Function at 0x14001e244
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rbp
push rdi
push r12
mov rbp, rsp
sub rsp, 0x30
mov rsi, rdx
lea rbx, [rcx + 0x420]
lea rax, [rbp + 0x20]
mov rdi, rcx
mov qword [r11 - 0x20], rax
lea rdx, [0x14009a078]
mov r12d, 0x208
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [r11 - 0x28], rbx
mov dword [rbp + 0x20], r12d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rax, str.SysWow64_
lea rcx, [rdi + 0x628]
lea r8, [0x14009a050]
mov r9, rbx
mov edx, 0x104
mov qword [rsp + 0x20], rax
call fcn.14005ce1c
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x830]
lea rdx, str.BTWVERS
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0xa38]
lea rdx, str.StartPort
mov qword [rsp + 0x28], rcx
mov ebx, 4
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0xa3c]
lea rdx, str.BT_EXCHG_FLDR
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0xc44]
lea rdx, str.BT_NET_CONN_NAME
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0xe4c]
mov qword [rsp + 0x28], rcx
lea rdx, str.CustomLogoBitmap
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x125c]
lea rdx, str.ShowUnplugDeviceDlg
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1054]
lea rdx, str.DisplayName
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1260]
mov qword [rsp + 0x28], rcx
lea rdx, str.ServicePack
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x1264]
lea rdx, str.LastNonUpgradeInstallTime
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], 8
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x126c]
lea rdx, str.LangID
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1270]
mov qword [rsp + 0x28], rcx
lea rdx, str.ERIM
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x1478]
lea rdx, str.DeviceID
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1680]
lea rdx, str.SmartDongle
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1684]
mov qword [rsp + 0x28], rcx
lea rdx, str.BVRP_MPT
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rbp + 0x20], r12d
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1688]
lea rdx, str.VERSION
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1890]
mov qword [rsp + 0x28], rcx
lea rdx, str.DriverInstallMask
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x1894]
lea rdx, str.ProfilePack
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1898]
lea rdx, str.InstallState
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x189c]
mov qword [rsp + 0x28], rcx
lea rdx, str.Code
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x18a0]
lea rdx, str.EasyPairIcon
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x18a4]
lea rdx, str.DisablePreFirstRun
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x18a8]
mov qword [rsp + 0x28], rcx
lea rdx, str.EnableWin7Help
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rbp + 0x20], ebx
lea rax, [rdi + 0x18ac]
lea rcx, [rbp + 0x20]
lea rdx, str.UninstallBCBTUMS
xor r9d, r9d
mov qword [rsp + 0x28], rcx
mov rcx, rsi
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r12
pop rdi
pop rbp
ret