Function at 0x14003e890
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x14013c010]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
cmp dword [0x14013c494], 0
jne 0x14003ef58
cmp dword [0x14013c490], 0
jne 0x14003ef58
cmp dword [0x14013c498], 0
jne 0x14003ef58
lea rdx, str.SOFTWAREFortemediaHowlingDection
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003eb08
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_10
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
je 0x14003e920
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_12
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003ef58
xor ebx, ebx
mov esi, ebx
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x20], rbx
mov dword [rbp - 0x18], ebx
mov qword [rbp - 0x10], rbx
mov dword [rbp - 0x30], ebx
lea r9d, [rbx + 1]
lea r8, str.SOFTWAREFortemediaHowlingDection
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400280a0
test eax, eax
je 0x14003e985
lea r9, str.SOFTWAREFortemediaHowlingDection
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x14003ea08
jmp 0x14003ea02
mov dword [rbp - 0x2c], 4
lea rax, [rbp - 0x2c]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
xor r8d, r8d
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_10
mov rdi, qword [rbp - 0x20]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14003e9fa
cmp dword [rbp - 0x28], 4
jne 0x14003e9fa
mov r14d, dword [rbp - 0x30]
test rdi, rdi
je 0x14003e9d5
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test r14d, r14d
je 0x14003ea08
mov r8d, 0xd95
lea rdx, str.CCustomizeHP::OnRegKeyChanged
lea rcx, str._s__d___Fortemedia___HowlingDection____10_n
call fcn.14005b9a0
mov esi, 1
jmp 0x14003ea08
test rdi, rdi
je 0x14003ea08
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x20], rbx
mov dword [rbp - 0x18], ebx
mov qword [rbp - 0x10], rbx
mov dword [rbp - 0x30], ebx
mov r9d, 1
lea r8, str.SOFTWAREFortemediaHowlingDection
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400280a0
test eax, eax
je 0x14003ea67
lea r9, str.SOFTWAREFortemediaHowlingDection
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x14003eae3
jmp 0x14003eadd
mov dword [rbp - 0x28], 4
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x2c]
xor r8d, r8d
lea rdx, str.13AE3061_F6DC_45C1_B90C_F5E992141790_12
mov rbx, qword [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14003ead5
cmp dword [rbp - 0x2c], 4
jne 0x14003ead5
mov edi, dword [rbp - 0x30]
test rbx, rbx
je 0x14003eab6
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test edi, edi
je 0x14003eae3
mov r8d, 0xd9f
lea rdx, str.CCustomizeHP::OnRegKeyChanged
lea rcx, str._s__d___Fortemedia___HowlingDection____12_n
call fcn.14005b9a0
jmp 0x14003eaeb
test rbx, rbx
je 0x14003eae3
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test esi, esi
je 0x14003ef58
call fcn.14000b740
mov rcx, rax
mov edx, 0x41e
mov r8d, 0x1f4
call fcn.1400b5a90
jmp 0x14003ef58
lea rdx, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003eb51
lea rdx, str.CategoryId
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003ef58
call fcn.14000b740
mov rcx, rax
mov edx, 0x402
mov r8d, 0xc8
call fcn.1400b5a90
jmp 0x14003ef58
lea rdx, str.SoftwareRealtekAudioGUI_INFORMATIONWMI
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003ee1e
lea rdx, str.HP_ITDM_RestoreRealtekAudioSettings
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003ec8d
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xor ebx, ebx
mov qword [rbp - 0x20], rbx
mov dword [rbp - 0x18], ebx
mov qword [rbp - 0x10], rbx
mov dword [rbp - 0x30], ebx
lea r9d, [rax + 1]
lea r8, str.SoftwareRealtekAudioGUI_INFORMATIONWMI
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400280a0
test eax, eax
je 0x14003ebed
lea r9, str.SoftwareRealtekAudioGUI_INFORMATIONWMI
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x14003ef58
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x14003ef58
mov dword [rbp - 0x28], 4
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x2c]
xor r8d, r8d
lea rdx, str.HP_ITDM_RestoreRealtekAudioSettings
mov rbx, qword [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14003ec76
cmp dword [rbp - 0x2c], 4
jne 0x14003ec76
mov esi, dword [rbp - 0x30]
test rbx, rbx
je 0x14003ec3c
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test esi, esi
je 0x14003ef58
xor r9d, r9d
lea r8, str.HP_ITDM_RestoreRealtekAudioSettings
lea rdx, str.SoftwareRealtekAudioGUI_INFORMATIONWMI
mov rcx, 0xffffffff80000002
call fcn.14007ef10
mov edx, 0x30010001
call fcn.1400b4020
mov r8d, 0xdbf
jmp 0x14003edec
test rbx, rbx
je 0x14003ef58
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x14003ef58
lea rdx, str.HP_ITDM_LockRealtekAudioControls
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003ef58
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xor ebx, ebx
mov qword [rbp - 0x20], rbx
mov dword [rbp - 0x18], ebx
mov qword [rbp - 0x10], rbx
mov dword [rbp - 0x30], ebx
lea r9d, [rax + 1]
lea r8, str.SoftwareRealtekAudioGUI_INFORMATIONWMI
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400280a0
test eax, eax
je 0x14003ecfe
lea r9, str.SoftwareRealtekAudioGUI_INFORMATIONWMI
mov r8d, eax
lea rdx, str.CRegClient::GetRegUI4Property
lea rcx, str._s_nRet_d_szRegKey_s
call fcn.14005b9a0
nop
jmp 0x14003ebd5
mov dword [rbp - 0x28], 4
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x2c]
xor r8d, r8d
lea rdx, str.HP_ITDM_LockRealtekAudioControls
mov rsi, qword [rbp - 0x20]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x14003ee07
cmp dword [rbp - 0x2c], 4
jne 0x14003ee07
mov r14d, dword [rbp - 0x30]
test rsi, rsi
je 0x14003ed56
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test r14d, r14d
je 0x14003ef58
xor r9d, r9d
lea r8, str.HP_ITDM_LockRealtekAudioControls
lea rdx, str.SoftwareRealtekAudioGUI_INFORMATIONWMI
mov rcx, 0xffffffff80000002
call fcn.14007ef10
mov rax, qword [0x14013c480]
mov r9d, 0xffffffff
lea r8, str.UwpLock
lea rdx, str.Others
lea rcx, [0x14013c480]
mov rax, qword [rax + 0x20]
call qword [case.0x140048c62.0]
cmp eax, 0xffffffff
cmove eax, ebx
test eax, eax
sete bl
mov rax, qword [0x14013c480]
mov r9d, ebx
lea r8, str.UwpLock
lea rdx, str.Others
lea rcx, [0x14013c480]
mov rax, qword [rax + 0x28]
call qword [case.0x140048c62.0]
mov edx, 0x30010002
call fcn.1400b4020
mov r8d, 0xddb
mov r9, rdi
lea rdx, str.CCustomizeHP::OnRegKeyChanged
lea rcx, str._s__d_SendServiceEventToUWP__s
call fcn.14005b9a0
jmp 0x14003ef58
test rsi, rsi
je 0x14003ef58
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x14003ef58
mov rdx, qword [rsi + 0x88]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003ef58
lea rdx, str.HP_CONTROL_SpkMasterMute
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003eebd
cmp dword [rsi + 0xbc], eax
jne 0x14003ef37
mov dword [rbp - 0x30], 0x3e7
lea r9, [rbp - 0x30]
lea r8, str.HP_CONTROL_SpkMasterMute
mov rdx, qword [rsi + 0x88]
mov rcx, 0xffffffff80000001
call fcn.14007edf0
test eax, eax
je 0x14003ef37
mov esi, dword [rbp - 0x30]
cmp esi, 1
ja 0x14003ef37
call fcn.140049dc0
cmp eax, esi
je 0x14003ef37
test esi, esi
je 0x14003eeb1
mov edx, 1
mov ecx, edx
call fcn.14003fd20
jmp 0x14003ef37
xor edx, edx
lea ecx, [rdx + 1]
call fcn.14003fd20
jmp 0x14003ef37
lea rdx, str.HP_CONTROL_MicMasterMute
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpW]
test eax, eax
jne 0x14003ef2c
cmp dword [rsi + 0xc0], eax
jne 0x14003ef37
mov dword [rbp - 0x30], 0x3e7
lea r9, [rbp - 0x30]
lea r8, str.HP_CONTROL_MicMasterMute
mov rdx, qword [rsi + 0x88]
mov rcx, 0xffffffff80000001
call fcn.14007edf0
test eax, eax
je 0x14003ef37
mov esi, dword [rbp - 0x30]
cmp esi, 1
ja 0x14003ef37
call fcn.14005c4e0
cmp eax, esi
je 0x14003ef37
xor ecx, ecx
test esi, esi
je 0x14003ef23
lea edx, [rcx + 1]
call fcn.14003fd20
jmp 0x14003ef37
xor edx, edx
call fcn.14003fd20
jmp 0x14003ef37
mov rdx, rdi
mov rcx, rbx
call fcn.1400b40a0
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov r8d, 0xe1d
lea rdx, str.CCustomizeHP::OnRegKeyChanged
lea rcx, str._s__d_SendRegEventToUWP__s_s
call fcn.14005b9a0
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400c17f0
add rsp, 0x60
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret