Function at 0x140028ae0
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
jmp 0x140028ae0
push rbx
sub rsp, 0x20
mov rbx, rcx
call fcn.14001d830
call fcn.140014310
cmp dword [rax + 0x88], 5
jne 0x140028b1f
mov rcx, rbx
call fcn.14002af60
call fcn.14001d830
cmp dword [0x1401baea0], 0
jle 0x140028b73
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x14002ad50
call fcn.140014310
mov ecx, dword [rax + 0x88]
test ecx, 0xfffffffa
jne 0x140028b44
cmp ecx, 4
je 0x140028b44
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140028b80
call fcn.140014310
mov ecx, dword [rax + 0x88]
sub ecx, 2
cmp ecx, 1
jbe 0x140028b12
call fcn.140014310
mov rcx, rbx
mov dword [rax + 0x88], 4
add rsp, 0x20
pop rbx
jmp fcn.14002adf0
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rax, qword [0x1401aa010]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rdi, rcx
xor r12d, r12d
mov dword [rbp - 0x59], r12d
call fcn.14002adf0
mov r8d, 0x86
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_Start
call fcn.140075db0
call fcn.140014310
lea rsi, [rax + 0x8c]
call fcn.1400143d0
mov r13, rax
test rax, rax
je 0x140028cd0
cmp dword [0x1401b2668], r12d
je 0x140028cd0
mov rcx, qword [0x1401ab9a8]
test byte [rcx + 0x1c], 1
jne 0x140028c1e
cmp dword [0x1401b266c], r12d
je 0x140028cd0
mov r9d, dword [rax + 4]
shr r9d, 9
and r9d, 1
mov r8d, 0x8d
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_BG_pRtkApoPolicy__IsRtkGen4RenderSupport_d
call fcn.140075db0
mov r9d, dword [r13 + 4]
and r9d, 1
mov r8d, 0x8e
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_BG_pRtkApoPolicy__IsRtkGen4CaptureSupport_d
call fcn.140075db0
mov r9d, dword [r13 + 4]
shr r9d, 3
and r9d, 1
mov r8d, 0x8f
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_BG_pRtkApoPolicy__ApplyRtkEffectInBtUsbAudio_d
call fcn.140075db0
mov r9d, dword [r13 + 4]
shr r9d, 5
and r9d, 1
mov r8d, 0x90
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_BG_pRtkApoPolicy__PlaybackDeviceSharedNN_d
call fcn.140075db0
movzx r9d, byte [r13 + 7]
and r9d, 1
mov r8d, 0x91
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_BG_pRtkApoPolicy__IsRtkGen5Support_d
call fcn.140075db0
test rsi, rsi
jne 0x140028cf3
mov r8d, 0x93
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_RETURN_ON_FALSE
call fcn.140075db0
jmp 0x140029d6b
call fcn.14006b0c0
mov dword [rbp - 0x55], r12d
mov qword [rbp - 0x49], r12
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x140029e14
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rbp - 0x49], rax
mov dword [rbp - 0x59], 1
lea r9, str.General
lea r8, str.SoftwareRealtekAudioRtkAudUService
lea rdx, [0x14011bc58]
lea rcx, [rbp - 0x49]
call fcn.14000ec90
lea r9, [rbp - 0x55]
lea r8, str.InitFirstTime
mov rbx, qword [rbp - 0x49]
mov rdx, rbx
mov rcx, qword [0x1401aa498]
call fcn.1400985d0
mov r15d, 0xffffffff
test eax, eax
cmovne r15d, dword [rbp - 0x55]
mov dword [rbp - 0x59], r12d
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028da0
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14005eeb3.0]
mov dword [rbp - 0x51], r12d
mov qword [rbp - 0x41], r12
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x140029e1f
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rbp - 0x41], rax
mov dword [rbp - 0x59], 2
lea r9, str.General
lea r8, str.SoftwareRealtekAudioRtkAudUService
lea rdx, [0x14011bc58]
lea rcx, [rbp - 0x41]
call fcn.14000ec90
lea r9, [rbp - 0x51]
lea r8, str.JDPopup
mov rbx, qword [rbp - 0x41]
mov rdx, rbx
mov rcx, qword [0x1401aa498]
call fcn.1400985d0
mov r14d, 0xffffffff
test eax, eax
cmovne r14d, dword [rbp - 0x51]
mov dword [rbp - 0x59], r12d
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028e48
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14005eeb3.0]
call fcn.14000dda0
test eax, eax
jne 0x140028e61
cmp r15d, 0xffffffff
je 0x140028e61
cmp r14d, 0xffffffff
jne 0x140028f16
mov r8d, 0x9d
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, [0x14011bca8]
call fcn.140075db0
call fcn.14002aa90
nop
mov qword [rbp - 0x39], r12
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x140029e2a
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rbp - 0x39], rax
mov dword [rbp - 0x59], 4
lea r9, str.General
lea r8, str.SoftwareRealtekAudioRtkAudUService
lea rdx, [0x14011bc58]
lea rcx, [rbp - 0x39]
call fcn.14000ec90
mov r9d, 1
lea r8, str.InitFirstTime
mov rbx, qword [rbp - 0x39]
mov rdx, rbx
mov rcx, qword [0x1401aa498]
call fcn.1400986f0
nop
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028f16
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14005eeb3.0]
call fcn.14002b4b0
lea r14, vtable.IRtkAudioDriverEventNotify.0
cmp qword [rdi + 0x38], 0
jne 0x14002903b
mov ecx, 0x40
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
mov qword [rax], r14
lea rcx, [rax + 0x28]
call fcn.1400a4be0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
mov qword [rbx + 0x20], r12
lea rax, vtable.CDriverVolumeMgr.1.0
mov qword [rbx], rax
lea rax, vtable.CDriverVolumeMgr.0
mov qword [rbx + 8], rax
mov dword [rbx + 0x38], r12d
mov qword [rbx + 0x30], r12
mov qword [rdi + 0x38], rbx
mov r8d, reloc.OLEAUT32.dll_SafeArrayUnaccessData
lea rdx, str.CDriverVolumeMgr::Init
lea rcx, [0x14011bca8]
call fcn.140075db0
mov qword [rbp - 0x21], rbx
call fcn.14001d830
mov r15, rax
lea rcx, [rax + 0x20]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r15 + 0x48]
mov rax, qword [rcx]
test rax, rax
je 0x140028fd2
cmp qword [rax + 0x10], rbx
je 0x140028fdb
mov rax, qword [rax]
test rax, rax
jne 0x140028fc4
lea rdx, [rbp - 0x21]
call fcn.14000ecc0
lea rcx, [r15 + 0x20]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov qword [rbx + 0x30], rax
lea rcx, [rbx + 8]
call fcn.1400f3800
call fcn.140014310
test dword [rax + 0x1cc], 0x4000000
je 0x14002903b
lea rdx, str.CDriverVolumeMgr::Init
lea rcx, str._s_CPLReloadVolWhenReboot__1__try_to_get_volume_from_driver_and_set_to_OS
call fcn.140075db0
mov rax, qword [rbx]
xor edx, edx
lea r8d, [rdx + 0x3d]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14005eeb3.0]
cmp qword [rdi + 0x40], 0
jne 0x14002906e
call fcn.140014310
test dword [rax + 0x348], 0x4000
je 0x14002906e
mov ecx, 0x20
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
mov rcx, rax
call fcn.14007bbf0
nop
mov qword [rdi + 0x40], rax
cmp qword [rdi + 0x48], 0
jne 0x1400290c0
test dword [rsi + 0xbc], 0x8100
je 0x1400290c0
mov ecx, 0x78
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov qword [rax + 0x70], rcx
mov rcx, rax
call fcn.140072310
nop
mov qword [rdi + 0x48], rax
cmp qword [rdi + 0x50], 0
jne 0x140029100
test dword [rsi + 0xbc], 0x10000
jne 0x1400290e5
test byte [rsi + 0x150], 8
jne 0x1400290e5
test dword [rsi + 0x18], 0x2000
je 0x140029100
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
mov rcx, rax
call fcn.140083d00
nop
mov qword [rdi + 0x50], rax
cmp qword [rdi + 0x70], 0
jne 0x140029141
test byte [rsi + 0x134], 1
je 0x140029141
mov ecx, 0x50
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
mov rcx, rax
call fcn.14006eb70
nop
mov qword [rdi + 0x70], rax
cmp qword [rdi + 0x58], 0
jne 0x140029241
call fcn.140014310
test dword [rax + 0x140], 0x400
je 0x140029241
mov ecx, 0x20
call fcn.1400f47a0
mov r12, rax
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
lea rbx, [rax + 8]
lea r14, [rax + 0x10]
lea rax, vtable.CSoundAliveMgr.2.0
mov qword [r12], rax
lea rax, vtable.CSoundAliveMgr.1.0
mov qword [rbx], rax
lea rax, vtable.CSoundAliveMgr.0
mov qword [r14], rax
mov qword [rbp - 0x19], r14
call fcn.140014660
mov r15, rax
test r14, r14
je 0x1400291f1
lea rcx, [rax + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r15 + 0x38]
mov rax, qword [rcx]
test rax, rax
je 0x1400291de
nop word [rax + rax]
cmp qword [rax + 0x10], r14
je 0x1400291e7
mov rax, qword [rax]
test rax, rax
jne 0x1400291d0
lea rdx, [rbp - 0x19]
call fcn.14000ecc0
lea rcx, [r15 + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov qword [rbp - 0x11], rbx
call fcn.14001d830
mov r14, rax
test rbx, rbx
je 0x14002923a
lea rcx, [rax + 0x20]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x48]
mov rax, qword [rcx]
test rax, rax
je 0x140029226
cmp qword [rax + 0x10], rbx
je 0x14002922f
mov rax, qword [rax]
test rax, rax
jne 0x140029218
lea rdx, [rbp - 0x11]
call fcn.14000ecc0
lea rcx, [r14 + 0x20]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop
mov qword [rdi + 0x58], r12
xor r12d, r12d
cmp qword [rdi + 0x78], 0
jne 0x1400292a7
test dword [rsi + 0x160], 0x800
je 0x1400292a7
mov ecx, 0x10
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax], r12
mov qword [rax + 8], 0
mov qword [rdi + 0x78], rax
call fcn.140014660
xor r8d, r8d
xor edx, edx
call fcn.1400ac890
mov rdx, rax
mov r8d, 0x64
call fcn.1400db2d0
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s_m_pSilencePlayerMgr__PlayASlienceForStart__
call fcn.140075db0
cmp qword [rdi + 0x80], 0
jne 0x140029432
mov eax, dword [rsi + 0x38]
and eax, 0x2009
cmp eax, 0x2009
jne 0x140029432
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400f47a0
mov r14, rax
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rax, vtable.CWOVMgr.0
mov qword [r14], rax
mov qword [r14 + 8], 1
mov qword [r14 + 0x10], r12
mov qword [rdi + 0x80], r14
mov dword [r14 + 8], 1
mov ecx, 0x90
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
movups xmmword [rax + 0x80], xmm0
lea rax, vtable.CMicRtkWovSetting.0
mov qword [rbx], rax
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x140029e35
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rbx + 0x10], rax
mov dword [rbx + 0x3c], r12d
mov qword [rbx + 0x40], r12
mov qword [rbx + 0x48], r12
mov qword [rbx + 0x50], r12
mov qword [rbx + 0x18], 1
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x84], 0
mov dword [rbx + 0x30], r12d
mov qword [rbx + 0x58], r12
mov qword [rbx + 0x60], r12
mov qword [rbx + 0x68], r12
mov qword [rbx + 0x70], r12
mov qword [rbx + 0x78], r12
mov dword [rbx + 0x80], r12d
mov dword [rbx + 0x8c], r12d
mov qword [r14 + 0x10], rbx
call fcn.140014310
movzx ecx, word [rax + 0xc6]
and ecx, 1
mov rax, qword [r14 + 0x10]
mov dword [rax + 0x1c], ecx
call fcn.140014310
mov ecx, dword [rax + 0xc4]
shr ecx, 0x11
and ecx, 1
mov rax, qword [r14 + 0x10]
mov dword [rax + 0x20], ecx
call fcn.140014310
mov ecx, dword [rax + 0xc4]
shr ecx, 9
and ecx, 1
mov rax, qword [r14 + 0x10]
mov dword [rax + 0x24], ecx
call fcn.140014310
mov edx, dword [rax + 0xc4]
shr edx, 0xb
and edx, 1
mov rax, qword [r14 + 0x10]
mov dword [rax + 0x28], edx
mov rcx, qword [r14 + 0x10]
call fcn.140084d90
lea r15, vtable.ITimerEventNotify.0
cmp qword [rdi + 0x88], 0
jne 0x1400295b9
test dword [rsi + 0x170], 0x10000000
je 0x1400295b9
mov ecx, 0x90
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
movups xmmword [rax + 0x80], xmm0
lea rax, vtable.CApoPolicyCfgClient.0
mov qword [rbx], rax
call fcn.14000cd60
mov rcx, rax
test rax, rax
je 0x140029df9
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14005eeb3.0]
add rax, 0x18
mov qword [rbx + 0x10], rax
mov dword [rbx + 8], r12d
lea rax, vtable.IAudioDeviceChangeNotify.0
mov qword [rbx + 0x18], rax
lea rcx, [rbx + 0x38]
call fcn.1400a4be0
nop
lea rcx, [rbx + 0x40]
mov dword [rcx + 0x28], r12d
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
nop
lea rsi, [rbx + 0x30]
lea rax, vtable.CJackImpedanceDetect.2.0
mov qword [rbx], rax
lea rax, vtable.CJackImpedanceDetect.1.0
mov qword [rbx + 0x18], rax
lea rax, vtable.CJackImpedanceDetect.4.0
mov qword [rbx + 0x20], rax
lea rax, vtable.CJackImpedanceDetect.3.0
mov qword [rbx + 0x28], rax
lea rax, vtable.CJackImpedanceDetect.0
mov qword [rsi], rax
mov qword [rbx + 0x70], r12
mov qword [rbx + 0x78], 0
lea rax, [0x1401aa188]
mov qword [0x1401b2430], rax
mov dword [rbx + 0x80], r12d
mov dword [rbx + 0x88], r12d
call fcn.140014310
mov ecx, dword [rax + 0xa0]
and ecx, 1
mov dword [rbx + 0x84], ecx
mov rcx, rbx
call fcn.1400655c0
mov qword [rbp - 9], rsi
call fcn.1400147e0
mov r14, rax
test rsi, rsi
je 0x1400295b2
lea rcx, [rax + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x50]
mov rax, qword [rcx]
test rax, rax
je 0x14002959e
nop dword [rax]
cmp qword [rax + 0x10], rsi
je 0x1400295a7
mov rax, qword [rax]
test rax, rax
jne 0x140029590
lea rdx, [rbp - 9]
call fcn.14000ecc0
lea rcx, [r14 + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop
mov qword [rdi + 0x88], rbx
cmp qword [rdi + 0x90], 0
jne 0x1400295fb
mov ecx, 0x60
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
mov rcx, rax
call fcn.1400a06e0
nop
mov qword [rdi + 0x90], rax
cmp qword [rdi + 0xa0], 0
jne 0x140029633
mov ecx, 0x28
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov rcx, rax
call fcn.14008a530
nop
mov qword [rdi + 0xa0], rax
cmp qword [rdi + 0xa8], 0
jne 0x14002967f
call fcn.140014310
test dword [rax + 0x1f4], 0x8000000
je 0x14002967f
mov ecx, 0x1b8
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xor edx, edx
mov r8d, 0x1b8
mov rcx, rax
call fcn.1400fac10
mov rcx, rbx
call fcn.1400cee40
nop
mov qword [rdi + 0xa8], rax
cmp qword [rdi + 0xb0], 0
jne 0x1400296ba
mov ecx, 0xd0
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xor edx, edx
mov r8d, 0xd0
mov rcx, rax
call fcn.1400fac10
mov rcx, rbx
call fcn.140067190
nop
mov qword [rdi + 0xb0], rax
cmp qword [rdi + 0xb8], 0
jne 0x140029727
call fcn.140014310
mov esi, r12d
mov r14, r12
movsxd r15, dword [rax + 0x358]
test r15, r15
jle 0x140029720
mov rbx, r12
nop
call fcn.140014310
test rbx, rbx
js 0x140029e04
cmp esi, dword [rax + 0x358]
jge 0x140029e04
mov rax, qword [rax + 0x350]
test byte [rbx + rax + 0x400], 1
jne 0x140029d98
inc esi
inc r14
add rbx, 0x434
cmp r14, r15
jl 0x1400296e0
lea r15, vtable.ITimerEventNotify.0
cmp qword [rdi + 0xc8], 0
jne 0x140029742
call fcn.140014310
test dword [rax + 0x1fc], 0x20000
jne 0x140029769
call fcn.1400143d0
test dword [rax + 4], 0x200
jne 0x140029769
call fcn.1400143d0
test byte [rax + 4], 1
jne 0x140029769
call fcn.1400143d0
test dword [rax + 4], 0x20000000
je 0x140029787
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
mov rcx, rax
call fcn.14002b6e0
nop
mov qword [rdi + 0xc8], rax
cmp qword [rdi + 0xf8], 0
jne 0x1400298e9
call fcn.1400143d0
test dword [rax + 4], 0x200000
je 0x1400298e9
mov ecx, 0x78
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
movups xmmword [rbx + 0x50], xmm0
movups xmmword [rbx + 0x60], xmm0
mov qword [rbx + 0x70], rax
lea rax, vtable.IAudioDeviceChangeNotify.0
mov qword [rbx], rax
lea rsi, [rbx + 8]
mov qword [rsi], r15
lea rcx, [rbx + 0x10]
mov dword [rcx + 0x28], r12d
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
nop
lea rax, vtable.CRtkCameraMaskDetectHelper.1.0
mov qword [rbx], rax
lea rax, vtable.CRtkCameraMaskDetectHelper.0
mov qword [rsi], rax
mov dword [rbx + 0x40], r12d
mov dword [rbx + 0x44], 0xffffffff
mov qword [rbx + 0x48], r12
mov qword [rbx + 0x50], r12
mov qword [rbx + 0x58], r12
mov qword [rbx + 0x60], r12
mov qword [rbx + 0x68], r12
mov dword [rbx + 0x70], 0xa
mov r8d, SafeArrayDestroy
lea rdx, str.CRtkCameraMaskDetectHelper::CRtkCameraMaskDetectHelper
lea rcx, [0x14011bca8]
call fcn.140075db0
mov qword [rbp - 1], rbx
call fcn.140014660
mov r14, rax
lea rcx, [rax + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x38]
mov rax, qword [rcx]
test rax, rax
je 0x14002987f
cmp qword [rax + 0x10], rbx
je 0x140029888
mov rax, qword [rax]
test rax, rax
jne 0x140029871
lea rdx, [rbp - 1]
call fcn.14000ecc0
lea rcx, [r14 + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov qword [rbp + 7], rsi
call fcn.1400147e0
mov r14, rax
test rsi, rsi
je 0x1400298e2
lea rcx, [rax + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x50]
mov rax, qword [rcx]
test rax, rax
je 0x1400298ce
nop dword [rax]
cmp qword [rax + 0x10], rsi
je 0x1400298d7
mov rax, qword [rax]
test rax, rax
jne 0x1400298c0
lea rdx, [rbp + 7]
call fcn.14000ecc0
lea rcx, [r14 + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop
mov qword [rdi + 0xf8], rbx
cmp qword [rdi + 0x100], 0
jne 0x140029a29
call fcn.1400143d0
test dword [rax + 4], 0x400000
je 0x140029a29
mov ecx, 0x78
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
movups xmmword [rbx + 0x50], xmm0
movups xmmword [rbx + 0x60], xmm0
mov qword [rbx + 0x70], rax
lea rax, vtable.IAudioDeviceChangeNotify.0
mov qword [rbx], rax
lea rsi, [rbx + 8]
mov qword [rsi], r15
lea rcx, [rbx + 0x10]
mov dword [rcx + 0x28], r12d
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
nop
lea rax, vtable.CRtkCameraHumanPoseHelper.1.0
mov qword [rbx], rax
lea rax, vtable.CRtkCameraHumanPoseHelper.0
mov qword [rsi], rax
mov dword [rbx + 0x40], r12d
mov qword [rbx + 0x48], r12
mov qword [rbx + 0x50], r12
mov qword [rbx + 0x58], r12
mov qword [rbx + 0x60], r12
mov qword [rbx + 0x68], r12
mov dword [rbx + 0x70], 0xa
mov qword [rbp + 0xf], rbx
call fcn.140014660
mov r14, rax
lea rcx, [rax + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x38]
mov rax, qword [rcx]
test rax, rax
je 0x1400299c1
cmp qword [rax + 0x10], rbx
je 0x1400299ca
mov rax, qword [rax]
test rax, rax
jne 0x1400299b3
lea rdx, [rbp + 0xf]
call fcn.14000ecc0
lea rcx, [r14 + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov qword [rbp + 0x17], rsi
call fcn.1400147e0
mov r14, rax
test rsi, rsi
je 0x140029a22
lea rcx, [rax + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x50]
mov rax, qword [rcx]
test rax, rax
je 0x140029a0e
nop dword [rax + rax]
cmp qword [rax + 0x10], rsi
je 0x140029a17
mov rax, qword [rax]
test rax, rax
jne 0x140029a00
lea rdx, [rbp + 0x17]
call fcn.14000ecc0
lea rcx, [r14 + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop
mov qword [rdi + 0x100], rbx
cmp qword [rdi + 0xe0], 0
jne 0x140029b37
call fcn.140014310
test dword [rax + 0x1c4], 0x400
je 0x140029b37
mov ecx, 0x10
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
lea rsi, [rax + 8]
lea rax, vtable.CRecordingDetectMgr.1.0
mov qword [rbx], rax
lea rax, vtable.CRecordingDetectMgr.0
mov qword [rsi], rax
mov r8d, SafeArrayDestroy
lea rdx, str.CRecordingDetectMgr::CRecordingDetectMgr
lea rcx, [0x14011bca8]
call fcn.140075db0
mov qword [rbp + 0x1f], rsi
call fcn.1400147e0
mov r14, rax
test rsi, rsi
je 0x140029ad6
lea rcx, [rax + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x50]
mov rax, qword [rcx]
test rax, rax
je 0x140029ac3
cmp qword [rax + 0x10], rsi
je 0x140029acc
mov rax, qword [rax]
test rax, rax
jne 0x140029ab5
lea rdx, [rbp + 0x1f]
call fcn.14000ecc0
lea rcx, [r14 + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov qword [rbp - 0x29], rbx
call fcn.14002c560
mov rsi, rax
lea rcx, [rax + 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [rsi + 0x40]
mov rax, qword [rcx]
test rax, rax
je 0x140029b06
cmp qword [rax + 0x10], rbx
je 0x140029b0f
mov rax, qword [rax]
test rax, rax
jne 0x140029af8
lea rdx, [rbp - 0x29]
call fcn.14000ecc0
lea rcx, [rsi + 0x18]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
call fcn.1400147e0
mov rcx, rax
mov edx, 0x42c
lea r8d, [rdx - 0x44]
call fcn.1400e8700
nop
mov qword [rdi + 0xe0], rbx
cmp qword [rdi + 0xe8], 0
jne 0x140029b93
call fcn.1400143d0
test dword [rax + 4], 0x200
je 0x140029b93
cmp qword [rdi + 0xe8], 0
jne 0x140029b93
mov ecx, 0x58
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
mov qword [rax + 0x50], rcx
mov rcx, rax
call fcn.1400e9e70
nop
mov qword [rdi + 0xe8], rax
cmp qword [rdi + 0xd0], 0
jne 0x140029bd7
call fcn.140014310
test dword [rax + 0x204], 0x20000000
jne 0x140029bb9
call fcn.1400143d0
test byte [rax + 4], 0x10
je 0x140029bd7
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
mov rcx, rax
call fcn.1400801b0
nop
mov qword [rdi + 0xd0], rax
cmp qword [rdi + 0xd8], 0
jne 0x140029c43
call fcn.1400e9160
test eax, eax
jne 0x140029c04
call fcn.1400e9280
test eax, eax
jne 0x140029c04
call fcn.140014310
test dword [rax + 0xc8], 0x4000
je 0x140029c43
call fcn.140014310
mov ecx, 0x103c
cmp word [rax + 0x342], cx
je 0x140029c43
mov ecx, 0x30
call fcn.1400f47a0
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rcx, rax
call fcn.1400e8f00
nop
mov qword [rdi + 0xd8], rax
cmp dword [rdi + 0x108], 0
jne 0x140029c6e
call fcn.14006b0c0
mov rdx, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x48]
mov rcx, rdx
call qword [case.0x14005eeb3.0]
mov dword [rdi + 0x108], 1
cmp qword [rdi + 0xc0], 0
jne 0x140029d49
test byte [r13 + 4], 2
je 0x140029d49
mov ecx, 0x10
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x29], rax
lea rsi, [rax + 8]
lea rax, vtable.CHowlingDetectMgr.1.0
mov qword [rbx], rax
lea rax, vtable.CHowlingDetectMgr.0
mov qword [rsi], rax
mov qword [rbp + 0x27], rsi
call fcn.1400147e0
mov r14, rax
test rsi, rsi
je 0x140029cf8
lea rcx, [rax + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [r14 + 0x50]
mov rax, qword [rcx]
test rax, rax
je 0x140029ce5
cmp qword [rax + 0x10], rsi
je 0x140029cee
mov rax, qword [rax]
test rax, rax
jne 0x140029cd7
lea rdx, [rbp + 0x27]
call fcn.14000ecc0
lea rcx, [r14 + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov qword [rbp - 0x31], rbx
call fcn.140014660
mov rsi, rax
lea rcx, [rax + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
lea rcx, [rsi + 0x38]
mov rax, qword [rcx]
test rax, rax
je 0x140029d2e
nop word [rax + rax]
cmp qword [rax + 0x10], rbx
je 0x140029d37
mov rax, qword [rax]
test rax, rax
jne 0x140029d20
lea rdx, [rbp - 0x31]
call fcn.14000ecc0
lea rcx, [rsi + 0x10]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop
mov qword [rdi + 0xc0], rbx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcessId]
mov r9d, eax
mov r8d, 0x14b
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_GetCurrentProcessId_d_End
call fcn.140075db0
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400f4410
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0xcaa0
call fcn.1400f47a0
mov rbx, rax
mov qword [rbp - 0x31], rax
xor edx, edx
mov r8d, 0xcaa0
mov rcx, rax
call fcn.1400fac10
mov rcx, rbx
call fcn.140061830
mov rdx, rax
mov qword [rdi + 0xb8], rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x20]
mov rcx, rdx
call qword [case.0x14005eeb3.0]
mov r8d, 0x101
lea rdx, str.CBackgroundProcMain::InitNormalUserBackgroundProcess
lea rcx, str._s__d_IntelDspR0Calibration
call fcn.140075db0
jmp 0x140029720
mov ecx, 0x80004005
call fcn.14000ce90
nop
mov edx, 1
mov ecx, 0xc000008c
call fcn.14001dd60
nop
mov ecx, 0x80004005
call fcn.14000ce90
nop
mov ecx, 0x80004005
call fcn.14000ce90
nop
mov ecx, 0x80004005
call fcn.14000ce90
nop
mov ecx, 0x80004005
call fcn.14000ce90
int3
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
mov rdi, rcx
call fcn.14002adf0
call fcn.14002b4b0
cmp qword [rdi + 0x40], 0
jne 0x14002ad9b
call fcn.140014310
test dword [rax + 0x348], 0x4000
je 0x14002ad9b
mov ecx, 0x20
call fcn.1400f47a0
mov qword [rsp + 0x30], rax
mov rcx, rax
call fcn.14007bbf0
nop
mov qword [rdi + 0x40], rax
cmp qword [rdi + 0xb0], 0
jne 0x14002add7
mov ecx, 0xd0
call fcn.1400f47a0
mov rbx, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0xd0
mov rcx, rax
call fcn.1400fac10
mov rcx, rbx
call fcn.140067190
nop
mov qword [rdi + 0xb0], rax
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140014310