Function at 0x1400216e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
push rsi
push r15
sub rsp, 0xc8
mov rax, qword [0x1400f54e0]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov r15, rdx
mov rsi, rcx
cmp rcx, 0x1000
jb 0x140021af9
movabs rax, 0xffff800000000000
test rax, rcx
jne 0x140021af9
cmp r8, 0x1000
jb 0x140021af9
test rax, r8
jne 0x140021af9
mov eax, dword [rcx]
mov qword [r11 + 0x20], rbx
mov qword [r11 - 0x18], rbp
mov qword [r11 - 0x20], rdi
mov qword [r11 - 0x28], r14
cmp eax, 1
jne 0x1400217c2
lea rdi, [rcx + 0x18]
mov r8, rdx
mov rdx, rdi
add rcx, 0x10
call fcn.140037380
mov ebx, eax
mov rbp, rdi
test eax, eax
js 0x140021ab5
mov qword [rsi + 8], 0
mov rax, qword [0x140105a58]
test rax, rax
je 0x140021af2
mov ecx, 0x610020
call qword [case.0x140035d81.0]
test rax, rax
je 0x140021af2
mov edx, 0x20
mov qword [rsp + 0x20], rbp
lea r9, str.Audio:_Opened_file__s_n
mov rcx, rax
lea r8d, [rdx + 0x41]
call fcn.140041ad0
mov eax, ebx
jmp 0x140021a71
cmp eax, 2
jne 0x140021aac
movzx r9d, byte [r8 + 2]
mov eax, 0xfffe
movzx ecx, byte [r8 + 1]
mov edx, dword [r8 + 4]
mov word [rsp + 0x54], ax
movzx eax, r9b
shr al, 4
movzx r10d, al
mov word [rsp + 0x56], r10w
mov qword [rsp + 0x40], 0x46464952
mov dword [rsp + 0x48], 0x45564157
mov dword [rsp + 0x4c], 0x20746d66
mov dword [rsp + 0x50], 0x28
mov dword [rsp + 0x58], edx
cmp cl, 0xff
je 0x140021826
shl edx, cl
movzx ecx, byte [r8]
jmp 0x14002182d
movzx ecx, byte [r8]
imul edx, ecx
movzx eax, cl
and r9b, 0xf
shl r9b, 3
xor ebx, ebx
mov dword [rsp + 0x5c], edx
mov ecx, 0x18
xor edx, edx
mov word [rsp + 0x60], ax
movzx eax, r9b
mov r11, r10
mov word [rsp + 0x62], ax
mov word [rsp + 0x66], ax
mov word [rsp + 0x64], cx
mov dword [rsp + 0x68], edx
test r10, r10
je 0x1400218a6
lea r10, [r8 + 8]
xor r9d, r9d
movzx edi, byte [r10 + rbx]
lea r8d, [rdi - 4]
cmp r8d, 0x11
ja 0x1400219ca
lea ecx, [rdi - 4]
movzx eax, cl
bt r9d, eax
jb 0x14002192d
bts edx, r8d
inc rbx
mov dword [rsp + 0x68], edx
mov r9d, edx
cmp rbx, r11
jb 0x140021870
lea rdx, str.00000001_0000_0010_8000_00aa00389b71
lea rcx, [rsp + 0x90]
call fcn.1400421f0
test eax, eax
js 0x140021a71
movups xmm0, xmmword [rsp + 0x90]
lea rbp, [rsi + 0x18]
mov qword [rsp + 0x7c], 0x61746164
mov r8, r15
lea rcx, [rsi + 0x10]
mov rdx, rbp
mov rdi, rbp
movups xmmword [rsp + 0x6c], xmm0
call fcn.140037380
mov ebx, eax
test eax, eax
js 0x140021ab5
mov rcx, qword [rsi + 0x10]
lea rdx, [rsp + 0x40]
xor r9d, r9d
lea r8d, [r9 + 0x44]
call fcn.1400383c0
mov ebx, eax
test eax, eax
jns 0x140021772
mov rcx, qword [rsi + 0x10]
call fcn.140037250
mov qword [rsi + 0x10], 0xffffffffffffffff
jmp 0x140021ab5
mov rax, qword [0x140105a58]
test rax, rax
je 0x140021a6c
mov ecx, 0x610010
call qword [case.0x140035d81.0]
test rax, rax
je 0x140021991
lea rcx, str.__FileHdr.FmtExt.Data.fChannelMask__RT_BIT_32_idCh___PDMAUDIOCHANNELID_FIRST_STANDARD__
mov edx, 0x10
mov qword [rsp + 0x38], rcx
lea r9, str.AssertLogRel__s__d___s:__s_n
lea rcx, str.int___cdecl_AudioHlpFileOpen_struct_AUDIOHLPFILE__unsigned___int64_const_struct_PDMAUDIOPCMPROPS__
mov qword [rsp + 0x30], rcx
lea rcx, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxDevicesAudioAudioHlp.cpp
mov dword [rsp + 0x28], 0x1b7
lea r8d, [rdx + 0x51]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140041ad0
mov rax, qword [0x140105a58]
test rax, rax
je 0x140021a6c
mov ecx, 0x610010
call qword [case.0x140035d81.0]
test rax, rax
je 0x140021a6c
mov dword [rsp + 0x28], edi
lea r9, str.Channel__u_repeats_channel_ID__d
mov qword [rsp + 0x20], rbx
jmp 0x140021a5a
mov rax, qword [0x140105a58]
test rax, rax
je 0x140021a6c
mov ecx, 0x610010
call qword [case.0x140035d81.0]
test rax, rax
je 0x140021a2e
lea rcx, str.idCh___PDMAUDIOCHANNELID_FIRST_STANDARD__idCh___PDMAUDIOCHANNELID_END_STANDARD
mov edx, 0x10
mov qword [rsp + 0x38], rcx
lea r9, str.AssertLogRel__s__d___s:__s_n
lea rcx, str.int___cdecl_AudioHlpFileOpen_struct_AUDIOHLPFILE__unsigned___int64_const_struct_PDMAUDIOPCMPROPS__
mov qword [rsp + 0x30], rcx
lea rcx, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxDevicesAudioAudioHlp.cpp
mov dword [rsp + 0x28], 0x1b5
lea r8d, [rdx + 0x51]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140041ad0
mov rax, qword [0x140105a58]
test rax, rax
je 0x140021a6c
mov ecx, 0x610010
call qword [case.0x140035d81.0]
test rax, rax
je 0x140021a6c
mov qword [rsp + 0x28], rbx
lea r9, str.Invalid_channel_ID__d_for_channel__u
mov dword [rsp + 0x20], edi
mov r8d, 0x61
mov rcx, rax
lea edx, [r8 - 0x51]
call fcn.140041ad0
mov eax, 0xfffffffe
mov rdi, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xf8]
mov r14, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.140001270
add rsp, 0xc8
pop r15
pop rsi
ret
mov ebx, 0xffffff1d
lea rdi, [rcx + 0x18]
mov rax, qword [0x140105a58]
test rax, rax
je 0x140021af2
mov ecx, 0x610010
call qword [case.0x140035d81.0]
test rax, rax
je 0x140021af2
mov edx, 0x10
mov dword [rsp + 0x28], ebx
lea r9, str.Audio:_Failed_opening_file__s:__Rrc_n
mov qword [rsp + 0x20], rdi
mov rcx, rax
lea r8d, [rdx + 0x51]
call fcn.140041ad0
mov eax, ebx
jmp 0x140021a71
mov eax, 0xfffffffa
jmp 0x140021a91