Function at 0x1400b2b70
Capabilities:
Create thread
Set registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
mov qword [rbp - 0x69], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1401a4010]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rdi, rcx
cmp edx, 0x450
jne 0x1400b2c19
mov eax, dword [rcx + 0x9fc]
inc eax
mov dword [rcx + 0x9fc], eax
cmp dword [rcx + 0x9a8], 0
jne 0x1400b3f10
cmp eax, 0xb4
jbe 0x1400b3f10
mov r9d, SystemTimeToVariantTime
mov r8d, 0x1431
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_Gen_5_TSE_AB48_thread_for_train___Exceeded_waiting_time___d_s
call fcn.140065460
lea rcx, [rdi - 8]
call fcn.1400b0250
call fcn.14000bb60
mov rcx, rax
mov edx, 0x450
call fcn.1400c8d80
jmp 0x1400b3f10
cmp edx, 0x451
jne 0x1400b2c86
mov eax, dword [rcx + 0xa10]
inc eax
mov dword [rcx + 0xa10], eax
cmp dword [rcx + 0x9b8], 0
jne 0x1400b3f10
cmp eax, 0xb4
jbe 0x1400b3f10
mov r9d, SystemTimeToVariantTime
mov r8d, 0x143d
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_Gen_5_TSE_AB48_thread_for_detect_score___Exceeded_waiting_time___d_s
call fcn.140065460
lea rcx, [rdi - 8]
call fcn.1400b0250
call fcn.14000bb60
mov rcx, rax
mov edx, 0x451
call fcn.1400c8d80
jmp 0x1400b3f10
cmp edx, 0x446
jne 0x1400b2cfd
cmp qword [rcx + 0x8f0], 0
jne 0x1400b3f10
xor esi, esi
mov dword [rbp - 0x21], esi
lea r9, [rcx - 8]
lea rax, [rbp - 0x21]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
lea r8, [0x1400ad2d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x8f0], rax
mov r8d, 0x1449
lea rcx, str._s__d_CreateThread_SpkEnroll_TrainThread___x
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
mov r9, rax
call fcn.140065460
call fcn.14000bb60
mov edx, 0x446
mov rcx, rax
call fcn.1400c8d80
jmp 0x1400b3f10
cmp edx, 0x447
jne 0x1400b2d50
cmp qword [rcx + 0x900], 0
jne 0x1400b3f10
xor esi, esi
mov dword [rbp - 0x1d], esi
lea r9, [rcx - 8]
lea rax, [rbp - 0x1d]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
lea r8, [0x1400ae9b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x900], rax
mov r8d, 0x1455
lea rcx, str._s__d_CreateThread_SpkEnroll_DetectScoreThread___x
jmp 0x1400b2cd7
cmp edx, 0x44e
jne 0x1400b2ee7
xor esi, esi
lea rbx, [rcx - 8]
cmp qword [rcx + 0x918], rsi
jne 0x1400b2dc4
mov dword [rbp - 0x19], esi
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, rbx
lea r8, [0x1400b01b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x918], rax
mov r9, rax
mov r8d, 0x1461
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_CreateThread_SpkEnroll_TseThread_AB48___x
call fcn.140065460
call fcn.14000bb60
mov rcx, rax
mov edx, 0x44e
call fcn.1400c8d80
cmp qword [rdi + 0x920], rsi
je 0x1400b2dfa
mov r8d, 0x146b
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_m_hSpkEnroll_TseThread_AB48_Train
call fcn.140065460
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x920], rsi
mov r9, rbx
mov dword [rbp - 0x15], esi
lea rax, [rbp - 0x15]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
lea r8, [0x1400b01b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x920], rax
mov r9, rax
mov r8d, 0x1474
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_CreateThread_SpkEnroll_TseThread_AB48_Train__0x_08x
call fcn.140065460
call fcn.14000bb60
mov rcx, rax
mov edx, 0x44e
call fcn.1400c8d80
cmp qword [rdi + 0x928], rsi
je 0x1400b2e89
mov r8d, 0x147e
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_m_hSpkEnroll_TseThread_AB48_DetectScore
call fcn.140065460
mov rcx, qword [rdi + 0x928]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x928], rsi
mov dword [rbp - 0x11], esi
lea rax, [rbp - 0x11]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, rbx
lea r8, [0x1400b01b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x928], rax
mov r9, rax
mov r8d, 0x1487
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_CreateThread_SpkEnroll_TseThread_AB48_DetectScore___x
call fcn.140065460
call fcn.14000bb60
mov edx, 0x44e
mov rcx, rax
call fcn.1400c8d80
jmp 0x1400b3f10
cmp edx, 0x448
jne 0x1400b2f8e
cmp qword [rcx + 0x8f0], 0
je 0x1400b2f77
mov r8d, 0x1491
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TrainThread
call fcn.140065460
mov edx, 0x3e8
mov rcx, qword [rdi + 0x8f0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400b2f48
mov r9d, eax
mov r8d, 0x1495
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.140065460
mov r8d, 0x1497
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TrainThread
call fcn.140065460
mov rcx, qword [rdi + 0x8f0]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor esi, esi
mov qword [rdi + 0x8f0], rsi
call fcn.14000bb60
mov edx, 0x448
mov rcx, rax
call fcn.1400c8d80
jmp 0x1400b3f10
cmp edx, 0x449
jne 0x1400b3035
cmp qword [rcx + 0x900], 0
je 0x1400b301e
mov r8d, 0x14a3
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_DetectScoreThread
call fcn.140065460
mov edx, 0x3e8
mov rcx, qword [rdi + 0x900]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400b2fef
mov r9d, eax
mov r8d, 0x14a7
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.140065460
mov r8d, 0x14a9
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_DetectScoreThread
call fcn.140065460
mov rcx, qword [rdi + 0x900]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor esi, esi
mov qword [rdi + 0x900], rsi
call fcn.14000bb60
mov edx, 0x449
mov rcx, rax
call fcn.1400c8d80
jmp 0x1400b3f10
cmp edx, 0x44f
jne 0x1400b3201
xor esi, esi
cmp qword [rcx + 0x918], rsi
je 0x1400b30c4
mov r8d, 0x14b5
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TseThread_AB48
call fcn.140065460
mov edx, 0x3e8
mov rcx, qword [rdi + 0x918]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400b3097
mov r9d, eax
mov r8d, 0x14b9
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.140065460
mov r8d, 0x14bb
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TseThread_AB48
call fcn.140065460
mov rcx, qword [rdi + 0x918]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x918], rsi
call fcn.14000bb60
mov rcx, rax
mov edx, 0x44f
call fcn.1400c8d80
cmp qword [rdi + 0x920], rsi
je 0x1400b3157
mov r8d, 0x14c7
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TseThread_AB48
call fcn.140065460
mov edx, 0x3e8
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400b312a
mov r9d, eax
mov r8d, 0x14cb
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.140065460
mov r8d, 0x14cd
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TseThread_AB48_Train
call fcn.140065460
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x920], rsi
call fcn.14000bb60
mov rcx, rax
mov edx, 0x44f
call fcn.1400c8d80
cmp qword [rdi + 0x928], rsi
je 0x1400b31ea
mov r8d, 0x14d9
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TseThread_AB48_DetectScore
call fcn.140065460
mov edx, 0x3e8
mov rcx, qword [rdi + 0x928]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400b31bd
mov r9d, eax
mov r8d, 0x14dd
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.140065460
mov r8d, 0x14df
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TseThread_AB48_DetectScore
call fcn.140065460
mov rcx, qword [rdi + 0x928]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x928], rsi
call fcn.14000bb60
mov edx, 0x44f
mov rcx, rax
call fcn.1400c8d80
jmp 0x1400b3f10
cmp edx, 0x445
jne 0x1400b330b
xor eax, eax
mov qword [rbp + 0x17], rax
xor esi, esi
mov qword [rbp + 0xf], rsi
mov dword [rbp + 0x17], esi
mov qword [rbp + 0x1f], rsi
mov r9d, 0x2001f
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0xf]
call fcn.140029f10
lea r14, [0x1401ad9b0]
test eax, eax
jne 0x1400b32a7
mov dword [rsp + 0x28], 0x400
mov qword [rsp + 0x20], r14
lea r9d, [rsi + 3]
xor r8d, r8d
lea rdx, str.Gen5VolInfo
mov rbx, qword [rbp + 0xf]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
test eax, eax
je 0x1400b328d
mov r8d, 0x14f5
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
test rbx, rbx
je 0x1400b32a2
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rbx, rsi
mov qword [rbp + 0xf], rbx
mov dword [rbp + 0x17], esi
jmp 0x1400b32c4
mov r8d, 0x14fa
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
mov rbx, qword [rbp + 0xf]
xor edx, edx
mov r8d, 0x400
mov rcx, r14
call fcn.1400daa40
mov eax, dword [rdi + 0xc4]
dec eax
cmp eax, 8
ja 0x1400b32f4
call fcn.14000bb60
mov rcx, rax
mov edx, 0x445
call fcn.1400c8d80
nop
test rbx, rbx
je 0x1400b3f10
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x1400b3f10
cmp edx, 0x444
jne 0x1400b37d4
add rcx, 0xfffffffffffffff8
call fcn.1400ab780
xor ecx, ecx
mov qword [rbp - 1], rcx
xor esi, esi
mov qword [rbp - 9], rsi
mov dword [rbp - 1], esi
mov qword [rbp + 7], rsi
mov r9d, 0x2001f
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 9]
call fcn.140029f10
test eax, eax
jne 0x1400b33b2
lea rax, [rdi + 0x10]
mov dword [rsp + 0x28], 0xa4
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 3]
xor r8d, r8d
lea rdx, str.Gen5Info
mov rcx, qword [rbp - 9]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
test eax, eax
je 0x1400b339a
mov r8d, 0x1518
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x1400b33ad
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov qword [rbp - 9], rsi
mov dword [rbp - 1], esi
jmp 0x1400b33cb
mov r8d, 0x151d
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
lea rax, [rbp - 0x61]
mov qword [rbp - 0x71], rax
mov dword [rbp - 0x79], 0x20
xor eax, eax
mov qword [rbp - 0x61], rax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x49], rax
call fcn.14000b9e0
call fcn.140098360
mov r13, rax
test rax, rax
je 0x1400b3794
mov rdx, rax
call fcn.1400a99c0
lea r14, [0x140119b08]
mov r12, 0xffffffffffffffff
test eax, eax
je 0x1400b35c6
mov eax, 1
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x79]
lea r8, [rbp - 0x71]
mov rdx, r13
call fcn.1400a8610
test eax, eax
je 0x1400b35c6
call fcn.140005430
mov rcx, rax
test rax, rax
je 0x1400b3f48
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x39], rax
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.140004bf0
test al, al
jne 0x1400b348e
mov rax, r12
inc rax
cmp word [r14 + rax*2], 0
jne 0x1400b3473
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.140004e70
nop
mov r15, rsi
call fcn.140005430
test rax, rax
je 0x1400b3f5e
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x41], rax
mov rdx, r14
lea rcx, [rbp - 0x41]
call fcn.140004bf0
test al, al
jne 0x1400b34d0
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp - 0x41]
call fcn.140004e70
nop
movzx r8d, byte [rbp + r15 - 0x59]
lea rdx, str._02X
lea rcx, [rbp - 0x41]
call fcn.1400071a0
mov rbx, qword [rbp - 0x41]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp - 0x39]
call fcn.140010650
nop
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400b3515
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r15
cmp r15, 0x18
jl 0x1400b3491
mov r8d, 0x20
lea rdx, [rbp - 0x61]
lea rcx, [0x1401afb98]
call fcn.1400db1d0
mov rbx, qword [rbp - 0x39]
test eax, eax
je 0x1400b35ac
mov r9d, dword [rbp - 0x61]
mov r8d, 0x1567
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwReserve__d
call fcn.140065460
mov r9d, dword [rbp - 0x5d]
mov r8d, 0x1568
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwDataSize__d
call fcn.140065460
mov r9, rbx
mov r8d, 0x1569
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_SVE_Data__s
call fcn.140065460
movups xmm0, xmmword [rbp - 0x61]
movups xmmword [0x1401afb98], xmm0
movups xmm1, xmmword [rbp - 0x51]
movups xmmword [0x1401afba8], xmm1
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400b35c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, r13
call fcn.1400a9a50
test eax, eax
je 0x1400b3794
xor eax, eax
mov qword [rbp - 0x61], rax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x49], rax
mov eax, 2
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x79]
lea r8, [rbp - 0x71]
mov rdx, r13
call fcn.1400a8610
test eax, eax
je 0x1400b3794
call fcn.140005430
mov rcx, rax
test rax, rax
je 0x1400b3f53
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x29], rax
mov rdx, r14
lea rcx, [rbp - 0x29]
call fcn.140004bf0
test al, al
jne 0x1400b365b
mov rax, r12
nop dword [rax + rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x1400b3640
mov r8d, eax
mov rdx, r14
lea rcx, [rbp - 0x29]
call fcn.140004e70
nop
nop dword [rax + rax]
call fcn.140005430
test rax, rax
je 0x1400b3f3d
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x31], rax
mov rdx, r14
lea rcx, [rbp - 0x31]
call fcn.140004bf0
test al, al
jne 0x1400b369f
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp - 0x31]
call fcn.140004e70
nop
movzx r8d, byte [rbp + rsi - 0x59]
lea rdx, str._02X
lea rcx, [rbp - 0x31]
call fcn.1400071a0
mov rbx, qword [rbp - 0x31]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.140010650
nop
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400b36e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc rsi
cmp rsi, 0x18
jl 0x1400b3660
mov r8d, 0x20
lea rdx, [rbp - 0x61]
lea rcx, [0x1401afb78]
call fcn.1400db1d0
mov rbx, qword [rbp - 0x29]
test eax, eax
je 0x1400b377b
mov r9d, dword [rbp - 0x61]
mov r8d, 0x15ab
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwReserve__d
call fcn.140065460
mov r9d, dword [rbp - 0x5d]
mov r8d, 0x15ac
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwDataSize__d
call fcn.140065460
mov r9, rbx
mov r8d, 0x15ad
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_PSE_Data__s
call fcn.140065460
movups xmm0, xmmword [rbp - 0x61]
movups xmmword [0x1401afb78], xmm0
movups xmm1, xmmword [rbp - 0x51]
movups xmmword [0x1401afb88], xmm1
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x1400b3794
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rdi + 0xc4]
test eax, eax
je 0x1400b37bc
sub eax, 1
mov dword [rdi + 0xc4], eax
jne 0x1400b37bc
call fcn.14000bb60
mov rcx, rax
mov edx, 0x444
call fcn.1400c8d80
nop
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x1400b3f10
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x1400b3f10
cmp edx, 0x443
jne 0x1400b3d5b
mov eax, dword [rcx + 0x8e0]
mov dword [rsp + 0x28], eax
mov eax, dword [rcx + 0x9d4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rcx + 0x9cc]
mov r8d, 0x15f0
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwTrainDataCnt___d__m_dwDetectScoreDataCnt___d__dwLatestEnrollState_COM___d
call fcn.140065460
mov r9d, dword [rdi + 0xc0]
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
test r9d, r9d
je 0x1400b3863
mov r8d, 0x15f4
lea rcx, str._s__d_COM___EnrollResult___d__Exit
call fcn.140065460
call fcn.14000bb60
mov rcx, rax
mov edx, 0x443
call fcn.1400c8d80
mov dword [rdi + 0xb4], 0x64
xor esi, esi
mov qword [rdi + 0x8e0], rsi
jmp 0x1400b3f10
inc dword [rdi + 0x8e4]
mov r9d, dword [rdi + 0x8e4]
mov r8d, 0x15fd
lea rcx, str._s__d_m_dwDetectComErrorCnt___d
call fcn.140065460
cmp dword [rdi + 0x8e4], 0xa
jbe 0x1400b38b2
mov r8d, 0x1600
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_COM_error__goto_idle
call fcn.140065460
lea rbx, [rdi - 8]
mov rcx, rbx
call fcn.1400b0250
jmp 0x1400b38b6
lea rbx, [rdi - 8]
mov eax, dword [rdi + 0xc8]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0x8e0]
mov r8d, 0x1604
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwLatestEnrollState_COM___d__m_dwCurrentSpkEnrollState___d
call fcn.140065460
mov eax, dword [rdi + 0x8dc]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0x8d8]
mov r8d, 0x1605
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_bSupportSpeakerTracking___d__m_bSupportTSE___d
call fcn.140065460
mov eax, dword [rdi + 0x8e0]
test eax, eax
jne 0x1400b394a
cmp dword [rdi + 0xc8], 1
jne 0x1400b3a0e
mov r8d, 0x1609
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
mov eax, 1
mov dword [rdi + 0x8e0], eax
jmp 0x1400b3f10
cmp eax, 1
jne 0x1400b3a0e
mov eax, dword [rdi + 0xc8]
cmp eax, 0x78
je 0x1400b3a0e
cmp eax, 0x1a4
je 0x1400b3a0e
mov rcx, rbx
call fcn.1400ab970
cmp eax, dword [rdi + 0x9ec]
jbe 0x1400b3a0e
mov r8d, 0x160d
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
cmp dword [rdi + 0x8d8], 0
je 0x1400b3f10
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
cmp dword [rdi + 0x8dc], 0
jne 0x1400b39e5
mov r8d, 0x160f
call fcn.140065460
xor esi, esi
mov dword [rdi + 0x93c], esi
mov r8, qword [rdi + 8]
lea edx, [rsi + 0x78]
mov rcx, rbx
call fcn.1400ac7b0
jmp 0x1400b3f10
mov r8d, 0x1616
call fcn.140065460
xor esi, esi
mov dword [rdi + 0x93c], esi
mov r8, qword [rdi + 8]
mov edx, 0x1a4
mov rcx, rbx
call fcn.1400ac7b0
jmp 0x1400b3f10
mov eax, dword [rdi + 0x8e0]
cmp eax, 1
jne 0x1400b3ad6
mov eax, dword [rdi + 0xc8]
cmp eax, 0x78
je 0x1400b3a33
cmp eax, 0x1a4
jne 0x1400b3f10
mov r8d, 0x1620
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
cmp dword [rdi + 0x8d8], 0
je 0x1400b3f10
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
cmp dword [rdi + 0x8dc], 0
jne 0x1400b3aa3
mov r8d, 0x1622
call fcn.140065460
mov dword [rdi + 0x8e0], 0xc8
xor esi, esi
mov dword [rdi + 0x93c], esi
mov r8, qword [rdi + 8]
mov edx, 0xc8
mov rcx, rbx
call fcn.1400ac7b0
jmp 0x1400b3f10
mov r8d, 0x1629
call fcn.140065460
mov dword [rdi + 0x8e0], 0x1f4
xor esi, esi
mov dword [rdi + 0x93c], esi
mov r8, qword [rdi + 8]
mov edx, 0x1f4
mov rcx, rbx
call fcn.1400ac7b0
jmp 0x1400b3f10
cmp eax, 0xc8
jne 0x1400b3b54
cmp dword [rdi + 0x9d4], 0x1f4
jb 0x1400b3f10
mov r8d, 0x1631
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
mov rcx, rbx
call fcn.1400ab8e0
test eax, eax
mov eax, 1
jne 0x1400b3b1c
mov eax, 2
mov dword [rdi + 0xc0], eax
mov r9d, eax
mov r8d, 0x1636
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_stEnrollStatusForCom.dwEnrollResult___d
call fcn.140065460
mov r8, qword [rdi + 8]
mov edx, 0xdc
mov rcx, rbx
call fcn.1400ac7b0
jmp 0x1400b3f10
cmp eax, 0x1f4
jne 0x1400b3f10
mov eax, dword [rdi + 0xa00]
cmp dword [rdi + 0x9d4], eax
jb 0x1400b3f10
mov r8d, 0x163b
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
mov r9d, dword [rdi + 0x9d4]
mov r8d, 0x163c
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwDetectScoreDataCnt___d
call fcn.140065460
mov r9d, dword [rdi + 0x9a8]
mov r8d, 0x163d
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwDataSize_TSE_AB48_A___d
call fcn.140065460
mov r9d, dword [rdi + 0x9b8]
mov r8d, 0x163e
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwDataSize_TSE_AB48_B___d
call fcn.140065460
mov r9d, dword [rdi + 0x990]
mov r8d, 0x163f
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_bAlreadyBackupTseData_AB48___d
call fcn.140065460
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
cmp dword [rdi + 0x990], 0
je 0x1400b3c7a
mov r8d, 0x1643
call fcn.140065460
mov rcx, rbx
call fcn.1400ab8e0
test eax, eax
mov eax, 1
jne 0x1400b3c42
mov eax, 2
mov dword [rdi + 0xc0], eax
mov r9d, eax
mov r8d, 0x1648
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_stEnrollStatusForCom.dwEnrollResult___d
call fcn.140065460
mov r8, qword [rdi + 8]
mov edx, 0x208
mov rcx, rbx
call fcn.1400ac7b0
jmp 0x1400b3f10
mov r8d, 0x164d
call fcn.140065460
cmp qword [rdi + 0x920], 0
je 0x1400b3d01
mov r8d, 0x164f
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetThreadPriority]
cmp eax, 0xf
je 0x1400b3d01
mov r8d, 0x1651
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140119e10]
call fcn.140065460
mov edx, reloc.OLEAUT32.dll_SafeArrayDestroy
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_SetThreadPriority]
mov r9d, eax
mov r8d, 0x1653
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_SetThreadPriority_SpkEnroll_TseThread_AB48_Train___d
call fcn.140065460
inc dword [rdi + 0x8e8]
mov r9d, dword [rdi + 0x8e8]
mov r8d, 0x1658
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwDetectTSEEnrollTimeCnt___d
call fcn.140065460
cmp dword [rdi + 0x8e8], 0x3c
jbe 0x1400b3f10
mov r8d, 0x165b
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_TSE_Enroll_too_long__goto_idle
call fcn.140065460
lea rcx, [rdi - 8]
call fcn.1400b0250
jmp 0x1400b3f10
cmp edx, 0x44a
jne 0x1400b3f10
mov eax, 0xcccccccd
mul dword [rcx + 0x974]
mov ebx, edx
shr ebx, 4
mov eax, 4
cmp ebx, eax
cmova ebx, eax
mov r9d, ebx
mov r8d, 0x16a3
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwArrayIndex__d
call fcn.140065460
movss xmm0, dword [rdi + 0x950]
comiss xmm0, dword [rdi + 0x958]
jbe 0x1400b3db7
inc dword [rdi + rbx*4 + 0x960]
jmp 0x1400b3dbe
dec dword [rdi + rbx*4 + 0x960]
mov ecx, dword [rdi + 0x974]
inc ecx
mov dword [rdi + 0x974], ecx
mov eax, dword [rdi + 0xc8]
xor esi, esi
cmp eax, 0xd2
je 0x1400b3de0
cmp eax, 0x6e
jne 0x1400b3df9
xor eax, eax
mov qword [rdi + 0x960], rax
mov qword [rdi + 0x968], rax
mov qword [rdi + 0x970], rax
mov ecx, esi
mov eax, 0xcccccccd
mul ecx
mov ebx, edx
shr ebx, 4
mov r9d, ebx
mov r8d, 0x16ba
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwTmpIndex__d
call fcn.140065460
movss xmm0, dword [rdi + 0x93c]
comiss xmm0, dword [rdi + 0x938]
jb 0x1400b3e3d
mov dword [rdi + 0xbc], esi
jmp 0x1400b3f10
cmp ebx, 5
jb 0x1400b3f10
mov ecx, dword [rdi + 0x974]
mov eax, 0xcccccccd
mul ecx
shr edx, 4
lea eax, [rdx + rdx*4]
shl eax, 2
cmp ecx, eax
jne 0x1400b3f10
mov ecx, dword [rdi + 0x964]
mov eax, dword [rdi + 0x970]
add eax, dword [rdi + 0x968]
add eax, ecx
add eax, dword [rdi + 0x960]
add eax, dword [rdi + 0x96c]
test eax, eax
jle 0x1400b3ee0
mov r8d, 0x16cb
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_notify_UWP_to_show_noise_message_box
call fcn.140065460
mov edx, 0x1000024f
lea rcx, [0x140119b08]
call fcn.1400c75b0
xor eax, eax
mov qword [rdi + 0x960], rax
mov qword [rdi + 0x968], rax
mov qword [rdi + 0x970], rax
mov eax, 1
mov dword [rdi + 0xbc], eax
mov ecx, dword [rdi + 0x964]
nop word [rax + rax]
mov dword [rdi + 0x960], ecx
mov eax, dword [rdi + 0x968]
mov dword [rdi + 0x964], eax
mov eax, dword [rdi + 0x96c]
mov dword [rdi + 0x968], eax
mov eax, dword [rdi + 0x970]
mov dword [rdi + 0x96c], eax
mov dword [rdi + 0x970], esi
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400d37a0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.140005560
nop
mov ecx, 0x80004005
call fcn.140005560
int3
mov ecx, 0x80004005
call fcn.140005560
nop
mov ecx, 0x80004005
call fcn.140005560
int3