joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140096440
Capabilities:
Print debug messages

Disassembly:
push rbx
sub rsp, 0x40
mov rcx, qword [rcx + 0x18]
xor ebx, ebx
test rcx, rcx
je 0x140096506
mov qword [rsp + 0x30], rbx
lea r8d, [rbx + 3]
add rcx, 4
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x58], rdi
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x14009649d
lea rcx, str.GetInstalledSoundeffects:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x140096501
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1d6070
mov rcx, rdi
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400964ee
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.GetInstalledSoundeffects:_DeviceIoControl:_IOCTL_HDAUD_GET_VIA_DRVSUPPORT3RDPRTEFTS_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x140096501
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, dword [rsp + 0x50]
mov dword [rsp + 0x50], r11d
mov rdi, qword [rsp + 0x58]
movzx ecx, byte [rsp + 0x50]
and cl, 2
cmp cl, 2
sete bl
mov eax, ebx
add rsp, 0x40
pop rbx
ret

Function at 0x140096520
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
sub rsp, 0x40
mov rcx, qword [rcx + 0x18]
xor ebx, ebx
mov edi, edx
test rcx, rcx
je 0x1400965ec
mov qword [rsp + 0x30], rbx
lea r8d, [rbx + 3]
add rcx, 4
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rsi, rax
jne 0x140096583
lea rcx, str.GetInstalledSoundeffects:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x1400965e7
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1d6070
mov rcx, rsi
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400965d4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.GetInstalledSoundeffects:_DeviceIoControl:_IOCTL_HDAUD_GET_VIA_DRVSUPPORT3RDPRTEFTS_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x1400965e7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, dword [rsp + 0x50]
mov dword [rsp + 0x50], r11d
mov rsi, qword [rsp + 0x58]
test byte [rsp + 0x50], 4
je 0x140096610
lea rax, [0x14018ce38]
nop
nop
cmp dword [rax], edi
je 0x14009661d
add ebx, 1
add rax, 4
cmp ebx, 0xa
jb 0x140096600
xor eax, eax
mov rbx, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
mov eax, 1
mov rbx, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x1400968d0
Capabilities:
Print debug messages

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov esi, edx
mov rcx, qword [rcx + 0x18]
xor edi, edi
test rcx, rcx
je 0x14009699f
mov dword [rsp + 0x70], edi
add rcx, 4
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [rdi + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140096935
lea rcx, str.GetInstalledSoundeffects:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14009699f
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1d6070
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140096989
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.GetInstalledSoundeffects:_DeviceIoControl:_IOCTL_HDAUD_GET_VIA_DRVSUPPORT3RDPRTEFTS_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x14009699f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, dword [rsp + 0x70]
mov dword [rsp + 0x80], r11d
call fcn.1400cc6e8
mov r11, rax
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x1400969be
mov ecx, 0x80004005
call fcn.1400025a0
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov ebx, dword [rsp + 0x80]
mov r8d, ebx
lea rdx, str._________d_________n
lea rcx, [rsp + 0x40]
call fcn.1400029a0
test bl, 0x10
je 0x140096a54
lea rax, [0x14018d590]
cmp dword [rax], esi
je 0x140096a2c
add edi, 1
add rax, 4
cmp edi, 6
jb 0x1400969f7
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140096a28
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.DSOUND.dll_DirectSoundCaptureEnumerateW]
xor eax, eax
jmp 0x140096a77
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140096a4d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.DSOUND.dll_DirectSoundCaptureEnumerateW]
mov eax, 1
jmp 0x140096a77
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140096a75
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.DSOUND.dll_DirectSoundCaptureEnumerateW]
xor eax, eax
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x140096aa0
Capabilities:
Print debug messages

Disassembly:
push rsi
sub rsp, 0x40
mov rcx, qword [rcx + 0x18]
xor esi, esi
test rcx, rcx
je 0x140096b7f
mov qword [rsp + 0x30], rsi
lea r8d, [rsi + 3]
add rcx, 4
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140096b08
lea rcx, str.GetHDMIDeviceActive:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x68]
mov eax, esi
add rsp, 0x40
pop rsi
ret
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1d6078
mov rcx, rdi
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x60], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
mov rbx, qword [rsp + 0x60]
jne 0x140096b70
lea rcx, str.GetHDMIDeviceActive:_DeviceIoControl:_IOCTL_HDAUD_GET_DIGITAL_HDMI_DEV_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x68]
mov eax, esi
add rsp, 0x40
pop rsi
ret
mov eax, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rsi
ret
mov eax, esi
add rsp, 0x40
pop rsi
ret

Function at 0x140096b90
Capabilities:
Print debug messages

Disassembly:
push rbx
sub rsp, 0x40
mov rcx, qword [rcx + 0x18]
mov dword [rsp + 0x58], edx
test rcx, rcx
jne 0x140096bad
xor ebx, ebx
mov eax, ebx
add rsp, 0x40
pop rbx
ret
xor ebx, ebx
add rcx, 4
xor r9d, r9d
mov qword [rsp + 0x30], rbx
lea r8d, [rbx + 3]
mov edx, 0xc0000000
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140096bfe
lea rcx, str.SetHDMI2DeviceActive:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x60]
mov eax, ebx
add rsp, 0x40
pop rbx
ret
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x50]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov r9d, 4
mov edx, 0x1d60c4
mov rcx, rdi
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140096c56
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.SetHDMI2DeviceActive:_DeviceIoControl:_IOCTL_HDAUD_SET_DIGITAL_HDMI2_DEV_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x60]
mov eax, ebx
add rsp, 0x40
pop rbx
ret
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rsp + 0x60]
mov eax, 1
add rsp, 0x40
pop rbx
ret
Function at 0x140096c70
Capabilities:
Print debug messages

Disassembly:
push rsi
sub rsp, 0x40
mov rcx, qword [rcx + 0x18]
xor esi, esi
test rcx, rcx
je 0x140096d4f
mov qword [rsp + 0x30], rsi
lea r8d, [rsi + 3]
add rcx, 4
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140096cd8
lea rcx, str.GetHDMI2DeviceActive:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x68]
mov eax, esi
add rsp, 0x40
pop rsi
ret
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1d60c0
mov rcx, rdi
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x60], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
mov rbx, qword [rsp + 0x60]
jne 0x140096d40
lea rcx, str.GetHDMI2DeviceActive:_DeviceIoControl:_IOCTL_HDAUD_GET_DIGITAL_HDMI2_DEV_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x68]
mov eax, esi
add rsp, 0x40
pop rsi
ret
mov eax, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rsi
ret
mov eax, esi
add rsp, 0x40
pop rsi
ret

Function at 0x140096d60
Capabilities:
Print debug messages

Disassembly:
push rbx
sub rsp, 0x40
mov rcx, qword [rcx + 0x18]
mov dword [rsp + 0x58], edx
test rcx, rcx
jne 0x140096d7d
xor ebx, ebx
mov eax, ebx
add rsp, 0x40
pop rbx
ret
xor ebx, ebx
add rcx, 4
xor r9d, r9d
mov qword [rsp + 0x30], rbx
lea r8d, [rbx + 3]
mov edx, 0xc0000000
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140096dce
lea rcx, str.SetForteMediaAGC:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x60]
mov eax, ebx
add rsp, 0x40
pop rbx
ret
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x50]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov r9d, 4
mov edx, 0x1da0f4
mov rcx, rdi
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140096e26
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.SetForteMediaAGC:_DeviceIoControl:_IOCTL_HDAUD_SET_FORTEMEDIA_SAMSOFT_AGC_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x60]
mov eax, ebx
add rsp, 0x40
pop rbx
ret
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rsp + 0x60]
mov eax, 1
add rsp, 0x40
pop rbx
ret
Function at 0x140096e40
Capabilities:
Print debug messages

Disassembly:
push rbx
sub rsp, 0x40
mov rcx, qword [rcx + 0x18]
xor ebx, ebx
test rcx, rcx
je 0x140096f06
mov qword [rsp + 0x30], rbx
lea r8d, [rbx + 3]
add rcx, 4
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140096e9d
lea rcx, str.GetInstalledSoundeffects:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x140096f01
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1d6070
mov rcx, rdi
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140096eee
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.GetInstalledSoundeffects:_DeviceIoControl:_IOCTL_HDAUD_GET_VIA_DRVSUPPORT3RDPRTEFTS_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x140096f01
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11d, dword [rsp + 0x50]
mov dword [rsp + 0x50], r11d
mov rdi, qword [rsp + 0x60]
movzx ecx, byte [rsp + 0x50]
and cl, 0x20
cmp cl, 0x20
sete bl
mov eax, ebx
add rsp, 0x40
pop rbx
ret
Function at 0x140096f20
Capabilities:
Print debug messages

Disassembly:
push rdi
sub rsp, 0x40
mov eax, dword [rcx + 0x100]
mov r8d, SafeArrayGetDim
xor edi, edi
cmp eax, 0x170b
mov r9, rcx
lea r11d, [r8 - 0xa]
ja 0x140096f70
cmp eax, 0x1708
jae 0x140096f6c
sub eax, 0x397
je 0x140096f9c
sub eax, 1
je 0x140096f65
cmp eax, 0x90
jne 0x1400970aa
mov eax, r11d
jmp 0x140096fb1
mov eax, 3
jmp 0x140096fb1
mov eax, edi
jmp 0x140096fb1
sub eax, 0x4397
je 0x140096f9c
sub eax, 0x91
je 0x140096f60
sub eax, 0xa2e8
je 0x140096f95
cmp eax, 0x10
jne 0x1400970aa
mov eax, 2
jmp 0x140096fb1
mov eax, 1
jmp 0x140096fb1
cmp dword [rcx + 0x844], 0x433
je 0x1400970aa
mov eax, 4
lea r10, [0x140000000]
cdqe
mov ecx, dword [r10 + rax*4 + 0x97180]
add rcx, r10
jmp rcx
cmp edx, r11d
jne 0x140096fd7
mov r8d, 4
jmp 0x1400970aa
cmp edx, 7
jne 0x140096fe5
lea r8d, [rdx - 5]
jmp 0x1400970aa
cmp edx, 8
jne 0x1400970aa
mov r8d, edi
jmp 0x1400970aa
cmp edx, r11d
jne 0x140097006
mov r8d, 4
jmp 0x1400970aa
cmp edx, 7
jne 0x140097014
lea r8d, [rdx - 5]
jmp 0x1400970aa
cmp edx, 8
jne 0x1400970aa
mov r8d, edi
jmp 0x1400970aa
cmp edx, r11d
jne 0x140097032
mov r8d, 4
jmp 0x1400970aa
cmp edx, 7
jne 0x14009703d
lea r8d, [rdx - 5]
jmp 0x1400970aa
cmp edx, 8
jne 0x1400970aa
mov r8d, edi
jmp 0x1400970aa
cmp edx, r11d
jne 0x140097054
mov r8d, 2
jmp 0x1400970aa
cmp edx, 7
jne 0x14009705e
mov r8d, edi
jmp 0x1400970aa
cmp edx, 8
jne 0x1400970aa
lea r8d, [rdx - 5]
jmp 0x1400970aa
cmp edx, r11d
jne 0x140097076
mov r8d, 3
jmp 0x1400970aa
cmp edx, 7
jne 0x140097081
lea r8d, [rdx - 6]
jmp 0x1400970aa
cmp edx, 8
jne 0x1400970aa
mov r8d, r11d
jmp 0x1400970aa
cmp edx, r11d
jne 0x140097098
mov r8d, 3
jmp 0x1400970aa
cmp edx, 7
jne 0x1400970a3
lea r8d, [rdx - 6]
jmp 0x1400970aa
cmp edx, 8
cmove r8d, r11d
mov rcx, qword [r9 + 0x18]
mov dword [rsp + 0x50], r8d
test rcx, rcx
jne 0x1400970c0
mov eax, edi
add rsp, 0x40
pop rdi
ret
xor r9d, r9d
mov qword [rsp + 0x30], rdi
add rcx, 4
lea r8d, [r9 + 3]
mov edx, 0xc0000000
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rbx, rax
jne 0x14009710f
lea rcx, str.SetRecordingSelect:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rbx, qword [rsp + 0x58]
mov eax, edi
add rsp, 0x40
pop rdi
ret
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x60]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x30], rax
mov r9d, 4
mov edx, 0x1da10c
mov rcx, rbx
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140097167
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.SetRecordingSelect:_DeviceIoControl:_IOCTL_HDAUD_SET_MUX_SELECT_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rbx, qword [rsp + 0x58]
mov eax, edi
add rsp, 0x40
pop rdi
ret
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x58]
mov eax, 1
add rsp, 0x40
pop rdi
ret
Function at 0x1400971a0
Capabilities:
Print debug messages

Disassembly:
push rbp
push rsi
push rdi
push r12
sub rsp, 0x48
mov r12, rcx
mov rcx, qword [rcx + 0x18]
mov edi, 9
test rcx, rcx
mov esi, 0x3e7
lea ebp, [rdi - 6]
je 0x140097286
mov qword [rsp + 0x30], 0
add rcx, 4
xor r9d, r9d
mov r8d, ebp
mov edx, 0xc0000000
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x70], SafeArrayGetDim
mov dword [rsp + 0x20], ebp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov r13, rax
jne 0x140097216
lea rcx, str.GetRecordingSelect:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x140097281
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x1d6110
mov rcx, r13
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x80], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, r13
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
mov rbx, qword [rsp + 0x80]
jne 0x14009727d
lea rcx, str.GetRecordingSelect:_DeviceIoControl:_IOCTL_HDAUD_GET_MUX_SELECT_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x140097281
mov esi, dword [rsp + 0x70]
mov r13, qword [rsp + 0x40]
mov eax, dword [r12 + 0x100]
cmp eax, 0x170b
ja 0x1400972be
cmp eax, 0x1708
jae 0x1400972ba
sub eax, 0x397
je 0x1400972e8
sub eax, 1
je 0x1400972ff
cmp eax, 0x90
jne 0x140097403
mov ebp, 5
jmp 0x1400972ff
xor ebp, ebp
jmp 0x1400972ff
sub eax, 0x4397
je 0x1400972e8
sub eax, 0x91
je 0x1400972b3
sub eax, 0xa2e8
je 0x1400972e1
cmp eax, 0x10
jne 0x140097403
lea ebp, [rax - 0xe]
jmp 0x1400972ff
mov ebp, 1
jmp 0x1400972ff
cmp dword [r12 + 0x844], 0x433
je 0x140097403
mov ebp, 4
lea rdx, [0x140000000]
movsxd rax, ebp
mov ecx, dword [rdx + rax*4 + 0x97410]
add rcx, rdx
jmp rcx
cmp esi, 4
je 0x1400973ba
cmp esi, 2
je 0x1400973e3
test esi, esi
jne 0x140097403
mov edi, 8
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp esi, 4
je 0x1400973ba
cmp esi, 2
jne 0x140097327
mov edi, 7
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp esi, 4
je 0x1400973ba
cmp esi, 2
jne 0x140097327
mov edi, 7
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp esi, 2
je 0x1400973ba
test esi, esi
je 0x1400973e3
cmp esi, 3
jne 0x140097403
mov edi, 8
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp esi, 3
je 0x1400973ba
cmp esi, 1
je 0x1400973e3
cmp esi, 5
jne 0x140097403
mov edi, 8
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp esi, 3
jne 0x1400973cb
mov edi, 5
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp esi, 4
jne 0x1400973de
mov edi, esi
mov eax, esi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp esi, 1
jne 0x1400973f4
mov edi, 7
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, edi
mov edi, 8
cmp esi, 5
cmove ecx, edi
mov edi, ecx
mov eax, edi
add rsp, 0x48
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x140097c60
Capabilities:
Print debug messages

Disassembly:
push rbp
push r12
sub rsp, 0x48
mov rcx, qword [rcx + 0x18]
mov r12, r8
mov rbp, rdx
test rcx, rcx
jne 0x140097c81
xor eax, eax
add rsp, 0x48
pop r12
pop rbp
ret
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x40], r13
xor r13d, r13d
mov qword [rsp + 0x30], r13
lea r8d, [r13 + 3]
add rcx, 4
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140097ce0
lea rcx, str.GetHDAudCapsAndPolicyState:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdi, qword [rsp + 0x78]
mov r13, qword [rsp + 0x40]
xor eax, eax
add rsp, 0x48
pop r12
pop rbp
ret
test rbp, rbp
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rsi
je 0x140097d83
mov esi, 0x8b8
mov rcx, rsi
call fcn.1400fa6f0
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov rbx, rax
lea rax, [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov edx, 0x1d6000
mov rcx, rdi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140097d5d
test rbx, rbx
je 0x140097d40
mov rcx, rbx
call fcn.1400fa7c0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.GetHDAudCapsAndPolicyState:_DeviceIoControl:_IOCTL_HDAUD_GET_CAPS_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor eax, eax
jmp 0x140097e27
mov eax, dword [rsp + 0x60]
cmp eax, esi
ja 0x140097d68
mov rsi, rax
mov r8, rsi
mov rdx, rbx
mov rcx, rbp
call fcn.1400fd180
test rbx, rbx
je 0x140097d83
mov rcx, rbx
call fcn.1400fa7c0
test r12, r12
je 0x140097e19
mov esi, 0x7c
mov rcx, rsi
call fcn.1400fa6f0
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov rbx, rax
lea rax, [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov edx, 0x1d6004
mov rcx, rdi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140097df3
test rbx, rbx
je 0x140097dd9
mov rcx, rbx
call fcn.1400fa7c0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.GetHDAudCapsAndPolicyState:_DeviceIoControl:_IOCTL_HDAUD_GET_POLICY_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor eax, eax
jmp 0x140097e27
mov eax, dword [rsp + 0x60]
cmp eax, esi
ja 0x140097dfe
mov rsi, rax
mov r8, rsi
mov rdx, rbx
mov rcx, r12
call fcn.1400fd180
test rbx, rbx
je 0x140097e19
mov rcx, rbx
call fcn.1400fa7c0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov rsi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x78]
mov r13, qword [rsp + 0x40]
add rsp, 0x48
pop r12
pop rbp
ret
Function at 0x140097e50
Capabilities:
Print debug messages

Disassembly:
mov dword [rsp + 0x10], edx
push rbx
sub rsp, 0x40
mov rbx, rcx
mov rcx, qword [rcx + 0x18]
test rcx, rcx
jne 0x140097e6d
xor eax, eax
add rsp, 0x40
pop rbx
ret
mov qword [rsp + 0x60], rsi
xor esi, esi
add rcx, 4
mov qword [rsp + 0x30], rsi
lea r8d, [rsi + 3]
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140097ec8
lea rcx, str.SetHDAudioRedirctHPCtrl:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
xor eax, eax
add rsp, 0x40
pop rbx
ret
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x50]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov r9d, 4
mov edx, 0x1da038
mov rcx, rdi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140097f25
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.SetHDAudioRedirctHPCtrl:_DeviceIoControl:_IOCTL_HDAUD_SET_REDIRCT_HP_CTRL_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
xor eax, eax
add rsp, 0x40
pop rbx
ret
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call fcn.140097f50
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
mov eax, 1
add rsp, 0x40
pop rbx
ret

Function at 0x140097f50
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x48
mov rcx, qword [rcx + 0x18]
test rcx, rcx
jne 0x140097f65
xor ax, ax
add rsp, 0x48
ret
mov qword [rsp + 0x60], rbx
xor ebx, ebx
add rcx, 4
mov qword [rsp + 0x30], rbx
lea r8d, [rbx + 3]
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x50], 0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
mov rdi, rax
jne 0x140097fc7
lea rcx, str.GetHDAudioJackStatus:_CreateFile:_INVALID_HANDLE_VALUE_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x40]
xor ax, ax
add rsp, 0x48
ret
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1d6038
mov rcx, rdi
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x14009802a
lea rcx, str.GetHDAudioJackStatus:_DeviceIoControl:_IOCTL_HDAUD_GET_VIA_JACK_STATUS_failed_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x40]
xor ax, ax
add rsp, 0x48
ret
mov ax, word [rsp + 0x50]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x40]
add rsp, 0x48
ret