Function at 0x140003650
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14006b9c0]
xor rax, rsp
mov qword [rbp + 0x30], rax
xor ebx, ebx
lea rdx, str.SYSTEMCurrentControlSetServicesDSDHDDProtectServiceParameters
lea rcx, [rbp - 0x70]
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x4c], ebx
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x60], ebx
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x5c], ebx
call qword [sym.imp.USER32.dll_wsprintfW]
lea rax, [rsp + 0x38]
lea rdx, [rbp - 0x70]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400036d6
xor eax, eax
jmp 0x140003a29
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [0x140028478]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x54]
lea rdx, str.PtlvTabletBatteryMode
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [0x1400284d0]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [0x1400284f8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4c]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
lea rdx, [0x140028518]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [0x140028538]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [0x140028568]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
lea rdx, [0x140028588]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rsp + 0x30], 4
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, str.RaisePtlvTimerValue
mov qword [rsp + 0x28], rax
lea rax, [0x14006d58c]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x5c]
lea rdx, str.TabletPC
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [rsp + 0x40]
cmp ecx, 1
jne 0x1400038fd
call fcn.140003a50
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x54]
lea rdx, str.HddProtectionSettings___08X
cmp r8d, 3
mov dword [rsp + 0x70], 0x24a
mov dword [rbp - 0x78], 3
cmova r8d, ebx
and r8d, 3
shl r8d, 2
cmp eax, 3
cmova eax, ebx
and eax, 3
or r8d, eax
mov eax, dword [rsp + 0x4c]
shl r8d, 2
cmp eax, 3
cmova eax, ebx
and eax, 3
or r8d, eax
mov eax, dword [rsp + 0x5c]
shl r8d, 3
cmp eax, 1
cmova eax, ebx
and eax, 1
or r8d, eax
mov eax, dword [rsp + 0x44]
add r8d, r8d
cmp eax, 1
cmova eax, ebx
and eax, 1
or r8d, eax
mov eax, dword [rsp + 0x60]
add r8d, r8d
cmp eax, 1
cmova eax, ebx
and eax, 1
or r8d, eax
mov eax, dword [rsp + 0x48]
add r8d, r8d
cmp eax, 1
cmova eax, ebx
and eax, 1
or r8d, eax
mov eax, dword [rsp + 0x50]
add r8d, r8d
cmp eax, 1
cmova eax, ebx
and eax, 1
or r8d, eax
mov eax, dword [0x14006d588]
add r8d, r8d
cmp ecx, 1
cmova ecx, ebx
and eax, 0xffffc0c0
and ecx, 1
or r8d, ecx
lea rcx, [rsp + 0x68]
or r8d, eax
lea rax, str.ThpsrvLib.cpp
mov qword [rsp + 0x68], rax
lea rax, str.__LoadSettings_
mov dword [0x14006d588], r8d
mov qword [rsp + 0x78], rax
lea rax, [0x1400278f0]
mov qword [rbp - 0x80], rax
call fcn.1400013f0
mov eax, dword [0x14006d58c]
cmp eax, 0xa
jae 0x140003a14
mov dword [0x14006d58c], 0xa
jmp 0x140003a24
mov ecx, 0x3c
cmp eax, ecx
cmova eax, ecx
mov dword [0x14006d58c], eax
mov eax, 1
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14000b090
mov rbx, qword [rsp + 0x150]
add rsp, 0x140
pop rbp
ret