Function at 0x101e840
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x60
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov r12, rcx
xor r15d, r15d
mov rbx, r15
mov qword [rax - 0x40], rbx
call fcn.01020274
mov dword [rsp + 0x90], 4
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 0x18]
lea r8, [0x01007488]
lea rdx, [0x01007040]
mov rcx, 0xffffffff80000001
call qword [sym.imp.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegGetValueW]
cmp eax, r15d
jne 0x101e8d0
cmp dword [rsp + 0x40], r15d
je 0x101e8d0
mov dword [r12 + 0x42c], 1
cmp dword [r12 + 0x3f8], r15d
jne 0x101e8fe
mov rax, qword [r12 + 0x40]
cmp dword [rax + 0x8c], r15d
jne 0x101e8fe
cmp dword [r12 + 0x42c], r15d
jne 0x101e8fe
mov dword [r12 + 0x430], 1
mov edx, 0x12d
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdx, rax
lea rcx, [r12 + 0x2f8]
call fcn.0100ba6c
lea rdx, [0x010075c0]
mov rcx, qword [r12 + 0x300]
call qword [sym.imp.UxTheme.dll_OpenThemeData]
mov qword [r12 + 0x388], rax
mov edx, 0x130
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdx, rax
lea rcx, [r12 + 0xb8]
call fcn.0100ba6c
lea rcx, [r12 + 0xb8]
call fcn.01024928
movss xmm5, dword [0x0103027c]
movaps xmm0, xmm5
mulss xmm0, dword [0x01008590]
divss xmm0, dword [0x0100795c]
cvttss2si ebp, xmm0
mulss xmm5, dword [0x010079d8]
divss xmm5, dword [0x0100795c]
cvttss2si esi, xmm5
mov edx, 0x131
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdx, rax
lea rcx, [r12 + 0x1a8]
call fcn.0100ba6c
mov edx, ebp
lea rcx, [r12 + 0x1a8]
call fcn.010237c0
movzx r11d, si
mov eax, r11d
shl eax, 0x10
movsxd r9, eax
or r9, r11
xor r8d, r8d
mov edx, 0x41f
mov rcx, qword [r12 + 0x1b0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x191
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdx, rax
lea rcx, [r12 + 0x250]
call fcn.0100ba6c
movss xmm5, dword [0x0103027c]
mulss xmm5, dword [0x010079d8]
divss xmm5, dword [0x0100795c]
cvttss2si edx, xmm5
lea rcx, [r12 + 0x250]
call fcn.010237c0
mov r9d, 1
xor r8d, r8d
mov edx, 0x433
mov rcx, qword [r12 + 0xc0]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x434
mov rcx, qword [r12 + 0xc0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x130
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 0x406
mov r9d, 0x640000
mov r8d, 1
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11, qword [r12 + 0x50]
mov rbp, qword [r11 + 0x58]
cmp dword [r12 + 0x430], r15d
je 0x101eb36
mov esi, 0x190
mov edx, esi
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 0xfffffff0
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, eax
mov edx, esi
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
bts edi, 0xb
mov r8d, edi
mov edx, 0xfffffff0
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov qword [rsp + 0x20], r15
mov r9, rbp
lea r8d, [rsi - 0x20]
mov edx, esi
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
xor edx, edx
mov rcx, qword [r12 + 0x258]
call qword [sym.imp.USER32.dll_ShowWindow]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [r12 + 0x258]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x101eb63
mov rdx, rbp
lea rcx, [r12 + 0x250]
call fcn.010238d4
mov esi, 0x190
mov edx, esi
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [r12 + 0xb0], rbp
mov rax, qword [r12 + 0x40]
mov rdi, qword [rax + 0x10]
cmp rdi, r15
je 0x101eb8a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov rbx, rdi
mov qword [rsp + 0x48], rbx
mov rax, qword [rbx]
lea rdx, [r12 + 0xa4]
mov rcx, rbx
call qword [rax + 0x20]
xorps xmm0, xmm0
comiss xmm0, dword [r12 + 0xa4]
ja 0x101ebc1
movd xmm0, dword [r12 + 0xa4]
cvtps2pd xmm0, xmm0
call qword [sym.imp.msvcrt.dll__isnan]
cmp eax, r15d
je 0x101ebc9
mov dword [r12 + 0xa4], r15d
mov rax, qword [rbx]
lea rdx, [r12 + 0x98]
mov rcx, rbx
call qword [rax + 0x30]
mov edx, 1
mov rcx, r12
call fcn.0101e7e4
cmp dword [r12 + 0x42c], r15d
je 0x101ec58
lea rdx, [r12 + 0x420]
mov rcx, qword [r12 + 0x40]
call fcn.0101d094
cmp eax, r15d
jl 0x101ec58
mov dword [rsp + 0x90], r15d
lea rcx, [rsp + 0x90]
call qword [sym.imp.dwmapi.dll_DwmIsCompositionEnabled]
cmp eax, r15d
jl 0x101ec58
cmp dword [rsp + 0x90], r15d
je 0x101ec58
mov rdx, qword [r12 + 0x420]
cmp rdx, r15
je 0x101ec58
lea rcx, [r12 + 0x250]
call fcn.01023f14
cmp eax, r15d
jl 0x101ec58
mov dword [r12 + 0x428], 1
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, qword [r12 + 8]
mov rdx, qword [0x01031100]
mov r8, rdx
lea rcx, [r12 + 0x390]
call fcn.01022720
mov r8d, 0x12d
mov rdx, qword [r12 + 8]
lea rcx, [r12 + 0x390]
call fcn.010228ac
cmp dword [r12 + 0x430], r15d
je 0x101ecba
mov r8d, esi
mov rdx, qword [r12 + 8]
lea rcx, [r12 + 0x390]
call fcn.010228ac
mov rcx, r12
call fcn.0101ed44
xor r9d, r9d
mov edx, 0x83
mov r8d, 0x3e8
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_SetTimer]
mov qword [r12 + 0x418], rax
xor r9d, r9d
mov edx, 0x42a
lea r8d, [r9 + 0x32]
mov rcx, qword [r12 + 8]
call qword [sym.imp.USER32.dll_SetTimer]
mov rcx, qword [r12 + 0x40]
call fcn.0101c8b8
mov r11, qword [rsp + 0xb0]
mov dword [r11], r15d
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
movabs rax, 1
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret