Function at 0x14001cc6c
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov rax, qword [0x140055010]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r15b, cl
call fcn.14001e444
test al, al
je 0x14001ccaf
mov eax, 0x80004005
jmp 0x14001d030
and qword [rbp - 0x39], 0
lea rbx, [0x14004ce38]
lea rdx, [rbp - 0x41]
mov qword [rbp - 0x41], rbx
mov cl, r15b
call fcn.14001c304
mov rax, qword [rbp - 0x41]
lea rcx, [0x14000a1bc]
cmp qword [rax + 8], rcx
lea rcx, [rbp - 0x41]
jne 0x14001cce8
or edx, 0xffffffff
call qword [rax + 0x18]
jmp 0x14001cceb
call qword [rax + 8]
and qword [rbp - 0x29], 0
lea rdi, [0x14004bec8]
mov qword [rbp - 0x31], rdi
mov dword [rbp - 0x21], 0x200
call fcn.140019704
lea rax, str.HKCUSoftwareBraveSoftwareUpdate_
test r15b, r15b
lea rdx, str.HKLMSoftwareBraveSoftwareUpdate_
cmove rdx, rax
lea rcx, [rbp - 0x31]
and qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0xf003f
call fcn.14000a438
mov esi, eax
test eax, eax
js 0x14001cff1
and qword [rsp + 0x28], 0
lea rdx, [0x14004f760]
mov rcx, qword [rbp - 0x29]
xor r9d, r9d
and qword [rsp + 0x20], 0
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14001cd6b
xor esi, esi
jmp 0x14001cff1
call fcn.1400014b8
mov rcx, rax
test rax, rax
je 0x14001d05f
mov rax, qword [rax]
call qword [rax + 0x18]
xorps xmm0, xmm0
lea rcx, [rbp + 0x27]
movups xmmword [rbp + 0x27], xmm0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x19], rbx
call qword [sym.imp.ole32.dll_CoCreateGuid]
or r14d, 0xffffffff
mov esi, eax
test eax, eax
js 0x14001cfce
lea rdx, [rbp + 0x27]
lea rcx, [rbp + 7]
call fcn.140004fbc
mov rdx, rax
lea rcx, [rbp - 0x19]
call fcn.140001858
mov rdx, qword [rbp + 7]
mov eax, r14d
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001cde2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp - 0x19]
lea rdx, [0x14004f760]
mov r8, rbx
lea rcx, [rbp - 0x31]
mov r9d, 1
call fcn.14000ac6c
mov esi, eax
test eax, eax
js 0x14001cfce
lea rcx, [0x140055e48]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc qword [0x140055f28]
lea rcx, [0x140055e48]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.140007674
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
mul rcx
lea rcx, [rbp - 0x31]
shr rdx, 0x17
lea r8d, [rdx + 0x49ef6f00]
lea rdx, str.uid_create_time
call fcn.14000ac2c
and dword [rbp - 0x49], 0
lea r8, [rbp - 0x49]
lea rdx, str.uid_num_rotations
lea rcx, [rbp - 0x31]
call fcn.14000a8d0
mov r8d, dword [rbp - 0x49]
lea rdx, str.uid_num_rotations
inc r8d
lea rcx, [rbp - 0x31]
mov dword [rbp - 0x49], r8d
call fcn.14000ac2c
and qword [rbp - 1], 0
lea rcx, [rbp - 0x11]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
call fcn.14001bf34
mov rdi, qword [rbp - 0x11]
test eax, eax
js 0x14001cf4e
cmp rdi, qword [rbp - 9]
je 0x14001cf4e
mov rax, qword [rbp - 9]
movabs rcx, 0x1fffffffffffffff
sub rax, rdi
sar rax, 3
cmp rax, rcx
ja 0x14001d06a
lea r14, [rax*8]
cmp r14, 0x1000
jb 0x14001cef5
mov rcx, r14
call fcn.140006244
mov rsi, rax
jmp 0x14001cf06
test r14, r14
je 0x14001cf04
mov rcx, r14
call fcn.140038700
jmp 0x14001cef0
xor esi, esi
lea rax, [rsi + r14]
mov qword [rbp + 0xf], rsi
mov qword [rbp + 0x1f], rax
mov r14, rdi
mov rcx, qword [r14]
sub rcx, 0x18
call fcn.140001a9c
add rax, 0x18
add r14, 8
mov qword [rsi], rax
add rsi, 8
cmp r14, qword [rbp - 9]
jne 0x14001cf15
lea rdx, [rbp + 0xf]
mov qword [rbp + 0x17], rsi
mov cl, r15b
call fcn.14001c4a8
mov esi, eax
or r14d, 0xffffffff
jmp 0x14001cf53
mov esi, 1
test rdi, rdi
je 0x14001cfc7
cmp rdi, qword [rbp - 9]
je 0x14001cf8f
mov rdx, qword [rdi]
mov eax, r14d
sub rdx, 0x18
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001cf7d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rdi, 8
cmp rdi, qword [rbp - 9]
jne 0x14001cf5e
mov rbx, qword [rbp - 0x19]
mov rdi, qword [rbp - 0x11]
mov rdx, qword [rbp - 1]
mov rax, rdi
sub rdx, rdi
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x14001cfbf
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d059
mov rcx, rdi
call fcn.140020968
lea rdi, [0x14004bec8]
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001cfea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rbx, [0x14004ce38]
mov rcx, qword [rbp - 0x29]
mov qword [rbp - 0x31], rdi
test rcx, rcx
je 0x14001d010
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
and qword [rbp - 0x29], 0
mov dword [rbp - 0x21], 0x200
mov rax, qword [rbp - 0x41]
lea rcx, [rbp - 0x41]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x41], rbx
test rcx, rcx
je 0x14001d02e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140020490
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400268b4
int3
mov ecx, 0x80004005
call fcn.140001834
int3
call fcn.14000417c
int3