Function at 0x180033680
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov qword [rbp - 0x19], 0xfffffffffffffffe
mov rax, qword [0x180141088]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, r9
mov rbx, rdx
mov rsi, rcx
mov rdx, r8
lea rcx, [rbp + 7]
call fcn.180033ea0
cmp qword [rax + 0x18], 8
jb 0x1800336c8
mov rax, qword [rax]
lea rcx, [rbp - 9]
mov qword [rsp + 0x20], rcx
mov r9d, 0x201
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
sete bl
mov r8, qword [rbp + 0x1f]
cmp r8, 8
jb 0x180033705
inc r8
mov rdx, qword [rbp + 7]
lea rcx, [rbp + 7]
call fcn.180031a90
test bl, bl
je 0x1800338dd
xor ebx, ebx
mov dword [rbp - 0x11], ebx
mov dword [rbp - 1], 1
xorps xmm0, xmm0
movdqu xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rbx
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.180033ea0
cmp qword [rax + 0x18], 8
jb 0x18003373b
mov rax, qword [rax]
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 1]
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp - 9]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
mov r8, qword [rbp - 0x21]
cmp r8, 8
jb 0x180033779
inc r8
mov rdx, qword [rbp - 0x39]
lea rcx, [rbp - 0x39]
call fcn.180031a90
test edi, edi
jne 0x1800337e3
mov edx, dword [rbp - 0x11]
lea rcx, [rbp + 7]
call fcn.18002d000
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.180033ea0
cmp qword [rax + 0x18], 8
jb 0x18003379f
mov rax, qword [rax]
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov rbx, qword [rbp + 7]
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 1]
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp - 9]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
mov r8, qword [rbp - 0x21]
cmp r8, 8
jb 0x1800337e7
inc r8
mov rdx, qword [rbp - 0x39]
lea rcx, [rbp - 0x39]
call fcn.180031a90
jmp 0x1800337e7
mov rbx, qword [rbp + 7]
mov rcx, qword [rbp - 9]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
jne 0x18003386b
mov r8d, dword [rbp - 0x11]
shr r8d, 1
mov rdx, rbx
lea rcx, [rbp - 0x39]
call fcn.180033a90
mov rdx, rax
mov rcx, rsi
call fcn.18000bf30
mov rax, qword [rbp - 0x21]
cmp rax, 0x10
jb 0x18003387d
inc rax
mov rcx, qword [rbp - 0x39]
cmp rax, 0x1000
jb 0x180033864
test cl, 0x1f
je 0x180033837
call fcn.1800c0d4c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180033846
call fcn.1800c0d4c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180033855
call fcn.1800c0d4c
int3
cmp rcx, 0x27
jbe 0x180033861
call fcn.1800c0d4c
int3
mov rcx, rax
call fcn.1800af3bc
jmp 0x18003387d
xor r8d, r8d
lea rdx, [0x1800fd01d]
mov rcx, rsi
call fcn.180009ff0
test edi, edi
sete dil
test rbx, rbx
je 0x1800338d7
mov rax, qword [rbp + 0x17]
sub rax, rbx
cmp rax, 0x1000
jb 0x1800338cf
test bl, 0x1f
je 0x1800338a2
call fcn.1800c0d4c
int3
mov rax, qword [rbx - 8]
cmp rax, rbx
jb 0x1800338b1
call fcn.1800c0d4c
int3
sub rbx, rax
cmp rbx, 8
jae 0x1800338c0
call fcn.1800c0d4c
int3
cmp rbx, 0x27
jbe 0x1800338cc
call fcn.1800c0d4c
int3
mov rbx, rax
mov rcx, rbx
call fcn.1800af3bc
movzx eax, dil
jmp 0x1800338f1
xor r8d, r8d
lea rdx, [0x1800fd01d]
mov rcx, rsi
call fcn.180009ff0
xor al, al
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1800ae8d0
add rsp, 0xa0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret