Function at 0x140088310
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1400ff010]
xor rax, rsp
mov qword [rbp - 8], rax
mov rsi, rcx
mov qword [rbp - 0x38], rcx
lea rbx, [rcx + 0x10]
lea rdi, [rcx + 0x20]
lea rax, vtable.CVoipForForte.4.0
mov qword [rcx], rax
lea rax, vtable.CVoipForForte.3.0
mov qword [rcx + 8], rax
lea rax, vtable.CVoipForForte.1.0
mov qword [rbx], rax
lea rax, vtable.CVoipForForte.0
mov qword [rcx + 0x18], rax
lea rax, vtable.CVoipForForte.2.0
mov qword [rdi], rax
xor r13d, r13d
mov qword [rcx + 0x28], r13
mov qword [rbp - 0x30], rdi
call fcn.140009f90
mov r14, rax
test rdi, rdi
je 0x1400883d7
lea rcx, [rax + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x50]
mov rax, qword [rcx]
test rax, rax
je 0x1400883c4
cmp qword [rax + 0x10], rdi
je 0x1400883cd
mov rax, qword [rax]
test rax, rax
jne 0x1400883b6
lea rdx, [rbp - 0x30]
call fcn.140005800
lea rcx, [r14 + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov qword [rbp - 0x30], rbx
call fcn.140009e20
mov rdi, rax
test rbx, rbx
je 0x140088421
lea rcx, [rax + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [rdi + 0x38]
mov rax, qword [rcx]
test rax, rax
je 0x14008840e
nop
cmp qword [rax + 0x10], rbx
je 0x140088417
mov rax, qword [rax]
test rax, rax
jne 0x140088400
lea rdx, [rbp - 0x30]
call fcn.140005800
lea rcx, [rdi + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov r15d, r13d
xor eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x20], r13
mov dword [rbp - 0x18], r13d
mov qword [rbp - 0x10], r13
mov dword [rbp - 0x28], r13d
lea r9d, [rax + 1]
lea r8, str.SOFTWAREFortemediaHowlingDection
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.14001da70
test eax, eax
je 0x140088482
lea r9, str.SOFTWAREFortemediaHowlingDection
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.1400430e0
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x1400884e7
jmp 0x1400884e1
mov dword [rbp - 0x24], 4
lea rax, [rbp - 0x24]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
xor r8d, r8d
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_11
mov rbx, qword [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x1400884d9
cmp dword [rbp - 0x30], 4
jne 0x1400884d9
mov r15d, dword [rbp - 0x28]
test rbx, rbx
je 0x1400884d2
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov edi, 1
jmp 0x1400884ea
test rbx, rbx
je 0x1400884e7
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov edi, r13d
mov r14d, r13d
xor eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x20], r13
mov dword [rbp - 0x18], r13d
mov qword [rbp - 0x10], r13
mov dword [rbp - 0x28], r13d
lea r9d, [rax + 1]
lea r8, str.SOFTWAREFortemediaHowlingDection
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.14001da70
test eax, eax
je 0x14008854b
lea r9, str.SOFTWAREFortemediaHowlingDection
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.1400430e0
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x1400885b0
jmp 0x1400885aa
mov dword [rbp - 0x30], 4
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x24]
xor r8d, r8d
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_20
mov rbx, qword [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x1400885a2
cmp dword [rbp - 0x24], 4
jne 0x1400885a2
mov r14d, dword [rbp - 0x28]
test rbx, rbx
je 0x14008859b
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov ebx, 1
jmp 0x1400885b3
test rbx, rbx
je 0x1400885b0
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov ebx, r13d
test edi, edi
je 0x1400885dc
test r15d, r15d
je 0x1400885dc
mov r8d, 0x1f
lea rdx, str.CVoipForForte::CVoipForForte
lea rcx, str._s__d_Support_Howling_Toast
call fcn.1400430e0
mov dword [rsi + 0x28], 1
test ebx, ebx
je 0x140088605
test r14d, r14d
je 0x140088605
mov r8d, 0x24
lea rdx, str.CVoipForForte::CVoipForForte
lea rcx, str._s__d_Support_VOIP
call fcn.1400430e0
mov dword [rsi + 0x2c], 1
cmp dword [rsi + 0x28], 0
je 0x14008869b
mov r8d, 0x29
lea rdx, str.CVoipForForte::CVoipForForte
lea rcx, str._s__d_RegKeyNotify___Fortemedia___HowlingDection_n
call fcn.1400430e0
mov qword [rsi + 0x30], r13
call fcn.1400053c0
mov rcx, rax
lea r8, str.SOFTWAREFortemediaHowlingDection
mov rdx, 0xffffffff80000002
call fcn.14006d870
mov qword [rsi + 0x30], rax
test rax, rax
je 0x140088682
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_10
mov rcx, rax
call fcn.14006d320
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_12
mov rcx, qword [rsi + 0x30]
call fcn.14006d320
mov rcx, qword [rsi + 0x30]
add rcx, 0x20
lea rdx, [rsi + 8]
call fcn.140005480
jmp 0x14008869b
mov r8d, 0x37
lea rdx, str.CVoipForForte::CVoipForForte
lea rcx, str._s__d_RegKeyNotify___Fortemedia___HowlingDection_Fail___n
call fcn.1400430e0
cmp dword [rsi + 0x2c], 0
je 0x140088875
mov qword [rbp - 0x30], rsi
call fcn.140018060
mov rbx, rax
lea rcx, [rax + 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [rbx + 0x40]
mov rax, qword [rcx]
test rax, rax
je 0x1400886d5
cmp qword [rax + 0x10], rsi
je 0x1400886de
mov rax, qword [rax]
test rax, rax
jne 0x1400886c7
lea rdx, [rbp - 0x30]
call fcn.140005800
lea rcx, [rbx + 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
call fcn.140009e20
mov rcx, rax
call fcn.14006b4e0
call fcn.140009e20
cmp dword [rax + 0x138], 0
jne 0x14008873b
cmp dword [0x140103eac], 0
je 0x14008873b
cmp dword [0x140103ea8], 0
jne 0x140088722
mov rax, qword [0x1400ff930]
test byte [rax + 0x1c], 1
je 0x14008873b
mov r8d, 0x3b
lea rdx, str.CMMPlatform::AudioDevList_GetHeadPosition
lea rcx, str._s__d_please_call_AudioDevList_AddRef_before_AudioDevList_GetHeadPosition
call fcn.1400430e0
call fcn.140009e20
mov rdi, qword [rax + 0xd8]
test rdi, rdi
je 0x140088833
mov r15d, 0x3e8
call fcn.140009e20
call fcn.140009e20
test rdi, rdi
je 0x1400888a2
mov rbx, qword [rdi + 0x10]
mov rdi, qword [rdi]
test rbx, rbx
je 0x14008882a
lea rcx, [rbx + 0x20]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
cmp dword [rbx + 0x58], 0
jne 0x140088791
mov rcx, rbx
call fcn.140012880
lea rcx, [rbx + 0x20]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov r14d, r13d
cmp dword [rbx + 0x8c], r13d
cmove r14d, r15d
mov r9d, 1
mov r8d, r14d
lea rdx, [0x1400af6c8]
mov rcx, rbx
call fcn.140002b60
test eax, eax
jne 0x1400887eb
mov dword [rsp + 0x20], 4
mov r9, qword [rbx + 0x148]
lea r8d, [rax + 0x74]
lea rdx, str.CVoipForForte::InitDefaultType
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_FxProperty_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
call fcn.1400430e0
xor r9d, r9d
mov r8d, r14d
lea rdx, [0x1400af6c8]
mov rcx, rbx
call fcn.140002b60
test eax, eax
jne 0x14008882a
mov dword [rsp + 0x20], 4
mov r9, qword [rbx + 0x148]
lea r8d, [rax + 0x78]
lea rdx, str.CVoipForForte::InitDefaultType
lea rcx, str._s__d_pAudDev__m_szEndpointId_s__set_Property_PKey_PKEY_RTK_AUDIO_SCENARIO_MODE_fail___d_
call fcn.1400430e0
test rdi, rdi
jne 0x140088756
call fcn.140009e20
sub dword [rax + 0x138], 1
mov ecx, dword [rax + 0x138]
jne 0x140088856
mov rcx, qword [rax + 0x148]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
jmp 0x140088875
cmp ecx, 0x32
jle 0x140088875
mov r8d, 0x81
lea rdx, str.CMMPlatform::AudioDevList_Release
lea rcx, str._s__d_calling_AudioDevList_Release_isnt_matched_AudioDevList_AddRef_or_directly_return_in_EnumAudioDeviceStart_loop
call fcn.1400430e0
nop
mov rax, rsi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140091f30
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.140003b40
int3