Function at 0x14000ed90
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x50
mov rax, qword [0x140079010]
xor rax, rsp
mov qword [rsp + 0x48], rax
xor r14d, r14d
cmp qword [0x14007d0b0], r14
je 0x14000f01a
mov rax, qword [0x14007d110]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14000f01a
lea rax, [rsp + 0x3c]
mov dword [rsp + 0x40], 0x50043
lea r9, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r8d, [r14 + 4]
mov dword [rsp + 0x3c], 4
lea rdx, [rsp + 0x40]
mov ecx, 0x53545344
call fcn.140006780
test eax, eax
je 0x14000f01a
cmp dword [rsp + 0x3c], 4
mov eax, r14d
cmovae eax, dword [rsp + 0x38]
bt eax, 0x10
jae 0x14000f01a
shr eax, 0x12
lea ecx, [r14 + 1]
and eax, 1
mov dword [0x14007b3bc], eax
call fcn.14000f070
test eax, eax
je 0x14000efdf
xor eax, eax
mov qword [rsp + 0x30], r14
xor edx, edx
mov qword [0x14007b3c8], rax
lea rcx, [rsp + 0x30]
mov edi, r14d
mov ebx, r14d
call fcn.140031c50
test eax, eax
je 0x14000eee9
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x3c]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rbp
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.AutoRefreshRate
mov qword [rsp + 0x68], rsi
mov dword [rsp + 0x38], 4
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14000eeb6
mov esi, dword [rsp + 0x40]
lea ebp, [rax + 1]
jmp 0x14000eebd
mov esi, dword [rsp + 0x38]
mov ebp, r14d
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test ebp, ebp
mov rbp, qword [rsp + 0x60]
je 0x14000eee4
mov ebx, esi
shr ebx, 0x15
and ebx, 1
cmp sil, 1
jne 0x14000eee4
mov edi, 1
mov rsi, qword [rsp + 0x68]
test ebx, ebx
je 0x14000ef0b
mov edx, r14d
lea rcx, str.AutoRefreshRate
cmp dword [0x14007b3bc], edx
setne dl
call fcn.1400320f0
mov edi, dword [0x14007b3bc]
test edi, edi
je 0x14000ef21
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 - 1]
lea ecx, [rdx + 2]
call fcn.14000f270
mov rcx, qword [0x14007d0c8]
test rcx, rcx
je 0x14000ef3f
test edi, edi
je 0x14000ef39
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
jmp 0x14000ef3f
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ResetEvent]
mov eax, dword [0x1400799b4]
cmp eax, 2
jne 0x14000ef55
call fcn.14002aa70
mov eax, dword [0x1400799b4]
cmp eax, 1
jne 0x14000efbf
xor ecx, ecx
call fcn.14000f070
test eax, eax
je 0x14000efbf
mov rcx, qword [0x140079b70]
lea rax, [0x140079b70]
cmp rcx, rax
je 0x14000ef98
test byte [rcx + 0x1c], 4
je 0x14000ef98
mov rcx, qword [rcx + 0x10]
lea rax, str.Auto_switching_refresh_rate_2nd_is_supported
mov edx, 0xa
mov qword [rsp + 0x20], rax
call fcn.14003f070
xor eax, eax
mov qword [0x14007b3d0], rax
test edi, edi
je 0x14000efd8
xor r9d, r9d
lea edx, [rax - 1]
xor r8d, r8d
xor ecx, ecx
call fcn.14000f270
mov eax, 1
jmp 0x14000f043
mov rcx, qword [0x14007d0d0]
test rcx, rcx
je 0x14000efd8
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [0x14007d0d0], r14
mov eax, 1
jmp 0x14000f043
mov rcx, qword [0x140079b70]
lea rax, [0x140079b70]
lea rbx, str.Auto_switching_refresh_rate_does_not_support
cmp rcx, rax
je 0x14000f012
test byte [rcx + 0x1c], 4
je 0x14000f012
mov rcx, qword [rcx + 0x10]
mov edx, 0xb
mov qword [rsp + 0x20], rbx
call fcn.14003f070
mov rcx, rbx
call fcn.14003fe60
lea rbx, [0x14007d0c8]
mov edi, 2
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000f037
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rbx], r14
add rbx, 8
sub rdi, 1
jne 0x14000f026
xor eax, eax
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400406e0
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop r14
ret