Function at 0x140015bbc
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov al, byte [rcx + 0x2510]
xor r14d, r14d
mov rsi, rdx
neg al
lea rax, [rbp + 0x40]
mov rbx, rcx
sbb r12d, r12d
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x58]
lea r15d, [r14 + 4]
lea rdx, str.Hide_Systray_Icon_for_Non_Admins
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x10], r14
and r12d, 0x100
mov dword [rbp + 0x58], r14d
mov dword [rbp + 0x40], r15d
call qword [0x140032010]
test eax, eax
jne 0x140015c34
cmp dword [rbp + 0x58], r14d
setne al
mov byte [rbx + 0x18], al
lea rax, [rbp - 0x10]
or r12d, 1
lea rdx, str.Shortcuts
xor r8d, r8d
mov rcx, rsi
mov r9d, r12d
mov qword [rsp + 0x20], rax
call qword [0x140032018]
test eax, eax
jne 0x140015c98
lea rcx, [rbp + 0x40]
lea rax, [rbx + 0x310]
lea rdx, str.Shell_Shortcut_Directory
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp - 0x10]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x40], 0x208
mov qword [rsp + 0x20], rax
call qword [0x140032010]
mov rcx, qword [rbp - 0x10]
call qword [0x140032008]
lea rax, [rbp + 0x40]
lea rdx, str.NoWelcomeMsg
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x58]
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x40], r15d
mov qword [rsp + 0x20], rax
call qword [0x140032010]
test eax, eax
jne 0x140015cd2
cmp dword [rbp + 0x58], r14d
setne al
mov byte [rbx + 0x4c], al
lea rax, [rbp + 0x40]
lea rdx, str.SingleMonNoAutoStart
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x58]
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x40], r15d
mov qword [rsp + 0x20], rax
call qword [0x140032010]
test eax, eax
jne 0x140015d08
mov eax, dword [rbp + 0x58]
mov dword [rbx + 0x50], eax
lea rcx, [rbp + 0x40]
lea rax, [rbx + 0x1bf0]
lea rdx, [0x140036c98]
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x40], 0xc8
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rcx, [rbp + 0x40]
lea rax, [rbx + 0x1cb8]
mov qword [rsp + 0x28], rcx
lea rdx, str.LinkBuy
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x40], 0x208
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x28], rcx
lea rax, [rbx + 0x1ec0]
lea rdx, str.LinkProduct
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x40], 0x208
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rcx, [rbp + 0x40]
lea rax, [rbx + 0x20c8]
lea rdx, str.LinkIcons
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x40], 0x208
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rax, [rbp + 0x40]
lea rdx, str.HwIds
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x40], r14d
mov qword [rsp + 0x20], r14
call qword [0x140032010]
test eax, eax
jne 0x140015e97
cmp qword [rbx + 0x22e8], 8
mov qword [rbx + 0x22e0], r14
jb 0x140015e1a
mov rax, qword [rbx + 0x22d0]
jmp 0x140015e21
lea rax, [rbx + 0x22d0]
mov word [rax], r14w
mov ecx, dword [rbp + 0x40]
mov eax, 2
and ecx, 0xfffffffe
cmp ecx, eax
jbe 0x140015e97
mov ecx, dword [rbp + 0x40]
shr rcx, 1
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14001d104
mov r13, rax
test rax, rax
je 0x140015e97
mov word [rax], r14w
lea rax, [rbp + 0x40]
lea rdx, str.HwIds
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], r13
call qword [0x140032010]
lea rcx, [rbx + 0x22d0]
mov rdx, r13
call fcn.140005774
mov rcx, r13
call fcn.14001e710
lea rax, [rbp - 0x10]
lea rdx, str.SplashScreen
mov r9d, r12d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
call qword [0x140032018]
test eax, eax
jne 0x140015fbb
lea rcx, [rbp + 0x50]
lea rax, [rbx + 0x22f8]
lea rdx, str.Duration
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp - 0x10]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x50], r15d
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rcx, [rbp + 0x50]
lea rax, [rbx + 0x22fc]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp - 0x10]
lea rdx, str.File
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x50], 0x208
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rcx, [rbp + 0x50]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp - 0x10]
lea rax, [rbx + 0x2504]
lea rdx, str.Mode
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x50], r15d
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rcx, [rbp + 0x50]
lea rax, [rbx + 0x2508]
lea rdx, str.Transparency
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp - 0x10]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x50], r15d
mov qword [rsp + 0x20], rax
call qword [0x140032010]
lea rcx, [rbp + 0x50]
lea rax, [rbx + 0x250c]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp - 0x10]
lea rdx, str.TransparentColor
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x50], r15d
mov qword [rsp + 0x20], rax
call qword [0x140032010]
mov rcx, qword [rbp - 0x10]
call qword [0x140032008]
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret