Function at 0x14005e860
Capabilities:
Query or enumerate registry value

Disassembly:
jmp 0x14005e860
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0xdd8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x27a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0xdf8]
mov rax, qword [0x140289140]
xor rax, rbp
mov qword [rbp + 0xd90], rax
mov dword [rbp + 0xd54], 0
lea rcx, [0x1402ac2b2]
call fcn.140007f72
nop
lea rdx, [0x14021ff4e]
mov rcx, qword [rbp + 0xdc0]
call fcn.1400041b0
mov qword [rbp + 0xd68], rax
mov eax, dword [rbp + 0xd54]
or eax, 1
mov dword [rbp + 0xd54], eax
lea rax, str.SOFTWAREValveSteam
mov qword [rbp + 0x68], rax
lea rax, str.SteamPath
mov qword [rbp + 0x88], rax
mov dword [rbp + 0xa4], 0x104
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rdx, qword [rbp + 0x68]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14005ee10
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14005ee05
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x2f8]
call fcn.1400034d6
nop
lea rcx, [rbp + 0xb74]
call fcn.14000290a
mov qword [rbp + 0xd68], rax
lea rax, [rbp + 0xb98]
mov qword [rbp + 0xbc8], rax
mov rdx, qword [rbp + 0xbc8]
lea rcx, [rbp + 0x2f8]
call fcn.140006523
mov qword [rbp + 0xd70], rax
mov rax, qword [rbp + 0xd70]
mov qword [rbp + 0xd78], rax
lea rax, [rbp + 0xbe8]
mov qword [rbp + 0xc18], rax
mov rdx, qword [rbp + 0xc18]
lea rcx, [rbp + 0x2f8]
call fcn.1400044a3
mov qword [rbp + 0xd80], rax
mov rax, qword [rbp + 0xd80]
mov qword [rbp + 0xd88], rax
mov r9, qword [rbp + 0xd68]
mov r8, qword [rbp + 0xd78]
mov rdx, qword [rbp + 0xd88]
lea rcx, [rbp + 0x338]
call fcn.14000475a
nop
xor r8d, r8d
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0xc58]
call fcn.140006771
nop
lea rcx, [rbp + 0xc58]
call fcn.14000187f
mov byte [rbp + 0xc34], al
lea rcx, [rbp + 0xc58]
call fcn.140007518
movzx eax, byte [rbp + 0xc34]
test eax, eax
je 0x14005edeb
lea r8, str.configloginusers.vdf
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x378]
call fcn.1400066a4
nop
xor r8d, r8d
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0xcb8]
call fcn.140006771
nop
lea rcx, [rbp + 0xcb8]
call fcn.140004192
mov byte [rbp + 0xc94], al
lea rcx, [rbp + 0xcb8]
call fcn.140007518
movzx eax, byte [rbp + 0xc94]
test eax, eax
je 0x14005edde
mov edx, 0x110
lea rcx, [rbp + 0x3c0]
call fcn.140005a6a
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x3c0]
call fcn.140006447
nop
lea rcx, [rbp + 0x3c0]
call fcn.14000130c
movzx eax, al
test eax, eax
je 0x14005edd1
lea rcx, [rbp + 0x4e8]
call fcn.140007ee6
nop
mov edx, 0x20
lea rcx, [rbp + 0x528]
call fcn.140001906
lea rcx, [rbp + 0x528]
call fcn.140003acb
nop
mov edx, 0x58
lea rcx, [rbp + 0x570]
call fcn.140006ece
mov r8d, 1
lea rdx, str.__d17__
lea rcx, [rbp + 0x570]
call fcn.140004845
nop
mov edx, 0x58
lea rcx, [rbp + 0x5f0]
call fcn.140006ece
mov r8d, 1
lea rdx, str._MostRecent____t___d__
lea rcx, [rbp + 0x5f0]
call fcn.140004845
nop
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp + 0x3c0]
call fcn.140004d36
mov qword [rbp + 0xcf8], rax
mov rax, qword [rbp + 0xcf8]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rbp + 0xcf8]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.140004039
movzx eax, al
test eax, eax
je 0x14005ebe5
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp + 0x528]
call fcn.1400049fd
nop
jmp 0x14005eb8b
mov qword [rbp + 0x668], 0
jmp 0x14005ec03
mov rax, qword [rbp + 0x668]
inc rax
mov qword [rbp + 0x668], rax
lea rcx, [rbp + 0x528]
call fcn.1400037ba
cmp qword [rbp + 0x668], rax
jae 0x14005ed90
mov edx, 0xe8
lea rcx, [rbp + 0x690]
call fcn.140005e6b
lea rcx, [rbp + 0x690]
call fcn.1400041ce
nop
mov rdx, qword [rbp + 0x668]
lea rcx, [rbp + 0x528]
call fcn.140002eaa
xor r9d, r9d
lea r8, [rbp + 0x5f0]
lea rdx, [rbp + 0x690]
mov rcx, rax
call fcn.140002423
movzx eax, al
test eax, eax
je 0x14005ed7e
lea rcx, [rbp + 0x690]
call fcn.140008792
cmp rax, 2
jne 0x14005ed7e
mov edx, 1
lea rcx, [rbp + 0x690]
call fcn.14000624e
lea rdx, [0x14022c4b0]
mov rcx, rax
call fcn.140005f47
movzx eax, al
test eax, eax
je 0x14005ed7e
mov eax, dword [rbp + 0x668]
dec eax
mov dword [rbp + 0x794], eax
jmp 0x14005ecd0
mov eax, dword [rbp + 0x794]
dec eax
mov dword [rbp + 0x794], eax
cmp dword [rbp + 0x794], 0
jl 0x14005ed7e
movsxd rax, dword [rbp + 0x794]
mov rdx, rax
lea rcx, [rbp + 0x528]
call fcn.140002eaa
xor r9d, r9d
lea r8, [rbp + 0x570]
lea rdx, [rbp + 0x690]
mov rcx, rax
call fcn.140002423
movzx eax, al
test eax, eax
je 0x14005ed79
lea rcx, [rbp + 0x690]
call fcn.140008792
cmp rax, 2
jne 0x14005ed79
mov edx, 1
lea rcx, [rbp + 0x690]
call fcn.14000624e
mov qword [rbp + 0xd68], rax
lea rdx, [rbp + 0xd18]
mov rcx, qword [rbp + 0xd68]
call fcn.14000189d
mov qword [rbp + 0xd70], rax
mov rdx, qword [rbp + 0xd70]
mov rcx, qword [rbp + 0xdc0]
call fcn.140002d60
lea rcx, [rbp + 0xd18]
call fcn.140002414
nop
jmp 0x14005ed7e
jmp 0x14005ecc2
lea rcx, [rbp + 0x690]
call fcn.140001ba4
nop
jmp 0x14005ebf2
lea rcx, [rbp + 0x3c0]
call fcn.140004d1d
nop
lea rcx, [rbp + 0x5f0]
call fcn.1400030ad
nop
lea rcx, [rbp + 0x570]
call fcn.1400030ad
nop
lea rcx, [rbp + 0x528]
call fcn.140007ad6
nop
lea rcx, [rbp + 0x4e8]
call fcn.140002414
nop
lea rcx, [rbp + 0x3c0]
call fcn.1400020db
nop
lea rcx, [rbp + 0x378]
call fcn.140002414
nop
lea rcx, [rbp + 0x338]
call fcn.140002414
nop
lea rcx, [rbp + 0x2f8]
call fcn.140006e79
nop
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rax, qword [rbp + 0xdc0]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140223a80]
call fcn.140006b90
mov rax, rdi
mov rcx, qword [rbp + 0xd90]
xor rcx, rbp
call fcn.1400044d0
lea rsp, [rbp + 0xda8]
pop rdi
pop rbp
ret