Function at 0x14001d238
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov rax, qword [0x140055010]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r15b, cl
call fcn.14001ea10
test al, al
je 0x14001d27b
mov eax, 0x80004005
jmp 0x14001d5fc
and qword [rbp - 0x39], 0
lea rbx, [0x14004ceb0]
lea rdx, [rbp - 0x41]
mov qword [rbp - 0x41], rbx
mov cl, r15b
call fcn.14001c8d0
mov rax, qword [rbp - 0x41]
lea rcx, [0x14000aae8]
cmp qword [rax + 8], rcx
lea rcx, [rbp - 0x41]
jne 0x14001d2b4
or edx, 0xffffffff
call qword [rax + 0x18]
jmp 0x14001d2b7
call qword [rax + 8]
and qword [rbp - 0x29], 0
lea rdi, [0x14004bee8]
mov qword [rbp - 0x31], rdi
mov dword [rbp - 0x21], 0x200
call fcn.140019cd0
lea rax, str.HKCUSoftwareBraveSoftwareUpdate_
test r15b, r15b
lea rdx, str.HKLMSoftwareBraveSoftwareUpdate_
cmove rdx, rax
lea rcx, [rbp - 0x31]
and qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0xf003f
call fcn.14000ad64
mov esi, eax
test eax, eax
js 0x14001d5bd
and qword [rsp + 0x28], 0
lea rdx, [0x14004f770]
mov rcx, qword [rbp - 0x29]
xor r9d, r9d
and qword [rsp + 0x20], 0
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14001d337
xor esi, esi
jmp 0x14001d5bd
call fcn.1400014b8
mov rcx, rax
test rax, rax
je 0x14001d62b
mov rax, qword [rax]
call qword [rax + 0x18]
xorps xmm0, xmm0
lea rcx, [rbp + 0x27]
movups xmmword [rbp + 0x27], xmm0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x19], rbx
call qword [sym.imp.ole32.dll_CoCreateGuid]
or r14d, 0xffffffff
mov esi, eax
test eax, eax
js 0x14001d59a
lea rdx, [rbp + 0x27]
lea rcx, [rbp + 7]
call fcn.140004fbc
mov rdx, rax
lea rcx, [rbp - 0x19]
call fcn.140001858
mov rdx, qword [rbp + 7]
mov eax, r14d
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001d3ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp - 0x19]
lea rdx, [0x14004f770]
mov r8, rbx
lea rcx, [rbp - 0x31]
mov r9d, 1
call fcn.14000b598
mov esi, eax
test eax, eax
js 0x14001d59a
lea rcx, [0x140055e48]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc qword [0x140055f28]
lea rcx, [0x140055e48]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.140007674
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
mul rcx
lea rcx, [rbp - 0x31]
shr rdx, 0x17
lea r8d, [rdx + 0x49ef6f00]
lea rdx, str.uid_create_time
call fcn.14000b558
and dword [rbp - 0x49], 0
lea r8, [rbp - 0x49]
lea rdx, str.uid_num_rotations
lea rcx, [rbp - 0x31]
call fcn.14000b1fc
mov r8d, dword [rbp - 0x49]
lea rdx, str.uid_num_rotations
inc r8d
lea rcx, [rbp - 0x31]
mov dword [rbp - 0x49], r8d
call fcn.14000b558
and qword [rbp - 1], 0
lea rcx, [rbp - 0x11]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
call fcn.14001c500
mov rdi, qword [rbp - 0x11]
test eax, eax
js 0x14001d51a
cmp rdi, qword [rbp - 9]
je 0x14001d51a
mov rax, qword [rbp - 9]
movabs rcx, 0x1fffffffffffffff
sub rax, rdi
sar rax, 3
cmp rax, rcx
ja 0x14001d636
lea r14, [rax*8]
cmp r14, 0x1000
jb 0x14001d4c1
mov rcx, r14
call fcn.140006244
mov rsi, rax
jmp 0x14001d4d2
test r14, r14
je 0x14001d4d0
mov rcx, r14
call fcn.140038cd0
jmp 0x14001d4bc
xor esi, esi
lea rax, [rsi + r14]
mov qword [rbp + 0xf], rsi
mov qword [rbp + 0x1f], rax
mov r14, rdi
mov rcx, qword [r14]
sub rcx, 0x18
call fcn.140001a9c
add rax, 0x18
add r14, 8
mov qword [rsi], rax
add rsi, 8
cmp r14, qword [rbp - 9]
jne 0x14001d4e1
lea rdx, [rbp + 0xf]
mov qword [rbp + 0x17], rsi
mov cl, r15b
call fcn.14001ca74
mov esi, eax
or r14d, 0xffffffff
jmp 0x14001d51f
mov esi, 1
test rdi, rdi
je 0x14001d593
cmp rdi, qword [rbp - 9]
je 0x14001d55b
mov rdx, qword [rdi]
mov eax, r14d
sub rdx, 0x18
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001d549
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rdi, 8
cmp rdi, qword [rbp - 9]
jne 0x14001d52a
mov rbx, qword [rbp - 0x19]
mov rdi, qword [rbp - 0x11]
mov rdx, qword [rbp - 1]
mov rax, rdi
sub rdx, rdi
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x14001d58b
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d625
mov rcx, rdi
call fcn.140020f38
lea rdi, [0x14004bee8]
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001d5b6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rbx, [0x14004ceb0]
mov rcx, qword [rbp - 0x29]
mov qword [rbp - 0x31], rdi
test rcx, rcx
je 0x14001d5dc
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
and qword [rbp - 0x29], 0
mov dword [rbp - 0x21], 0x200
mov rax, qword [rbp - 0x41]
lea rcx, [rbp - 0x41]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x41], rbx
test rcx, rcx
je 0x14001d5fa
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140020a60
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140026e84
int3
mov ecx, 0x80004005
call fcn.140001834
int3
call fcn.14000417c
int3