Function at 0x14001aa40
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r15
mov rbp, rsp
sub rsp, 0x50
mov rsi, rdx
mov rdi, rcx
test rcx, rcx
jne 0x14001aa6d
test rdx, rdx
jne 0x14001aa6d
mov eax, 0x80004003
jmp 0x14001ac52
and qword [rbp - 8], 0
lea r12, fcn.140008510
lea rcx, [rbp - 0x10]
mov qword [rbp - 0x10], r12
call fcn.140019a50
mov ebx, eax
mov r15d, 0x80070000
test eax, eax
js 0x14001ac38
test rdi, rdi
je 0x14001ab59
and dword [rbp + 0x30], 0
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
lea r8, str.resx
lea rax, [rbp + 0x30]
mov dword [rbp + 0x40], 4
mov qword [rsp + 0x28], rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
and qword [rsp + 0x20], 0
mov r9d, 0x10010
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001ac38
mov eax, dword [rbp + 0x30]
lea r8, str.resy
mov dword [rdi], eax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
lea rax, [rbp + 0x40]
mov r9d, 0x10010
mov qword [rsp + 0x30], rax
mov rcx, 0xffffffff80000002
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001ac38
mov eax, dword [rbp + 0x30]
mov dword [rdi + 4], eax
test rsi, rsi
je 0x14001ac38
and dword [rbp + 0x30], 0
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
lea r8, str.fovx
lea rax, [rbp + 0x30]
mov dword [rbp + 0x40], 4
mov qword [rsp + 0x28], rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
and qword [rsp + 0x20], 0
mov r9d, 0x10010
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001ac38
mov eax, dword [rbp + 0x30]
lea r8, str.fovy
xorps xmm0, xmm0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPerceptionSimulationExtensions
mov r9d, 0x10010
mov rcx, 0xffffffff80000002
cvtsi2ss xmm0, rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
divss xmm0, dword [0x14002dee8]
movss dword [rsi], xmm0
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r15d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14001ac38
mov eax, dword [rbp + 0x30]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, dword [0x14002dee8]
movss dword [rsi + 4], xmm0
cmp qword [rbp - 8], 0
mov qword [rbp - 0x10], r12
je 0x14001ac50
lea rcx, [rbp - 0x10]
call fcn.140008510
test al, al
je 0x14001ac67
mov eax, ebx
mov rbx, qword [rsp + 0x88]
add rsp, 0x50
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
mov edx, 1
or ecx, r15d
test eax, eax
cmovle ecx, eax
call fcn.140006654
int3