Function at 0x140049c80
Capabilities:
Query or enumerate registry value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x80
mov qword [rsp + 0x48], 0xfffffffffffffffe
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm7
mov rbp, rcx
add rcx, 0x8b0
call fcn.14002f030
mov r12, qword [rbp + 0x858]
xor r13d, r13d
mov esi, r13d
test r12d, r12d
je 0x140049fb0
lea r14, str.PbDefaultVol_SPDIF
movss xmm7, dword [0x1400bc5ec]
nop
nop
cmp esi, dword [rbp + 0x858]
jae 0x140049f92
mov edx, esi
lea rcx, [rbp + 0x840]
call fcn.140053840
test rax, rax
je 0x140049faa
mov rbx, qword [rax + 0x10]
test rbx, rbx
je 0x140049f92
cmp dword [rbx + 0x154], 8
jne 0x140049f92
mov dword [rsp + 0xd0], r13d
lea rax, [rsp + 0x38]
mov qword [rsp + 0xc8], rax
call fcn.1400544b4
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
je 0x140049f9f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x38], rax
test r14, 0xffffffffffff0000
jne 0x140049d85
movzx edi, r14w
mov ecx, edi
call fcn.1400544a0
test rax, rax
je 0x140049da6
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.1400118a0
jmp 0x140049da6
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r14
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
mov rdx, r14
lea rcx, [rsp + 0x38]
call fcn.140011ed0
nop
mov dword [rsp + 0xc8], r13d
mov qword [rsp + 0x40], r13
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SOFTWARERealtekRealtekEffectsDriver
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140049e9d
mov rdi, qword [rsp + 0x40]
mov dword [rsp + 0xd8], 4
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x30]
xor r8d, r8d
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140049e6c
cmp dword [rsp + 0x30], 4
jne 0x140049e6c
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0xd0], eax
test rdi, rdi
je 0x140049e49
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140049ebe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140049ebe
test rdi, rdi
je 0x140049e7a
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140049ebe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140049ebe
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140049ebe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cvtsi2ss xmm6, dword [rsp + 0xd0]
divss xmm6, xmm7
mov rax, qword [rbx + 0x1c8]
mov rdi, qword [rax + 0x10]
test rdi, rdi
je 0x140049f92
cmp dword [rdi + 0x1c], 0
je 0x140049f83
lea rcx, [rsp + 0x50]
mov rax, qword [0x1400b4168]
mov qword [rcx], rax
mov rax, qword [0x1400b4170]
mov qword [rcx + 8], rax
mov rcx, qword [rdi + 0xd0]
test rcx, rcx
jne 0x140049f14
mov r8d, r13d
jmp 0x140049f6c
mov dword [rsp + 0xc0], r13d
mov rax, qword [rcx]
lea rdx, [rsp + 0xc0]
call qword [rax + 0x28]
test eax, eax
jns 0x140049f33
mov r8d, r13d
jmp 0x140049f6c
mov ebx, r13d
cmp dword [rsp + 0xc0], ebx
jbe 0x140049f63
nop
mov rcx, qword [rdi + 0xd0]
mov rax, qword [rcx]
lea r9, [rsp + 0x50]
movaps xmm2, xmm6
mov edx, ebx
call qword [rax + 0x50]
add ebx, 1
cmp ebx, dword [rsp + 0xc0]
jb 0x140049f40
mov r8d, r13d
test eax, eax
setns r8b
cvtss2sd xmm1, xmm6
movq rdx, xmm1
lea rcx, str.CAudioDevice::SetVolume_fDBLevel___f_bSuccess___d_n
call fcn.140001030
jmp 0x140049f92
mov rdx, qword [rbx]
lea rcx, str.CAudioDevice::SetVolume__s_No_Vol_Support_n
call fcn.140001030
add esi, 1
cmp esi, r12d
jae 0x140049fb0
jmp 0x140049ce0
mov ecx, 0x80004005
call fcn.140012170
int3
call fcn.140054698
int3
lea rcx, [rbp + 0x8b0]
mov rax, qword [rcx]
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x60]
add rsp, 0x80
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp qword [rax + 0x28]