Function at 0x1401b3e00
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov ebx, r8d
mov r13, rdx
mov r15, rcx
mov dword [rbp + 0x7f], 1
lea rax, [0x140484e18]
mov qword [rcx], rax
mov dword [rbp + 0x7f], 1
xor ecx, ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
lea rax, [rbp - 0x1d]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 0x21]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x15]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
je 0x1401b3ea9
lea rdx, str.QSettings:_RegQueryInfoKey___failed
mov ecx, eax
call fcn.1400ad750
jmp 0x1401b4158
mov ecx, dword [rbp - 0x21]
inc ecx
mov dword [rbp - 0x21], ecx
mov edx, dword [rbp - 0x1d]
inc edx
mov dword [rbp - 0x1d], edx
cmp ebx, 1
jne 0x1401b3ec4
mov r12d, dword [rbp - 0x19]
jmp 0x1401b3eca
mov r12d, dword [rbp - 0x15]
mov edx, ecx
lea edx, [rdx*2 + 2]
xor r8d, r8d
lea rcx, [rbp - 0x31]
call fcn.1400b0390
nop
xor edx, edx
mov r14d, edx
mov esi, 0xffffffff
test r12d, r12d
jle 0x1401b4127
lea rax, [0x140484d90]
mov rdi, qword [rbp + 7]
nop dword [rax]
mov qword [rbp - 0x39], rax
mov rax, qword [rbp - 0x31]
movsxd rcx, dword [rax + 4]
shr rcx, 1
mov dword [rbp - 0x25], ecx
mov ecx, dword [rax]
mov rax, qword [rbp - 0x31]
cmp ebx, 1
jne 0x1401b3f71
cmp ecx, ebx
ja 0x1401b3f28
cmp qword [rax + 0x10], 0x18
je 0x1401b3f44
mov edx, dword [rax + 4]
inc edx
mov r8d, dword [rax + 8]
shr r8d, 0x1f
lea rcx, [rbp - 0x31]
call fcn.1400b2240
mov rax, qword [rbp - 0x31]
xor edx, edx
mov r8, qword [rax + 0x10]
add r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x25]
mov edx, r14d
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
jmp 0x1401b3fc4
cmp ecx, 1
ja 0x1401b3f7d
cmp qword [rax + 0x10], 0x18
je 0x1401b3f99
mov edx, dword [rax + 4]
inc edx
mov r8d, dword [rax + 8]
shr r8d, 0x1f
lea rcx, [rbp - 0x31]
call fcn.1400b2240
mov rax, qword [rbp - 0x31]
xor edx, edx
mov r8, qword [rax + 0x10]
add r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x25]
mov edx, r14d
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x1401b4176
mov rax, qword [rbp - 0x31]
mov rdx, qword [rax + 0x10]
add rdx, rax
mov r8d, dword [rbp - 0x25]
lea rcx, [rbp - 0x11]
call fcn.1400ba830
nop
mov rbx, qword [rax]
lea rcx, [0x140484d90]
mov qword [rax], rcx
mov eax, dword [rbp + 0x7f]
or eax, 0xa
mov dword [rbp + 0x7f], eax
test al, 4
je 0x1401b4031
and eax, 0xfffffffb
mov dword [rbp + 0x7f], eax
mov eax, dword [rdi]
test eax, eax
je 0x1401b401b
cmp eax, 0xffffffff
je 0x1401b402e
mov eax, esi
lock xadd dword [rdi], eax
cmp eax, 1
jne 0x1401b402e
mov edx, 2
mov r8d, 8
mov rcx, rdi
call fcn.1400affb0
mov eax, dword [rbp + 0x7f]
test al, 2
je 0x1401b406d
and eax, 0xfffffffd
mov dword [rbp + 0x7f], eax
mov rax, qword [rbp - 0x11]
mov ecx, dword [rax]
test ecx, ecx
je 0x1401b4059
cmp ecx, 0xffffffff
je 0x1401b406d
mov rax, qword [rbp - 0x11]
mov ecx, esi
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x1401b406d
mov edx, 2
mov r8d, 8
mov rcx, qword [rbp - 0x11]
call fcn.1400affb0
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x39], rbx
mov eax, dword [rcx]
test eax, eax
je 0x1401b408b
cmp eax, 0xffffffff
je 0x1401b409b
mov eax, esi
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x1401b409b
mov edx, 2
mov r8d, 8
call fcn.1400affb0
mov rax, qword [rbp - 0x39]
cmp dword [rax + 4], 0
jne 0x1401b40cd
mov dword [rbp - 9], 1
lea rax, [0x140265ccc]
mov qword [rbp - 1], rax
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp + 0x17], xmm0
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 0x39]
call fcn.1400b6560
lea rdx, [rbp - 0x39]
mov rcx, r15
call fcn.1400018b0
nop
mov rax, qword [rbp - 0x39]
mov ecx, dword [rax]
test ecx, ecx
je 0x1401b40f8
cmp ecx, 0xffffffff
je 0x1401b410c
mov rax, qword [rbp - 0x39]
mov ecx, esi
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x1401b410c
mov edx, 2
mov r8d, 8
mov rcx, qword [rbp - 0x39]
call fcn.1400affb0
mov ebx, dword [rbp + 0x77]
inc r14d
cmp r14d, r12d
mov edx, 0
lea rax, [0x140484d90]
jl 0x1401b3f00
mov rax, qword [rbp - 0x31]
mov ecx, dword [rax]
test ecx, ecx
je 0x1401b4143
cmp ecx, 0xffffffff
je 0x1401b4158
mov rax, qword [rbp - 0x31]
lock xadd dword [rax], esi
cmp esi, 1
jne 0x1401b4158
mov edx, 1
mov r8d, 8
mov rcx, qword [rbp - 0x31]
call fcn.1400affb0
nop
mov rax, r15
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, str.QSettings:_RegEnumValue_failed
mov ecx, eax
call fcn.1400ad750
nop
mov rax, qword [rbp - 0x39]
mov ecx, dword [rax]
test ecx, ecx
je 0x1401b41ab
cmp ecx, 0xffffffff
je 0x1401b410f
mov rax, qword [rbp - 0x39]
mov ecx, esi
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x1401b410f
mov edx, 2
mov r8d, 8
mov rcx, qword [rbp - 0x39]
call fcn.1400affb0
jmp 0x1401b410f