Function at 0x1400352f0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2000]
mov eax, 0x2100
call fcn.1400717e0
sub rsp, rax
mov qword [rbp + 0x310], 0xfffffffffffffffe
mov qword [rsp + 0x2130], rbx
mov qword [rsp + 0x2138], rsi
mov qword [rsp + 0x2140], rdi
movaps xmmword [rsp + 0x20f0], xmm6
mov rax, qword [0x1400a0008]
xor rax, rsp
mov qword [rbp + 0x1fe0], rax
xor ebx, ebx
mov dword [rbp - 0x6c], ebx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov dword [0x1400a1714], 0xffffffff
lea r8d, [rbx + 8]
lea rdx, str.WavesSvc
lea rcx, [0x1400ad3d0]
call fcn.140002500
mov dword [rbp - 0x7c], ebx
mov qword [rbp + 0x38], rbx
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioGeneral
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x1400353e9
mov dword [rbp + 8], 4
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x7c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x11c]
xor r8d, r8d
lea rdx, str.Debug
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x1400a1714]
mov eax, dword [rbp - 0x7c]
test eax, eax
cmovne ecx, eax
mov dword [0x1400a1714], ecx
call fcn.1400351f0
xor eax, eax
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rax
lea edx, [rax + 1]
lea rcx, [rbp + 0x150]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rbp + 0x150]
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [rbp + 0x98], 0x18
lea rax, [rbp + 0x150]
mov qword [rbp + 0xa0], rax
mov dword [rbp - 0x78], ebx
mov qword [rbp + 0x10], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWaves_AudioMaxxAudioGeneral
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1400354eb
mov dword [rbp - 0x6c], 4
lea rax, [rbp - 0x6c]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x118]
xor r8d, r8d
lea rdx, str.MaxxAudioOptions
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a7eb8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a7f10], rax
xor r13b, r13b
mov esi, dword [rbp - 0x78]
mov eax, esi
and eax, 0x40
lea r14, [0x1400848d0]
test al, al
je 0x140035570
mov r13b, 1
lea rax, str.Preset_Per_Orientation_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x1e1
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x1be0]
call fcn.14005b890
lea r9, str.WavesSvcStop
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a7f18], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_create_event._Error_Code____d_
lea rcx, [rbp + 0x1be0]
call fcn.140030c70
cmp qword [0x1400a7f18], rbx
jne 0x1400355fc
lea rax, [rbp + 0x1be0]
mov qword [rsp + 0x28], rax
lea rax, str.s_hStopEvent
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [0x1400a4128]
mov edx, 0x1e8
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, ebx
cmp eax, 0xb7
sete dil
mov ecx, esi
call fcn.140034ab0
test eax, eax
je 0x140037ab1
test edi, edi
jne 0x140037ab1
lea rax, str.Started
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
lea r9d, [rdi + 2]
lea r8, [0x1400a4128]
mov edx, 0x1f0
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp + 0x618], rbx
mov qword [rbp + 0x638], rbx
mov qword [rbp + 0x640], rbx
mov dword [rbp + 0x648], ebx
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rbp + 0x650], rax
lea rax, vtable.CDynamicEndpointCreator.0
mov qword [rbp + 0x610], rax
lea rax, vtable.CDynamicEndpointCreator.1.0
mov qword [rbp + 0x658], rax
lea rax, vtable.CAudioProperties.0
mov qword [rbp + 0x660], rax
mov qword [rbp + 0x6a0], rbx
xor eax, eax
mov qword [rbp + 0x66c], rax
mov qword [rbp + 0x674], rax
mov qword [rbp + 0x67c], rax
mov qword [rbp + 0x684], rax
mov qword [rbp + 0x68c], rax
mov qword [rbp + 0x698], rbx
mov dword [rbp + 0x668], ebx
mov byte [rbp + 0x6a8], al
mov qword [rbp + 0x7b0], rbx
mov dword [rbp + 0x7b8], ebx
mov dl, 1
call fcn.140010080
lea rdx, [rbp + 0x658]
lea rcx, [rbp + 0x660]
call fcn.140002040
test eax, eax
je 0x140035758
lea r9, [rbp + 0x650]
lea r8, [0x1400a4070]
call fcn.14002b0a0
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.DynamicEndpointCreator
lea r8, [0x1400a3c98]
lea rcx, [rbp + 0x610]
call fcn.14002af80
jmp 0x14003578c
lea rax, str.Dynamic_endpoint_creator_failed_to_initialize.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x1f9
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov byte [rsp + 0x71], 4
mov byte [rsp + 0x73], 1
mov byte [rsp + 0x72], bl
mov byte [rsp + 0x70], bl
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x72]
lea rdx, [rsp + 0x73]
lea rcx, [rsp + 0x71]
call fcn.14002f800
movzx r15d, byte [rsp + 0x70]
mov dword [rbp + 0xb0], r15d
movzx r12d, byte [rsp + 0x71]
lea rcx, [rbp + 0x1860]
call fcn.140038510
lea rcx, [rbp + 0x500]
call fcn.140031d80
bt esi, 9
jae 0x14003585f
lea rax, str.Automatic_Mute_on_Hibernate_is_set_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x203
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea r9, [rbp + 0x540]
lea r8, [0x1400a3fb0]
call fcn.14002b0a0
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.CAutoMuteOnHibernate
lea r8, [0x1400a3c98]
lea rcx, [rbp + 0x500]
call fcn.14002af80
mov edi, esi
shr edi, 0x1b
and dil, 1
cmp r12d, 2
jne 0x140035889
test esi, 0x903100
jne 0x140035889
call fcn.14000f080
test al, al
jne 0x140035889
test dil, dil
jne 0x140035889
mov dil, 1
jmp 0x14003588c
xor dil, dil
mov byte [rbp + 0x1350], bl
xor eax, eax
mov qword [rbp + 0x1351], rax
mov word [rbp + 0x1359], ax
mov byte [rbp + 0x135b], al
test dil, dil
je 0x1400358cd
lea rcx, [rbp + 0x1350]
call qword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
je 0x1400358cd
movzx eax, byte [rbp + 0x1351]
shr al, 7
not al
and dil, al
lea rcx, [rbp + 0x3c0]
call fcn.140032710
test dil, dil
je 0x140035941
lea rcx, [rbp + 0x3c0]
call fcn.140032990
test eax, eax
je 0x140035933
lea r9, [rbp + 0x400]
lea r8, [0x1400a3e30]
call fcn.14002b0a0
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.CBatterySaveMode
lea r8, [0x1400a3c98]
lea rcx, [rbp + 0x3c0]
call fcn.14002af80
jmp 0x140035975
lea rax, str.Battery_save_mode_failed_to_initialize.
mov edx, 0x21a
jmp 0x14003594d
lea rax, str.Battery_save_mode_does_not_support.
mov edx, 0x21f
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov r8d, r15d
mov edx, r12d
lea rcx, [rbp + 0xba0]
call fcn.140006ec0
mov dword [rbp + 0x1144], esi
bt esi, 0xe
jae 0x140035a03
lea rax, str.Automatic_Skype_Detect_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x228
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rdi, str.skype.exe
mov r14d, 0xe
nop dword [rax]
nop dword [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
add rdi, 0x148
sub r14, 1
jne 0x1400359e0
lea r14, [0x1400848d0]
bt esi, 0x12
jae 0x140035a6c
lea rax, str.Automatic_Lync_Detect_is_set_to_ON.
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x232
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rdi, str.communicator.exe
mov r14d, 4
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
add rdi, 0x148
sub r14, 1
jne 0x140035a50
bt esi, 0x15
jae 0x140035a9c
lea rdi, [0x1400a1870]
mov r14d, 2
nop
mov rdx, rdi
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
add rdi, 0x148
sub r14, 1
jne 0x140035a80
lea rax, [0x140084830]
mov qword [rsp + 0x20], rax
lea r9, str.CameraName
lea r8, str.SOFTWAREWaves_AudioMaxxAudioGeneral
lea rcx, [rbp + 0x40]
call fcn.14002d130
mov rax, qword [rbp + 0x40]
cmp dword [rax - 0x10], ebx
je 0x140035adb
lea rdx, str.0H_b_
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
lea eax, [r15 - 9]
cmp eax, 1
ja 0x140035be3
lea rdx, [0x1400a22c0]
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
lea rdx, [0x1400a1c50]
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
lea rdx, [0x1400a1b00]
lea rcx, [rbp + 0xdb8]
call fcn.14000bdd0
bt esi, 0x1d
jb 0x140035be3
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov edx, 0x6b
call qword [sym.imp.USER32.dll_LoadIconA]
test rax, rax
je 0x140035b71
mov dword [rbp + 0x1884], 2
mov qword [rbp + 0x1890], rax
cmp dword [rbp + 0x1868], ebx
je 0x140035b71
lea rdx, [rbp + 0x1870]
mov ecx, 1
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov edx, 0x6c
call qword [sym.imp.USER32.dll_LoadMenuA]
mov rcx, qword [rbp + 0x1a88]
test rax, rax
cmovne rcx, rax
mov qword [rbp + 0x1a88], rcx
cmp dword [rbp + 0x186c], ebx
jne 0x140035bd9
cmp dword [rbp + 0x1868], ebx
jne 0x140035bc0
lea rcx, [rbp + 0x1860]
call fcn.14001e4b0
cmp dword [rbp + 0x1868], ebx
je 0x140035bd9
mov dword [rbp + 0x1884], 7
lea rdx, [rbp + 0x1870]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
mov dword [rbp + 0x186c], 1
mov rcx, qword [rbp + 0xdc0]
sub rcx, qword [rbp + 0xdb8]
movabs rax, 0x63e7063e7063e707
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140035c51
lea r9, [rbp + 0xbe0]
lea r8, [0x1400a3ef0]
call fcn.14002b0a0
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.AutoSubtypeOnAudioSession
lea r8, [0x1400a3c98]
lea rcx, [rbp + 0xba0]
call fcn.14002af80
lea rcx, [rbp + 0x13c0]
call fcn.14002d7c0
mov qword [rbp + 0x1408], rbx
mov dword [rbp + 0x1410], ebx
lea rax, vtable.CInclinometerPresetOrientationControl.0
mov qword [rbp + 0x13c0], rax
mov dword [rbp + 0x141c], 0xf
mov qword [rbp + 0x1420], rbx
mov qword [rbp + 0x1428], rbx
mov qword [rbp + 0x1430], rbx
mov qword [rbp + 0x1438], rbx
mov qword [rbp + 0x1440], rbx
mov qword [rbp + 0x1448], rbx
mov dword [rbp + 0x1418], 0xffffffff
lea rcx, [rbp + 0x14d0]
call fcn.14002d7c0
mov dword [rbp + 0x1518], 0xffffffff
lea rax, vtable.CAutoOrientationControl.0
mov qword [rbp + 0x14d0], rax
mov qword [rbp + 0x1528], rbx
lea rax, vtable.CAutoOrientationControl_Lenovo.0
mov qword [rbp + 0x120], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x128], xmm0
mov byte [rbp + 0x138], bl
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x140], xmm1
mov dword [rbp + 0x13c], 0xffffffff
lea rcx, [rbp + 0x1470]
call fcn.14002d7c0
mov dword [rbp + 0x14b8], ebx
lea rax, vtable.CIntelCustomControl.0
mov qword [rbp + 0x1470], rax
mov qword [rbp + 0x14c0], rbx
test r13b, r13b
je 0x140035d84
cmp r12d, 5
jne 0x140035d68
test r15d, r15d
jne 0x140035d68
lea rcx, [rbp + 0x120]
call fcn.14000e230
test al, al
lea rax, str.CAutoOrientationControl_Lenovo::Initialize_____d
mov edx, 0x26f
jmp 0x140035da4
lea rcx, [rbp + 0x14d0]
call fcn.14000cf20
test al, al
lea rax, str.CAutoOrientationControl::Initialize_MaxxVoice____d
mov edx, 0x274
jmp 0x140035da4
bt esi, 0x10
jae 0x140035dd0
lea rcx, [rbp + 0x13c0]
call fcn.14000d9d0
test al, al
lea rax, str.CInclinometerPresetOrientationControl::Initialize_____d
mov edx, 0x27a
mov ecx, ebx
setne cl
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
bt esi, 0x19
jae 0x140035e1c
lea rcx, [rbp + 0x1470]
call fcn.140010b80
mov ecx, ebx
test al, al
setne cl
mov dword [rsp + 0x30], ecx
lea rax, str.CIntelCustomControl::Initialize_____d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x280
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp + 0x268], rbx
mov qword [rbp + 0x278], rbx
mov dword [rbp + 0x270], ebx
mov qword [rbp + 0x280], rbx
mov dword [rbp + 0x288], ebx
lea rax, vtable.CKeyboardTimeManage.0
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x298], ebx
mov qword [rbp + 0x290], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2a0], xmm0
mov dword [rbp + 0x2b0], ebx
mov dword [rsp + 0x7c], ebx
mov qword [rbp + 0x15c8], rbx
mov qword [rbp + 0x15d0], rbx
mov dword [rbp + 0x15d8], ebx
mov byte [rbp + 0x15dc], bl
lea rax, vtable.CStreamMonitor.0
mov qword [rbp + 0x15c0], rax
lea rax, vtable.CStreamMonitor.1.0
mov qword [rbp + 0x15e0], rax
mov dword [rbp + 0x15e8], ebx
movdqa xmmword [rbp + 0x15f0], xmm0
mov qword [rbp + 0x1618], rbx
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1620], xmm1
mov dword [rbp + 0x1630], ebx
mov qword [rbp + 0x1840], rbx
mov qword [rbp + 0x1848], rbx
mov qword [rbp + 0x1850], rbx
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1634]
call fcn.14005b890
xor eax, eax
mov qword [rbp + 0x1600], rax
mov qword [rbp + 0x1608], rax
mov word [rbp + 0x1610], ax
mov dword [rsp + 0x78], ebx
mov r15, qword [0x1400a3950]
mov qword [rbp - 0x10], r15
mov qword [rbp - 0x68], r15
mov r12, qword [rbp + 0x148]
mov qword [rbp + 0x28], r12
mov qword [rbp - 0x60], r12
mov rax, qword [rbp + 0x4b8]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x58], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov rdi, rbx
mov qword [rsp + 0x68], rbx
cmp qword [0x1400a7f18], rbx
je 0x140035f82
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rsi, qword [rsp + 0x60]
test rsi, rsi
je 0x140035f72
mov rax, qword [0x1400a7f18]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rdi, qword [rsp + 0x68]
jmp 0x140035f87
mov rsi, qword [rsp + 0x60]
mov rax, qword [0x1400a7f10]
mov r13, qword [rsp + 0x58]
test rax, rax
je 0x140036010
lea r14, [0x1400a7f10]
cmp r14, rsi
jae 0x140035fda
cmp r13, r14
ja 0x140035fda
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140035fce
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036007
mov rax, qword [r13 + r14*8]
jmp 0x140036004
cmp rsi, rdi
jne 0x140035fff
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rax, qword [0x1400a7f10]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036007
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rax, qword [0x1400a7eb8]
test rax, rax
je 0x140036094
lea r14, [0x1400a7eb8]
cmp r14, rsi
jae 0x14003605e
cmp r13, r14
ja 0x14003605e
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140036052
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003608b
mov rax, qword [r13 + r14*8]
jmp 0x140036088
cmp rsi, rdi
jne 0x140036083
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rax, qword [0x1400a7eb8]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003608b
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
test r15, r15
je 0x140036112
lea rax, [rbp - 0x68]
cmp rax, rsi
jae 0x1400360e3
lea rax, [rbp - 0x68]
cmp r13, rax
ja 0x1400360e3
lea r14, [rbp - 0x68]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x1400360d4
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036109
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x140036109
cmp rsi, rdi
jne 0x140036101
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036109
mov qword [rsi], r15
add rsi, 8
mov qword [rsp + 0x60], rsi
test r12, r12
je 0x140036190
lea rax, [rbp - 0x60]
cmp rax, rsi
jae 0x140036161
lea rax, [rbp - 0x60]
cmp r13, rax
ja 0x140036161
lea r14, [rbp - 0x60]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140036152
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036187
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x140036187
cmp rsi, rdi
jne 0x14003617f
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036187
mov qword [rsi], r12
add rsi, 8
mov qword [rsp + 0x60], rsi
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140036213
lea rcx, [rbp - 0x58]
cmp rcx, rsi
jae 0x1400361e0
lea rcx, [rbp - 0x58]
cmp r13, rcx
ja 0x1400361e0
lea r14, [rbp - 0x58]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x1400361d4
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003620a
mov rax, qword [r13 + r14*8]
jmp 0x140036207
cmp rsi, rdi
jne 0x140036202
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
mov rax, qword [rbp - 0x50]
test rsi, rsi
je 0x14003620a
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
lea r15, [0x1400a8040]
lea r12, [0x1400ad3a0]
mov r14, qword [r15]
mov qword [rbp + 0x18], r14
test r14, r14
je 0x1400362a6
lea rax, [rbp + 0x18]
cmp rax, rsi
jae 0x140036277
lea rax, [rbp + 0x18]
cmp r13, rax
ja 0x140036277
lea r14, [rbp + 0x18]
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x140036268
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003629d
mov rax, qword [r13 + r14*8]
mov qword [rsi], rax
jmp 0x14003629d
cmp rsi, rdi
jne 0x140036295
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x14003629d
mov qword [rsi], r14
add rsi, 8
mov qword [rsp + 0x60], rsi
add r15, 0x2e0
cmp r15, r12
jl 0x140036221
cmp byte [0x1400a7ea8], bl
je 0x140036359
cmp qword [0x1400a7eb0], rbx
jne 0x140036359
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [0x1400a7eb0], rax
test rax, rax
je 0x140036359
lea r14, [0x1400a7eb0]
cmp r14, rsi
jae 0x140036328
cmp r13, r14
ja 0x140036328
sub r14, r13
sar r14, 3
cmp rsi, rdi
jne 0x14003631c
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036350
mov rax, qword [r13 + r14*8]
jmp 0x14003634d
cmp rsi, rdi
jne 0x140036348
lea rcx, [rsp + 0x58]
call fcn.1400058e0
mov rax, qword [0x1400a7eb0]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
test rsi, rsi
je 0x140036350
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x60], rsi
lea rcx, [rbp + 0x9b0]
call fcn.140031250
mov dword [rbp + 0x20], ebx
mov dword [rbp + 0x24], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], rbx
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x48]
call fcn.14002b9e0
mov rdx, qword [rbp + 0x48]
cmp dword [rbp + 0xa00], ebx
jne 0x1400363f5
mov rax, qword [rbp + 0x50]
sub rax, rdx
sar rax, 2
test rax, rax
je 0x1400363f5
mov dword [rbp + 0xa04], ebx
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0xb68]
call fcn.140031b90
lea rax, [0x1400346f0]
mov qword [rbp + 0xb90], rax
lea rcx, [rbp + 0x9b0]
call fcn.140031620
lea rdx, [rbp + 0x9f8]
lea rcx, [rbp + 0xa08]
call fcn.140002040
mov dword [rbp + 0xa00], eax
mov rdx, qword [rbp + 0x48]
test rdx, rdx
je 0x14003640a
mov r8, qword [rbp + 0x58]
sub r8, rdx
sar r8, 2
call fcn.14001c740
lea r9, [rbp + 0x9f0]
lea r8, [0x1400a3d70]
call fcn.14002b0a0
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.WavesFXConnection_Render
lea r8, [0x1400a3c98]
lea rcx, [rbp + 0x9b0]
call fcn.14002af80
lea rcx, [rbp + 0x7c0]
call fcn.140031250
mov dword [rbp - 0x74], ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rbx
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x74]
lea rcx, [rbp + 0x60]
call fcn.14002b9e0
mov rdx, qword [rbp + 0x60]
cmp dword [rbp + 0x810], ebx
jne 0x1400364e6
mov rax, qword [rbp + 0x68]
sub rax, rdx
sar rax, 2
test rax, rax
je 0x1400364e6
mov dword [rbp + 0x814], 1
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x978]
call fcn.140031b90
lea rax, [0x140034710]
mov qword [rbp + 0x9a0], rax
lea rcx, [rbp + 0x7c0]
call fcn.140031620
lea rdx, [rbp + 0x808]
lea rcx, [rbp + 0x818]
call fcn.140002040
mov dword [rbp + 0x810], eax
mov rdx, qword [rbp + 0x60]
test rdx, rdx
je 0x1400364fb
mov r8, qword [rbp + 0x70]
sub r8, rdx
sar r8, 2
call fcn.14001c740
lea r9, [rbp + 0x800]
lea r8, [0x1400a3d70]
call fcn.14002b0a0
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xcf0000
lea r9, str.WavesFXConnection_Capture
lea r8, [0x1400a3c98]
lea rcx, [rbp + 0x7c0]
call fcn.14002af80
mov dword [rbp + 0x220], 0x466
movsd xmm6, qword [0x14008a410]
movsd qword [rbp + 0x228], xmm6
mov dword [rbp + 0x230], 0x468
movsd qword [rbp + 0x238], xmm6
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
call fcn.14001ecd0
mov rdi, rax
mov qword [rbp - 8], rax
lea r14, [rbp + 0x220]
nop word [rax + rax]
mov rdx, r14
lea rcx, [rbp - 8]
call fcn.140037eb0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x318]
lea rcx, [rbp - 8]
call fcn.140037ee0
add r14, 0x10
lea rax, [rbp + 0x240]
cmp r14, rax
je 0x1400365ce
mov rdi, qword [rbp - 8]
jmp 0x140036590
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x7c0]
call fcn.1400319f0
mov dword [rbp - 0x80], eax
mov r8, qword [rbp - 8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 8]
call fcn.140037ce0
mov rcx, qword [rbp - 8]
call fcn.14003aa0c
mov dword [rbp + 0xb8], 0x134
movsd qword [rbp + 0xc0], xmm6
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
call fcn.14001ecd0
mov rdi, rax
mov qword [rbp - 0x20], rax
lea r14, [rbp + 0xb8]
mov rdx, r14
lea rcx, [rbp - 0x20]
call fcn.140037eb0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x328]
lea rcx, [rbp - 0x20]
call fcn.140037ee0
add r14, 0x10
lea rax, [rbp + 0xc8]
cmp r14, rax
je 0x14003666f
mov rdi, qword [rbp - 0x20]
jmp 0x140036631
mov r12d, 1
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x9b0]
call fcn.1400319f0
test eax, eax
je 0x14003671d
mov dword [rbp + 0xc8], 0x447
movsd qword [rbp + 0xd0], xmm6
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
call fcn.14001ecd0
mov rdi, rax
mov qword [rbp - 0x48], rax
lea r14, [rbp + 0xc8]
nop word [rax + rax]
mov rdx, r14
lea rcx, [rbp - 0x48]
call fcn.140037eb0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x330]
lea rcx, [rbp - 0x48]
call fcn.140037ee0
add r14, 0x10
lea rax, [rbp + 0xd8]
cmp r14, rax
je 0x1400366fe
mov rdi, qword [rbp - 0x48]
jmp 0x1400366c0
mov r12d, 3
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x7c0]
call fcn.1400319f0
test eax, eax
lea r14d, [r12 - 2]
jne 0x140036720
mov r14d, ebx
mov dword [rsp + 0x54], r14d
test r12b, 2
je 0x140036752
and r12d, 0xfffffffd
mov r8, qword [rbp - 0x48]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x338]
lea rcx, [rbp - 0x48]
call fcn.140037ce0
mov rcx, qword [rbp - 0x48]
call fcn.14003aa0c
and r12d, 0xfffffffe
mov dword [rsp + 0x74], r12d
mov r8, qword [rbp - 0x20]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x350]
lea rcx, [rbp - 0x20]
call fcn.140037ce0
mov rcx, qword [rbp - 0x20]
call fcn.14003aa0c
movzx eax, byte [0x1400a7ea8]
mov byte [rsp + 0x50], al
mov r15d, 0x1d
lea rdi, [0x1400a7f70]
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
nop dword [rax + rax]
cmp dword [rsp + 0x78], 0
jne 0x140036ee4
test r14d, r14d
je 0x140036f49
mov qword [rsp + 0x30], r8
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x2d7
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp + 0x1348], 0xf
mov qword [rbp + 0x1340], rbx
mov byte [rbp + 0x1330], 0
mov qword [rbp + 0x13b8], 0xf
mov qword [rbp + 0x13b0], rbx
mov byte [rbp + 0x13a0], 0
lea rcx, [rbp + 0x1360]
call fcn.14001bee0
lea rax, vtable.CEndpointList.0
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rbx
call fcn.140006370
mov qword [rbp + 0x80], rax
mov byte [rbp + 0x90], 0
xor r9d, r9d
mov edx, 1
mov r8d, edx
lea rcx, [rbp + 0x78]
call fcn.14001b3d0
lea rdx, [rbp + 0x1360]
cmp qword [rbp + 0x1378], 0x10
cmovae rdx, qword [rbp + 0x1360]
mov qword [rbp + 0x1398], 0xf
mov qword [rbp + 0x1390], rbx
mov byte [rbp + 0x1380], 0
cmp byte [rdx], 0
jne 0x1400368b0
mov r8, rbx
jmp 0x1400368be
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400368b4
lea rcx, [rbp + 0x1380]
call fcn.140002500
lea r8, [rbp + 0x1380]
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x80]
call fcn.14001d0d0
mov rax, qword [rbp + 0x358]
mov rdi, qword [rax + 0x40]
mov rax, qword [rbp + 0x1398]
cmp rax, 0x10
jb 0x140036943
inc rax
mov rcx, qword [rbp + 0x1380]
cmp rax, 0x1000
jb 0x14003693e
test cl, 0x1f
jne 0x140037775
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14003776f
sub rcx, rax
cmp rcx, 8
jb 0x140037769
cmp rcx, 0x27
ja 0x140037763
mov rcx, rax
call fcn.14003aa0c
mov qword [rbp + 0x1398], 0xf
mov qword [rbp + 0x1390], rbx
mov byte [rbp + 0x1380], 0
test rdi, rdi
je 0x140036b25
mov dword [rbp - 0x70], ebx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140036b25
mov rax, qword [rcx]
lea rdx, [rbp - 0x70]
call qword [rax + 0x30]
cmp dword [rbp - 0x70], 1
jne 0x140036b25
xor edx, edx
mov rcx, rdi
call fcn.14001b240
test rax, rax
je 0x140036b25
or r12d, 4
mov dword [rsp + 0x74], r12d
lea r14, [rbp + 0x1360]
cmp qword [rbp + 0x1378], 0x10
cmovae r14, qword [rbp + 0x1360]
lea rax, [rbp + 0x1538]
mov qword [rbp + 0x1530], rax
test r14, r14
jne 0x1400369db
mov rdx, rbx
mov qword [rbp + 0x1530], rbx
jmp 0x140036a45
or rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [r14 + rdi], 0
jne 0x1400369e0
inc edi
lea r8, [rbp + 0x1538]
mov edx, edi
lea rcx, [rbp + 0x1530]
call fcn.140002c80
movsxd rdx, edi
mov r9, rdx
mov r8, r14
mov rcx, qword [rbp + 0x1530]
call fcn.140001490
test eax, eax
je 0x140036a3e
cmp eax, 0xc
je 0x140037791
cmp eax, 0x16
je 0x140037786
cmp eax, 0x22
je 0x140037786
cmp eax, 0x50
jne 0x14003777b
mov rdx, qword [rbp + 0x1530]
mov qword [rbp + 0x2d8], 0xf
mov qword [rbp + 0x2d0], rbx
mov byte [rbp + 0x2c0], 0
cmp byte [rdx], 0
jne 0x140036a68
mov r8, rbx
jmp 0x140036a7a
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140036a70
lea rcx, [rbp + 0x2c0]
call fcn.140002500
lea r8, [rbp + 0x13a0]
lea rdx, [rbp + 0x2c0]
call fcn.1400348b0
test al, al
setne dil
test r12b, 4
je 0x140036ac6
and r12d, 0xfffffffb
mov dword [rsp + 0x74], r12d
lea rax, [rbp + 0x1538]
mov rcx, qword [rbp + 0x1530]
cmp rcx, rax
je 0x140036ac6
call fcn.14005d86c
test dil, dil
je 0x140036b25
lea rax, str.Query_by_default_capture_endpoint_string
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 3
lea r8, [0x1400a4128]
mov edx, 0x2ef
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x13a0]
lea rcx, [rbp + 0x1330]
call fcn.140002630
jmp 0x140036cf8
lea rax, str.Query_endpoint_string_from_property1_with_type_capture_LFX
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 3
lea r8, [0x1400a4128]
mov edx, 0x2f4
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
call fcn.140006370
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x28], 4
lea rcx, [rbp - 0x38]
call fcn.140016460
lea rdx, [rbp + 0x1450]
lea rcx, [rbp - 0x38]
call fcn.1400170b0
mov rdi, rax
lea rax, [rbp + 0x1330]
cmp rax, rdi
je 0x140036c25
mov rcx, qword [rbp + 0x1348]
cmp rcx, 0x10
jb 0x140036bfc
inc rcx
mov rdx, qword [rbp + 0x1330]
cmp rcx, 0x1000
jb 0x140036bf4
test dl, 0x1f
jne 0x1400377ae
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x1400377a8
sub rdx, rax
cmp rdx, 8
jb 0x1400377a2
cmp rdx, 0x27
ja 0x14003779c
mov rdx, rax
mov rcx, rdx
call fcn.14003aa0c
mov qword [rbp + 0x1348], 0xf
mov qword [rbp + 0x1340], rbx
mov byte [rbp + 0x1330], 0
mov rdx, rdi
lea rcx, [rbp + 0x1330]
call fcn.140002760
nop
mov rax, qword [rbp + 0x1468]
cmp rax, 0x10
jb 0x140036c7a
inc rax
mov rcx, qword [rbp + 0x1450]
cmp rax, 0x1000
jb 0x140036c74
test cl, 0x1f
jne 0x1400377c6
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400377c0
sub rcx, rax
cmp rcx, 8
jb 0x1400377ba
cmp rcx, 0x27
ja 0x1400377b4
mov rcx, rax
call fcn.14003aa0c
nop
mov rax, qword [rbp - 0x38]
mov r14, qword [rax + 8]
mov rdi, r14
cmp byte [r14 + 0x19], 0
jne 0x140036cbe
nop dword [rax]
mov rdx, qword [rdi + 0x10]
lea rcx, [rbp - 0x38]
call fcn.140018960
mov rdi, qword [rdi]
lea rcx, [r14 + 0x28]
call fcn.140002380
mov rcx, r14
call fcn.14003aa0c
mov r14, rdi
cmp byte [rdi + 0x19], 0
je 0x140036c90
mov rax, qword [rbp - 0x38]
mov qword [rax + 8], rax
mov rax, qword [rbp - 0x38]
mov qword [rax], rax
mov rax, qword [rbp - 0x38]
mov qword [rax + 0x10], rax
mov qword [rbp - 0x30], rbx
mov r8, qword [rbp - 0x38]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x340]
lea rcx, [rbp - 0x38]
call fcn.140018b00
mov rcx, qword [rbp - 0x38]
call fcn.14003aa0c
lea rdx, [rbp + 0x1330]
cmp qword [rbp + 0x1348], 0x10
cmovae rdx, qword [rbp + 0x1330]
lea rax, [rbp + 0x1ad8]
mov qword [rbp + 0x1ad0], rax
mov r8d, 3
lea rcx, [rbp + 0x1ad0]
call fcn.140005ac0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, qword [rbp + 0x1ad0]
xor edx, edx
lea rcx, [rbp + 0x15c0]
call fcn.14002fd50
mov edi, ebx
test eax, eax
setns dil
mov dword [rsp + 0x78], edi
lea rax, [rbp + 0x1ad8]
mov rcx, qword [rbp + 0x1ad0]
cmp rcx, rax
je 0x140036d70
call fcn.14005d86c
lea rax, vtable.CEndpointList.0
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x78]
call fcn.14001b800
mov r8, qword [rbp + 0x80]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x80]
call fcn.140005c50
mov rcx, qword [rbp + 0x80]
call fcn.14003aa0c
mov rax, qword [rbp + 0x1378]
cmp rax, 0x10
jb 0x140036e04
mov rcx, qword [rbp + 0x1360]
inc rax
cmp rax, 0x1000
jb 0x140036dff
test cl, 0x1f
jne 0x1400377de
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400377d8
sub rcx, rax
cmp rcx, 8
jb 0x1400377d2
cmp rcx, 0x27
ja 0x1400377cc
mov rcx, rax
call fcn.14003aa0c
mov qword [rbp + 0x1378], 0xf
mov qword [rbp + 0x1370], rbx
mov byte [rbp + 0x1360], 0
mov rax, qword [rbp + 0x13b8]
cmp rax, 0x10
jb 0x140036e71
mov rcx, qword [rbp + 0x13a0]
inc rax
cmp rax, 0x1000
jb 0x140036e6c
test cl, 0x1f
jne 0x1400377f6
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400377f0
sub rcx, rax
cmp rcx, 8
jb 0x1400377ea
cmp rcx, 0x27
ja 0x1400377e4
mov rcx, rax
call fcn.14003aa0c
mov qword [rbp + 0x13b8], 0xf
mov qword [rbp + 0x13b0], rbx
mov byte [rbp + 0x13a0], 0
mov rax, qword [rbp + 0x1348]
cmp rax, 0x10
jb 0x140036f3b
mov rcx, qword [rbp + 0x1330]
inc rax
cmp rax, 0x1000
jb 0x140036edd
test cl, 0x1f
jne 0x14003780e
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x140037808
sub rcx, rax
cmp rcx, 8
jb 0x140037802
cmp rcx, 0x27
ja 0x1400377fc
mov rcx, rax
call fcn.14003aa0c
jmp 0x140036f3b
test r14d, r14d
jne 0x140036f49
mov qword [rsp + 0x30], rdx
lea r14, [0x1400848d0]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x2fd
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov edx, 1
lea rcx, [rbp + 0x15c0]
call fcn.14002fbb0
mov dword [rsp + 0x78], ebx
lea rcx, str.Unhooking_the_keyboard
jmp 0x140036f50
lea rcx, str.Unhooking_the_keyboard
lea rdi, [0x1400a7f70]
lea r14, [0x1400848d0]
cmp dword [rsp + 0x7c], 0
jne 0x140036f6f
cmp dword [rbp - 0x80], 0
je 0x140036fb2
lea rcx, [rbp + 0x260]
call fcn.140021240
mov dword [rsp + 0x7c], eax
jmp 0x140036fb2
cmp dword [rbp - 0x80], 0
jne 0x140036fb2
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x30d
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x260]
call fcn.140021340
mov dword [rsp + 0x7c], ebx
cmp byte [rsp + 0x50], 0
je 0x14003709d
mov r14, r15
mov rcx, rdi
call fcn.140023a40
add rdi, 0x2e0
sub r14, 1
jne 0x140036fc0
mov rcx, qword [0x1400a7f20]
test rcx, rcx
jne 0x140037072
lea rcx, [rbp + 0x30]
call fcn.140023dc0
lea rax, [0x1400a7f20]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 0x11]
xor r8d, r8d
mov rdx, qword [rbp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140037030
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [0x1400a7f20]
mov r14, qword [rbp - 0x68]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
mov qword [rbp - 0x10], r14
test rcx, rcx
je 0x140037060
mov rdi, qword [rbp - 0x60]
mov qword [rbp + 0x28], rdi
mov rdi, qword [rbp - 0x58]
mov qword [rbp - 0x50], rdi
jmp 0x140037076
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x50], rax
jmp 0x140037096
mov r14, qword [rbp - 0x10]
mov r9, qword [0x1400a7eb0]
test r9, r9
je 0x140037096
mov dword [rsp + 0x20], 1
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov byte [rsp + 0x50], 0
jmp 0x1400370a1
mov r14, qword [rbp - 0x10]
mov rdi, rsi
sub rdi, r13
sar rdi, 3
mov dword [rsp + 0x20], 6
mov r9d, 0x1cff
or r8d, 0xffffffff
mov rdx, r13
mov ecx, edi
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
mov ecx, eax
cmp rcx, rdi
jae 0x1400376bd
cdqe
mov r15, qword [r13 + rax*8]
cmp qword [0x1400a7f10], r15
jne 0x1400372fc
lea rax, str.Capture_Event:_Param_Changed
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x333
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov dword [rbp + 0x240], 0x466
movsd qword [rbp + 0x248], xmm6
mov dword [rbp + 0x250], 0x468
movsd qword [rbp + 0x258], xmm6
lea rax, [rbp + 0x240]
mov qword [rbp + 0x180], rax
lea rax, [rbp + 0x260]
mov qword [rbp + 0x188], rax
movaps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x370], xmm0
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x190]
call fcn.140037b90
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x7c0]
call fcn.1400319f0
mov dword [rbp - 0x80], eax
lea rcx, [rbp + 0x190]
call fcn.140037b60
mov dword [rbp + 0xd8], 0x134
movsd qword [rbp + 0xe0], xmm6
lea rax, [rbp + 0xd8]
mov qword [rbp + 0x1a0], rax
lea rax, [rbp + 0xe8]
mov qword [rbp + 0x1a8], rax
movaps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x380], xmm0
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x1d0]
call fcn.140037b90
or r12d, 8
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x9b0]
call fcn.1400319f0
test eax, eax
je 0x140037282
mov dword [rbp + 0xf8], 0x447
movsd qword [rbp + 0x100], xmm6
lea rax, [rbp + 0xf8]
mov qword [rbp + 0x1b0], rax
lea rax, [rbp + 0x108]
mov qword [rbp + 0x1b8], rax
movaps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x2e0], xmm0
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x1c0]
call fcn.140037b90
or r12d, 0x10
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x7c0]
call fcn.1400319f0
test eax, eax
mov r14d, 1
jne 0x140037285
mov r14d, ebx
mov dword [rsp + 0x54], r14d
test r12b, 0x10
je 0x1400372a0
and r12d, 0xffffffef
lea rcx, [rbp + 0x1c0]
call fcn.140037b60
and r12d, 0xfffffff7
mov dword [rsp + 0x74], r12d
lea rcx, [rbp + 0x1d0]
call fcn.140037b60
lea rcx, [rbp + 0xba0]
call fcn.1400345c0
test al, al
lea rdi, [0x1400a7f70]
mov r15d, 0x1d
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x1400367b0
lea rcx, [rbp + 0xba0]
call fcn.140009230
jmp 0x14003678f
cmp qword [0x1400a7f18], r15
je 0x140037814
cmp qword [0x1400a7eb8], r15
jne 0x140037481
lea rax, str.Render_Event:_Param_Changed
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x347
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0xba0]
call fcn.1400345c0
test al, al
je 0x14003736d
lea rcx, [rbp + 0xba0]
call fcn.140009230
mov dword [rbp + 0x108], 0x134
movsd qword [rbp + 0x110], xmm6
lea rax, [rbp + 0x108]
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x118]
mov qword [rbp + 0x1e8], rax
movaps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x2f0], xmm0
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x200]
call fcn.140037b90
or r12d, 0x20
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x9b0]
call fcn.1400319f0
test eax, eax
je 0x140037449
mov dword [rbp + 0xe8], 0x447
movsd qword [rbp + 0xf0], xmm6
lea rax, [rbp + 0xe8]
mov qword [rbp + 0x210], rax
lea rax, [rbp + 0xf8]
mov qword [rbp + 0x218], rax
movaps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x300], xmm0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x1f0]
call fcn.140037b90
or r12d, 0x40
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x7c0]
call fcn.1400319f0
test eax, eax
mov r14d, 1
jne 0x14003744c
mov r14d, ebx
mov dword [rsp + 0x54], r14d
test r12b, 0x40
je 0x140037467
and r12d, 0xffffffbf
lea rcx, [rbp + 0x1f0]
call fcn.140037b60
and r12d, 0xffffffdf
mov dword [rsp + 0x74], r12d
lea rcx, [rbp + 0x200]
call fcn.140037b60
jmp 0x140036789
cmp r14, r15
jne 0x14003752e
lea rax, str.Event:_Jack_Sense
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x355
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
call fcn.140020b90
call fcn.140020b30
test eax, eax
je 0x140037518
call fcn.140034020
test eax, eax
lea rdi, [0x1400a7f70]
mov r14d, dword [rsp + 0x54]
mov r15d, 0x1d
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x1400367b0
lea rcx, [0x1400ad2d0]
call fcn.1400341e0
jmp 0x14003678f
lea rcx, [0x1400ad2d8]
call fcn.140033360
mov r14d, dword [rsp + 0x54]
jmp 0x140036789
cmp qword [rbp + 0x28], r15
jne 0x14003758a
lea rax, str.Event:_Mocca_Mode
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x368
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov edx, 1
lea rcx, [rbp + 0x120]
call fcn.14000e5d0
mov r14d, dword [rsp + 0x54]
jmp 0x140036789
cmp qword [rbp - 0x50], r15
jne 0x1400375e1
lea rax, str.Event:_Battery_Save
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x36d
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x3c0]
call fcn.140032fa0
mov r14d, dword [rsp + 0x54]
jmp 0x140036789
cmp qword [0x1400a7eb0], r15
jne 0x140037634
lea rax, str.Event:_Realtek_Jack_Change_Event
mov qword [rsp + 0x30], rax
lea rax, [0x1400848d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x372
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov byte [rsp + 0x50], 1
mov r14d, dword [rsp + 0x54]
jmp 0x140036789
lea rdi, [0x1400a8040]
lea r14, [0x1400a7f70]
mov r12d, 0x1d
lea r13, [0x1400848d0]
lea rsi, str.Event:Realtek_Jack_Sense
cmp qword [rdi], r15
jne 0x140037690
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x37c
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov rcx, r14
call fcn.1400261c0
add r14, 0x2e0
add rdi, 0x2e0
sub r12, 1
jne 0x140037656
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x74]
mov r14d, dword [rsp + 0x54]
jmp 0x140036789
lea rdi, [0x1400a7f70]
mov r14d, dword [rsp + 0x54]
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
jne 0x1400367b0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
lea rdi, [0x1400a7f70]
lea rcx, str.Unhooking_the_keyboard
lea rdx, str.Un_initializing_the_Stream_Monitor.
lea r8, str.Initializing_the_Stream_Monitor.
je 0x1400367b0
nop word [rax + rax]
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x390]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140037730
jmp 0x14003678f
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
mov ecx, 0x80004005
call fcn.1400015b0
int3
mov ecx, 0x80070057
call fcn.1400015b0
int3
mov ecx, 0x8007000e
call fcn.1400015b0
nop
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
nop
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
call fcn.14005d6bc
int3
lea rax, str.Event:_Stop
mov qword [rsp + 0x30], rax
lea rsi, [0x1400848d0]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x342
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
mov qword [rsp + 0x60], r13
lea rcx, [rbp + 0x14d0]
call fcn.14000cef0
lea rcx, [rbp + 0x120]
call fcn.14000e560
lea rcx, [rbp + 0x13c0]
call fcn.14000d920
lea rcx, [rbp + 0x1470]
call fcn.140010d60
lea rax, str.Cleaning...
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x397
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x260]
call fcn.140021340
lea rcx, vtable.CJackSense.0
call fcn.1400208e0
lea rdi, [0x1400a7f70]
mov r12d, 0x1d
nop dword [rax]
mov rcx, rdi
call fcn.140027e00
add rdi, 0x2e0
sub r12, 1
jne 0x1400378e0
cmp qword [0x1400ad2d8], r12
je 0x14003790a
lea rcx, [0x1400ad2d0]
call fcn.14002a180
cmp qword [rbp + 0x508], 0
je 0x140037920
lea rcx, [rbp + 0x500]
call fcn.14002a180
cmp qword [rbp + 0xba8], 0
je 0x140037936
lea rcx, [rbp + 0xba0]
call fcn.14002a180
cmp qword [rbp + 0x3c8], 0
je 0x14003794c
lea rcx, [rbp + 0x3c0]
call fcn.14002a180
cmp qword [rbp + 0x618], 0
je 0x140037962
lea rcx, [rbp + 0x610]
call fcn.14002a180
lea rcx, [rbp + 0x660]
call fcn.1400020e0
cmp qword [rbp + 0x9b8], 0
je 0x140037984
lea rcx, [rbp + 0x9b0]
call fcn.14002a180
lea rcx, [rbp + 0x9b0]
call fcn.140031470
cmp qword [rbp + 0x7c8], 0
je 0x1400379a6
lea rcx, [rbp + 0x7c0]
call fcn.14002a180
lea rcx, [rbp + 0x7c0]
call fcn.140031470
lea rax, str.Finished
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
mov r9d, 2
lea r8, [0x1400a4128]
mov edx, 0x3c9
lea rcx, str.WavesSvc.cpp
call fcn.140002ed0
lea rcx, [rbp + 0x7c0]
call fcn.140031380
lea rcx, [rbp + 0x9b0]
call fcn.140031380
lea rcx, [rsp + 0x58]
call fcn.140005720
lea rcx, [rbp + 0x15c0]
call fcn.14002fb60
lea rcx, [rbp + 0x260]
call fcn.1400211f0
lea rax, vtable.CIntelCustomSensor.0
mov qword [rbp + 0x1470], rax
lea rcx, [rbp + 0x1470]
call fcn.14002d8e0
lea rax, vtable.CAutoOrientationControl_Lenovo.0
mov qword [rbp + 0x120], rax
lea rcx, [rbp + 0x120]
call fcn.14000e560
lea rcx, [rbp + 0x14d0]
call fcn.14000ce90
lea rcx, [rbp + 0x13c0]
call fcn.14000d8e0
lea rcx, [rbp + 0x40]
call fcn.140002360
lea rcx, [rbp + 0xba0]
call fcn.140007290
lea rcx, [rbp + 0x3c0]
call fcn.1400328b0
lea rcx, [rbp + 0x500]
call fcn.140031f30
lea rcx, [rbp + 0x1860]
call fcn.140038690
lea rcx, [rbp + 0x610]
call fcn.1400345f0
mov rcx, qword [0x1400a7f18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400a7eb0]
test rcx, rcx
je 0x140037ad7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400a7eb0], rbx
mov rcx, qword [0x1400a7f20]
test rcx, rcx
je 0x140037af0
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [0x1400a7f20], rbx
mov rcx, qword [0x1400a7eb8]
test rcx, rcx
je 0x140037b09
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400a7eb8], rbx
mov rcx, qword [0x1400a7f10]
test rcx, rcx
je 0x140037b22
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400a7f10], rbx
call qword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov rcx, qword [rbp + 0x1fe0]
xor rcx, rsp
call fcn.14003aa30
lea r11, [rsp + 0x2100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret