Function at 0x14009f080
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x120
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x14044b080]
xor rax, rsp
mov qword [rbp - 0x18], rax
movaps xmm7, xmm1
mov r15, rcx
xorps xmm8, xmm8
ucomisd xmm8, xmm1
jp 0x14009f0db
mov dword [rbp - 0x50], 1
je 0x14009f0e2
mov dword [rbp - 0x50], 0
mov qword [rsp + 0x78], 0
lea rax, [rbp - 0x24]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioNextGen
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14009f16d
mov dword [rsp + 0x28], 4
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.GlobalBypass
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
xor esi, esi
mov qword [rbp - 0x40], rsi
xor r12d, r12d
mov qword [rbp - 0x30], r12
xor r14d, r14d
mov qword [rbp - 0x38], r14
mov rdi, qword [r15 + 0x5d0]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x14009f24c
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbx + 0x20]
lea rcx, [rbp - 0x78]
call fcn.14003ead0
mov rax, qword [rbx + 0x40]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14009f1e4
cmp r12, r14
je 0x14009f1cc
mov qword [r14], rax
add r14, 8
mov qword [rbp - 0x38], r14
jmp 0x14009f1e4
lea r8, [rbp - 0x58]
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.140076aa0
mov r12, qword [rbp - 0x30]
mov r14, qword [rbp - 0x38]
lea rcx, [rbp - 0x78]
call fcn.14003b0f0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14009f219
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14009f214
cmp rbx, qword [rax + 0x10]
jne 0x14009f214
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14009f201
mov rbx, rax
jmp 0x14009f23f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14009f23f
nop word [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14009f230
cmp rbx, rdi
jne 0x14009f1a0
mov rsi, qword [rbp - 0x40]
cmp rsi, r14
je 0x14009f55d
nop word [rax + rax]
mov rdi, qword [rsi]
xor r14d, r14d
xor r12d, r12d
xor r13d, r13d
mov qword [rsp + 0x60], r13
call fcn.140039c50
mov rcx, rax
test rax, rax
je 0x14009f59e
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14004487d.0]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
movaps xmm6, xmm8
xor edx, edx
mov rcx, rdi
call fcn.14007c630
test rax, rax
je 0x14009f2b9
mov rdx, rax
mov rcx, r15
call fcn.1400bb620
mov r14, rax
mov edx, 2
mov rcx, rdi
call fcn.14007c630
test rax, rax
je 0x14009f38c
mov rdx, rax
mov rcx, r15
call fcn.1400bb620
mov r12, rax
mov dword [rsp + 0x58], 2
mov r8, rdi
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.14007a8f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14009f35f
cmp dword [rbx + 0x10], 0
jl 0x14009f350
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14009f350
call fcn.14003c400
mov r13, rax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14009f340
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
mov rax, qword [r8 + 8]
call qword [case.0x14004487d.0]
lea rax, [r13 + 0x18]
mov qword [rsp + 0x50], rax
mov r13, qword [rsp + 0x60]
jmp 0x14009f35f
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.14003beb0
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14009f387
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
mov rbx, qword [rsp + 0x50]
mov edx, 4
mov rcx, rdi
call fcn.14007c630
test rax, rax
je 0x14009f3ac
mov rdx, rax
mov rcx, r15
call fcn.1400bb620
mov r13, rax
mov rdx, r14
cmp dword [rdi + 0x48], 0
jne 0x14009f51a
mov ecx, dword [rdi + 0x18]
mov edi, 0xffffffff
test ecx, ecx
cmovns edi, ecx
mov dword [rsp + 0x20], 0
mov r9b, 1
mov r8d, edi
mov rcx, r15
call fcn.1400b7150
xor r9d, r9d
movaps xmm2, xmm7
mov rdx, r14
call fcn.1400bcd50
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, edi
mov rdx, r14
mov rcx, r15
call fcn.1400b7150
mov dword [rsp + 0x20], 0
mov r9b, 1
mov r8d, edi
mov rdx, r13
mov rcx, r15
call fcn.1400b7150
xor r9d, r9d
movaps xmm2, xmm7
mov rdx, r13
call fcn.1400bcd50
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, edi
mov rdx, r13
mov rcx, r15
call fcn.1400b7150
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.140092ee0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140092ee0
ucomisd xmm8, xmm7
jp 0x14009f46c
je 0x14009f4e2
xor eax, eax
mov dword [rbp - 0x48], eax
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rdx, rbx
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14009f4d7
mov dword [rbp - 0x28], 4
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
xor r8d, r8d
lea rdx, str.NextGenNXPower
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov eax, dword [rbp - 0x48]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.140094600
movsd qword [rsp + 0x20], xmm6
mov r9d, 0xfffffffd
mov r8, r12
mov rdx, r14
mov rcx, r15
call fcn.1400bd010
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r12
call fcn.140094600
jmp 0x14009f52c
movaps xmm3, xmm7
mov r8d, 0xfffffffd
mov rcx, r15
call fcn.1400bcde0
nop
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14009f54f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
add rsi, 8
cmp rsi, qword [rbp - 0x38]
jne 0x14009f260
lea rcx, [rbp - 0x40]
call fcn.14003d760
mov al, 1
mov rcx, qword [rbp - 0x18]
xor rcx, rsp
call fcn.140202880
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140039950
int3