Function at 0x140007980
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0xd8]
sub rsp, 0x1d0
mov rax, qword [0x140049070]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov qword [r11 + 8], rbx
lea rax, [rsp + 0x50]
mov qword [r11 + 0x10], rdi
lea rdx, str.SOFTWAREIntel_CorporationIntel_Miracast
xor edi, edi
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x50], rdi
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140007c34
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
lea rbx, [0x14004c668]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x5c]
lea rdx, str.ShowACursor
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x58], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x140007a44
mov rcx, qword [rsp + 0x50]
lea r9d, [rdi + 4]
lea rdx, str.ShowACursor
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
lea rbx, [0x14004c66c]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x5c]
lea rdx, str.ShowContext
xor r8d, r8d
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x140007a9f
mov rcx, qword [rsp + 0x50]
lea r9d, [rax + 2]
lea rdx, str.ShowContext
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [0x14004c66c]
lea r8, str.MCUMS
lea rcx, str.IntelWiDiUMS.cpp
mov dword [rsp + 0x30], eax
mov eax, dword [0x14004c668]
mov r9d, 5
mov dword [rsp + 0x28], eax
lea rax, str.ReadProfile___ShowACursor:__d__ShowContext:__d
mov edx, 0x59d
mov qword [rsp + 0x20], rax
call fcn.1400044f0
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140007af2
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x50], rdi
lea rcx, [rbp - 0x6e]
xor edx, edx
mov r8d, 0x12a
mov word [rbp - 0x70], di
call fcn.140012080
xor eax, eax
mov qword [rsp + 0x62], rax
mov qword [rsp + 0x6a], rax
mov qword [rsp + 0x72], rax
mov qword [rsp + 0x7a], rax
mov word [rbp - 0x7e], ax
mov word [rsp + 0x60], di
lea rdx, [0x14004c7b8]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], al
jne 0x140007b31
lea rcx, [rsp + 0x60]
call fcn.14000fc1c
lea r9, [rsp + 0x60]
lea r8, str.SOFTWAREIntel_CorporationIntel_MiracastWinNextAgentProfiles
lea rdx, str._s_s
lea rcx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rax, [rsp + 0x50]
lea rdx, [rbp - 0x70]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140007c26
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
lea rbx, [0x14004c670]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x5c]
lea rdx, str.OverscanComp
xor r8d, r8d
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x140007be8
mov rcx, qword [rsp + 0x50]
lea r9d, [rax + 2]
lea rdx, str.OverscanComp
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
lea rbx, [0x14004c674]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x5c]
lea rdx, str.GameModePref
xor r8d, r8d
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
jne 0x140007df5
jmp 0x140007dcd
cmp eax, 2
jne 0x140007df5
jmp 0x140007d60
cmp eax, 2
jne 0x140007df5
mov qword [rsp + 0x40], rdi
lea rax, [rsp + 0x50]
lea rdx, str.SOFTWAREIntel_CorporationIntel_Miracast
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], edi
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, qword [rsp + 0x50]
lea rbx, [0x14004c668]
lea rdx, str.ShowACursor
mov r9d, 4
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
lea rbx, [0x14004c66c]
lea rdx, str.ShowContext
mov r9d, 4
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140007cea
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x50], rdi
lea rcx, [rbp - 0x6e]
xor edx, edx
mov r8d, 0x12a
mov word [rbp - 0x70], di
call fcn.140012080
xor eax, eax
mov qword [rsp + 0x62], rax
mov qword [rsp + 0x6a], rax
mov qword [rsp + 0x72], rax
mov qword [rsp + 0x7a], rax
mov word [rbp - 0x7e], ax
mov word [rsp + 0x60], di
lea rdx, [0x14004c7b8]
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], al
jne 0x140007d30
lea rcx, [rsp + 0x60]
call fcn.14000fc1c
lea r9, [rsp + 0x60]
lea r8, str.SOFTWAREIntel_CorporationIntel_MiracastWinNextAgentProfiles
lea rdx, str._s_s
lea rcx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
mov qword [rsp + 0x40], rdi
lea rax, [rsp + 0x50]
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], edi
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, qword [rsp + 0x50]
lea rbx, [0x14004c670]
lea rdx, str.OverscanComp
mov r9d, 4
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rbx, [0x14004c674]
mov rcx, qword [rsp + 0x50]
lea rdx, str.GameModePref
mov r9d, 4
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x1e8]
mov rbx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x140007e15
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.14000e2f0
add rsp, 0x1d0
pop rbp
ret