Function at 0x180014220
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov qword [rbp - 0x41], 0xfffffffffffffffe
mov qword [rsp + 0x130], rbx
mov rax, qword [0x1801610c0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, rdx
mov r14, rcx
mov qword [rbp - 0x39], rcx
xor esi, esi
mov dword [rbp - 0x7d], esi
lea rax, vtable.Nvidia::Logging::ILogManager.0
mov qword [rcx], rax
lea rax, vtable.Nvidia::Logging::IGenericLogManager_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___.0
mov qword [rcx], rax
lea rax, vtable.Nvidia::Logging::FileLogManager.0
mov qword [rcx], rax
mov qword [rcx + 8], 0xffffffffffffffff
lea rdi, [rcx + 0x10]
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 7
mov word [rdi], si
mov qword [rcx + 0x40], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f], xmm0
movdqa xmm1, xmmword [0x18011d2a0]
movdqu xmmword [rbp + 0x1f], xmm1
mov word [rbp + 0xf], si
lea rdx, str.PathPrefix
lea rcx, [rbp + 0xf]
call fcn.180038970
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x18011d2a0]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], si
mov dword [rbp - 0x7d], 1
lea r8, [rbp - 0x11]
lea rdx, [rbp + 0xf]
mov rcx, r15
call fcn.180012880
mov ebx, eax
test eax, eax
jne 0x1800145e4
lea rax, [rbp - 0x11]
cmp rdi, rax
je 0x180014333
mov rcx, rdi
call fcn.1800389f0
movups xmm0, xmmword [rbp - 0x11]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 1]
movups xmmword [rdi + 0x10], xmm1
movdqa xmm0, xmmword [0x18011d2a0]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], si
mov eax, 1
and eax, 0xfffffffe
mov dword [rbp - 0x7d], eax
lea rcx, [rbp - 0x11]
call fcn.1800389f0
nop
lea rcx, [rbp + 0xf]
call fcn.1800389f0
mov rcx, rdi
call fcn.180017d80
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x18011d2a0]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], si
lea rdx, str.AppendProcessNameToPathPrefix
lea rcx, [rbp - 0x31]
call fcn.180038970
nop
mov dword [rsp + 0x38], 4
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
mov rcx, qword [r15]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
jne 0x180014622
cmp dword [rsp + 0x34], 4
jne 0x18001461d
lea rcx, [rbp - 0x31]
call fcn.1800389f0
cmp dword [rsp + 0x30], ebx
je 0x180014423
lea r8d, [rbx + 1]
lea rdx, [0x180117f4c]
mov rcx, rdi
call fcn.180029ad0
lea rcx, [rbp + 0xf]
call fcn.180017df0
nop
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 8
cmovae rdx, qword [rbp + 0xf]
mov r8, qword [rbp + 0x1f]
mov rcx, rdi
call fcn.180029ad0
nop
lea rcx, [rbp + 0xf]
call fcn.1800389f0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x18011d2a0]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], si
lea rdx, [0x180117f50]
lea rcx, [rbp - 0x31]
call fcn.180038970
nop
mov dword [rsp + 0x30], 4
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
mov rcx, qword [r15]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
jne 0x180014660
cmp dword [rsp + 0x34], 4
jne 0x18001465b
mov eax, dword [rsp + 0x38]
mov dword [r14 + 0x30], eax
lea rcx, [rbp - 0x31]
call fcn.1800389f0
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x18011d2a0]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], si
lea rdx, str.MaxFileSize
lea rcx, [rbp - 0x11]
call fcn.180038970
nop
mov dword [rsp + 0x30], 4
lea rdx, [rbp - 0x11]
cmp qword [rbp + 7], 8
cmovae rdx, qword [rbp - 0x11]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
mov rcx, qword [r15]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
jne 0x18001469e
cmp dword [rsp + 0x34], 4
jne 0x180014699
mov eax, dword [rsp + 0x38]
mov dword [r14 + 0x34], eax
lea rcx, [rbp - 0x11]
call fcn.1800389f0
mov dword [rbp - 0x79], esi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x18011d2a0]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], si
lea rdx, str.WriteThrough
lea rcx, [rbp - 0x31]
call fcn.180038970
nop
mov dword [rsp + 0x30], 4
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x79]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
mov rcx, qword [r15]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
nop
lea rcx, [rbp - 0x31]
call fcn.1800389f0
cmp dword [rbp - 0x79], ebx
sete sil
mov dword [r14 + 0x38], esi
mov rcx, r14
call fcn.180018020
nop
mov rax, r14
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1800916f0
mov rbx, qword [rsp + 0x130]
add rsp, 0xf0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
lea rdx, str.RegQueryValueEx
lea rcx, [rbp - 0x31]
call fcn.180037150
nop
mov r8d, ebx
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x71]
call fcn.180013dc0
mov r8, rax
lea rcx, [rbp - 0x59]
call fcn.180013020
mov rdx, rax
mov rcx, r8
call fcn.180012ff0
nop
mov ebx, 0x3bc6
lea rdx, str.RegQueryValueEx
lea rcx, [rbp + 0xf]
call fcn.180037150
nop
mov r8d, ebx
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x59]
call fcn.180013dc0
mov r8, rax
lea rcx, [rbp - 0x71]
call fcn.180013020
mov rdx, rax
mov rcx, r8
call fcn.180012ff0
nop
mov ebx, 0x3bc6
lea rdx, str.RegQueryValueEx
lea rcx, [rbp + 0xf]
call fcn.180037150
nop
mov r8d, ebx
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x59]
call fcn.180013dc0
mov r8, rax
lea rcx, [rbp - 0x71]
call fcn.180013020
mov rdx, rax
mov rcx, r8
call fcn.180012ff0
nop
mov ebx, 0x3bc6
lea rdx, str.RegQueryValueEx
lea rcx, [rbp + 0xf]
call fcn.180037150
nop
mov r8d, ebx
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x59]
call fcn.180013dc0
mov r8, rax
lea rcx, [rbp - 0x71]
call fcn.180013020
mov rdx, rax
mov rcx, r8
call fcn.180012ff0
int3