Function at 0x140006db4
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x460
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
mov rax, qword [0x14010bfc0]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov rbp, rdx
mov rsi, rcx
lea r8, str.CDialogWarning::FindDisplayName____r_n
mov edx, 2
lea rcx, [0x14010f570]
call fcn.140001000
xor r13d, r13d
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov r12d, r13d
mov edi, r13d
mov byte [rsp + 0x340], r13b
mov ebx, 0x103
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x341]
call fcn.1400988d0
mov byte [rsp + 0x120], r13b
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x121]
call fcn.1400988d0
mov dword [rsp + 0x30], 0x104
mov dword [rsp + 0x34], r13d
mov byte [rsp + 0x230], r13b
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x231]
call fcn.1400988d0
mov ebx, r13d
lea r14d, [r13 + 0xf]
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xe8], r13
mov byte [rsp + 0xd8], r13b
lea rcx, str.SoftwareMicrosoftWindowsCurrentVersionUninstall
call fcn.1400980d0
mov r8, rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionUninstall
lea rcx, [rsp + 0xd0]
call fcn.14000352c
nop
call fcn.14006d8f8
mov r11, rax
mov ecx, r13d
cmp rax, r13
setne cl
cmp ecx, r13d
jne 0x140006ede
mov ecx, 0x80004005
call fcn.140001074
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xc0], r13
mov byte [rsp + 0xb0], r13b
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x60], r13
mov byte [rsp + 0x50], r13b
lea rdx, [rsi + 0x768]
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rcx, [rsp + 0x48]
call fcn.140002458
xor r9d, r9d
lea r8d, [r9 + 0x79]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xa0]
call fcn.1400021ac
lea rdx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rdx, qword [rsp + 0xd8]
mov dword [rsp + 0x28], r13d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, 0xffffffff80000002
call fcn.14004e070
cmp eax, r13d
jne 0x140007273
mov qword [rsp + 0x98], r14
mov qword [rsp + 0x90], r13
mov byte [rsp + 0x80], r13b
lea rcx, [0x1400c49dc]
call fcn.1400980d0
mov r8, rax
lea rdx, [0x1400c49dc]
lea rcx, [rsp + 0x78]
call fcn.14000352c
nop
mov rsi, qword [0x14011f698]
cmp edi, r13d
je 0x140006fe3
cmp edi, 0xea
jne 0x14000725b
cmp ebx, r13d
jne 0x14000725b
mov r9d, 0x104
lea r8, [rsp + 0x340]
mov edx, r12d
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
mov edi, eax
inc r12d
mov byte [rsp + 0x120], r13b
lea rcx, str.SoftwareMicrosoftWindowsCurrentVersionUninstall
call fcn.1400980d0
mov r8, rax
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionUninstall
lea rcx, [rsp + 0x78]
call fcn.14000352c
lea rcx, [0x1400c55c0]
call fcn.1400980d0
mov r8, rax
lea rdx, [0x1400c55c0]
lea rcx, [rsp + 0x78]
call fcn.14000627c
lea rcx, [rsp + 0x340]
call fcn.1400980d0
mov r8, rax
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x78]
call fcn.14000627c
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x104
lea rdx, [rsp + 0x80]
cmp qword [rsp + 0x98], 0x10
cmovae rdx, qword [rsp + 0x80]
mov dword [rsp + 0x28], r13d
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, 0xffffffff80000002
call fcn.14004e070
cmp eax, r13d
jne 0x140006fd2
mov dword [rsp + 0x30], 0x104
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.uninstallstring
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, r13d
jne 0x140006fd2
lea r9, [rsp + 0x120]
lea r8, str.Found_Uninstallstring____s__._r_n
mov edx, 0x80
lea rcx, [0x14010f570]
call fcn.140001000
mov edx, 0x104
lea rcx, [rsp + 0x120]
call fcn.140098dcc
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x110], r13
mov byte [rsp + 0x100], r13b
lea rcx, [rsp + 0x120]
call fcn.1400980d0
mov r8, rax
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xf8]
call fcn.14000352c
nop
mov rcx, rsi
call fcn.1400980d0
mov r9, rax
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0xf8]
call fcn.140005be4
cmp rax, 0xffffffffffffffff
je 0x14000723a
mov dword [rsp + 0x30], 0x104
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.DisplayName
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, r13d
jne 0x140007235
lea r9, [rsp + 0x230]
lea r8, str.Found_DisplayName__s_._r_n
mov edx, 0x80
lea rcx, [0x14010f570]
call fcn.140001000
lea rcx, [rsp + 0x230]
call fcn.1400980d0
cmp rax, r13
je 0x140007235
lea rcx, [rsp + 0x230]
call fcn.1400980d0
mov r8, rax
lea rdx, [rsp + 0x230]
mov rcx, rbp
call fcn.14000352c
mov ebx, 1
cmp qword [rsp + 0x118], 0x10
jb 0x140006fd2
mov rcx, qword [rsp + 0x100]
call fcn.14006127c
jmp 0x140006fd2
cmp qword [rsp + 0x98], 0x10
jb 0x140007273
mov rcx, qword [rsp + 0x80]
call fcn.14006127c
lea r8, str.CDialogWarning::FindDisplayName____r_n
mov edx, 4
lea rcx, [0x14010f570]
call fcn.140001000
nop
cmp qword [rsp + 0xc8], 0x10
jb 0x1400072a4
mov rcx, qword [rsp + 0xb0]
call fcn.14006127c
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xc0], r13
mov byte [rsp + 0xb0], r13b
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
cmp eax, r13d
jg 0x1400072e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.oledlg.dll_OleUIBusyA]
nop
cmp qword [rsp + 0xf0], 0x10
jb 0x1400072f9
mov rcx, qword [rsp + 0xd8]
call fcn.14006127c
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.140061100
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret