Function at 0x1800028b0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov qword [rsp + 0xc0], rbx
mov r13, rcx
xor r15d, r15d
mov dword [rbp - 0x50], r15d
lea rcx, [rbp - 0x30]
call fcn.1800011a0
nop
call fcn.180002c40
mov rcx, rax
test rax, rax
je 0x180002bfb
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp + 0x58], rdi
call fcn.180002c40
mov rcx, rax
test rax, rax
je 0x180002c06
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x48], rbx
mov dword [rbp - 0x50], 2
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x1000
or eax, ecx
jge 0x180002955
mov edx, 0x1000
lea rcx, [rbp - 0x48]
call fcn.180004d30
mov rbx, qword [rbp - 0x48]
mov dword [rbp + 0x48], 0x2000
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x50]
xor r8d, r8d
lea rdx, str.InstallPath
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x18000299f
mov eax, dword [rbp + 0x50]
dec eax
cmp eax, 1
ja 0x18000299f
test rbx, rbx
je 0x18000299f
cmp dword [rbp + 0x48], 0
jne 0x18000299f
mov word [rbx], r15w
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.18000e100
test eax, eax
js 0x180002bf0
cmp eax, dword [rbx - 0xc]
jg 0x180002bf0
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r15w
lea rsi, [rbx - 0x18]
lea r14, [rdi - 0x18]
mov rdi, 0xffffffffffffffff
cmp rsi, r14
je 0x180002a29
cmp dword [r14 + 0x10], 0
jl 0x180002a18
mov rax, qword [r14]
cmp qword [rsi], rax
jne 0x180002a18
mov rcx, rsi
call fcn.180001750
mov rbx, rax
mov ecx, edi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x180002a0e
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x58], rax
jmp 0x180002a29
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x58]
call fcn.1800056c0
nop
mov eax, edi
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x180002a41
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
mov rbx, qword [rbp + 0x58]
mov esi, dword [rbx - 0x10]
test esi, esi
jne 0x180002add
mov rcx, r13
call fcn.1800023b0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180002a73
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x28]
lea rax, vtable.CCfgOPBaseT_int_.0
test rcx, rcx
mov qword [rbp - 0x30], rax
je 0x180002a91
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x28], r15
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov dword [rbp - 0x20], r15d
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x180002ab0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x180002abf
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, r13
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea eax, [rsi - 1]
test eax, eax
js 0x180002be5
cmp eax, esi
jg 0x180002be5
movsxd rax, esi
cmp word [rbx + rax*2 - 2], 0x5c
je 0x180002bb7
lea r15, [0x1800218cc]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180002b10
mov r12, r15
sub r12, rbx
sar r12, 1
test eax, eax
js 0x180002c11
movsxd rdx, eax
mov rcx, r15
call fcn.18000e100
mov rdx, rax
mov qword [rbp - 0x40], rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, esi
jl 0x180002c1c
lea r14d, [rsi + rax]
test r14d, r14d
js 0x180002c27
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x180002b80
mov edx, r14d
lea rcx, [rbp + 0x58]
call fcn.180004d30
mov rbx, qword [rbp + 0x58]
mov rdx, qword [rbp - 0x40]
cmp r12, rsi
ja 0x180002b89
lea r15, [rbx + r12*2]
movsxd rdx, edx
add rdx, rdx
lea rcx, [rbx + rsi*2]
mov r9, rdx
mov r8, r15
call fcn.180006110
cmp r14d, dword [rbx - 0xc]
jg 0x180002c32
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r15d, r15d
mov word [rbx + rax*2], r15w
lea rcx, [rbx - 0x18]
call fcn.180001750
add rax, 0x18
mov qword [r13], rax
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x180002a73
mov rcx, qword [rbx - 0x18]
lea rdx, [rbx - 0x18]
jmp 0x180002a6c
mov ecx, 0x80070057
call fcn.1800016f0
nop
mov ecx, 0x80070057
call fcn.1800016f0
nop
mov ecx, 0x80004005
call fcn.1800016f0
nop
mov ecx, 0x80004005
call fcn.1800016f0
nop
mov ecx, 0x80070057
call fcn.1800016f0
int3
mov ecx, 0x80070057
call fcn.1800016f0
int3
mov ecx, 0x80070057
call fcn.1800016f0
int3
mov ecx, 0x80070057
call fcn.1800016f0
int3