Function at 0x140005580
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14004c070]
xor rax, rsp
mov qword [rsp + 0x58], rax
xor edi, edi
lea rax, [rsp + 0x40]
mov r9d, 0x20019
mov dword [rsp + 0x50], edi
xor r8d, r8d
mov dword [rsp + 0x4c], edi
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
mov dword [rsp + 0x48], edi
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140005625
lea rbx, str.C:Userspaul1_leeDesktopAsusFocusModeAsusFocusModeFocusMode.cpp
mov rcx, rbx
lea edx, [rdi + 0x5c]
call fcn.140010f04
test rax, rax
je 0x1400055f8
lea edx, [rdi + 0x5c]
mov rcx, rbx
call fcn.140010f04
lea rbx, [rax + 1]
lea rax, str.Failed_to_open_registry_key
mov r9d, 2
lea r8, str.IsExpandableTaskbar
mov qword [rsp + 0x20], rax
mov edx, 0x38f
mov rcx, rbx
call fcn.140009cf0
xor eax, eax
jmp 0x140005836
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x30], rax
lea r8, str.ExpandableTaskbar
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rdi
mov r9d, 0x10
mov qword [rsp + 0x20], rax
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
je 0x1400056be
lea rbx, str.C:Userspaul1_leeDesktopAsusFocusModeAsusFocusModeFocusMode.cpp
mov edx, 0x5c
mov rcx, rbx
call fcn.140010f04
test rax, rax
je 0x140005686
mov edx, 0x5c
mov rcx, rbx
call fcn.140010f04
lea rbx, [rax + 1]
lea rax, str.Failed_to_get_size_of_value
mov r9d, 2
lea r8, str.IsExpandableTaskbar
mov qword [rsp + 0x20], rax
mov edx, 0x396
mov rcx, rbx
call fcn.140009cf0
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
jmp 0x140005836
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x30], rax
lea r8, str.ExpandableTaskbar
lea rax, [rsp + 0x48]
mov r9d, 0x10
mov qword [rsp + 0x28], rax
xor edx, edx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
lea rbx, str.C:Userspaul1_leeDesktopAsusFocusModeAsusFocusModeFocusMode.cpp
mov edx, 0x5c
mov rcx, rbx
test eax, eax
je 0x140005753
call fcn.140010f04
test rax, rax
je 0x140005725
mov edx, 0x5c
mov rcx, rbx
call fcn.140010f04
inc rax
jmp 0x140005728
mov rax, rbx
lea rcx, str.Failed_to_get_value
mov r9d, 2
mov qword [rsp + 0x20], rcx
lea r8, str.IsExpandableTaskbar
mov rcx, rax
mov edx, 0x39e
call fcn.140009cf0
jmp 0x1400057dc
call fcn.140010f04
test rax, rax
je 0x14000576f
mov edx, 0x5c
mov rcx, rbx
call fcn.140010f04
inc rax
jmp 0x140005772
mov rax, rbx
lea r9, str.Read_Success
mov edx, 0x3a2
lea r8, str.IsExpandableTaskbar
mov rcx, rax
call fcn.140009a10
mov edx, 0x5c
mov rcx, rbx
call fcn.140010f04
mov rcx, rbx
test rax, rax
je 0x1400057b0
mov edx, 0x5c
call fcn.140010f04
lea rcx, [rax + 1]
mov eax, dword [rsp + 0x48]
lea r9, str.Value_:__d
lea r8, str.IsExpandableTaskbar
mov dword [rsp + 0x20], eax
mov edx, 0x3a3
call fcn.140009a10
mov eax, 1
cmp dword [rsp + 0x48], eax
cmove edi, eax
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x140005834
mov edx, 0x5c
mov rcx, rbx
call fcn.140010f04
test rax, rax
je 0x14000580e
mov edx, 0x5c
mov rcx, rbx
call fcn.140010f04
lea rbx, [rax + 1]
lea rax, str.Error_close.
mov r9d, 2
lea r8, str.IsExpandableTaskbar
mov qword [rsp + 0x20], rax
mov edx, 0x3ad
mov rcx, rbx
call fcn.140009cf0
mov eax, edi
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14000eea0
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret