Function at 0x1400067b0
Capabilities:
Query or enumerate registry value

Disassembly:
push rdi
sub rsp, 0x2a0
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov rax, qword [0x140047170]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov eax, 4
mov eax, eax
mov ecx, dword [0x140048da8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x140048bd8], eax
jle 0x140006834
lea rcx, [0x140048bd8]
call fcn.140023b80
cmp dword [0x140048bd8], 0xffffffff
jne 0x140006834
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
lea rcx, [0x140029c90]
call fcn.140023920
nop
lea rcx, [0x140048bd8]
call fcn.140023b20
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
movzx eax, al
test eax, eax
je 0x1400069f7
lea rdx, str.psadlm
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call fcn.1400078e0
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator__]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rdx, rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jne 0x1400069c3
mov dword [rsp + 0x38], 1
movzx eax, word [0x14002c84c]
mov word [rsp + 0x80], ax
lea rax, [rsp + 0x82]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
mov dword [rsp + 0x34], operator
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x38]
xor r8d, r8d
lea rdx, [0x14002c9c0]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jne 0x1400069b8
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14002c9e0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_CFileFind::CloseContext]
test eax, eax
jne 0x140006982
lea rdx, [0x14002c8b4]
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator_]
jmp 0x1400069ad
lea rdx, [0x14002c9f0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_CFileFind::CloseContext]
test eax, eax
jne 0x1400069ad
lea rdx, [0x14002c948]
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator_]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [0x14002c944]
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator_]
lea rdx, [0x14002ca00]
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator_]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [0x140048bd0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator__]
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.140023e10
add rsp, 0x2a0
pop rdi
ret