Function at 0x1400a64e0
Capabilities:
Create thread
Set registry value

Disassembly:
mov r11, rsp
push rdi
sub rsp, 0x60
mov qword [r11 - 0x38], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x140162010]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rdi, rcx
cmp edx, 0x446
jne 0x1400a6580
cmp qword [rcx + 0x878], 0
jne 0x1400a6ca3
xor esi, esi
mov dword [rsp + 0x38], esi
lea rax, [r11 - 0x30]
mov qword [r11 - 0x40], rax
mov dword [rsp + 0x20], esi
mov r9, rcx
lea r8, [0x1400a3e20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x878], rax
mov r8d, 0x765
lea rcx, str._s__d_CreateThread_SpkEnroll_TrainThread___x
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
mov r9, rax
call fcn.140061d00
call fcn.14000b5b0
mov edx, 0x446
mov rcx, rax
call fcn.1400bb290
jmp 0x1400a6ca3
cmp edx, 0x447
jne 0x1400a65d4
cmp qword [rcx + 0x888], 0
jne 0x1400a6ca3
xor esi, esi
mov dword [rsp + 0x38], esi
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, rdi
lea r8, [0x1400a5330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x888], rax
mov r8d, 0x771
lea rcx, str._s__d_CreateThread_SpkEnroll_DetectScoreThread___x
jmp 0x1400a655a
cmp edx, 0x448
jne 0x1400a667b
cmp qword [rcx + 0x878], 0
je 0x1400a6664
mov r8d, 0x77b
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TrainThread
call fcn.140061d00
mov edx, 0x3e8
mov rcx, qword [rdi + 0x878]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400a6635
mov r9d, eax
mov r8d, 0x77f
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.140061d00
mov r8d, 0x781
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TrainThread
call fcn.140061d00
mov rcx, qword [rdi + 0x878]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor esi, esi
mov qword [rdi + 0x878], rsi
call fcn.14000b5b0
mov edx, 0x448
mov rcx, rax
call fcn.1400bb290
jmp 0x1400a6ca3
cmp edx, 0x449
jne 0x1400a6722
cmp qword [rcx + 0x888], 0
je 0x1400a670b
mov r8d, 0x78d
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_DetectScoreThread
call fcn.140061d00
mov edx, 0x3e8
mov rcx, qword [rdi + 0x888]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400a66dc
mov r9d, eax
mov r8d, 0x791
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.140061d00
mov r8d, 0x793
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_DetectScoreThread
call fcn.140061d00
mov rcx, qword [rdi + 0x888]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor esi, esi
mov qword [rdi + 0x888], rsi
call fcn.14000b5b0
mov edx, 0x449
mov rcx, rax
call fcn.1400bb290
jmp 0x1400a6ca3
cmp edx, 0x445
jne 0x1400a6835
mov r8d, 0x79d
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_TID_RTK_STD_VOL_INFO
call fcn.140061d00
xor eax, eax
mov qword [rsp + 0x48], rax
xor esi, esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x50], rsi
mov r9d, 0x2001f
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000001
lea rcx, [rsp + 0x40]
call fcn.140027f60
lea rdi, [0x140169eb0]
test eax, eax
jne 0x1400a67ef
mov dword [rsp + 0x28], 0x400
mov qword [rsp + 0x20], rdi
lea r9d, [rsi + 3]
xor r8d, r8d
lea rdx, str.Gen5VolInfo
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
test eax, eax
jne 0x1400a67ca
mov r8d, 0x7a6
lea rcx, str._s__d_set_Gen5VolInfo_success
jmp 0x1400a67d7
mov r8d, 0x7a9
lea rcx, [0x1400e9c70]
call fcn.140061d00
test rbx, rbx
je 0x1400a680d
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rbx, rsi
jmp 0x1400a680d
mov r8d, 0x7ae
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x1400e9c70]
call fcn.140061d00
mov rbx, qword [rsp + 0x40]
xor edx, edx
mov r8d, 0x400
mov rcx, rdi
call fcn.1400cc120
nop
test rbx, rbx
je 0x1400a6ca3
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x1400a6ca3
cmp edx, 0x444
jne 0x1400a69d0
movss xmm0, dword [rcx + 0x898]
cvtps2pd xmm0, xmm0
movsd qword [rsp + 0x28], xmm0
mov eax, dword [rcx + 0x8ec]
mov dword [rsp + 0x20], eax
mov r9d, dword [rcx + 0x64]
mov r8d, 0x7b6
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwCurrentSpkEnrollState___d__dwTrainDataCnt___d__fMaxEnrollScore___f
call fcn.140061d00
lea rbx, [rdi + 0x10]
mov eax, dword [rdi + 0x64]
mov dword [rbx], eax
mov eax, dword [rdi + 0x8ec]
mov dword [rdi + 0x20], eax
mov eax, dword [rdi + 0x890]
mov dword [rdi + 0x24], eax
movss xmm1, dword [rdi + 0x898]
movss dword [rdi + 0x28], xmm1
mov eax, dword [rdi + 0x89c]
mov dword [rdi + 0x2c], eax
movss xmm0, dword [rdi + 0x894]
movss dword [rdi + 0x30], xmm0
mov eax, dword [rdi + 0x8f0]
mov dword [rdi + 0x34], eax
xor esi, esi
mov eax, esi
comiss xmm1, xmm0
setae al
mov dword [rdi + 0x38], eax
mov eax, dword [rdi + 0x8a8]
mov dword [rdi + 0x3c], eax
mov eax, dword [rdi + 0x8ac]
mov dword [rdi + 0x40], eax
mov eax, dword [rdi + 0x8b0]
mov dword [rdi + 0x44], eax
mov eax, dword [rdi + 0x8b4]
mov dword [rdi + 0x48], eax
mov eax, dword [rdi + 0x8cc]
mov dword [rdi + 0x4c], eax
movups xmm0, xmmword [rdi + 0x8b8]
movups xmmword [rdi + 0x50], xmm0
mov eax, dword [rdi + 0x8c8]
mov dword [rdi + 0x60], eax
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x50], rsi
mov r9d, 0x2001f
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000001
lea rcx, [rsp + 0x40]
call fcn.140027f60
test eax, eax
jne 0x1400a69ad
mov dword [rsp + 0x28], 0x54
mov qword [rsp + 0x20], rbx
lea r9d, [rsi + 3]
xor r8d, r8d
lea rdx, str.Gen5Info
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
test eax, eax
jne 0x1400a6988
mov r8d, 0x7c4
lea rcx, str._s__d_set_Gen5Info_success
jmp 0x1400a6995
mov r8d, 0x7c7
lea rcx, [0x1400e9c70]
call fcn.140061d00
test rbx, rbx
je 0x1400a69cb
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rbx, rsi
jmp 0x1400a69cb
mov r8d, 0x7cc
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x1400e9c70]
call fcn.140061d00
mov rbx, qword [rsp + 0x40]
jmp 0x1400a681e
cmp edx, 0x443
jne 0x1400a6b1e
inc dword [rcx + 0x8e8]
mov eax, dword [rcx + 0x8ec]
mov dword [rsp + 0x20], eax
mov r9d, dword [rcx + 0x8e8]
mov r8d, 0x7d6
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwRtkStdEnrollTimerCnt___d__dwTrainDataCnt___d
call fcn.140061d00
cmp dword [rdi + 0x8e8], 0x28
jae 0x1400a6ac2
mov r8d, 0x7d9
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x1400e9c70]
call fcn.140061d00
mov eax, dword [rdi + 0x64]
cmp eax, 0x78
jne 0x1400a6a6e
mov r8d, 0x7db
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x1400e9c70]
call fcn.140061d00
xor esi, esi
mov dword [rdi + 0x898], esi
mov r8, qword [rdi + 8]
mov edx, 0xc8
mov rcx, rdi
call fcn.1400a3790
jmp 0x1400a6ac2
cmp eax, 0xc8
jne 0x1400a6ac2
mov r8d, 0x7e1
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x1400e9c70]
call fcn.140061d00
movss xmm0, dword [rdi + 0x898]
comiss xmm0, dword [rdi + 0x894]
jbe 0x1400a6ac2
mov r8d, 0x7e5
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x1400e9c70]
call fcn.140061d00
mov dword [rdi + 0x8e4], 1
cmp dword [rdi + 0x8e4], 0
je 0x1400a6ca3
mov r8d, 0x7f6
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x1400e9c70]
call fcn.140061d00
call fcn.14000b5b0
mov rcx, rax
mov edx, 0x443
call fcn.1400bb290
mov r8, qword [rdi + 8]
xor edx, edx
mov rcx, rdi
call fcn.1400a3790
mov edx, 0x10000231
lea rcx, [0x1400ea068]
call fcn.1400b9af0
jmp 0x1400a6ca3
cmp edx, 0x44a
jne 0x1400a6ca3
mov eax, 0xcccccccd
mul dword [rcx + 0x8cc]
mov ebx, edx
shr ebx, 4
mov eax, 4
cmp ebx, eax
cmova ebx, eax
mov r9d, ebx
mov r8d, 0x810
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwArrayIndex__d
call fcn.140061d00
movss xmm0, dword [rdi + 0x8a8]
comiss xmm0, dword [rdi + 0x8b0]
jbe 0x1400a6b7a
inc dword [rdi + rbx*4 + 0x8b8]
jmp 0x1400a6b81
dec dword [rdi + rbx*4 + 0x8b8]
mov ecx, dword [rdi + 0x8cc]
inc ecx
mov dword [rdi + 0x8cc], ecx
mov eax, dword [rdi + 0x64]
xor esi, esi
cmp eax, 0xd2
je 0x1400a6ba0
cmp eax, 0x6e
jne 0x1400a6bb9
xor eax, eax
mov qword [rdi + 0x8b8], rax
mov qword [rdi + 0x8c0], rax
mov qword [rdi + 0x8c8], rax
mov ecx, esi
mov eax, 0xcccccccd
mul ecx
mov ebx, edx
shr ebx, 4
mov r9d, ebx
mov r8d, 0x827
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwTmpIndex__d
call fcn.140061d00
cmp ebx, 5
jb 0x1400a6ca3
mov ecx, dword [rdi + 0x8cc]
mov eax, 0xcccccccd
mul ecx
shr edx, 4
lea eax, [rdx + rdx*4]
shl eax, 2
cmp ecx, eax
jne 0x1400a6ca3
mov ecx, dword [rdi + 0x8bc]
mov eax, dword [rdi + 0x8c8]
add eax, ecx
add eax, dword [rdi + 0x8c0]
add eax, dword [rdi + 0x8b8]
add eax, dword [rdi + 0x8c4]
test eax, eax
jle 0x1400a6c73
mov r8d, 0x834
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_notify_UWP_to_show_noise_message_box
call fcn.140061d00
mov edx, 0x1000024f
lea rcx, [0x1400ea068]
call fcn.1400b9af0
xor eax, eax
mov qword [rdi + 0x8b8], rax
mov qword [rdi + 0x8c0], rax
mov qword [rdi + 0x8c8], rax
mov ecx, dword [rdi + 0x8bc]
mov dword [rdi + 0x8b8], ecx
mov eax, dword [rdi + 0x8c0]
mov dword [rdi + 0x8bc], eax
mov eax, dword [rdi + 0x8c4]
mov dword [rdi + 0x8c0], eax
mov eax, dword [rdi + 0x8c8]
mov dword [rdi + 0x8c4], eax
mov dword [rdi + 0x8c8], esi
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400c5860
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret