Function at 0x140049920
Capabilities:
Query or enumerate registry value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x80
mov qword [rsp + 0x48], 0xfffffffffffffffe
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm7
mov rbp, rcx
add rcx, 0x8b0
call fcn.14002ef30
mov r12, qword [rbp + 0x858]
xor r13d, r13d
mov esi, r13d
test r12d, r12d
je 0x140049c50
lea r14, str.PbDefaultVol_SPDIF
movss xmm7, dword [0x1400bc4fc]
nop
nop
cmp esi, dword [rbp + 0x858]
jae 0x140049c32
mov edx, esi
lea rcx, [rbp + 0x840]
call fcn.140053bc0
test rax, rax
je 0x140049c4a
mov rbx, qword [rax + 0x10]
test rbx, rbx
je 0x140049c32
cmp dword [rbx + 0x154], 8
jne 0x140049c32
mov dword [rsp + 0xd0], r13d
lea rax, [rsp + 0x38]
mov qword [rsp + 0xc8], rax
call fcn.140054628
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
je 0x140049c3f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x38], rax
test r14, 0xffffffffffff0000
jne 0x140049a25
movzx edi, r14w
mov ecx, edi
call fcn.140054614
test rax, rax
je 0x140049a46
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140011760
jmp 0x140049a46
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r14
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
mov rdx, r14
lea rcx, [rsp + 0x38]
call fcn.140011dc0
nop
mov dword [rsp + 0xc8], r13d
mov qword [rsp + 0x40], r13
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SOFTWARERealtekRealtekEffectsDriver
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140049b3d
mov rdi, qword [rsp + 0x40]
mov dword [rsp + 0xd8], 4
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x30]
xor r8d, r8d
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140049b0c
cmp dword [rsp + 0x30], 4
jne 0x140049b0c
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0xd0], eax
test rdi, rdi
je 0x140049ae9
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140049b5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140049b5e
test rdi, rdi
je 0x140049b1a
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140049b5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140049b5e
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140049b5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cvtsi2ss xmm6, dword [rsp + 0xd0]
divss xmm6, xmm7
mov rax, qword [rbx + 0x1c8]
mov rdi, qword [rax + 0x10]
test rdi, rdi
je 0x140049c32
cmp dword [rdi + 0x1c], 0
je 0x140049c23
lea rcx, [rsp + 0x50]
mov rax, qword [0x1400b4158]
mov qword [rcx], rax
mov rax, qword [0x1400b4160]
mov qword [rcx + 8], rax
mov rcx, qword [rdi + 0xd0]
test rcx, rcx
jne 0x140049bb4
mov r8d, r13d
jmp 0x140049c0c
mov dword [rsp + 0xc0], r13d
mov rax, qword [rcx]
lea rdx, [rsp + 0xc0]
call qword [rax + 0x28]
test eax, eax
jns 0x140049bd3
mov r8d, r13d
jmp 0x140049c0c
mov ebx, r13d
cmp dword [rsp + 0xc0], ebx
jbe 0x140049c03
nop
mov rcx, qword [rdi + 0xd0]
mov rax, qword [rcx]
lea r9, [rsp + 0x50]
movaps xmm2, xmm6
mov edx, ebx
call qword [rax + 0x50]
add ebx, 1
cmp ebx, dword [rsp + 0xc0]
jb 0x140049be0
mov r8d, r13d
test eax, eax
setns r8b
cvtss2sd xmm1, xmm6
movq rdx, xmm1
lea rcx, str.CAudioDevice::SetVolume_fDBLevel___f_bSuccess___d_n
call fcn.140001030
jmp 0x140049c32
mov rdx, qword [rbx]
lea rcx, str.CAudioDevice::SetVolume__s_No_Vol_Support_n
call fcn.140001030
add esi, 1
cmp esi, r12d
jae 0x140049c50
jmp 0x140049980
mov ecx, 0x80004005
call fcn.140012060
int3
call fcn.140053538
int3
lea rcx, [rbp + 0x8b0]
mov rax, qword [rcx]
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x60]
add rsp, 0x80
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp qword [rax + 0x28]