Function at 0x1400044f0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov qword [rbp - 1], 0xfffffffffffffffe
mov qword [rsp + 0xd8], rbx
mov r15, r8
mov r14, rdx
mov r13, rcx
xor r12d, r12d
mov dword [rbp + 0x7f], r12d
mov qword [rbp - 0x39], r12
lea edx, [r12 + 0x2f]
mov rcx, r14
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
lea r8d, [rax + 1]
lea rdx, [rbp - 0x19]
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
mov rdi, rax
mov dword [rbp + 0x7f], 1
lea edx, [r12 + 0x2f]
lea r8d, [r12 + 0x5c]
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc140u.dll_CMFCColorBar::Rebuild]
nop
lea rcx, [r13 + 0x10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonUndoButton::GetIconSize]
mov rdx, rax
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc140u.dll_Ordinal_285]
mov rsi, rax
mov dword [rbp + 0x7f], 3
mov r9, qword [rdi]
mov ecx, dword [r9 - 0x10]
mov rdx, qword [r13 + 0x10]
mov dword [rsp + 0x20], ecx
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc140u.dll_CMFCTasksPane::CollapseAllGroups]
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov rdx, rsi
lea rcx, [rbp - 9]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
mov qword [rbp + 7], rax
lea edx, [r12 + 0x5c]
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea r8d, [rax + 1]
lea rdx, [rbp - 0x11]
mov rcx, rdi
call qword [sym.imp.mfc140u.dll_CMFCToolBar::LoadState]
nop
mov rdx, rax
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rbp - 0x11]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
lea rdx, [rbp - 0x31]
mov rcx, rdi
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
lea rdx, str.HKEY_CURRENT_USER
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_CFileFind::CloseContext]
test eax, eax
jne 0x140004633
mov rbx, 0xffffffff80000001
jmp 0x140004654
lea rdx, str.HKEY_LOCAL_MACHINE
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_CFileFind::CloseContext]
mov rbx, r12
mov rcx, 0xffffffff80000002
test eax, eax
cmove rbx, rcx
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, rdi
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov eax, 0x100
mov r9d, 0x200
cmp dword [r13 + 0x18], 1
cmove r9d, eax
or r9d, 0x20019
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, qword [rbp - 0x29]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400046ab
cmp qword [rbp - 0x39], 0
je 0x1400046ab
xor bl, bl
jmp 0x1400046ad
mov bl, 1
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400046d8
xor al, al
jmp 0x14000476d
mov dword [rbp + 0x67], r12d
mov edx, 0x2f
mov rcx, r14
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
test eax, eax
js 0x140004701
lea r8d, [rax + 1]
lea rdx, [rbp + 0x7f]
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CMFCToolBar::LoadState]
jmp 0x14000470e
mov rdx, r14
lea rcx, [rbp + 0x7f]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 0x7f]
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test eax, eax
sete dil
lea rcx, [rbp + 0x7f]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov eax, dword [rbp + 0x67]
shr eax, 1
test ebx, ebx
jne 0x14000475f
test eax, eax
jne 0x140004788
lea rdx, [0x1400455f0]
mov rcx, r15
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movzx eax, dil
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov edx, eax
lea rcx, [rbp + 0xf]
call fcn.140005de0
nop
mov edx, 0x2f
mov rcx, r14
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
test eax, eax
js 0x1400047b9
lea r8d, [rax + 1]
lea rdx, [rbp + 0x7f]
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CMFCToolBar::LoadState]
jmp 0x1400047c6
mov rdx, r14
lea rcx, [rbp + 0x7f]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov rbx, qword [rbp + 0xf]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 0x7f]
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
sete dil
lea rcx, [rbp + 0x7f]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
nop
test rbx, rbx
je 0x14000475f
mov rax, qword [rbp + 0x1f]
sub rax, rbx
sar rax, 1
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x14000486e
lea rdx, [rax + rax]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140004861
lea rcx, [rdx + 0x27]
cmp rcx, rdx
jbe 0x14000486e
mov rdx, rcx
test al, 0x1f
jne 0x14000486e
mov rbx, qword [rbx - 8]
cmp rbx, rax
jae 0x14000486e
sub rax, rbx
sub rax, 8
cmp rax, 0x1f
ja 0x14000486e
mov rcx, rbx
call fcn.14003d0ac
jmp 0x14000475f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3