Function at 0x140035150
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2000]
mov eax, 0x2100
call fcn.140071640
sub rsp, rax
mov qword [rbp + 0x310], 0xfffffffffffffffe
mov qword [rsp + 0x2130], rbx
mov qword [rsp + 0x2138], rsi
mov qword [rsp + 0x2140], rdi
movaps xmmword [rsp + 0x20f0], xmm6
mov rax, qword [0x14009f008]
xor rax, rsp
mov qword [rbp + 0x1fe0], rax
xor ebx, ebx
mov dword [rbp - 0x68], ebx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov dword [0x1400a0714], 0xffffffff
lea r8d, [rbx + 8]
lea rdx, str.WavesSvc
lea rcx, [0x1400ac3d0]
call fcn.140002500
mov dword [rbp - 0x78], ebx
mov qword [rbp + 0x10], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioGeneral
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140035249
mov dword [rbp + 8], 4
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x124]
xor r8d, r8d
lea rdx, str.Debug
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x1400a0714]
mov eax, dword [rbp - 0x78]
test eax, eax
cmovne ecx, eax
mov dword [0x1400a0714], ecx
call fcn.140035050
xor eax, eax
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rax
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], rax
lea edx, [rax + 1]
lea rcx, [rbp + 0x158]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rbp + 0x158]
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [rbp + 0xa0], 0x18
lea rax, [rbp + 0x158]
mov qword [rbp + 0xa8], rax
mov dword [rbp - 0x74], ebx
mov qword [rbp + 0x40], rbx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioGeneral
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x14003534b
mov dword [rbp - 0x68], 4
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x120]
xor r8d, r8d
lea rdx, str.MaxxAudioOptions
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a6ec8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a6f20], rax
xor r13b, r13b
mov esi, dword [rbp - 0x74]
mov eax, esi
and eax, 0x40
lea rcx, [0x1400838d0]
test al, al
je 0x1400353d0
mov r13b, 1
lea rax, str.Preset_Per_Orientation_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x1e1
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x1be0]
call fcn.14005b700
lea r9, str.WavesSvcStop
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a6ea8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_create_event._Error_Code____d_
lea rcx, [rbp + 0x1be0]
call fcn.140030ad0
cmp qword [0x1400a6ea8], rbx
jne 0x14003545c
lea rax, [rbp + 0x1be0]
mov qword [rsp + 0x28], rax
lea rax, str.s_hStopEvent
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [0x1400a3128]
mov edx, 0x1e8
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, ebx
cmp eax, 0xb7
sete dil
mov ecx, esi
call fcn.140034910
lea r14, [0x1400a6f70]
mov r15d, 0x1d
test eax, eax
je 0x1400378fa
test edi, edi
jne 0x1400378fa
lea rax, str.Started
mov qword [rsp + 0x30], rax
lea r14, [0x1400838d0]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
lea r9d, [r15 - 0x1b]
lea r8, [0x1400a3128]
mov edx, 0x1f0
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp + 0x618], rbx
mov qword [rbp + 0x638], rbx
mov qword [rbp + 0x640], rbx
mov dword [rbp + 0x648], ebx
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rbp + 0x650], rax
lea rax, vtable.CDynamicEndpointCreator.0
mov qword [rbp + 0x610], rax
lea rax, vtable.CDynamicEndpointCreator.1.0
mov qword [rbp + 0x658], rax
lea rax, vtable.CAudioProperties.0
mov qword [rbp + 0x660], rax
mov qword [rbp + 0x6a0], rbx
xor eax, eax
mov qword [rbp + 0x66c], rax
mov qword [rbp + 0x674], rax
mov qword [rbp + 0x67c], rax
mov qword [rbp + 0x684], rax
mov qword [rbp + 0x68c], rax
mov qword [rbp + 0x698], rbx
mov dword [rbp + 0x668], ebx
mov byte [rbp + 0x6a8], al
mov qword [rbp + 0x7b0], rbx
mov dword [rbp + 0x7b8], ebx
mov cl, 1
call fcn.140010080
lea rdx, [rbp + 0x658]
lea rcx, [rbp + 0x660]
call fcn.140002040
test eax, eax
je 0x1400355cc
lea r9, [rbp + 0x650]
lea r8, [0x1400a2d70]
call fcn.14002af00
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.DynamicEndpointCreator
lea r8, [0x1400a2c98]
lea rcx, [rbp + 0x610]
call fcn.14002ade0
jmp 0x140035600
lea rax, str.Dynamic_endpoint_creator_failed_to_initialize.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x1f9
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov byte [rsp + 0x71], 4
mov byte [rsp + 0x79], 1
mov byte [rsp + 0x78], bl
mov byte [rsp + 0x70], bl
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x79]
lea rcx, [rsp + 0x71]
call fcn.14002f660
movzx r15d, byte [rsp + 0x70]
mov dword [rbp + 0xb8], r15d
movzx r12d, byte [rsp + 0x71]
lea rcx, [rbp + 0x1860]
call fcn.140038380
lea rcx, [rbp + 0x500]
call fcn.140031be0
bt esi, 9
jae 0x1400356d3
lea rax, str.Automatic_Mute_on_Hibernate_is_set_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x203
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea r9, [rbp + 0x540]
lea r8, [0x1400a3070]
call fcn.14002af00
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.CAutoMuteOnHibernate
lea r8, [0x1400a2c98]
lea rcx, [rbp + 0x500]
call fcn.14002ade0
mov edi, esi
shr edi, 0x1b
and dil, 1
cmp r12d, 2
jne 0x1400356fd
test esi, 0x903100
jne 0x1400356fd
call fcn.14000f080
test al, al
jne 0x1400356fd
test dil, dil
jne 0x1400356fd
mov dil, 1
jmp 0x140035700
xor dil, dil
mov byte [rbp + 0x1350], bl
xor eax, eax
mov qword [rbp + 0x1351], rax
mov word [rbp + 0x1359], ax
mov byte [rbp + 0x135b], al
test dil, dil
je 0x140035741
lea rcx, [rbp + 0x1350]
call qword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
je 0x140035741
movzx eax, byte [rbp + 0x1351]
shr al, 7
not al
and dil, al
lea rcx, [rbp + 0x3c0]
call fcn.140032570
test dil, dil
je 0x1400357b5
lea rcx, [rbp + 0x3c0]
call fcn.1400327f0
test eax, eax
je 0x1400357a7
lea r9, [rbp + 0x400]
lea r8, [0x1400a2ef0]
call fcn.14002af00
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.CBatterySaveMode
lea r8, [0x1400a2c98]
lea rcx, [rbp + 0x3c0]
call fcn.14002ade0
jmp 0x1400357e9
lea rax, str.Battery_save_mode_failed_to_initialize.
mov edx, 0x21a
jmp 0x1400357c1
lea rax, str.Battery_save_mode_does_not_support.
mov edx, 0x21f
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov r8d, r15d
mov edx, r12d
lea rcx, [rbp + 0xba0]
call fcn.140006ec0
mov dword [rbp + 0x1144], esi
bt esi, 0xe
jae 0x140035873
lea rax, str.Automatic_Skype_Detect_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x228
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rdi, str.skype.exe
mov r14d, 0xe
nop dword [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
add rdi, 0x148
sub r14, 1
jne 0x140035850
lea r14, [0x1400838d0]
bt esi, 0x12
jae 0x1400358dc
lea rax, str.Automatic_Lync_Detect_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x232
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rdi, str.communicator.exe
mov r14d, 4
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
add rdi, 0x148
sub r14, 1
jne 0x1400358c0
bt esi, 0x15
jae 0x14003590c
lea rdi, [0x1400a1bb0]
mov r14d, 2
nop
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
add rdi, 0x148
sub r14, 1
jne 0x1400358f0
lea rax, [0x140083830]
mov qword [rsp + 0x20], rax
lea r9, str.CameraName
lea r8, str.SOFTWAREWaves_AudioMaxxAudioGeneral
lea rcx, [rbp + 0x48]
call fcn.14002cf90
mov rax, qword [rbp + 0x48]
cmp dword [rax - 0x10], ebx
je 0x14003594b
lea rdx, [0x1400a1a60]
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
lea eax, [r15 - 9]
cmp eax, 1
ja 0x140035a53
lea rdx, str.08_b_
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
lea rdx, [0x1400a1f90]
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
lea rdx, [0x1400a1e40]
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
bt esi, 0x1d
jb 0x140035a53
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov edx, 0x6b
call qword [sym.imp.USER32.dll_LoadIconA]
test rax, rax
je 0x1400359e1
mov dword [rbp + 0x1884], 2
mov qword [rbp + 0x1890], rax
cmp dword [rbp + 0x1868], ebx
je 0x1400359e1
lea rdx, [rbp + 0x1870]
mov ecx, 1
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov edx, 0x6c
call qword [sym.imp.USER32.dll_LoadMenuA]
mov rcx, qword [rbp + 0x1a88]
test rax, rax
cmovne rcx, rax
mov qword [rbp + 0x1a88], rcx
cmp dword [rbp + 0x186c], ebx
jne 0x140035a49
cmp dword [rbp + 0x1868], ebx
jne 0x140035a30
lea rcx, [rbp + 0x1860]
call fcn.14001e510
cmp dword [rbp + 0x1868], ebx
je 0x140035a49
mov dword [rbp + 0x1884], 7
lea rdx, [rbp + 0x1870]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
mov dword [rbp + 0x186c], 1
mov rcx, qword [rbp + 0xdc0]
sub rcx, qword [rbp + 0xdb8]
movabs rax, 0x63e7063e7063e707
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140035ac1
lea r9, [rbp + 0xbe0]
lea r8, [0x1400a2fb0]
call fcn.14002af00
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.AutoSubtypeOnAudioSession
lea r8, [0x1400a2c98]
lea rcx, [rbp + 0xba0]
call fcn.14002ade0
lea rcx, [rbp + 0x13c0]
call fcn.14002d620
mov qword [rbp + 0x1408], rbx
mov dword [rbp + 0x1410], ebx
lea rax, vtable.CInclinometerPresetOrientationControl.0
mov qword [rbp + 0x13c0], rax
mov dword [rbp + 0x141c], 0xf
mov qword [rbp + 0x1420], rbx
mov qword [rbp + 0x1428], rbx
mov qword [rbp + 0x1430], rbx
mov qword [rbp + 0x1438], rbx
mov qword [rbp + 0x1440], rbx
mov qword [rbp + 0x1448], rbx
mov dword [rbp + 0x1418], 0xffffffff
lea rcx, [rbp + 0x14d0]
call fcn.14002d620
mov dword [rbp + 0x1518], 0xffffffff
lea rax, vtable.CAutoOrientationControl.0
mov qword [rbp + 0x14d0], rax
mov qword [rbp + 0x1528], rbx
lea rax, vtable.CAutoOrientationControl_Lenovo.0
mov qword [rbp + 0x128], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x140], bl
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
mov dword [rbp + 0x144], 0xffffffff
lea rcx, [rbp + 0x1470]
call fcn.14002d620
mov dword [rbp + 0x14b8], ebx
lea rax, vtable.CIntelCustomControl.0
mov qword [rbp + 0x1470], rax
mov qword [rbp + 0x14c0], rbx
test r13b, r13b
je 0x140035bf4
cmp r12d, 5
jne 0x140035bd8
test r15d, r15d
jne 0x140035bd8
lea rcx, [rbp + 0x128]
call fcn.14000e230
test al, al
lea rax, str.CAutoOrientationControl_Lenovo::Initialize_____d
mov edx, 0x26f
jmp 0x140035c14
lea rcx, [rbp + 0x14d0]
call fcn.14000cf20
test al, al
lea rax, str.CAutoOrientationControl::Initialize_MaxxVoice____d
mov edx, 0x274
jmp 0x140035c14
bt esi, 0x10
jae 0x140035c40
lea rcx, [rbp + 0x13c0]
call fcn.14000d9d0
test al, al
lea rax, str.CInclinometerPresetOrientationControl::Initialize_____d
mov edx, 0x27a
mov ecx, ebx
setne cl
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
bt esi, 0x19
jae 0x140035c8c
lea rcx, [rbp + 0x1470]
call fcn.140010bb0
mov ecx, ebx
test al, al
setne cl
mov dword [rsp + 0x30], ecx
lea rax, str.CIntelCustomControl::Initialize_____d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x280
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp + 0x268], rbx
mov qword [rbp + 0x278], rbx
mov dword [rbp + 0x270], ebx
mov qword [rbp + 0x280], rbx
mov dword [rbp + 0x288], ebx
lea rax, vtable.CKeyboardTimeManage.0
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x298], ebx
mov qword [rbp + 0x290], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2a0], xmm0
mov dword [rbp + 0x2b0], ebx
mov dword [rbp - 0x7c], ebx
mov qword [rbp + 0x15c8], rbx
mov qword [rbp + 0x15d0], rbx
mov dword [rbp + 0x15d8], ebx
mov byte [rbp + 0x15dc], bl
lea rax, vtable.CStreamMonitor.0
mov qword [rbp + 0x15c0], rax
lea rax, vtable.CStreamMonitor.1.0
mov qword [rbp + 0x15e0], rax
mov dword [rbp + 0x15e8], ebx
movdqa xmmword [rbp + 0x15f0], xmm0
mov qword [rbp + 0x1618], rbx
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1620], xmm1
mov dword [rbp + 0x1630], ebx
mov qword [rbp + 0x1840], rbx
mov qword [rbp + 0x1848], rbx
mov qword [rbp + 0x1850], rbx
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1634]
call fcn.14005b700
xor eax, eax
mov qword [rbp + 0x1600], rax
mov qword [rbp + 0x1608], rax
mov word [rbp + 0x1610], ax
mov dword [rbp - 0x80], ebx
mov r15, qword [0x1400a2950]
mov qword [rbp + 0x28], r15
mov qword [rbp - 0x60], r15
mov r12, qword [rbp + 0x150]
mov qword [rbp + 0x30], r12
mov qword [rbp - 0x58], r12
mov rax, qword [rbp + 0x4b8]
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov rdi, rbx
mov qword [rsp + 0x68], rbx
cmp qword [0x1400a6ea8], rbx
je 0x140035df0
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rsi, qword [rsp + 0x60]
test rsi, rsi
je 0x140035de0
mov rax, qword [0x1400a6ea8]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rdi, qword [rsp + 0x68]
jmp 0x140035df5
mov rsi, qword [rsp + 0x60]
mov rax, qword [0x1400a6f20]
mov r13, qword [rsp + 0x58]
test rax, rax
je 0x140035e7e
lea r14, [0x1400a6f20]
cmp r14, rsi
jae 0x140035e48
cmp r13, r14
ja 0x140035e48
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140035e3c
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035e75
mov rax, qword [r13 + r14*8]
jmp 0x140035e72
cmp rsi, rdi
jne 0x140035e6d
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rax, qword [0x1400a6f20]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035e75
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rax, qword [0x1400a6ec8]
test rax, rax
je 0x140035f02
lea r14, [0x1400a6ec8]
cmp r14, rsi
jae 0x140035ecc
cmp r13, r14
ja 0x140035ecc
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140035ec0
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035ef9
mov rax, qword [r13 + r14*8]
jmp 0x140035ef6
cmp rsi, rdi
jne 0x140035ef1
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rax, qword [0x1400a6ec8]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035ef9
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
test r15, r15
je 0x140035f80
lea rax, [rbp - 0x60]
cmp rax, rsi
jae 0x140035f51
lea rax, [rbp - 0x60]
cmp r13, rax
ja 0x140035f51
lea r14, [rbp - 0x60]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140035f42
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035f77
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x140035f77
cmp rsi, rdi
jne 0x140035f6f
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035f77
mov qword [rsi], r15
add rsi, 8
mov qword [rsp + 0x60], rsi
test r12, r12
je 0x140035ffe
lea rax, [rbp - 0x58]
cmp rax, rsi
jae 0x140035fcf
lea rax, [rbp - 0x58]
cmp r13, rax
ja 0x140035fcf
lea r14, [rbp - 0x58]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140035fc0
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035ff5
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x140035ff5
cmp rsi, rdi
jne 0x140035fed
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140035ff5
mov qword [rsi], r12
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rax, qword [rbp - 0x48]
test rax, rax
je 0x140036081
lea rcx, [rbp - 0x50]
cmp rcx, rsi
jae 0x14003604e
lea rcx, [rbp - 0x50]
cmp r13, rcx
ja 0x14003604e
lea r14, [rbp - 0x50]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140036042
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036078
mov rax, qword [r13 + r14*8]
jmp 0x140036075
cmp rsi, rdi
jne 0x140036070
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
mov rax, qword [rbp - 0x48]
test rsi, rsi
je 0x140036078
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
lea r15, [0x1400a7040]
lea r12, [0x1400ac3a0]
nop
mov r14, qword [r15]
mov qword [rbp + 0x18], r14
test r14, r14
je 0x140036115
lea rax, [rbp + 0x18]
cmp rax, rsi
jae 0x1400360e6
lea rax, [rbp + 0x18]
cmp r13, rax
ja 0x1400360e6
lea r14, [rbp + 0x18]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x1400360d7
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003610c
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x14003610c
cmp rsi, rdi
jne 0x140036104
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003610c
mov qword [rsi], r14
add rsi, 8
mov qword [rsp + 0x60], rsi
add r15, 0x2e0
cmp r15, r12
jl 0x140036090
cmp byte [0x1400a6eb8], bl
je 0x1400361c8
cmp qword [0x1400a6ec0], rbx
jne 0x1400361c8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a6ec0], rax
test rax, rax
je 0x1400361c8
lea r14, [0x1400a6ec0]
cmp r14, rsi
jae 0x140036197
cmp r13, r14
ja 0x140036197
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x14003618b
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x1400361bf
mov rax, qword [r13 + r14*8]
jmp 0x1400361bc
cmp rsi, rdi
jne 0x1400361b7
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rax, qword [0x1400a6ec0]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x1400361bf
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
lea rcx, [rbp + 0x9b0]
call fcn.1400310b0
mov dword [rbp + 0x20], ebx
mov dword [rbp + 0x24], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rbx
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x50]
call fcn.14002b840
mov rdx, qword [rbp + 0x50]
cmp dword [rbp + 0xa00], ebx
jne 0x140036264
mov rax, qword [rbp + 0x58]
sub rax, rdx
sar rax, 2
test rax, rax
je 0x140036264
mov dword [rbp + 0xa04], ebx
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xb68]
call fcn.1400319f0
lea rax, [0x140034550]
mov qword [rbp + 0xb90], rax
lea rcx, [rbp + 0x9b0]
call fcn.140031480
lea rdx, [rbp + 0x9f8]
lea rcx, [rbp + 0xa08]
call fcn.140002040
mov dword [rbp + 0xa00], eax
mov rdx, qword [rbp + 0x50]
test rdx, rdx
je 0x140036279
mov r8, qword [rbp + 0x60]
sub r8, rdx
sar r8, 2
call fcn.14001c7a0
lea r9, [rbp + 0x9f0]
lea r8, [0x1400a2e30]
call fcn.14002af00
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.WavesFXConnection_Render
lea r8, [0x1400a2c98]
lea rcx, [rbp + 0x9b0]
call fcn.14002ade0
lea rcx, [rbp + 0x7c0]
call fcn.1400310b0
mov dword [rbp - 0x70], ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rbx
lea r8, [rbp - 0x6c]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x68]
call fcn.14002b840
mov rdx, qword [rbp + 0x68]
cmp dword [rbp + 0x810], ebx
jne 0x140036355
mov rax, qword [rbp + 0x70]
sub rax, rdx
sar rax, 2
test rax, rax
je 0x140036355
mov dword [rbp + 0x814], 1
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x978]
call fcn.1400319f0
lea rax, [0x140034570]
mov qword [rbp + 0x9a0], rax
lea rcx, [rbp + 0x7c0]
call fcn.140031480
lea rdx, [rbp + 0x808]
lea rcx, [rbp + 0x818]
call fcn.140002040
mov dword [rbp + 0x810], eax
mov rdx, qword [rbp + 0x68]
test rdx, rdx
je 0x14003636a
mov r8, qword [rbp + 0x78]
sub r8, rdx
sar r8, 2
call fcn.14001c7a0
lea r9, [rbp + 0x800]
lea r8, [0x1400a2e30]
call fcn.14002af00
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.WavesFXConnection_Capture
lea r8, [0x1400a2c98]
lea rcx, [rbp + 0x7c0]
call fcn.14002ade0
mov dword [rbp + 0x220], 0x466
movsd xmm6, qword [0x1400893c0]
movsd qword [rbp + 0x228], xmm6
mov dword [rbp + 0x230], 0x468
movsd qword [rbp + 0x238], xmm6
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
call fcn.14001ed30
mov rdi, rax
mov qword [rbp - 0x40], rax
lea r14, [rbp + 0x220]
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.140037d20
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x318]
lea rcx, [rbp - 0x40]
call fcn.140037d50
add r14, 0x10
lea rax, [rbp + 0x240]
cmp r14, rax
je 0x140036432
mov rdi, qword [rbp - 0x40]
jmp 0x1400363f4
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x7c0]
call fcn.140031850
mov r15d, eax
mov dword [rsp + 0x74], eax
mov r8, qword [rbp - 0x40]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x40]
call fcn.140037b50
mov rcx, qword [rbp - 0x40]
call fcn.14003a87c
mov dword [rbp + 0xc0], 0x134
movsd qword [rbp + 0xc8], xmm6
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
call fcn.14001ed30
mov rdi, rax
mov qword [rbp - 0x18], rax
lea r14, [rbp + 0xc0]
nop dword [rax]
mov rdx, r14
lea rcx, [rbp - 0x18]
call fcn.140037d20
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x328]
lea rcx, [rbp - 0x18]
call fcn.140037d50
add r14, 0x10
lea rax, [rbp + 0xd0]
cmp r14, rax
je 0x1400364de
mov rdi, qword [rbp - 0x18]
jmp 0x1400364a0
mov r12d, 1
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x9b0]
call fcn.140031850
test eax, eax
je 0x14003658d
mov dword [rbp + 0xd0], 0x447
movsd qword [rbp + 0xd8], xmm6
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
call fcn.14001ed30
mov rdi, rax
mov qword [rbp - 8], rax
lea r14, [rbp + 0xd0]
nop dword [rax]
mov rdx, r14
lea rcx, [rbp - 8]
call fcn.140037d20
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x330]
lea rcx, [rbp - 8]
call fcn.140037d50
add r14, 0x10
lea rax, [rbp + 0xe0]
cmp r14, rax
je 0x14003656e
mov rdi, qword [rbp - 8]
jmp 0x140036530
mov r12d, 3
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x7c0]
call fcn.140031850
test eax, eax
lea edi, [r12 - 2]
jne 0x14003658f
mov edi, ebx
mov dword [rsp + 0x54], edi
test r12b, 2
je 0x1400365c0
and r12d, 0xfffffffd
mov r8, qword [rbp - 8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x338]
lea rcx, [rbp - 8]
call fcn.140037b50
mov rcx, qword [rbp - 8]
call fcn.14003a87c
and r12d, 0xfffffffe
mov dword [rsp + 0x7c], r12d
mov r8, qword [rbp - 0x18]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x350]
lea rcx, [rbp - 0x18]
call fcn.140037b50
mov rcx, qword [rbp - 0x18]
call fcn.14003a87c
movzx r14d, byte [0x1400a6eb8]
mov byte [rsp + 0x50], r14b
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
nop
cmp dword [rbp - 0x80], 0
jne 0x140036d59
test edi, edi
je 0x140036dbb
mov qword [rsp + 0x30], r8
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x2d7
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp + 0x1348], 0xf
mov qword [rbp + 0x1340], rbx
mov byte [rbp + 0x1330], 0
mov qword [rbp + 0x13b8], 0xf
mov qword [rbp + 0x13b0], rbx
mov byte [rbp + 0x13a0], 0
lea rcx, [rbp + 0x1360]
call fcn.14001bf30
lea rax, vtable.CEndpointList.0
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rbx
mov qword [rbp + 0x90], rbx
call fcn.140006370
mov qword [rbp + 0x88], rax
mov byte [rbp + 0x98], 0
xor r9d, r9d
mov edx, 1
mov r8d, edx
lea rcx, [rbp + 0x80]
call fcn.14001b420
lea rdx, [rbp + 0x1360]
cmp qword [rbp + 0x1378], 0x10
cmovae rdx, qword [rbp + 0x1360]
mov qword [rbp + 0x1398], 0xf
mov qword [rbp + 0x1390], rbx
mov byte [rbp + 0x1380], 0
cmp byte [rdx], 0
jne 0x140036714
mov r8, rbx
jmp 0x14003672a
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140036720
lea rcx, [rbp + 0x1380]
call fcn.140002500
lea r8, [rbp + 0x1380]
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x88]
call fcn.14001d130
mov rax, qword [rbp + 0x358]
mov rdi, qword [rax + 0x40]
mov rax, qword [rbp + 0x1398]
cmp rax, 0x10
jb 0x1400367af
inc rax
mov rcx, qword [rbp + 0x1380]
cmp rax, 0x1000
jb 0x1400367aa
test cl, 0x1f
jne 0x1400375d5
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400375cf
sub rcx, rax
cmp rcx, 8
jb 0x1400375c9
cmp rcx, 0x27
ja 0x1400375c3
mov rcx, rax
call fcn.14003a87c
mov qword [rbp + 0x1398], 0xf
mov qword [rbp + 0x1390], rbx
mov byte [rbp + 0x1380], 0
test rdi, rdi
je 0x140036995
mov dword [rbp - 0x6c], ebx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140036995
mov rax, qword [rcx]
lea rdx, [rbp - 0x6c]
call qword [rax + 0x30]
cmp dword [rbp - 0x6c], 1
jne 0x140036995
xor edx, edx
mov rcx, rdi
call fcn.14001b290
test rax, rax
je 0x140036995
or r12d, 4
mov dword [rsp + 0x7c], r12d
lea r14, [rbp + 0x1360]
cmp qword [rbp + 0x1378], 0x10
cmovae r14, qword [rbp + 0x1360]
lea rax, [rbp + 0x1538]
mov qword [rbp + 0x1530], rax
test r14, r14
jne 0x140036847
mov rdx, rbx
mov qword [rbp + 0x1530], rbx
jmp 0x1400368b5
or rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140036850
inc edi
lea r8, [rbp + 0x1538]
mov edx, edi
lea rcx, [rbp + 0x1530]
call fcn.140002c80
movsxd rdx, edi
mov r9, rdx
mov r8, r14
mov rcx, qword [rbp + 0x1530]
call fcn.140001490
test eax, eax
je 0x1400368ae
cmp eax, 0xc
je 0x1400375f1
cmp eax, 0x16
je 0x1400375e6
cmp eax, 0x22
je 0x1400375e6
cmp eax, 0x50
jne 0x1400375db
mov rdx, qword [rbp + 0x1530]
mov qword [rbp + 0x2d8], 0xf
mov qword [rbp + 0x2d0], rbx
mov byte [rbp + 0x2c0], 0
cmp byte [rdx], 0
jne 0x1400368d8
mov r8, rbx
jmp 0x1400368ea
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400368e0
lea rcx, [rbp + 0x2c0]
call fcn.140002500
lea r8, [rbp + 0x13a0]
lea rdx, [rbp + 0x2c0]
call fcn.140034710
test al, al
setne dil
test r12b, 4
je 0x140036936
and r12d, 0xfffffffb
mov dword [rsp + 0x7c], r12d
lea rax, [rbp + 0x1538]
mov rcx, qword [rbp + 0x1530]
cmp rcx, rax
je 0x140036936
call fcn.14005d6dc
test dil, dil
je 0x140036995
lea rax, str.Query_by_default_capture_endpoint_string
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 3
lea r8, [0x1400a3128]
mov edx, 0x2ef
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x13a0]
lea rcx, [rbp + 0x1330]
call fcn.140002630
jmp 0x140036b68
lea rax, str.Query_endpoint_string_from_property1_with_type_capture_LFX
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 3
lea r8, [0x1400a3128]
mov edx, 0x2f4
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
call fcn.140006370
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x20], 4
lea rcx, [rbp - 0x30]
call fcn.140016490
lea rdx, [rbp + 0x1450]
lea rcx, [rbp - 0x30]
call fcn.1400170e0
mov rdi, rax
lea rax, [rbp + 0x1330]
cmp rax, rdi
je 0x140036a95
mov rcx, qword [rbp + 0x1348]
cmp rcx, 0x10
jb 0x140036a6c
inc rcx
mov rdx, qword [rbp + 0x1330]
cmp rcx, 0x1000
jb 0x140036a64
test dl, 0x1f
jne 0x14003760e
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x140037608
sub rdx, rax
cmp rdx, 8
jb 0x140037602
cmp rdx, 0x27
ja 0x1400375fc
mov rdx, rax
mov rcx, rdx
call fcn.14003a87c
mov qword [rbp + 0x1348], 0xf
mov qword [rbp + 0x1340], rbx
mov byte [rbp + 0x1330], 0
mov rdx, rdi
lea rcx, [rbp + 0x1330]
call fcn.140002760
nop
mov rax, qword [rbp + 0x1468]
cmp rax, 0x10
jb 0x140036aea
inc rax
mov rcx, qword [rbp + 0x1450]
cmp rax, 0x1000
jb 0x140036ae4
test cl, 0x1f
jne 0x140037626
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140037620
sub rcx, rax
cmp rcx, 8
jb 0x14003761a
cmp rcx, 0x27
ja 0x140037614
mov rcx, rax
call fcn.14003a87c
nop
mov rax, qword [rbp - 0x30]
mov r14, qword [rax + 8]
mov rdi, r14
cmp byte [r14 + 0x19], 0
jne 0x140036b2e
nop dword [rax]
mov rdx, qword [rdi + 0x10]
lea rcx, [rbp - 0x30]
call fcn.140018990
mov rdi, qword [rdi]
lea rcx, [r14 + 0x28]
call fcn.140002380
mov rcx, r14
call fcn.14003a87c
mov r14, rdi
cmp byte [rdi + 0x19], 0
je 0x140036b00
mov rax, qword [rbp - 0x30]
mov qword [rax + 8], rax
mov rax, qword [rbp - 0x30]
mov qword [rax], rax
mov rax, qword [rbp - 0x30]
mov qword [rax + 0x10], rax
mov qword [rbp - 0x28], rbx
mov r8, qword [rbp - 0x30]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x340]
lea rcx, [rbp - 0x30]
call fcn.140018b30
mov rcx, qword [rbp - 0x30]
call fcn.14003a87c
lea rdx, [rbp + 0x1330]
cmp qword [rbp + 0x1348], 0x10
cmovae rdx, qword [rbp + 0x1330]
lea rax, [rbp + 0x1ad8]
mov qword [rbp + 0x1ad0], rax
mov r8d, 3
lea rcx, [rbp + 0x1ad0]
call fcn.140005ac0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, qword [rbp + 0x1ad0]
xor edx, edx
lea rcx, [rbp + 0x15c0]
call fcn.14002fbb0
mov edi, ebx
test eax, eax
setns dil
mov dword [rbp - 0x80], edi
lea rax, [rbp + 0x1ad8]
mov rcx, qword [rbp + 0x1ad0]
cmp rcx, rax
je 0x140036bdf
call fcn.14005d6dc
lea rax, vtable.CEndpointList.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.14001b850
mov r8, qword [rbp + 0x88]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x88]
call fcn.140005c50
mov rcx, qword [rbp + 0x88]
call fcn.14003a87c
mov rax, qword [rbp + 0x1378]
cmp rax, 0x10
jb 0x140036c79
mov rcx, qword [rbp + 0x1360]
inc rax
cmp rax, 0x1000
jb 0x140036c74
test cl, 0x1f
jne 0x14003763e
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140037638
sub rcx, rax
cmp rcx, 8
jb 0x140037632
cmp rcx, 0x27
ja 0x14003762c
mov rcx, rax
call fcn.14003a87c
mov qword [rbp + 0x1378], 0xf
mov qword [rbp + 0x1370], rbx
mov byte [rbp + 0x1360], 0
mov rax, qword [rbp + 0x13b8]
cmp rax, 0x10
jb 0x140036ce6
mov rcx, qword [rbp + 0x13a0]
inc rax
cmp rax, 0x1000
jb 0x140036ce1
test cl, 0x1f
jne 0x140037656
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140037650
sub rcx, rax
cmp rcx, 8
jb 0x14003764a
cmp rcx, 0x27
ja 0x140037644
mov rcx, rax
call fcn.14003a87c
mov qword [rbp + 0x13b8], 0xf
mov qword [rbp + 0x13b0], rbx
mov byte [rbp + 0x13a0], 0
mov rax, qword [rbp + 0x1348]
cmp rax, 0x10
jb 0x140036dae
mov rcx, qword [rbp + 0x1330]
inc rax
cmp rax, 0x1000
jb 0x140036d52
test cl, 0x1f
jne 0x14003766e
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140037668
sub rcx, rax
cmp rcx, 8
jb 0x140037662
cmp rcx, 0x27
ja 0x14003765c
mov rcx, rax
call fcn.14003a87c
jmp 0x140036dae
test edi, edi
jne 0x140036dbb
mov qword [rsp + 0x30], rdx
lea rdi, [0x1400838d0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x2fd
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov edx, 1
lea rcx, [rbp + 0x15c0]
call fcn.14002fa10
mov dword [rbp - 0x80], ebx
lea rcx, str.Unhooking_the_keyboard
jmp 0x140036dc2
lea rcx, str.Unhooking_the_keyboard
movzx r14d, byte [rsp + 0x50]
lea rdi, [0x1400838d0]
cmp dword [rbp - 0x7c], 0
jne 0x140036dde
test r15d, r15d
je 0x140036e1d
lea rcx, [rbp + 0x260]
call fcn.140021230
mov dword [rbp - 0x7c], eax
jmp 0x140036e1d
test r15d, r15d
jne 0x140036e1d
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
lea r9d, [r15 + 2]
lea r8, [0x1400a3128]
mov edx, 0x30d
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x260]
call fcn.140021320
mov dword [rbp - 0x7c], ebx
test r14b, r14b
je 0x140036f15
lea rdi, [0x1400a6f70]
mov r14d, 0x1d
mov rcx, rdi
call fcn.140023a20
add rdi, 0x2e0
sub r14, 1
jne 0x140036e33
mov rcx, qword [0x1400a6eb0]
test rcx, rcx
jne 0x140036eed
lea rcx, [rbp + 0x38]
call fcn.140023da0
lea rax, [0x1400a6eb0]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 0x11]
xor r8d, r8d
mov rdx, qword [rbp + 0x38]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140036ea3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [0x1400a6eb0]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rcx, rcx
je 0x140036ed3
mov rdi, qword [rbp - 0x60]
mov qword [rbp + 0x28], rdi
mov rdi, qword [rbp - 0x58]
mov qword [rbp + 0x30], rdi
mov rdi, qword [rbp - 0x50]
mov qword [rbp - 0x48], rdi
jmp 0x140036eed
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x48], rax
jmp 0x140036f0d
mov r9, qword [0x1400a6ec0]
test r9, r9
je 0x140036f0d
mov dword [rsp + 0x20], 1
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r14b, r14b
mov byte [rsp + 0x50], r14b
mov rdi, rsi
sub rdi, r13
sar rdi, 3
mov dword [rsp + 0x20], 6
mov r9d, 0x1cff
or r8d, 0xffffffff
mov rdx, r13
mov ecx, edi
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
mov ecx, eax
cmp rcx, rdi
jae 0x140037537
cdqe
mov r15, qword [r13 + rax*8]
cmp qword [0x1400a6f20], r15
jne 0x140037164
lea rax, str.Capture_Event:_Param_Changed
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x333
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov dword [rbp + 0x240], 0x466
movsd qword [rbp + 0x248], xmm6
mov dword [rbp + 0x250], 0x468
movsd qword [rbp + 0x258], xmm6
lea rax, [rbp + 0x240]
mov qword [rbp + 0x180], rax
lea rax, [rbp + 0x260]
mov qword [rbp + 0x188], rax
movaps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x370], xmm0
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x190]
call fcn.140037a00
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x7c0]
call fcn.140031850
mov r15d, eax
mov dword [rsp + 0x74], eax
lea rcx, [rbp + 0x190]
call fcn.1400379d0
mov dword [rbp + 0xe0], 0x134
movsd qword [rbp + 0xe8], xmm6
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x1a0], rax
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x1a8], rax
movaps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x380], xmm0
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x1d0]
call fcn.140037a00
or r12d, 8
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x9b0]
call fcn.140031850
test eax, eax
je 0x1400370f9
mov dword [rbp + 0x100], 0x447
movsd qword [rbp + 0x108], xmm6
lea rax, [rbp + 0x100]
mov qword [rbp + 0x1b0], rax
lea rax, [rbp + 0x110]
mov qword [rbp + 0x1b8], rax
movaps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x2e0], xmm0
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x1c0]
call fcn.140037a00
or r12d, 0x10
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x7c0]
call fcn.140031850
test eax, eax
mov edi, 1
jne 0x1400370fb
mov edi, ebx
mov dword [rsp + 0x54], edi
test r12b, 0x10
je 0x140037115
and r12d, 0xffffffef
lea rcx, [rbp + 0x1c0]
call fcn.1400379d0
and r12d, 0xfffffff7
mov dword [rsp + 0x7c], r12d
lea rcx, [rbp + 0x1d0]
call fcn.1400379d0
lea rcx, [rbp + 0xba0]
call fcn.140034420
test al, al
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x140036610
lea rcx, [rbp + 0xba0]
call fcn.140009230
jmp 0x1400365f9
cmp qword [0x1400a6ea8], r15
je 0x140037674
cmp qword [0x1400a6ec8], r15
jne 0x1400372eb
lea rax, str.Render_Event:_Param_Changed
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x347
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0xba0]
call fcn.140034420
test al, al
je 0x1400371d5
lea rcx, [rbp + 0xba0]
call fcn.140009230
mov dword [rbp + 0x110], 0x134
movsd qword [rbp + 0x118], xmm6
lea rax, [rbp + 0x110]
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x120]
mov qword [rbp + 0x1e8], rax
movaps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x2f0], xmm0
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x200]
call fcn.140037a00
or r12d, 0x20
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x9b0]
call fcn.140031850
test eax, eax
je 0x1400372b0
mov dword [rbp + 0xf0], 0x447
movsd qword [rbp + 0xf8], xmm6
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x210], rax
lea rax, [rbp + 0x100]
mov qword [rbp + 0x218], rax
movaps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x300], xmm0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x1f0]
call fcn.140037a00
or r12d, 0x40
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x7c0]
call fcn.140031850
test eax, eax
mov edi, 1
jne 0x1400372b2
mov edi, ebx
mov dword [rsp + 0x54], edi
test r12b, 0x40
je 0x1400372cc
and r12d, 0xffffffbf
lea rcx, [rbp + 0x1f0]
call fcn.1400379d0
and r12d, 0xffffffdf
mov dword [rsp + 0x7c], r12d
lea rcx, [rbp + 0x200]
call fcn.1400379d0
mov r15d, dword [rsp + 0x74]
jmp 0x1400365f9
cmp qword [rbp + 0x28], r15
jne 0x140037394
lea rax, str.Event:_Jack_Sense
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x355
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
call fcn.140020bf0
call fcn.140020b90
test eax, eax
je 0x14003737a
call fcn.140033e80
test eax, eax
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x140036610
lea rcx, [0x1400ac2d0]
call fcn.140034040
jmp 0x1400365f9
lea rcx, [0x1400ac2d8]
call fcn.1400331c0
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x1400365f9
cmp qword [rbp + 0x30], r15
jne 0x1400373f4
lea rax, str.Event:_Mocca_Mode
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x368
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov edx, 1
lea rcx, [rbp + 0x128]
call fcn.14000e5d0
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x1400365f9
cmp qword [rbp - 0x48], r15
jne 0x14003744f
lea rax, str.Event:_Battery_Save
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x36d
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x3c0]
call fcn.140032e00
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x1400365f9
cmp qword [0x1400a6ec0], r15
jne 0x1400374a4
lea rax, str.Event:_Realtek_Jack_Change_Event
mov qword [rsp + 0x30], rax
lea rax, [0x1400838d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x372
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov r14b, 1
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x1400365f4
lea rdi, [0x1400a7040]
lea r14, [0x1400a6f70]
mov r12d, 0x1d
lea r13, [0x1400838d0]
lea rsi, str.Event:Realtek_Jack_Sense
cmp qword [rdi], r15
jne 0x140037500
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x37c
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov rcx, r14
call fcn.1400261a0
add r14, 0x2e0
add rdi, 0x2e0
sub r12, 1
jne 0x1400374c6
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x7c]
mov edi, dword [rsp + 0x54]
movzx r14d, byte [rsp + 0x50]
mov r15d, dword [rsp + 0x74]
jmp 0x1400365f9
mov edi, dword [rsp + 0x54]
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
jne 0x140036610
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x140036610
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140037590
jmp 0x1400365f9
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
mov ecx, 0x80004005
call fcn.1400015b0
int3
mov ecx, 0x80070057
call fcn.1400015b0
int3
mov ecx, 0x8007000e
call fcn.1400015b0
nop
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
nop
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
call fcn.14005d52c
int3
lea rax, str.Event:_Stop
mov qword [rsp + 0x30], rax
lea rdi, [0x1400838d0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x342
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rsp + 0x60], r13
lea rcx, [rbp + 0x14d0]
call fcn.14000cef0
lea rcx, [rbp + 0x128]
call fcn.14000e560
lea rcx, [rbp + 0x13c0]
call fcn.14000d920
lea rcx, [rbp + 0x1470]
call fcn.140010d90
lea rax, str.Cleaning...
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x397
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x260]
call fcn.140021320
lea rcx, vtable.CJackSense.0
call fcn.140020940
cmp qword [0x1400ac2d8], 0
je 0x140037746
lea rcx, [0x1400ac2d0]
call fcn.140029fe0
cmp qword [rbp + 0x508], 0
je 0x14003775c
lea rcx, [rbp + 0x500]
call fcn.140029fe0
cmp qword [rbp + 0xba8], 0
je 0x140037772
lea rcx, [rbp + 0xba0]
call fcn.140029fe0
cmp qword [rbp + 0x3c8], 0
je 0x140037788
lea rcx, [rbp + 0x3c0]
call fcn.140029fe0
cmp qword [rbp + 0x618], 0
je 0x14003779e
lea rcx, [rbp + 0x610]
call fcn.140029fe0
lea rcx, [rbp + 0x660]
call fcn.1400020e0
cmp qword [rbp + 0x9b8], 0
je 0x1400377c0
lea rcx, [rbp + 0x9b0]
call fcn.140029fe0
lea rcx, [rbp + 0x9b0]
call fcn.1400312d0
cmp qword [rbp + 0x7c8], 0
je 0x1400377e2
lea rcx, [rbp + 0x7c0]
call fcn.140029fe0
lea rcx, [rbp + 0x7c0]
call fcn.1400312d0
lea rax, str.Finished
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a3128]
mov edx, 0x3c4
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x7c0]
call fcn.1400311e0
lea rcx, [rbp + 0x9b0]
call fcn.1400311e0
lea rcx, [rsp + 0x58]
call fcn.140005720
lea rcx, [rbp + 0x15c0]
call fcn.14002f9c0
lea rcx, [rbp + 0x260]
call fcn.1400211e0
lea rax, vtable.CIntelCustomSensor.0
mov qword [rbp + 0x1470], rax
lea rcx, [rbp + 0x1470]
call fcn.14002d740
lea rax, vtable.CAutoOrientationControl_Lenovo.0
mov qword [rbp + 0x128], rax
lea rcx, [rbp + 0x128]
call fcn.14000e560
lea rcx, [rbp + 0x14d0]
call fcn.14000ce90
lea rcx, [rbp + 0x13c0]
call fcn.14000d8e0
lea rcx, [rbp + 0x48]
call fcn.140002360
lea rcx, [rbp + 0xba0]
call fcn.140007290
lea rcx, [rbp + 0x3c0]
call fcn.140032710
lea rcx, [rbp + 0x500]
call fcn.140031d90
lea rcx, [rbp + 0x1860]
call fcn.140038500
lea rcx, [rbp + 0x610]
call fcn.140034450
lea r14, [0x1400a6f70]
mov r15d, 0x1d
mov rcx, qword [0x1400a6ea8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400a6ec0]
test rcx, rcx
je 0x140037920
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400a6ec0], rbx
mov rcx, qword [0x1400a6eb0]
test rcx, rcx
je 0x140037939
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [0x1400a6eb0], rbx
mov rcx, qword [0x1400a6ec8]
test rcx, rcx
je 0x140037952
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400a6ec8], rbx
mov rcx, qword [0x1400a6f20]
test rcx, rcx
je 0x140037970
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400a6f20], rbx
nop dword [rax + rax]
mov rcx, r14
call fcn.140027de0
add r14, 0x2e0
sub r15, 1
jne 0x140037970
call qword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov rcx, qword [rbp + 0x1fe0]
xor rcx, rsp
call fcn.14003a8a0
lea r11, [rsp + 0x2100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret