Function at 0x14006ebe0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rdi
push r12
push r14
push r15
sub rsp, 0x80
cmp qword [rcx + 8], 0
lea r14, str.__RegConfigAccess::GetValue_
mov r12, r9
mov qword [rsp + 0x28], r14
mov rbp, rdx
lea r9, [0x1402a214c]
mov r15, rcx
lea rdx, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5_toscommonlib_rs5include_regconfig.h
mov rbx, r8
lea rcx, [rsp + 0x50]
jne 0x14006ec56
xor edi, edi
mov r8d, 0x138
mov dword [rsp + 0x20], edi
call fcn.140008c40
mov rcx, rax
lea rdx, str.Error_Code:_0x_x
mov r8d, 0x80070006
call fcn.140008d50
mov eax, 0x80070006
jmp 0x14006ee78
test rbp, rbp
jne 0x14006ec8b
xor edi, edi
mov r8d, 0x139
mov dword [rsp + 0x20], edi
call fcn.140008c40
mov rcx, rax
lea rdx, str.Error_Code:_0x_x
mov r8d, 0x80004003
call fcn.140008d50
mov eax, 0x80004003
jmp 0x14006ee78
mov r8d, 0x13a
mov qword [rsp + 0xb8], rsi
mov dword [rsp + 0x20], 3
call fcn.140008c40
mov rcx, rax
lea r8, str.pszName
mov r9, rbp
lea rdx, str._s___s
call fcn.140008d50
mov rcx, qword [r15 + 8]
lea rax, [rsp + 0xb0]
xor edi, edi
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov dword [rsp + 0xb0], edi
mov rdx, rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov esi, eax
test eax, eax
je 0x14006ed47
movzx ebx, si
mov ebp, eax
or ebx, 0x80070000
test eax, eax
jle 0x14006ed04
mov ebp, ebx
mov qword [rsp + 0x28], r14
lea r9, [0x1402a214c]
mov r8d, 0x141
mov dword [rsp + 0x20], edi
lea rdx, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5_toscommonlib_rs5include_regconfig.h
lea rcx, [rsp + 0x50]
call fcn.140008c40
mov rcx, rax
lea rdx, str.Error_Code:_0x_x
mov r8d, ebp
call fcn.140008d50
test esi, esi
cmovle ebx, esi
jmp 0x14006ee6e
mov edx, dword [rsp + 0xb0]
lea r8, [rsp + 0x38]
xorps xmm0, xmm0
mov qword [rsp + 0x48], rdi
inc rdx
lea rcx, [rsp + 0x38]
movdqu xmmword [rsp + 0x38], xmm0
call fcn.14006f010
mov rcx, qword [rsp + 0x38]
mov r9, r12
mov eax, dword [rsp + 0x40]
xor r8d, r8d
sub eax, ecx
mov rdx, rbp
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, qword [r15 + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebp, eax
test eax, eax
je 0x14006ee00
movzx ebx, bp
test eax, eax
jg 0x14006edb6
mov esi, eax
or ebx, 0x80070000
jmp 0x14006edc0
mov esi, ebx
or esi, 0x80070000
mov ebx, esi
mov qword [rsp + 0x28], r14
lea r9, [0x1402a214c]
mov r8d, 0x14b
mov dword [rsp + 0x20], edi
lea rdx, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5_toscommonlib_rs5include_regconfig.h
lea rcx, [rsp + 0x50]
call fcn.140008c40
mov rcx, rax
lea rdx, str.Error_Code:_0x_x
mov r8d, esi
call fcn.140008d50
test ebp, ebp
cmovle ebx, ebp
jmp 0x14006ee36
lea rax, [rsp + 0x38]
cmp rbx, rax
je 0x14006ee25
movzx r9d, byte [rsp + 0xb0]
mov rcx, rbx
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
call fcn.14006eea0
mov edx, dword [rsp + 0x30]
mov r8, rbx
mov rcx, rbx
call fcn.14006f010
mov ebx, edi
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14006ee6e
mov rdx, qword [rsp + 0x48]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14006ee69
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ee90
call fcn.14001dee0
mov rsi, qword [rsp + 0xb8]
mov eax, ebx
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1401f802c
int3