Function at 0x140075460
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov r15, rdx
mov r14, rcx
call fcn.14000bfcc
mov rcx, rax
test rax, rax
je 0x140075795
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x39], rax
lea r12, [0x1404166b4]
mov rdx, r12
lea rcx, [rbp - 0x39]
call fcn.140006ea0
mov rdi, 0xffffffffffffffff
test al, al
jne 0x1400754e0
mov rax, rdi
inc rax
cmp byte [r12 + rax], 0
jne 0x1400754c6
mov r8d, eax
mov rdx, r12
lea rcx, [rbp - 0x39]
call fcn.140007ea0
nop
mov edx, WSACleanup
lea rcx, [rbp - 0x19]
call fcn.1400177a0
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1400754fb
mov rbx, qword [rax]
call fcn.14000bfcc
mov rcx, rax
test rax, rax
je 0x1400757a0
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x31], rax
mov rdx, rbx
lea rcx, [rbp - 0x31]
call fcn.140007020
xor esi, esi
test al, al
jne 0x140075559
test rbx, rbx
jne 0x140075535
mov eax, esi
jmp 0x140075549
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], si
jne 0x140075540
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x31]
call fcn.140008250
nop
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x140075599
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075594
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400757ab
call fcn.140133e68
mov qword [rbp - 9], rsi
mov qword [rbp - 1], 7
mov word [rbp - 0x19], si
mov dword [rbp + 0x7f], esi
mov dword [rbp - 0x25], 4
mov dword [rbp - 0x29], 4
mov edx, 0xa4
lea rcx, [rbp + 7]
call fcn.1400177a0
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1400755d5
mov rbx, qword [rax]
call fcn.14000bfcc
mov rcx, rax
test rax, rax
je 0x1400757b1
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x21], rax
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140007020
test al, al
jne 0x14007562c
test rbx, rbx
je 0x14007561c
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140075610
mov esi, eax
mov r8d, esi
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140008250
nop
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x25]
mov rbx, qword [rbp - 0x21]
mov r8, rbx
mov rdx, qword [rbp - 0x31]
mov rcx, 0xffffffff80000002
call qword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
sete sil
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14007567a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x1400756ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400756b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007578f
call fcn.140133e68
test sil, sil
je 0x14007570a
mov eax, dword [rbp + 0x7f]
test eax, eax
je 0x1400756eb
sub eax, 1
je 0x1400756eb
sub eax, 1
jne 0x1400756eb
lea rdx, [0x1404166b8]
mov rax, rdi
nop word [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x1400756e0
jmp 0x1400756fd
mov rax, rdi
nop
inc rax
cmp byte [r12 + rax], 0
jne 0x1400756f0
mov rdx, r12
mov r8d, eax
lea rcx, [rbp - 0x39]
call fcn.140007ea0
nop
mov rdx, qword [rbp - 0x31]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140075728
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x39]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140075746
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140075763
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [r15]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14007577d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
add rsp, 0x90
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1401462a8
nop
mov ecx, 0x80004005
call fcn.14000c3ac
nop
mov ecx, 0x80004005
call fcn.14000c3ac
nop
call fcn.1401462a8
nop
mov ecx, 0x80004005
call fcn.14000c3ac
int3