Function at 0x180054700
Capabilities:
Query or enumerate registry value

Disassembly:
push r13
mov eax, 0x1020
call fcn.18006f400
sub rsp, rax
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x1030], rbx
mov qword [rsp + 0x1038], rsi
mov qword [rsp + 0x1040], rdi
mov qword [rsp + 0x1048], r12
mov rax, qword [0x1800a7b78]
xor rax, rsp
mov qword [rsp + 0x1010], rax
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
dec rcx
cmp rcx, 0x7d0
jae 0x180054998
mov dword [rsp + 0x50], 0x7d0
lea rcx, [rsp + 0x70]
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rcx], al
inc rdx
inc rcx
test al, al
jne 0x180054780
mov edx, 0x3f
lea rcx, [rsp + 0x70]
call fcn.180058724
test rax, rax
je 0x1800547aa
xor eax, eax
jmp 0x180054998
mov rcx, qword [0x1800a9550]
test rcx, rcx
jne 0x180054804
mov qword [rsp + 0x40], rcx
lea rax, [0x1800a9550]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareDownloadManager_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x1800547fd
xor eax, eax
jmp 0x180054998
mov rcx, qword [0x1800a9550]
mov dword [rsp + 0x50], 0x7d0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x840]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Extensions
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x180054841
xor eax, eax
jmp 0x180054998
mov r13b, 1
nop word [rax + rax]
mov edx, 0x2e
lea rcx, [rsp + 0x70]
call fcn.180059df0
mov rsi, rax
test rax, rax
je 0x180054998
inc rsi
lea rdx, [0x18008cf60]
mov rcx, rsi
call fcn.18005b390
test rax, rax
je 0x180054889
xor eax, eax
jmp 0x180054998
lea rbx, [rsp + 0x840]
mov qword [rsp + 0x58], rbx
xor r12d, r12d
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rsi
repne scasb al, byte [rdi]
not rcx
lea rdi, [rcx - 1]
nop dword [rax + rax]
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call fcn.18005b98c
test eax, eax
jne 0x1800548d6
movzx eax, byte [rdi + rbx]
cmp al, 0x20
je 0x1800548ce
test al, al
jne 0x1800548d6
mov r12d, 1
jmp 0x180054939
lea rdx, [0x18008b9b8]
mov rcx, rbx
call fcn.180059e18
test rax, rax
je 0x18005490e
lea rcx, [rdi + rbx]
cmp rcx, rax
jbe 0x18005490e
sub rax, rbx
mov r8, rax
mov rdx, rsi
mov rcx, rbx
call fcn.18005b98c
test eax, eax
jne 0x18005490e
lea r12d, [rax + 1]
jmp 0x180054939
lea rdx, [0x180087720]
mov rcx, rbx
call fcn.180059e18
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x180054939
add rbx, 1
mov qword [rsp + 0x58], rbx
jne 0x1800548b0
test r13b, r13b
je 0x180054991
test r12d, r12d
jne 0x180054991
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rsi
repne scasb al, byte [rdi]
not rcx
dec rcx
cmp rcx, 4
jae 0x180054991
mov bl, 1
mov rdi, rsi
mov qword [rsp + 0x60], rsi
movzx eax, byte [rdi]
test al, al
je 0x180054981
movsx ecx, al
call fcn.18005b628
test eax, eax
je 0x180054991
inc rdi
mov qword [rsp + 0x60], rdi
jmp 0x180054964
test bl, bl
je 0x180054991
mov byte [rsi - 1], 0
xor r13b, r13b
jmp 0x180054850
mov eax, r12d
jmp 0x180054998
mov rcx, qword [rsp + 0x1010]
xor rcx, rsp
call fcn.1800590c0
lea r11, [rsp + 0x1020]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r12, qword [r11 + 0x28]
mov rsp, r11
pop r13
ret