Function at 0x140098bf0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14044b080]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdi, rcx
mov qword [rbp - 0x20], rcx
xor r15d, r15d
mov dword [rbp - 0x2c], r15d
mov dword [rbp - 0x30], QISearch
mov qword [rcx], r15
mov qword [rcx + 8], r15
xor r8d, r8d
xor edx, edx
call fcn.14009b4d0
mov qword [rdi], rax
lea r9, [rbp - 0x2c]
lea r8, [rbp - 0x30]
mov rdx, qword [rax]
mov rcx, rdi
call fcn.14009b330
nop
mov dword [rbp - 0x2c], 1
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
movabs rsi, 0xaaaaaaaaaaaaaa9
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140098d20
mov dword [rbp - 0x10], r15d
mov dword [rbp - 0xc], r15d
lea rax, [rbp - 0xc]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x10]
xor r8d, r8d
lea rdx, str.NXPower
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x140098d20
mov dword [rbp - 0x10], 0xe9
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x1400992d3
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140098dd1
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.VoiceProfile
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x140098dd1
mov dword [rbp - 0x10], 0xe8
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x1400992e0
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140098e82
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.NoiseGuard
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x140098e82
mov dword [rbp - 0x10], 0x12a
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x1400992ed
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140098f33
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.RemoveMyBackgroundNoise
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x140098f33
mov dword [rbp - 0x10], 0x13d
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x1400992fa
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140098fe4
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.RemoveOthersBackgroundNoise
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x140098fe4
mov dword [rbp - 0x10], 0x13e
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x140099307
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140099095
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.VQMPower
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x140099095
mov dword [rbp - 0x10], 0x15e
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x140099314
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140099146
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.SoloModePower
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x140099146
mov dword [rbp - 0x10], 0x164
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x140099321
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x1400991f7
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.NoiseRider
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x1400991f7
mov dword [rbp - 0x10], 9
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, rax
mov rdx, qword [rdi + 8]
mov rax, rsi
sub rax, rdx
cmp rax, 1
jb 0x14009932e
lea rax, [rdx + 1]
mov qword [rdi + 8], rax
mov qword [rbx + 8], rcx
mov qword [r14], rcx
mov qword [rbp - 0x18], r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioDellOptimizer
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14009929d
mov dword [rbp - 0xc], r15d
mov dword [rbp - 0x10], r15d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0xc]
xor r8d, r8d
lea rdx, str.GlobalBypass
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
cmp ebx, 2
je 0x14009929d
mov dword [rbp - 0x10], 0xe6
mov rbx, qword [rdi]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x10]
mov r8, r14
mov rdx, rbx
call fcn.14009b3e0
mov rcx, qword [rdi + 8]
sub rsi, rcx
cmp rsi, 1
jb 0x1400992c6
inc rcx
mov qword [rdi + 8], rcx
mov qword [rbx + 8], rax
mov qword [r14], rax
mov rax, rdi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140202880
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3
lea rcx, str.list_T__too_long
call fcn.1401e5d3c
int3