Function at 0x14001a214
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r15
mov rbp, rsp
sub rsp, 0x50
mov rsi, rdx
mov rdi, rcx
test rcx, rcx
jne 0x14001a241
test rdx, rdx
jne 0x14001a241
mov eax, 0x80004003
jmp 0x14001a426
and qword [rbp - 8], 0
lea r12, fcn.1400081c0
lea rcx, [rbp - 0x10]
mov qword [rbp - 0x10], r12
call fcn.140019290
mov ebx, eax
mov r15d, 0x80070000
test eax, eax
js 0x14001a40c
test rdi, rdi
je 0x14001a32d
and dword [rbp + 0x30], 0
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
lea r8, str.resx
lea rax, [rbp + 0x30]
mov dword [rbp + 0x40], 4
mov qword [rsp + 0x28], rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
and qword [rsp + 0x20], 0
mov r9d, 0x10010
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001a40c
mov eax, dword [rbp + 0x30]
lea r8, str.resy
mov dword [rdi], eax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
lea rax, [rbp + 0x40]
mov r9d, 0x10010
mov qword [rsp + 0x30], rax
mov rcx, 0xffffffff80000002
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001a40c
mov eax, dword [rbp + 0x30]
mov dword [rdi + 4], eax
test rsi, rsi
je 0x14001a40c
and dword [rbp + 0x30], 0
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
lea r8, str.fovx
lea rax, [rbp + 0x30]
mov dword [rbp + 0x40], 4
mov qword [rsp + 0x28], rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
and qword [rsp + 0x20], 0
mov r9d, 0x10010
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001a40c
mov eax, dword [rbp + 0x30]
lea r8, str.fovy
xorps xmm0, xmm0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
mov r9d, 0x10010
mov rcx, 0xffffffff80000002
cvtsi2ss xmm0, rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
divss xmm0, dword [0x14002ce88]
movss dword [rsi], xmm0
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001a40c
mov eax, dword [rbp + 0x30]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, dword [0x14002ce88]
movss dword [rsi + 4], xmm0
cmp qword [rbp - 8], 0
mov qword [rbp - 0x10], r12
je 0x14001a424
lea rcx, [rbp - 0x10]
call fcn.1400081c0
test al, al
je 0x14001a43b
mov eax, ebx
mov rbx, qword [rsp + 0x88]
add rsp, 0x50
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
mov edx, 1
or ecx, r15d
test eax, eax
cmovle ecx, eax
call fcn.1400062e0
int3