Function at 0x1400375e0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2000]
mov eax, 0x2100
call fcn.140073ae0
sub rsp, rax
mov qword [rbp + 0x310], 0xfffffffffffffffe
mov qword [rsp + 0x2130], rbx
mov qword [rsp + 0x2138], rsi
mov qword [rsp + 0x2140], rdi
movaps xmmword [rsp + 0x20f0], xmm6
mov rax, qword [0x1400a3008]
xor rax, rsp
mov qword [rbp + 0x1fe0], rax
xor ebx, ebx
mov dword [rbp - 0x68], ebx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov dword [0x1400a4870], 0xffffffff
lea r8d, [rbx + 8]
lea rdx, str.WavesSvc
lea rcx, [0x1400b0690]
call fcn.140002500
mov dword [rbp - 0x78], ebx
mov qword [rbp + 0x10], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioGeneral
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1400376d9
mov dword [rbp + 8], 4
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x124]
xor r8d, r8d
lea rdx, str.Debug
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x1400a4870]
mov eax, dword [rbp - 0x78]
test eax, eax
cmovne ecx, eax
mov dword [0x1400a4870], ecx
call fcn.140037460
xor eax, eax
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rax
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], rax
lea edx, [rax + 1]
lea rcx, [rbp + 0x158]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rbp + 0x158]
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [rbp + 0xa0], 0x18
lea rax, [rbp + 0x158]
mov qword [rbp + 0xa8], rax
mov dword [rbp - 0x74], ebx
mov qword [rbp + 0x40], rbx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioGeneral
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x1400377db
mov dword [rbp - 0x68], 4
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x120]
xor r8d, r8d
lea rdx, str.MaxxAudioOptions
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400ab188], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400ab1e0], rax
xor r13b, r13b
mov esi, dword [rbp - 0x74]
mov eax, esi
and eax, 0x40
lea rcx, [0x1400868d0]
test al, al
je 0x140037860
mov r13b, 1
lea rax, str.Preset_Per_Orientation_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x1e5
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x1be0]
call fcn.14005db90
lea r9, str.WavesSvcStop
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400ab168], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_create_event._Error_Code____d_
lea rcx, [rbp + 0x1be0]
call fcn.140032ee0
cmp qword [0x1400ab168], rbx
jne 0x1400378ec
lea rax, [rbp + 0x1be0]
mov qword [rsp + 0x28], rax
lea rax, str.s_hStopEvent
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [0x1400a73c8]
mov edx, 0x1ec
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, ebx
cmp eax, 0xb7
sete dil
mov ecx, esi
call fcn.140036d20
lea r14, [0x1400ab230]
mov r15d, 0x1d
test eax, eax
je 0x140039d8a
test edi, edi
jne 0x140039d8a
lea rax, str.Started
mov qword [rsp + 0x30], rax
lea r14, [0x1400868d0]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
lea r9d, [r15 - 0x1b]
lea r8, [0x1400a73c8]
mov edx, 0x1f4
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov qword [rbp + 0x618], rbx
mov qword [rbp + 0x638], rbx
mov qword [rbp + 0x640], rbx
mov dword [rbp + 0x648], ebx
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rbp + 0x650], rax
lea rax, vtable.CDynamicEndpointCreator.0
mov qword [rbp + 0x610], rax
lea rax, vtable.CDynamicEndpointCreator.1.0
mov qword [rbp + 0x658], rax
lea rax, vtable.CAudioProperties.0
mov qword [rbp + 0x660], rax
mov qword [rbp + 0x6a0], rbx
xor eax, eax
mov qword [rbp + 0x66c], rax
mov qword [rbp + 0x674], rax
mov qword [rbp + 0x67c], rax
mov qword [rbp + 0x684], rax
mov qword [rbp + 0x68c], rax
mov qword [rbp + 0x698], rbx
mov dword [rbp + 0x668], ebx
mov byte [rbp + 0x6a8], al
mov qword [rbp + 0x7b0], rbx
mov dword [rbp + 0x7b8], ebx
mov cl, 1
call fcn.140012940
lea rdx, [rbp + 0x658]
lea rcx, [rbp + 0x660]
call fcn.140002040
test eax, eax
je 0x140037a5c
lea r9, [rbp + 0x650]
lea r8, [0x1400a7010]
call fcn.14002d320
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.DynamicEndpointCreator
lea r8, [0x1400a6f38]
lea rcx, [rbp + 0x610]
call fcn.14002d200
jmp 0x140037a90
lea rax, str.Dynamic_endpoint_creator_failed_to_initialize.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x1fd
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov byte [rsp + 0x71], 4
mov byte [rsp + 0x79], 1
mov byte [rsp + 0x78], bl
mov byte [rsp + 0x70], bl
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x79]
lea rcx, [rsp + 0x71]
call fcn.140031a70
movzx r15d, byte [rsp + 0x70]
mov dword [rbp + 0xb8], r15d
movzx r12d, byte [rsp + 0x71]
lea rcx, [rbp + 0x1860]
call fcn.14003a810
lea rcx, [rbp + 0x500]
call fcn.140033ff0
bt esi, 9
jae 0x140037b63
lea rax, str.Automatic_Mute_on_Hibernate_is_set_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x207
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea r9, [rbp + 0x540]
lea r8, [0x1400a7310]
call fcn.14002d320
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.CAutoMuteOnHibernate
lea r8, [0x1400a6f38]
lea rcx, [rbp + 0x500]
call fcn.14002d200
mov edi, esi
shr edi, 0x1b
and dil, 1
cmp r12d, 2
jne 0x140037b87
mov ecx, esi
call fcn.140037560
test al, al
jne 0x140037b87
test dil, dil
jne 0x140037b87
mov dil, 1
jmp 0x140037b8a
xor dil, dil
mov byte [rbp + 0x1350], bl
xor eax, eax
mov qword [rbp + 0x1351], rax
mov word [rbp + 0x1359], ax
mov byte [rbp + 0x135b], al
test dil, dil
je 0x140037bcb
lea rcx, [rbp + 0x1350]
call qword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
je 0x140037bcb
movzx eax, byte [rbp + 0x1351]
shr al, 7
not al
and dil, al
lea rcx, [rbp + 0x3c0]
call fcn.140034980
test dil, dil
je 0x140037c3f
lea rcx, [rbp + 0x3c0]
call fcn.140034c00
test eax, eax
je 0x140037c31
lea r9, [rbp + 0x400]
lea r8, [0x1400a7190]
call fcn.14002d320
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.CBatterySaveMode
lea r8, [0x1400a6f38]
lea rcx, [rbp + 0x3c0]
call fcn.14002d200
jmp 0x140037c73
lea rax, str.Battery_save_mode_failed_to_initialize.
mov edx, 0x21e
jmp 0x140037c4b
lea rax, str.Battery_save_mode_does_not_support.
mov edx, 0x223
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov r8d, r15d
mov edx, r12d
lea rcx, [rbp + 0xba0]
call fcn.140006fc0
mov dword [rbp + 0x1144], esi
bt esi, 0xe
jae 0x140037d03
lea rax, str.Automatic_Skype_Detect_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x22c
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea rdi, str.skype.exe
mov r14d, 0x10
nop dword [rax]
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bed0
add rdi, 0x148
sub r14, 1
jne 0x140037ce0
lea r14, [0x1400868d0]
bt esi, 0x12
jae 0x140037d6c
lea rax, str.Automatic_Lync_Detect_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x236
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea rdi, str.communicator.exe
mov r14d, 4
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bed0
add rdi, 0x148
sub r14, 1
jne 0x140037d50
bt esi, 0x15
jae 0x140037d9c
lea rdi, [0x1400a5e50]
mov r14d, 2
nop
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bed0
add rdi, 0x148
sub r14, 1
jne 0x140037d80
lea rax, [0x140086830]
mov qword [rsp + 0x20], rax
lea r9, str.CameraName
lea r8, str.SOFTWAREWaves_AudioMaxxAudioGeneral
lea rcx, [rbp + 0x48]
call fcn.14002f3b0
mov rax, qword [rbp + 0x48]
cmp dword [rax - 0x10], ebx
je 0x140037ddb
lea rdx, [0x1400a5d00]
lea rcx, [rbp + 0xdb8]
call fcn.14000bed0
lea eax, [r15 - 9]
cmp eax, 1
ja 0x140037ee3
lea rdx, str.0h_b_
lea rcx, [rbp + 0xdb8]
call fcn.14000bed0
lea rdx, [0x1400a6230]
lea rcx, [rbp + 0xdb8]
call fcn.14000bed0
lea rdx, [0x1400a60e0]
lea rcx, [rbp + 0xdb8]
call fcn.14000bed0
bt esi, 0x1d
jb 0x140037ee3
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov edx, 0x6b
call qword [sym.imp.USER32.dll_LoadIconA]
test rax, rax
je 0x140037e71
mov dword [rbp + 0x1884], 2
mov qword [rbp + 0x1890], rax
cmp dword [rbp + 0x1868], ebx
je 0x140037e71
lea rdx, [rbp + 0x1870]
mov ecx, 1
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov edx, 0x6c
call qword [sym.imp.USER32.dll_LoadMenuA]
mov rcx, qword [rbp + 0x1a88]
test rax, rax
cmovne rcx, rax
mov qword [rbp + 0x1a88], rcx
cmp dword [rbp + 0x186c], ebx
jne 0x140037ed9
cmp dword [rbp + 0x1868], ebx
jne 0x140037ec0
lea rcx, [rbp + 0x1860]
call fcn.1400208e0
cmp dword [rbp + 0x1868], ebx
je 0x140037ed9
mov dword [rbp + 0x1884], 7
lea rdx, [rbp + 0x1870]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
mov dword [rbp + 0x186c], 1
mov rcx, qword [rbp + 0xdc0]
sub rcx, qword [rbp + 0xdb8]
movabs rax, 0x63e7063e7063e707
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140037f51
lea r9, [rbp + 0xbe0]
lea r8, [0x1400a7250]
call fcn.14002d320
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.AutoSubtypeOnAudioSession
lea r8, [0x1400a6f38]
lea rcx, [rbp + 0xba0]
call fcn.14002d200
lea rcx, [rbp + 0x13c0]
call fcn.14002fa30
mov qword [rbp + 0x1408], rbx
mov dword [rbp + 0x1410], ebx
lea rax, vtable.CInclinometerPresetOrientationControl.0
mov qword [rbp + 0x13c0], rax
mov dword [rbp + 0x141c], 0xf
mov qword [rbp + 0x1420], rbx
mov qword [rbp + 0x1428], rbx
mov qword [rbp + 0x1430], rbx
mov qword [rbp + 0x1438], rbx
mov qword [rbp + 0x1440], rbx
mov qword [rbp + 0x1448], rbx
mov dword [rbp + 0x1418], 0xffffffff
lea rcx, [rbp + 0x14d0]
call fcn.14002fa30
mov dword [rbp + 0x1518], 0xffffffff
lea rax, vtable.CAutoOrientationControl.0
mov qword [rbp + 0x14d0], rax
mov qword [rbp + 0x1528], rbx
lea rax, vtable.CAutoOrientationControl_Lenovo.0
mov qword [rbp + 0x128], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x140], bl
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
mov dword [rbp + 0x144], 0xffffffff
lea rcx, [rbp + 0x1470]
call fcn.14002fa30
mov dword [rbp + 0x14b8], ebx
lea rax, vtable.CIntelCustomControl.0
mov qword [rbp + 0x1470], rax
mov qword [rbp + 0x14c0], rbx
test r13b, r13b
je 0x140038084
cmp r12d, 5
jne 0x140038068
test r15d, r15d
jne 0x140038068
lea rcx, [rbp + 0x128]
call fcn.14000e330
test al, al
lea rax, str.CAutoOrientationControl_Lenovo::Initialize_____d
mov edx, 0x273
jmp 0x1400380a4
lea rcx, [rbp + 0x14d0]
call fcn.14000d020
test al, al
lea rax, str.CAutoOrientationControl::Initialize_MaxxVoice____d
mov edx, 0x278
jmp 0x1400380a4
bt esi, 0x10
jae 0x1400380d0
lea rcx, [rbp + 0x13c0]
call fcn.14000dad0
test al, al
lea rax, str.CInclinometerPresetOrientationControl::Initialize_____d
mov edx, 0x27e
mov ecx, ebx
setne cl
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
bt esi, 0x19
jae 0x14003811c
lea rcx, [rbp + 0x1470]
call fcn.140013470
mov ecx, ebx
test al, al
setne cl
mov dword [rsp + 0x30], ecx
lea rax, str.CIntelCustomControl::Initialize_____d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x284
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov qword [rbp + 0x268], rbx
mov qword [rbp + 0x278], rbx
mov dword [rbp + 0x270], ebx
mov qword [rbp + 0x280], rbx
mov dword [rbp + 0x288], ebx
lea rax, vtable.CKeyboardTimeManage.0
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x298], ebx
mov qword [rbp + 0x290], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2a0], xmm0
mov dword [rbp + 0x2b0], ebx
mov dword [rbp - 0x7c], ebx
mov qword [rbp + 0x15c8], rbx
mov qword [rbp + 0x15d0], rbx
mov dword [rbp + 0x15d8], ebx
mov byte [rbp + 0x15dc], bl
lea rax, vtable.CStreamMonitor.1.0
mov qword [rbp + 0x15c0], rax
lea rax, vtable.CStreamMonitor.0
mov qword [rbp + 0x15e0], rax
mov dword [rbp + 0x15e8], ebx
movdqa xmmword [rbp + 0x15f0], xmm0
mov qword [rbp + 0x1618], rbx
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1620], xmm1
mov dword [rbp + 0x1630], ebx
mov qword [rbp + 0x1840], rbx
mov qword [rbp + 0x1848], rbx
mov qword [rbp + 0x1850], rbx
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1634]
call fcn.14005db90
xor eax, eax
mov qword [rbp + 0x1600], rax
mov qword [rbp + 0x1608], rax
mov word [rbp + 0x1610], ax
mov dword [rbp - 0x80], ebx
mov r15, qword [0x1400a6bf0]
mov qword [rbp + 0x28], r15
mov qword [rbp - 0x60], r15
mov r12, qword [rbp + 0x150]
mov qword [rbp + 0x30], r12
mov qword [rbp - 0x58], r12
mov rax, qword [rbp + 0x4b8]
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov rdi, rbx
mov qword [rsp + 0x68], rbx
cmp qword [0x1400ab168], rbx
je 0x140038280
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rsi, qword [rsp + 0x60]
test rsi, rsi
je 0x140038270
mov rax, qword [0x1400ab168]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rdi, qword [rsp + 0x68]
jmp 0x140038285
mov rsi, qword [rsp + 0x60]
mov rax, qword [0x1400ab1e0]
mov r13, qword [rsp + 0x58]
test rax, rax
je 0x14003830e
lea r14, [0x1400ab1e0]
cmp r14, rsi
jae 0x1400382d8
cmp r13, r14
ja 0x1400382d8
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x1400382cc
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038305
mov rax, qword [r13 + r14*8]
jmp 0x140038302
cmp rsi, rdi
jne 0x1400382fd
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rax, qword [0x1400ab1e0]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038305
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rax, qword [0x1400ab188]
test rax, rax
je 0x140038392
lea r14, [0x1400ab188]
cmp r14, rsi
jae 0x14003835c
cmp r13, r14
ja 0x14003835c
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140038350
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038389
mov rax, qword [r13 + r14*8]
jmp 0x140038386
cmp rsi, rdi
jne 0x140038381
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rax, qword [0x1400ab188]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038389
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
test r15, r15
je 0x140038410
lea rax, [rbp - 0x60]
cmp rax, rsi
jae 0x1400383e1
lea rax, [rbp - 0x60]
cmp r13, rax
ja 0x1400383e1
lea r14, [rbp - 0x60]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x1400383d2
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038407
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x140038407
cmp rsi, rdi
jne 0x1400383ff
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038407
mov qword [rsi], r15
add rsi, 8
mov qword [rsp + 0x60], rsi
test r12, r12
je 0x14003848e
lea rax, [rbp - 0x58]
cmp rax, rsi
jae 0x14003845f
lea rax, [rbp - 0x58]
cmp r13, rax
ja 0x14003845f
lea r14, [rbp - 0x58]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140038450
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038485
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x140038485
cmp rsi, rdi
jne 0x14003847d
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038485
mov qword [rsi], r12
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rax, qword [rbp - 0x48]
test rax, rax
je 0x140038511
lea rcx, [rbp - 0x50]
cmp rcx, rsi
jae 0x1400384de
lea rcx, [rbp - 0x50]
cmp r13, rcx
ja 0x1400384de
lea r14, [rbp - 0x50]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x1400384d2
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140038508
mov rax, qword [r13 + r14*8]
jmp 0x140038505
cmp rsi, rdi
jne 0x140038500
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
mov rax, qword [rbp - 0x48]
test rsi, rsi
je 0x140038508
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
lea r15, [0x1400ab300]
lea r12, [0x1400b0660]
nop
mov r14, qword [r15]
mov qword [rbp + 0x18], r14
test r14, r14
je 0x1400385a5
lea rax, [rbp + 0x18]
cmp rax, rsi
jae 0x140038576
lea rax, [rbp + 0x18]
cmp r13, rax
ja 0x140038576
lea r14, [rbp + 0x18]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140038567
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003859c
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x14003859c
cmp rsi, rdi
jne 0x140038594
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003859c
mov qword [rsi], r14
add rsi, 8
mov qword [rsp + 0x60], rsi
add r15, 0x2e0
cmp r15, r12
jl 0x140038520
cmp byte [0x1400ab178], bl
je 0x140038658
cmp qword [0x1400ab180], rbx
jne 0x140038658
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400ab180], rax
test rax, rax
je 0x140038658
lea r14, [0x1400ab180]
cmp r14, rsi
jae 0x140038627
cmp r13, r14
ja 0x140038627
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x14003861b
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003864f
mov rax, qword [r13 + r14*8]
jmp 0x14003864c
cmp rsi, rdi
jne 0x140038647
lea rcx, [rsp + 0x58]
call fcn.1400059e0
mov rax, qword [0x1400ab180]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003864f
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
lea rcx, [rbp + 0x9b0]
call fcn.1400334c0
mov dword [rbp + 0x20], ebx
mov dword [rbp + 0x24], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rbx
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x50]
call fcn.14002dc60
mov rdx, qword [rbp + 0x50]
cmp dword [rbp + 0xa00], ebx
jne 0x1400386f4
mov rax, qword [rbp + 0x58]
sub rax, rdx
sar rax, 2
test rax, rax
je 0x1400386f4
mov dword [rbp + 0xa04], ebx
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xb68]
call fcn.140033e00
lea rax, [0x140036960]
mov qword [rbp + 0xb90], rax
lea rcx, [rbp + 0x9b0]
call fcn.140033890
lea rdx, [rbp + 0x9f8]
lea rcx, [rbp + 0xa08]
call fcn.140002040
mov dword [rbp + 0xa00], eax
mov rdx, qword [rbp + 0x50]
test rdx, rdx
je 0x140038709
mov r8, qword [rbp + 0x60]
sub r8, rdx
sar r8, 2
call fcn.14001eb70
lea r9, [rbp + 0x9f0]
lea r8, [0x1400a70d0]
call fcn.14002d320
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.WavesFXConnection_Render
lea r8, [0x1400a6f38]
lea rcx, [rbp + 0x9b0]
call fcn.14002d200
lea rcx, [rbp + 0x7c0]
call fcn.1400334c0
mov dword [rbp - 0x70], ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rbx
lea r8, [rbp - 0x6c]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x68]
call fcn.14002dc60
mov rdx, qword [rbp + 0x68]
cmp dword [rbp + 0x810], ebx
jne 0x1400387e5
mov rax, qword [rbp + 0x70]
sub rax, rdx
sar rax, 2
test rax, rax
je 0x1400387e5
mov dword [rbp + 0x814], 1
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x978]
call fcn.140033e00
lea rax, [0x140036980]
mov qword [rbp + 0x9a0], rax
lea rcx, [rbp + 0x7c0]
call fcn.140033890
lea rdx, [rbp + 0x808]
lea rcx, [rbp + 0x818]
call fcn.140002040
mov dword [rbp + 0x810], eax
mov rdx, qword [rbp + 0x68]
test rdx, rdx
je 0x1400387fa
mov r8, qword [rbp + 0x78]
sub r8, rdx
sar r8, 2
call fcn.14001eb70
lea r9, [rbp + 0x800]
lea r8, [0x1400a70d0]
call fcn.14002d320
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.WavesFXConnection_Capture
lea r8, [0x1400a6f38]
lea rcx, [rbp + 0x7c0]
call fcn.14002d200
mov dword [rbp + 0x220], 0x466
movsd xmm6, qword [0x14008c750]
movsd qword [rbp + 0x228], xmm6
mov dword [rbp + 0x230], 0x468
movsd qword [rbp + 0x238], xmm6
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
call fcn.140021100
mov rdi, rax
mov qword [rbp - 0x40], rax
lea r14, [rbp + 0x220]
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.14003a1b0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x318]
lea rcx, [rbp - 0x40]
call fcn.14003a1e0
add r14, 0x10
lea rax, [rbp + 0x240]
cmp r14, rax
je 0x1400388c2
mov rdi, qword [rbp - 0x40]
jmp 0x140038884
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x7c0]
call fcn.140033c60
mov r15d, eax
mov dword [rsp + 0x74], eax
mov r8, qword [rbp - 0x40]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x40]
call fcn.140039fe0
mov rcx, qword [rbp - 0x40]
call fcn.14003ccec
mov dword [rbp + 0xc0], 0x134
movsd qword [rbp + 0xc8], xmm6
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
call fcn.140021100
mov rdi, rax
mov qword [rbp - 0x18], rax
lea r14, [rbp + 0xc0]
nop dword [rax]
mov rdx, r14
lea rcx, [rbp - 0x18]
call fcn.14003a1b0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x328]
lea rcx, [rbp - 0x18]
call fcn.14003a1e0
add r14, 0x10
lea rax, [rbp + 0xd0]
cmp r14, rax
je 0x14003896e
mov rdi, qword [rbp - 0x18]
jmp 0x140038930
mov r12d, 1
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x9b0]
call fcn.140033c60
test eax, eax
je 0x140038a1d
mov dword [rbp + 0xd0], 0x447
movsd qword [rbp + 0xd8], xmm6
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
call fcn.140021100
mov rdi, rax
mov qword [rbp - 8], rax
lea r14, [rbp + 0xd0]
nop dword [rax]
mov rdx, r14
lea rcx, [rbp - 8]
call fcn.14003a1b0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x330]
lea rcx, [rbp - 8]
call fcn.14003a1e0
add r14, 0x10
lea rax, [rbp + 0xe0]
cmp r14, rax
je 0x1400389fe
mov rdi, qword [rbp - 8]
jmp 0x1400389c0
mov r12d, 3
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x7c0]
call fcn.140033c60
test eax, eax
lea edi, [r12 - 2]
jne 0x140038a1f
mov edi, ebx
mov dword [rsp + 0x54], edi
test r12b, 2
je 0x140038a50
and r12d, 0xfffffffd
mov r8, qword [rbp - 8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x338]
lea rcx, [rbp - 8]
call fcn.140039fe0
mov rcx, qword [rbp - 8]
call fcn.14003ccec
and r12d, 0xfffffffe
mov dword [rsp + 0x7c], r12d
mov r8, qword [rbp - 0x18]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x350]
lea rcx, [rbp - 0x18]
call fcn.140039fe0
mov rcx, qword [rbp - 0x18]
call fcn.14003ccec
movzx r14d, byte [0x1400ab178]
mov byte [rsp + 0x50], r14b
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
nop
cmp dword [rbp - 0x80], 0
jne 0x1400391e9
test edi, edi
je 0x14003924b
mov qword [rsp + 0x30], r8
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x2db
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov qword [rbp + 0x1348], 0xf
mov qword [rbp + 0x1340], rbx
mov byte [rbp + 0x1330], 0
mov qword [rbp + 0x13b8], 0xf
mov qword [rbp + 0x13b0], rbx
mov byte [rbp + 0x13a0], 0
lea rcx, [rbp + 0x1360]
call fcn.14001e4d0
lea rax, vtable.CEndpointList.0
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rbx
mov qword [rbp + 0x90], rbx
call fcn.140006470
mov qword [rbp + 0x88], rax
mov byte [rbp + 0x98], 0
xor r9d, r9d
mov edx, 1
mov r8d, edx
lea rcx, [rbp + 0x80]
call fcn.14001d9c0
lea rdx, [rbp + 0x1360]
cmp qword [rbp + 0x1378], 0x10
cmovae rdx, qword [rbp + 0x1360]
mov qword [rbp + 0x1398], 0xf
mov qword [rbp + 0x1390], rbx
mov byte [rbp + 0x1380], 0
cmp byte [rdx], 0
jne 0x140038ba4
mov r8, rbx
jmp 0x140038bba
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140038bb0
lea rcx, [rbp + 0x1380]
call fcn.140002500
lea r8, [rbp + 0x1380]
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x88]
call fcn.14001f500
mov rax, qword [rbp + 0x358]
mov rdi, qword [rax + 0x40]
mov rax, qword [rbp + 0x1398]
cmp rax, 0x10
jb 0x140038c3f
inc rax
mov rcx, qword [rbp + 0x1380]
cmp rax, 0x1000
jb 0x140038c3a
test cl, 0x1f
jne 0x140039a65
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140039a5f
sub rcx, rax
cmp rcx, 8
jb 0x140039a59
cmp rcx, 0x27
ja 0x140039a53
mov rcx, rax
call fcn.14003ccec
mov qword [rbp + 0x1398], 0xf
mov qword [rbp + 0x1390], rbx
mov byte [rbp + 0x1380], 0
test rdi, rdi
je 0x140038e25
mov dword [rbp - 0x6c], ebx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140038e25
mov rax, qword [rcx]
lea rdx, [rbp - 0x6c]
call qword [rax + 0x30]
cmp dword [rbp - 0x6c], 1
jne 0x140038e25
xor edx, edx
mov rcx, rdi
call fcn.14001d830
test rax, rax
je 0x140038e25
or r12d, 4
mov dword [rsp + 0x7c], r12d
lea r14, [rbp + 0x1360]
cmp qword [rbp + 0x1378], 0x10
cmovae r14, qword [rbp + 0x1360]
lea rax, [rbp + 0x1538]
mov qword [rbp + 0x1530], rax
test r14, r14
jne 0x140038cd7
mov rdx, rbx
mov qword [rbp + 0x1530], rbx
jmp 0x140038d45
or rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140038ce0
inc edi
lea r8, [rbp + 0x1538]
mov edx, edi
lea rcx, [rbp + 0x1530]
call fcn.140002d00
movsxd rdx, edi
mov r9, rdx
mov r8, r14
mov rcx, qword [rbp + 0x1530]
call fcn.140001490
test eax, eax
je 0x140038d3e
cmp eax, 0xc
je 0x140039a81
cmp eax, 0x16
je 0x140039a76
cmp eax, 0x22
je 0x140039a76
cmp eax, 0x50
jne 0x140039a6b
mov rdx, qword [rbp + 0x1530]
mov qword [rbp + 0x2d8], 0xf
mov qword [rbp + 0x2d0], rbx
mov byte [rbp + 0x2c0], 0
cmp byte [rdx], 0
jne 0x140038d68
mov r8, rbx
jmp 0x140038d7a
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140038d70
lea rcx, [rbp + 0x2c0]
call fcn.140002500
lea r8, [rbp + 0x13a0]
lea rdx, [rbp + 0x2c0]
call fcn.140036b20
test al, al
setne dil
test r12b, 4
je 0x140038dc6
and r12d, 0xfffffffb
mov dword [rsp + 0x7c], r12d
lea rax, [rbp + 0x1538]
mov rcx, qword [rbp + 0x1530]
cmp rcx, rax
je 0x140038dc6
call fcn.14005fb6c
test dil, dil
je 0x140038e25
lea rax, str.Query_by_default_capture_endpoint_string
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 3
lea r8, [0x1400a73c8]
mov edx, 0x2f3
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x13a0]
lea rcx, [rbp + 0x1330]
call fcn.140002630
jmp 0x140038ff8
lea rax, str.Query_endpoint_string_from_property1_with_type_capture_LFX
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 3
lea r8, [0x1400a73c8]
mov edx, 0x2f8
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
call fcn.140006470
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x20], 4
lea rcx, [rbp - 0x30]
call fcn.140018a30
lea rdx, [rbp + 0x1450]
lea rcx, [rbp - 0x30]
call fcn.140019680
mov rdi, rax
lea rax, [rbp + 0x1330]
cmp rax, rdi
je 0x140038f25
mov rcx, qword [rbp + 0x1348]
cmp rcx, 0x10
jb 0x140038efc
inc rcx
mov rdx, qword [rbp + 0x1330]
cmp rcx, 0x1000
jb 0x140038ef4
test dl, 0x1f
jne 0x140039a9e
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x140039a98
sub rdx, rax
cmp rdx, 8
jb 0x140039a92
cmp rdx, 0x27
ja 0x140039a8c
mov rdx, rax
mov rcx, rdx
call fcn.14003ccec
mov qword [rbp + 0x1348], 0xf
mov qword [rbp + 0x1340], rbx
mov byte [rbp + 0x1330], 0
mov rdx, rdi
lea rcx, [rbp + 0x1330]
call fcn.140002760
nop
mov rax, qword [rbp + 0x1468]
cmp rax, 0x10
jb 0x140038f7a
inc rax
mov rcx, qword [rbp + 0x1450]
cmp rax, 0x1000
jb 0x140038f74
test cl, 0x1f
jne 0x140039ab6
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140039ab0
sub rcx, rax
cmp rcx, 8
jb 0x140039aaa
cmp rcx, 0x27
ja 0x140039aa4
mov rcx, rax
call fcn.14003ccec
nop
mov rax, qword [rbp - 0x30]
mov r14, qword [rax + 8]
mov rdi, r14
cmp byte [r14 + 0x19], 0
jne 0x140038fbe
nop dword [rax]
mov rdx, qword [rdi + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14001af30
mov rdi, qword [rdi]
lea rcx, [r14 + 0x28]
call fcn.140002380
mov rcx, r14
call fcn.14003ccec
mov r14, rdi
cmp byte [rdi + 0x19], 0
je 0x140038f90
mov rax, qword [rbp - 0x30]
mov qword [rax + 8], rax
mov rax, qword [rbp - 0x30]
mov qword [rax], rax
mov rax, qword [rbp - 0x30]
mov qword [rax + 0x10], rax
mov qword [rbp - 0x28], rbx
mov r8, qword [rbp - 0x30]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x340]
lea rcx, [rbp - 0x30]
call fcn.14001b0d0
mov rcx, qword [rbp - 0x30]
call fcn.14003ccec
lea rdx, [rbp + 0x1330]
cmp qword [rbp + 0x1348], 0x10
cmovae rdx, qword [rbp + 0x1330]
lea rax, [rbp + 0x1ad8]
mov qword [rbp + 0x1ad0], rax
mov r8d, 3
lea rcx, [rbp + 0x1ad0]
call fcn.140005bc0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, qword [rbp + 0x1ad0]
xor edx, edx
lea rcx, [rbp + 0x15c0]
call fcn.140031fc0
mov edi, ebx
test eax, eax
setns dil
mov dword [rbp - 0x80], edi
lea rax, [rbp + 0x1ad8]
mov rcx, qword [rbp + 0x1ad0]
cmp rcx, rax
je 0x14003906f
call fcn.14005fb6c
lea rax, vtable.CEndpointList.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.14001ddf0
mov r8, qword [rbp + 0x88]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x88]
call fcn.140005d50
mov rcx, qword [rbp + 0x88]
call fcn.14003ccec
mov rax, qword [rbp + 0x1378]
cmp rax, 0x10
jb 0x140039109
mov rcx, qword [rbp + 0x1360]
inc rax
cmp rax, 0x1000
jb 0x140039104
test cl, 0x1f
jne 0x140039ace
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140039ac8
sub rcx, rax
cmp rcx, 8
jb 0x140039ac2
cmp rcx, 0x27
ja 0x140039abc
mov rcx, rax
call fcn.14003ccec
mov qword [rbp + 0x1378], 0xf
mov qword [rbp + 0x1370], rbx
mov byte [rbp + 0x1360], 0
mov rax, qword [rbp + 0x13b8]
cmp rax, 0x10
jb 0x140039176
mov rcx, qword [rbp + 0x13a0]
inc rax
cmp rax, 0x1000
jb 0x140039171
test cl, 0x1f
jne 0x140039ae6
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140039ae0
sub rcx, rax
cmp rcx, 8
jb 0x140039ada
cmp rcx, 0x27
ja 0x140039ad4
mov rcx, rax
call fcn.14003ccec
mov qword [rbp + 0x13b8], 0xf
mov qword [rbp + 0x13b0], rbx
mov byte [rbp + 0x13a0], 0
mov rax, qword [rbp + 0x1348]
cmp rax, 0x10
jb 0x14003923e
mov rcx, qword [rbp + 0x1330]
inc rax
cmp rax, 0x1000
jb 0x1400391e2
test cl, 0x1f
jne 0x140039afe
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140039af8
sub rcx, rax
cmp rcx, 8
jb 0x140039af2
cmp rcx, 0x27
ja 0x140039aec
mov rcx, rax
call fcn.14003ccec
jmp 0x14003923e
test edi, edi
jne 0x14003924b
mov qword [rsp + 0x30], rdx
lea rdi, [0x1400868d0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x301
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov edx, 1
lea rcx, [rbp + 0x15c0]
call fcn.140031e20
mov dword [rbp - 0x80], ebx
lea rcx, str.Unhooking_the_keyboard
jmp 0x140039252
lea rcx, str.Unhooking_the_keyboard
movzx r14d, byte [rsp + 0x50]
lea rdi, [0x1400868d0]
cmp dword [rbp - 0x7c], 0
jne 0x14003926e
test r15d, r15d
je 0x1400392ad
lea rcx, [rbp + 0x260]
call fcn.1400235f0
mov dword [rbp - 0x7c], eax
jmp 0x1400392ad
test r15d, r15d
jne 0x1400392ad
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
lea r9d, [r15 + 2]
lea r8, [0x1400a73c8]
mov edx, 0x311
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea rcx, [rbp + 0x260]
call fcn.1400236e0
mov dword [rbp - 0x7c], ebx
test r14b, r14b
je 0x1400393a5
lea rdi, [0x1400ab230]
mov r14d, 0x1d
mov rcx, rdi
call fcn.140025e00
add rdi, 0x2e0
sub r14, 1
jne 0x1400392c3
mov rcx, qword [0x1400ab170]
test rcx, rcx
jne 0x14003937d
lea rcx, [rbp + 0x38]
call fcn.140026180
lea rax, [0x1400ab170]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 0x11]
xor r8d, r8d
mov rdx, qword [rbp + 0x38]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140039333
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [0x1400ab170]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rcx, rcx
je 0x140039363
mov rdi, qword [rbp - 0x60]
mov qword [rbp + 0x28], rdi
mov rdi, qword [rbp - 0x58]
mov qword [rbp + 0x30], rdi
mov rdi, qword [rbp - 0x50]
mov qword [rbp - 0x48], rdi
jmp 0x14003937d
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x48], rax
jmp 0x14003939d
mov r9, qword [0x1400ab180]
test r9, r9
je 0x14003939d
mov dword [rsp + 0x20], 1
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r14b, r14b
mov byte [rsp + 0x50], r14b
mov rdi, rsi
sub rdi, r13
sar rdi, 3
mov dword [rsp + 0x20], 6
mov r9d, 0x1cff
or r8d, 0xffffffff
mov rdx, r13
mov ecx, edi
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
mov ecx, eax
cmp rcx, rdi
jae 0x1400399c7
cdqe
mov r15, qword [r13 + rax*8]
cmp qword [0x1400ab1e0], r15
jne 0x1400395f4
lea rax, str.Capture_Event:_Param_Changed
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x337
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov dword [rbp + 0x240], 0x466
movsd qword [rbp + 0x248], xmm6
mov dword [rbp + 0x250], 0x468
movsd qword [rbp + 0x258], xmm6
lea rax, [rbp + 0x240]
mov qword [rbp + 0x180], rax
lea rax, [rbp + 0x260]
mov qword [rbp + 0x188], rax
movaps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x370], xmm0
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x190]
call fcn.140039e90
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x7c0]
call fcn.140033c60
mov r15d, eax
mov dword [rsp + 0x74], eax
lea rcx, [rbp + 0x190]
call fcn.140039e60
mov dword [rbp + 0xe0], 0x134
movsd qword [rbp + 0xe8], xmm6
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x1a0], rax
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x1a8], rax
movaps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x380], xmm0
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x1d0]
call fcn.140039e90
or r12d, 8
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x9b0]
call fcn.140033c60
test eax, eax
je 0x140039589
mov dword [rbp + 0x100], 0x447
movsd qword [rbp + 0x108], xmm6
lea rax, [rbp + 0x100]
mov qword [rbp + 0x1b0], rax
lea rax, [rbp + 0x110]
mov qword [rbp + 0x1b8], rax
movaps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x2e0], xmm0
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x1c0]
call fcn.140039e90
or r12d, 0x10
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x7c0]
call fcn.140033c60
test eax, eax
mov edi, 1
jne 0x14003958b
mov edi, ebx
mov dword [rsp + 0x54], edi
test r12b, 0x10
je 0x1400395a5
and r12d, 0xffffffef
lea rcx, [rbp + 0x1c0]
call fcn.140039e60
and r12d, 0xfffffff7
mov dword [rsp + 0x7c], r12d
lea rcx, [rbp + 0x1d0]
call fcn.140039e60
lea rcx, [rbp + 0xba0]
call fcn.140036830
test al, al
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x140038aa0
lea rcx, [rbp + 0xba0]
call fcn.140009330
jmp 0x140038a89
cmp qword [0x1400ab168], r15
je 0x140039b04
cmp qword [0x1400ab188], r15
jne 0x14003977b
lea rax, str.Render_Event:_Param_Changed
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x34b
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea rcx, [rbp + 0xba0]
call fcn.140036830
test al, al
je 0x140039665
lea rcx, [rbp + 0xba0]
call fcn.140009330
mov dword [rbp + 0x110], 0x134
movsd qword [rbp + 0x118], xmm6
lea rax, [rbp + 0x110]
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x120]
mov qword [rbp + 0x1e8], rax
movaps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x2f0], xmm0
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x200]
call fcn.140039e90
or r12d, 0x20
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x9b0]
call fcn.140033c60
test eax, eax
je 0x140039740
mov dword [rbp + 0xf0], 0x447
movsd qword [rbp + 0xf8], xmm6
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x210], rax
lea rax, [rbp + 0x100]
mov qword [rbp + 0x218], rax
movaps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x300], xmm0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x1f0]
call fcn.140039e90
or r12d, 0x40
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x7c0]
call fcn.140033c60
test eax, eax
mov edi, 1
jne 0x140039742
mov edi, ebx
mov dword [rsp + 0x54], edi
test r12b, 0x40
je 0x14003975c
and r12d, 0xffffffbf
lea rcx, [rbp + 0x1f0]
call fcn.140039e60
and r12d, 0xffffffdf
mov dword [rsp + 0x7c], r12d
lea rcx, [rbp + 0x200]
call fcn.140039e60
mov r15d, dword [rsp + 0x74]
jmp 0x140038a89
cmp qword [rbp + 0x28], r15
jne 0x140039824
lea rax, str.Event:_Jack_Sense
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x359
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
call fcn.140022fb0
call fcn.140022f50
test eax, eax
je 0x14003980a
call fcn.140036290
test eax, eax
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x140038aa0
lea rcx, [0x1400b0590]
call fcn.140036450
jmp 0x140038a89
lea rcx, [0x1400b0598]
call fcn.1400355d0
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x140038a89
cmp qword [rbp + 0x30], r15
jne 0x140039884
lea rax, str.Event:_Mocca_Mode
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x36c
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov edx, 1
lea rcx, [rbp + 0x128]
call fcn.14000e6d0
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x140038a89
cmp qword [rbp - 0x48], r15
jne 0x1400398df
lea rax, str.Event:_Battery_Save
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x371
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea rcx, [rbp + 0x3c0]
call fcn.140035210
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x140038a89
cmp qword [0x1400ab180], r15
jne 0x140039934
lea rax, str.Event:_Realtek_Jack_Change_Event
mov qword [rsp + 0x30], rax
lea rax, [0x1400868d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x376
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov r14b, 1
mov edi, dword [rsp + 0x54]
mov r15d, dword [rsp + 0x74]
jmp 0x140038a84
lea rdi, [0x1400ab300]
lea r14, [0x1400ab230]
mov r12d, 0x1d
lea r13, [0x1400868d0]
lea rsi, str.Event:Realtek_Jack_Sense
cmp qword [rdi], r15
jne 0x140039990
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x380
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov rcx, r14
call fcn.140028580
add r14, 0x2e0
add rdi, 0x2e0
sub r12, 1
jne 0x140039956
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x7c]
mov edi, dword [rsp + 0x54]
movzx r14d, byte [rsp + 0x50]
mov r15d, dword [rsp + 0x74]
jmp 0x140038a89
mov edi, dword [rsp + 0x54]
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
jne 0x140038aa0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x140038aa0
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140039a20
jmp 0x140038a89
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
mov ecx, 0x80004005
call fcn.1400015b0
int3
mov ecx, 0x80070057
call fcn.1400015b0
int3
mov ecx, 0x8007000e
call fcn.1400015b0
nop
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
nop
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
call fcn.14005f9bc
int3
lea rax, str.Event:_Stop
mov qword [rsp + 0x30], rax
lea rdi, [0x1400868d0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x346
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
mov qword [rsp + 0x60], r13
lea rcx, [rbp + 0x14d0]
call fcn.14000cff0
lea rcx, [rbp + 0x128]
call fcn.14000e660
lea rcx, [rbp + 0x13c0]
call fcn.14000da20
lea rcx, [rbp + 0x1470]
call fcn.140013650
lea rax, str.Cleaning...
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x39b
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea rcx, [rbp + 0x260]
call fcn.1400236e0
lea rcx, vtable.CJackSense.0
call fcn.140022d00
cmp qword [0x1400b0598], 0
je 0x140039bd6
lea rcx, [0x1400b0590]
call fcn.14002c400
cmp qword [rbp + 0x508], 0
je 0x140039bec
lea rcx, [rbp + 0x500]
call fcn.14002c400
cmp qword [rbp + 0xba8], 0
je 0x140039c02
lea rcx, [rbp + 0xba0]
call fcn.14002c400
cmp qword [rbp + 0x3c8], 0
je 0x140039c18
lea rcx, [rbp + 0x3c0]
call fcn.14002c400
cmp qword [rbp + 0x618], 0
je 0x140039c2e
lea rcx, [rbp + 0x610]
call fcn.14002c400
lea rcx, [rbp + 0x660]
call fcn.1400020e0
cmp qword [rbp + 0x9b8], 0
je 0x140039c50
lea rcx, [rbp + 0x9b0]
call fcn.14002c400
lea rcx, [rbp + 0x9b0]
call fcn.1400336e0
cmp qword [rbp + 0x7c8], 0
je 0x140039c72
lea rcx, [rbp + 0x7c0]
call fcn.14002c400
lea rcx, [rbp + 0x7c0]
call fcn.1400336e0
lea rax, str.Finished
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a73c8]
mov edx, 0x3c8
lea rcx, str.WavesSvc.cpp
call fcn.140002f50
lea rcx, [rbp + 0x7c0]
call fcn.1400335f0
lea rcx, [rbp + 0x9b0]
call fcn.1400335f0
lea rcx, [rsp + 0x58]
call fcn.1400057a0
lea rcx, [rbp + 0x15c0]
call fcn.140031dd0
lea rcx, [rbp + 0x260]
call fcn.1400235a0
lea rax, vtable.CIntelCustomSensor.0
mov qword [rbp + 0x1470], rax
lea rcx, [rbp + 0x1470]
call fcn.14002fb50
lea rax, vtable.CAutoOrientationControl_Lenovo.0
mov qword [rbp + 0x128], rax
lea rcx, [rbp + 0x128]
call fcn.14000e660
lea rcx, [rbp + 0x14d0]
call fcn.14000cf90
lea rcx, [rbp + 0x13c0]
call fcn.14000d9e0
lea rcx, [rbp + 0x48]
call fcn.140002360
lea rcx, [rbp + 0xba0]
call fcn.140007390
lea rcx, [rbp + 0x3c0]
call fcn.140034b20
lea rcx, [rbp + 0x500]
call fcn.1400341a0
lea rcx, [rbp + 0x1860]
call fcn.14003a990
lea rcx, [rbp + 0x610]
call fcn.140036860
lea r14, [0x1400ab230]
mov r15d, 0x1d
mov rcx, qword [0x1400ab168]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400ab180]
test rcx, rcx
je 0x140039db0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400ab180], rbx
mov rcx, qword [0x1400ab170]
test rcx, rcx
je 0x140039dc9
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [0x1400ab170], rbx
mov rcx, qword [0x1400ab188]
test rcx, rcx
je 0x140039de2
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400ab188], rbx
mov rcx, qword [0x1400ab1e0]
test rcx, rcx
je 0x140039e00
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400ab1e0], rbx
nop dword [rax + rax]
mov rcx, r14
call fcn.14002a1c0
add r14, 0x2e0
sub r15, 1
jne 0x140039e00
call qword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov rcx, qword [rbp + 0x1fe0]
xor rcx, rsp
call fcn.14003cd10
lea r11, [rsp + 0x2100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret