Function at 0x171b1e058
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r14
mov rbp, rsp
sub rsp, 0x70
cmp dword [0x171b932e4], 0
mov rdi, rcx
movaps xmmword [rsp + 0x60], xmm6
mov esi, 4
movaps xmmword [rsp + 0x50], xmm8
mov r12d, 0x20019
mov r14d, 0x80070000
jne 0x171b325de
mov edx, r12d
mov dword [rbp + 0x38], esi
lea rcx, [rbp - 0x30]
call fcn.171b088b4
mov rax, qword [0x171b934f8]
lea r9d, [rsi + 0xc]
mov rcx, qword [rbp - 0x30]
lea r8, str.StartColorMenu
test rax, rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAccent
cmovne rcx, rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
and qword [rsp + 0x20], 0
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jg 0x171b325ee
test ebx, ebx
js 0x171b1e14c
mov rax, qword [0x171b934f8]
lea r8, [rbp + 0x38]
mov rcx, qword [rbp - 0x30]
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAccent
mov qword [rsp + 0x30], r8
test rax, rax
mov r9d, 0x10
lea r8, str.AccentColorMenu
cmovne rcx, rax
lea rax, [rdi + 4]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jg 0x171b325f9
lea rcx, [rbp - 0x30]
call fcn.171b08884
test ebx, ebx
js 0x171b32604
and qword [rbp - 0x30], 0
lea rdx, [rbp - 0x30]
mov ecx, r12d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenCurrentUser]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x30]
lea rax, [rbp + 0x48]
and dword [rbp + 0x40], 0
lea r8, str.AutoColorization
mov qword [rsp + 0x30], rax
lea rdx, str.Control_PanelDesktop
lea rax, [rbp + 0x38]
mov dword [rbp + 0x48], esi
mov qword [rsp + 0x28], rax
mov r9d, 0x10000012
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueW]
nop dword [rax + rax]
mov r12d, 1
lea ecx, [r12 + 0xc]
test eax, eax
jne 0x171b1e214
cmp dword [rbp + 0x40], esi
jne 0x171b32626
cmp dword [rbp + 0x38], r12d
ja 0x171b1e222
xor ecx, ecx
cmp dword [rbp + 0x38], r12d
sete al
test ecx, ecx
jns 0x171b32651
lea rcx, [rbp - 0x30]
call fcn.171b08884
movaps xmm6, xmmword [rsp + 0x60]
lea r11, [rsp + 0x70]
movaps xmm8, xmmword [r11 - 0x20]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp eax, 0xea
cmove eax, ecx
mov ecx, eax
test eax, eax
jle 0x171b1e228
movzx ecx, cx
or ecx, r14d
mov eax, dword [rbp + 0x38]
jmp 0x171b1e1e2
lea rdx, [rcx + 4]
call fcn.171b2536c
mov ebx, eax
jmp 0x171b1e155
movzx ebx, ax
or ebx, r14d
jmp 0x171b1e0f4
movzx ebx, ax
or ebx, r14d
jmp 0x171b1e14c
mov rcx, rdi
call fcn.171b3da3c
mov rcx, rdi
test eax, eax
js 0x171b3261a
call fcn.171b25668
jmp 0x171b3261f
call sym.UxTheme.dll_Ordinal_119
xor ebx, ebx
jmp 0x171b1e15d
cmp dword [rbp + 0x48], esi
jne 0x171b1e222
movzx eax, word [rbp + 0x38]
sub ax, 0x30
cmp ax, r12w
ja 0x171b1e222
xor ecx, ecx
xor eax, eax
lea edx, [rcx + 0x31]
cmp dx, word [rbp + 0x38]
jmp 0x171b1e1df
test eax, eax
je 0x171b1e1ea
mov ecx, dword [rdi]
xor r14b, r14b
xor sil, sil
call fcn.171b3d948
or ecx, 0xffffffff
movaps xmm6, xmm0
call fcn.171b3d948
movaps xmm1, xmm6
movaps xmm8, xmm0
maxsd xmm1, xmm0
minsd xmm6, xmm0
addsd xmm1, qword [0x171b85c20]
addsd xmm6, qword [0x171b85c20]
divsd xmm1, xmm6
movsd xmm6, qword [0x171b85c68]
comisd xmm1, xmm6
jae 0x171b326b3
mov edx, dword [rdi]
lea rcx, str.InvalidStartColor
mov r14b, r12b
call fcn.171b543d0
mov ecx, dword [rdi + 4]
call fcn.171b3d948
movaps xmm1, xmm0
minsd xmm0, xmm8
maxsd xmm1, xmm8
addsd xmm0, qword [0x171b85c20]
addsd xmm1, qword [0x171b85c20]
divsd xmm1, xmm0
comisd xmm1, xmm6
jae 0x171b326f4
mov edx, dword [rdi + 4]
lea rcx, str.InvalidAccentColor
mov sil, r12b
call fcn.171b543d0
test r14b, r14b
jne 0x171b32702
test sil, sil
je 0x171b1e1ea
and qword [rbp + 0x38], 0
lea rcx, [rbp + 0x38]
call sym.UxTheme.dll_Ordinal_119
test sil, sil
je 0x171b3271b
mov eax, dword [rbp + 0x3c]
mov dword [rdi + 4], eax
test r14b, r14b
je 0x171b1e1ea
mov eax, dword [rbp + 0x38]
mov dword [rdi], eax
jmp 0x171b1e1ea