Function at 0x14000e300
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x340
mov qword [rsp + 0x98], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov rax, qword [0x140036080]
xor rax, rsp
mov qword [rsp + 0x330], rax
mov r13, rdx
mov qword [rsp + 0x90], rdx
mov qword [r11 - 0x2a8], 7
xor r14d, r14d
mov qword [r11 - 0x2b0], r14
mov word [r11 - 0x2c0], r14w
mov edi, 0xa
mov r8, rdi
lea r15, str.GIX_SYSTEM
mov rdx, r15
lea rcx, [r11 - 0x2c8]
call fcn.140008100
nop
lea r8d, [r14 + 0x26]
lea rdx, str.ControlSet001ControlMUIUILanguages
lea rcx, [rsp + 0xa0]
call fcn.14000fdd0
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rdx, qword [rsp + 0xa8]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 8]
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [0x14002e038]
test eax, eax
je 0x14000e3f9
cmp qword [rsp + 0xc0], 8
jb 0x14000ebe4
mov rcx, qword [rsp + 0xa8]
call fcn.14001b8a4
jmp 0x14000ebe4
mov r12d, r14d
mov dword [rsp + 0x44], 0x104
mov qword [rsp + 0xe8], 7
mov qword [rsp + 0xe0], r14
mov word [rsp + 0xd0], r14w
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x44]
lea r8, [rsp + 0x120]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [0x14002e030]
movabs rbx, 0x2aaaaaaaaaaaaaab
test eax, eax
jne 0x14000e979
lea rbp, [r13 + 0xf0]
movabs r9, 0x7ffffffffffffffe
movzx ebx, byte [rsp + 0x40]
lea r13d, [rax + 0xa]
nop dword [rax + rax]
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x120]
repne scasw ax, word [rdi]
not rcx
lea rsi, [rcx - 1]
lea rax, [rsp + 0xd0]
mov rdi, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xe8]
cmp rdx, 8
cmovae rax, rdi
lea rcx, [rsp + 0x120]
mov r8, qword [rsp + 0xe0]
cmp rcx, rax
jb 0x14000e558
lea rax, [rsp + 0xd0]
cmp rdx, 8
cmovae rax, rdi
lea rax, [rax + r8*2]
lea rcx, [rsp + 0x120]
cmp rax, rcx
jbe 0x14000e558
lea rax, [rsp + 0xd0]
cmp rdx, 8
cmovae rax, rdi
lea rdi, [rsp + 0x120]
sub rdi, rax
sar rdi, 1
cmp r8, rdi
jae 0x14000e522
call fcn.14001b41c
mov r8, qword [rsp + 0xe0]
sub r8, rdi
cmp rsi, r8
cmovb r8, rsi
lea rdx, [r8 + rdi]
or r8, 0xffffffffffffffff
lea rcx, [rsp + 0xc8]
call fcn.140008370
mov r8, rdi
xor edx, edx
lea rcx, [rsp + 0xc8]
call fcn.140008370
jmp 0x14000e617
cmp rsi, r9
jbe 0x14000e57a
call fcn.14001b3b4
mov rdx, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd0]
cmp rdx, rsi
jae 0x14000e5a1
mov rdx, rsi
lea rcx, [rsp + 0xc8]
call fcn.140008430
mov rdx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xd0]
jmp 0x14000e5c4
test rsi, rsi
jne 0x14000e5c4
mov qword [rsp + 0xe0], r14
lea rax, [rsp + 0xd0]
cmp rdx, 8
cmovae rax, rdi
mov word [rax], r14w
jmp 0x14000e617
test rsi, rsi
je 0x14000e617
lea rcx, [rsp + 0xd0]
cmp rdx, 8
cmovae rcx, rdi
lea rdi, [rsi + rsi]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x120]
call fcn.14001b80c
mov qword [rsp + 0xe0], rsi
lea rax, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae rax, qword [rsp + 0xd0]
mov word [rax + rdi], r14w
lea rax, [rsp + 0xa8]
mov rdi, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xc0]
cmp rdx, 8
cmovae rax, rdi
mov r8, qword [rsp + 0xb8]
cmp r15, rax
jb 0x14000e6bb
lea rax, [rsp + 0xa8]
cmp rdx, 8
cmovae rax, rdi
lea rax, [rax + r8*2]
cmp rax, r15
jbe 0x14000e6bb
lea rax, [rsp + 0xa8]
cmp rdx, 8
cmovae rax, rdi
mov rdi, r15
sub rdi, rax
sar rdi, 1
cmp r8, rdi
jae 0x14000e688
call fcn.14001b41c
mov r8, qword [rsp + 0xb8]
sub r8, rdi
cmp r8, r13
cmova r8, r13
lea rdx, [r8 + rdi]
or r8, 0xffffffffffffffff
lea rcx, [rsp + 0xa0]
call fcn.140008370
mov r8, rdi
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.140008370
jmp 0x14000e728
cmp rdx, r13
jae 0x14000e6e0
mov rdx, r13
lea rcx, [rsp + 0xa0]
call fcn.140008430
mov rdx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xa8]
lea rcx, [rsp + 0xa8]
cmp rdx, 8
cmovae rcx, rdi
add rdx, rdx
mov r9d, 0x14
mov r8, r15
call fcn.14001b80c
mov qword [rsp + 0xb8], r13
lea rax, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rax, qword [rsp + 0xa8]
mov word [rax + 0x14], r14w
mov r8d, 0x27
lea rdx, str.ControlSet001ControlMUIUILanguages_
lea rcx, [rsp + 0xa0]
call fcn.14000fdd0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x120]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xa0]
call fcn.14000fdd0
mov qword [rsp + 0x80], 7
mov qword [rsp + 0x78], r14
mov word [rsp + 0x68], r14w
mov r9d, 8
lea r8, str.LCID
lea edx, [r9 + 6]
lea rcx, [rsp + 0x68]
call fcn.14001b80c
mov qword [rsp + 0x78], 4
lea rax, [rsp + 0x68]
cmp qword [rsp + 0x80], 8
cmovae rax, qword [rsp + 0x68]
mov word [rax + 8], r14w
mov dword [rsp + 0xf0], r14d
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae rdx, qword [rsp + 0xa8]
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [0x14002e038]
test eax, eax
jne 0x14000e861
mov dword [rsp + 0x58], 4
lea rdx, [rsp + 0x68]
cmp qword [rsp + 0x80], 8
cmovae rdx, qword [rsp + 0x68]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rsp + 0x88]
call qword [0x14002e020]
mov rcx, qword [rsp + 0x88]
call qword [0x14002e028]
cmp qword [rsp + 0x80], 8
jb 0x14000e876
mov rcx, qword [rsp + 0x68]
call fcn.14001b8a4
mov r9, qword [rbp + 8]
test r9, r9
jne 0x14000e884
mov r8, r14
jmp 0x14000e8a9
mov rcx, qword [rbp + 0x18]
sub rcx, r9
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov r8, rdx
sar r8, 3
mov rax, r8
shr rax, 0x3f
add r8, rax
mov rdi, qword [rbp + 0x10]
mov rcx, rdi
sub rcx, r9
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r8
jae 0x14000e8fd
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], bl
mov r9, rbp
lea r8, [rsp + 0xc8]
lea edx, [rax + 1]
mov rcx, rdi
call fcn.140010810
add rdi, 0x30
mov qword [rbp + 0x10], rdi
jmp 0x14000e916
lea r9, [rsp + 0xc8]
mov r8d, 1
mov rdx, rdi
mov rcx, rbp
call fcn.14000ff70
inc r12d
mov dword [rsp + 0x44], 0x104
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x44]
lea r8, [rsp + 0x120]
mov edx, r12d
mov rcx, qword [rsp + 0x50]
call qword [0x14002e030]
test eax, eax
movabs r9, 0x7ffffffffffffffe
je 0x14000e480
mov r13, qword [rsp + 0x90]
mov edi, 0xa
movabs rbx, 0x2aaaaaaaaaaaaaab
mov rcx, qword [rsp + 0x50]
call qword [0x14002e028]
mov rcx, qword [r13 + 0x100]
sub rcx, qword [r13 + 0xf8]
mov rax, rbx
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jne 0x14000e9fe
cmp qword [rsp + 0xe8], 8
jb 0x14000e9c0
mov rcx, qword [rsp + 0xd0]
call fcn.14001b8a4
mov qword [rsp + 0xe8], 7
mov qword [rsp + 0xe0], r14
mov word [rsp + 0xd0], r14w
cmp qword [rsp + 0xc0], 8
jb 0x14000ebe4
mov rcx, qword [rsp + 0xa8]
call fcn.14001b8a4
jmp 0x14000ebe4
mov r8, rdi
mov rdx, r15
lea rcx, [rsp + 0xa0]
call fcn.140008100
mov r8d, 0x23
lea rdx, str.ControlSet001ControlNlsLanguage
lea rcx, [rsp + 0xa0]
call fcn.14000fdd0
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r14
mov word [rsp + 0x100], r14w
mov qword [rsp + 0x80], 7
mov qword [rsp + 0x78], r14
mov word [rsp + 0x68], r14w
mov r8d, 0xf
lea rdx, str.InstallLanguage
lea rcx, [rsp + 0x60]
call fcn.140008100
nop
lea r9, [rsp + 0xf8]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0xa0]
mov rcx, 0xffffffff80000002
call fcn.140018ec0
nop
cmp qword [rsp + 0x80], 8
jb 0x14000eaae
mov rcx, qword [rsp + 0x68]
call fcn.14001b8a4
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 8
cmovae rcx, qword [rsp + 0x100]
lea r8, [rsp + 0x48]
lea rdx, [0x140030ef8]
call fcn.14001c714
mov rdi, r14
mov rcx, qword [r13 + 0x100]
sub rcx, qword [r13 + 0xf8]
mov rax, rbx
imul rcx
sar rdx, 3
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
je 0x14000eb62
mov rcx, qword [r13 + 0x100]
sub rcx, qword [r13 + 0xf8]
mov rax, rbx
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov r8, qword [r13 + 0xf8]
lea rax, [r8 + 0x28]
mov ecx, dword [rsp + 0x48]
cmp dword [rax], ecx
je 0x14000eb43
inc rdi
add rax, 0x30
cmp rdi, rdx
jb 0x14000eb31
jmp 0x14000eb62
lea rdx, [rdi + rdi*2]
shl rdx, 4
add rdx, r8
lea rcx, [r13 + 0x110]
or r9, 0xffffffffffffffff
xor r8d, r8d
call fcn.140008210
nop
cmp qword [rsp + 0x118], 8
jb 0x14000eb7a
mov rcx, qword [rsp + 0x100]
call fcn.14001b8a4
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r14
mov word [rsp + 0x100], r14w
cmp qword [rsp + 0xe8], 8
jb 0x14000ebaf
mov rcx, qword [rsp + 0xd0]
call fcn.14001b8a4
mov qword [rsp + 0xe8], 7
mov qword [rsp + 0xe0], r14
mov word [rsp + 0xd0], r14w
cmp qword [rsp + 0xc0], 8
jb 0x14000ebe4
mov rcx, qword [rsp + 0xa8]
call fcn.14001b8a4
mov rcx, qword [rsp + 0x330]
xor rcx, rsp
call fcn.14001b530
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret