Function at 0x140012728
Capabilities:
Query or enumerate registry key

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
lea rbp, [rsp + 0x60]
mov qword [rbp + 0x1a0], rbx
mov rax, qword [0x140066550]
xor rax, rbp
mov qword [rbp + 0x140], rax
xor r15d, r15d
mov r14d, r8d
mov r12, rdx
mov rbx, rcx
mov qword [rbp], r15
cmp rdx, r15
je 0x1400127d9
mov eax, dword [0x1400577c8]
cmp dword [rcx], eax
jne 0x140012804
mov eax, dword [0x1400577cc]
cmp dword [rcx + 4], eax
jne 0x140012804
mov eax, dword [0x1400577d0]
cmp dword [rcx + 8], eax
jne 0x140012804
mov eax, dword [0x1400577d4]
cmp dword [rcx + 0xc], eax
jne 0x140012804
lea rax, str.0___Use_OBJECT_ENTRY_NON_CREATEABLE_EX_macro_if_you_want_to_register_class_categories_for_non_creatable_objects._
lea rdx, [0x140053e20]
lea ecx, [r15 + 2]
xor r9d, r9d
mov r8d, 0x19a2
mov qword [rsp + 0x20], rax
call fcn.140021fb0
lea edi, [r15 + 1]
cmp eax, edi
jne 0x1400127ca
int3
mov rcx, qword [rbp]
cmp rcx, r15
je 0x1400127d9
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
mov rcx, qword [rbp + 0x140]
xor rcx, rbp
call fcn.1400209e0
mov rbx, qword [rbp + 0x1a0]
lea rsp, [rbp + 0x150]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rax, [rbp]
mov edi, 1
lea r9, [0x140055ba8]
lea rcx, [0x1400577e8]
xor edx, edx
mov r8d, edi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, r15d
jl 0x1400127ca
cmp dword [r12], r15d
je 0x1400129fc
lea r13d, [rdi + 1]
mov rax, qword [r12 + 8]
lea rcx, str.pEntry__iType__2
lea rdx, str.p_0
movdqu xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x30], xmm0
cmp r14d, r15d
je 0x140012939
cmp dword [r12], edi
jne 0x1400128aa
mov rcx, qword [rbp]
cmp rcx, r15
jne 0x140012898
mov qword [rsp + 0x20], rdx
lea rdx, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_atlcomcli.h
xor r9d, r9d
mov r8d, 0xac
mov ecx, r13d
call fcn.140021fb0
cmp eax, edi
jne 0x140012894
int3
mov rcx, qword [rbp]
mov rax, qword [rcx]
lea r9, [rbp + 0x30]
mov r8d, edi
mov rdx, rbx
call qword [rax + 0x28]
jmp 0x140012918
cmp dword [r12], r13d
je 0x1400128d9
mov qword [rsp + 0x20], rcx
lea rdx, [0x140053e20]
xor r9d, r9d
mov r8d, 0x19c1
mov ecx, r13d
call fcn.140021fb0
cmp eax, edi
jne 0x1400128d2
int3
lea rdx, str.p_0
mov rcx, qword [rbp]
cmp rcx, r15
jne 0x140012908
mov qword [rsp + 0x20], rdx
lea rdx, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_atlcomcli.h
xor r9d, r9d
mov r8d, 0xac
mov ecx, r13d
call fcn.140021fb0
cmp eax, edi
jne 0x140012904
int3
mov rcx, qword [rbp]
mov rax, qword [rcx]
lea r9, [rbp + 0x30]
mov r8d, edi
mov rdx, rbx
call qword [rax + 0x38]
cmp eax, r15d
mov esi, eax
jge 0x1400129ee
mov rcx, qword [rbp]
cmp rcx, r15
je 0x140012932
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, esi
jmp 0x1400127db
cmp dword [r12], edi
jne 0x140012980
mov rcx, qword [rbp]
cmp rcx, r15
jne 0x14001296e
mov qword [rsp + 0x20], rdx
lea rdx, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_atlcomcli.h
xor r9d, r9d
mov r8d, 0xac
mov ecx, r13d
call fcn.140021fb0
cmp eax, edi
jne 0x14001296a
int3
mov rcx, qword [rbp]
mov rax, qword [rcx]
lea r9, [rbp + 0x30]
mov r8d, edi
mov rdx, rbx
call qword [rax + 0x30]
jmp 0x1400129ee
cmp dword [r12], r13d
je 0x1400129af
mov qword [rsp + 0x20], rcx
lea rdx, [0x140053e20]
xor r9d, r9d
mov r8d, 0x19d2
mov ecx, r13d
call fcn.140021fb0
cmp eax, edi
jne 0x1400129a8
int3
lea rdx, str.p_0
mov rcx, qword [rbp]
cmp rcx, r15
jne 0x1400129de
mov qword [rsp + 0x20], rdx
lea rdx, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_atlcomcli.h
xor r9d, r9d
mov r8d, 0xac
mov ecx, r13d
call fcn.140021fb0
cmp eax, edi
jne 0x1400129da
int3
mov rcx, qword [rbp]
mov rax, qword [rcx]
lea r9, [rbp + 0x30]
mov r8d, edi
mov rdx, rbx
call qword [rax + 0x40]
add r12, 0x10
cmp dword [r12], r15d
jne 0x14001283e
cmp r14d, r15d
jne 0x1400127ca
lea rdx, [rbp + 0xc0]
mov r8d, 0x40
mov rcx, rbx
call qword [sym.imp.ole32.dll_StringFromGUID2]
lea rcx, [rbp + 0xc0]
mov rbx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, 0xffffffff
add eax, edi
movsxd rdi, eax
mov eax, 0x80000000
add rdi, rdi
add rax, rdi
cmp rax, rcx
ja 0x1400127ca
cmp edi, 0x400
jg 0x140012a87
movsxd rsi, edi
mov rcx, rsi
call fcn.14000ea24
cmp al, r15b
je 0x140012a87
lea rax, [rsi + 0xf]
cmp rax, rsi
ja 0x140012a74
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.14004e7e0
sub rsp, rax
lea rcx, [rsp + 0x60]
jmp 0x140012ab8
or rax, 0xffffffffffffffff
movsxd rcx, edi
sub rax, rcx
cmp rax, 0x10
jb 0x140012e18
add rcx, 0x10
call fcn.140021f70
cmp rax, r15
jne 0x140012aae
mov rcx, r15
jmp 0x140012ab8
mov qword [rax], r15
mov rbx, rax
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0xc0]
mov r9d, 3
mov r8d, edi
call fcn.14000b0a8
mov r12, rax
cmp rax, r15
je 0x140012e0e
mov edi, 0x80
lea r8, str.CLSID_
lea rcx, [rbp + 0x40]
mov rdx, rdi
call fcn.140022730
lea r13d, [rdi - 0x74]
lea r14d, [rdi - 0x30]
cmp eax, r15d
je 0x140012b33
cmp eax, r13d
je 0x140012b28
cmp eax, 0x16
je 0x140012b1d
cmp eax, 0x22
je 0x140012b1d
cmp eax, r14d
je 0x140012b33
mov ecx, 0x80004005
call fcn.14000b1d4
int3
mov ecx, 0x80070057
call fcn.14000b1d4
int3
mov ecx, 0x8007000e
call fcn.14000b1d4
int3
lea rcx, [rbp + 0x40]
mov r8, r12
mov rdx, rdi
call fcn.140023830
cmp eax, r15d
je 0x140012b7c
cmp eax, r13d
je 0x140012b71
cmp eax, 0x16
je 0x140012b66
cmp eax, 0x22
je 0x140012b66
cmp eax, r14d
je 0x140012b7c
mov ecx, 0x80004005
call fcn.14000b1d4
int3
mov ecx, 0x80070057
call fcn.14000b1d4
int3
mov ecx, 0x8007000e
call fcn.14000b1d4
int3
lea r8, str.Required_Categories
lea rcx, [rbp + 0x40]
mov rdx, rdi
call fcn.140023830
cmp eax, r15d
je 0x140012bc9
cmp eax, r13d
je 0x140012bbe
cmp eax, 0x16
je 0x140012bb3
cmp eax, 0x22
je 0x140012bb3
cmp eax, r14d
je 0x140012bc9
mov ecx, 0x80004005
call fcn.14000b1d4
int3
mov ecx, 0x80070057
call fcn.14000b1d4
int3
mov ecx, 0x8007000e
call fcn.14000b1d4
int3
lea r8, [rbp + 0x40]
lea rcx, [rbp + 0x10]
mov r9d, 0x20019
mov rdx, 0xffffffff80000000
mov qword [rbp + 0x20], 0xffffffff80000000
mov dword [rbp + 0x28], r15d
mov qword [rbp + 0x10], r15
mov dword [rbp + 0x18], r15d
mov dword [rbp + 8], r15d
call fcn.14000b550
cmp eax, r15d
jne 0x140012c77
mov rdi, qword [rbp + 0x10]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
lea rax, [rbp + 8]
mov qword [rsp + 0x30], r15
mov rcx, rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
movsxd rsi, eax
cmp rdi, r15
je 0x140012c56
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp + 0x10], r15
mov dword [rbp + 0x18], r15d
cmp rsi, r15
jne 0x140012c72
cmp dword [rbp + 8], r15d
jne 0x140012c72
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.14000b3a0
mov edi, 0x80
lea r8, str.CLSID_
lea rcx, [rbp + 0x40]
mov rdx, rdi
call fcn.140022730
cmp eax, r15d
je 0x140012cc4
cmp eax, r13d
je 0x140012cb9
cmp eax, 0x16
je 0x140012cae
cmp eax, 0x22
je 0x140012cae
cmp eax, r14d
je 0x140012cc4
mov ecx, 0x80004005
call fcn.14000b1d4
int3
mov ecx, 0x80070057
call fcn.14000b1d4
int3
mov ecx, 0x8007000e
call fcn.14000b1d4
int3
lea rcx, [rbp + 0x40]
mov r8, r12
mov rdx, rdi
call fcn.140023830
cmp eax, r15d
je 0x140012d0d
cmp eax, r13d
je 0x140012d02
cmp eax, 0x16
je 0x140012cf7
cmp eax, 0x22
je 0x140012cf7
cmp eax, r14d
je 0x140012d0d
mov ecx, 0x80004005
call fcn.14000b1d4
int3
mov ecx, 0x80070057
call fcn.14000b1d4
int3
mov ecx, 0x8007000e
call fcn.14000b1d4
int3
lea r8, str.Implemented_Categories
lea rcx, [rbp + 0x40]
mov rdx, rdi
call fcn.140023830
cmp eax, r15d
je 0x140012d5a
cmp eax, r13d
je 0x140012d4f
cmp eax, 0x16
je 0x140012d44
cmp eax, 0x22
je 0x140012d44
cmp eax, r14d
je 0x140012d5a
mov ecx, 0x80004005
call fcn.14000b1d4
int3
mov ecx, 0x80070057
call fcn.14000b1d4
int3
mov ecx, 0x8007000e
call fcn.14000b1d4
int3
lea r8, [rbp + 0x40]
lea rcx, [rbp + 0x10]
mov r9d, 0x20019
mov rdx, 0xffffffff80000000
call fcn.14000b550
mov rdi, qword [rbp + 0x10]
cmp eax, r15d
jne 0x140012de6
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
lea rax, [rbp + 8]
mov qword [rsp + 0x30], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
movsxd rsi, eax
cmp rdi, r15
je 0x140012dce
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdi, r15
cmp rsi, r15
jne 0x140012de6
cmp dword [rbp + 8], r15d
jne 0x140012de6
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.14000b3a0
cmp rdi, r15
je 0x140012df4
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140012e0e
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.140020fe0
cmp rbx, r15
jne 0x140012e03
jmp 0x1400127ca
mov ecx, 0x80070057
call fcn.14000b1d4
int3