Function at 0x14007b380
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rbx
push rsi
push rdi
push r14
sub rsp, 0x688
mov rax, qword [0x14016adb0]
xor rax, rsp
mov qword [rsp + 0x670], rax
mov r8d, dword [rcx + 0x528]
mov rdi, rcx
cmp r8d, 8
je 0x14007b5bc
cmp r8d, 0xa
je 0x14007b5bc
cmp r8d, 0xc
je 0x14007b5bc
cmp r8d, 0xd
je 0x14007b5bc
cmp r8d, 9
jne 0x14007b6f1
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], r12
mov qword [r11 - 0x28], r13
lea r13d, [r8 - 5]
lea ebp, [r8 - 8]
lea r12, [rcx + 0x2040]
lea r14, str.OPTIONS
xor esi, esi
cmp ebp, dword [rdi + 0x96c]
jne 0x14007b429
mov r8d, dword [rdi + 0x528]
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
mov r9d, 1
call fcn.14001e4d0
jmp 0x14007b49f
cmp ebp, dword [rdi + 0x970]
jne 0x14007b451
mov r8d, dword [rdi + 0x528]
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
mov r9d, 2
call fcn.14001e4d0
jmp 0x14007b49f
cmp ebp, dword [rdi + 0x974]
jne 0x14007b479
mov r8d, dword [rdi + 0x528]
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
mov r9d, 3
call fcn.14001e4d0
jmp 0x14007b49f
cmp ebp, dword [rdi + 0x978]
jne 0x14007b49f
mov r8d, dword [rdi + 0x528]
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
mov r9d, 4
call fcn.14001e4d0
mov r9, qword [rdi + 0x940]
add r9, 0x27568
je 0x14007b55c
lea r8, str.SYSTEMCurrentControlSetServicesVIA_HD_Audio_Codec_DefaultVDeckINI
lea rdx, str._s_s_s_
lea rcx, [rsp + 0x250]
mov dword [rsp + 0x30], 0x104
mov qword [rsp + 0x20], r14
call fcn.14001e4d0
lea r11, [rsp + 0x38]
lea rdx, [rsp + 0x250]
mov r9d, 1
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14007b50b
mov eax, esi
jmp 0x14007b55e
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x460]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
mov ebx, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x14007b54d
mov eax, esi
jmp 0x14007b55e
lea rcx, [rsp + 0x460]
call fcn.1400fa6e0
jmp 0x14007b55e
mov eax, esi
test eax, eax
mov rcx, qword [r12]
jne 0x14007b56e
mov dword [rcx + 0x260], esi
jmp 0x14007b579
cmp eax, 1
jne 0x14007b579
mov dword [rcx + 0x260], eax
mov rcx, qword [rcx + 0x40]
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
add ebp, 1
add r12, 8
sub r13, 1
jne 0x14007b401
mov r13, qword [rsp + 0x680]
mov r12, qword [rsp + 0x6c0]
mov rbp, qword [rsp + 0x6b8]
jmp 0x14007b6f1
mov rax, qword [rcx + 0x940]
cmp dword [rax + 0x8b4], 0
jne 0x14007b6f1
lea rdx, str.Sync__d__d
lea rcx, [rsp + 0x40]
mov r9d, 1
call fcn.14001e4d0
mov rcx, qword [rdi + 0x2040]
mov edx, 5
call fcn.1400dc9c4
mov r9, qword [rdi + 0x940]
xor esi, esi
add r9, 0x27568
je 0x14007b6bc
lea r14, str.OPTIONS
lea r8, str.SYSTEMCurrentControlSetServicesVIA_HD_Audio_Codec_DefaultVDeckINI
lea rdx, str._s_s_s_
lea rcx, [rsp + 0x460]
mov dword [rsp + 0x30], 0x104
mov qword [rsp + 0x20], r14
call fcn.14001e4d0
lea r11, [rsp + 0x38]
lea r9d, [rsi + 1]
lea rdx, [rsp + 0x460]
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x14007b66b
mov eax, esi
jmp 0x14007b6be
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x250]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
mov ebx, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x14007b6ad
mov eax, esi
jmp 0x14007b6be
lea rcx, [rsp + 0x250]
call fcn.1400fa6e0
jmp 0x14007b6be
mov eax, esi
test eax, eax
mov rcx, qword [rdi + 0x2040]
jne 0x14007b6d1
mov dword [rcx + 0x260], esi
jmp 0x14007b6dc
cmp eax, 1
jne 0x14007b6dc
mov dword [rcx + 0x260], eax
mov rcx, qword [rcx + 0x40]
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rcx, qword [rsp + 0x670]
xor rcx, rsp
call fcn.1400f9790
add rsp, 0x688
pop r14
pop rdi
pop rsi
pop rbx
ret