Function at 0x100011c0
Capabilities:
Delete registry value
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10029987
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push esi
push edi
mov eax, dword [0x100370b4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
push dword [ebp + 0xc]
lea ecx, [edi + 4]
mov dword [edi], vtable.IASIO.0
push dword [ebp + 8]
push str.RealtekASIO2
call fcn.10008a00
push 0x10001710
push 0x10001190
push 0x40
push 0xc
lea eax, [edi + 0x2c8]
mov dword [ebp - 4], 0
push eax
mov dword [edi], vtable.RealtekASIO2.0
mov dword [edi + 4], vtable.RealtekASIO2.1.0
mov dword [edi + 0xc8], 0
mov dword [edi + 0xcc], 0
call fcn.10013b1d
push 0x10001710
push 0x10001190
push 0x40
push 0xc
lea eax, [edi + 0x5c8]
mov byte [ebp - 4], 1
push eax
call fcn.10013b1d
mov dword [edi + 0x8c8], 0
mov dword [edi + 0x8cc], 0
mov dword [edi + 0x8d0], 0
mov dword [edi + 0x8d4], 0
mov dword [edi + 0x8d8], 0
mov dword [edi + 0x8dc], 0
lea esi, [edi + 0x65d20]
mov byte [ebp - 4], 4
mov ecx, esi
mov dword [edi + 0x65cec], 0
mov dword [edi + 0x65cf8], 0
mov dword [ebp + 0xc], esi
call fcn.10013270
push 1
mov dword [edi + 0x7a454], 0
push 0
mov byte [ebp - 4], 5
mov dword [edi + 0x7a458], 0xffff
call fcn.100091f0
push 0x3b9
push 0x1002b9a0
push 0x1002b680
call fcn.10009280
xorps xmm0, xmm0
mov dword [edi + 0x7a7a0], 0x100
movsd qword [edi + 0x7a670], xmm0
add esp, 0xc
movsd xmm0, qword [0x1002c900]
movsd qword [edi + 0x7a678], xmm0
xorps xmm0, xmm0
mov dword [edi + 0x7a7a4], 0x100
mov dword [edi + 0x7a7a8], 0x200
mov dword [edi + 0x7a7b8], 5
mov dword [edi + 0x7a7bc], 0
movups xmmword [edi + 0x7a720], xmm0
push 0
movups xmmword [edi + 0x7a730], xmm0
push 0
movups xmmword [edi + 0x7a740], xmm0
movups xmmword [edi + 0x7a750], xmm0
movups xmmword [edi + 0x7a760], xmm0
movups xmmword [edi + 0x7a770], xmm0
movups xmmword [edi + 0x7a780], xmm0
movups xmmword [edi + 0x7a790], xmm0
mov dword [edi + 0x7a680], 0
mov dword [edi + 0x7a7b0], 0
mov dword [edi + 0x7a7ac], 0
mov dword [edi + 0x7a7b4], 0
mov dword [edi + 0x65cfc], 0
push 0
push 0
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventA]
mov dword [edi + 0x65d1c], eax
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x54]
push eax
call fcn.100052e0
movzx eax, byte [0x1002c89c]
mov ecx, esi
movq xmm0, qword [str.RTPORT64]
mov byte [ebp - 0x7e], al
mov eax, dword [str.RTPORT]
mov dword [ebp - 0xb8], eax
mov ax, word [0x1002c8a4]
mov word [ebp - 0xb4], ax
movzx eax, byte [0x1002c8a6]
push 0
mov dword [ebp - 0xbc], 0x820081
movq qword [ebp - 0x86], xmm0
mov byte [ebp - 0xb2], al
call fcn.1000d3d0
push 0
mov ecx, esi
call fcn.1000d3e0
push 0
mov ecx, esi
call fcn.1000d3f0
movups xmm0, xmmword [ebp - 0x54]
mov eax, dword [ebp - 0x14]
lea esi, [ebp - 0xbc]
sub esp, 0x68
mov ecx, 0x1a
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0xc]
push 0xf
sub esp, 0x44
mov ecx, esp
movups xmmword [ecx], xmm0
movups xmm0, xmmword [ebp - 0x44]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x34]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [ebp - 0x24]
movups xmmword [ecx + 0x30], xmm0
mov dword [ecx + 0x40], eax
mov ecx, esi
call fcn.10013660
test eax, eax
jne 0x100014a9
push 0x120d
push str.RealtekASIO2::Init_RTL_IOCTL
push str._s__d_LoadRealtekIO_false
call fcn.10009280
add esp, 0xc
jmp 0x100014b5
push 0xffff
mov ecx, esi
call fcn.10010240
mov edi, dword [ebp - 0x10]
mov ecx, edi
mov dword [edi + 0x24], 0
mov dword [edi + 0x2bc], 0
mov dword [edi + 0x38], 0xbb80
call fcn.10005220
lea eax, [ebp + 0xc]
mov dword [edi + 0x2c4], 0
push eax
push 0x2001f
push 0
push dword [0x10037024]
mov dword [ebp + 0xc], 0
push 0x80000001
call dword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExA]
test eax, eax
jne 0x10001566
mov esi, dword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegGetValueA]
lea eax, [ebp + 8]
push eax
lea eax, [edi + 0x228]
mov dword [ebp + 8], 4
push eax
push 0
push 0x10
push str.m_bufferSize
push 0
push dword [ebp + 0xc]
call esi
push str.m_bufferSize
push dword [ebp + 0xc]
call dword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegDeleteValueA]
lea eax, [ebp + 8]
mov dword [ebp + 8], 4
push eax
lea eax, [edi + 0x3c]
push eax
push 0
push 0x10
push str.m_nSampleRate
push 0
push dword [ebp + 0xc]
call esi
push dword [ebp + 0xc]
call dword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
push 0x13c
mov dword [0x10037ba8], edi
call fcn.10013c8f
add esp, 4
mov dword [ebp + 0xc], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x1000158d
mov ecx, eax
call fcn.10009990
jmp 0x1000158f
xor eax, eax
push 0x218
push 0
lea esi, [edi + 0x7a450]
mov byte [ebp - 4], 5
push esi
mov dword [edi + 0x65d18], eax
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 2
mov dword [edi + 0x258], 0
mov dword [edi + 0x25c], 0
mov dword [edi + 0x230], 0
mov dword [edi + 0x238], 0
mov dword [edi + 0xc0], 0
mov dword [edi + 0x14], 0xb
mov dword [edi + 0x18], 0xbb80
mov dword [edi + 0x2c0], 0
call fcn.10016460
mov ecx, dword [edi + 0x65d18]
add esp, 0xc
test ecx, ecx
je 0x100016c8
movups xmm0, xmmword [0x1002b42c]
push 0x218
push esi
push 0x19
push 1
sub esp, 0x10
xor edx, edx
mov eax, esp
movups xmmword [eax], xmm0
call fcn.1000b360
push eax
push 0x3fe
push 0x1002b9a0
push str._s__d_bOK_d
call fcn.10009280
movups xmm0, xmmword [0x1002b41c]
mov ecx, dword [edi + 0x65d18]
lea eax, [ebp + 0xc]
add esp, 0x10
mov dword [ebp + 0xc], 1
xor edx, edx
push 4
push eax
push 9
push 2
sub esp, 0x10
mov eax, esp
movups xmmword [eax], xmm0
call fcn.1000b360
mov ecx, dword [edi + 0x65d18]
call fcn.1000a740
mov dword [edi + 0x30], eax
mov eax, dword [edi + 0x7a5dc]
shr eax, 0x1b
and eax, 1
push eax
push 0x403
push 0x1002b9a0
push str._s__d_AsioDSDSupport_d
call fcn.10009280
add esp, 0x10
test dword [edi + 0x7a5dc], 0x8000000
je 0x100016ce
mov dword [edi + 0x24], 1
mov dword [edi + 0x30], 2
jmp 0x100016ce
cmp dword [edi + 0x30], 0
jg 0x100016d5
mov dword [edi + 0x30], 2
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8