Function at 0x1400ef6e0
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, reloc.mfc120u.dll_Ordinal_1424
mov qword [r11 - 0x4e0], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x140462840]
xor rax, rsp
mov qword [rsp + Ordinal_1415], rax
mov r14, rcx
mov qword [rsp + 0xc8], rcx
lea rcx, [r11 - 0x510]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0xa8]
mov ecx, 7
call fcn.140195770
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc120u.dll_Ordinal_1636]
mov rdx, rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400ef79f
lea r9, str.CNxAVRibbonBar::LoadQATElements
mov r8d, Ordinal_2227
lea rdx, str.CNxAVRibbonBar.cpp
xor ecx, ecx
mov rax, qword [0x140467260]
call qword [rax + 0x88]
lea rbx, vtable.CList_unsigned_int__unsigned_int_.0
mov qword [rsp + 0x60], rbx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
xor r13d, r13d
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x68], r13
movdqa xmm0, xmmword [0x14030a480]
movdqu xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
lea rax, [rsp + 0x98]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x9c]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
je 0x1400ef85d
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r9, str.CNxAVRibbonBar::LoadQATElements
mov r8d, Ordinal_2231
lea rdx, str.CNxAVRibbonBar.cpp
xor ecx, ecx
mov rax, qword [0x140467260]
call qword [rax + 0x88]
mov ecx, dword [rsp + 0x9c]
inc ecx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call sub.mfc120u.dll_Ordinal_265
mov r12, rax
mov ecx, dword [rsp + 0x98]
call sub.mfc120u.dll_Ordinal_265
mov r15, rax
mov esi, r13d
nop word [rax + rax]
cmp esi, dword [rsp + 0xb0]
jae 0x1400efa73
mov eax, dword [rsp + 0x9c]
inc eax
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0xb4], eax
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0xb8]
mov r8, r12
mov edx, esi
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x1400efa6c
cmp dword [rsp + 0xc0], 1
jne 0x1400efa6c
lea rax, [rsp + 0xf8]
mov qword [rsp + 0xf0], rax
mov r8d, 3
mov rdx, r15
lea rcx, [rsp + 0xf0]
call fcn.140002910
nop
mov rcx, qword [rsp + 0xf0]
mov rax, qword [0x140467260]
call qword [rax + 0x28]
mov rbx, rax
lea rax, [rsp + 0xf8]
mov rcx, qword [rsp + 0xf0]
cmp rcx, rax
je 0x1400ef977
call qword [sym.imp.MSVCR120.dll_free]
mov rdx, rbx
mov rcx, r14
call fcn.1400ede00
test rax, rax
jne 0x1400ef9b6
mov rdx, rbx
mov rcx, r14
call fcn.1400ee3e0
test rax, rax
jne 0x1400ef9b6
mov rdx, rbx
mov rcx, r14
call fcn.1400ee230
test rax, rax
jne 0x1400ef9b6
mov rdx, rbx
mov rcx, r14
call fcn.1400ed8f0
mov ebx, eax
jmp 0x1400ef9b8
mov ebx, dword [rax]
cmp ebx, 0xffffffff
je 0x1400efa6c
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x80]
test rcx, rcx
jne 0x1400efa27
lea r8d, [rcx + 0x18]
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x88]
call sub.mfc120u.dll_Ordinal_3101
mov rdx, qword [rsp + 0x90]
lea rcx, [rdx + rdx*2]
lea rax, [rax + rcx*8]
add rax, 0xfffffffffffffff0
mov rcx, qword [rsp + 0x80]
dec rdx
js 0x1400efa27
nop dword [rax]
mov qword [rax], rcx
mov rcx, rax
mov qword [rsp + 0x80], rax
sub rax, 0x18
dec rdx
jns 0x1400efa10
mov eax, r13d
test rcx, rcx
setne al
test eax, eax
jne 0x1400efa39
call sub.mfc120u.dll_Ordinal_2302
mov rax, qword [rcx]
mov qword [rsp + 0x80], rax
mov qword [rcx + 8], rdi
mov qword [rcx], r13
inc qword [rsp + 0x78]
mov dword [rcx + 0x10], ebx
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x1400efa62
mov qword [rax], rcx
jmp 0x1400efa67
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rcx
inc esi
jmp 0x1400ef8a0
mov rcx, r12
call sub.mfc120u.dll_Ordinal_266
mov rcx, r15
call sub.mfc120u.dll_Ordinal_266
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r8d, 1
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.BCGCBPRO2300u120.dll_public:_void___cdecl_CBCGPRibbonBar::SetQuickAccessCommands_class_CList_unsigned_int__unsigned_int__const____ptr64__int____ptr64]
nop
lea rax, vtable.CList_unsigned_int__unsigned_int_.0
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x68], r13
mov rcx, qword [rsp + 0x88]
call sub.mfc120u.dll_Ordinal_4652
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
mov eax, 1
jmp 0x1400efaf8
mov rcx, qword [rsp + 0x580]
xor rcx, rsp
call fcn.140289bf0
lea r11, [rsp + reloc.mfc120u.dll_Ordinal_1424]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret