Function at 0x140010750
Capabilities:
Query or enumerate registry value

Disassembly:
sub rsp, 0x3c8
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x300], rdx
mov byte [rsp + 0x2ff], 0
lea rcx, [rsp + 0x140]
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionProductNameEditionID
mov r8d, 0x2c
call dbg.to_wide
jmp 0x1400107c3
mov qword [rsp + 0x158], 0
lea rcx, [rsp + 0x140]
call dbg.alloc::vec::Vec<T,A>::as_ptr::h97dbd9788264bc52
mov qword [rsp + 0x120], rax
jmp 0x1400107e6
mov rdx, qword [rsp + 0x120]
mov rax, rsp
lea rcx, [rsp + 0x158]
mov qword [rax + 0x20], rcx
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20019
call sub.advapi32.dll_RegOpenKeyExW
mov dword [rsp + 0x11c], eax
jmp 0x14001081b
mov eax, dword [rsp + 0x11c]
cmp eax, 0
jne 0x140010832
cmp qword [rsp + 0x158], 0
jne 0x14001085e
mov qword [rsp + 0x160], 1
lea rdx, [0x1400feaf0]
lea rcx, [rsp + 0x160]
call dbg.le<log::Level, log::LevelFilter>
mov byte [rsp + 0x11b], al
jmp 0x1400110b4
mov rax, qword [rsp + 0x128]
cmp dword [rax + 4], 0xa
jne 0x140010889
mov rax, qword [rsp + 0x128]
cmp dword [rax + 0xc], 0x55f0
setae al
and al, 1
mov byte [rsp + 0x1a7], al
jmp 0x140010891
mov byte [rsp + 0x1a7], 0
test byte [rsp + 0x1a7], 1
jne 0x1400108b8
lea rax, [0x1400fea7c]
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x1c8], 0xb
jmp 0x1400108d3
lea rax, [0x1400fea87]
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x1c8], 9
mov rdx, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x1c8]
lea rcx, [rsp + 0x1a8]
call dbg.to_wide
jmp 0x1400108f2
mov dword [rsp + 0x1d0], 0
mov dword [rsp + 0x1d4], 0
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x108], rax
lea rcx, [rsp + 0x1a8]
call dbg.alloc::vec::Vec<T,A>::as_ptr::h97dbd9788264bc52
mov qword [rsp + 0x110], rax
jmp 0x140010957
mov qword [rsp + 0x3a8], 0
mov qword [rsp + 0x3b0], 0
mov qword [rsp + 0x3c0], 0
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x348], 0
mov qword [rsp + 0x350], 0
mov qword [rsp + 0x360], 0
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0xf8], rax
mov r8, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x108]
mov r9, qword [rsp + 0xf8]
mov rax, rsp
lea r10, [rsp + 0x1d4]
mov qword [rax + 0x28], r10
mov qword [rax + 0x20], r9
lea r9, [rsp + 0x1d0]
call sub.advapi32.dll_RegQueryValueExW
mov dword [rsp + 0xf4], eax
jmp 0x140010a28
mov eax, dword [rsp + 0xf4]
cmp eax, 0
jne 0x140010a3e
cmp dword [rsp + 0x1d0], 1
je 0x140010a6a
mov qword [rsp + 0x1d8], 1
lea rdx, [0x1400feaf0]
lea rcx, [rsp + 0x1d8]
call dbg.le<log::Level, log::LevelFilter>
mov byte [rsp + 0xf3], al
jmp 0x140010fe3
cmp dword [rsp + 0x1d4], 0
je 0x140010a3e
mov eax, dword [rsp + 0x1d4]
mov dword [rsp + 0xec], eax
mov eax, dword [rsp + 0xec]
and eax, 1
cmp eax, 0
jne 0x140010a3e
mov eax, dword [rsp + 0x1d4]
mov qword [rsp + 0xe0], rax
mov r8, qword [rsp + 0xe0]
shr r8, 1
xor eax, eax
mov dx, ax
lea rcx, [rsp + 0x218]
call dbg.from_elem<u16>
jmp 0x140010abf
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0x1a8]
call dbg.alloc::vec::Vec<T,A>::as_ptr::h97dbd9788264bc52
mov qword [rsp + 0xd8], rax
jmp 0x140010b0e
mov qword [rsp + 0x388], 0
mov qword [rsp + 0x390], 0
mov qword [rsp + 0x3a0], 0
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x368], 0
mov qword [rsp + 0x370], 0
mov qword [rsp + 0x380], 0
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0x218]
call dbg.alloc::vec::Vec<T,A>::as_mut_ptr::h62e8759c8c6cb660
mov qword [rsp + 0xb8], rax
jmp 0x140010bad
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x340], rax
mov r9, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xd0]
mov r10, qword [rsp + 0xb8]
mov rax, rsp
lea r11, [rsp + 0x1d4]
mov qword [rax + 0x28], r11
mov qword [rax + 0x20], r10
call sub.advapi32.dll_RegQueryValueExW
mov dword [rsp + 0xb4], eax
jmp 0x140010c06
mov eax, dword [rsp + 0xb4]
cmp eax, 0
jne 0x140010c38
mov eax, dword [rsp + 0x1d4]
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x218]
call dbg.alloc::vec::Vec<T,A>::len::h1c609d445ef8eacf
mov qword [rsp + 0xa8], rax
jmp 0x140010c5f
mov rax, qword [rsp + 0x130]
movabs rcx, 0x8000000000000000
mov qword [rax], rcx
lea rcx, [rsp + 0x218]
call dbg.drop_in_place<alloc::vec::Vec<u16, alloc::alloc::Global>>
jmp 0x140010fd1
mov rax, qword [rsp + 0xa8]
mov ecx, 2
mul rcx
mov qword [rsp + 0x98], rax
seto al
test al, 1
jne 0x140010c95
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x98]
cmp rax, rcx
jne 0x140010c38
jmp 0x140010cb1
lea rcx, str.attempt_to_multiply_with_overflowWindows_11
lea r8, str._home_kali_.cargo_registry_src_index.crates.io_6f17d22bba15001f_os_info_3.8.0_src_windows_winapi.rs
mov edx, 0x21
call dbg.panic
jmp 0x140010caf
ud2
lea rcx, [rsp + 0x218]
call dbg.deref<u16, alloc::alloc::Global>
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], rax
jmp 0x140010cd0
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
call dbg.last<u16>
mov qword [rsp + 0x80], rax
jmp 0x140010cef
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x230], rax
mov rdx, qword [rsp + 0x230]
mov eax, 1
xor ecx, ecx
cmp rdx, 0
cmove rax, rcx
cmp rax, 1
jne 0x140010d2a
mov rax, qword [rsp + 0x230]
cmp word [rax], 0
je 0x140010d43
lea rcx, [rsp + 0x218]
call dbg.alloc::vec::Vec<T,A>::as_slice::habdd9f4b3a8499d6
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rax
jmp 0x140010d54
lea rcx, [rsp + 0x218]
call dbg.alloc::vec::Vec<T,A>::pop::h35c78440faa81429
jmp 0x140010d52
jmp 0x140010d2a
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x268]
call dbg.from_wide
jmp 0x140010d6d
lea rcx, [rsp + 0x268]
call sym.__std::ffi::os_str::OsString_as_core::ops::deref::Deref_::deref::hbb6778bfcb7a24d7
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
jmp 0x140010dae
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x250]
call dbg.std::ffi::os_str::OsStr::to_string_lossy::h44d3c4e36fa400ae
jmp 0x140010dc7
lea rcx, [rsp + 0x238]
lea rdx, [rsp + 0x250]
call dbg.alloc::borrow::Cow<B>::into_owned::h31a0a630b64f7f0b
jmp 0x140010dde
mov byte [rsp + 0x2ff], 1
lea rcx, [rsp + 0x268]
call dbg.drop_in_place<std::ffi::os_str::OsString>
jmp 0x140010e1d
test byte [rsp + 0x1a7], 1
jne 0x140010e8c
mov rax, qword [rsp + 0x130]
mov byte [rsp + 0x2ff], 0
mov rcx, qword [rsp + 0x238]
mov qword [rsp + 0x2e0], rcx
mov rcx, qword [rsp + 0x240]
mov qword [rsp + 0x2e8], rcx
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x2f0], rcx
mov rcx, qword [rsp + 0x2e0]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x2e8]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x2f0]
mov qword [rax + 0x10], rcx
jmp 0x140010ed7
lea rcx, [rsp + 0x238]
mov qword [rsp + 0x330], rcx
lea rax, [sym.__alloc::string::String_as_core::fmt::Display_::fmt::h15f2bfd1afb7a238]
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x320], rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x58], rax
jmp 0x140010eea
test byte [rsp + 0x2ff], 1
jne 0x140010f91
jmp 0x140010f7a
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x2d0], rcx
mov qword [rsp + 0x2d8], rax
mov rax, rsp
mov qword [rax + 0x20], 1
lea rdx, [0x1400feae0]
lea rcx, [rsp + 0x2a0]
mov r8d, 1
lea r9, [rsp + 0x2d0]
call dbg.core::fmt::Arguments::new_v1::h2cb63343f8e297f5
jmp 0x140010f33
lea rcx, [rsp + 0x288]
lea rdx, [rsp + 0x2a0]
call dbg.format
jmp 0x140010f4a
mov rax, qword [rsp + 0x130]
mov rcx, qword [rsp + 0x288]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x290]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x298]
mov qword [rax + 0x10], rcx
jmp 0x140010ed7
mov byte [rsp + 0x2ff], 0
lea rcx, [rsp + 0x218]
call dbg.drop_in_place<alloc::vec::Vec<u16, alloc::alloc::Global>>
jmp 0x140010fa0
lea rcx, [rsp + 0x238]
call sym.core::ptr::drop_in_place_alloc::string::String_::h4114501e789e952c
jmp 0x140010f7a
lea rcx, [rsp + 0x1a8]
call dbg.drop_in_place<alloc::vec::Vec<u16, alloc::alloc::Global>>
jmp 0x140010faf
lea rcx, [rsp + 0x140]
call dbg.drop_in_place<alloc::vec::Vec<u16, alloc::alloc::Global>>
mov rax, qword [rsp + 0x138]
add rsp, 0x3c8
ret
lea rcx, [rsp + 0x1a8]
call dbg.drop_in_place<alloc::vec::Vec<u16, alloc::alloc::Global>>
jmp 0x1400110a2
mov al, byte [rsp + 0xf3]
test al, 1
jne 0x140011007
jmp 0x140010ff0
mov rax, qword [rsp + 0x130]
movabs rcx, 0x8000000000000000
mov qword [rax], rcx
jmp 0x140010fd1
mov byte [rsp + 0x31f], 0
mov dl, byte [rsp + 0x31f]
mov rcx, qword [0x1400fc010]
call dbg.core::sync::atomic::AtomicUsize::load::hbc2d06f66c76cfed
mov qword [rsp + 0x48], rax
jmp 0x140011029
jmp 0x14001102b
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x1e0], rax
lea rcx, [rsp + 0x1d8]
lea rdx, [rsp + 0x1e0]
call dbg.le<log::Level, log::LevelFilter>
mov byte [rsp + 0x47], al
jmp 0x140011053
mov al, byte [rsp + 0x47]
test al, 1
jne 0x14001105d
jmp 0x140010ff0
lea rdx, str.RegQueryValueExW_failed
lea rcx, [rsp + 0x1e8]
mov r8d, 1
call dbg.core::fmt::Arguments::new_const::h519fc786508414ca
jmp 0x140011079
mov rdx, qword [rsp + 0x1d8]
lea r8, str.os_info::imp::winapi
lea rcx, [rsp + 0x1e8]
mov r9d, 0xb8
call dbg.log<()>
jmp 0x14001109d
jmp 0x140010ff0
lea rcx, [rsp + 0x140]
call dbg.drop_in_place<alloc::vec::Vec<u16, alloc::alloc::Global>>
jmp 0x140010fbc
mov al, byte [rsp + 0x11b]
test al, 1
jne 0x1400110d8
jmp 0x1400110c1
mov rax, qword [rsp + 0x130]
movabs rcx, 0x8000000000000000
mov qword [rax], rcx
jmp 0x1400110a2
mov byte [rsp + 0x31e], 0
mov dl, byte [rsp + 0x31e]
mov rcx, qword [0x1400fc010]
call dbg.core::sync::atomic::AtomicUsize::load::hbc2d06f66c76cfed
mov qword [rsp + 0x38], rax
jmp 0x1400110fa
jmp 0x1400110fc
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x168], rax
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x168]
call dbg.le<log::Level, log::LevelFilter>
mov byte [rsp + 0x37], al
jmp 0x140011124
mov al, byte [rsp + 0x37]
test al, 1
jne 0x14001112e
jmp 0x1400110c1
lea rdx, str.RegOpenKeyExW_HKEY_LOCAL_MACHINE__...__failed
lea rcx, [rsp + 0x170]
mov r8d, 1
call dbg.core::fmt::Arguments::new_const::h519fc786508414ca
jmp 0x14001114a
mov rdx, qword [rsp + 0x160]
lea r8, str.os_info::imp::winapi
lea rcx, [rsp + 0x170]
mov r9d, 0x9c
call dbg.log<()>
jmp 0x14001116e
jmp 0x1400110c1