Function at 0x14009edd0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov eax, edx
mov rdi, r9
mov r10, r8
mov rsi, rcx
sub eax, 0x1f
je 0x14009ef13
mov qword [rsp + 0x30], rbx
sub eax, 1
je 0x14009ee98
sub eax, 1
je 0x14009ee15
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.1400b8ed0
xor cl, cl
test rdi, rdi
je 0x14009ee85
mov eax, dword [r9]
test eax, eax
jne 0x14009ee34
lea rdx, [rsi + 0x140850]
mov rcx, rsi
call fcn.14009f960
jmp 0x14009ee6f
test r10, r10
je 0x14009ee85
test eax, eax
je 0x14009ee85
mov r9, qword [r8]
test r9, r9
je 0x14009ee85
mov rdx, qword [rsi + 0x140850]
mov r8, qword [rsi + 0x140858]
sub r8, rdx
sar r8, 2
cmp r8, rax
jne 0x14009ee85
lea r8, [r8*4]
mov rcx, r9
call fcn.140222330
mov rax, qword [rsi + 0x140858]
sub rax, qword [rsi + 0x140850]
sar rax, 2
mov cl, 1
mov dword [rdi], eax
mov rbx, qword [rsp + 0x30]
movzx eax, cl
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
xor cl, cl
test rdi, rdi
je 0x14009ee85
mov eax, dword [r9]
test eax, eax
jne 0x14009eec5
lea rdx, [rsi + 0x140838]
mov rcx, rsi
call fcn.14009f7c0
mov rax, qword [rsi + 0x140840]
sub rax, qword [rsi + 0x140838]
jmp 0x14009ee7d
test r10, r10
je 0x14009ee85
test eax, eax
je 0x14009ee85
mov r9, qword [r8]
test r9, r9
je 0x14009ee85
mov rdx, qword [rsi + 0x140838]
mov r8, qword [rsi + 0x140840]
sub r8, rdx
sar r8, 2
cmp r8, rax
jne 0x14009ee85
lea r8, [r8*4]
mov rcx, r9
call fcn.140222330
mov rax, qword [rsi + 0x140840]
sub rax, qword [rsi + 0x140838]
jmp 0x14009ee7d
mov r8, rdi
mov rdx, r10
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x14009f620
push rbx
push rsi
sub rsp, 0x48
mov rax, qword [0x14044b080]
xor rax, rsp
mov qword [rsp + 0x28], rax
mov rsi, r8
mov rbx, rcx
test r8, r8
je 0x14009f79e
mov eax, dword [r8]
test eax, eax
jne 0x14009f74e
mov qword [rsp + 0x40], rbp
lea r8, [rsp + 0x20]
mov qword [rsp + 0x38], rdi
xorps xmm0, xmm0
lea rdi, [rcx + 0x140820]
mov qword [rsp + 0x30], r14
mov rax, qword [rdi]
mov ebp, 3
mov qword [rdi + 8], rax
mov edx, 0x15a
mov rax, qword [rcx]
movsd qword [rsp + 0x20], xmm0
lea r14d, [rbp + 1]
mov rax, qword [rax + 0x20]
call qword [case.0x14004487d.0]
test al, al
je 0x14009f6a0
cvttsd2si ebp, qword [rsp + 0x20]
mov rax, qword [rbx]
lea r8, [rsp + 0x20]
mov edx, 0x15c
mov rcx, rbx
mov rax, qword [rax + 0x20]
call qword [case.0x14004487d.0]
test al, al
je 0x14009f6c5
cvttsd2si r14d, qword [rsp + 0x20]
mov rax, qword [rbx]
lea r8, [rsp + 0x20]
mov edx, 0x139
mov rcx, rbx
mov rax, qword [rax + 0x20]
call qword [case.0x14004487d.0]
test al, al
je 0x14009f707
movsd xmm0, qword [0x1403a98f0]
ucomisd xmm0, qword [rsp + 0x20]
jp 0x14009f707
jne 0x14009f707
lea eax, [r14 - 1]
cmp eax, 1
ja 0x14009f707
lea rdx, [rbx + 0x1407d8]
jmp 0x14009f71a
lea rdx, [rbx + 0x1407f0]
cmp ebp, 2
je 0x14009f71a
lea rdx, [rbx + 0x140808]
cmp rdi, rdx
je 0x14009f72e
mov r8, qword [rdx + 8]
mov rcx, rdi
mov rdx, qword [rdx]
call fcn.1400a0540
mov rax, qword [rdi + 8]
sub rax, qword [rdi]
mov r14, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
sar rax, 2
mov dword [rsi], eax
mov al, 1
jmp 0x14009f7a0
test rdx, rdx
je 0x14009f79e
test eax, eax
je 0x14009f79e
mov rcx, qword [rdx]
test rcx, rcx
je 0x14009f79e
mov rdx, qword [rbx + 0x140820]
mov r8, qword [rbx + 0x140828]
sub r8, rdx
sar r8, 2
cmp r8, rax
jne 0x14009f79e
lea r8, [r8*4]
call fcn.140222330
mov rax, qword [rbx + 0x140828]
sub rax, qword [rbx + 0x140820]
sar rax, 2
mov dword [rsi], eax
mov al, 1
jmp 0x14009f7a0
xor al, al
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.140202880
add rsp, 0x48
pop rsi
pop rbx
ret