Function at 0x1400ba820
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
mov eax, WSACleanup
call fcn.14024eae0
sub rsp, rax
mov r12, rcx
mov eax, r9d
xor ecx, ecx
mov r13, rdx
test r8d, r8d
je 0x1400ba858
mov word [rdx], cx
mov r8d, r8d
add r8, r8
cmp rax, r8
jae 0x1400ba875
mov ecx, 0x48d3d3
call fcn.1400bc714
or eax, 0xffffffff
jmp 0x1400baa65
lea rsi, [0x1402c4388]
mov cl, byte [rsi]
mov rdx, r12
or ebx, 0xffffffff
call fcn.1400b9cb8
mov dword [rbp - 0x28], eax
mov edi, eax
cmp eax, 0xffffffff
je 0x1400baa31
lea rdx, [0x140377bd0]
lea rcx, [rbp - 0x10]
call fcn.1400b5034
xor edx, edx
mov r15d, edx
cmp r15d, 4
jge 0x1400baa28
mov al, byte [r12 + 0x18]
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rdx
mov r14b, dl
mov byte [rbp + 0x50], dl
mov r9d, edi
mov rdx, qword [r12 + 0x10]
xor r8d, r8d
mov byte [rsp + 0x20], al
call fcn.1400b8ff0
xor edx, edx
mov ebx, dword [rax]
mov rdi, qword [rax + 8]
mov qword [rax + 8], rdx
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x1400ba906
mov qword [rbp - 0x18], rdx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004a846.0]
xor edx, edx
test ebx, ebx
jne 0x1400baa02
mov eax, dword [rbp + 0x58]
mov r9d, 0xffff
mov r14b, byte [r12 + 0x1c]
mov r8, qword [r12]
and r14b, 0xf
mov rcx, qword [rdi + 0x10]
mov dword [rbp - 0x30], eax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x2c]
mov dword [rbp - 0x2c], edx
xor edx, edx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov ecx, dword [rbp - 0x2c]
mov r8d, 2
mov ebx, eax
cmp dword [rbp - 0x30], r8d
jae 0x1400ba968
lea eax, [rcx - 1]
cmp eax, 1
cmovbe ebx, r8d
mov r9d, 0x3f2
cmp ebx, r9d
je 0x1400ba986
cmp ebx, 0x3fa
je 0x1400ba986
cmp ebx, 6
je 0x1400ba986
xor edx, edx
mov eax, edx
jmp 0x1400ba98d
mov eax, 1
xor edx, edx
test eax, eax
jne 0x1400ba9cc
test ebx, ebx
jne 0x1400ba9cc
lea eax, [rcx - 1]
cmp eax, 1
ja 0x1400ba9ac
mov eax, dword [rbp - 0x30]
shr rax, 1
mov word [r13 + rax*2 - 2], dx
mov ecx, dword [rbp - 0x2c]
movzx eax, r14b
cmp ecx, eax
je 0x1400ba9cc
sub ecx, 1
je 0x1400ba9c4
cmp ecx, 1
jne 0x1400ba9c9
cmp eax, ecx
jne 0x1400ba9c9
jmp 0x1400ba9cc
cmp eax, r8d
je 0x1400ba9cc
mov ebx, r8d
cmp ebx, r9d
je 0x1400ba9e0
cmp ebx, 0x3fa
je 0x1400ba9e0
mov eax, edx
cmp ebx, 6
jne 0x1400ba9e5
mov eax, 1
test eax, eax
je 0x1400ba9fa
mov rcx, qword [r12 + 0x10]
call fcn.1400b8df8
xor edx, edx
mov r14b, 1
jmp 0x1400baa02
test ebx, ebx
je 0x1400baa45
mov r14b, byte [rbp + 0x50]
test rdi, rdi
je 0x1400baa19
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [case.0x14004a846.0]
xor edx, edx
mov edi, dword [rbp - 0x28]
inc r15d
test r14b, r14b
jne 0x1400ba8ac
lea rcx, [rbp - 0x10]
call fcn.1400b4fc0
inc rsi
lea rax, [0x1402c438b]
cmp rsi, rax
je 0x1400baa63
jmp 0x1400ba87c
test rdi, rdi
je 0x1400baa5a
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [case.0x14004a846.0]
lea rcx, [rbp - 0x10]
call fcn.1400b4fc0
mov eax, ebx
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret