Function at 0x180033f60
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x1800737f8]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x38]
lea r12d, [r8 + 0x530]
mov qword [rsp + 0x40], rcx
mov r15d, r8d
mov r13, rdx
cmp r8d, r12d
jae 0x180034309
mov r14, qword [rsp + 0x38]
lea r9, [0x180074164]
xor edi, edi
lea rsi, [0x180074168]
mov eax, 0xf5
lea r8, [0x180074170]
lea rdx, [0x18007416c]
cmp r15d, 0x21c
ja 0x180034115
je 0x180034103
cmp r15d, 0x16e
ja 0x1800340b3
je 0x1800340ab
mov eax, r15d
sub eax, 0xc8
je 0x18003409f
sub eax, 8
je 0x180034068
sub eax, 0x4b
je 0x18003403d
cmp eax, 8
jne 0x1800342f7
mov ecx, dword [rsp + 0x48]
mov eax, ecx
shr eax, 6
and eax, 1
shr ecx, 5
and ecx, 1
mov dword [0x1800741b8], eax
mov dword [0x1800741c0], ecx
jmp 0x1800342f2
test r14, r14
je 0x1800342f7
mov rax, qword [r13]
nop word [rax + rax]
cmp qword [r14 + 0x10], rax
jae 0x180034337
mov r14, qword [r14 + 0x18]
test r14, r14
jne 0x180034050
jmp 0x1800342f7
xor r8d, r8d
xor edx, edx
mov ecx, 0x128
call fcn.180038180
mov rcx, qword [0x180072008]
lea rdx, [rsp + 0x48]
mov qword [0x180074218], rax
mov dword [0x180074150], 0x2d0
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
jmp 0x1800342dd
mov rax, qword [rcx]
mov r14, qword [rax + 0x18]
jmp 0x1800342f7
mov rbx, rdi
jmp 0x1800342fc
mov eax, r15d
sub eax, 0x176
je 0x1800340ee
sub eax, 0x4b
je 0x180034309
cmp eax, 8
jne 0x1800342f7
mov rax, qword [0x180073a58]
movzx ecx, word [rax + 0xc]
shl cx, 4
or cx, word [rax + 0xa]
mov word [0x1800741c4], cx
jmp 0x1800342f2
mov dword [0x1800741b4], edi
mov dword [0x1800741bc], 0x10000
jmp 0x1800342f7
mov word [0x1800741c6], ax
mov dword [0x1800741c8], edi
jmp 0x1800342fc
cmp r15d, 0x368
ja 0x180034260
je 0x180034221
mov eax, r15d
sub eax, 0x26f
je 0x180034208
sub eax, 0x53
je 0x1800341f7
cmp eax, 0x53
jne 0x1800342f7
lea rax, [rsp + 0x38]
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.Console
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x30], 4
lea rbp, [0x1800741d4]
mov esi, edi
mov edi, 0x115
cmp edi, 0x115
je 0x1800341bc
cmp edi, 0xbe70
jne 0x1800341d0
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x20], rbp
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
jmp 0x1800341d0
mov r8d, esi
lea rdx, str._Z6lgammaDv8_f
lea rcx, [rsp + 0x50]
call fcn.18005fb90
add edi, 0xbd5b
cmp edi, 0x17ab6
jbe 0x180034185
inc esi
add rbp, 4
cmp esi, 0x10
jl 0x180034180
xor edi, edi
lea rsi, [0x180074168]
jmp 0x1800342dd
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [0x180074214], eax
jmp 0x1800342dd
mov dword [0x1800741cc], 0x32
mov dword [0x1800741d0], 4
jmp 0x1800342f7
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, str.FontSize
mov qword [rsp + 0x20], r9
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, str.PragmaType
mov qword [rsp + 0x20], rsi
jmp 0x1800342cc
mov eax, r15d
sub eax, 0x3bb
je 0x1800342b6
sub eax, 0x53
je 0x1800342ac
cmp eax, 0x53
jne 0x1800342f7
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, str.FaceName
mov qword [rsp + 0x20], r8
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1800342dd
mov dword [rsp + 0x30], 0x40
jmp 0x1800342f7
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rdx, str.DSP_R2_ASE
mov rcx, qword [rsp + 0x38]
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x18007416c]
lea r8, [0x180074170]
lea r9, [0x180074164]
mov rcx, qword [rsp + 0x40]
mov eax, 0xf5
add r15d, 0x53
cmp r15d, r12d
jb 0x180033fd3
mov rax, rbx
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1800604b0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rax, r14
jmp 0x18003430c