Function at 0x140106b30
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb50]
sub rsp, 0xc50
mov rax, qword [0x140221f78]
xor rax, rsp
mov qword [rbp + 0xb40], rax
mov rbx, rdx
mov r15, rcx
mov qword [rbp + 0xe0], rcx
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
mov ecx, 0x48
call fcn.14015ea14
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xor r14d, r14d
mov qword [rbp + 0xa8], r14
mov dword [rbp + 0xb0], r14d
mov qword [rbp + 0xb8], r14
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x20019
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, 0xffffffff80000003
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
mov esi, eax
test eax, eax
je 0x140106ef8
lea r12, vtable._com_error.0
mov qword [rbp + 0x30], r12
mov dword [rbp + 0x38], eax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x40], xmm0
lea rcx, [rbp + 0x30]
call fcn.140039b30
mov r14, rax
lea rax, str.QuerySystemGames
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x118], reloc.OLEAUT32.dll_SafeArrayGetDim
lea rax, str.c:DAX35dax3APIDAXAPISettingsManagerFactory.cpp
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0x33
mov ecx, 0x200
call fcn.1401353e0
mov rdi, rax
test rax, rax
je 0x140106e1d
mov rax, qword [rax]
mov dl, 3
mov rcx, rdi
call qword [rax + 8]
xor r13d, r13d
test al, al
je 0x140106e20
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r13w
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], esi
lea r9, str.SystemGameConfigStoreChildren
lea r8, str.Cannot_open_registry_key:__s__0x_.8x__s
xor edx, edx
xor ecx, ecx
call fcn.140040940
inc eax
movsxd rbx, eax
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.1400387e0
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 8
cmovae rcx, qword [rbp + 0x80]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], esi
lea r9, str.SystemGameConfigStoreChildren
lea r8, str.Cannot_open_registry_key:__s__0x_.8x__s
mov rdx, rbx
call fcn.140040940
mov rax, qword [rbp + 0x90]
dec rax
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 8
cmovae rcx, qword [rbp + 0x80]
mov qword [rbp + 0x90], rax
mov word [rcx + rax*2], r13w
lea rcx, [rbp + 0xc0]
call fcn.14002dd80
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rbp + 0x90]
movups xmmword [rbp + 0xd0], xmm1
mov rax, qword [rdi]
mov r10, qword [rax + 0x10]
lea rdx, [rbp + 0xc0]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 8
cmovae rdx, rcx
mov qword [rbp + 0xe0], rdx
movq qword [rbp + 0xe8], xmm1
movaps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp - 0x20], xmm0
movaps xmm1, xmmword [rbp + 0x110]
movdqa xmmword [rbp - 0x30], xmm1
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x40], xmm0
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9d, [r13 + 0x36]
lea r8, [rbp - 0x40]
mov dl, 3
mov rcx, rdi
call r10
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x140106e20
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140106e16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401078dd
call fcn.14015ea50
jmp 0x140106e20
xor r13d, r13d
mov qword [rbp + 0x30], r12
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x140106e33
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140106e43
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
mov qword [r15], r13
mov qword [r15 + 8], r13
mov ecx, 0x48
call fcn.14015ea14
mov r8, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov rax, qword [rbp + 0x70]
mov qword [r15], rax
mov qword [rbp + 0x70], r8
mov rcx, qword [r15 + 8]
mov rax, qword [rbp + 0x78]
mov qword [r15 + 8], rax
mov qword [rbp + 0x78], rcx
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x140106ea0
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov qword [rbp + 0xa8], r13
mov r8, qword [rbp + 0x70]
mov dword [rbp + 0xb0], r13d
mov rdi, qword [r8 + 8]
cmp byte [rdi + 0x19], 0
jne 0x140107897
nop word [rax + rax]
mov r8, qword [rdi + 0x10]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14004e860
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.14002dd80
mov edx, 0x48
mov rcx, rbx
call fcn.14015ea50
cmp byte [rdi + 0x19], 0
je 0x140106ec0
jmp 0x140107893
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryInfoKeyW]
mov dword [rsp + 0x60], eax
test eax, eax
je 0x1401070f8
lea r12, vtable._com_error.0
mov qword [rbp + 0x80], r12
mov dword [rbp + 0x88], eax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x80]
call fcn.140039b30
mov qword [rbp + 0x110], rax
lea rax, str.RegQueryInfoKey_failed:__0x_.8x__s
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], SafeArrayAllocDescriptorEx
lea rax, str.QuerySystemGames
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], reloc.OLEAUT32.dll_SafeArrayGetDim
lea rax, str.c:DAX35dax3APIDAXAPISettingsManagerFactory.cpp
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 0x33
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x20], xmm0
movaps xmm1, xmmword [rbp + 0xe0]
movdqa xmmword [rbp - 0x30], xmm1
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp + 0x110]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x20], rcx
mov r9d, 0x3f
lea r8, [rbp - 0x40]
mov dl, 3
mov rcx, rax
call fcn.140036640
nop
mov qword [rbp + 0x80], r12
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x14010703a
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x14010704d
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
mov qword [r15], r14
mov qword [r15 + 8], r14
mov ecx, 0x48
call fcn.14015ea14
mov r8, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov rax, qword [rbp + 0x70]
mov qword [r15], rax
mov qword [rbp + 0x70], r8
mov rcx, qword [r15 + 8]
mov rax, qword [rbp + 0x78]
mov qword [r15 + 8], rax
mov qword [rbp + 0x78], rcx
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x1401070aa
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov qword [rbp + 0xa8], r14
mov r8, qword [rbp + 0x70]
mov dword [rbp + 0xb0], r14d
mov rdi, qword [r8 + 8]
cmp byte [rdi + 0x19], 0
jne 0x140107897
nop
mov r8, qword [rdi + 0x10]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14004e860
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.14002dd80
mov edx, 0x48
mov rcx, rbx
call fcn.14015ea50
cmp byte [rdi + 0x19], 0
je 0x1401070c0
jmp 0x140107893
mov r13d, r14d
cmp dword [rbp + 0xa0], r14d
jbe 0x1401077e8
lea r12, vtable._com_error.0
lea rdi, str.c:DAX35dax3APIDAXAPISettingsManagerFactory.cpp
lea rsi, str.RegEnumKeyEx_failed:__0x_.8x__s
lea rbx, str.QuerySystemGames
mov dword [rbp + 0x100], 0xff
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x100]
lea r8, [rbp + 0x140]
mov edx, r13d
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegEnumKeyExW]
mov dword [rsp + 0x60], eax
test eax, eax
je 0x14010723c
mov qword [rbp - 0x10], r12
mov dword [rbp - 8], eax
xorps xmm0, xmm0
movdqu xmmword [rbp], xmm0
lea rcx, [rbp - 0x10]
call fcn.140039b30
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 0x1f
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], 0x33
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x80], xmm1
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp + 0xe0]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x20], rcx
mov r9d, 0x4a
lea r8, [rbp - 0x60]
mov dl, 3
mov rcx, rax
call fcn.140036640
nop
mov qword [rbp - 0x10], r12
mov rcx, qword [rbp]
test rcx, rcx
je 0x140107227
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140107237
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
jmp 0x1401077d8
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xc0], r14
mov dword [rbp + 0xc8], r14d
mov qword [rbp + 0xd0], r14
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x140]
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov esi, eax
test eax, eax
je 0x140107497
mov qword [rbp - 0x10], r12
mov dword [rbp - 8], eax
xorps xmm0, xmm0
movdqu xmmword [rbp], xmm0
lea rcx, [rbp - 0x10]
call fcn.140039b30
mov r14, rax
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 0x33
mov ecx, 0x200
call fcn.1401353e0
mov rdi, rax
test rax, rax
je 0x14010746c
mov rcx, qword [rax]
mov r8, qword [rcx + 8]
mov dl, 3
mov rcx, rax
call r8
test al, al
je 0x14010746c
xor eax, eax
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], ax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], esi
lea r9, [rbp + 0x140]
lea r8, str.RegOpenKeyEx_failed:__s__0x_.8x__s
xor edx, edx
xor ecx, ecx
call fcn.140040940
inc eax
movsxd rbx, eax
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.1400387e0
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], esi
lea r9, [rbp + 0x140]
lea r8, str.RegOpenKeyEx_failed:__s__0x_.8x__s
mov rdx, rbx
call fcn.140040940
mov rax, qword [rbp - 0x50]
dec rax
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
mov qword [rbp - 0x50], rax
xor r14d, r14d
mov word [rcx + rax*2], r14w
lea rcx, [rbp + 0xe0]
call fcn.14002dd80
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp + 0xf0], xmm1
mov rax, qword [rdi]
mov r10, qword [rax + 0x10]
lea rdx, [rbp + 0xe0]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 8
cmovae rdx, rcx
mov qword [rbp + 0x60], rdx
movq qword [rbp + 0x68], xmm1
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x60], xmm0
movaps xmm1, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x80], xmm1
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x20], xmm0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 0x52]
lea r8, [rbp + 0x20]
mov dl, 3
mov rcx, rdi
call r10
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x14010746f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140107465
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401078e3
call fcn.14015ea50
jmp 0x14010746f
xor r14d, r14d
mov qword [rbp - 0x10], r12
mov rcx, qword [rbp]
test rcx, rcx
je 0x140107482
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140107492
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
jmp 0x1401077b8
mov dword [rbp + 0x104], 0x400
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x340]
call fcn.140161de0
mov dword [rbp + 0x110], 1
lea rax, [rbp + 0x104]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x110]
xor r8d, r8d
lea rdx, str.MatchedExeFullPath
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
je 0x140107514
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x1401077d1
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x1401077d1
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r14w
lea rax, [rbp + 0x340]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x140107543
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x80]
call fcn.14002ee20
nop
lea r11, [rbp + 0x80]
mov rdi, qword [rbp + 0x80]
mov rsi, qword [rbp + 0x98]
cmp rsi, 8
cmovae r11, rdi
mov rbx, qword [rbp + 0x90]
cmp rbx, 1
jb 0x1401075ff
lea rcx, [rbx - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea r10, [r11 + rax*2]
mov r9, r10
lea rax, [0x1401b64d8]
sub r9, rax
nop
cmp word [r10], 0x5c
jne 0x1401075e8
mov ecx, 0x5c
mov edx, ecx
lea r8d, [rcx - 0x5b]
cmp cx, dx
ja 0x1401075e1
cmp r8, 1
je 0x1401075f7
dec r8
add rax, 2
movzx ecx, word [r9 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x1401075c5
lea rax, [0x1401b64d8]
cmp r10, r11
je 0x1401075ff
sub r10, 2
sub r9, 2
jmp 0x1401075b0
sub r10, r11
sar r10, 1
jmp 0x140107606
mov r10, 0xffffffffffffffff
inc r10
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
cmp rbx, r10
jb 0x1401078d7
sub rbx, r10
mov r8, 0xffffffffffffffff
cmp rbx, r8
cmovb r8, rbx
lea rax, [rbp + 0x80]
cmp rsi, 8
cmovae rax, rdi
lea rdx, [rax + r10*2]
lea rcx, [rbp - 0x80]
call fcn.14002ee20
nop
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rax, qword [rbp - 0x80]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x18], rax
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x120]
call fcn.140050c60
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1401076c9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401076c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401078e9
call fcn.14015ea50
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x70]
call fcn.140106110
mov rcx, qword [rax]
mov dword [rcx + 0x40], 2
mov rdx, qword [rbp + 0x138]
cmp rdx, 8
jb 0x14010773e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140107739
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401078ef
call fcn.14015ea50
mov qword [rbp + 0x130], r14
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r14w
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x14010779e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140107799
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401078d1
call fcn.14015ea50
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r14w
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x1401077ca
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
lea rdi, str.c:DAX35dax3APIDAXAPISettingsManagerFactory.cpp
lea rsi, str.RegEnumKeyEx_failed:__0x_.8x__s
inc r13d
cmp r13d, dword [rbp + 0xa0]
jb 0x14010711d
mov qword [r15], r14
mov qword [r15 + 8], r14
mov ecx, 0x48
call fcn.14015ea14
mov r8, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov rax, qword [rbp + 0x70]
mov qword [r15], rax
mov qword [rbp + 0x70], r8
mov rcx, qword [r15 + 8]
mov rax, qword [rbp + 0x78]
mov qword [r15 + 8], rax
mov qword [rbp + 0x78], rcx
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x140107845
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov qword [rbp + 0xa8], r14
mov r8, qword [rbp + 0x70]
mov dword [rbp + 0xb0], r14d
mov rdi, qword [r8 + 8]
cmp byte [rdi + 0x19], 0
jne 0x140107897
nop word [rax + rax]
mov r8, qword [rdi + 0x10]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14004e860
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.14002dd80
mov edx, 0x48
mov rcx, rbx
call fcn.14015ea50
cmp byte [rdi + 0x19], 0
je 0x140107860
mov r8, qword [rbp + 0x70]
mov edx, 0x48
mov rcx, r8
call fcn.14015ea50
mov rax, r15
mov rcx, qword [rbp + 0xb40]
xor rcx, rsp
call fcn.14015eb70
mov rbx, qword [rsp + 0xca0]
add rsp, 0xc50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401660e8
nop
call fcn.140031a80
nop
call fcn.1401660e8
nop
call fcn.1401660e8
nop
call fcn.1401660e8
nop
call fcn.1401660e8
int3