Function at 0x140057a10
Capabilities:
Query or enumerate registry value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0xe0
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov rax, qword [0x1401ea158]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov r12d, r9d
mov ebp, r8d
mov edi, edx
mov rbx, rcx
cmp dword [rcx + 0x3e0], 0
je 0x140057a83
mov rax, qword [rcx + 0x148]
add rcx, 0x148
call qword [rax + 0x40]
test eax, eax
je 0x140057a83
mov rax, qword [rbx + 0x148]
mov r9d, r12d
mov r8d, ebp
mov edx, edi
lea rcx, [rbx + 0x148]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400580f2
cmp edi, 0x23000201
ja 0x140057d24
cmp edi, 0x23000201
je 0x140057d13
add edi, 0xdcffff00
cmp edi, 0xf
ja case.0x140057abb.587202818
lea rdx, [0x140000000]
mov ecx, dword [rdx + rdi*4 + 0x58110]
add rcx, rdx
jmp rcx
mov rax, qword [rbx + 0x90]
mov eax, dword [rax + 0x1c20]
jmp 0x1400580f2
xor esi, esi
mov rax, qword [rbx + 0x90]
cmp qword [rax + 0x520], rsi
je 0x140057af0
mov rcx, qword [rax + 0x520]
mov rax, qword [rcx]
call qword [rax + 0x50]
mov esi, eax
mov rcx, qword [rbx + 0x90]
mov eax, dword [rcx + reloc.COMCTL32.dll_Ordinal_380]
test eax, eax
je 0x140057b34
cmp eax, 0x100
je 0x140057b2a
cmp eax, 0x200
je 0x140057b20
cmp eax, 0x300
jne 0x140057b34
mov eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jmp 0x1400580f2
mov eax, SafeArrayDestroy
jmp 0x1400580f2
mov eax, SafeArrayDestroy
jmp 0x1400580f2
mov eax, esi
jmp 0x1400580f2
mov rax, qword [rbx + 0x90]
mov eax, dword [rax + 0x15c]
shr eax, 0x17
not eax
and eax, 1
jmp 0x1400580f2
mov rax, qword [rbx + 0x90]
mov eax, dword [rax + 0x168]
jmp 0x1400580f2
mov rax, qword [rbx + 0x90]
mov eax, dword [rax + 0x178]
jmp 0x1400580f2
mov rax, qword [rbx + 0x90]
mov eax, dword [rax + 0x15c]
shr eax, 0xf
and eax, 1
jmp 0x1400580f2
mov rax, qword [rbx + 0x90]
mov eax, dword [rax + 0x12c]
shr eax, 0xa
and eax, 1
jmp 0x1400580f2
mov rcx, qword [rbx + 0x90]
add rcx, 0x1b90
call fcn.1400cf0c0
mov rdi, rax
test rax, rax
je 0x140057c2f
bt dword [rax + 0x31c], 0xb
jae 0x140057beb
mov rax, qword [rbx + 0x90]
xor esi, esi
bt dword [rax + 0x160], 0xe
setb sil
lea eax, [rsi + 1]
jmp 0x1400580f2
mov rax, qword [rax]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x21130113
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
je 0x140057c0d
mov eax, 1
jmp 0x1400580f2
mov rax, qword [rdi]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x21130114
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
je 0x140057c2f
mov eax, 2
jmp 0x1400580f2
xor eax, eax
jmp 0x1400580f2
mov rcx, qword [rbx + 0x90]
add rcx, 0x1b90
call fcn.1400cf100
test rax, rax
je 0x140057c68
mov r10, qword [rax]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2102003b
mov rcx, rax
call qword [r10 + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400580f2
xor eax, eax
jmp 0x1400580f2
mov rax, qword [rbx + 0x90]
mov eax, dword [rax + 0x114]
shr eax, 0x1c
and eax, 1
jmp 0x1400580f2
mov esi, 0x93d
mov rax, qword [rbx + 0x90]
test rax, rax
je 0x140057cb8
bt dword [rax + 0x114], 0x1c
jae 0x140057cb8
xor esi, esi
bt dword [rax + 0x188], 0x19
setb sil
add esi, 0x13fb
jmp 0x140057cfe
cmp dword [rax + 0x168], 0xf
jne 0x140057cfe
mov edx, 0x1f4f
mov ecx, dword [rax + 0x530]
test cl, 0x20
je 0x140057cd6
lea esi, [rdx + 2]
jmp 0x140057cfe
bt ecx, 9
jae 0x140057ce3
mov esi, 0x1f55
jmp 0x140057cfe
bt ecx, 0xb
jae 0x140057cf0
mov esi, 0x1f57
jmp 0x140057cfe
mov eax, 0x1f56
bt ecx, 0xc
cmovb edx, eax
mov esi, edx
mov eax, esi
jmp 0x1400580f2
lea rcx, [rbx - 8]
call fcn.140058af0
jmp 0x1400580f2
mov eax, dword [rbx + 0x3e8]
shr eax, 5
and eax, 1
jmp 0x1400580f2
cmp edi, 0x23000212
ja 0x140057e45
cmp edi, 0x23000212
je 0x140057e35
sub edi, 0x23000202
je 0x140057e24
sub edi, 1
je 0x140057e13
sub edi, 1
je 0x140057e02
sub edi, 1
je 0x140057d76
cmp edi, 0xc
jne case.0x140057abb.587202818
mov eax, dword [rbx + 0x3e8]
and eax, 1
jmp 0x1400580f2
mov rcx, qword [rbx + 0x90]
bt dword [rcx + 0x3c], 0xb
jae 0x140057df8
add rcx, 0x1b90
call fcn.1400cf0c0
test rax, rax
je 0x1400580f2
xor ecx, ecx
mov qword [rsp + 0xaa], rcx
mov qword [rsp + 0xb2], rcx
mov qword [rsp + 0xba], rcx
mov qword [rsp + 0xc2], rcx
mov dword [rsp + 0xca], ecx
mov word [rsp + 0xce], cx
lea rdx, [rsp + 0xa8]
mov rcx, rax
call fcn.14005eef0
test eax, eax
je 0x1400580f2
xor esi, esi
cmp word [rsp + 0xaa], 6
setne sil
mov eax, esi
jmp 0x1400580f2
mov eax, 1
jmp 0x1400580f2
mov eax, dword [rbx + 0x3e8]
shr eax, 8
and eax, 1
jmp 0x1400580f2
mov eax, dword [rbx + 0x3e8]
shr eax, 7
and eax, 1
jmp 0x1400580f2
mov eax, dword [rbx + 0x3e8]
shr eax, 6
and eax, 1
jmp 0x1400580f2
mov eax, dword [rbx + 0x3e8]
shr eax, 1
and eax, 1
jmp 0x1400580f2
cmp edi, 0x23000526
ja 0x140057e91
cmp edi, 0x23000526
je 0x140057e87
sub edi, 0x23000213
je 0x140057e76
cmp edi, 1
jne case.0x140057abb.587202818
mov eax, dword [rbx + 0x3e8]
shr eax, 3
and eax, edi
jmp 0x1400580f2
mov eax, dword [rbx + 0x3e8]
shr eax, 2
and eax, 1
jmp 0x1400580f2
mov eax, 1
jmp 0x1400580f2
cmp edi, 0x23000601
jb case.0x140057abb.587202818
cmp edi, 0x23000603
jbe 0x140057ebc
cmp edi, 0x23000604
jne case.0x140057abb.587202818
mov eax, dword [rbx + 0x3e4]
jmp 0x1400580f2
xor esi, esi
mov qword [rsp + 0x60], rsi
lea rdx, str.SoftwareRealtekSBCoexist
lea rcx, [rsp + 0x58]
call fcn.140004b50
mov qword [rsp + 0x80], rsi
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rdx, qword [rsp + 0x58]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140057f17
mov rbx, qword [rsp + 0x80]
mov qword [rsp + 0x60], rbx
jmp 0x140057f6e
mov qword [rsp + 0x78], rsi
lea rax, [rsp + 0x94]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x20019
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x58]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400580ca
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x50], esi
sub edi, 0x23000601
je 0x140058045
sub edi, 1
je 0x140057fc8
cmp edi, 1
jne 0x14005807c
mov dword [rsp + 0x74], 4
lea rax, [rsp + 0x74]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x98]
xor r8d, r8d
lea rdx, str.DisablePopUp
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x14005807c
mov dword [rsp + 0x6c], 4
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x88]
xor r8d, r8d
lea rdx, str.ExclusiveEnable
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x50], 0
je 0x14005803f
mov dword [rsp + 0x70], 4
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x8c]
xor r8d, r8d
lea rdx, str.Technology
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x14005807c
mov dword [rsp + 0x50], esi
jmp 0x14005807c
mov dword [rsp + 0x68], 4
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x90]
xor r8d, r8d
lea rdx, str.ExclusiveEnable
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test rbx, rbx
je 0x14005808f
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x60], rsi
mov ebx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400580b6
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400580c6
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x1400580f2
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400580ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor eax, eax
jmp 0x1400580f2
xor eax, eax
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.140144dc0
add rsp, 0xe0
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret