Function at 0x140009c00
Capabilities:
Query or enumerate registry value

Disassembly:
push rbx
sub rsp, 0x270
mov rax, qword [0x14002b200]
xor rax, rsp
mov qword [rsp + 0x260], rax
cmp dword [rcx + 0x9844], 1
mov rbx, rcx
mov dword [rcx + 0x9848], 1
jbe 0x140009f81
mov qword [rsp + 0x288], rsi
lea rcx, [rsp + 0x52]
xor esi, esi
xor edx, edx
mov r8d, 0x206
mov dword [rsp + 0x30], 0x104
mov word [rsp + 0x50], si
call fcn.140012bd0
test byte [rbx + 0x9844], 0x10
mov qword [rsp + 0x38], rsi
je 0x140009cfd
lea r8, [rsp + 0x40]
lea rdx, str.Control_PanelDesktop
mov rcx, 0xffffffff80000001
call qword [0x140023078]
test eax, eax
jne 0x140009cfd
lea rdx, [0x140023e5c]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x30], 0x104
call qword [0x140023100]
mov rcx, qword [rsp + 0x40]
lea r11, [rsp + 0x30]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], r11
lea rdx, str.FontSmoothing
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [0x140023060]
test eax, eax
jne 0x140009cf2
cmp word [rsp + 0x50], 0x30
je 0x140009cf2
lea r9d, [rsi + 2]
lea edx, [rsi + 1]
lea ecx, [rsi + 0x4b]
xor r8d, r8d
call qword [0x140023620]
mov rcx, qword [rsp + 0x40]
call qword [0x140023058]
test byte [rbx + 0x9844], 0x20
je 0x140009d1c
mov r9d, 2
xor r8d, r8d
lea edx, [r9 - 1]
lea ecx, [rdx + 0x24]
call qword [0x140023620]
test byte [rbx + 0x9844], 0x40
je 0x140009d3a
xor edx, edx
mov ecx, 0x1025
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
test byte [rbx + 0x9844], 0x80
je 0x140009d58
xor edx, edx
mov ecx, 0x1013
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
bt dword [rbx + 0x9844], 8
jae 0x140009d77
xor edx, edx
mov ecx, 0x1003
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
bt dword [rbx + 0x9844], 9
jae 0x140009d96
xor edx, edx
mov ecx, 0x1009
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
bt dword [rbx + 0x9844], 0xa
jae 0x140009db5
xor edx, edx
mov ecx, 0x101b
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
bt dword [rbx + 0x9844], 0xb
jae 0x140009dd4
xor edx, edx
mov ecx, 0x1005
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
bt dword [rbx + 0x9844], 0xc
jae 0x140009df3
xor edx, edx
mov ecx, 0x1015
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
bt dword [rbx + 0x9844], 0xd
jae 0x140009e12
xor edx, edx
mov ecx, 0x1017
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
bt dword [rbx + 0x9844], 0xe
jae 0x140009e31
xor edx, edx
mov ecx, 0x1019
lea r9d, [rdx + 2]
lea r8d, [rdx + 1]
call qword [0x140023620]
test byte [rbx + 0x9844], 2
je 0x140009ed5
lea r8, [rsp + 0x38]
lea rdx, str.Control_PanelDesktop
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x38], rsi
call qword [0x140023078]
test eax, eax
jne 0x140009ed5
lea rdx, [0x140023e5c]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x30], 0x104
call qword [0x140023100]
mov rcx, qword [rsp + 0x38]
lea r11, [rsp + 0x30]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], r11
lea rdx, str.Pattern
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [0x140023060]
test eax, eax
jne 0x140009ec5
cmp dword [rsp + 0x30], 1
jbe 0x140009ec5
lea r9d, [rax + 2]
lea r8, [rsp + 0x50]
lea ecx, [rax + 0x15]
xor edx, edx
call qword [0x140023620]
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140009ed5
call qword [0x140023058]
test byte [rbx + 0x9844], 4
je 0x140009f79
lea r8, [rsp + 0x38]
lea rdx, str.Control_PanelDesktop
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x38], rsi
call qword [0x140023078]
test eax, eax
jne 0x140009f79
lea rdx, [0x140023e5c]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x30], 0x104
call qword [0x140023100]
mov rcx, qword [rsp + 0x38]
lea r11, [rsp + 0x30]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], r11
lea rdx, str.Wallpaper
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [0x140023060]
test eax, eax
jne 0x140009f69
cmp dword [rsp + 0x30], 1
jbe 0x140009f69
lea r9d, [rax + 2]
lea r8, [rsp + 0x50]
lea ecx, [rax + 0x14]
xor edx, edx
call qword [0x140023620]
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140009f79
call qword [0x140023058]
mov rsi, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.140012ba0
add rsp, 0x270
pop rbx
ret