Function at 0x1400582b0
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rdi
push r14
push r15
sub rsp, 0x280
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x1400bb008]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov rbp, rcx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
cmp dword [rcx + 0x178], r15d
jne 0x1400589b2
call fcn.14000eef0
mov ebx, dword [0x1400bf960]
call fcn.14000eef0
mov edx, dword [0x1400bf980]
add edx, ebx
jne 0x140058336
mov r8d, 0x132
lea rdx, str.CServiceMain::InitService
lea rcx, str._s__d_RETURN_ON_FALSE
call fcn.140026f80
jmp 0x1400589b2
call fcn.140008300
mov rsi, rax
add rsi, 0xc
jne 0x14005834c
mov r8d, 0x138
jmp 0x14005831e
call fcn.140004100
mov edi, eax
or r14d, 0xffffffff
test eax, eax
je 0x1400584b8
call fcn.14001e8c0
call fcn.14001f9e0
lea rdx, str.SoftwareRealtekAudioGUI_INFORMATION_
mov rcx, 0xffffffff80000002
call fcn.140041c40
lea rdx, str.SoftwareRealtekAudioGUI_INFORMATION
call fcn.140042460
lea rdx, str.SoftwareRealtekAudioGUI_INFORMATIONJackInfomation
mov rcx, 0xffffffff80000002
call fcn.140041c40
call fcn.140008300
test byte [rax + 0x38], 1
je 0x1400583e4
lea rdx, str.SoftwareRealtekSpkProtection_
mov rcx, 0xffffffff80000002
call fcn.140041c40
lea rdx, str.SoftwareRealtekSpkProtection
call fcn.140042460
lea rdx, str.SystemCurrentControlSetServicesRealtekAudioRTKAMPInfo
mov rcx, 0xffffffff80000002
call fcn.140041c40
lea rdx, str.SystemCurrentControlSetServicesRealtekAudioRTKAMPInfo
call fcn.140042460
mov dword [rsp + 0x60], 0xffffffff
lea r8, [rsp + 0x60]
xor edx, edx
lea rcx, str.sc_failure_RtkAudioUniversalService_reset_0_actions_restart_0_restart_0_restart_0
call fcn.140020160
mov r8d, eax
lea rdx, str.CAppRestartHelper::RegisterServiceFailureRestart
lea rcx, str._s_bSuccess_d
call fcn.140026f80
call fcn.14000a090
call fcn.1400209b0
test rax, rax
je 0x14005842e
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetElement]
nop
xor eax, eax
mov qword [rsp + 0x38], rax
call fcn.140003520
mov rcx, rax
test rax, rax
je 0x1400589df
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 1
lea r9, str.General
lea r8, str.SoftwareRealtekAudioRtkAudUService
lea rdx, [0x140081910]
lea rcx, [rsp + 0x38]
call fcn.140004c30
mov r9d, 1
lea r8, str.InitFirstTime
mov rbx, qword [rsp + 0x38]
mov rdx, rbx
mov rcx, qword [0x1400bf598]
call fcn.1400419e0
nop
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400584b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edx, edi
mov rcx, rbp
call fcn.140058c60
call fcn.140009d80
mov ecx, 0x28
call fcn.140066208
mov qword [rsp + 0x48], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rcx
mov qword [rax + 0x20], rcx
mov rcx, rax
call fcn.140043df0
nop
mov qword [rbp + 0x1a0], rax
lea rcx, [rbp + 0x1a8]
call fcn.140042da0
mov eax, dword [rsi + 0x138]
test al, 0x1c
jne 0x140058523
test byte [rsi + 0x14c], 8
jne 0x140058523
cmp byte [rsi + 0x249], 0
je 0x140058559
mov ecx, 0x60
call fcn.140066208
mov rbx, rax
mov qword [rsp + 0x48], rax
xor edx, edx
lea r8d, [rdx + 0x60]
mov rcx, rax
call fcn.14006d020
mov rcx, rbx
call fcn.14000d5a0
nop
mov qword [rbp + 0x180], rax
mov eax, dword [rsi + 0x138]
test al, 2
jne 0x140058565
test al, 0x20
je 0x14005873a
mov ecx, 0xb0
call fcn.140066208
mov rdi, rax
mov qword [rsp + 0x48], rax
xor edx, edx
mov r8d, 0xb0
mov rcx, rax
call fcn.14006d020
lea rax, vtable.CSimpleOrientationSensorManagerEvents.0
mov qword [rdi], rax
mov qword [rdi + 0x20], r15
mov qword [rdi + 0x28], r15
mov qword [rdi + 0x30], r15
mov dword [rdi + 0x38], SafeArrayUnaccessData
mov dword [rdi + 0x58], r15d
mov dword [rdi + 0x5c], 0xa
mov qword [rdi + 0x60], r15
mov qword [rdi + 0x68], r15
mov dword [rdi + 0x3c], 0x3f400000
mov dword [rdi + 0x40], 0x3e800000
mov dword [rdi + 0x44], 0x40100000
xor ecx, ecx
movss xmm1, dword [0x14009a9f0]
movabs rdx, 0x8000000000000000
movss xmm0, dword [0x14009a9fc]
comiss xmm1, xmm0
jb 0x1400585f9
subss xmm1, xmm0
comiss xmm1, xmm0
jae 0x1400585f9
mov rcx, rdx
cvttss2si rax, xmm1
add rax, rcx
mov qword [rdi + 0x48], rax
xor ecx, ecx
movss xmm1, dword [0x14009a9b0]
comiss xmm1, xmm0
jb 0x140058620
subss xmm1, xmm0
comiss xmm1, xmm0
jae 0x140058620
mov rcx, rdx
cvttss2si rax, xmm1
add rax, rcx
mov qword [rdi + 0x50], rax
cmp rax, 0x11
jae 0x140058636
mov qword [rdi + 0x50], r15
mov qword [rdi + 0x10], r15
mov dword [rdi + 8], 1
mov ecx, pe_nt_image_headers64
call fcn.140066208
mov rbx, rax
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, pe_nt_image_headers64
mov rcx, rax
call fcn.14006d020
mov r8, rdi
mov rcx, rbx
call fcn.14005a290
nop
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x78], r15d
mov qword [rdi + 0x80], r15
mov qword [rdi + 0x88], r15
lea rax, vtable.CSensorsMgr.2.0
mov qword [rdi], rax
lea rax, vtable.CSensorsMgr.1.0
mov qword [rdi + 0x70], rax
lea rax, vtable.CSensorsMgr.0
mov qword [rdi + 0x90], rax
mov dword [rdi + 0x98], r15d
mov dword [rdi + 0x9c], 1
mov qword [rdi + 0xa0], r15
mov qword [rdi + 0xa8], r15
mov r8d, 0xa
lea rdx, [0x140094458]
lea rcx, [0x140081b98]
call fcn.140026f80
call fcn.14004c610
lea rcx, [rax + 0xa0]
lea rdx, [rdi + 0x90]
call fcn.1400048f0
mov dword [rdi + 0x98], r15d
mov dword [rdi + 0x9c], 1
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rdi
lea r8, [0x1400547d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0xa0], rax
mov qword [rbp + 0x188], rdi
test dword [rsi + 0x38], 0x200
je 0x1400587bf
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140066208
mov rbx, rax
mov qword [rsp + 0x50], rax
lea rax, vtable.CWOVMgr.0
mov qword [rbx], rax
mov qword [rbx + 8], 1
mov qword [rbx + 0x10], r15
mov qword [rbp + 0x198], rbx
mov dword [rbx + 8], r15d
call fcn.1400085d0
lea rcx, [rax + 0x28]
mov rdx, rbx
call fcn.1400048f0
call fcn.1400085d0
mov rcx, rax
mov edx, 0x3f1
lea r8d, [rdx - 9]
call fcn.14005ea10
call fcn.140065250
test eax, eax
jne 0x1400587b2
call fcn.1400654a0
test eax, eax
mov edx, r15d
je 0x1400587b7
mov edx, 1
mov dword [rbx + 0xc], edx
call fcn.1400656f0
test dword [rsi + 0x128], 0x8000000
je 0x140058921
test byte [rsi + 0x154], 0x40
jne 0x1400587e2
test byte [rsi + 0x24], 2
je 0x140058921
mov ecx, 0x28
call fcn.140066208
mov rbx, rax
mov qword [rsp + 0x50], rax
lea rax, vtable.CSurfaceDolbyDSPControl.0
mov qword [rbx], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], r15d
call fcn.140008300
mov ecx, dword [rax + 0x30]
shr ecx, 1
and ecx, 1
mov dword [rbx + 8], ecx
call fcn.140008300
mov ecx, dword [rax + 0x160]
shr ecx, 0x1c
and ecx, 1
mov dword [rbx + 0xc], ecx
je 0x140058835
movups xmm0, xmmword [0x1400bb248]
jmp 0x140058852
cmp dword [rbx + 8], 0
je 0x14005884b
mov dword [rbx + 0x10], 1
movups xmm0, xmmword [0x140097f20]
jmp 0x140058852
movups xmm0, xmmword [0x1400812d0]
lea rdi, [rbx + 0x14]
movups xmmword [rdi], xmm0
xor edx, edx
mov r8d, 0x100
lea rcx, [rsp + 0x70]
call fcn.14006d020
mov r8d, 0x7f
lea rdx, [rsp + 0x70]
lea rcx, [0x140083718]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_StringFromGUID2]
mov r8d, 0x7f
lea rdx, [rsp + 0x170]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_StringFromGUID2]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x70]
test eax, eax
cmovle rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.140004a00
nop
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov eax, dword [rbx + 0xc]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbx + 8]
mov r8d, 0x78
lea rdx, str.CSurfaceDolbyDSPControl::CSurfaceDolbyDSPControl
lea rcx, str._s__d_m_bAmdDolbyDAX3_d_m_bIntelDolbyDAX3_d_ModuleId_s
call fcn.140026f80
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x140058905
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.14000edf0
lea rcx, [rax + 0x88]
mov rdx, rbx
call fcn.1400048f0
nop
mov qword [rbp + 0x1d8], rbx
call fcn.140011350
test eax, eax
je 0x140058952
call fcn.140064000
test eax, eax
je 0x14005893a
call fcn.1400589f0
jmp 0x140058952
call fcn.1400085d0
mov rcx, rax
mov edx, 0x3f4
mov r8d, 0xbb8
call fcn.14005ea10
call fcn.1400209b0
test rax, rax
je 0x140058965
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
test byte [rsi + 0x134], 1
je 0x140058986
call fcn.1400085d0
mov rcx, rax
mov edx, 0x40b
mov r8d, 0xbb8
call fcn.14005ea10
mov dword [rbp + 0x178], 1
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcessId]
mov r9d, eax
mov r8d, 0x193
lea rdx, str.CServiceMain::InitService
lea rcx, str._s__d_GetCurrentProcessId_d_End
call fcn.140026f80
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.140065bd0
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
mov ecx, 0x80004005
call fcn.140003270
int3