Function at 0x14013624c
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rsi, r8
mov rdi, rdx
mov r14, rcx
mov dword [rbp + 0xc8], 1
and dword [rbp + 0xb0], 0
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x140136286
mov rdx, qword [r8]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
lea r9, [rbp + 0xc8]
xor r8d, r8d
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [rbp + 0xc0], eax
test eax, eax
jne 0x1401363ab
mov edx, dword [rbp + 0xb0]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
and qword [rbp - 0x70], 0
lea rcx, [rbp - 0x80]
call fcn.140137174
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1401362e3
mov rdx, qword [rsi]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
mov rbx, qword [rbp - 0x80]
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0xc8]
xor r8d, r8d
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [rbp + 0xc0], eax
test eax, eax
jne 0x140136549
mov r8, qword [rbp - 0x78]
dec r8
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
cmp rbx, r8
jne 0x140136341
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], al
jmp 0x140136350
sub r8, rbx
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.140131988
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rdi + 0x10], xmm1
test rbx, rbx
je 0x140136394
mov rdx, qword [rbp - 0x70]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14013638c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401363a5
mov rcx, rbx
call fcn.140c4bba0
mov rax, rdi
add rsp, 0x180
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140c5acfc
int3
movabs rax, 0x583db2a5f0007781
mov qword [rbp - 0x40], rax
movabs rax, 0x1813c94a2d31c8a6
mov qword [rbp - 0x38], rax
movabs rax, 0xd9df242aa5fd1e5d
mov qword [rbp - 0x30], rax
movabs rax, 0x3e90d224b770e69e
mov qword [rbp - 0x28], rax
movabs rax, 0xb7cb130e9fe0a97e
mov qword [rbp - 0x20], rax
movabs rax, 0xe2505595e932bf20
mov qword [rbp - 0x18], rax
movabs rax, 0x7ea10b0bf6120d01
mov qword [rbp - 0x10], rax
movabs rax, 0x727de8a9b5412af9
mov qword [rbp - 8], rax
movabs rax, 0x214fc6d6996712d3
mov qword [rsp + 0x40], rax
movabs rax, 0x7c76a5234c77e89c
mov qword [rsp + 0x48], rax
movabs rax, 0xbdbe415885926a7d
mov qword [rsp + 0x50], rax
movabs rax, 0x4ce4a14dd01594be
mov qword [rsp + 0x58], rax
movabs rax, 0x96ae6662fe968907
mov qword [rsp + 0x60], rax
movabs rax, 0x9f2b75af9057f400
mov qword [rsp + 0x68], rax
movabs rax, 0x5e9b796484604821
mov qword [rsp + 0x70], rax
movabs rax, 0x727de8a9b5415782
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [rbp - 0x30]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [rbp - 0x20]
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [rbp - 0x10]
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x10], xmm1
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x50]
call fcn.14012d810
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x70]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0xc0]
mov r8, rsi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.14013704c
nop
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140135d10
lea rdx, [0x140db1a28]
lea rcx, [rbp - 0x80]
call fcn.140c4d970
nop
movabs rax, 0x583db2a5f0007781
mov qword [rsp + 0x40], rax
movabs rax, 0x1813c94a2d31c8a6
mov qword [rsp + 0x48], rax
movabs rax, 0xd9df242aa5fd1e5d
mov qword [rsp + 0x50], rax
movabs rax, 0x3e90d224b770e69e
mov qword [rsp + 0x58], rax
movabs rax, 0xb7cb130e9fe0a97e
mov qword [rsp + 0x60], rax
movabs rax, 0xe2505595e932bf20
mov qword [rsp + 0x68], rax
movabs rax, 0x7ea10b0bf6120d01
mov qword [rsp + 0x70], rax
movabs rax, 0x727de8a9b5412af9
mov qword [rsp + 0x78], rax
movabs rax, 0x214fc6d6996712d3
mov qword [rbp + 0x10], rax
movabs rax, 0x7c76a5234c77e89c
mov qword [rbp + 0x18], rax
movabs rax, 0xbdbe415885926a7d
mov qword [rbp + 0x20], rax
movabs rax, 0x4ce4a14dd01594be
mov qword [rbp + 0x28], rax
movabs rax, 0x96ae6662fe968907
mov qword [rbp + 0x30], rax
movabs rax, 0x9f2b75af9057f400
mov qword [rbp + 0x38], rax
movabs rax, 0x5e9b796484604821
mov qword [rbp + 0x40], rax
movabs rax, 0x727de8a9b5415782
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x70], xmm1
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.14012d810
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.140135d64
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0xc0]
mov r8, rsi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x40]
call fcn.14013704c
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.140135d10
lea rdx, [0x140db1a28]
lea rcx, [rbp - 0x68]
call fcn.140c4d970
int3