Function at 0x140040360
Capabilities:
Query or enumerate registry value

Disassembly:
cmp r8d, 0x218
jne 0x140040b96
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x14013c010]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov r15, r9
mov r14, rcx
mov rbx, qword [rbp + 0x230]
mov qword [rsp + 0x20], r9
mov r9d, r8d
mov r8d, 0x1068
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d___uMsg___d__wParam___d
call fcn.14005b9a0
mov rax, r15
sub rax, 6
je 0x1400408ae
sub rax, 1
je 0x1400408ae
sub rax, 0xb
je 0x1400408ae
cmp rax, 0x8001
jne 0x140040b71
mov r8d, 0x10a2
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d___uMsg__WM_POWERBROADCAST__wParam__PBT_POWERSETTINGCHANGE
call fcn.14005b9a0
mov qword [0x1401439b0], rbx
test rbx, rbx
je 0x140040890
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x30]
call fcn.1400c7980
mov r8d, 0x7f
lea rdx, [rbp - 0x30]
lea rcx, [0x1400e6458]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_StringFromGUID2]
mov r8d, 0x7f
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_StringFromGUID2]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp - 0x30]
test eax, eax
cmovle rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.140003d80
nop
mov rcx, qword [0x1401439b0]
lea rax, [rcx + 0x14]
mov qword [rsp + 0x28], rax
mov eax, dword [rcx + 0x10]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x30]
mov r8d, 0x10a9
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_GUID___s__Length___d__Data___d
call fcn.14005b9a0
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400404d8
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140048c62.0]
mov rcx, qword [0x1401439b0]
mov rax, qword [rcx]
cmp rax, qword [0x1400d6370]
jne 0x140040b71
mov rax, qword [rcx + 8]
cmp rax, qword [0x1400d6378]
jne 0x140040b71
mov ebx, dword [rcx + 0x14]
mov r9d, ebx
mov r8d, 0x10ae
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_GUID_CONSOLE_DISPLAY_STATE__dwConsoleDisplayState___d
call fcn.14005b9a0
test ebx, ebx
jne 0x14004060b
cmp dword [0x1401439bc], ebx
je 0x140040572
cmp dword [0x1401439f8], 0x9c47
jne 0x140040572
mov r8d, 0x10b4
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_GUID_CONSOLE_DISPLAY_STATE__disbale_mute_function
call fcn.14005b9a0
lea r9d, [rbx + 1]
lea r8, str.DisableKeyboardMute
lea rdx, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rcx, 0xffffffff80000002
call fcn.14007ef10
cmp dword [0x1401453fc], 0
jne 0x1400405af
call fcn.140004860
test rax, rax
je 0x14004059b
cmp dword [rax + 4], 0xa
jne 0x14004059b
cmp dword [rax + 0xc], 0x5374
jb 0x14004059b
mov ebx, 1
jmp 0x14004059d
xor ebx, ebx
mov dword [0x1401453f8], ebx
mov dword [0x1401453fc], 1
jmp 0x1400405b5
mov ebx, dword [0x1401453f8]
test ebx, ebx
je 0x140040b71
cmp dword [0x1401439f8], 0x9c48
jne 0x140040b71
mov r8d, 0x10ba
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_GUID_CONSOLE_DISPLAY_STATE__enter_s0i3
call fcn.14005b9a0
mov r9d, 1
lea r8, str.s0i3
lea rdx, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rcx, 0xffffffff80000002
call fcn.14007ef10
jmp 0x140040b71
cmp ebx, 1
jne 0x140040b71
xor ebx, ebx
cmp dword [0x1401439bc], ebx
je 0x140040738
cmp dword [0x1401439f8], 0x9c47
jne 0x140040738
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x70], ebx
mov qword [rsp + 0x78], rbx
mov dword [rsp + 0x38], ebx
lea r9d, [rbx + 1]
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x68]
call fcn.1400280a0
test eax, eax
je 0x14004069d
lea r9, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140040738
jmp 0x140040732
mov dword [rsp + 0x48], 4
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
xor r8d, r8d
lea rdx, str.DisableKeyboardMute
mov rdi, qword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14004072a
cmp dword [rsp + 0x4c], 4
jne 0x14004072a
mov esi, dword [rsp + 0x38]
test rdi, rdi
je 0x1400406f3
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test esi, esi
je 0x140040738
mov r8d, 0x10c6
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_GUID_CONSOLE_DISPLAY_STATE__enable_mute_function
call fcn.14005b9a0
call fcn.14000b740
mov rcx, rax
mov edx, 0x430
mov r8d, 0x1f4
call fcn.1400b5a90
jmp 0x140040738
test rdi, rdi
je 0x140040738
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp dword [0x1401453fc], 0
jne 0x140040773
call fcn.140004860
test rax, rax
je 0x14004075f
cmp dword [rax + 4], 0xa
jne 0x14004075f
cmp dword [rax + 0xc], 0x5374
mov eax, 1
jae 0x140040761
mov eax, ebx
mov dword [0x1401453f8], eax
mov dword [0x1401453fc], 1
jmp 0x140040779
mov eax, dword [0x1401453f8]
test eax, eax
je 0x140040b71
cmp dword [0x1401439f8], 0x9c48
jne 0x140040b71
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x80], rbx
mov dword [rbp - 0x78], ebx
mov qword [rbp - 0x70], rbx
mov dword [rsp + 0x3c], ebx
mov r9d, 1
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x80]
call fcn.1400280a0
test eax, eax
je 0x1400407f8
lea r9, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x140040b71
jmp 0x140040b6b
mov dword [rsp + 0x50], 4
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x54]
xor r8d, r8d
lea rdx, str.s0i3
mov rbx, qword [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14004088b
cmp dword [rsp + 0x54], 4
jne 0x14004088b
mov edi, dword [rsp + 0x3c]
test rbx, rbx
je 0x14004084d
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test edi, edi
je 0x140040b71
mov r8d, 0x10d1
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_GUID_CONSOLE_DISPLAY_STATE__weak_up_from_s0i3
call fcn.14005b9a0
call fcn.14000b740
mov rcx, rax
mov edx, 0x43d
mov r8d, 0x1f4
call fcn.1400b5a90
jmp 0x140040b71
jmp 0x140040b63
mov r8d, 0x10da
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_lParam_is_NULL
call fcn.14005b9a0
jmp 0x140040b71
mov dword [r14 + 0xb4], 1
xor ebx, ebx
mov edi, ebx
lea esi, [rbx + 0x20]
lea rcx, [r14 + 0xb8]
add rcx, rdi
xor r8d, r8d
lea rdx, [0x1400e36c8]
call fcn.1400040e0
add rdi, 8
sub rsi, 1
jne 0x1400408c0
call fcn.14001de20
test dword [rax + 4], 0x200
je 0x140040909
call fcn.14000b740
mov rcx, rax
mov edx, 0x42a
mov r8d, 0x1f4
call fcn.1400b5a90
cmp dword [0x1401439bc], ebx
je 0x140040a29
cmp dword [0x1401439f8], 0x9c47
jne 0x140040a29
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x68], rbx
mov dword [rbp - 0x60], ebx
mov qword [rbp - 0x58], rbx
mov dword [rsp + 0x40], ebx
mov r9d, 1
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x68]
call fcn.1400280a0
test eax, eax
je 0x14004098c
lea r9, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x140040a29
jmp 0x140040a23
mov dword [rsp + 0x58], 4
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x5c]
xor r8d, r8d
lea rdx, str.DisableKeyboardMute
mov rdi, qword [rbp - 0x68]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x140040a1b
cmp dword [rsp + 0x5c], 4
jne 0x140040a1b
mov esi, dword [rsp + 0x40]
test rdi, rdi
je 0x1400409e1
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test esi, esi
je 0x140040a29
mov r9, r15
mov r8d, 0x1090
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_RESUME__d___enable_mute_function
call fcn.14005b9a0
call fcn.14000b740
mov rcx, rax
mov edx, 0x430
mov r8d, 0x1f4
call fcn.1400b5a90
jmp 0x140040a29
test rdi, rdi
je 0x140040a29
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp dword [0x1401453fc], 0
jne 0x140040a64
call fcn.140004860
test rax, rax
je 0x140040a50
cmp dword [rax + 4], 0xa
jne 0x140040a50
cmp dword [rax + 0xc], 0x5374
mov eax, 1
jae 0x140040a52
mov eax, ebx
mov dword [0x1401453f8], eax
mov dword [0x1401453fc], 1
jmp 0x140040a6a
mov eax, dword [0x1401453f8]
test eax, eax
je 0x140040b71
cmp dword [0x1401439f8], 0x9c48
jne 0x140040b71
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x50], rbx
mov dword [rbp - 0x48], ebx
mov qword [rbp - 0x40], rbx
mov dword [rsp + 0x44], ebx
mov r9d, 1
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x50]
call fcn.1400280a0
test eax, eax
je 0x140040ae9
lea r9, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140040b71
jmp 0x140040b6b
mov dword [rsp + 0x60], 4
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x64]
xor r8d, r8d
lea rdx, str.s0i3
mov rbx, qword [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x140040b63
cmp dword [rsp + 0x64], 4
jne 0x140040b63
mov edi, dword [rsp + 0x44]
test rbx, rbx
je 0x140040b3e
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test edi, edi
je 0x140040b71
mov r9, r15
mov r8d, 0x109b
lea rdx, str.CCustomizeHP::OnWindowsPowerMessage
lea rcx, str._s__d_RESUME__d___weak_up_from_s0i3
call fcn.14005b9a0
jmp 0x14004086e
test rbx, rbx
je 0x140040b71
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.1400c17f0
mov rbx, qword [rsp + 0x318]
add rsp, 0x2e0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret