Function at 0x140124c00
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x658]
sub rsp, 0x730
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14044b080]
xor rax, rsp
mov qword [rbp + 0x618], rax
mov r13, rcx
xor r12d, r12d
mov r14d, r12d
mov dword [rsp + 0x50], r12d
cmp dword [rcx + 0x18], r12d
jbe 0x140125749
cmp byte [rcx + 0x40], r12b
jne 0x140125749
mov dword [rbp + 0x5f0], r12d
mov qword [rbp + 0x5d8], r12
lea rax, [rbp + 0x5d8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [0x140320430]
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp + 0x5d8]
test rcx, rcx
je 0x140124cef
mov dword [rbp + 0x600], 4
lea rax, [rbp + 0x600]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x5f0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x610]
xor r8d, r8d
lea rdx, str.EndpointSwitching
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x5d8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp dword [rbp + 0x5f0], r12d
jne 0x140125749
mov rax, qword [r13 + 8]
mov rdi, qword [rax]
cmp rdi, rax
je 0x140125749
lea rsi, str.WavesFX_GetParameter_0x_x___u___
lea r15, str.WavesFX_GetParameter_____u___g__d
xorps xmm6, xmm6
nop dword [rax]
mov rbx, qword [rdi + 0x40]
mov qword [rbp + 0x5d0], rbx
test rbx, rbx
je 0x1401256da
movsd qword [rbp + 0x608], xmm6
mov dword [rsp + 0x38], 0x973
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x1404675c0]
mov edx, 0x18f
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
xor r14b, r14b
test rbx, rbx
je 0x140124e4c
lea rcx, [0x140462248]
call fcn.1401e619c
test eax, eax
je 0x140124d94
mov ecx, eax
call fcn.1401e5ae4
mov rsi, r12
test rbx, rbx
je 0x140124dc2
mov rax, qword [0x1404622a0]
sub rax, qword [0x140462298]
sar rax, 3
cmp rbx, rax
ja 0x140124dc2
lfence
mov rax, qword [0x140462298]
mov rsi, qword [rax + rbx*8 - 8]
lea rcx, [0x140462248]
call fcn.1401e61c0
test eax, eax
je 0x140124dda
mov ecx, eax
call fcn.1401e5ae4
nop
test rsi, rsi
je 0x140124dff
mov rax, qword [rsi]
lea r8, [rbp + 0x608]
mov edx, 0x973
mov rcx, rsi
mov rax, qword [rax + 0x20]
call qword [case.0x14004487d.0]
movzx r14d, al
movzx eax, r14b
mov dword [rsp + 0x40], eax
movsd xmm0, qword [rbp + 0x608]
movsd qword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x973
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x1404675c0]
mov edx, 0x19c
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
lea rsi, str.WavesFX_GetParameter_0x_x___u___
ucomisd xmm6, qword [rbp + 0x608]
jp 0x140124e5d
jne 0x140124e5d
xor r15b, r15b
jmp 0x140124e60
mov r15b, 1
movsd qword [rbp + 0x5f8], xmm6
mov rbx, qword [rbp + 0x5d0]
mov dword [rsp + 0x38], 0x7f8
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x1404675c0]
mov edx, 0x18f
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
xor r14b, r14b
test rbx, rbx
je 0x140124f7f
lea rcx, [0x140462248]
call fcn.1401e619c
test eax, eax
je 0x140124ec7
mov ecx, eax
call fcn.1401e5ae4
mov rsi, r12
test rbx, rbx
je 0x140124ef5
mov rax, qword [0x1404622a0]
sub rax, qword [0x140462298]
sar rax, 3
cmp rbx, rax
ja 0x140124ef5
lfence
mov rax, qword [0x140462298]
mov rsi, qword [rax + rbx*8 - 8]
lea rcx, [0x140462248]
call fcn.1401e61c0
test eax, eax
je 0x140124f0d
mov ecx, eax
call fcn.1401e5ae4
nop
test rsi, rsi
je 0x140124f32
mov rax, qword [rsi]
lea r8, [rbp + 0x5f8]
mov edx, 0x7f8
mov rcx, rsi
mov rax, qword [rax + 0x20]
call qword [case.0x14004487d.0]
movzx r14d, al
movzx eax, r14b
mov dword [rsp + 0x40], eax
movsd xmm0, qword [rbp + 0x5f8]
movsd qword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x7f8
lea rax, str.WavesFX_GetParameter_____u___g__d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x1404675c0]
mov edx, 0x19c
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
movsd xmm0, qword [rbp + 0x5f8]
movsd qword [rsp + 0x30], xmm0
lea rax, str.CNXHelper::IsNXActive____dblSFXActive___g_.
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 5
lea r8, [0x1404675c0]
mov edx, 0x93
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_shared_nxhelper.cpp
call fcn.140039f30
lea rdx, [rdi + 0x20]
lea rcx, [rbp - 0x80]
call fcn.140045fb0
mov rax, qword [rdi + 0x40]
mov qword [rbp - 0x60], rax
lea r9, [r13 + 0x30]
mov r8d, 0x22
lea rdx, [rbp - 0x80]
mov rcx, r13
call fcn.140125790
movzx r12d, al
lea rcx, [rbp - 0x80]
call fcn.140046190
ucomisd xmm6, qword [rbp + 0x5f8]
jp 0x140125004
je 0x14012544c
test r15b, r15b
je 0x14012544c
mov rcx, qword [rbp + 0x5d0]
call fcn.140093490
test al, al
je 0x14012544c
lea rax, str.CNXHelper::IsNXLoadedInMemory__SFX_APO_is_in_memory.
mov qword [rsp + 0x30], rax
lea rax, [0x14031b830]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov r9d, 5
lea r8, [0x1404675c0]
mov edx, 0x9b
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_shared_nxhelper.cpp
call fcn.140039f30
lea rdx, [rdi + 0x20]
lea rcx, [rbp - 0x58]
call fcn.140045fb0
mov rax, qword [rdi + 0x40]
mov qword [rbp - 0x38], rax
lea r15, [r13 + 0x20]
mov r9, r15
mov r8d, 0x20
lea rdx, [rbp - 0x58]
mov rcx, r13
call fcn.140125790
movzx ebx, al
lea rcx, [rbp - 0x58]
call fcn.140046190
movzx r12d, r12b
test bl, bl
mov eax, 1
cmovne r12d, eax
xor ebx, ebx
mov dword [rbp + 0x5e8], ebx
mov rsi, qword [rbp + 0x5d0]
mov dword [rsp + 0x38], shutdown
mov qword [rsp + 0x30], rsi
lea rax, str.WavesFX_GetRuntimeData_Value_0x_x___u___
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 4]
lea r8, [0x1404675c0]
mov edx, 0x4d6
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
xor r14b, r14b
test rsi, rsi
je 0x1401251ed
lea rcx, [0x140462248]
call fcn.1401e619c
test eax, eax
je 0x140125115
mov ecx, eax
call fcn.1401e5ae4
test rsi, rsi
je 0x140125140
mov rax, qword [0x1404622a0]
sub rax, qword [0x140462298]
sar rax, 3
cmp rsi, rax
ja 0x140125140
lfence
mov rax, qword [0x140462298]
mov rbx, qword [rax + rsi*8 - 8]
lea rcx, [0x140462248]
call fcn.1401e61c0
test eax, eax
je 0x140125158
mov ecx, eax
call fcn.1401e5ae4
nop
test rbx, rbx
je 0x140125180
mov rax, qword [rbx]
lea r8, [rbp + 0x5e8]
mov edx, shutdown
mov rcx, rbx
mov rax, qword [rax + 0x148]
call qword [case.0x14004487d.0]
movzx r14d, al
mov ebx, dword [rbp + 0x5e8]
lea rdx, str.NULL
lea rcx, [rbp - 0x30]
call fcn.140094f00
test ebx, ebx
je 0x1401251ad
mov r8d, ebx
lea rdx, [0x140329250]
lea rcx, [rbp - 0x30]
call fcn.140094f00
movzx eax, r14b
mov dword [rsp + 0x38], eax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, str.WavesFX_GetRuntimeData_Value________s__d
mov qword [rsp + 0x28], rax
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 7]
lea r8, [0x1404675c0]
mov edx, 0x4e3
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
cmp dword [rbp + 0x5e8], 0
jle 0x14012544c
mov dword [rbp + 0x5e8], ebx
mov rbx, qword [rbp + 0x5d0]
mov dword [rsp + 0x38], reloc.WS2_32.dll_shutdown
mov qword [rsp + 0x30], rbx
lea rax, str.WavesFX_GetRuntimeData_Value_0x_x___u___
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [0x1404675c0]
mov edx, 0x4d6
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
xor r14b, r14b
test rbx, rbx
je 0x14012544c
lea rcx, [0x140462248]
call fcn.1401e619c
test eax, eax
je 0x14012526a
mov ecx, eax
call fcn.1401e5ae4
xor esi, esi
test rbx, rbx
je 0x140125297
mov rax, qword [0x1404622a0]
sub rax, qword [0x140462298]
sar rax, 3
cmp rbx, rax
ja 0x140125297
lfence
mov rax, qword [0x140462298]
mov rsi, qword [rax + rbx*8 - 8]
lea rcx, [0x140462248]
call fcn.1401e61c0
test eax, eax
je 0x1401252af
mov ecx, eax
call fcn.1401e5ae4
nop
test rsi, rsi
je 0x1401252d7
mov rax, qword [rsi]
lea r8, [rbp + 0x5e8]
mov edx, reloc.WS2_32.dll_shutdown
mov rcx, rsi
mov rax, qword [rax + 0x148]
call qword [case.0x14004487d.0]
movzx r14d, al
mov ebx, dword [rbp + 0x5e8]
lea rdx, str.NULL
lea rcx, [rbp + 0x1d0]
call fcn.140094f00
test ebx, ebx
je 0x14012530a
mov r8d, ebx
lea rdx, [0x140329250]
lea rcx, [rbp + 0x1d0]
call fcn.140094f00
movzx eax, r14b
mov dword [rsp + 0x38], eax
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x30], rax
lea rax, str.WavesFX_GetRuntimeData_Value________s__d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov r9d, 7
lea r8, [0x1404675c0]
mov edx, 0x4e3
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
test r14b, r14b
je 0x14012544c
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rcx, rax
movsxd rax, dword [rbp + 0x5e8]
sub rcx, rax
cmp rcx, 0x7d0
jae 0x14012544c
mov rcx, qword [r15]
mov rbx, rcx
mov rax, qword [rcx + 8]
mov rsi, qword [rbp + 0x5d0]
cmp byte [rax + 0x19], 0
jne 0x1401253a9
cmp qword [rax + 0x20], rsi
jae 0x14012539d
mov rax, qword [rax + 0x10]
jmp 0x1401253a3
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140125391
cmp rbx, rcx
je 0x1401253b4
cmp rsi, qword [rbx + 0x20]
jae 0x1401253f2
lea rax, [rbp + 0x5d0]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x58]
mov rcx, r15
call fcn.140126d40
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.140126d70
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rbp + 0x5d0]
cmp dword [rbx + 0x28], 0
jne 0x140125453
lea rax, str.CNXHelper::IsNXLoadedInMemory__SFX_APO_is_running.
mov qword [rsp + 0x30], rax
lea rax, [0x14031b830]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov r9d, 5
lea r8, [0x1404675c0]
mov edx, 0xb0
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_shared_nxhelper.cpp
call fcn.140039f30
mov eax, 1
mov r14d, eax
mov dword [rsp + 0x50], eax
mov rsi, qword [rbp + 0x5d0]
jmp 0x140125458
mov rsi, qword [rbp + 0x5d0]
mov r14d, dword [rsp + 0x50]
test r12b, r12b
je 0x1401256e1
xor r12d, r12d
mov dword [rbp + 0x5ec], r12d
mov dword [rsp + 0x38], 0x21
mov qword [rsp + 0x30], rsi
lea rax, str.WavesFX_GetRuntimeData_Value_0x_x___u___
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 4]
lea r8, [0x1404675c0]
mov edx, 0x4d6
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
xor r14b, r14b
test rsi, rsi
je 0x1401255ad
lea rcx, [0x140462248]
call fcn.1401e619c
test eax, eax
je 0x1401254c9
mov ecx, eax
call fcn.1401e5ae4
mov rbx, r12
test rsi, rsi
je 0x1401254f7
mov rax, qword [0x1404622a0]
sub rax, qword [0x140462298]
sar rax, 3
cmp rsi, rax
ja 0x1401254f7
lfence
mov rax, qword [0x140462298]
mov rbx, qword [rax + rsi*8 - 8]
lea rcx, [0x140462248]
call fcn.1401e61c0
test eax, eax
je 0x14012550f
mov ecx, eax
call fcn.1401e5ae4
nop
test rbx, rbx
je 0x140125537
mov rax, qword [rbx]
lea r8, [rbp + 0x5ec]
mov edx, 0x21
mov rcx, rbx
mov rax, qword [rax + 0x148]
call qword [case.0x14004487d.0]
movzx r14d, al
mov ebx, dword [rbp + 0x5ec]
lea rdx, str.NULL
lea rcx, [rbp + 0x3d0]
call fcn.140094f00
test ebx, ebx
je 0x14012556a
mov r8d, ebx
lea rdx, [0x140329250]
lea rcx, [rbp + 0x3d0]
call fcn.140094f00
movzx eax, r14b
mov dword [rsp + 0x38], eax
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x30], rax
lea rax, str.WavesFX_GetRuntimeData_Value________s__d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x1404675c0]
mov edx, 0x4e3
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
mov r14d, r12d
cmp dword [rbp + 0x5ec], r12d
sete r14b
mov rbx, qword [rbp + 0x5d0]
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x38], 0x21
mov qword [rsp + 0x30], rbx
lea rax, str.WavesFX_SetRuntimeData_Value_0x_x___u___d_
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x1404675c0]
mov edx, 0x4c1
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
xor r15b, r15b
test rbx, rbx
je 0x140125690
lea rcx, [0x140462248]
call fcn.1401e619c
test eax, eax
je 0x140125626
mov ecx, eax
call fcn.1401e5ae4
mov rsi, r12
test rbx, rbx
je 0x140125654
mov rax, qword [0x1404622a0]
sub rax, qword [0x140462298]
sar rax, 3
cmp rbx, rax
ja 0x140125654
lfence
mov rax, qword [0x140462298]
mov rsi, qword [rax + rbx*8 - 8]
lea rcx, [0x140462248]
call fcn.1401e61c0
test eax, eax
je 0x14012566c
mov ecx, eax
call fcn.1401e5ae4
nop
test rsi, rsi
je 0x140125690
mov rax, qword [rsi]
mov r8d, r14d
mov edx, 0x21
mov rcx, rsi
mov rax, qword [rax + 0x140]
call qword [case.0x14004487d.0]
movzx r15d, al
movzx eax, r15b
mov dword [rsp + 0x38], eax
lea rax, [0x14033be58]
mov qword [rsp + 0x30], rax
lea rax, str._s_...__d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, 7
lea r8, [0x1404675c0]
mov edx, 0x4cf
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedwavesmaxxaudiogeneric.cpp
call fcn.140039f30
mov r14d, dword [rsp + 0x50]
jmp 0x1401256e4
mov r14d, dword [rsp + 0x50]
jmp 0x1401256f2
xor r12d, r12d
lea r15, str.WavesFX_GetParameter_____u___g__d
lea rsi, str.WavesFX_GetParameter_0x_x___u___
mov rax, qword [rdi + 0x10]
cmp byte [rax + 0x19], 0
je 0x14012571e
mov rax, qword [rdi + 8]
cmp byte [rax + 0x19], 0
jne 0x140125719
cmp rdi, qword [rax + 0x10]
jne 0x140125719
mov rdi, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140125706
mov rdi, rax
jmp 0x14012573f
mov rdi, rax
mov rdx, qword [rax]
cmp byte [rdx + 0x19], 0
jne 0x14012573f
nop word [rax + rax]
mov rdi, rdx
mov rcx, qword [rdx]
mov rdx, rcx
cmp byte [rcx + 0x19], 0
je 0x140125730
cmp rdi, qword [r13 + 8]
jne 0x140124d20
mov eax, r14d
mov rcx, qword [rbp + 0x618]
xor rcx, rsp
call fcn.140202880
lea r11, [rsp + 0x730]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret