Function at 0x1800045b0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
imul eax, ecx, 0x540
xor edi, edi
mov r15d, ecx
mov dword [rbp + 0xc8], ecx
mov esi, ecx
mov dword [rsp + 0x70], eax
cmp ecx, eax
ja 0x1800049a3
mov ebx, dword [rbp + 0xb0]
nop word [rax + rax]
cmp esi, 0xe7b0
ja 0x1800048a8
je 0x18000489e
cmp esi, 0x2431
ja 0x18000483a
je 0x1800046ec
mov eax, esi
sub eax, 0x11
je 0x18000469b
sub eax, 0x5c
je 0x180004690
sub eax, 0x43
je 0x18000466f
cmp eax, 0x4f5
jne 0x18000498d
xor r9d, r9d
mov dword [rsp + 0x20], 0xb5
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x20]
call fcn.180021fe0
test eax, eax
je 0x1800049f5
lea rax, str._s:_Expected_to_read__u_touch_points_but_only_read__u__ret_u_.
jmp 0x180004b88
movzx eax, word [0x180053f92]
mov word [rsp + 0x40], ax
movzx eax, byte [0x180053f94]
mov byte [rsp + 0x42], al
mov byte [rsp + 0x43], dil
jmp 0x18000498d
mov dword [rbp + 0xc0], edi
jmp 0x18000498d
xor r9d, r9d
lea rdx, [rbp - 0x50]
xor r8d, r8d
mov ecx, 0xbf
call fcn.180003b40
lea rdx, [rbp + 0x20]
mov ecx, 0x86
call fcn.180038820
xor r9d, r9d
mov dword [rsp + 0x20], 0xb5
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.180021fe0
test eax, eax
je 0x1800049fd
mov rdx, qword [rbp + 0xb8]
jmp 0x18000498d
mov r12, qword [rdx + 0x28]
mov r14d, edi
mov r13d, 0xe3
nop dword [rax]
mov eax, r13d
sub eax, 0xe1
je 0x18000480d
sub eax, 1
je 0x1800047f1
sub eax, 1
je 0x180004761
cmp eax, 4
jne 0x1800047fd
test r14d, r14d
jle 0x1800047fd
mov rsi, r12
mov r15d, r14d
call fcn.18004035c
cdq
mov r8d, 0xf0
idiv r14d
mov rcx, rsi
movsxd rax, edx
lea rdx, [r12 + rax*4]
call fcn.1800391f0
add rsi, 4
sub r15, 1
jne 0x180004734
jmp 0x1800047fd
test r12, r12
je 0x1800047dd
mov esi, 0x118
nop dword [rax + rax]
mov eax, esi
sub eax, 0x116
je 0x18000480d
sub eax, 1
je 0x1800047b2
cmp eax, 1
jne 0x1800047d3
cmp dword [r12 + 0x18], 1
lea r8, [rbp + 0xc0]
mov rcx, qword [r12]
mov eax, edi
sete al
add r14d, eax
mov edx, r14d
call fcn.18001a580
test eax, eax
je 0x180004b9c
jmp 0x1800047d3
mov rcx, qword [r12 + 8]
lea r8, [rbp + 0xc0]
mov edx, r14d
call fcn.18001a580
test eax, eax
je 0x180004b9c
mov ebx, 1
dec esi
cmp esi, 0x115
ja 0x180004770
inc r14d
cmp dword [rbp + 0xc0], edi
jne 0x1800047fd
mov dword [rbp + 0xc0], r14d
jmp 0x1800047fd
cmp r14d, dword [rbp + 0xc0]
mov ebx, edi
sete bl
dec r13d
cmp r13d, 0xdf
ja 0x180004700
test ebx, ebx
je 0x180004b9c
lea rcx, str.End:_qsort_in_FastListBoxList
call fcn.18003ac00
mov rdx, qword [rbp + 0xb8]
mov esi, dword [rbp + 0xc8]
mov r15d, dword [rbp + 0xb0]
jmp 0x18000498d
cmp esi, 0x3a70
je 0x18000487c
cmp esi, 0x7430
je 0x180004870
cmp esi, 0xadf0
jne 0x18000498d
mov eax, dword [0x180053fef]
mov dword [rsp + 0x4d], eax
movzx eax, byte [0x180053ff3]
mov byte [rsp + 0x51], al
jmp 0x18000498d
mov word [rsp + 0x4c], 0x2f
jmp 0x18000498d
mov eax, dword [0x180053e7f]
mov dword [rsp + 0x47], eax
movzx eax, byte [0x180053e83]
mov byte [rsp + 0x4b], al
mov dword [rsp + 0x43], 0x6c6c697a
jmp 0x18000498d
mov byte [rsp + 0x52], dil
jmp 0x18000498d
cmp esi, 0x1ceb0
ja 0x180004949
je 0x180004940
cmp esi, 0x12170
je 0x180004937
cmp esi, 0x15b30
je 0x180004912
cmp esi, 0x194f0
jne 0x18000498d
mov r8d, 3
mov byte [rsp + 0x55], dil
lea rdx, [0x18005406d]
lea rcx, [rsp + 0x40]
call fcn.18003fbe0
movzx eax, word [0x180054088]
mov rdx, qword [rbp + 0xb8]
mov word [rsp + 0x58], ax
movzx eax, byte [0x18005408a]
mov byte [rsp + 0x5a], al
jmp 0x18000498d
mov r8d, 1
lea rdx, [0x180053f84]
lea rcx, [rsp + 0x53]
call fcn.18003fd90
mov rdx, qword [rbp + 0xb8]
mov byte [rsp + 0x54], 0x2f
jmp 0x18000498d
mov word [rsp + 0x52], 0x67
jmp 0x18000498d
mov word [rsp + 0x5b], 0x3b
jmp 0x18000498d
cmp esi, 0x20870
je 0x180004986
cmp esi, 0x24230
je 0x180004968
cmp esi, 0x27bf0
jne 0x18000498d
mov byte [rsp + 0x64], dil
jmp 0x18000498d
movzx eax, word [str.Get_PackParameter]
mov word [rsp + 0x60], ax
movzx eax, byte [0x18005402a]
mov byte [rsp + 0x62], al
mov byte [rsp + 0x63], 0x53
jmp 0x18000498d
mov word [rsp + 0x5c], 0x31
imul eax, r15d, 0x54
add esi, eax
mov dword [rbp + 0xc8], esi
cmp esi, dword [rsp + 0x70]
jbe 0x180004600
lea esi, [r15 + 0x10]
cmp r15d, esi
jae case.0x1800049f3.15
mov r14d, dword [rbp + 0xb0]
lea ebx, [r15 - 0xb0]
mov r15d, dword [rbp + 0xb0]
lea rdx, [0x180000000]
mov r12, qword [rbp + 0xc0]
mov r8d, 8
mov r13d, dword [rbp + 0xb0]
cmp ebx, 0xf
ja case.default.0x1800049f3
mov ecx, dword [rdx + rbx*4 + 0x4bb4]
add rcx, rdx
jmp rcx
mov rax, rdi
jmp 0x180004b88
lea rax, str.Microsoft.VisualStudio.Settings.CVsSettingsStore.GetBoolOrDefault
jmp 0x180004b88
mov eax, dword [rbp + 0x10]
mov dword [rbp + 0xc8], eax
jmp case.default.0x1800049f3
mov dword [rsp + 0x38], r14d
lea rax, [rsp + 0x74]
mov qword [rsp + 0x30], rdi
lea r8, [rsp + 0x78]
mov dword [rsp + 0x28], r15d
lea rcx, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor edx, edx
call sub.SHLWAPI.dll_SHRegGetUSValueA
lea rdx, [0x180000000]
mov r8d, 8
jmp case.default.0x1800049f3
xor edx, edx
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x60]
lea r8, [rbp - 0x78]
lea ecx, [rdx + 0x2d]
call fcn.180019870
mov r12, rax
lea rdx, [0x180000000]
mov r8d, 8
mov r13d, edi
jmp case.default.0x1800049f3
mov dword [rsp + 0x74], edi
jmp case.default.0x1800049f3
mov dword [rbp - 0x78], 0x65006b
mov word [rbp - 0x74], di
jmp case.default.0x1800049f3
lea rcx, [rbp - 0x10]
mov r15d, edi
mov r14d, edi
call r12
lea rdx, [0x180000000]
mov r8d, 8
jmp case.default.0x1800049f3
movsd xmm0, qword [0x1800540de]
movzx eax, word [0x1800540e6]
movsd qword [rbp - 0x6a], xmm0
mov word [rbp - 0x62], ax
jmp case.default.0x1800049f3
mov r8d, 3
lea rdx, [0x1800540fa]
lea rcx, [rsp + 0x60]
call fcn.18003fbe0
lea rdx, [0x180000000]
mov r8d, 8
jmp case.default.0x1800049f3
mov byte [rsp + 0x6d], dil
jmp case.default.0x1800049f3
movsd xmm0, qword [0x18005411a]
movzx eax, word [0x180054122]
movsd qword [rbp - 0x74], xmm0
mov word [rbp - 0x6c], ax
mov word [rbp - 0x6a], di
jmp case.default.0x1800049f3
lea r8, [rbp - 0x58]
mov edx, r13d
lea rcx, [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_GetAce]
lea rdx, [0x180000000]
mov r8d, 8
jmp case.default.0x1800049f3
mov word [rsp + 0x6b], 0x6f66
jmp case.default.0x1800049f3
mov r8d, 4
lea rdx, [0x180054150]
jmp 0x180004ae8
mov qword [rbp - 0x80], rdi
mov word [rbp - 0x7e], r8w
mov dword [rsp + 0x78], edi
jmp case.default.0x1800049f3
mov word [rbp - 0x60], di
inc ebx
lea eax, [rbx + 0xb0]
cmp eax, esi
jb 0x1800049e0
mov rax, qword [rbp + 0xc8]
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, str.VmodlVimProfileHostProfileManager
call fcn.18003ac00
mov ecx, 1
call fcn.180040350
int3