1800a0cf4]
mov word [rbp - 0x40], ax
movzx eax, byte [0x1800a0cf6]
mov byte [rbp - 0x3e], al
movsd qword [rbp - 0x4c], xmm0
jmp case.0x18006b062.16
mov rax, qword [r13]
lea r9, [rbp + 0x50]
lea r8, [rbp - 0x80]
mov qword [rbp + 0x50], rax
mov edx, 0xc2
mov word [rbp - 0x80], r10w
lea rcx, [rbp + 0x5f0]
call fcn.180010500
lea rcx, [rbp + 0x1d0]
mov edx, 2
lea rax, [rbp + 0x5f0]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x18006b3e0
mov eax, dword [rax]
lea r9, [rbp + 0x58]
mov dword [rcx], eax
lea r8, [rbp - 0x78]
mov eax, 4
lea rcx, [rbp + 0x6f8]
mov word [rbp - 0x78], ax
mov edx, 0xc2
mov rax, qword [r13]
mov qword [rbp + 0x58], rax
call fcn.180010500
lea rcx, [rbp + 0xc0]
mov edx, 2
lea rax, [rbp + 0x6f8]
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x18006b480
mov eax, dword [rax]
lea rdx, [rbp + 0x1d0]
mov dword [rcx], eax
mov r8d, 0xff
lea rcx, [rbp - 0x30]
mov dword [rbp - 0x30], ebx
call fcn.180020da0
mov r8d, 0xff
mov dword [rbp - 0x28], ebx
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x28]
call fcn.180020da0
mov edx, 2
lea r9, [0x180000000]
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
mov rax, qword [r13]
lea rdx, [rbp - 0x20]
mov qword [rbp + 0x60], rax
lea rcx, [rbp + 0x60]
mov dword [rbp - 0x20], edi
mov r8d, 0x92
call fcn.18004ff10
mov edx, 2
lea r9, [0x180000000]
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
mov qword [rbp - 0x60], 0x3fff
jmp case.0x18006b062.16
movzx eax, byte [r13 + 0xc]
cmp al, 2
jne case.0x18006b062.16
mov byte [r13 + 0xc], 1
jmp case.0x18006b062.16
mov r8, rdx
lea rcx, [rbp - 0x50]
lea rdx, [0x18009fe24]
call fcn.180073af0
mov edx, 2
lea r9, [0x180000000]
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
mov rax, qword [rbp + 0x18]
lea rcx, [rbp + 0x68]
xor edx, edx
mov qword [rbp + 0x68], rax
lea r8d, [rdx + 0x12]
call fcn.180014600
lea rcx, [rbp - 0x58]
mov r9d, 9
mov qword [rsp + 0x20], rcx
lea rdx, [rbp + 0xb30]
mov rcx, rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x18006b8df
mov rcx, qword [rbp - 0x58]
lea rax, [rsp + 0x64]
mov qword [rsp + 0x58], rbx
xor r9d, r9d
mov qword [rsp + 0x50], rbx
xor r8d, r8d
mov qword [rsp + 0x48], rbx
xor edx, edx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x18006b8df
mov eax, dword [rsp + 0x60]
test eax, eax
je 0x18006b77b
mov r8d, 0xff
mov dword [rbp - 0x18], eax
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp - 0x18]
call fcn.180020da0
xor ecx, ecx
mov ebx, ecx
mov edi, ecx
cmp dword [rsp + 0x60], ecx
jbe 0x18006b77b
nop word [rax + rax]
lea rax, [rbp + 0xb0]
mov qword [rbp - 0x60], 0x3fff
mov qword [rsp + 0x38], rax
lea r9, [rbp - 0x60]
mov qword [rsp + 0x30], rcx
lea r8, [rbp + 0x1330]
mov qword [rsp + 0x28], rcx
mov edx, ebx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x18006b76a
inc edi
lea rcx, [rbp + 0x800]
lea rax, [rbp + 0x1d0]
mov edx, 2
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x18006b6e0
mov eax, dword [rax]
lea r9, [rbp + 0x78]
mov dword [rcx], eax
lea r8, [rbp + 0x800]
mov rax, qword [rbp - 0x60]
lea rcx, [rbp + 0x1330]
mov qword [rbp + 0x70], rax
mov edx, 0xeb
mov eax, edi
mov qword [rbp + 0x78], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.180032ba0
inc ebx
mov ecx, 0
cmp ebx, dword [rsp + 0x60]
jb 0x18006b680
mov eax, dword [rsp + 0x64]
test eax, eax
je 0x18006b8da
mov r8d, 0xff
mov dword [rbp - 0x10], eax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x10]
call fcn.180020da0
xor eax, eax
mov esi, eax
mov edi, eax
cmp dword [rsp + 0x64], eax
jbe 0x18006b8d6
mov ebx, 0x76
cmp ebx, 0x76
je 0x18006b9a7
cmp ebx, 0x24e0
jne 0x18006b8b8
mov rcx, qword [rbp - 0x58]
lea r9, [rbp - 0x60]
mov qword [rsp + 0x38], rax
lea r8, [rbp + 0x1330]
mov qword [rsp + 0x30], rax
mov edx, esi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
mov byte [rbp + 0x1330], 0
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x18006b8b6
inc edi
lea rdx, [rbp + 0x910]
lea rax, [rbp + 0xc0]
mov ecx, 2
nop dword [rax]
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x18006b820
mov ecx, dword [rax]
lea r9, [rbp + 0x88]
mov rax, qword [rbp - 0x60]
lea r8, [rbp + 0x910]
mov qword [rbp + 0x80], rax
mov dword [rdx], ecx
mov edx, 0xeb
mov eax, edi
lea rcx, [rbp + 0x1330]
mov qword [rbp + 0x88], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
call fcn.180032ba0
xor eax, eax
add ebx, 0x246a
cmp ebx, 0x48d4
jbe 0x18006b7b5
inc esi
cmp esi, dword [rsp + 0x64]
jb 0x18006b7b0
mov rsi, qword [rbp + 8]
mov edi, 1
lea rcx, [rbp + 0xa20]
mov edx, 2
lea rax, [rbp + 0x1d0]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x18006b8f2
mov eax, dword [rax]
lea r8d, [rdx + 0x1d]
mov dword [rcx], eax
lea r9, [rbp - 0x70]
mov eax, 3
mov byte [rbp + 0x5380], dl
mov word [rbp - 0x70], ax
lea rdx, [rbp + 0x5380]
mov rax, qword [r13]
lea rcx, [rbp + 0xa20]
mov qword [rbp + 0x90], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
call fcn.180012d20
mov edx, 2
lea r9, [0x180000000]
lea r8d, [rdx - 1]
lea r10d, [rdx + 1]
lea r11d, [rdx + 2]
jmp case.0x18006b062.16
mov qword [rbp - 0x60], 0x3fff
jmp 0x18006b8b8
lea rdx, [rbp - 0x68]
mov byte [rbp + r14 + 0x2e0], 0
lea rcx, [rbp + 0x2e0]
call fcn.18007352c
mov r14, rax
test rax, rax
jle 0x18006ba03
mov r8, rax
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x3e0]
call fcn.180073af0
lea rcx, [rbp + 0x3e0]
mov byte [rbp + r14 + 0x3e0], 0
call r15
mov dword [rbp - 8], eax
jmp 0x18006ba06
mov eax, dword [rbp - 8]
mov rcx, qword [r13]
lea rdx, [rbp]
mov qword [rbp + 0x98], rcx
lea rcx, [rbp + 0x98]
mov dword [rbp], eax
jmp 0x18006b539
mov byte [rbp - 0x4f], 0x65
add r12d, 7
mov ebx, 0
sub rsi, 1
mov qword [rbp + 8], rsi
jne 0x18006b041
mov r15, qword [rsp + 0x5430]
mov r14, qword [rsp + 0x5438]
mov r12, qword [rsp + 0x5440]
mov rdi, qword [rsp + 0x5448]
mov rsi, qword [rsp + 0x5450]
mov rbx, qword [rsp + 0x5478]
add rsp, 0x5458
pop r13
pop rbp
ret