Function at 0x140169b9c
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
mov rbx, rcx
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionCurrentBuildNumberCurrentMajorVersionNumber
lea rsi, [rsp + 0x60]
mov r8d, 0x2c
mov rcx, rsi
call fcn.140169a6d
lea rdx, [0x14040c3c6]
lea rcx, [rsp + 0xa8]
mov r8d, 0x19
call fcn.140169a6d
lea rax, [rsp + 0x40]
and qword [rax], 0
mov rsi, qword [rsi + 8]
mov qword [rsp + 0x20], rax
xor r15d, r15d
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
mov r9d, 0x20019
call sub.ADVAPI32.dll_RegOpenKeyExW
test eax, eax
je 0x140169c29
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xb0]
jmp 0x140169c87
lea r9, [rsp + 0x88]
and dword [r9], 0
lea rax, [rsp + 0x90]
and dword [rax], 0
lea rdx, [rsp + 0x5c]
mov dword [rdx], 4
mov rcx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0xb0]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
xor r15d, r15d
mov rdx, rdi
xor r8d, r8d
call sub.ADVAPI32.dll_RegQueryValueExW
test eax, eax
jne 0x140169c7c
mov r15d, dword [rsp + 0x90]
mov rcx, qword [rsp + 0xa8]
mov rdx, rdi
call fcn.140141b5c
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
call fcn.140141b5c
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionCurrentBuildNumberCurrentMajorVersionNumber
lea rdi, [rsp + 0x90]
mov r8d, 0x2c
mov rcx, rdi
call fcn.140169a6d
lea rdx, [0x14040c3b4]
lea r13, [rsp + 0x40]
mov r8d, reloc.WS2_32.dll_select
mov rcx, r13
call fcn.140169a6d
lea rax, [rsp + 0x88]
and qword [rax], 0
mov r12, qword [rdi + 8]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov rdx, r12
xor r8d, r8d
mov r9d, 0x20019
call sub.ADVAPI32.dll_RegOpenKeyExW
test eax, eax
je 0x140169d0b
mov rsi, qword [rsp + 0x48]
jmp 0x140169de0
mov qword [rsp + 0x80], rbx
lea rdi, [rsp + 0x3c]
mov dword [rdi], 0x800
lea rbp, [rsp + 0x5c]
and dword [rbp], 0
mov ecx, 0x800
call fcn.1400e77e3
mov rbx, rdx
lea r14, [rsp + 0x60]
mov qword [r14], rax
mov qword [r14 + 8], rdx
and qword [r14 + 0x10], 0
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov rdx, rsi
xor r8d, r8d
mov r9, rbp
call sub.ADVAPI32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x140169d84
mov edx, dword [rsp + 0x3c]
mov rcx, r14
call fcn.1401bbd4d
mov rbx, qword [rsp + 0x68]
jmp 0x140169d4a
test eax, eax
jne 0x140169dcb
mov r8d, dword [rsp + 0x3c]
shr r8, 1
lea r14, [rsp + 0xa8]
mov rcx, r14
mov rdx, rbx
call fcn.140163177
mov rbp, qword [r14 + 8]
mov rax, qword [r14 + 0x10]
inc rax
cmp rax, 1
je 0x140169eb0
lea rdi, [rax - 1]
cmp byte [rbp + rax - 2], 0
mov rax, rdi
je 0x140169dae
jmp 0x140169eb2
mov rcx, qword [rsp + 0x60]
mov rdx, rbx
call fcn.140059ae6
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x40]
mov rdx, rsi
call fcn.140141b5c
mov rcx, qword [rsp + 0x90]
mov rdx, r12
call fcn.140141b5c
xor ebp, ebp
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x90]
test rbp, rbp
cmove r14, rbp
mov dword [rsp + 0x90], r15d
mov eax, 1
cmovne rax, rbp
cmove rdi, rbp
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdx
lea rax, [fcn.1400851c0]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], r13
lea rax, str.description___is_deprecated__use_Displaycalled__Option::unwrap____on_a__None__value
lea rdx, [rsp + 0xa8]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 3
and qword [rdx], 0
lea rax, [0x14001b880]
mov qword [rsp + 0x78], rax
mov qword [rdx + 0x20], rcx
mov qword [rdx + 0x28], 2
mov rcx, rbx
call fcn.140163308
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
call fcn.140059ae6
nop
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor edi, edi
mov r14, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x60]
mov rdx, rbx
call fcn.140059ae6
mov rcx, qword [rsp + 0x40]
mov rdx, rsi
call fcn.140141b5c
mov rcx, qword [rsp + 0x90]
mov rdx, r12
call fcn.140141b5c
mov rbx, qword [rsp + 0x80]
jmp 0x140169dff