Function at 0x1400013be
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1178
call fcn.1400fefd0
sub rsp, rax
mov rdi, rdx
mov qword [rsp + 0xa0], rcx
lea r12, [rdx + 0x10]
lea rax, [rdx + 0x41]
mov qword [rsp + 0x110], rax
lea rax, [rdx + 0x28]
mov qword [rsp + 0x108], rax
lea r14, [rsp + 0x170]
lea r15, [rsp + 0x4c]
mov qword [rsp + 0xa8], r12
mov rcx, r14
mov rdx, r12
call fcn.140006ed4
cmp byte [rsp + 0x1a0], 0xc
jne 0x1400017be
mov rcx, r14
call fcn.1400058fc
mov rsi, qword [rdi]
test rsi, rsi
je 0x1400017fb
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x118], r13
mov r13d, dword [rdi + 8]
mov ebx, 0x800
mov dword [rsp + 0x4c], ebx
mov r8d, 0x1000
mov rcx, r14
xor edx, edx
call fcn.140100240
mov dword [rsp + 0x50], ebx
and dword [rsp + 0x5c], 0
mov ecx, 0x800
call fcn.1400d48da
mov rbp, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rdx
and qword [rsp + 0x70], 0
mov rbx, qword [rsi]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbp
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
mov rcx, rbx
mov edx, r13d
mov r8, r14
mov r9, r15
call qword [sym.imp.advapi32.dll_RegEnumValueW]
cmp eax, 0xea
jne 0x1400014e4
inc dword [rsp + 0x4c]
mov edx, dword [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.1400d3f48
mov rbp, qword [rsp + 0x60]
jmp 0x140001493
mov esi, eax
test eax, eax
je 0x140001500
cmp esi, 0x103
jne 0x140001576
mov bl, 0xd
mov r12b, 1
jmp 0x1400015ad
mov r8d, dword [rsp + 0x4c]
cmp r8, 0x801
jae 0x140001824
lea rcx, [rsp + 0xc0]
mov rdx, r14
call fcn.140033bd0
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
je 0x140001585
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
mov eax, dword [rsp + 0x50]
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0x5c]
cmp eax, 0xc
jae 0x140001596
mov r8, qword [rsp + 0x70]
mov qword [rsp + 0x90], r8
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x80], xmm0
mov r9, rcx
mov r8, rdx
jmp 0x140001620
shl rsi, 0x20
or rsi, 2
mov bl, 0xc
xor r12d, r12d
jmp 0x1400015ad
mov bl, 0xc
xor r12d, r12d
movabs rsi, 0xd00000002
jmp 0x1400015ad
mov rcx, rsi
call fcn.1400aca98
mov bl, 0xc
xor r12d, r12d
movabs rsi, 0xde00000002
mov rdx, qword [rsp + 0x68]
mov rcx, rbp
call fcn.1400aca98
mov al, 0xc
test r12b, r12b
je 0x140001608
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xf0], rax
movaps xmm0, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0xe0], xmm0
cmp bl, 0xd
mov r12, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xb8]
mov r9, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0x78]
jne 0x14000164e
jmp 0x1400017f7
mov r12, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xb8]
mov r9, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0x78]
inc r13d
mov dword [rdi + 8], r13d
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0xf0], rcx
movaps xmm0, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0xe0], xmm0
mov ebx, eax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x130], rax
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x120], xmm0
mov ecx, dword [rsp + 0xd9]
mov edx, dword [rsp + 0xdc]
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x57], edx
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x140], r8
mov qword [rsp + 0x148], r9
lea rdx, [rsp + 0x169]
mov qword [rdx - 9], rax
movups xmmword [rdx - 0x19], xmm0
mov byte [rsp + 0x168], bl
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x57]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
cmp bl, 0xc
mov qword [rsp + 0xb8], r8
mov qword [rsp + 0xb0], r9
jne 0x1400016f4
lea rcx, [rsp + 0x138]
call fcn.140005b1b
mov rsi, qword [rsp + 0x100]
mov r13, qword [rsp + 0x118]
jmp 0x140001732
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x180], rax
movaps xmm0, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x170], xmm0
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x57]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x63], ecx
mov r13, r8
mov rbp, r9
mov qword [rsp + 0x100], rsi
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0xd0], rax
movaps xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0xc0], xmm0
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x63]
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x83], ecx
mov rcx, r12
call fcn.140005985
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], r13
mov qword [rdi + 0x20], rbp
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x108]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rcx], xmm0
mov byte [rdi + 0x40], bl
mov eax, dword [rsp + 0x80]
mov ecx, dword [rsp + 0x83]
mov rdx, qword [rsp + 0x110]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
jmp 0x140001413
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0xa0]
mov qword [rcx + 0x30], rax
movups xmm0, xmmword [rsp + 0x170]
movups xmm1, xmmword [rsp + 0x180]
movups xmm2, xmmword [rsp + 0x190]
movups xmmword [rcx + 0x20], xmm2
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
jmp 0x14000180f
and qword [rdi], 0
add rdi, 0x48
mov rcx, qword [rsp + 0xa0]
mov rdx, rdi
call fcn.140006ed4
nop
add rsp, 0x1178
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rax, str.Z:WorkspaceDevelopTools.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinreg_0.52.0_src_reg_key.rs
mov edx, 0x800
mov rcx, r8
mov r8, rax
call fcn.14010dc40
ud2