Function at 0x140038bd0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rdi, r8
mov rbx, rdx
mov r15, rcx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov dword [rbp + 0x67], r12d
cmp qword [r8 + 0x18], 7
jbe 0x140038c12
mov r8, qword [r8]
lea rax, [rbp + 0x67]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor edx, edx
mov r9d, 2
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x140038e3f
mov r8d, dword [rbp + 0x67]
shr r8, 1
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
mov edx, 0x20
mov rcx, rbx
call fcn.1400567a0
mov dword [rsp + 0x40], 1
mov rax, rbx
lea r14, [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x140038c79
mov rax, qword [rbx]
cmp qword [rdi + 0x18], 7
jbe 0x140038c83
mov rdi, qword [rdi]
lea rcx, [rbp + 0x67]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 2
mov r8, rdi
xor edx, edx
mov rcx, qword [r15]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x140038d50
mov r8d, dword [rbp + 0x67]
shr r8, 1
dec r8
mov rcx, qword [rbx + 0x10]
cmp r8, rcx
ja 0x140038cdd
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140038cd6
mov rax, qword [rbx]
mov word [rax + r8*2], r12w
jmp 0x140038d31
mov rdx, r8
sub rdx, rcx
mov rdi, qword [rbx + 0x18]
mov rax, rdi
sub rax, rcx
cmp rdx, rax
ja 0x140038d1b
mov qword [r14], r8
mov r9, rbx
cmp rdi, 7
jbe 0x140038d01
mov r9, qword [rbx]
lea rdi, [r9 + rcx*2]
test rdx, rdx
je 0x140038d14
movzx eax, r12w
mov rcx, rdx
rep stosw word [rdi], ax
mov word [r9 + r8*2], r12w
jmp 0x140038d31
mov word [rsp + 0x20], r12w
mov r9, rdx
movzx r8d, byte [rbp + 0x67]
mov rcx, rbx
call fcn.1400579c0
mov rax, rbx
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
movabs rcx, 0x7b08077dbdf1bdd
mov qword [rbp - 0x79], rcx
movabs rcx, 0xedb2645e90d82e86
mov qword [rbp - 0x71], rcx
movabs rcx, 0x3365a4cd6cb2782f
mov qword [rbp - 0x69], rcx
movabs rcx, 0x58876b8caaa81288
mov qword [rbp - 0x61], rcx
movabs rcx, 0x6a5f3d43752d5901
mov qword [rbp - 0x59], rcx
movabs rcx, 0x3b8a6f2a0000944a
mov qword [rbp - 0x51], rcx
movabs rcx, 0x6090f418b5b17a9e
mov qword [rbp + 7], rcx
movabs rcx, 0x83db162ae3f85ae3
mov qword [rbp + 0xf], rcx
movabs rcx, 0x900d1a10dc45848
mov qword [rbp + 0x17], rcx
movabs rcx, 0xef30ecbcdcd40a8
mov qword [rbp + 0x1f], rcx
movabs rcx, 0xb391d1410583560
mov qword [rbp + 0x27], rcx
movabs rcx, 0x3b8a6f046465f823
mov qword [rbp + 0x2f], rcx
movups xmm0, xmmword [rbp + 7]
movups xmm1, xmmword [rbp + 0x17]
movups xmm2, xmmword [rbp + 0x27]
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x39], xmm0
xorps xmm1, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x29], xmm1
xorps xmm2, xmmword [rbp - 0x59]
movdqa xmmword [rbp - 0x19], xmm2
lea r8, [rbp - 0x39]
mov edx, eax
lea rcx, [rbp + 7]
call fcn.1400398c0
lea rdx, [0x1400d32e8]
lea rcx, [rbp + 7]
call fcn.140084008
int3
movabs rcx, 0x7b08077dbdf1bdd
mov qword [rbp - 0x79], rcx
movabs rcx, 0xedb2645e90d82e86
mov qword [rbp - 0x71], rcx
movabs rcx, 0x3365a4cd6cb2782f
mov qword [rbp - 0x69], rcx
movabs rcx, 0x58876b8caaa81288
mov qword [rbp - 0x61], rcx
movabs rcx, 0x6a5f3d43752d5901
mov qword [rbp - 0x59], rcx
movabs rcx, 0x3b8a6f2a0000944a
mov qword [rbp - 0x51], rcx
movabs rcx, 0x53787dd93c921cf3
mov qword [rbp - 0x49], rcx
movabs rdx, 0x77f6c548e33aea0c
mov qword [rbp - 0x41], rdx
movabs rcx, 0x6090f418b5b17a9e
mov qword [rbp - 0x39], rcx
movabs rcx, 0xcdd71e37e3f85ae3
mov qword [rbp - 0x31], rcx
movabs rcx, 0x5d0cd6b91f921e40
mov qword [rbp - 0x29], rcx
movabs rcx, 0x62e21ee0cbde32ef
mov qword [rbp - 0x21], rcx
movabs rcx, 0x3c2b580412480b21
mov qword [rbp - 0x19], rcx
movabs rcx, 0x5aec4f7d6575f82b
mov qword [rbp - 0x11], rcx
movabs rcx, 0x53787df758f7709a
mov qword [rbp - 9], rcx
mov qword [rbp - 1], rdx
movups xmm0, xmmword [rbp - 0x39]
movups xmm1, xmmword [rbp - 0x29]
movups xmm2, xmmword [rbp - 0x19]
movups xmm3, xmmword [rbp - 9]
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x39], xmm0
xorps xmm1, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x29], xmm1
xorps xmm2, xmmword [rbp - 0x59]
movdqa xmmword [rbp - 0x19], xmm2
xorps xmm3, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 9], xmm3
lea r8, [rbp - 0x39]
mov edx, eax
lea rcx, [rbp + 7]
call fcn.1400398c0
lea rdx, [0x1400d32e8]
lea rcx, [rbp + 7]
call fcn.140084008
int3