Function at 0x14001a1d4
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rbp
push rdi
push r13
mov rbp, rsp
sub rsp, 0x30
lea rax, [rcx + 0x424]
mov rdi, rcx
mov rsi, rdx
lea rcx, [rbp + 0x20]
lea rdx, str.DeviceName
xor r9d, r9d
mov qword [r11 - 0x20], rcx
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], 0x1f2
mov qword [r11 - 0x28], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x420]
lea rdx, str.MinorClass
mov qword [rsp + 0x28], rcx
mov r13d, 4
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x618]
lea rdx, str.SecurityType
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x624]
lea rdx, str.PowerLevel
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rax, [rbp + 0x20]
lea rbx, [rdi + 0x61c]
mov qword [rsp + 0x28], rax
lea rdx, str.UseFixedPin
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rbx
mov dword [rbp + 0x20], r13d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea r11, [rdi + 0x62c]
and dword [r11], 0
lea rax, [rbp + 0x20]
lea rdx, str.ForceDevClassMajor
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea r11, [rdi + 0x630]
lea rax, [rbp + 0x20]
and dword [r11], 0
mov qword [rsp + 0x28], rax
lea rdx, str.ForceDevClassMinor
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], r11
mov dword [rbp + 0x20], r13d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea r11, [rdi + 0x1928]
lea rax, [rbp + 0x20]
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x28], rax
mov dword [r11], 1
mov qword [rsp + 0x20], r11
lea rdx, str.UseRFCOMMAuth
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea r11, [rdi + 0x634]
lea rax, [rbp + 0x20]
and dword [r11], 0
mov qword [rsp + 0x28], rax
lea rdx, str.TxPowerHigh
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], r11
mov dword [rbp + 0x20], r13d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea r11, [rdi + 0x638]
lea rax, [rbp + 0x20]
lea rdx, str.TxPowerMedium
and dword [r11], 0
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], r11
mov dword [rbp + 0x20], r13d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea r11, [rdi + 0x63c]
and dword [r11], 0
lea rax, [rbp + 0x20]
lea rdx, str.TxPowerLow
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rax, [rbp + 0x20]
lea rdx, str.UseFixedPin
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x6a6]
mov qword [rsp + 0x28], rcx
lea rdx, str.PinCode
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], 0x20
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x620]
lea rdx, str.MaxSimultConnections
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x6c8]
lea rdx, str.NoSleepingWhileConnected
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x628]
lea rdx, str.DontShowAdvanced
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x6dc]
mov qword [rsp + 0x28], rcx
lea rdx, str.DefaultStatusDll
mov ebx, 0x208
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x8e4]
lea rdx, str.DefaultPropertiesDll
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x640]
mov qword [rsp + 0x28], rcx
lea rdx, str.UnnamedDeviceName
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], 0x66
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x6cc]
lea rdx, str.ShowSvcWizardOnStartup
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x6d0]
lea rdx, str.ShowBtExhangeFldrChgDlg
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x6d4]
mov qword [rsp + 0x28], rcx
lea rdx, str.ShowHandsFreeNotConnected
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x6d8]
lea rdx, str.ShowHandsFreeNotConfigured
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov dword [rbp + 0x20], ebx
lea rax, [rdi + 0xaec]
mov qword [rsp + 0x28], rcx
lea rdx, str.StartDeviceMenuString
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0xcf4]
mov qword [rsp + 0x28], rcx
lea rdx, str.StopDeviceMenuString
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0xefc]
lea rdx, str.DeviceDownMenuString
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1104]
lea rdx, str.DeviceDownDlgTextString
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x130c]
mov qword [rsp + 0x28], rcx
lea rdx, str.DeviceDownDisabledMenuString
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x1514]
lea rdx, str.DeviceDownDisabledDlgTextString
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x171c]
lea rdx, str.DeviceStillDisabledBubbleString
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1924]
mov qword [rsp + 0x28], rcx
lea rdx, str.DisplayTrayDeviceDisable
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1930]
mov qword [rsp + 0x28], rcx
mov dword [rbp + 0x20], 8
mov qword [rsp + 0x20], rax
lea rdx, str.KeyCreationTime
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x192c]
mov qword [rsp + 0x28], rcx
lea rdx, str.ShowHardwareInstallWindow
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x1938]
lea rdx, str.ShowBluetoothAddress
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x193c]
lea rdx, str.ExtendedSettingsMask
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1f58]
mov qword [rsp + 0x28], rcx
lea rdx, str.MSFtpWizardLink
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x1940]
lea rdx, str.WizardLink
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1b48]
lea rdx, str.WizardLogo
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x1d50]
mov qword [rsp + 0x28], rcx
lea rdx, str.WizardLeftBmp
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2160]
mov qword [rsp + 0x28], rcx
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea rdx, str.DefaultInputCharset
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2368]
mov qword [rsp + 0x28], rcx
lea rdx, str.DefaultOutputCharset
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x2570]
lea rdx, str.BroadcomMaxRetryInquiryNumberValue
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2574]
lea rdx, str.BroadcomMessageShowTimeMs
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2578]
mov qword [rsp + 0x28], rcx
lea rdx, str.ServerID
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x257c]
lea rdx, str.KeyIndication
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2580]
lea rdx, str.PinCodeWord
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2584]
mov qword [rsp + 0x28], rcx
lea rdx, str.DeviceInactivityDuration
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2588]
mov qword [rsp + 0x28], rcx
xor r9d, r9d
mov dword [rbp + 0x20], r13d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.HidInactiveThreshold
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x258c]
mov qword [rsp + 0x28], rcx
lea rdx, str.Manufacturer
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x2794]
lea rdx, str.EnableHidAudioCoexistenceWarnings
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2798]
lea rdx, str.ConfigViaControlPanelOnly
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x279c]
mov qword [rsp + 0x28], rcx
lea rdx, str.TieBtDeviceNameToComputerName
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27a0]
lea rdx, str.BitMaskShowAllowWakeup
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27a4]
lea rdx, str.MinPINLength
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27a8]
mov qword [rsp + 0x28], rcx
lea rdx, str.ServerStopped
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27ac]
mov qword [rsp + 0x28], rcx
xor r9d, r9d
mov dword [rbp + 0x20], r13d
xor r8d, r8d
lea rdx, str.NoDeviceNoTrayIcon
mov qword [rsp + 0x20], rax
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27b0]
mov qword [rsp + 0x28], rcx
lea rdx, str.DoNotIntegrateSkype
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27b4]
lea rdx, str.EnableSkypeVR
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27b8]
lea rdx, str.VoiceRecoTrainingDone
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27bc]
mov qword [rsp + 0x28], rcx
lea rdx, str.DoNotIntegrateAvaya
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27c0]
lea rdx, str.LaunchWizardAfterInstall
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27c4]
lea rdx, str.DynamicTrayIcon
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27c8]
mov qword [rsp + 0x28], rcx
lea rdx, str.ShowFtpOppCplPage
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27cc]
xor r9d, r9d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.ShowAudioCplPage
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27d0]
mov qword [rsp + 0x28], rcx
lea rdx, str.ShowDunCplPage
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27d4]
lea rdx, str.ShowLocalServicesPage
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27d8]
lea rdx, str.ShowVdpCplPage
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27dc]
mov qword [rsp + 0x28], rcx
lea rdx, str.ShowPimChangedDlg
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27e8]
lea rdx, str.DisableCallNumberJP
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27ec]
lea rdx, str.LastErrCounter
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27f0]
mov qword [rsp + 0x28], rcx
lea rdx, str.FtpGet
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27e0]
lea rdx, str.CreateDesktopShortcuts
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27e4]
lea rdx, str.CreateStartMenuShortcuts
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27f4]
mov qword [rsp + 0x28], rcx
lea rdx, str.UnplugAudioDeviceWhenNotConnected
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x27f8]
lea rdx, str.ShowUIAfterPairing
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x27fc]
lea rdx, str.RecoveryButtonProcessing
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2800]
mov qword [rsp + 0x28], rcx
lea rdx, str.SelectiveSuspendEnabled
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x2804]
lea rdx, str.SelectiveSuspendPidVidList
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2c18]
lea rdx, str.ProcessDeviceButton
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2a0c]
mov qword [rsp + 0x28], rcx
lea rdx, str.EnableRemoteWakeup
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rbp + 0x20], ebx
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2a10]
lea rdx, str.EnableRemoteWakeupPidVidList
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2c1c]
mov qword [rsp + 0x28], rcx
lea rdx, str.StartLogging
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x3040]
lea rdx, str.MyCompPathIcon
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2c20]
lea rdx, [0x1400989d0]
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2e28]
mov qword [rsp + 0x28], rcx
lea rdx, str.RestartBtDevOnErr43DelayMs
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x3248]
lea rdx, str.SlideShowMode
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x324c]
lea rdx, str.NetMtu
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x2e2c]
mov qword [rsp + 0x28], rcx
lea rdx, str.RestoreWaitWakeEnabled
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rbp + 0x20], r13d
lea rax, [rdi + 0x2e30]
lea rcx, [rbp + 0x20]
lea rdx, str.ShowBalloonNotDiscoverable
xor r9d, r9d
mov qword [rsp + 0x28], rcx
mov rcx, rsi
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x2e34]
lea rdx, str.EnHcSoftRetryPidVid
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x303c]
lea rdx, str.ActivatePowerAlarm
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3250]
mov qword [rsp + 0x28], rcx
lea rdx, str.EnableLyncSupport
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x3254]
lea rdx, str.EnableProximity
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3258]
lea rdx, str.EnableSMS
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x325c]
mov qword [rsp + 0x28], rcx
lea rdx, str.EnableEasyBits
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x3260]
lea rdx, str.EnableWBS
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [rbp + 0x20], r13d
lea rax, [rdi + 0x3264]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rdx, str.BtTrayInStartup
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3268]
mov qword [rsp + 0x28], rcx
lea rdx, str.ProximityInStack
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x326c]
lea rdx, str.InitCPUChkTimeOut
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3270]
lea rdx, str.NonMainCPUChkTimeOut
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3274]
mov qword [rsp + 0x28], rcx
lea rdx, str.InitCPUPollValue
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x3278]
lea rdx, str.NonMainCPUPollValue
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x327c]
lea rdx, str.CPUThresholdValue
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3284]
mov qword [rsp + 0x28], rcx
lea rdx, str.DisallowProximityUnlock
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rbp + 0x20], r13d
lea rax, [rdi + 0x3280]
lea rdx, str.DisallowProximityLock
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3288]
mov qword [rsp + 0x28], rcx
lea rdx, str.BatteryAlertLevel
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 0x328c]
lea rdx, str.EnableHIDDevice
mov rcx, rsi
xor r9d, r9d
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3294]
lea rdx, str.ShowFindMeInExplorer
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rcx, [rbp + 0x20]
lea rax, [rdi + 0x3290]
mov qword [rsp + 0x28], rcx
lea rdx, str.EnableFindMe
xor r9d, r9d
mov rcx, rsi
xor r8d, r8d
mov dword [rbp + 0x20], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r13
pop rdi
pop rbp
ret