Function at 0x1400195a0
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rbp
push rdi
mov rbp, rsp
sub rsp, 0x58
mov rax, qword [0x140079010]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov qword [r11 + 8], rbx
mov edi, 2
xor ebx, ebx
mov qword [r11 + 0x10], rsi
cmp dword [0x14007b474], ebx
mov qword [r11 + 0x18], r12
lea r12d, [rdi - 1]
jne 0x14001978d
cmp dword [0x14007b45c], ebx
jne 0x14001978d
cmp dword [0x14007b458], ebx
jne 0x14001978d
mov rax, qword [0x14007d110]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14001978d
lea rax, [rbp - 0x20]
mov dword [rbp - 0x18], 0x110019
lea r9, [rbp - 0x1c]
mov qword [r11 - 0x48], rax
lea r8d, [rdi + 2]
mov dword [rbp - 0x20], 4
lea rdx, [rbp - 0x18]
mov ecx, 0x53545344
call fcn.140006780
test eax, eax
je 0x14001978d
cmp dword [rbp - 0x20], 4
mov esi, ebx
mov eax, dword [0x14007b4c0]
cmovae esi, dword [rbp - 0x1c]
mov ecx, dword [0x14007b4bc]
bt esi, 0x10
cmovb eax, r12d
bt esi, 0x11
mov dword [0x14007b4c0], eax
mov eax, dword [0x14007b4b8]
cmovb ecx, r12d
bt esi, 0x12
mov dword [0x14007b4bc], ecx
cmovb eax, r12d
bt esi, 0x14
mov dword [0x14007b4b8], eax
mov eax, dword [0x14007b4b0]
cmovb eax, r12d
mov dword [0x14007b4b0], eax
test ecx, ecx
je 0x1400196c7
mov eax, dword [0x14007b4ac]
bt esi, 0x15
cmovb eax, r12d
mov dword [0x14007b4ac], eax
bt esi, 0x18
jae 0x1400196c7
mov dword [0x14007b4a4], r12d
call fcn.14001a590
mov dword [0x14007b4a0], eax
mov eax, dword [0x14007b49c]
bt esi, 0x19
cmovb eax, r12d
bt esi, 0x1a
mov dword [0x14007b49c], eax
mov eax, dword [0x14007b4b4]
cmovb eax, r12d
bt esi, 0x1b
mov dword [0x14007b4b4], eax
mov eax, dword [0x14007b498]
cmovb eax, r12d
mov dword [0x14007b498], eax
bt esi, 0x1c
jae 0x140019746
movzx eax, si
lea rcx, [rbp - 0x20]
cmp eax, 3
mov dword [0x14007b48c], r12d
mov dword [rbp - 0x20], ebx
cmova eax, ebx
mov dword [0x14007b488], eax
call fcn.14001a8e0
mov edx, dword [0x14007b488]
cmp edx, eax
jne 0x14001973a
cmp dword [rbp - 0x20], ebx
je 0x140019746
lea rcx, str.QuietFan
call fcn.1400320f0
cmp dword [0x14007b4c0], ebx
jne 0x14001975e
cmp dword [0x14007b4bc], ebx
jne 0x14001975e
cmp dword [0x14007b4b8], ebx
je 0x14001978d
lea rcx, str.414EB175_3A3D_45E7_9B10_5C4166941823
call fcn.140034740
test eax, eax
je 0x140019772
mov ecx, edi
jmp 0x140019787
lea rcx, str.FC6F9CAF_F868_45A3_B88F_E82E7358EBB9
call fcn.140034740
test eax, eax
mov ecx, ebx
setne cl
inc ecx
mov dword [0x14007b4c8], ecx
cmp dword [0x14007b4c8], r12d
jne 0x1400197ad
cmp dword [0x14007b4bc], ebx
je 0x1400197ad
cmp dword [0x14007b4b8], ebx
mov eax, ebx
setne al
add eax, edi
jmp 0x1400197af
mov eax, ebx
xor edx, edx
mov qword [rsp + 0x88], r14
lea rcx, [rbp - 0x28]
mov dword [0x14007b4c4], eax
mov esi, ebx
mov qword [rbp - 0x28], rbx
call fcn.140031c50
test eax, eax
je 0x140019840
mov rcx, qword [rbp - 0x28]
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x20]
lea rax, [rbp - 0x18]
mov qword [rsp + 0x50], r15
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.QuietFanSupported
mov dword [rbp - 0x1c], 4
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x140019815
mov r14d, dword [rbp - 0x18]
mov r15d, r12d
jmp 0x14001981c
mov r14d, dword [rbp - 0x1c]
mov r15d, ebx
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test r15d, r15d
mov r15, qword [rsp + 0x50]
je 0x140019840
test r14d, 0xfffffffc
jne 0x140019840
cmp r14d, r12d
cmovne esi, r14d
mov edx, dword [0x14007b4c4]
cmp esi, edx
je 0x140019856
lea rcx, str.QuietFanSupported
call fcn.1400320f0
cmp dword [0x14007b4c8], ebx
jne 0x140019877
mov rcx, qword [0x14007d058]
test rcx, rcx
je 0x140019877
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [0x14007d058], rbx
xor edx, edx
mov qword [rbp - 0x28], rbx
lea rcx, [rbp - 0x28]
mov esi, edi
call fcn.140031c50
test eax, eax
je 0x1400198e3
mov rcx, qword [rbp - 0x28]
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x20]
lea rax, [rbp - 0x18]
mov dword [rbp - 0x1c], 4
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.GPUClockOption
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x1400198ca
mov r14d, dword [rbp - 0x18]
mov ebx, r12d
jmp 0x1400198ce
mov r14d, dword [rbp - 0x1c]
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test ebx, ebx
je 0x1400198e3
cmp r14d, esi
cmovbe esi, r14d
cmp dword [0x14007b4b4], 0
mov r14, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x70]
je 0x140019914
cmp dword [0x14007b4bc], 0
jne 0x14001990b
cmp dword [0x14007b4b8], 0
je 0x140019914
cmp esi, 2
mov edi, esi
cmove edi, r12d
mov r12, qword [rsp + 0x80]
cmp esi, edi
mov rsi, qword [rsp + 0x78]
mov dword [0x140079984], edi
je 0x140019939
mov edx, edi
lea rcx, str.GPUClockOption
call fcn.1400320f0
mov eax, dword [0x14007b4c8]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400406e0
add rsp, 0x58
pop rdi
pop rbp
ret