Function at 0x140100510
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov qword [rbp - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14044b080]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov rdi, rcx
call fcn.140101400
mov rcx, rdi
call fcn.140102f10
test al, al
je 0x140100b9a
movdqa xmm0, xmmword [0x1403a9ab0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov r8d, 0xe
lea rdx, str.OffloadSupport
lea rcx, [rsp + 0x60]
call fcn.14005e050
nop
lea rdx, [rsp + 0x60]
lea rcx, [rdi + 0x108]
call fcn.140110e80
cmp qword [rax + 0x18], 0x10
jb 0x1401005a4
mov rax, qword [rax]
lea rdx, [0x140334378]
mov rcx, rax
call fcn.140249db8
mov ebx, eax
lea rcx, [rsp + 0x60]
call fcn.140046190
mov rcx, rdi
test ebx, ebx
jne 0x1401005f4
lea rdx, [rbp - 0x38]
call fcn.140104660
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 6
mov r8, qword [0x140464a48]
mov rdx, qword [0x1404649e8]
jmp 0x140100620
lea rdx, [rbp - 0x18]
call fcn.140104660
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], 6
mov dword [rsp + 0x28], r14d
mov r8, qword [0x1404649e8]
mov rdx, qword [0x140464a48]
lea rcx, [0x140464988]
mov qword [rsp + 0x20], rcx
mov r9, rax
mov rcx, rdi
call fcn.140105480
movzx ebx, al
movdqa xmm0, xmmword [0x1403a9ab0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov r8d, shutdown
lea rdx, str.ExternalModuleCapture
lea rcx, [rbp - 0x80]
call fcn.14005e050
nop
lea rdx, [rbp - 0x80]
lea rcx, [rdi + 0x108]
call fcn.140110e80
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140045fb0
nop
lea rcx, [rbp - 0x80]
call fcn.140046190
mov dword [rsp + 0x38], 1
mov esi, 0xffffffff
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 4
lea rax, [0x140464a30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x58]
xor r8d, r8d
mov rdx, qword [0x140464a68]
mov rcx, rdi
call fcn.140105480
test bl, bl
je 0x140100b9a
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140103650
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140103b40
test al, al
je 0x140100b9a
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x50]
call qword [case.0x14004487d.0]
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140101c10
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140101e00
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.1401020d0
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140102390
test al, al
je 0x140100b9a
mov r15b, 1
call fcn.140039c50
mov rcx, rax
test rax, rax
je 0x140100bd0
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14004487d.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x58]
lea rdx, [0x14035ad90]
lea rcx, str.IntcDMic
call fcn.140134250
cmp eax, 1
jne 0x140100844
call fcn.140039c50
mov rcx, rax
test rax, rax
je 0x140100bc5
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14004487d.0]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov r9, qword [rsp + 0x58]
lea r8, str.SYSTEMCurrentControlSetControlClass
lea rdx, str._s_sGlobalSettings
lea rcx, [rsp + 0x50]
call fcn.14005e6c0
mov rbx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rbx
lea rax, str.GetIntelDriverKey_strRegPath__s
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9d, [rsi + 4]
lea r8, [0x1404675c0]
mov edx, 0x382
lea rcx, str.d:jenkinsworkspacemainrel4_dellconsumermainrel4_dellconsumerplatform_vista_sharedcoinstallercapabilities.cpp
call fcn.140039f30
mov rdx, rbx
mov rcx, rdi
call fcn.140102c60
movzx r15d, al
lea rdx, [rbx - 0x18]
mov ecx, esi
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x140100844
mov r8, qword [rdx]
mov rcx, qword [r8]
mov rax, qword [rcx + 8]
mov rcx, r8
call qword [case.0x14004487d.0]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140100869
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
test r15b, r15b
je 0x140100b9a
mov rcx, rdi
call fcn.140104060
test al, al
je 0x140100b9a
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x58]
call qword [case.0x14004487d.0]
test al, al
je 0x140100b9a
lea r8, str.CameraName
mov rdx, qword [0x140464a48]
mov rcx, rdi
call fcn.140103410
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.1401061b0
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.1401063f0
test al, al
je 0x140100b9a
lea r8, str.ModelType
lea rdx, [0x14033ad10]
mov rcx, rdi
call fcn.140103410
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140106ed0
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.1401074e0
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140108650
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.1401098a0
test al, al
je 0x140100b9a
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x60]
call qword [case.0x14004487d.0]
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.14010b810
test al, al
je 0x140100b9a
mov rcx, rdi
call fcn.140101770
test al, al
je 0x140100b9a
xor eax, eax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rax
lea rcx, [rbp + 0x40]
call fcn.14006c1e0
nop
movzx eax, byte [rdi + 0x2d0]
cmp al, 2
jne 0x140100a4a
cmp byte [rdi + 0x2d3], 0xf
jae 0x140100a62
mov bl, 1
lea r14, vtable.CMaxxAudioOptions.0
mov qword [rbp + 0x40], r14
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401009d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
test bl, bl
je 0x140100b9a
mov rcx, rdi
call fcn.1401093b0
test al, al
je 0x140100b9a
xor eax, eax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
lea rcx, [rbp + 0x18]
call fcn.14006c1e0
nop
mov rax, qword [rbp + 0x28]
shr rax, 0x27
test al, 1
jne 0x140100b34
mov qword [rbp + 0x18], r14
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140100b82
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
jmp 0x140100b82
cmp al, 0xf
jne 0x1401009a6
mov rax, qword [rbp + 0x50]
shr rax, 0x36
test al, 1
je 0x1401009a6
lea r8, str.VoiceRecorderDetection
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioSettings
mov rcx, 0xffffffff80000002
call fcn.140058280
test eax, eax
jne 0x1401009a6
mov dword [rbp + 0x10], 1
mov ebx, 0x80004005
mov qword [rbp + 8], r14
lea rax, [rbp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioSettings
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140100b0e
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.VoiceRecorderDetection
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
mov ebx, eax
mov rcx, qword [rbp + 8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
test ebx, ebx
sete bl
lea rcx, [rdi + 0xb0]
lea r9, str.EnableVoiceRecorderDetection____1
movzx r8d, bl
mov edx, 1
call fcn.14011e570
jmp 0x1401009a8
call fcn.140099340
movzx ebx, al
lea rcx, [rdi + 0xb0]
lea r9, str.ResetDellOptimizerConfiguration
mov r8d, ebx
mov edx, 1
call fcn.14011e570
nop
mov qword [rbp + 0x18], r14
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140100b7e
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14004487d.0]
test bl, bl
je 0x140100b9a
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x48]
call qword [case.0x14004487d.0]
test al, al
je 0x140100b9a
mov al, 1
jmp 0x140100b9c
xor al, al
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.140202880
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 0x80004005
call fcn.140039950
nop
mov ecx, 0x80004005
call fcn.140039950
int3