Function at 0x140038bd0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rdi, r8
mov rbx, rdx
mov r15, rcx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov dword [rbp + 0x67], r12d
cmp qword [r8 + 0x18], 7
jbe 0x140038c12
mov r8, qword [r8]
lea rax, [rbp + 0x67]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor edx, edx
mov r9d, 2
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x140038e3f
mov r8d, dword [rbp + 0x67]
shr r8, 1
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
mov edx, 0x20
mov rcx, rbx
call fcn.1400567a0
mov dword [rsp + 0x40], 1
mov rax, rbx
lea r14, [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x140038c79
mov rax, qword [rbx]
cmp qword [rdi + 0x18], 7
jbe 0x140038c83
mov rdi, qword [rdi]
lea rcx, [rbp + 0x67]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 2
mov r8, rdi
xor edx, edx
mov rcx, qword [r15]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x140038d50
mov r8d, dword [rbp + 0x67]
shr r8, 1
dec r8
mov rcx, qword [rbx + 0x10]
cmp r8, rcx
ja 0x140038cdd
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140038cd6
mov rax, qword [rbx]
mov word [rax + r8*2], r12w
jmp 0x140038d31
mov rdx, r8
sub rdx, rcx
mov rdi, qword [rbx + 0x18]
mov rax, rdi
sub rax, rcx
cmp rdx, rax
ja 0x140038d1b
mov qword [r14], r8
mov r9, rbx
cmp rdi, 7
jbe 0x140038d01
mov r9, qword [rbx]
lea rdi, [r9 + rcx*2]
test rdx, rdx
je 0x140038d14
movzx eax, r12w
mov rcx, rdx
rep stosw word [rdi], ax
mov word [r9 + r8*2], r12w
jmp 0x140038d31
mov word [rsp + 0x20], r12w
mov r9, rdx
movzx r8d, byte [rbp + 0x67]
mov rcx, rbx
call fcn.1400579c0
mov rax, rbx
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
movabs rcx, 0xf78ae3a7f6daa19d
mov qword [rbp - 0x79], rcx
movabs rcx, 0x148c2eb22c351ba6
mov qword [rbp - 0x71], rcx
movabs rcx, 0x8bd783fde9af0d8f
mov qword [rbp - 0x69], rcx
movabs rcx, 0xc2977820d6eff448
mov qword [rbp - 0x61], rcx
movabs rcx, 0x110081b352578081
mov qword [rbp - 0x59], rcx
movabs rcx, 0x35de574e40be636a
mov qword [rbp - 0x51], rcx
movabs rcx, 0x90aa97c898b4c0de
mov qword [rbp + 7], rcx
movabs rcx, 0x7ae55cc65f156fc3
mov qword [rbp + 0xf], rcx
movabs rcx, 0xb1b2f69188d92de8
mov qword [rbp + 0x17], rcx
movabs rcx, 0x94e31d67b18aa668
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x7066a1e43722ece0
mov qword [rbp + 0x27], rcx
movabs rcx, 0x35de576024db0f03
mov qword [rbp + 0x2f], rcx
movups xmm0, xmmword [rbp + 7]
movups xmm1, xmmword [rbp + 0x17]
movups xmm2, xmmword [rbp + 0x27]
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x39], xmm0
xorps xmm1, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x29], xmm1
xorps xmm2, xmmword [rbp - 0x59]
movdqa xmmword [rbp - 0x19], xmm2
lea r8, [rbp - 0x39]
mov edx, eax
lea rcx, [rbp + 7]
call fcn.1400398c0
lea rdx, [0x1400d32e8]
lea rcx, [rbp + 7]
call fcn.140084008
int3
movabs rcx, 0xf78ae3a7f6daa19d
mov qword [rbp - 0x79], rcx
movabs rcx, 0x148c2eb22c351ba6
mov qword [rbp - 0x71], rcx
movabs rcx, 0x8bd783fde9af0d8f
mov qword [rbp - 0x69], rcx
movabs rcx, 0xc2977820d6eff448
mov qword [rbp - 0x61], rcx
movabs rcx, 0x110081b352578081
mov qword [rbp - 0x59], rcx
movabs rcx, 0x35de574e40be636a
mov qword [rbp - 0x51], rcx
movabs rcx, 0x812cfd0971faeb73
mov qword [rbp - 0x49], rcx
movabs rdx, 0x9a14fc7c30e5f08c
mov qword [rbp - 0x41], rdx
movabs rcx, 0x90aa97c898b4c0de
mov qword [rbp - 0x39], rcx
movabs rcx, 0x34e954db5f156fc3
mov qword [rbp - 0x31], rcx
movabs rcx, 0xe5bef1899a8f6be0
mov qword [rbp - 0x29], rcx
movabs rcx, 0xf8f20d4cb799d42f
mov qword [rbp - 0x21], rcx
movabs rcx, 0x4774e4f43532d2a1
mov qword [rbp - 0x19], rcx
movabs rcx, 0x54b8771925cb0f0b
mov qword [rbp - 0x11], rcx
movabs rcx, 0x812cfd27159f871a
mov qword [rbp - 9], rcx
mov qword [rbp - 1], rdx
movups xmm0, xmmword [rbp - 0x39]
movups xmm1, xmmword [rbp - 0x29]
movups xmm2, xmmword [rbp - 0x19]
movups xmm3, xmmword [rbp - 9]
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x39], xmm0
xorps xmm1, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x29], xmm1
xorps xmm2, xmmword [rbp - 0x59]
movdqa xmmword [rbp - 0x19], xmm2
xorps xmm3, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 9], xmm3
lea r8, [rbp - 0x39]
mov edx, eax
lea rcx, [rbp + 7]
call fcn.1400398c0
lea rdx, [0x1400d32e8]
lea rcx, [rbp + 7]
call fcn.140084008
int3