Function at 0x140057e6c
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
mov rsi, rcx
mov rcx, qword [rcx + 0x70]
test rcx, rcx
je 0x140057e9d
call qword [sym.imp.UxTheme.dll_CloseThemeData]
nop dword [rax + rax]
and qword [rsi + 0x70], 0
mov rcx, qword [rsi + 0x210]
call fcn.14002d5f8
mov ebp, 1
mov dword [rsi + 0x218], eax
mov r8d, ebp
mov edx, eax
lea ecx, [rbp + 1]
call fcn.14002d7e0
mov edx, dword [rsi + 0x218]
xor r8d, r8d
mov ecx, ebp
mov dword [rsi + 0x1c0], eax
call fcn.14002d7e0
mov edx, dword [rsi + 0x218]
xor r8d, r8d
mov ecx, ebp
mov dword [rsi + 0x1a4], eax
call fcn.14002d7e0
mov r8d, dword [rsi + 0x218]
lea rdx, str.Taskband2
mov rcx, qword [rsi + 8]
mov dword [rsi + 0x1a8], eax
call qword [sym.imp.UxTheme.dll_OpenThemeDataForDpi]
nop dword [rax + rax]
mov qword [rsi + 0x70], rax
test rax, rax
je 0x1400580ae
mov ebx, dword [rsi + 0x218]
lea rdi, [rsi + 0xa4]
mov rcx, rsi
call fcn.140058164
mov rcx, qword [rsi + 0x70]
neg eax
mov dword [rsp + 0x38], ebx
mov ebx, 0xe12
sbb r8d, r8d
mov qword [rsp + 0x30], rdi
and r8d, 0xfffffffe
mov dword [rsp + 0x20], ebx
add r8d, 3
xor r9d, r9d
call fcn.1400580f4
mov eax, dword [rsi + 0x218]
lea rcx, [rsi + 0xb4]
mov dword [rsp + 0x38], eax
lea edi, [rbp + 4]
mov qword [rsp + 0x30], rcx
mov r9d, ebp
mov rcx, qword [rsi + 0x70]
mov r8d, edi
mov dword [rsp + 0x20], ebx
call fcn.1400580f4
mov eax, dword [rsi + 0x218]
lea rbx, [rsi + 0xc4]
mov rcx, qword [rsi + 0x70]
mov r9d, ebp
mov dword [rsp + 0x38], eax
mov r8d, edi
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x20], 0xe11
call fcn.1400580f4
mov edx, dword [rsi + 0x218]
lea ecx, [rbp + 3]
xor r8d, r8d
call fcn.14002d7e0
add dword [rbx], eax
lea r8d, [rbp + 5]
add dword [rsi + 0xc8], eax
mov ebx, 0x970
add dword [rsi + 0xd0], eax
xor r9d, r9d
add dword [rsi + 0xcc], eax
xor edx, edx
mov rcx, qword [rsi + 0x70]
lea rax, [rsi + 0x1ac]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.UxTheme.dll_GetThemeMetric]
nop dword [rax + rax]
mov rcx, qword [rsi + 0x70]
lea rax, [rsi + 0x1b0]
mov qword [rsp + 0x28], rax
lea r8d, [rbp + 6]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [sym.imp.UxTheme.dll_GetThemeMetric]
nop dword [rax + rax]
mov rcx, qword [rsi + 0x70]
lea rax, [rsi + 0x1b4]
mov qword [rsp + 0x28], rax
lea r8d, [rbp + 7]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [sym.imp.UxTheme.dll_GetThemeMetric]
nop dword [rax + rax]
mov rcx, qword [rsi + 0x70]
lea rax, [rsi + 0x1b8]
mov qword [rsp + 0x28], rax
lea r8d, [rbp + 8]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [sym.imp.UxTheme.dll_GetThemeMetric]
nop dword [rax + rax]
lea rax, [rsi + 0x1bc]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea r8d, [rbp + 9]
mov dword [rsp + 0x20], ebx
xor edx, edx
mov rcx, qword [rsi + 0x70]
call qword [sym.imp.UxTheme.dll_GetThemeMetric]
nop dword [rax + rax]
mov rcx, qword [rsi + 0x68]
test rcx, rcx
je 0x1400580c6
mov rax, qword [rcx]
xor edx, edx
mov rax, qword [rax + 0x18]
call qword [case.0x14006c37f.0]
lea rdx, [rsi + 0x1c8]
lea rcx, [rsi + 0x1c4]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
jmp fcn.140056008