Function at 0x180018e00
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 8]
sub rsp, 0x108
imul eax, edx, 0x38e
mov r11, r9
xor r9d, r9d
mov edi, edx
mov r10, rcx
mov esi, edx
mov dword [rsp + 0x58], eax
cmp edx, eax
ja 0x18001916b
mov r15d, dword [rbp + 0x58]
lea ecx, [r9 + 0x3f]
mov r13d, dword [rbp + 0x58]
mov edi, dword [rbp + 0x58]
mov ebx, dword [rbp + 0x58]
mov r14d, dword [rbp + 0x58]
mov r12d, dword [rbp + 0x58]
mov edx, 0x41
cmp esi, 0x429c
ja 0x180018f94
je 0x180019512
cmp esi, 0x166e
ja 0x180018f3d
je 0x180018f27
mov eax, esi
sub eax, 0x57
je 0x180018ed0
sub eax, 0x74
je 0x180018ec3
cmp eax, 0xf
jne 0x180019154
mov eax, dword [0x18009eb92]
mov dword [rbp - 0x6e], eax
movzx eax, word [0x18009eb96]
mov word [rbp - 0x6a], ax
mov word [rbp - 0x70], cx
mov word [rbp - 0x68], dx
jmp 0x180019154
mov r15d, dword [r10 + 0x20]
mov r13d, dword [r10 + 0x24]
jmp 0x180019154
mov dword [rsp + 0x48], r9d
lea rdx, [rsp + 0x48]
lea r9, [0x180097450]
mov qword [rsp + 0x50], 0x20
mov r8d, 0x105
lea rcx, [rsp + 0x50]
call fcn.180060fd0
mov r11, qword [rbp + 0x68]
xor r9d, r9d
mov r10, qword [rbp + 0x50]
mov qword [rsp + 0x48], rax
mov qword [rax], r10
mov ecx, dword [r11]
mov dword [rax + 8], ecx
lea ecx, [r9 + 0x3f]
mov dword [rax + 0x10], r9d
mov dword [rax + 0x14], 8
jmp 0x180019154
mov rax, qword [rsp + 0x48]
mov dword [rax + 0xc], r9d
mov qword [rax + 0x18], 0
jmp 0x180019154
cmp esi, 0x2c85
je 0x180018f85
cmp esi, 0x3456
je 0x180018f77
cmp esi, 0x3834
jne 0x180019154
mov eax, dword [0x18009eb12]
mov dword [rbp - 0x66], eax
movzx eax, word [0x18009eb16]
mov word [rbp - 0x62], ax
mov word [rbp - 0x60], r9w
jmp 0x180019154
mov r12d, r9d
mov ebx, r9d
mov edi, r9d
jmp 0x180019154
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x40], rax
jmp 0x180019154
cmp esi, 0xa6e8
ja 0x18001913b
je 0x1800190fd
cmp esi, 0x67e1
je 0x180018fe9
cmp esi, 0x6f8e
je 0x180018fc7
cmp esi, 0x9b6c
je 0x18001905b
jmp 0x180019154
movsd xmm0, qword [0x18009eb50]
movzx eax, word [0x18009eb58]
movsd qword [rbp - 0x60], xmm0
mov word [rbp - 0x58], ax
mov word [rbp - 0x56], r9w
jmp 0x180019154
mov rdx, qword [r11]
mov r8d, 1
add rdx, 2
nop word [rax + rax]
mov r9d, 0x67
mov eax, r9d
sub eax, 0x67
je 0x18001906d
sub eax, 1
je 0x180019045
cmp eax, 1
jne 0x1800190eb
mov ecx, dword [r10 + 0x1c]
mov rax, qword [r10 + 0x10]
movzx r15d, byte [rcx + rax]
lea eax, [rcx + 1]
mov dword [r10 + 0x1c], eax
cmp r13d, 8
jle 0x1800190eb
mov r13d, 8
jmp 0x1800190eb
mov r13d, 0x10
sub r13d, r8d
jne 0x1800190eb
lea ecx, [r13 + 0x3f]
xor r9d, r9d
mov esi, 0x9b6c
mov dword [rsp + 0x40], 0xfffffff6
jmp 0x180019154
test r13d, r13d
je 0x1800190e8
nop dword [rax]
nop word [rax + rax]
dec r13d
mov eax, 0x8c
cmp eax, 0x8c
je 0x1800190b4
cmp eax, 0x5b54
je 0x1800190af
cmp eax, 0xb61c
je 0x1800190ab
cmp eax, 0x110e4
jne 0x1800190d7
add edi, edi
inc r8d
jmp 0x1800190d7
add ebx, ebx
jmp 0x1800190d7
add ebx, r14d
jmp 0x1800190d7
movsx r14d, word [rdx]
mov ecx, r15d
and ecx, 1
sar r15d, 1
or edi, ecx
add rdx, 2
mov ecx, edi
sub ecx, r14d
cmp ecx, ebx
jl 0x1800191f4
add r12d, r14d
add eax, 0x5ac8
cmp eax, 0x16b20
jbe 0x180019088
test r13d, r13d
jne 0x180019080
dec r13d
inc r9d
cmp r9d, 0x6a
jb 0x180019006
jmp 0x180019000
mov r8d, 2
lea rdx, [0x18009ec14]
lea rcx, [rbp - 0x70]
call fcn.18006f0a4
mov r8d, 2
lea rdx, [0x18009ec4a]
lea rcx, [rbp - 0x52]
call fcn.18006f0ec
mov r10, qword [rbp + 0x50]
mov ecx, 0x3f
mov r11, qword [rbp + 0x68]
xor r9d, r9d
jmp 0x180019154
cmp esi, 0xcef7
je 0x180019512
cmp esi, 0xde42
jne 0x180019154
mov word [rbp - 0x4e], r9w
imul eax, dword [rbp + 0x58], 0x41
add esi, eax
cmp esi, dword [rsp + 0x58]
jbe 0x180018e64
mov edi, dword [rbp + 0x58]
mov r8, qword [rbp + 0x60]
imul r15d, edi, 0x4bf
mov ebx, edi
cmp edi, r15d
ja 0x180019512
mov r13d, dword [rbp + 0x58]
mov edx, 0x6f
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x50]
mov r12d, dword [rbp + 0x58]
mov r14, qword [rsp + 0x50]
nop dword [rax]
cmp ebx, 0x1e3b0
ja 0x1800193c9
je 0x18001937d
cmp ebx, 0xcfc8
ja 0x1800192bd
je 0x180019285
cmp ebx, 0xda
je 0x18001923b
cmp ebx, 0x45d4
je 0x180019220
cmp ebx, 0x8ace
jne 0x1800194f1
mov dword [rbp - 0x38], 0x5a
mov dword [rsp + 0x68], 0x25
jmp 0x1800194f1
mov eax, dword [r10 + 0x24]
sub r12d, ebx
sub eax, r8d
mov dword [r10 + 0x20], r15d
and eax, 7
mov dword [r10 + 0x24], eax
add r12d, edi
mov rax, qword [r11 + 8]
movsxd rcx, r12d
movsx ecx, word [rax + rcx*2]
mov dword [rsp + 0x40], ecx
jmp 0x180019512
mov r8d, 3
lea rdx, [0x18009edb4]
lea rcx, [rbp - 0x70]
call fcn.18006f0a4
jmp 0x1800194e9
mov eax, dword [0x18009ecba]
lea rdx, str.vFMSUBADDPSZ128v213rrk
mov dword [rbp - 0x4e], eax
lea rcx, [rbp - 0x70]
movzx eax, word [0x18009ecbe]
mov r8d, 1
mov word [rbp - 0x4a], ax
mov word [rbp - 0x48], r9w
call fcn.18006f0a4
movabs rcx, 0x41005100400040
xor r9d, r9d
mov qword [rbp - 0x46], rcx
mov word [rbp - 0x3e], r9w
jmp 0x1800194ec
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x6a], 0x73
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x1800192a0
mov eax, dword [0x18009ed2c]
mov dword [rcx], eax
mov word [rsp + 0x6e], dx
jmp 0x1800194f1
cmp ebx, 0x114c2
je 0x180019342
cmp ebx, 0x159bc
je 0x1800192f4
cmp ebx, 0x19eb6
jne 0x1800194f1
mov r8d, 2
lea rdx, [0x18009ed28]
lea rcx, [rbp - 0x7e]
call fcn.18006f0ec
jmp 0x1800194e9
mov eax, 0x20
lea rdx, [rsp + 0x7c]
mov word [rsp + 0x76], ax
mov r8d, 0xa
mov eax, dword [0x18009ed44]
mov dword [rsp + 0x78], eax
movzx eax, word [0x18009ed48]
lea ecx, [r8 - 8]
mov word [rsp + 0x7c], ax
call fcn.18006f8d4
mov eax, dword [0x18009ed4c]
mov dword [rsp + 0x7e], eax
movzx eax, word [0x18009ed50]
mov word [rbp - 0x7e], ax
jmp 0x1800194e9
mov r8d, 1
mov dword [rsp + 0x70], 0x6e
lea rdx, [0x18009ed30]
lea rcx, [rsp + 0x68]
call fcn.18006f0a4
mov r8d, 1
lea rdx, [0x180098af0]
lea rcx, [rsp + 0x68]
call fcn.18006f0a4
jmp 0x1800194e9
lea rcx, [rsp + 0x68]
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180019390
movsd xmm0, qword [str.02u:]
mov rsi, 0xffffffffffffffff
movzx eax, word [0x18009ed40]
mov r14, 0xffffffff80000001
movsd qword [rcx], xmm0
mov word [rcx + 8], ax
mov qword [r8 + 8], r9
jmp 0x1800194f1
cmp ebx, 0x2f798
ja 0x18001947b
je 0x18001946a
cmp ebx, 0x228aa
je 0x180019449
cmp ebx, 0x26da4
je 0x18001940c
cmp ebx, 0x2b29e
jne 0x1800194f1
mov eax, dword [r10 + 0x20]
add rax, rdi
mov dword [rsp + 0x60], r9d
mov qword [r8 + 8], rax
jmp 0x1800194f1
test rdi, rdi
je 0x18001950d
mov r12d, 0x10
mov rdx, r10
cmp qword [r10 + 0x18], r12
jb 0x180019427
mov rdx, qword [r10]
mov r8, qword [r10 + 0x10]
mov rcx, rdi
call fcn.18006ba90
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 8], rax
movups xmmword [rbp - 0x18], xmm0
jmp 0x1800194e9
mov qword [r8], r9
mov r13d, 2
mov rdx, qword [r10 + 0x10]
mov r8d, 0x1000
xor ecx, ecx
lea r9d, [r13 + 0x3e]
call qword [r11]
mov rdi, rax
jmp 0x1800194e9
mov eax, dword [r10 + 0x24]
add rax, rdi
mov dword [rsp + 0x5c], r9d
mov qword [r8], rax
jmp 0x1800194f1
cmp ebx, 0x33c92
je 0x1800194bb
cmp ebx, 0x3818c
je 0x180019495
cmp ebx, 0x3c686
je 0x180019512
jmp 0x1800194f1
lea rax, [rbp - 0x30]
mov r9d, 0x28
lea r8, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov edx, r13d
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_GetKernelObjectSecurity]
mov byte [rsp + 0x40], 1
jmp 0x1800194e9
lea rax, [rsp + 0x5c]
mov rcx, r14
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x68]
mov qword [rsp + 0x28], r9
lea rax, [rsp + 0x60]
mov r9d, r12d
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x70]
call qword [sym.imp.SHLWAPI.dll_SHRegGetValueW]
xor r9d, r9d
mov edx, 0x6f
imul eax, dword [rbp + 0x58], 0x51
add ebx, eax
cmp ebx, r15d
ja 0x180019512
mov r10, qword [rbp + 0x50]
mov r8, qword [rbp + 0x60]
mov r11, qword [rbp + 0x68]
jmp 0x1800191a0
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x40]
add rsp, 0x108
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret