Function at 0x1400edfb0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x130
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14044b080]
xor rax, rsp
mov qword [rbp + 0x28], rax
mov rdi, rcx
mov qword [rsp + 0x68], rcx
mov qword [rbp - 0x78], rcx
lea rax, vtable.CPropChangeEvent.0
mov qword [rcx], rax
lea rax, vtable.CGenericWindow.0
mov qword [rcx + 8], rax
xor r12d, r12d
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x20], r12
mov dword [rcx + 0x18], r12d
mov qword [rcx + 0x28], r12
mov dword [rcx + 0x30], r12d
mov word [rcx + 0x34], r12w
lea rbx, [rcx + 0x38]
mov qword [rsp + 0x48], rbx
lea rax, vtable.CCapxJackRegistration.0
mov qword [rbx], rax
lea rcx, [rbx + 8]
lea edx, [r12 + 1]
call fcn.14029c000
nop
lea rcx, [rbx + 0x158]
call fcn.140115820
mov qword [rbx + 0x268], r12
mov qword [rbx + 0x270], r12
mov byte [rbx + 0x278], r12b
lea rax, vtable.CAutoInstallAPO.1.0
mov qword [rdi], rax
lea rax, vtable.CAutoInstallAPO.0
mov qword [rdi + 8], rax
lea rax, vtable.CAutoInstallAPO.2.0
mov qword [rbx], rax
mov qword [rdi + 0x2b8], r12
mov qword [rdi + 0x2c0], r12
mov qword [rdi + 0x2c8], r12
mov qword [rdi + 0x2d0], r12
mov qword [rdi + 0x2d8], r12
mov qword [rdi + 0x2e0], r12
lea rax, vtable.CAudioProperties.0
mov qword [rdi + 0x2e8], rax
mov qword [rdi + 0x328], r12
xor eax, eax
mov qword [rdi + 0x2f4], rax
mov qword [rdi + 0x2fc], rax
mov qword [rdi + 0x304], rax
mov qword [rdi + 0x30c], rax
mov qword [rdi + 0x314], rax
mov qword [rdi + 0x320], r12
mov dword [rdi + 0x2f0], r12d
mov word [rdi + 0x330], r12w
mov qword [rdi + 0x538], r12
mov dword [rdi + 0x540], r12d
lea rcx, [rdi + 0x548]
lea edx, [rax + 2]
call fcn.1401e616c
nop
mov qword [rdi + 0x598], r12
mov qword [rdi + 0x5a0], r12
mov qword [rdi + 0x5a8], r12
mov dword [rdi + 0x5b0], r12d
lea rsi, [rdi + 0x5b8]
mov qword [rsp + 0x60], rsi
mov qword [rsi], r12
mov qword [rsi + 8], r12
call fcn.140054a00
mov qword [rsi], rax
lea rbx, [rdi + 0x5c8]
mov qword [rsp + 0x48], rbx
mov qword [rbx], r12
mov qword [rbx + 8], r12
call fcn.140054a00
mov qword [rbx], rax
lea rbx, [rdi + 0x5d8]
mov qword [rbp - 0x10], rbx
mov qword [rbx], r12
mov qword [rbx + 8], r12
call fcn.140054a00
mov qword [rbx], rax
lea rbx, [rdi + 0x5e8]
mov qword [rbp - 0x10], rbx
mov qword [rbx], r12
mov qword [rbx + 8], r12
call fcn.140054a00
mov qword [rbx], rax
lea rbx, [rdi + 0x5f8]
mov qword [rbp - 0x10], rbx
mov qword [rbx], r12
mov qword [rbx + 8], r12
call fcn.14004a700
mov qword [rbx], rax
mov qword [rdi + 0x608], r12
mov qword [rdi + 0x610], r12
mov qword [rdi + 0x618], r12
lea rcx, [rdi + 0x620]
call fcn.140115820
nop
mov byte [rdi + 0x730], r12b
mov byte [rdi + 0x731], r12b
mov qword [rdi + 0x738], r12
mov qword [rdi + 0x740], r12
lea rbx, [rdi + 0x748]
mov qword [rbp], rbx
mov qword [rbx], r12
mov qword [rbx + 8], r12
call fcn.140054a00
mov qword [rbx], rax
xor ecx, ecx
mov dword [rdi + 0x758], ecx
lea rax, str.CAutoInstallAPO::CAutoInstallAPO
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 3]
lea r8, [0x1404675c0]
mov edx, 0x196
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_shared_autoinstallapo.cpp
call fcn.140039f30
mov dword [rbp - 8], r12d
mov qword [rbp - 0x38], r12
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [0x140320430]
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x1400ee2bc
mov dword [rbp + 8], 4
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x20]
xor r8d, r8d
lea rdx, str.DDPause
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov eax, dword [rbp - 8]
mov dword [rdi + 0x5b0], eax
mov dword [rsp + 0x30], eax
lea rax, str.CAutoInstallAPO::CAutoInstallAPO__dwPause___d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 3
lea r8, [0x1404675c0]
mov edx, 0x19a
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_shared_autoinstallapo.cpp
call fcn.140039f30
xor eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r12
mov dword [rbp - 0x18], r12d
mov qword [rbp], r12
lea rax, [0x14031b7bc]
mov qword [rsp + 0x20], rax
lea r9, str.DDEnDiInclude
lea r8, [0x140320430]
mov rdx, 0xffffffff80000002
lea rcx, [rbp]
call fcn.140056fc0
nop
mov rdi, qword [rbp]
mov qword [rbp - 0x28], r12
mov rbx, r12
mov qword [rbp - 0x20], rbx
mov r15, 0xffffffffffffffff
cmp r12w, word [rdi]
je 0x1400ee43f
mov rsi, r12
mov r14, r12
call fcn.140039c50
mov rcx, rax
test rax, rax
je 0x1400eea22
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14004487d.0]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.14003b370
test al, al
jne 0x1400ee3bd
mov rax, r15
nop
inc rax
cmp word [rdi + rax*2], 0
jne 0x1400ee3a0
mov r8d, eax
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.14003beb0
mov rsi, r14
cmp rsi, rbx
jb 0x1400ee3d7
lea rdx, [rsi + 1]
lea rcx, [rbp - 0x30]
call fcn.140058ea0
test al, al
je 0x1400eea17
mov rax, qword [rbp - 0x30]
lea rcx, [rax + rsi*8]
mov rbx, qword [rsp + 0x50]
mov rdx, rbx
call fcn.14003be10
mov rsi, qword [rbp - 0x28]
inc rsi
mov qword [rbp - 0x28], rsi
movsxd rax, dword [rbx - 0x10]
lea rdi, [rdi + rax*2]
add rdi, 2
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ee424
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
mov r14, rsi
cmp r12w, word [rdi]
je 0x1400ee436
mov rbx, qword [rbp - 0x20]
jmp 0x1400ee363
mov rdi, qword [rbp]
mov rsi, qword [rsp + 0x60]
lea rdx, [rdi - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ee460
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
mov r14, qword [rbp - 0x30]
mov r13, qword [rbp - 0x28]
test r13, r13
je 0x1400ee4fd
xor eax, eax
movzx ebx, byte [rsp + 0x40]
cmp rax, r13
jae 0x1400eea43
lea rsi, [r14 + rax*8]
mov r8, qword [rsi]
movsxd rdi, dword [r8 - 0x10]
test edi, edi
js 0x1400eea38
mov ecx, 1
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, edi
or eax, ecx
jge 0x1400ee4b4
mov edx, edi
mov rcx, rsi
call fcn.14003b630
mov r8, qword [rsi]
lea eax, [rdi + 1]
movsxd rdx, eax
mov rcx, r8
call fcn.140238d50
mov rax, qword [rsi]
cmp edi, dword [rax - 0xc]
jg 0x1400eea2d
mov dword [rax - 0x10], edi
mov rax, qword [rsi]
xor edx, edx
mov word [rax + rdi*2], dx
mov byte [rsp + 0x20], bl
mov r9, rsi
lea rdx, [rbp - 0x58]
mov rsi, qword [rsp + 0x60]
mov rcx, rsi
call fcn.140066ec0
inc r12d
mov eax, r12d
cmp rax, r13
jb 0x1400ee481
mov rax, qword [rsi + 8]
mov qword [rsp + 0x30], rax
lea rax, str.CAutoInstallAPO::CAutoInstallAPO__number_of_entries_in_DDEnDiInclude___d
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 3]
lea r8, [0x1404675c0]
mov edx, 0x1a5
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_shared_autoinstallapo.cpp
call fcn.140039f30
test r14, r14
je 0x1400ee559
mov rdx, r13
mov rcx, r14
call fcn.140059000
mov rcx, r14
call fcn.1402384fc
xor r13d, r13d
mov r14d, r13d
mov qword [rbp - 0x30], r13
jmp 0x1400ee55c
xor r13d, r13d
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
lea rax, [0x14031b7bc]
mov qword [rsp + 0x20], rax
lea r9, str.DDEnDiExclude
lea r8, [0x140320430]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x10]
call fcn.140056fc0
nop
mov rdi, qword [rbp - 0x10]
test r14, r14
je 0x1400ee5b5
xor edx, edx
mov rcx, r14
call fcn.140059000
mov rcx, r14
call fcn.1402384fc
mov r14, r13
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
mov rbx, r13
mov qword [rbp - 0x20], rbx
cmp r13w, word [rdi]
je 0x1400ee6aa
mov rsi, r13
mov r12, r13
call fcn.140039c50
mov rcx, rax
test rax, rax
je 0x1400eea59
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14004487d.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.14003b370
test al, al
jne 0x1400ee62d
mov rax, r15
nop dword [rax + rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x1400ee610
mov r8d, eax
mov rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.14003beb0
mov rsi, r12
cmp rsi, rbx
jb 0x1400ee64b
lea rdx, [rsi + 1]
lea rcx, [rbp - 0x30]
call fcn.140058ea0
test al, al
je 0x1400eea4e
mov r14, qword [rbp - 0x30]
lea rcx, [r14 + rsi*8]
mov rbx, qword [rsp + 0x58]
mov rdx, rbx
call fcn.14003be10
mov rsi, qword [rbp - 0x28]
inc rsi
mov qword [rbp - 0x28], rsi
movsxd rax, dword [rbx - 0x10]
lea rdi, [rdi + rax*2]
add rdi, 2
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ee694
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
mov r12, rsi
cmp r13w, word [rdi]
je 0x1400ee6aa
mov rbx, qword [rbp - 0x20]
mov r14, qword [rbp - 0x30]
jmp 0x1400ee5d0
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ee6cf
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
mov r14d, r13d
mov r12, qword [rsp + 0x48]
cmp qword [rbp - 0x28], 0
jbe 0x1400ee76f
mov rcx, r13
movzx ebx, byte [rsp + 0x40]
cmp rcx, qword [rbp - 0x28]
jae 0x1400eea0c
mov rax, qword [rbp - 0x30]
lea rsi, [rax + rcx*8]
mov r8, qword [rsi]
movsxd rdi, dword [r8 - 0x10]
test edi, edi
js 0x1400eea01
mov ecx, 1
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, edi
or eax, ecx
jge 0x1400ee72b
mov edx, edi
mov rcx, rsi
call fcn.14003b630
mov r8, qword [rsi]
lea eax, [rdi + 1]
movsxd rdx, eax
mov rcx, r8
call fcn.140238d50
mov rax, qword [rsi]
cmp edi, dword [rax - 0xc]
jg 0x1400eea64
mov dword [rax - 0x10], edi
mov rax, qword [rsi]
mov word [rax + rdi*2], r13w
mov byte [rsp + 0x20], bl
mov r9, rsi
lea rdx, [rbp - 0x48]
mov rcx, r12
call fcn.140066ec0
inc r14d
mov ecx, r14d
cmp rcx, qword [rbp - 0x28]
jb 0x1400ee6f4
mov rax, qword [r12 + 8]
mov qword [rsp + 0x30], rax
lea rax, str.CAutoInstallAPO::CAutoInstallAPO__number_of_entries_in_DDEnDiExclude___d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 3
lea r8, [0x1404675c0]
mov edx, 0x1b0
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_shared_autoinstallapo.cpp
call fcn.140039f30
mov r14, qword [rsp + 0x68]
