Function at 0x140225580
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
mov rbx, rdx
mov rsi, rcx
mov rdi, qword [rsp + 0x130]
add r9, r8
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x48], r9
mov word [rsp + 0x50], 0
mov dword [rsp + 0x58], 1
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x40]
call sym._ZN98__LT_alloc..vec..Vec_LT_T_GT__u20_as_u20_alloc..vec..spec_from_iter..SpecFromIter_LT_T_C_I_GT__GT_9from_iter17h14d6973f08
mov rax, qword [rsp + 0x138]
add rax, rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rax
mov word [rsp + 0x50], 0
mov dword [rsp + 0x58], 1
lea rcx, [rsp + 0x98]
lea r14, [rsp + 0x40]
mov rdx, r14
call sym._ZN98__LT_alloc..vec..Vec_LT_T_GT__u20_as_u20_alloc..vec..spec_from_iter..SpecFromIter_LT_T_C_I_GT__GT_9from_iter17h14d6973f08
mov rdi, qword [rsp + 0xb8]
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x20], r14
mov rcx, rbx
mov rdx, rdi
xor r8d, r8d
mov r9d, 0x20019
call sub.advapi32.dll_RegOpenKeyExW
test eax, eax
je 0x140225659
movabs rax, 0x8000000000000000
mov qword [rsi], rax
mov rdx, qword [rsp + 0x98]
test rdx, rdx
jne 0x140225858
jmp 0x14022586e
mov rbx, qword [rsp + 0x40]
mov dword [rsp + 0x3c], 0x800
mov rax, qword [0x1403591d8]
movzx eax, byte [rax]
mov ecx, 0x800
mov edx, 1
call sym.__rust_alloc
test rax, rax
je 0x1402258a3
mov r15, rax
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x60], 0x800
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0
mov r14, qword [rsp + 0xa0]
lea r13, [rsp + 0x3c]
lea r12, [rsp + 0x40]
mov rdi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x70]
sub rdi, rbp
nop dword [rax]
mov dword [rsp + 0x40], 0
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
mov r9, r12
call sub.advapi32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x140225718
mov r8d, dword [rsp + 0x3c]
cmp rdi, r8
jae 0x1402256d0
lea rcx, [rsp + 0x60]
mov rdx, rbp
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::h342c723aad6a170c
mov r15, qword [rsp + 0x68]
jmp 0x1402256bc
test eax, eax
jne 0x140225814
mov r12d, dword [rsp + 0x3c]
mov r15, qword [rsp + 0x68]
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x80], 1
mov qword [rsp + 0x88], 0
mov r8d, r12d
shr r8d, 2
bt r12d, 1
adc r8, 0
mov rdi, qword [rsp + 0x90]
je 0x140225771
lea rcx, [rsp + 0x78]
xor edx, edx
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::h342c723aad6a170c
and r12d, 0xfffffffe
add r12, r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r12
mov word [rsp + 0x50], 0
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x78]
call sym._ZN102__LT_core..iter..adapters..map..Map_LT_I_C_F_GT__u20_as_u20_core..iter..traits..iterator..Iterator_GT_4fold17h1e9dea8e3a
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x1402257cc
nop word cs:[rax + rax]
cmp byte [rcx + rdx - 1], 0
jne 0x1402257ce
dec rdx
jne 0x1402257c0
xor edx, edx
mov qword [rsi], rax
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rdx
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x1402257f1
mov r8d, 1
mov rcx, r15
call sym.__rust_dealloc
mov rcx, rbx
call fcn.1402db24c
mov rdx, qword [rsp + 0x98]
test rdx, rdx
je 0x14022586e
add rdx, rdx
mov r8d, 2
mov rcx, r14
jmp 0x140225869
movabs rax, 0x8000000000000000
mov qword [rsi], rax
mov rdx, qword [rsp + 0x60]
test rdx, rdx
mov rdi, qword [rsp + 0x90]
je 0x140225843
mov rcx, qword [rsp + 0x68]
mov r8d, 1
call sym.__rust_dealloc
mov rcx, rbx
call fcn.1402db24c
mov rdx, qword [rsp + 0x98]
test rdx, rdx
je 0x14022586e
mov rcx, qword [rsp + 0xa0]
add rdx, rdx
mov r8d, 2
call sym.__rust_dealloc
mov rdx, qword [rsp + 0xb0]
test rdx, rdx
je 0x14022588c
add rdx, rdx
mov r8d, 2
mov rcx, rdi
call sym.__rust_dealloc
mov rax, rsi
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 1
mov edx, 0x800
call sym.alloc::raw_vec::handle_error::hd43ffb3afada7951
ud2