Function at 0x1400024d0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov qword [rbp - 8], 0xfffffffffffffffe
mov rax, r9
mov rsi, rcx
mov r9, qword [rbp + 0x40]
cmp r8d, 5
jle 0x140002593
cmp r8d, 6
je 0x1400025ed
cmp r8d, 0x2e0
je 0x140002605
cmp r8d, 0x320
jne 0x1400026a5
mov rsi, rdx
mov dword [rbp - 0x10], 4
lea rax, [rbp - 0x10]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionThemesPersonalize
lea r8, str.AppsUseLightTheme
mov rcx, 0xffffffff80000001
mov r9d, 0x10
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x1400026da
xor eax, eax
cmp dword [rbp - 0x20], 0
sete al
mov dword [rbp - 0xc], eax
lea r8, [rbp - 0xc]
mov rcx, rsi
mov edx, 0x14
mov r9d, 4
call qword [sym.imp.dwmapi.dll_DwmSetWindowAttribute]
jmp 0x1400026da
cmp r8d, 2
je 0x14000263e
cmp r8d, 5
jne 0x1400026a5
mov rcx, qword [rsi + 0x10]
lea rdx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [rsi + 0x18]
test rcx, rcx
je 0x1400026da
mov eax, dword [rbp - 0x14]
mov edx, dword [rbp - 0x20]
mov r8d, dword [rbp - 0x1c]
sub eax, r8d
mov r9d, dword [rbp - 0x18]
sub r9d, edx
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 1
call qword [sym.imp.USER32.dll_MoveWindow]
jmp 0x1400026da
mov rcx, qword [rsi + 0x18]
test rcx, rcx
je 0x1400026da
call qword [sym.imp.USER32.dll_SetFocus]
jmp 0x1400026da
mov ecx, dword [r9 + 8]
mov r8d, dword [r9]
mov eax, dword [r9 + 4]
sub ecx, r8d
mov r9d, dword [r9 + 0xc]
sub r9d, eax
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], ecx
mov dword [rsp + 0x30], 0x14
mov rcx, rdx
xor edx, edx
mov r9d, eax
call qword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x1400026da
mov qword [rsi + 0x10], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x140002666
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [rsi + 0x10], 0
cmp dword [0x1400775c8], 0
jne 0x1400026cc
mov rdi, qword [0x1400775c0]
test rdi, rdi
jne 0x140002699
mov ecx, 0x20
call fcn.140030b84
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1400775c0], rax
cmp byte [rdi + 0x1f], 0
jns 0x1400026bd
mov rcx, qword [rdi + 8]
jmp 0x1400026c1
mov rcx, qword [rsi + 0x10]
mov edx, r8d
mov r8, rax
add rsp, 0x60
pop rdi
pop rsi
pop rbp
jmp qword [sym.imp.USER32.dll_DefWindowProcW]
lea rcx, [rdi + 8]
xor edx, edx
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov byte [rdi], 0
cmp byte [rsi + 8], 1
jne 0x1400026da
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret
movabs byte [0xa164699f72bd6e3c], al
sub eax, 0x89cfac1c
cli
push rbp
push rcx
invalid
in eax, 0xc4
movsd dword [rdi], dword [rsi]
sbb esi, ebx
cld
mov edi, 0xe3f2ccf0
adc eax, 0x24ee8de5
int 0x26
sbb cl, dh
add al, 0x27
imul edx, dword [rax], 0x26b59f34
pop rsi
cmp eax, 0xf338d63
ror eax, cl
rep lodsd eax, dword [rsi]
xor al, 0x33
jns 0x1400d4ab4
imul esi, dword [rdx - 0x34], 0x37
sub r9, rsi
invalid
invalid
outsd dx, dword [rsi]
fidiv word [rcx]
fnsave dword [rax - 0x588b29f0]
push rcx
fxch st(3)
jne 0x1400d4af8
invalid
mov edi, 0xf07af0f9
xchg ebp, eax
pop rsp
out 0x89, eax
loope 0x1400d4b39
stc
invalid
bnd jge 0x1400d4ba5
wait
xchg byte [rdi - 0x11], dh
pop rax
invalid
invalid