Function at 0x1400bc240
Capabilities:
Create thread
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x140178010]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rdi, rcx
cmp edx, 0x450
jne 0x1400bc2d2
mov eax, dword [rcx + 0x9f8]
inc eax
mov dword [rcx + 0x9f8], eax
cmp dword [rcx + 0x9a8], 0
jne 0x1400bd091
cmp eax, 0xb4
jbe 0x1400bd091
mov r8d, 0xe0c
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_Gen_5_TSE_AB48_thread_for_train___Exceeded_waiting_time___x
call fcn.14006dd20
mov rcx, rdi
call fcn.1400b9890
call fcn.14000be90
mov rcx, rax
mov edx, 0x450
call fcn.1400d4070
jmp 0x1400bd091
cmp edx, 0x451
jne 0x1400bc338
mov eax, dword [rcx + 0xa0c]
inc eax
mov dword [rcx + 0xa0c], eax
cmp dword [rcx + 0x9b8], 0
jne 0x1400bd091
cmp eax, 0xb4
jbe 0x1400bd091
mov r8d, 0xe18
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_Gen_5_TSE_AB48_thread_for_detect_score___Exceeded_waiting_time___x
call fcn.14006dd20
mov rcx, rdi
call fcn.1400b9890
call fcn.14000be90
mov rcx, rax
mov edx, 0x451
call fcn.1400d4070
jmp 0x1400bd091
cmp edx, 0x446
jne 0x1400bc3ae
cmp qword [rcx + 0x8f0], 0
jne 0x1400bd091
xor ebx, ebx
mov dword [rbp - 0x30], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x1400b6670]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x8f0], rax
mov r8d, 0xe24
lea rcx, str._s__d_CreateThread_SpkEnroll_TrainThread___x
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
mov r9, rax
call fcn.14006dd20
call fcn.14000be90
mov edx, 0x446
mov rcx, rax
call fcn.1400d4070
jmp 0x1400bd091
cmp edx, 0x447
jne 0x1400bc400
cmp qword [rcx + 0x900], 0
jne 0x1400bd091
xor ebx, ebx
mov dword [rbp - 0x30], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x1400b8120]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x900], rax
mov r8d, 0xe30
lea rcx, str._s__d_CreateThread_SpkEnroll_DetectScoreThread___x
jmp 0x1400bc388
cmp edx, 0x44e
jne 0x1400bc593
xor ebx, ebx
cmp qword [rcx + 0x918], rbx
jne 0x1400bc470
mov dword [rbp - 0x30], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x1400b97f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x918], rax
mov r9, rax
mov r8d, 0xe3c
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_CreateThread_SpkEnroll_TseThread_AB48___x
call fcn.14006dd20
call fcn.14000be90
mov rcx, rax
mov edx, 0x44e
call fcn.1400d4070
cmp qword [rdi + 0x920], rbx
je 0x1400bc4a6
mov r8d, 0xe46
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_m_hSpkEnroll_TseThread_AB48_Train
call fcn.14006dd20
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x920], rbx
mov dword [rbp - 0x30], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x1400b97f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x920], rax
mov r9, rax
mov r8d, 0xe4f
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_CreateThread_SpkEnroll_TseThread_AB48_Train__0x_08x
call fcn.14006dd20
call fcn.14000be90
mov rcx, rax
mov edx, 0x44e
call fcn.1400d4070
cmp qword [rdi + 0x928], rbx
je 0x1400bc535
mov r8d, 0xe59
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_m_hSpkEnroll_TseThread_AB48_DetectScore
call fcn.14006dd20
mov rcx, qword [rdi + 0x928]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x928], rbx
mov dword [rbp - 0x30], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x1400b97f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov qword [rdi + 0x928], rax
mov r9, rax
mov r8d, 0xe62
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_CreateThread_SpkEnroll_TseThread_AB48_DetectScore___x
call fcn.14006dd20
call fcn.14000be90
mov edx, 0x44e
mov rcx, rax
call fcn.1400d4070
jmp 0x1400bd091
cmp edx, 0x448
jne 0x1400bc63a
cmp qword [rcx + 0x8f0], 0
je 0x1400bc623
mov r8d, 0xe6c
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TrainThread
call fcn.14006dd20
mov edx, 0x3e8
mov rcx, qword [rdi + 0x8f0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400bc5f4
mov r9d, eax
mov r8d, 0xe70
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.14006dd20
mov r8d, 0xe72
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TrainThread
call fcn.14006dd20
mov rcx, qword [rdi + 0x8f0]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor ebx, ebx
mov qword [rdi + 0x8f0], rbx
call fcn.14000be90
mov edx, 0x448
mov rcx, rax
call fcn.1400d4070
jmp 0x1400bd091
cmp edx, 0x449
jne 0x1400bc6e1
cmp qword [rcx + 0x900], 0
je 0x1400bc6ca
mov r8d, 0xe7e
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_DetectScoreThread
call fcn.14006dd20
mov edx, 0x3e8
mov rcx, qword [rdi + 0x900]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400bc69b
mov r9d, eax
mov r8d, 0xe82
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.14006dd20
mov r8d, 0xe84
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_DetectScoreThread
call fcn.14006dd20
mov rcx, qword [rdi + 0x900]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor ebx, ebx
mov qword [rdi + 0x900], rbx
call fcn.14000be90
mov edx, 0x449
mov rcx, rax
call fcn.1400d4070
jmp 0x1400bd091
cmp edx, 0x44f
jne 0x1400bc8ad
xor ebx, ebx
cmp qword [rcx + 0x918], rbx
je 0x1400bc770
mov r8d, 0xe90
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TseThread_AB48
call fcn.14006dd20
mov edx, 0x3e8
mov rcx, qword [rdi + 0x918]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400bc743
mov r9d, eax
mov r8d, 0xe94
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.14006dd20
mov r8d, 0xe96
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TseThread_AB48
call fcn.14006dd20
mov rcx, qword [rdi + 0x918]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x918], rbx
call fcn.14000be90
mov rcx, rax
mov edx, 0x44f
call fcn.1400d4070
cmp qword [rdi + 0x920], rbx
je 0x1400bc803
mov r8d, 0xea2
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TseThread_AB48
call fcn.14006dd20
mov edx, 0x3e8
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400bc7d6
mov r9d, eax
mov r8d, 0xea6
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.14006dd20
mov r8d, 0xea8
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TseThread_AB48_Train
call fcn.14006dd20
mov rcx, qword [rdi + 0x920]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x920], rbx
call fcn.14000be90
mov rcx, rax
mov edx, 0x44f
call fcn.1400d4070
cmp qword [rdi + 0x928], rbx
je 0x1400bc896
mov r8d, 0xeb4
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_start_wait_m_hSpkEnroll_TseThread_AB48_DetectScore
call fcn.14006dd20
mov edx, 0x3e8
mov rcx, qword [rdi + 0x928]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1400bc869
mov r9d, eax
mov r8d, 0xeb8
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_WaitForSingleObject__x
call fcn.14006dd20
mov r8d, 0xeba
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_end_wait_m_hSpkEnroll_TseThread_AB48_DetectScore
call fcn.14006dd20
mov rcx, qword [rdi + 0x928]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov qword [rdi + 0x928], rbx
call fcn.14000be90
mov edx, 0x44f
mov rcx, rax
call fcn.1400d4070
jmp 0x1400bd091
cmp edx, 0x445
jne 0x1400bc9b8
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xor ebx, ebx
mov qword [rbp - 0x28], rbx
mov dword [rbp - 0x20], ebx
mov qword [rbp - 0x18], rbx
mov r9d, 0x2001f
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x28]
call fcn.14002b400
lea r14, [0x140180380]
test eax, eax
jne 0x1400bc954
mov dword [rsp + 0x28], 0x400
mov qword [rsp + 0x20], r14
lea r9d, [rbx + 3]
xor r8d, r8d
lea rdx, str.Gen5VolInfo
mov rsi, qword [rbp - 0x28]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
test eax, eax
je 0x1400bc93a
mov r8d, 0xed0
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
call fcn.14006dd20
test rsi, rsi
je 0x1400bc94f
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rsi, rbx
mov qword [rbp - 0x28], rbx
mov dword [rbp - 0x20], ebx
jmp 0x1400bc971
mov r8d, 0xed5
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
call fcn.14006dd20
mov rsi, qword [rbp - 0x28]
xor edx, edx
mov r8d, 0x400
mov rcx, r14
call fcn.1400e5b40
mov eax, dword [rdi + 0xc4]
dec eax
cmp eax, 8
ja 0x1400bc9a1
call fcn.14000be90
mov rcx, rax
mov edx, 0x445
call fcn.1400d4070
nop
test rsi, rsi
je 0x1400bd091
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
jmp 0x1400bd091
cmp edx, 0x444
jne 0x1400bcaab
call fcn.1400b4870
xorps xmm2, xmm2
movups xmmword [rbp - 0x28], xmm2
xor ebx, ebx
mov qword [rbp - 0x28], rbx
mov dword [rbp - 0x20], ebx
mov qword [rbp - 0x18], rbx
mov r9d, 0x2001f
lea r8, str.SOFTWARERealtekAudioRtkAudUServiceOthers
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x28]
call fcn.14002b400
test eax, eax
jne 0x1400bca61
lea rax, [rdi + 0x10]
mov dword [rsp + 0x28], 0xa4
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 3]
xor r8d, r8d
lea rdx, str.Gen5Info
mov rsi, qword [rbp - 0x28]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
test eax, eax
je 0x1400bca47
mov r8d, 0xef3
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
call fcn.14006dd20
test rsi, rsi
je 0x1400bca5c
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov rsi, rbx
mov qword [rbp - 0x28], rbx
mov dword [rbp - 0x20], ebx
jmp 0x1400bca7e
mov r8d, 0xef8
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
call fcn.14006dd20
mov rsi, qword [rbp - 0x28]
mov eax, dword [rdi + 0xc4]
test eax, eax
je 0x1400bcaa6
sub eax, 1
mov dword [rdi + 0xc4], eax
jne 0x1400bcaa6
call fcn.14000be90
mov rcx, rax
mov edx, 0x444
call fcn.1400d4070
nop
jmp 0x1400bc9a1
cmp edx, 0x443
jne 0x1400bce44
mov eax, dword [rcx + 0x8e0]
mov dword [rsp + 0x28], eax
mov eax, dword [rcx + 0x9d4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rcx + 0x9cc]
mov r8d, 0xf09
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwTrainDataCnt___d__m_dwDetectScoreDataCnt___d__dwLatestEnrollState_COM___d
call fcn.14006dd20
mov r9d, dword [rdi + 0xc0]
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
test r9d, r9d
je 0x1400bcb3a
mov r8d, 0xf0d
lea rcx, str._s__d_COM___EnrollResult___d__Exit
call fcn.14006dd20
call fcn.14000be90
mov rcx, rax
mov edx, 0x443
call fcn.1400d4070
mov dword [rdi + 0xb4], 0x64
xor ebx, ebx
mov qword [rdi + 0x8e0], rbx
jmp 0x1400bd091
mov r9d, dword [rdi + 0x8e4]
inc r9d
mov dword [rdi + 0x8e4], r9d
mov r8d, 0xf16
lea rcx, str._s__d_m_dwDetectComErrorCnt___d
call fcn.14006dd20
cmp dword [rdi + 0x8e4], 0xa
jbe 0x1400bcb87
mov r8d, 0xf19
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_COM_error__goto_idle
call fcn.14006dd20
mov rcx, rdi
call fcn.1400b9890
mov eax, dword [rdi + 0xc8]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0x8e0]
mov r8d, 0xf1d
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwLatestEnrollState_COM___d__m_dwCurrentSpkEnrollState___d
call fcn.14006dd20
mov eax, dword [rdi + 0x8dc]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0x8d8]
mov r8d, 0xf1e
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_bSupportSpeakerTracking___d__m_bSupportTSE___d
call fcn.14006dd20
mov eax, dword [rdi + 0x8e0]
test eax, eax
jne 0x1400bcc01
cmp dword [rdi + 0xc8], 1
jne 0x1400bd091
mov dword [rdi + 0x8e0], 1
jmp 0x1400bd091
cmp eax, 1
jne 0x1400bccaa
mov eax, dword [rdi + 0xc8]
cmp eax, 0x78
je 0x1400bcc20
cmp eax, 0x1a4
jne 0x1400bd091
cmp dword [rdi + 0x8d8], 0
je 0x1400bd091
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
cmp dword [rdi + 0x8dc], 0
jne 0x1400bcc77
mov r8d, 0xf2a
call fcn.14006dd20
mov dword [rdi + 0x8e0], 0xc8
xor ebx, ebx
mov dword [rdi + 0x93c], ebx
mov r8, qword [rdi + 8]
mov edx, 0xc8
mov rcx, rdi
call fcn.1400b5a50
jmp 0x1400bd091
mov r8d, 0xf31
call fcn.14006dd20
mov dword [rdi + 0x8e0], 0x1f4
xor ebx, ebx
mov dword [rdi + 0x93c], ebx
mov r8, qword [rdi + 8]
mov edx, 0x1f4
mov rcx, rdi
call fcn.1400b5a50
jmp 0x1400bd091
cmp eax, 0xc8
jne 0x1400bcd21
cmp dword [rdi + 0x9d4], 0x1f4
jb 0x1400bd091
mov r8d, 0xf39
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
call fcn.14006dd20
mov rcx, rdi
call fcn.1400b49d0
neg eax
sbb r9d, r9d
add r9d, 2
mov dword [rdi + 0xc0], r9d
mov r8d, 0xf3e
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_stEnrollStatusForCom.dwEnrollResult___d
call fcn.14006dd20
mov r8, qword [rdi + 8]
mov edx, 0xdc
mov rcx, rdi
call fcn.1400b5a50
jmp 0x1400bd091
cmp eax, 0x1f4
jne 0x1400bd091
mov eax, dword [rdi + 0x9fc]
cmp dword [rdi + 0x9d4], eax
jb 0x1400bd091
mov r8d, 0xf43
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
call fcn.14006dd20
mov r9d, dword [rdi + 0x9d4]
mov r8d, 0xf44
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwDetectScoreDataCnt___d
call fcn.14006dd20
mov r9d, dword [rdi + 0x9a8]
mov r8d, 0xf45
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwDataSize_TSE_AB48_A___d
call fcn.14006dd20
mov r9d, dword [rdi + 0x9b8]
mov r8d, 0xf46
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_dwDataSize_TSE_AB48_B___d
call fcn.14006dd20
mov r9d, dword [rdi + 0x990]
mov r8d, 0xf47
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_bAlreadyBackupTseData_AB48___d
call fcn.14006dd20
cmp dword [rdi + 0x990], 0
je 0x1400bd091
mov r8d, 0xf4b
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, [0x140102ba8]
call fcn.14006dd20
mov rcx, rdi
call fcn.1400b49d0
neg eax
sbb r9d, r9d
add r9d, 2
mov dword [rdi + 0xc0], r9d
mov r8d, 0xf50
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_m_stEnrollStatusForCom.dwEnrollResult___d
call fcn.14006dd20
mov r8, qword [rdi + 8]
mov edx, 0x208
mov rcx, rdi
call fcn.1400b5a50
jmp 0x1400bd091
cmp edx, 0x44a
jne 0x1400bd091
mov eax, 0xcccccccd
mul dword [rcx + 0x974]
mov ebx, edx
shr ebx, 4
mov eax, 4
cmp ebx, eax
cmova ebx, eax
mov r9d, ebx
mov r8d, 0xf98
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwArrayIndex__d
call fcn.14006dd20
mov ecx, dword [rdi + rbx*4 + 0x960]
movss xmm0, dword [rdi + 0x950]
lea eax, [rcx - 1]
inc ecx
comiss xmm0, dword [rdi + 0x958]
cmovbe ecx, eax
mov dword [rdi + rbx*4 + 0x960], ecx
mov ecx, dword [rdi + 0x974]
inc ecx
mov dword [rdi + 0x974], ecx
mov eax, dword [rdi + 0xc8]
cmp eax, 0xd2
je 0x1400bd062
cmp eax, 0x6e
je 0x1400bd062
mov eax, 0xcccccccd
mul ecx
mov ebx, edx
shr ebx, 4
mov r9d, ebx
mov r8d, 0xfaf
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwTmpIndex__d
call fcn.14006dd20
cmp ebx, 5
jb 0x1400bd091
mov ecx, dword [rdi + 0x974]
mov eax, 0xcccccccd
mul ecx
shr edx, 4
lea eax, [rdx + rdx*4]
shl eax, 2
cmp ecx, eax
jne 0x1400bd091
mov ecx, dword [rdi + 0x964]
mov eax, dword [rdi + 0x970]
add eax, dword [rdi + 0x968]
add eax, dword [rdi + 0x960]
add eax, ecx
add eax, dword [rdi + 0x96c]
xor ebx, ebx
test eax, eax
jle 0x1400bd030
mov r8d, 0xfbc
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_notify_UWP_to_show_noise_message_box
call fcn.14006dd20
call fcn.14000b980
mov rcx, rax
xor r9d, r9d
mov r8d, 0x1000024f
lea rdx, [0x140103060]
call fcn.1400958d0
call fcn.1400d0b00
mov esi, ebx
cmp dword [0x140180850], ebx
jbe 0x1400bd003
lea r15, [0x140000000]
nop dword [rax + rax]
mov r14d, esi
xor r8d, r8d
mov rdx, qword [r15 + r14*8 + 0x180790]
mov rcx, qword [r15 + r14*8 + 0x1807d0]
call fcn.1400d2160
test eax, eax
je 0x1400bcff9
call fcn.14000b980
mov rcx, rax
mov rdx, qword [r15 + r14*8 + 0x1807d0]
call fcn.140095970
test al, al
jne 0x1400bcff9
xor r8d, r8d
mov edx, 0x1000024f
lea rcx, [0x140103060]
call fcn.1400a8c20
mov rdx, qword [r15 + r14*8 + 0x180810]
call fcn.1400d1090
inc esi
cmp esi, dword [0x140180850]
jb 0x1400bcfa0
mov qword [rdi + 0x964], rbx
mov qword [rdi + 0x96c], rbx
mov dword [rdi + 0x974], ebx
mov dword [rdi + 0xbc], 1
mov ecx, dword [rdi + 0x964]
nop word [rax + rax]
mov dword [rdi + 0x960], ecx
mov eax, dword [rdi + 0x968]
mov dword [rdi + 0x964], eax
mov eax, dword [rdi + 0x96c]
mov dword [rdi + 0x968], eax
mov eax, dword [rdi + 0x970]
mov dword [rdi + 0x96c], eax
mov dword [rdi + 0x970], ebx
jmp 0x1400bd091
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi + 0x960], xmm0
mov qword [rdi + 0x970], rax
xor r9d, r9d
mov r8d, 0xfaf
lea rdx, str.CRtkBssGen5SpkTrackEnroll::OnTimer
lea rcx, str._s__d_dwTmpIndex__d
call fcn.14006dd20
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400df340
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret