Function at 0x1093748
Capabilities:
Print debug messages
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xb0
mov rax, qword [0x010d71a0]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov r14d, edx
mov rsi, rcx
mov ebx, 0x1a
lea rdx, [0x01084fd0]
mov ecx, ebx
call fcn.01091f4c
xor ebp, ebp
mov rcx, rsi
and qword [rsp + 0x40], rbp
and qword [rsp + 0x38], rbp
and qword [rsi + 0xb68], rbp
call fcn.01092ea8
mov edi, 0x7fff
xor r13d, r13d
test r14d, r14d
mov r12d, edi
je 0x1093984
lea r8, [rsp + 0x40]
lea rdx, [0x01084860]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
lea rdx, [0x01084b28]
lea ecx, [rbp + 0x1a]
mov r8d, eax
mov ebx, eax
call fcn.01091f4c
test ebx, ebx
jne 0x109397a
mov rax, qword [rsp + 0x40]
lea r8, [0x01084b50]
lea edx, [rbp + 0x20]
lea rcx, [rsp + 0x50]
mov r9d, r14d
mov dword [rsp + 0x20], 1
mov qword [rsi + 0xb68], rax
call fcn.010a7b2c
and word [rsp + 0x90], bp
lea ebx, [rbp + 0x1a]
lea rdx, [rsp + 0x50]
mov ecx, ebx
call fcn.01091f4c
mov rcx, qword [rsi + 0xb68]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x1093966
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea r13d, [rbp + 4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x34]
lea rdx, [0x01084b60]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x109389f
mov edi, dword [rsp + 0x34]
lea rdx, [0x01084b90]
mov ecx, ebx
mov r8d, edi
call fcn.01091f4c
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [0x01084bd8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x34]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x10938e5
mov r12d, dword [rsp + 0x34]
lea rdx, [0x01084c00]
mov r8d, r12d
jmp 0x109392b
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [0x01084c48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x34]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1093932
mov edi, dword [rsp + 0x34]
lea rdx, [0x01084c68]
mov r12d, edi
mov r8d, edi
mov ecx, ebx
call fcn.01091f4c
mov rdx, qword [rsp + 0x38]
mov rcx, rsi
call fcn.01092a6c
lea rcx, [rsi + 0x99c]
lea rdx, [rsi + 0xa3c]
mov r8d, 0xa0
mov r13d, eax
call fcn.010ac860
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsi + 0xb68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r13d, r13d
jne 0x1093984
jmp 0x109397f
mov ebx, 0x1a
mov ebp, 0x80004005
lea rdx, [0x01085010]
mov ecx, ebx
call fcn.01091f4c
test ebp, ebp
js 0x1093a0e
lea rdx, [0x01085058]
mov r9d, edi
mov r8d, r12d
mov ecx, ebx
call fcn.01091f4c
mov rcx, qword [rsi + 0x30]
mov eax, r12d
movss xmm1, dword [0x0108db04]
cvtsi2ss xmm0, rax
mov edx, edi
lea r8, [rsi + 0x99c]
mov r9d, 0xa0
mov dword [rsi + 0xc0], r12d
mov dword [rsi + 0xbc], edi
divss xmm0, xmm1
movss dword [rsi + 0xc8], xmm0
cvtsi2ss xmm0, rdx
mov edx, 0xb
divss xmm0, xmm1
movss dword [rsi + 0xc4], xmm0
call fcn.010c9070
lea rcx, [0x01085088]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, ebp
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.010a6e90
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret