Function at 0x1400174d0
Capabilities:
Print debug messages
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x760]
sub rsp, 0x860
mov rax, qword [0x14007d038]
xor rax, rsp
mov qword [rbp + 0x750], rax
mov rbx, rcx
mov rsi, rdx
mov rcx, rdx
call qword [sym.imp.USER32.dll_CharUpperW]
test byte [rbx + 0x298], 4
je 0x140017540
mov r9, rsi
lea r8, str.Enter_Metering::IsSupport__s_r_n
mov edx, 0x400
lea rcx, [rbp + 0x350]
call fcn.140002050
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rax, [rbx + 0x358]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [rbx + 0x3b0]
xor r15d, r15d
xor r13b, r13b
mov r14d, r15d
lea r12d, [r15 + 1]
cmp dword [rbx + 0x3c0], r15d
jbe 0x1400175bb
nop dword [rax]
test rdi, rdi
je 0x1400175a8
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharUpperW]
mov r8, rsi
mov rax, rdi
sub r8, rdi
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1400175a4
add rax, 2
test ecx, ecx
jne 0x140017590
test edx, edx
je 0x140017620
add rdi, 0x130
inc r14d
cmp r14d, dword [rbx + 0x3c0]
jb 0x140017570
mov r14d, r15d
mov rdi, qword [rbx + 0x3b8]
cmp dword [rbx + 0x3c4], r15d
jbe 0x14001769f
test rdi, rdi
je 0x140017608
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharUpperW]
mov r8, rsi
mov rax, rdi
sub r8, rdi
nop dword [rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140017604
add rax, 2
test ecx, ecx
jne 0x1400175f0
test edx, edx
je 0x14001765c
add rdi, 0x130
inc r14d
cmp r14d, dword [rbx + 0x3c4]
jb 0x1400175d2
jmp 0x14001769f
mov dword [rbx + 0x3a8], r15d
movzx r13d, r12b
mov eax, dword [rdi + 0x100]
mov rdx, 0xffffffffffffffff
mov dword [rbx + 0x380], eax
mov eax, dword [rdi + 0x104]
mov dword [rbx + 0x38c], eax
nop word [rax + rax]
inc rdx
cmp word [rsi + rdx*2], r15w
jne 0x140017650
jmp 0x140017690
mov dword [rbx + 0x3a8], r12d
movzx r13d, r12b
mov eax, dword [rdi + 0x100]
mov rdx, 0xffffffffffffffff
mov dword [rbx + 0x380], eax
mov eax, dword [rdi + 0x104]
mov dword [rbx + 0x38c], eax
inc rdx
cmp word [rsi + rdx*2], r15w
jne 0x140017686
mov r8, rsi
lea rcx, [rbx + 0x40]
inc rdx
call fcn.14003c608
lea rcx, [rbx + 0x358]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r13b, r13b
jne 0x1400176d2
test byte [rbx + 0x298], r12b
je 0x14001776d
lea rcx, str.Metering::IsSupport__No_Endpoint_Found_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor al, al
jmp 0x14001797a
cmp dword [rbx + 0x3a8], r15d
jne 0x14001772e
mov rcx, qword [rbx + 0x3a0]
test rcx, rcx
je 0x1400176ed
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r9d, r9d
lea r8, [rbx + 0x3a0]
mov rdx, rsi
mov rcx, rbx
call fcn.14001af20
test al, al
jne 0x140017947
mov qword [rbx + 0x3a0], r15
test byte [rbx + 0x298], r12b
je 0x14001776d
lea rcx, str.Metering::IsSupport__No_Endpoint_Property_Key_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor al, al
jmp 0x14001797a
mov r9d, r12d
mov qword [rsp + 0x30], r15
lea r8, [rsp + 0x30]
mov dword [rsp + 0x3c], r15d
mov rdx, rsi
mov dword [rsp + 0x38], 4
mov rcx, rbx
call fcn.14001af20
test al, al
jne 0x140017774
test byte [rbx + 0x298], r12b
je 0x14001776d
lea rcx, str.Metering::IsSupport__No_Render_Endpoint_Property_Key_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor al, al
jmp 0x14001797a
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rdx, str.1da5d803_d492_4edd_8c23_e0c0ffee7f0e_0
lea rax, [rsp + 0x3c]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140017934
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x30], r15
cmp dword [rsp + 0x3c], r12d
jne 0x14001792b
lea r8, str.SOFTWAREMicrosoftWindowsCurrentVersionMMDevicesAudioRender
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.14003c608
lea r8, [0x14006a5f0]
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.14003c584
mov r8, rsi
lea rcx, [rsp + 0x50]
mov edx, 0x200
call fcn.14003c584
lea r8, str.FxProperties
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.14003c584
lea rax, [rsp + 0x30]
mov r9d, 0x2001b
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140017926
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rdx, str.3BA0CD54_830F_4551_A6EB_F3EAB68E3700_4
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xff
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov dword [rsp + 0x44], r15d
mov dword [rsp + 0x48], r12d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rdx, str.3BA0CD54_830F_4551_A6EB_F3EAB68E3700_1
lea rax, [rsp + 0x44]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rdx, str.3BA0CD54_830F_4551_A6EB_F3EAB68E3700_6
lea rax, [rsp + 0x48]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x40], r15d
jne 0x140017904
cmp dword [rsp + 0x44], r15d
jne 0x140017904
mov rcx, qword [rsp + 0x30]
mov r12d, r15d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x30], r15
mov dword [rbx + 0x3e0], r15d
jmp 0x140017939
cmp dword [rsp + 0x48], r15d
mov rcx, qword [rsp + 0x30]
cmovne r12d, r15d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x30], r15
mov dword [rbx + 0x3e0], r12d
jmp 0x140017939
mov r15, qword [rsp + 0x30]
mov dword [rbx + 0x3e0], r12d
jmp 0x140017939
mov r15, qword [rsp + 0x30]
test r15, r15
je 0x140017947
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test byte [rbx + 0x298], 4
je 0x140017978
mov r9, rsi
lea r8, str.Leave_Metering::IsSupport__s_r_n
mov edx, 0x400
lea rcx, [rbp + 0x350]
call fcn.140002050
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov al, 1
mov rcx, qword [rbp + 0x750]
xor rcx, rsp
call fcn.140024cf0
mov rbx, qword [rsp + 0x8b0]
add rsp, 0x860
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret