Function at 0x1400afb50
Capabilities:
Accept command line arguments
Modify service

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [0x140221f78]
xor rax, rsp
mov qword [rbp + 0x130], rax
mov rsi, r8
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
lea rdi, str.WinMain
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 7
lea r15, str.c:DAX35dax3APIDAXAPIDAXAPI.cpp
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], SafeArrayAllocDescriptorEx
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x30], xmm1
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x20], rcx
mov r9d, 0x6b
lea r8, [rbp - 0x30]
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140134f50
mov qword [rbp - 0x10], rsi
mov r14, 0xffffffffffffffff
mov rax, r14
inc rax
cmp byte [rsi + rax], 0
jne 0x1400afc31
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x68]
call fcn.140142440
mov rbx, rax
lea rax, str.CmdLine:___s_
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], SafeArrayGetDim
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], 7
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], SafeArrayAllocDescriptorEx
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x30], xmm1
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x20], rcx
mov r9d, 0x6d
lea r8, [rbp - 0x70]
mov dl, 4
mov rcx, rax
call fcn.140036ba0
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x1400afd14
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400afd0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b3f
call fcn.14015ea50
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 7
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], SafeArrayAllocDescriptorEx
movabs rcx, 0x200000000
call fcn.1401353e0
mov rbx, rax
xor edi, edi
test rax, rax
je 0x1400afe22
mov rcx, qword [rax]
mov r8, qword [rcx + 8]
mov dl, 4
mov rcx, rax
call r8
test al, al
je 0x1400afe22
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], 7
lea r8d, [rdi + 0x13]
lea rdx, str.This_is_a_test_log.
lea rcx, [rbp + 0x18]
call fcn.14002ee20
mov rax, qword [rbx]
mov r10, qword [rax + 0x10]
lea rax, [rbp + 0x18]
cmp qword [rbp + 0x30], 8
cmovae rax, qword [rbp + 0x18]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0x28]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x30], xmm1
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x70], xmm0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 0x6e]
lea r8, [rbp - 0x70]
mov dl, 4
mov rcx, rbx
call r10
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x1400afe22
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400afe1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b45
call fcn.14015ea50
lea rcx, [fcn.1400d9230]
call fcn.14015eec4
xor bl, bl
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeEx]
movzx r12d, bl
mov r13d, 1
test eax, eax
cmovns r12d, r13d
mov dword [rsp + 0x40], r12d
mov dword [rbp + 0x60], edi
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8, r14
inc r8
cmp byte [rsi + r8], bl
jne 0x1400afe65
mov rdx, rsi
lea rcx, [rbp + 0x18]
call fcn.14002ecc0
lea rax, [rbp + 0x18]
cmp qword [rbp + 0x30], 0x10
cmovae rax, qword [rbp + 0x18]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0x28]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x68]
call fcn.140142440
cmp qword [rax + 0x18], 8
jb 0x1400afeb5
mov rax, qword [rax]
lea rdx, [rbp + 0x60]
mov rcx, rax
call qword [sym.imp.api_ms_win_shcore_obsolete_l1_1_0.dll_CommandLineToArgvW]
mov r15, rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x1400aff06
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aff01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b4b
call fcn.14015ea50
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x1400aff53
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aff4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b4b
call fcn.14015ea50
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rbp + 0x18], bl
test r15, r15
je 0x1400b09df
cmp dword [rbp + 0x60], edi
jle 0x1400b09df
mov rdx, qword [r15]
movzx eax, word [rdx]
sub ax, 0x2d
mov ecx, 0xfffd
test cx, ax
jne 0x1400b09df
add rdx, 2
lea rcx, str.install
call fcn.1401755bc
test eax, eax
je 0x1400b073c
mov rdx, qword [r15]
add rdx, 2
lea rcx, str.service
call fcn.1401755bc
test eax, eax
je 0x1400b073c
mov rdx, qword [r15]
add rdx, 2
lea rcx, [0x1401bfda0]
call fcn.1401755bc
test eax, eax
je 0x1400b072b
mov rdx, qword [r15]
add rdx, 2
lea rcx, str.unregserver
call fcn.1401755bc
test eax, eax
je 0x1400b072b
mov rdx, qword [r15]
add rdx, 2
lea rcx, str.capturestream
call fcn.1401755bc
test eax, eax
jne 0x1400b013f
lea rcx, str.CaptureStreamMonitor.dll
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
jne 0x1400b011a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rbx, vtable._com_error.0
mov qword [rbp + 0x18], rbx
mov dword [rbp + 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x28], xmm0
lea rcx, [rbp + 0x18]
call fcn.140039b30
mov qword [rbp + 0x40], rax
lea rax, str.Load_CaptureStreamMonitor.dll_failed__Error:__0x_.8x__s
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 0x37
lea rax, str.WinMain
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 7
lea rax, str.c:DAX35dax3APIDAXAPIDAXAPI.cpp
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], SafeArrayAllocDescriptorEx
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x70], xmm1
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x20], rcx
mov r9d, 0xb9
lea r8, [rbp - 0x30]
mov dl, 1
mov rcx, rax
call fcn.140036640
nop
mov qword [rbp + 0x18], rbx
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x1400b0101
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x1400b0111
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
mov edi, dword [rsp + 0x40]
jmp 0x1400b03c9
lea rdx, str.StartMonitor
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x1400b0131
call rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
jmp 0x1400b03c0
mov rdx, qword [r15]
add rdx, 2
lea rcx, str.toast
call fcn.1401755bc
test eax, eax
jne 0x1400b0412
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rsi + r8], bl
jne 0x1400b0170
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.14002ecc0
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rax, qword [rbp - 0x70]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x10]
call fcn.140142440
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1400b01f0
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b01eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b51
call fcn.14015ea50
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
mov r8d, 5
lea rdx, str.toast
lea rcx, [rbp - 0x70]
call fcn.14002ee20
xor r8d, r8d
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x10]
call fcn.1400afa20
mov rdx, qword [rbp - 0x60]
inc rdx
add rdx, rax
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 7
mov r8, qword [rbp]
sub r8, rdx
cmp qword [rbp], rdx
jb 0x1400b0b57
lea rax, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rax, qword [rbp - 0x10]
lea rdx, [rax + rdx*2]
lea rcx, [rbp - 0x30]
call fcn.14002ee20
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
lea rax, [rbp - 0x30]
mov rsi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x18]
cmp r13, 8
cmovae rax, rsi
mov qword [rbp + 0x40], rax
mov r12, qword [rbp - 0x20]
cmp r12, 8
jae 0x1400b02ab
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x38], 7
jmp 0x1400b02f3
mov rbx, r12
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
mov rdx, rbx
add rdx, 1
cmovb rdx, r14
lea rcx, [rbp - 0x50]
call fcn.14003f8a0
mov qword [rbp - 0x50], rax
lea r8, [r12*2 + 2]
mov rdx, qword [rbp + 0x40]
mov rcx, rax
call fcn.140161730
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x40], r12
lea rcx, [rbp - 0x50]
call fcn.14009f320
cmp r13, 8
jb 0x1400b033b
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400b0333
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b5d
mov rcx, rsi
call fcn.14015ea50
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400b037b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b0376
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b5d
call fcn.14015ea50
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x1400b03bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b03b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b5d
call fcn.14015ea50
mov r12d, dword [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
test r12b, r12b
je 0x1400b03d4
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
lea rcx, [rbp + 0xc0]
call fcn.140135170
mov eax, edi
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.14015eb70
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rdx, qword [r15]
add rdx, 2
lea rcx, str.spatialsound
call fcn.1401755bc
inc r14
cmp byte [rsi + r14], bl
jne 0x1400b0425
test eax, eax
jne 0x1400b0636
mov qword [rbp - 0x10], rdi
mov qword [rbp], rdi
mov qword [rbp + 8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8, r14
mov rdx, rsi
lea rcx, [rbp - 0x10]
call fcn.14002ecc0
lea rax, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rax, qword [rbp - 0x10]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x40]
call fcn.140142440
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x1400b04c0
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b04bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b63
call fcn.14015ea50
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 7
mov r8d, SafeArrayGetDim
lea rdx, str.spatialsound
lea rcx, [rbp - 0x50]
call fcn.14002ee20
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x40]
call fcn.1400afa20
mov rdx, qword [rbp - 0x40]
inc rdx
add rdx, rax
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
mov r8, qword [rbp + 0x50]
sub r8, rdx
cmp qword [rbp + 0x50], rdx
jb 0x1400b0b69
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
lea rdx, [rax + rdx*2]
lea rcx, [rbp - 0x70]
call fcn.14002ee20
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rcx, qword [rbp - 0x70]
call fcn.14017572c
test eax, eax
setne dl
lea rcx, [rbp + 0x10]
call fcn.14014cf60
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400b059d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b0598
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b33
call fcn.14015ea50
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], di
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400b05ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b05e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b33
call fcn.14015ea50
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x1400b03c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b062c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b33
call fcn.14015ea50
jmp 0x1400b03c0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], r14
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x48]
call fcn.140142440
mov rbx, rax
lea rax, str.Invalid_CmdLine:___s_
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], reloc.OLEAUT32.dll_SafeArrayUnlock
lea rax, str.WinMain
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 7
lea rax, str.c:DAX35dax3APIDAXAPIDAXAPI.cpp
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], SafeArrayAllocDescriptorEx
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x30], xmm1
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x20], rcx
mov r9d, 0xdc
lea r8, [rbp - 0x70]
mov dl, 4
mov rcx, rax
call fcn.140036ba0
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x1400b03c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b062c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b0b39
jmp 0x1400b062c
lea rcx, str.DolbyDAXAPI
call fcn.140105e20
jmp 0x1400b03c0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [0x1401adaf4]
mov r8d, 2
lea rdx, str.Dolby_DAX_API_Service
lea rcx, str.DolbyDAXAPI
call fcn.140105cc0
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenSCManagerW]
mov rsi, rax
test rax, rax
jne 0x1400b0881
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rbx, vtable._com_error.0
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x50], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x48]
call fcn.140039b30
mov qword [rbp + 0x40], rax
lea rax, str.OpenSCManager_failed__Error:__0x_.8x__s
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], SafeArrayAllocDescriptorEx
lea rax, str.WinMain
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 7
lea rax, str.c:DAX35dax3APIDAXAPIDAXAPI.cpp
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], SafeArrayAllocDescriptorEx
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
movaps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm1
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x20], rcx
mov r9d, 0x97
lea r8, [rbp - 0x50]
mov dl, 1
mov rcx, rax
call fcn.140036640
nop
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400b085e
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400b086f
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
mov rcx, r15
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
mov edi, dword [rsp + 0x40]
jmp 0x1400b03c9
mov r8d, 2
lea rdx, str.DolbyDAXAPI
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenServiceW]
mov rbx, rax
test rax, rax
jne 0x1400b09ad
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rbx, vtable._com_error.0
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x50], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x48]
call fcn.140039b30
mov qword [rbp + 0x40], rax
lea rax, str.OpenService_failed__Error:__0x_.8x__s
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], SafeArrayAllocDescriptorEx
lea rax, str.WinMain
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 7
lea rax, str.c:DAX35dax3APIDAXAPIDAXAPI.cpp
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], SafeArrayAllocDescriptorEx
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm1
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x20], rcx
mov r9d, 0xa0
lea r8, [rbp - 0x70]
mov dl, 1
mov rcx, rax
call fcn.140036640
nop
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400b098a
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400b099b
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
mov rcx, r15
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
mov edi, dword [rsp + 0x40]
jmp 0x1400b03c9
mov rax, qword [str.Dolby_DAX_API_Service_is_used_by_Dolby_DAX_applications_to_control_Dolby_Atmos_components_in_the_system.]
mov qword [rbp - 0x10], rax
lea r8, [rbp - 0x10]
mov edx, r13d
mov rcx, rbx
call qword [sym.imp.api_ms_win_service_management_l2_1_0.dll_ChangeServiceConfig2W]
mov rcx, rbx
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
jmp 0x1400b03c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
mov dword [rsp + 0x20], edi
mov r9d, r13d
mov r8d, r13d
lea rdx, str.DolbyDAXAPI
lea rcx, [rbp + 0x70]
call fcn.1400fe650
lea rcx, [rbp + 0x70]
call fcn.1401056d0
test eax, eax
jne 0x1400b0b1c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rbx, vtable._com_error.0
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x50], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x48]
call fcn.140039b30
mov qword [rbp - 0x10], rax
lea rax, str.Service_failed__Error:__0x_.8x__s
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], SafeArrayAllocDescriptorEx
lea rax, str.WinMain
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 7
lea rax, str.c:DAX35dax3APIDAXAPIDAXAPI.cpp
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], SafeArrayAllocDescriptorEx
mov ecx, 0x200
call fcn.1401353e0
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm1
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x20], rcx
mov r9d, 0xe8
lea r8, [rbp - 0x70]
mov dl, 1
mov rcx, rax
call fcn.140036640
nop
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400b0b0b
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400b0b1c
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop
lea rcx, [rbp + 0x70]
call fcn.1400fe770
test r15, r15
je 0x1400b03c9
jmp 0x1400b03c0
call fcn.1401660e8
int3
call fcn.1401660e8
int3
call fcn.1401660e8
int3
call fcn.1401660e8
int3
call fcn.1401660e8
int3
call fcn.1401660e8
int3
call fcn.140031a80
int3
call fcn.1401660e8
int3
call fcn.1401660e8
int3
call fcn.140031a80
int3