Function at 0x14000feb0
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rbp
push rbx
mov rbp, rsp
sub rsp, 0x68
mov rax, qword [0x140079010]
xor rax, rsp
mov qword [rbp - 0x20], rax
mov qword [r11 + 8], rsi
mov qword [r11 + 0x10], rdi
mov qword [r11 + 0x18], r12
mov qword [r11 - 0x18], r13
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
call fcn.1400101d0
mov edi, 1
mov r14d, eax
lea esi, [rdi + 1]
lea r13d, [rdi + 3]
test eax, eax
js 0x14000fff5
lea rcx, [0x14007b340]
mov dword [0x14007b3a4], edi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
call fcn.140011fd0
xor ebx, ebx
lea rcx, [rbp - 0x38]
xor edx, edx
mov qword [rbp - 0x38], rbx
call fcn.140031c50
test eax, eax
je 0x14000ffc4
mov rcx, qword [rbp - 0x38]
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x28]
lea rax, [rbp - 0x2c]
mov dword [rbp - 0x30], r13d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.GraphicsOptimizedMode
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14000ff6a
mov r15d, dword [rbp - 0x2c]
mov r12d, edi
jmp 0x14000ff71
mov r15d, dword [rbp - 0x28]
mov r12d, ebx
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test r12d, r12d
je 0x14000ffc4
cmp r15d, edi
jne 0x14000ffc4
cmp dword [0x140079950], ebx
jne 0x14000ffb1
xor edx, edx
mov dword [0x14007b3a0], ebx
lea rcx, str.GraphicsOptimizedMode
call fcn.1400320f0
mov ecx, edi
call fcn.140011a20
mov ecx, edi
call fcn.140011eb0
jmp 0x140010029
mov dword [0x14007b3a0], esi
mov dword [0x14007b368], edi
call fcn.1400112a0
jmp 0x140010029
mov dword [0x14007b3a0], r14d
test r14d, r14d
jne 0x14000ffe0
mov ecx, edi
call fcn.140011a20
mov ecx, edi
call fcn.140011eb0
jmp 0x140010029
cmp r14d, edi
jne 0x140010029
xor ecx, ecx
call fcn.140011eb0
xor ecx, ecx
call fcn.140011a20
jmp 0x140010029
mov rcx, qword [0x14007d0e8]
xor ebx, ebx
test rcx, rcx
je 0x140010010
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [0x14007d0e8], rbx
mov rcx, qword [0x14007d0f0]
test rcx, rcx
je 0x140010029
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [0x14007d0f0], rbx
xor edx, edx
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x38]
mov r12d, ebx
call fcn.140031c50
test eax, eax
je 0x1400100a0
mov rcx, qword [rbp - 0x38]
lea rax, [rbp - 0x2c]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x28]
lea rax, [rbp - 0x30]
mov dword [rbp - 0x2c], r13d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.GraphicsModeResult
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14001007a
mov r14d, dword [rbp - 0x30]
mov r15d, edi
jmp 0x140010081
mov r14d, dword [rbp - 0x28]
mov r15d, ebx
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test r15d, r15d
je 0x1400100a0
test r14d, r14d
je 0x14001009d
lea eax, [r14 - 3]
cmp eax, esi
ja 0x1400100a0
mov r12d, r14d
mov edx, dword [0x14007b36c]
cmp r12d, edx
mov r12, qword [rsp + 0x90]
je 0x1400100bf
lea rcx, str.GraphicsModeResult
call fcn.1400320f0
cmp dword [0x14007b3b8], 0
je 0x1400100d5
cmp dword [0x14007b3a4], 0
cmovne esi, r13d
jmp 0x1400100e2
mov eax, dword [0x14007b3a4]
neg eax
sbb esi, esi
and esi, 3
xor edx, edx
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x38]
mov r14d, ebx
call fcn.140031c50
test eax, eax
je 0x140010152
mov rcx, qword [rbp - 0x38]
lea rax, [rbp - 0x2c]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x28]
lea rax, [rbp - 0x30]
mov dword [rbp - 0x2c], r13d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.GraphicsModeSupported
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x140010130
mov r15d, dword [rbp - 0x30]
jmp 0x140010136
mov r15d, dword [rbp - 0x28]
mov edi, ebx
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test edi, edi
je 0x140010152
cmp r15d, 1
je 0x140010152
cmp r15d, 5
cmovb r14d, r15d
mov r15, qword [rsp + 0x50]
cmp r14d, esi
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x88]
je 0x14001017c
mov edx, esi
lea rcx, str.GraphicsModeSupported
call fcn.1400320f0
cmp dword [0x14007b3dc], 2
mov rsi, qword [rsp + 0x80]
mov eax, dword [0x14007b3a4]
jne 0x1400101b6
test eax, eax
setne bl
mov dword [0x14007b3dc], ebx
test eax, eax
jne 0x1400101b6
xor edx, edx
lea rcx, str.ChkExternalDisplay
call fcn.1400320f0
mov eax, dword [0x14007b3a4]
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.1400406e0
add rsp, 0x68
pop rbx
pop rbp
ret