Function at 0x180002620
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov qword [rsp + 0xc0], rbx
mov r13, rcx
xor r15d, r15d
mov dword [rbp - 0x50], r15d
lea rcx, [rbp - 0x30]
call fcn.1800011a0
nop
call fcn.1800029b0
mov rcx, rax
test rax, rax
je 0x18000296b
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp + 0x58], rdi
call fcn.1800029b0
mov rcx, rax
test rax, rax
je 0x180002976
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x48], rbx
mov dword [rbp - 0x50], 2
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x1000
or eax, ecx
jge 0x1800026c5
mov edx, 0x1000
lea rcx, [rbp - 0x48]
call fcn.180004250
mov rbx, qword [rbp - 0x48]
mov dword [rbp + 0x48], 0x2000
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x50]
xor r8d, r8d
lea rdx, str.InstallPath
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x18000270f
mov eax, dword [rbp + 0x50]
dec eax
cmp eax, 1
ja 0x18000270f
test rbx, rbx
je 0x18000270f
cmp dword [rbp + 0x48], 0
jne 0x18000270f
mov word [rbx], r15w
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.18000d370
test eax, eax
js 0x180002960
cmp eax, dword [rbx - 0xc]
jg 0x180002960
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r15w
lea rsi, [rbx - 0x18]
lea r14, [rdi - 0x18]
mov rdi, 0xffffffffffffffff
cmp rsi, r14
je 0x180002799
cmp dword [r14 + 0x10], 0
jl 0x180002788
mov rax, qword [r14]
cmp qword [rsi], rax
jne 0x180002788
mov rcx, rsi
call fcn.180001660
mov rbx, rax
mov ecx, edi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x18000277e
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x58], rax
jmp 0x180002799
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x58]
call fcn.180004be0
nop
mov eax, edi
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x1800027b1
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
mov rbx, qword [rbp + 0x58]
mov esi, dword [rbx - 0x10]
test esi, esi
jne 0x18000284d
mov rcx, r13
call fcn.1800022c0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800027e3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x28]
lea rax, vtable.CCfgOPBaseT_int_.0
test rcx, rcx
mov qword [rbp - 0x30], rax
je 0x180002801
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x28], r15
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov dword [rbp - 0x20], r15d
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x180002820
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x18000282f
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, r13
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea eax, [rsi - 1]
test eax, eax
js 0x180002955
cmp eax, esi
jg 0x180002955
movsxd rax, esi
cmp word [rbx + rax*2 - 2], 0x5c
je 0x180002927
lea r15, [0x1800228bc]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180002880
mov r12, r15
sub r12, rbx
sar r12, 1
test eax, eax
js 0x180002981
movsxd rdx, eax
mov rcx, r15
call fcn.18000d370
mov rdx, rax
mov qword [rbp - 0x40], rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, esi
jl 0x18000298c
lea r14d, [rsi + rax]
test r14d, r14d
js 0x180002997
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x1800028f0
mov edx, r14d
lea rcx, [rbp + 0x58]
call fcn.180004250
mov rbx, qword [rbp + 0x58]
mov rdx, qword [rbp - 0x40]
cmp r12, rsi
ja 0x1800028f9
lea r15, [rbx + r12*2]
movsxd rdx, edx
add rdx, rdx
lea rcx, [rbx + rsi*2]
mov r9, rdx
mov r8, r15
call fcn.1800057a0
cmp r14d, dword [rbx - 0xc]
jg 0x1800029a2
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r15d, r15d
mov word [rbx + rax*2], r15w
lea rcx, [rbx - 0x18]
call fcn.180001660
add rax, 0x18
mov qword [r13], rax
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1800027e3
mov rcx, qword [rbx - 0x18]
lea rdx, [rbx - 0x18]
jmp 0x1800027dc
mov ecx, 0x80070057
call fcn.180001600
nop
mov ecx, 0x80070057
call fcn.180001600
nop
mov ecx, 0x80004005
call fcn.180001600
nop
mov ecx, 0x80004005
call fcn.180001600
nop
mov ecx, 0x80070057
call fcn.180001600
int3
mov ecx, 0x80070057
call fcn.180001600
int3
mov ecx, 0x80070057
call fcn.180001600
int3
mov ecx, 0x80070057
call fcn.180001600
int3