Function at 0x14007afa0
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rbx
push rsi
push rdi
push r14
sub rsp, 0x688
mov rax, qword [0x14016adb0]
xor rax, rsp
mov qword [rsp + 0x670], rax
cmp dword [rcx + 0x4478], 0
mov rsi, rcx
jne 0x14007b243
mov rax, qword [rcx + 0x940]
mov qword [r11 + 0x10], rbp
mov qword [r11 - 0x28], r13
mov r13d, dword [rax + 0x204]
xor edi, edi
lea r14, str.OPTIONS
shr r13d, 1
mov ebp, edi
je 0x14007b132
mov qword [r11 + 0x18], r12
lea r12, [rcx + 0x2038]
nop
nop
nop
mov r8d, dword [rsi + 0x528]
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
mov r9d, ebp
call fcn.14001e4d0
mov r9, qword [rsi + 0x940]
add r9, 0x27568
je 0x14007b0e8
lea r8, str.SYSTEMCurrentControlSetServicesVIA_HD_Audio_Codec_DefaultVDeckINI
lea rdx, str._s_s_s_
lea rcx, [rsp + 0x250]
mov dword [rsp + 0x30], 0x104
mov qword [rsp + 0x20], r14
call fcn.14001e4d0
lea r11, [rsp + 0x38]
lea rdx, [rsp + 0x250]
mov r9d, 1
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14007b097
mov eax, edi
jmp 0x14007b0ea
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x460]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
mov ebx, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x14007b0d9
mov eax, edi
jmp 0x14007b0ea
lea rcx, [rsp + 0x460]
call fcn.1400fa6e0
jmp 0x14007b0ea
mov eax, edi
test eax, eax
mov rcx, qword [r12]
jne 0x14007b0fa
mov dword [rcx + 0x260], edi
jmp 0x14007b105
cmp eax, 1
jne 0x14007b105
mov dword [rcx + 0x260], eax
mov rcx, qword [rcx + 0x40]
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
add ebp, 1
add r12, 8
cmp ebp, r13d
jb 0x14007b010
mov r12, qword [rsp + 0x6c0]
cmp dword [rsi + 0x948], 0xffffffff
mov r13, qword [rsp + 0x680]
mov rbp, qword [rsp + 0x6b8]
je 0x14007b35b
mov r8d, dword [rsi + 0x528]
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
mov r9d, 4
call fcn.14001e4d0
mov r9, qword [rsi + 0x940]
add r9, 0x27568
je 0x14007b22a
lea r8, str.SYSTEMCurrentControlSetServicesVIA_HD_Audio_Codec_DefaultVDeckINI
lea rdx, str._s_s_s_
lea rcx, [rsp + 0x460]
mov dword [rsp + 0x30], 0x104
mov qword [rsp + 0x20], r14
call fcn.14001e4d0
lea r11, [rsp + 0x38]
lea rdx, [rsp + 0x460]
mov r9d, 1
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14007b1d9
mov eax, edi
jmp 0x14007b22c
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x250]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
mov ebx, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x14007b21b
mov eax, edi
jmp 0x14007b22c
lea rcx, [rsp + 0x250]
call fcn.1400fa6e0
jmp 0x14007b22c
mov eax, edi
test eax, eax
mov rcx, qword [rsi + 0x2058]
je 0x14007b32f
cmp eax, 1
jmp 0x14007b33a
mov r8d, dword [rcx + 0x528]
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
xor r9d, r9d
call fcn.14001e4d0
mov r9, qword [rsi + 0x940]
xor edi, edi
add r9, 0x27568
je 0x14007b322
lea r14, str.OPTIONS
lea r8, str.SYSTEMCurrentControlSetServicesVIA_HD_Audio_Codec_DefaultVDeckINI
lea rdx, str._s_s_s_
lea rcx, [rsp + 0x460]
mov dword [rsp + 0x30], 0x104
mov qword [rsp + 0x20], r14
call fcn.14001e4d0
lea r11, [rsp + 0x38]
lea r9d, [rdi + 1]
lea rdx, [rsp + 0x460]
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14007b2d1
mov eax, edi
jmp 0x14007b324
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x250]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
mov ebx, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x14007b313
mov eax, edi
jmp 0x14007b324
lea rcx, [rsp + 0x250]
call fcn.1400fa6e0
jmp 0x14007b324
mov eax, edi
test eax, eax
mov rcx, qword [rsi + 0x2038]
jne 0x14007b337
mov dword [rcx + 0x260], edi
jmp 0x14007b346
cmp eax, 1
jne 0x14007b346
mov dword [rcx + 0x260], 1
mov rcx, qword [rcx + 0x40]
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rcx, rsi
call fcn.14007b380
mov rcx, qword [rsp + 0x670]
xor rcx, rsp
call fcn.1400f9790
add rsp, 0x688
pop r14
pop rdi
pop rsi
pop rbx
ret