Function at 0x140017ff0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x14023c048]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov r15, rdx
mov r14, rcx
mov ebx, 0x400
lea rcx, [rsp + 0x60]
xor r12d, r12d
mov r8d, ebx
xor edx, edx
mov qword [rsp + 0x38], r12
call fcn.140167e60
mov ecx, 0x802
mov dword [rsp + 0x34], r12d
call fcn.140149ac0
mov ecx, dword [0x1401e5670]
mov rsi, rax
movsd xmm0, qword [str.Intel_]
xor eax, eax
mov dword [rsp + 0x48], ecx
mov edi, r12d
movzx ecx, word [0x1401e5674]
mov word [rsp + 0x4c], cx
mov dword [rsp + 0x30], 0x800
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x4e], eax
mov word [rsp + 0x52], ax
test r14, r14
je 0x1400183e4
lea r8, str.SOFTWAREWOW6432NodeMicrosoftCellularTelemetryProperty_
mov edx, ebx
lea rax, [rsp + 0x60]
sub r8, rax
lea rcx, [rsp + 0x60]
nop
lea rax, [rdx + 0x7ffffbfe]
test rax, rax
je 0x1400180d0
movzx eax, byte [r8 + rcx]
test al, al
je 0x1400180d0
mov byte [rcx], al
inc rcx
sub rdx, 1
jne 0x1400180b0
mov r8, qword [r14 + 0x10]
lea rax, [rcx - 1]
test rdx, rdx
cmovne rax, rcx
mov rcx, rbx
mov byte [rax], dil
lea rax, [rsp + 0x60]
nop word [rax + rax]
cmp byte [rax], dil
je 0x1400180fe
inc rax
sub rcx, 1
jne 0x1400180f0
mov rax, rbx
mov rdx, r12
sub rax, rcx
test rcx, rcx
cmovne rdx, rax
je 0x14001815a
lea rcx, [rsp + 0x60]
lea rcx, [rcx + rdx]
sub rbx, rdx
je 0x14001814c
lea rax, [rdx + 0x7ffffbfe]
add rax, rbx
sub r8, rcx
nop dword [rax + rax]
test rax, rax
je 0x14001814c
movzx edx, byte [r8 + rcx]
test dl, dl
je 0x14001814c
mov byte [rcx], dl
dec rax
inc rcx
sub rbx, 1
jne 0x140018130
test rbx, rbx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], dil
lea rax, [rsp + 0x38]
mov r14d, 1
mov r9d, r14d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400183e4
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea rdx, str.Model
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400183cf
cmp dword [rsp + 0x34], r14d
jne 0x1400183cf
lea edx, [rax + 0xa]
lea rcx, [rsp + 0x40]
call fcn.14016b024
mov ebx, dword [rsp + 0x30]
add ax, ax
movzx ecx, ax
cmp ebx, ecx
jb 0x140018346
movzx r8d, ax
lea rcx, [rsp + 0x40]
mov rdx, rsi
call fcn.140168140
test eax, eax
jne 0x140018296
lea edx, [rax + 0xc]
lea rcx, str.Intel_R__5G
call fcn.14016b024
mov ebx, dword [rsp + 0x30]
add ax, ax
movzx edx, ax
cmp ebx, edx
jb 0x140018346
movzx r8d, ax
lea rcx, str.Intel_R__5G
mov rdx, rsi
call fcn.140168140
test eax, eax
sete dil
test edi, edi
jne 0x140018346
lea edx, [rdi + 0x16]
lea rcx, str.Intel_R__XMM_TM__7560
call fcn.14016b024
mov ebx, dword [rsp + 0x30]
add ax, ax
movzx edx, ax
cmp ebx, edx
jbe 0x140018279
movzx r8d, ax
lea rcx, str.Intel_R__XMM_TM__7560
mov rdx, rsi
call fcn.140168140
test eax, eax
mov edi, r12d
sete dil
test edi, edi
jne 0x140018346
test byte [0x14023cc7c], 4
je 0x140018346
mov edi, r14d
jmp 0x140018346
mov edx, 0xa
lea rcx, str.CDC_MBIM
call fcn.14016b024
mov ebx, dword [rsp + 0x30]
add ax, ax
movzx edx, ax
cmp ebx, edx
jb 0x1400182d1
movzx r8d, ax
lea rcx, str.CDC_MBIM
mov rdx, rsi
call fcn.140168140
test eax, eax
jne 0x1400182d1
mov edi, r14d
jmp 0x140018346
mov ecx, 0x802
call fcn.140149ac0
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0x34]
mov rbx, rax
mov dword [rsp + 0x30], 0x800
lea rax, [rsp + 0x30]
mov dword [rsp + 0x34], r12d
mov qword [rsp + 0x28], rax
lea rdx, str.HWID
xor r8d, r8d
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140018335
cmp dword [rsp + 0x34], r14d
jne 0x140018335
lea rdx, str.VID_8087PID_0AC9
mov rcx, rbx
call fcn.140168208
test rax, rax
cmovne edi, r14d
test rbx, rbx
je 0x140018342
mov rcx, rbx
call fcn.140148ec0
mov ebx, dword [rsp + 0x30]
test r15, r15
je 0x1400183cf
mov eax, 0x200
lea rcx, [r15 + 0x1c]
cmp ebx, eax
cmovb eax, ebx
mov ebx, eax
test eax, eax
je 0x1400183c8
test rcx, rcx
jne 0x140018375
call fcn.14016fbd8
mov dword [rax], reloc.OLEAUT32.dll_SafeArrayAccessData
jmp 0x1400183c3
test rsi, rsi
je 0x140018390
cmp rbx, 0x200
ja 0x140018390
mov r8, rbx
mov rdx, rsi
call fcn.1401679c0
jmp 0x1400183c8
xor edx, edx
mov r8d, 0x200
call fcn.140167e60
test rsi, rsi
jne 0x1400183af
call fcn.14016fbd8
mov dword [rax], reloc.OLEAUT32.dll_SafeArrayAccessData
jmp 0x1400183c3
cmp rbx, 0x200
jbe 0x1400183c8
call fcn.14016fbd8
mov dword [rax], 0x22
call fcn.14016ae3c
mov dword [r15 + 0x298], r14d
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400183e4
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x38], r12
test rsi, rsi
je 0x1400183f1
mov rcx, rsi
call fcn.140148ec0
mov eax, edi
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.140149290
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret