Function at 0x180006500
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov r15, rcx
xor r12d, r12d
mov dword [rbp - 0x48], r12d
lea rcx, [rbp - 0x30]
call fcn.1800011a0
nop
call fcn.1800029b0
mov rcx, rax
test rax, rax
je 0x180006833
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp + 0x60], rdi
call fcn.1800029b0
mov rcx, rax
test rax, rax
je 0x18000683e
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x48], 2
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x1000
or eax, ecx
jge 0x18000659f
mov edx, 0x1000
lea rcx, [rbp - 0x40]
call fcn.180004250
mov rbx, qword [rbp - 0x40]
mov dword [rbp + 0x50], 0x2000
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x58]
xor r8d, r8d
lea rdx, str.InstallPath
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1800065e9
mov eax, dword [rbp + 0x58]
dec eax
cmp eax, 1
ja 0x1800065e9
test rbx, rbx
je 0x1800065e9
cmp dword [rbp + 0x50], 0
jne 0x1800065e9
mov word [rbx], r12w
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.18000d370
test eax, eax
js 0x180006828
cmp eax, dword [rbx - 0xc]
jg 0x180006828
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r12w
lea rsi, [rbx - 0x18]
lea r14, [rdi - 0x18]
mov rdi, 0xffffffffffffffff
cmp rsi, r14
je 0x180006673
cmp dword [r14 + 0x10], 0
jl 0x180006662
mov rax, qword [r14]
cmp qword [rsi], rax
jne 0x180006662
mov rcx, rsi
call fcn.180001660
mov rbx, rax
mov ecx, edi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x180006658
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x60], rax
jmp 0x180006673
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x60]
call fcn.180004be0
nop
mov eax, edi
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x18000668b
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
mov rbx, qword [rbp + 0x60]
mov esi, dword [rbx - 0x10]
test esi, esi
jne 0x18000671d
mov rcx, r15
call fcn.1800061a0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800066bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp - 0x28]
lea rax, vtable.CCfgOPBaseT_int_.0
test rcx, rcx
mov qword [rbp - 0x30], rax
je 0x1800066db
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x28], r12
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov dword [rbp - 0x20], r12d
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1800066fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x180006709
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, r15
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea eax, [rsi - 1]
test eax, eax
js 0x18000681d
cmp eax, esi
jg 0x18000681d
movsxd rax, esi
cmp word [rbx + rax*2 - 2], 0x5c
je 0x1800067f0
lea r15, [0x1800228bc]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [r15 + rax*2], 0
jne 0x180006750
mov r12, r15
sub r12, rbx
sar r12, 1
test eax, eax
js 0x180006849
movsxd rdx, eax
mov rcx, r15
call fcn.18000d370
mov r13, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, esi
jl 0x180006854
lea r14d, [rsi + rax]
test r14d, r14d
js 0x18000685f
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x1800067b8
mov edx, r14d
lea rcx, [rbp + 0x60]
call fcn.180004250
mov rbx, qword [rbp + 0x60]
cmp r12, rsi
ja 0x1800067c1
lea r15, [rbx + r12*2]
movsxd rdx, r13d
lea rcx, [rbx + rsi*2]
mov r9d, r13d
mov r8, r15
call fcn.180005b70
cmp r14d, dword [rbx - 0xc]
jg 0x18000686a
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r12d, r12d
mov word [rbx + rax*2], r12w
mov r15, qword [rbp + 0x48]
lea rcx, [rbx - 0x18]
call fcn.180001660
add rax, 0x18
mov qword [r15], rax
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1800066bd
mov rcx, qword [rbx - 0x18]
lea rdx, [rbx - 0x18]
jmp 0x1800066b6
mov ecx, 0x80070057
call fcn.180001600
nop
mov ecx, 0x80070057
call fcn.180001600
nop
mov ecx, 0x80004005
call fcn.180001600
nop
mov ecx, 0x80004005
call fcn.180001600
nop
mov ecx, 0x80070057
call fcn.180001600
int3
mov ecx, 0x80070057
call fcn.180001600
int3
mov ecx, 0x80070057
call fcn.180001600
int3
mov ecx, 0x80070057
call fcn.180001600
int3