mov rcx, r14
call fcn.1400f31f0
mov rcx, r14
call fcn.1400f33f0
mov rcx, r14
call fcn.1400f35f0
mov ecx, 0x60
call fcn.140202bf8
mov r12, rax
mov qword [rsp + 0x68], rax
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj_class_CDellPlatinumAppHelper_.0
mov qword [r12], rax
lea rsi, [r12 + 0x10]
mov qword [rsp + 0x48], rsi
lea rax, vtable.CDellPlatinumAppHelper.0
mov qword [rsi], rax
lea rcx, [rsi + 8]
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], 7
mov word [rcx], r13w
xor r8d, r8d
lea rdx, [0x14031b7bc]
call fcn.14003b160
nop
xor eax, eax
mov dword [rsi + 0x28], eax
lea rcx, [rsi + 0x30]
call fcn.14006c1e0
nop
lea r8, [rsi + 0x2a]
lea rdx, [rsi + 0x29]
lea r9, [rsi + 0x2b]
lea rcx, [rsi + 0x28]
call fcn.14006edf0
cmp byte [rsi + 0x2b], 0xc
jb 0x1400ee87b
mov rax, qword [rsi + 0x30]
movabs rdx, 0x40000000000
lea rcx, [rsi + 0x30]
mov rax, qword [rax + 0x18]
call qword [case.0x14004487d.0]
test al, al
je 0x1400ee87b
mov rcx, rsi
call fcn.14011cc20
nop
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], r12
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x68]
call fcn.1400fa180
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rdx, qword [rax + 8]
xor r8d, r8d
mov qword [rax], r8
mov qword [rax + 8], r8
mov qword [r14 + 0x5a0], rcx
mov qword [rbp - 0x70], rdx
mov rbx, qword [r14 + 0x5a8]
mov qword [rsp + 0x78], rbx
mov qword [r14 + 0x5a8], rdx
test rbx, rbx
je 0x1400ee907
mov eax, r15d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ee907
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
mov rax, qword [rax]
call qword [case.0x14004487d.0]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ee907
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
nop
mov rbx, qword [rbp - 0x60]
test rbx, rbx
je 0x1400ee94a
mov eax, r15d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ee94a
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14004487d.0]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ee94a
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
nop
lea r9, [r14 + 0x75b]
lea r8, [r14 + 0x75a]
lea rdx, [r14 + 0x759]
lea rcx, [r14 + 0x758]
call fcn.14006edf0
nop
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x1400ee9b3
mov eax, r15d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400ee9b3
mov rbx, qword [rbp + 0x18]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14004487d.0]
lock xadd dword [rbx + 0xc], r15d
cmp r15d, 1
jne 0x1400ee9b3
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
nop
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x1400ee9d1
mov rdx, qword [rbp - 0x28]
mov rcx, rbx
call fcn.140059000
mov rcx, rbx
call fcn.1402384fc
nop
mov rax, r14
mov rcx, qword [rbp + 0x28]
xor rcx, rsp
call fcn.140202880
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.140039950
int3
mov ecx, 0x80070057
call fcn.140039950
nop
mov ecx, 0x8007000e
call fcn.140039950
nop
mov ecx, 0x80004005
call fcn.140039950
nop
mov ecx, 0x80070057
call fcn.140039950
int3
mov ecx, 0x80070057
call fcn.140039950
int3
mov ecx, 0x80070057
call fcn.140039950
nop
mov ecx, 0x8007000e
call fcn.140039950
nop
mov ecx, 0x80004005
call fcn.140039950
nop
mov ecx, 0x80070057
call fcn.140039950
int3