Function at 0x14001bcf0
Capabilities:
Query or enumerate registry value

Disassembly:
jmp 0x14001bcf0
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x58
cmp qword [rsp + 0x78], 0
je 0x14001bd1a
mov dword [rsp + 0x3c], 1
jmp 0x14001bd22
mov dword [rsp + 0x3c], 0
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jne 0x14001bd6c
lea rax, str.__atl_condVal
mov qword [rsp + 0x28], rax
lea rax, [0x140214388]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x172a
lea rdx, [0x140215fa0]
mov ecx, 2
call qword [sym.imp.MSVCR120D.dll__CrtDbgReportW]
cmp eax, 1
jne 0x14001bd6c
int3
xor eax, eax
test eax, eax
jne 0x14001bd2a
cmp dword [rsp + 0x40], 0
jne 0x14001bd83
mov ecx, 0x80004005
call fcn.140005b28
xor eax, eax
test eax, eax
jne 0x14001bd08
mov dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x30]
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0
jne 0x14001be1f
cmp dword [rsp + 0x30], 1
je 0x14001be1f
cmp dword [rsp + 0x30], 7
je 0x14001be1f
cmp dword [rsp + 0x30], 2
je 0x14001be1f
lea rax, str._lRes_0L____dwType____1______dwType____7______dwType____2___
mov qword [rsp + 0x28], rax
lea rax, [0x140214388]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x172e
lea rdx, [0x140215fa0]
mov ecx, 2
call qword [sym.imp.MSVCR120D.dll__CrtDbgReportW]
cmp eax, 1
jne 0x14001be1f
int3
cmp dword [rsp + 0x38], 0
jne 0x14001bf98
cmp qword [rsp + 0x68], 0
je 0x14001bf98
mov rax, qword [rsp + 0x78]
cmp dword [rax], 0
jbe 0x14001bf84
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jbe 0x14001bf67
cmp dword [rsp + 0x34], 2
jbe 0x14001be6a
cmp dword [rsp + 0x34], 7
je 0x14001bec5
jmp 0x14001bf67
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
xor edx, edx
mov ecx, 2
div rcx
mov rax, rdx
test rax, rax
jne 0x14001bea2
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
xor edx, edx
mov ecx, 2
div rcx
mov rcx, qword [rsp + 0x68]
movzx eax, word [rcx + rax*2 - 2]
test eax, eax
je 0x14001bec0
mov eax, 2
imul rax, rax, 0
xor ecx, ecx
mov rdx, qword [rsp + 0x68]
mov word [rdx + rax], cx
mov eax, recv
jmp 0x14001bf9c
jmp 0x14001bf82
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
xor edx, edx
mov ecx, 2
div rcx
mov rax, rdx
test rax, rax
jne 0x14001bf4a
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
xor edx, edx
mov ecx, 2
div rcx
cmp rax, 1
jb 0x14001bf4a
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
xor edx, edx
mov ecx, 2
div rcx
mov rcx, qword [rsp + 0x68]
movzx eax, word [rcx + rax*2 - 2]
test eax, eax
jne 0x14001bf4a
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
xor edx, edx
mov ecx, 2
div rcx
cmp rax, 1
jbe 0x14001bf65
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
xor edx, edx
mov ecx, 2
div rcx
mov rcx, qword [rsp + 0x68]
movzx eax, word [rcx + rax*2 - 4]
test eax, eax
je 0x14001bf65
mov eax, 2
imul rax, rax, 0
xor ecx, ecx
mov rdx, qword [rsp + 0x68]
mov word [rdx + rax], cx
mov eax, recv
jmp 0x14001bf9c
jmp 0x14001bf82
mov eax, 2
imul rax, rax, 0
xor ecx, ecx
mov rdx, qword [rsp + 0x68]
mov word [rdx + rax], cx
mov eax, recv
jmp 0x14001bf9c
jmp 0x14001bf98
mov eax, 2
imul rax, rax, 0
xor ecx, ecx
mov rdx, qword [rsp + 0x68]
mov word [rdx + rax], cx
mov eax, dword [rsp + 0x38]
add rsp, 0x58
ret