Function at 0x14000e410
Capabilities:
Print debug messages
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb60]
sub rsp, 0xc60
mov rax, qword [0x14006c038]
xor rax, rsp
mov qword [rbp + 0xb50], rax
mov rbx, rcx
mov rsi, rdx
mov rcx, rdx
call qword [sym.imp.USER32.dll_CharUpperW]
test byte [rbx + 0x290], 4
je 0x14000e480
mov r9, rsi
lea r8, str.Enter_Metering::IsSupport__s_r_n
mov edx, 0x400
lea rcx, [rbp + 0x350]
call fcn.140002050
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rax, [rbx + 0x348]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [rbx + 0x3a0]
xor r15d, r15d
xor r13b, r13b
mov r14d, r15d
lea r12d, [r15 + 1]
cmp dword [rbx + 0x3b0], r15d
jbe 0x14000e4fb
nop dword [rax]
test rdi, rdi
je 0x14000e4e8
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharUpperW]
mov r8, rsi
mov rax, rdi
sub r8, rdi
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x14000e4e4
add rax, 2
test ecx, ecx
jne 0x14000e4d0
test edx, edx
je 0x14000e560
add rdi, 0x124
inc r14d
cmp r14d, dword [rbx + 0x3b0]
jb 0x14000e4b0
mov r14d, r15d
mov rdi, qword [rbx + 0x3a8]
cmp dword [rbx + 0x3b4], r15d
jbe 0x14000e5df
test rdi, rdi
je 0x14000e548
mov rcx, rdi
call qword [sym.imp.USER32.dll_CharUpperW]
mov r8, rsi
mov rax, rdi
sub r8, rdi
nop dword [rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x14000e544
add rax, 2
test ecx, ecx
jne 0x14000e530
test edx, edx
je 0x14000e59c
add rdi, 0x124
inc r14d
cmp r14d, dword [rbx + 0x3b4]
jb 0x14000e512
jmp 0x14000e5df
mov dword [rbx + 0x398], r15d
movzx r13d, r12b
mov eax, dword [rdi + 0x100]
mov rdx, 0xffffffffffffffff
mov dword [rbx + 0x370], eax
mov eax, dword [rdi + 0x104]
mov dword [rbx + 0x37c], eax
nop word [rax + rax]
inc rdx
cmp word [rsi + rdx*2], r15w
jne 0x14000e590
jmp 0x14000e5d0
mov dword [rbx + 0x398], r12d
movzx r13d, r12b
mov eax, dword [rdi + 0x100]
mov rdx, 0xffffffffffffffff
mov dword [rbx + 0x370], eax
mov eax, dword [rdi + 0x104]
mov dword [rbx + 0x37c], eax
inc rdx
cmp word [rsi + rdx*2], r15w
jne 0x14000e5c6
mov r8, rsi
lea rcx, [rbx + 0x40]
inc rdx
call fcn.140031158
lea rcx, [rbx + 0x348]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r13b, r13b
jne 0x14000e60a
test byte [rbx + 0x290], r12b
je 0x14000e952
lea rcx, str.Metering::IsSupport__No_Endpoint_Found_r_n
jmp 0x14000e94c
cmp dword [rbx + 0x398], r15d
jne 0x14000e662
mov rcx, qword [rbx + 0x390]
test rcx, rcx
je 0x14000e625
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r9d, r9d
lea r8, [rbx + 0x390]
mov rdx, rsi
mov rcx, rbx
call fcn.1400114d0
test al, al
jne 0x14000e8d5
mov qword [rbx + 0x390], r15
test byte [rbx + 0x290], r12b
je 0x14000e952
lea rcx, str.Metering::IsSupport__No_Endpoint_Property_Key_r_n
jmp 0x14000e94c
lea r8, str.SOFTWAREMicrosoftWindowsCurrentVersionMMDevicesAudioRender
mov qword [rsp + 0x30], r15
mov edx, 0x200
mov dword [rsp + 0x44], r15d
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x40], 4
mov qword [rsp + 0x38], r15
call fcn.140031158
lea r8, [0x14005d4c0]
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.1400310d4
mov r8, rsi
lea rcx, [rsp + 0x50]
mov edx, 0x200
call fcn.1400310d4
lea r8, str.Properties
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.1400310d4
lea rax, [rsp + 0x38]
mov r9d, 0x2001b
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov r9d, eax
test eax, eax
jne 0x14000e90a
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rdx, str.1da5d803_d492_4edd_8c23_e0c0ffee7f0e_0
lea rax, [rsp + 0x44]
mov qword [rsp + 0x30], rcx
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000e8c2
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x30], r15
cmp dword [rsp + 0x44], r12d
jne 0x14000e8b9
lea r8, str.SOFTWAREMicrosoftWindowsCurrentVersionMMDevicesAudioRender
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.140031158
lea r8, [0x14005d4c0]
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.1400310d4
mov r8, rsi
lea rcx, [rsp + 0x50]
mov edx, 0x200
call fcn.1400310d4
lea r8, str.FxProperties
mov edx, 0x200
lea rcx, [rsp + 0x50]
call fcn.1400310d4
lea rax, [rsp + 0x30]
mov r9d, 0x2001b
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x50]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000e8b4
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rdx, str.3BA0CD54_830F_4551_A6EB_F3EAB68E3700_4
lea rax, [rsp + 0x48]
mov dword [rsp + 0x48], 0xff
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov dword [rsp + 0x4c], r15d
mov dword [rsp + 0x38], r12d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rdx, str.3BA0CD54_830F_4551_A6EB_F3EAB68E3700_1
lea rax, [rsp + 0x4c]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rdx, str.3BA0CD54_830F_4551_A6EB_F3EAB68E3700_6
lea rax, [rsp + 0x38]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x48], r15d
jne 0x14000e892
cmp dword [rsp + 0x4c], r15d
jne 0x14000e892
mov rcx, qword [rsp + 0x30]
mov r12d, r15d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x30], r15
mov dword [rbx + 0x3d0], r15d
jmp 0x14000e8c7
cmp dword [rsp + 0x38], r15d
mov rcx, qword [rsp + 0x30]
cmovne r12d, r15d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x30], r15
mov dword [rbx + 0x3d0], r12d
jmp 0x14000e8c7
mov r15, qword [rsp + 0x30]
mov dword [rbx + 0x3d0], r12d
jmp 0x14000e8c7
mov r15, qword [rsp + 0x30]
test r15, r15
je 0x14000e8d5
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test byte [rbx + 0x290], 4
je 0x14000e906
mov r9, rsi
lea r8, str.Leave_Metering::IsSupport__s_r_n
mov edx, 0x400
lea rcx, [rbp + 0x350]
call fcn.140002050
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov al, 1
jmp 0x14000e954
mov eax, dword [rbx + 0x290]
test r12b, al
je 0x14000e952
lea r8, str.Cannot_Open_EndpointProperty_Key__x_r_n
mov edx, 0x400
lea rcx, [rbp + 0x750]
call fcn.140002050
lea rcx, [rbp + 0x750]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [rbx + 0x290]
test r12b, al
je 0x14000e952
lea rcx, str.Metering::IsSupport__No_Render_Endpoint_Property_Key_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor al, al
mov rcx, qword [rbp + 0xb50]
xor rcx, rsp
call fcn.140019840
mov rbx, qword [rsp + 0xcb0]
add rsp, 0xc60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret