Function at 0x18001cdb0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
movaps xmmword [rsp + 0x460], xmm6
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rbp + 0x350], rax
mov r10, r8
mov qword [rbp - 0x80], r8
mov r11d, edx
mov dword [rsp + 0x60], edx
mov r13, rcx
mov qword [rbp - 0x70], rcx
movdqa xmm0, xmmword [0x18009bfb0]
movdqa xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
movdqa xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
movdqa xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov r14d, edx
lea r15d, [rdx - 0xc]
lea rcx, [0x180000000]
mov rdi, qword [rsp + 0x70]
mov r8d, dword [rsp + 0x48]
mov qword [rbp - 0x78], rdi
mov dword [rsp + 0x40], r8d
cmp edx, r15d
jbe 0x18001d1ed
mov rsi, qword [rbp - 0x70]
mov r12, qword [rbp - 0x70]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rax
nop dword [rax]
lea eax, [r14 - 0x51]
cmp eax, 0x30
ja case.default.0x18001ce96
movzx eax, byte [rcx + rax + 0x1d914]
mov ecx, dword [rcx + rax*4 + 0x1d8e0]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rdi, r13
mov qword [rbp - 0x78], r13
mov r8d, dword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
lea rcx, [0x180000000]
dec r14d
cmp r14d, r15d
ja 0x18001ce70
mov r10, qword [rbp - 0x80]
mov r11d, dword [rsp + 0x60]
jmp 0x18001d1f7
lea r8, [rdi + 0xa]
mov qword [rsp + 0x28], 0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 0x72]
call fcn.180053dd0
jmp case.0x18001ce96.83
mov rax, qword [r13]
test rax, rax
je case.0x18001ce96.86
mov rsi, qword [rax + 0x10]
jmp case.0x18001ce96.83
cmp qword [rdi + 0x1a], 0
jne case.0x18001ce96.83
mov ecx, 0x25
nop word [rax + rax]
mov eax, ecx
sub eax, 0x24
je case.0x18001ce96.86
cmp eax, 1
jne 0x18001cf25
mov byte [rsp + 0x58], 0
dec ecx
cmp ecx, 0x23
ja 0x18001cf10
jmp case.0x18001ce96.83
lea r8, [rsp + 0x78]
mov rdx, r12
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov ebx, eax
test eax, eax
je 0x18001cf7c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r9d, ebx
mov r8, r12
lea rdx, str.llvm.nvvm.shfl.sync.idx.i32
call fcn.18008e110
mov r8d, 0xffffffff
mov dword [rsp + 0x40], r8d
jmp 0x18001cea4
mov edi, 0x8b
cmp edi, 0x8b
je 0x18001cfb1
cmp edi, 0x1c3c
je 0x18001d0c7
cmp edi, 0x37ed
jne 0x18001d0d2
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x18001d0d2
mov dword [rsp + 0x40], 0xffffffff
xor ebx, ebx
xor edx, edx
mov r9d, 0x200
lea r8, [rbp + 0x150]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x18001d0d2
mov dword [rsp + 0x48], 0x80
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x150]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x18001d086
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
xor r8d, r8d
lea rdx, str.length___1
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x18001d06c
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
xor r8d, r8d
lea rdx, str._T__T__T__T_t
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x18001d086
mov edx, 0x2c
lea rcx, [rbp + 0xd0]
call sub.VCRUNTIME140.dll_strchr
cmp byte [rbp + 0xd0], 0
jne 0x18001d08f
inc ebx
mov edx, ebx
jmp 0x18001cfbd
test rax, rax
je 0x18001d097
mov byte [rax], 0
lea r9, [rbp + 0xd0]
lea r8, str.MSJET40.DLL
mov rax, qword [rbp - 0x80]
mov rdx, qword [rax]
mov rcx, r13
call fcn.18008e040
mov dword [rsp + 0x40], 0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, 0x1c3c
mov r14d, 0x80
add edi, 0x1bb1
cmp edi, 0x5313
jbe 0x18001cf81
mov rdi, qword [rbp - 0x78]
jmp case.0x18001ce96.83
mov r9, qword [r13 + 0xa0]
mov qword [rsp + 0x50], r9
mov r8d, dword [rsp + 0x40]
jmp 0x18001cea9
mov rax, qword [r13]
cmp qword [rax + 8], 0
je 0x18001d162
mov ebx, StrCmpICA
cmp ebx, 0x9a
je 0x18001d131
cmp ebx, 0x39c
jne 0x18001d150
mov rax, qword [r13]
mov qword [rax + 8], 0
jmp 0x18001d150
mov rax, qword [r13]
mov rcx, qword [rax + 8]
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [r13]
mov rcx, qword [rcx + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add ebx, 0x302
cmp ebx, 0x604
jbe 0x18001d113
mov rax, qword [r13]
mov dword [rax], 0
jmp case.0x18001ce96.83
mov rcx, qword [r13]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r13], 0
jmp case.0x18001ce96.83
mov r8d, 0xffffffff
mov dword [rsp + 0x40], r8d
lea r12, str.void_glRenderbufferStorageMultisample__s___d___s___d___d_
jmp 0x18001cea4
mov rax, qword [r13]
mov qword [rax + 0x10], 0
test rsi, rsi
je case.0x18001ce96.83
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x18001d1d0
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop dword [rax]
mov rsi, qword [rsi + 0x10]
test rsi, rsi
jne 0x18001d1b0
jmp case.0x18001ce96.83
mov r8d, dword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
jmp 0x18001ceb0
mov r9, qword [rsp + 0x70]
mov qword [rsp + 0x50], r9
lea edx, [r11 + 0xc]
mov dword [rsp + 0x44], edx
mov rbx, qword [rsp + 0x58]
cmp r11d, edx
jae case.0x18001d262.7
lea edx, [r11 - 0x51]
mov dword [rsp + 0x48], edx
lea r15, [0x1800951c0]
lea r12, str.1.2.3.4:1
lea r14, [0x180029790]
movsd xmm6, qword [0x18009bf80]
mov esi, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x44]
nop word [rax + rax]
cmp edx, 0x31
ja case.default.0x18001d262
movzx eax, byte [rcx + rdx + 0x1d978]
mov ecx, dword [rcx + rax*4 + 0x1d948]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r12
lea rax, str.tcp:__123
mov qword [rbp + 0x50], rax
lea rax, str.help_online_wiki
mov qword [rbp + 0x58], rax
lea rax, str.:8080
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], 0
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [0x1800a6a28], xmm0
movups xmm1, xmmword [rbp + 0x50]
movups xmmword [0x1800a6a38], xmm1
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [0x1800a6a48], xmm0
movdqa xmm1, xmmword [0x18009bfc0]
mov dword [rbp + 0x50], 1
mov dword [rbp + 0x54], 1
movups xmmword [0x1800a6a58], xmm1
movsd xmm0, qword [rbp + 0x50]
movsd qword [0x1800a6a68], xmm0
jmp case.0x18001d262.8
cmp dword [r10], 1
jne case.0x18001d262.8
mov ecx, 0xd8
mov eax, ecx
sub eax, 0xd7
je 0x18001d319
cmp eax, 1
jne 0x18001d320
mov qword [r9 + 0x1b0], r13
mov r9, qword [r9 + 0x1a8]
mov qword [r13 + 0xa0], r9
jmp 0x18001d320
mov qword [r13 + 0x98], r14
dec ecx
cmp ecx, 0xd6
ja 0x18001d2f4
mov qword [rsp + 0x50], r9
jmp case.0x18001d262.8
cmp qword [0x1800a6a70], 0
je 0x18001d43f
lea rsi, [0x1800a6a70]
nop dword [rax]
inc dword [0x1800a3e40]
mov qword [rsp + 0x58], 0x32
mov rax, qword [rsi]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x68]
mov ecx, 0xa0
call fcn.180062430
test eax, eax
je 0x18001d424
mov edi, 0x44
cmp edi, 0x44
je 0x18001d3bc
cmp edi, 0xdd0
je 0x18001d3b3
cmp edi, 0x1b5c
je case.0x18001d262.7
jmp 0x18001d412
lea rbx, str.false
jmp 0x18001d412
mov qword [rsp + 0x58], 0x32
mov rax, qword [rsi]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x68]
mov ecx, 0xa0
call fcn.180062430
movd xmm1, eax
cvtdq2pd xmm1, xmm1
xorps xmm2, xmm2
movq r8, xmm2
movq rdx, xmm1
lea rcx, str._f____f_n
call fcn.18008e9c0
add edi, 0xd8c
cmp edi, 0x28a4
jbe 0x18001d398
add rsi, 8
cmp qword [rsi], 0
jne 0x18001d350
mov esi, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
mov r11d, dword [rsp + 0x60]
xor ebx, ebx
mov qword [rsp + 0x58], rbx
jmp case.0x18001d262.8
cmp qword [0x1800a6a90], 0
je case.0x18001d262.8
lea rsi, [0x1800a6a90]
inc dword [0x1800a3e40]
mov qword [rsp + 0x68], 0x32
mov rax, qword [rsi]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x68]
mov ecx, 0xa0
call fcn.180062430
cmp eax, 0xffffffff
je 0x18001d535
mov edi, 0x100
nop dword [rax]
mov eax, edi
sub eax, 0x100
je 0x18001d4c4
cmp eax, 0x4d
je case.0x18001d262.7
jmp 0x18001d526
mov qword [rsp + 0x58], 0x32
mov rax, qword [rsi]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x68]
mov ecx, 0xa0
call fcn.180062430
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movaps xmm2, xmm6
movq r8, xmm6
movq rdx, xmm1
lea rcx, str._f____f_n
call fcn.18008e9c0
lea rbx, str.false
mov qword [rsp + 0x58], rbx
add edi, 0x4d
cmp edi, 0x19a
jb 0x18001d4b0
add rsi, 8
cmp qword [rsi], 0
jne 0x18001d460
mov esi, dword [rsp + 0x4c]
jmp 0x18001d89d
mov eax, dword [r10]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x30], 0xed
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x68]
xor edx, edx
xor ecx, ecx
call fcn.180068f60
jmp 0x18001d89d
mov dword [rsp + 0x58], r8d
mov rbx, qword [rsp + 0x58]
jmp case.0x18001d262.8
mov ebx, 0xce
mov eax, ebx
sub eax, 0xce
je 0x18001d5ab
cmp eax, 1
jne 0x18001d5cf
mov rbx, qword [rsp + 0x58]
jmp case.0x18001d262.7
movzx eax, word [rdi + 8]
mov word [rsp + 0x68], ax
lea r9, [rbp - 0x50]
mov r8d, 0xb2
lea rdx, [rsp + 0x68]
mov rcx, r10
call fcn.18002e0f0
mov byte [rsp + 0x58], al
inc ebx
cmp ebx, 0xd0
mov r10, qword [rbp - 0x80]
jb 0x18001d593
mov rbx, qword [rsp + 0x58]
mov edx, dword [rsp + 0x48]
mov r11d, dword [rsp + 0x60]
lea rax, str._12_15R___0_3R
mov qword [rbp + 0x40], rax
lea rax, str.Tile_id:_0
mov qword [rbp + 0x48], rax
xor ecx, ecx
mov qword [rbp + 0x50], rcx
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [0x1800a6a70], xmm0
movsd xmm1, qword [rbp + 0x50]
movsd qword [0x1800a6a80], xmm1
lea rax, str.99999
mov qword [rbp + 0x40], rax
lea rax, [0x1800996f8]
mov qword [rbp + 0x48], rax
lea rax, str.1.2.3
mov qword [rbp + 0x50], rax
lea rax, str.1.2.3.4:
mov qword [rbp + 0x58], rax
lea rax, str.ma_Project
mov qword [rbp + 0x60], rax
lea rax, str.blah:__12
mov qword [rbp + 0x68], rax
lea rax, str.:123x
mov qword [rbp + 0x70], rax
lea rax, str.vfacade::SkypeLocalVideo::StreamDefinitionList::StreamDefinitionList
mov qword [rbp + 0x78], rax
lea rax, str.0_miglia_orarie
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rcx
movaps xmm0, xmmword [rbp + 0x40]
movaps xmmword [0x1800a6a90], xmm0
movaps xmm1, xmmword [rbp + 0x50]
movaps xmmword [0x1800a6aa0], xmm1
movaps xmm0, xmmword [rbp + 0x60]
movaps xmmword [0x1800a6ab0], xmm0
movaps xmm1, xmmword [rbp + 0x70]
movaps xmmword [0x1800a6ac0], xmm1
movaps xmm0, xmmword [rbp + 0x80]
movaps xmmword [0x1800a6ad0], xmm0
jmp case.0x18001d262.8
cmp qword [0x1800a6a28], 0
je case.0x18001d262.8
lea r13, [0x1800a6a28]
lea r15, [0x1800a6a58]
nop word [rax + rax]
mov r12d, 0x19
cmp r12d, 0x19
je 0x18001d7a0
cmp r12d, 0x52d
jne 0x18001d85d
mov r14d, 0x96
mov eax, r14d
sub eax, 0x95
je 0x18001d72a
cmp eax, 1
jne 0x18001d78b
inc dword [0x1800a3e40]
jmp 0x18001d78b
cmp esi, dword [r15]
je 0x18001d78b
mov edi, 0x18
mov eax, edi
sub eax, 0x18
je 0x18001d759
sub eax, 0x34
je 0x18001d74b
cmp eax, 0x34
je case.0x18001d262.7
jmp 0x18001d780
lea rbx, str.false
mov qword [rsp + 0x58], rbx
jmp 0x18001d780
movd xmm2, dword [r15]
cvtdq2pd xmm2, xmm2
movd xmm1, esi
cvtdq2pd xmm1, xmm1
movq r8, xmm2
movq rdx, xmm1
lea rcx, str._f____f_n
call fcn.18008e9c0
add edi, 0x34
cmp edi, 0xb4
jb 0x18001d734
dec r14d
cmp r14d, 0x94
ja 0x18001d713
jmp 0x18001d85d
mov edi, 0x93
nop word [rax + rax]
mov eax, edi
sub eax, 0x93
je 0x18001d845
cmp eax, 1
jne 0x18001d84b
mov qword [rsp + 0x68], 0x32
mov rax, qword [r13]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x68]
mov ecx, 0xa0
call fcn.180062430
test eax, eax
jg 0x18001d84b
lea rbx, str.false
lea rcx, [rbp - 0x50]
call fcn.180002d80
mov rax, rbx
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.18008f350
mov rbx, qword [rsp + 0x4b8]
movaps xmm6, xmmword [rsp + 0x460]
add rsp, 0x470
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
inc dword [0x1800a3e40]
inc edi
cmp edi, 0x95
jb 0x18001d7b0
mov esi, dword [rsp + 0x4c]
add r12d, 0x514
cmp r12d, 0xa28
jbe 0x18001d6f6
add r15, 4
add r13, 8
cmp qword [r13], 0
jne 0x18001d6f0
mov r13, qword [rbp - 0x70]
lea r14, [0x180029790]
lea r15, [0x1800951c0]
lea r12, str.1.2.3.4:1
mov edx, dword [rsp + 0x48]
mov r11d, dword [rsp + 0x60]
mov eax, dword [rsp + 0x44]
inc r11d
mov dword [rsp + 0x60], r11d
inc edx
mov dword [rsp + 0x48], edx
cmp r11d, eax
jae case.0x18001d262.7
mov r8d, dword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
mov r10, qword [rbp - 0x80]
mov rdi, qword [rbp - 0x78]
lea rcx, [0x180000000]
jmp 0x18001d240