Function at 0x1092fb0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x010d71a0]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov ebx, edx
mov dword [rsp + 0x44], edx
mov rsi, rcx
mov ebp, 0x1a
lea rdx, [0x01084af0]
mov ecx, ebp
call fcn.01091f4c
xor edi, edi
mov rcx, rsi
mov r12d, edi
mov r15d, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsi + 0xb68], rdi
call fcn.01092ea8
lea rcx, [rsi + 0xdc]
lea rdx, [rsi + 0xa3c]
mov r8d, 0xa0
call fcn.010ac860
cmp ebx, edi
mov r11d, 0x7fff
mov dword [rsi + 0xadc], r11d
mov dword [rsi + 0xae0], r11d
mov r13d, edi
je 0x109324d
lea r8, [rsp + 0x48]
lea rdx, [0x01084860]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea rdx, [0x01084b28]
mov ecx, ebp
mov r8d, eax
mov ebx, eax
call fcn.01091f4c
cmp ebx, edi
jne 0x1093247
mov rax, qword [rsp + 0x48]
lea ebp, [rdi + 1]
lea r14, [rsi + 0x17c]
mov qword [rsi + 0xb68], rax
lea rbx, [rsi + 0xae4]
mov r9d, dword [rsp + 0x44]
lea r8, [0x01084b50]
lea rcx, [rsp + 0x50]
mov edx, 0x20
mov dword [rsp + 0x20], ebp
call fcn.010a7b2c
lea rdx, [rsp + 0x50]
mov ecx, 0x1a
mov word [rsp + 0x90], di
call fcn.01091f4c
mov rcx, qword [rsi + 0xb68]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
cmp eax, edi
jne 0x109321b
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x34]
lea rdx, [0x01084b60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov r13d, 4
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x34], r13d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, edi
jne 0x1093147
mov r8d, dword [rsp + 0x30]
lea rdx, [0x01084b90]
lea ecx, [r13 + 0x16]
mov dword [rbx], r8d
call fcn.01091f4c
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x34]
lea rdx, [0x01084bd8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x34], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, edi
jne 0x109318a
mov r8d, dword [rsp + 0x30]
lea rdx, [0x01084c00]
jmp 0x10931ce
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x34]
lea rdx, [0x01084c48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x34], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, edi
jne 0x10931dc
mov r8d, dword [rsp + 0x30]
lea rdx, [0x01084c68]
mov dword [rbx], r8d
mov ecx, 0x1a
mov dword [rbx + 4], r8d
call fcn.01091f4c
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.01092a6c
cmp eax, edi
mov r13d, eax
je 0x10931fb
mov eax, 1
cmp ebp, eax
cmove r15d, eax
lea rdx, [rsi + 0xa3c]
mov rcx, r14
mov r8d, 0xa0
call fcn.010ac860
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
add ebp, 1
add rbx, 8
add r14, 0xa0
cmp ebp, 0xd
jle 0x109309f
mov rcx, qword [rsi + 0xb68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp r13d, edi
mov r12d, edi
jne 0x109324d
mov r12d, 0x80004005
mov ebx, 0x1a
lea rdx, [0x01084c98]
mov ecx, ebx
call fcn.01091f4c
cmp r12d, edi
jl 0x10932ea
movss xmm1, dword [0x0108db04]
cmp r15d, edi
lea rdx, [rsi + 0xdc]
setne dil
mov r8d, 0xa0
mov ecx, edi
mov eax, dword [rsi + rcx*8 + 0xae0]
mov dword [rsi + 0xc0], eax
mov eax, dword [rsi + rcx*8 + 0xadc]
lea rcx, [rsi + 0x99c]
mov dword [rsi + 0xbc], eax
mov eax, dword [rsi + 0xc0]
cvtsi2ss xmm0, rax
divss xmm0, xmm1
movss dword [rsi + 0xc8], xmm0
mov r9d, dword [rsi + 0xbc]
cvtsi2ss xmm0, r9
divss xmm0, xmm1
movss dword [rsi + 0xc4], xmm0
call fcn.010ac860
lea rdx, [0x01084cd0]
mov ecx, ebx
call fcn.01091f4c
mov eax, r12d
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.010a6e90
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret