Function at 0x14034dc30
Capabilities:
Capture microphone audio
Create thread

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
push rbp
push r15
push r14
xor rax, rax
push rax
push rax
push rax
sub rsp, 0x28
call fcn.14002c9e0
lea rax, [rsp + 0x30]
mov rax, rax
push rax
push 0
push 0
lea rax, [0x1403b9e65]
mov rax, rax
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_CreateThread
add rsp, 0x30
mov rax, rax
push rax
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
pop rax
mov qword [rbp + 0xd], rax
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push qword [rbp + 0xd]
pop rcx
call sub.KERNEL32.dll_CloseHandle
push 0x60
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
lea rax, [rbp + 0x27]
mov rax, rax
push rax
pop rcx
pop rdx
call fcn.14002bff0
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
mov word [rbp + 0x15], 1
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
mov word [rbp + 0x17], 1
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
mov dword [rbp + 0x19], 0x2b11
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
mov word [rbp + 0x23], reloc.WS2_32.dll_recv
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
movzx r15, word [rbp + 0x17]
movsxd r14, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r14, r14, 0x87
add rbp, r14
movzx r14, word [rbp + 0x23]
mov rax, r14
mov rcx, 8
cqo
idiv rcx
mov r14, rax
imul r15, r14
mov rax, r15
push rax
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
pop rax
mov word [rbp + 0x21], ax
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
movsxd r15, dword [rbp + 0x19]
movsxd r14, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r14, r14, 0x87
add rbp, r14
movzx rax, word [rbp + 0x21]
imul r15, rax
mov rax, r15
push rax
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
pop rax
mov dword [rbp + 0x1d], eax
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
mov word [rbp + 0x25], 0
push 0x20000
push 0
push qword [rsp + 0x40]
movsxd r15, dword [rsp + 0x78]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
lea rax, [rbp + 0x15]
mov rax, rax
push rax
push 0xffffffffffffffff
movsxd r15, dword [rsp + 0x88]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.WINMM.dll_waveInOpen
add rsp, 0x30
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x28], eax
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
mov dword [rbp + 0x2f], 0x400
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
mov dword [rbp + 0x5f], 0x400
push 4
push 0x1000
movsxd r15, dword [rsp + 0x70]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
movsxd r15, dword [rbp + 0x2f]
shl r15, 2
mov rax, r15
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
call sub.KERNEL32.dll_VirtualAlloc
mov rax, rax
push rax
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
pop rax
mov qword [rbp + 0x27], rax
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
mov r15, qword [rbp + 0x27]
movsxd r14, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r14, r14, 0x87
add rbp, r14
push rbp
pop rbp
movsxd r14, dword [rbp + 0x2f]
add r14, r14
add r15, r14
mov rax, r15
push rax
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
pop rax
mov qword [rbp + 0x57], rax
movsxd rax, dword [rsp + 0x60]
push rax
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
pop rax
mov qword [rbp + 0x37], rax
movsxd rax, dword [rsp + 0x60]
push rax
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
pop rax
mov qword [rbp + 0x67], rax
push gethostbyname
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
lea rax, [rbp + 0x27]
mov rax, rax
push rax
movsxd r15, dword [rsp + 0x70]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push qword [rbp]
pop rcx
pop rdx
pop r8
call sub.WINMM.dll_waveInPrepareHeader
push gethostbyname
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
lea rax, [rbp + 0x57]
mov rax, rax
push rax
movsxd r15, dword [rsp + 0x70]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push qword [rbp]
pop rcx
pop rdx
pop r8
call sub.WINMM.dll_waveInPrepareHeader
push gethostbyname
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
lea rax, [rbp + 0x27]
mov rax, rax
push rax
movsxd r15, dword [rsp + 0x70]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push qword [rbp]
pop rcx
pop rdx
pop r8
call sub.WINMM.dll_waveInAddBuffer
push gethostbyname
movsxd r15, dword [rsp + 0x68]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push rbp
pop rbp
lea rax, [rbp + 0x57]
mov rax, rax
push rax
movsxd r15, dword [rsp + 0x70]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push qword [rbp]
pop rcx
pop rdx
pop r8
call sub.WINMM.dll_waveInAddBuffer
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
mov dword [rbp + 9], 0
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
mov byte [rbp + 8], 1
movsxd r15, dword [rsp + 0x60]
mov rbp, qword [0x140226648]
imul r15, r15, 0x87
add rbp, r15
push qword [rbp]
pop rcx
call sub.WINMM.dll_waveInStart
xor rax, rax
add rsp, 0x40
pop r14
pop r15
pop rbp
ret