Function at 0x180039e00
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x180135928]
xor rax, rsp
mov qword [rbp + 0x1f], rax
lea edi, [r9 + 0xe]
mov dword [rsp + 0x50], r9d
xor r10d, r10d
mov qword [rbp - 0x71], r8
mov qword [rsp + 0x58], rdx
mov ebx, r9d
mov dword [rsp + 0x4c], ebx
mov r12, rcx
mov dword [rsp + 0x40], edi
mov rsi, r8
lea rcx, [0x180000000]
cmp r9d, edi
jae 0x18003a21a
mov edi, dword [rsp + 0x54]
lea r15d, [r9 - 0x71]
mov r13, qword [rbp - 0x41]
movabs r8, 0x6f004d0064
mov r14, qword [rbp - 0x41]
mov eax, dword [rsp + 0x40]
nop
cmp r15d, 0x3c
ja case.default.0x180039ea4
movzx eax, byte [rcx + r15 + 0x3a504]
mov ecx, dword [rcx + rax*4 + 0x3a4c8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [rsi + 0x1e8]
cmp rax, qword [rsi + 0x1f0]
jae 0x180039f8a
test byte [rax + 0x10], 0x10
je 0x180039f8a
mov ebx, 0x53
nop dword [rax]
mov eax, ebx
sub eax, 0x53
je 0x180039f5e
cmp eax, 1
jne 0x180039f7a
cmp edi, 0xfffffff6
jne 0x180039f17
mov ecx, 0x36
nop
mov eax, ecx
sub eax, 0x36
je 0x180039f02
cmp eax, 0x52
je case.0x18003a277.10
jmp 0x180039f0a
mov dword [rsp + 0x48], 0xfffffff6
add ecx, 0x52
cmp ecx, 0xda
jb 0x180039ef0
jmp 0x180039f7a
cmp edi, 0xfffffffd
je 0x180039f7a
lea rax, [rbp - 0x69]
mov dword [rbp - 0x61], r10d
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x59]
lea rax, [rbp - 0x61]
mov dword [rbp - 0x59], 1
mov qword [rsp + 0x28], rax
mov r9d, 0xf0
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x69], GetAcceptLanguagesA
call fcn.1800d6300
jmp 0x180039f77
xor r9d, r9d
mov dword [rbp - 0x51], r10d
lea r8, [rbp - 0x51]
mov rcx, rsi
lea edx, [r9 + 0x68]
call fcn.180037910
mov edi, eax
xor r10d, r10d
inc ebx
cmp ebx, 0x55
jb 0x180039ed0
jmp 0x18003a007
mov ebx, 0xc0
nop
mov eax, ebx
sub eax, 0xc0
je 0x180039fad
cmp eax, 0x69
jne 0x180039ff9
cmp edi, 0xfffffff6
jne 0x180039ff9
mov eax, 0xfffffff6
jmp 0x18003a4a1
mov r8d, dword [rbp - 0x79]
lea r9, str.Enable_deprecation_warnings.
mov edx, 1
mov rcx, rsi
call fcn.18003eb80
mov rcx, qword [rsi + 0x1f0]
mov edi, eax
mov rax, qword [rsi + 0x1e8]
cmp rax, rcx
jae 0x180039ff9
nop word [rax + rax]
test dword [rax + 0x10], 0x40000
jne 0x180039ff9
add rax, 0x20
mov qword [rsi + 0x1e8], rax
cmp rax, rcx
jb 0x180039fe0
add ebx, 0x69
cmp ebx, 0x192
jb 0x180039f90
xor r10d, r10d
mov ebx, dword [rsp + 0x4c]
movabs r8, 0x6f004d0064
mov rdx, qword [rsp + 0x58]
mov dword [rsp + 0x48], r10d
jmp case.0x180039ea4.14
mov qword [rbp + 3], r8
lea rdx, [0x180113610]
mov r8d, 1
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov rdx, qword [rsp + 0x58]
movabs r8, 0x6f004d0064
xor r10d, r10d
jmp case.0x180039ea4.14
mov r9, rsi
mov r8d, 0x78
mov rdx, r13
xor ecx, ecx
call fcn.1800c9c10
jmp 0x18003a03f
mov dword [rsp + 0x54], r10d
jmp case.0x180039ea4.14
xor r9d, r9d
mov dword [rsp + 0x20], 0xf7
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180060170
mov r9, rax
lea r8, str._A0xe0e63d40._pmField_initializer____CVarTypeInfo_PAPA_W_ATL__2P6MXXZA
mov edx, 2
mov rcx, rsi
call fcn.180105d30
jmp 0x18003a03f
mov rax, qword [rsi + 0x1e8]
mov eax, dword [rax + 0x14]
mov dword [rbp - 0x79], eax
jmp case.0x180039ea4.14
cmp dword [rdx], 0
jle case.0x180039ea4.14
mov rcx, qword [r12]
xor edx, edx
lea r8d, [rdx + 0x7c]
call fcn.180075b10
test eax, eax
jne 0x18003a126
mov ebx, 0x46
cmp ebx, 0x46
je 0x18003a0ff
cmp ebx, 0x196e
jne 0x18003a10f
mov r8, rsi
mov dword [rbp - 0x49], 1
mov edx, 0x11d
lea rcx, [rbp - 0x49]
call fcn.1800d0f60
jmp 0x18003a10f
xor edx, edx
mov r8d, 0xc2
mov rcx, r14
call fcn.1800436b0
add ebx, 0x1928
cmp ebx, 0x3250
jbe 0x18003a0d8
mov ebx, dword [rsp + 0x4c]
jmp 0x18003a03f
mov ebx, 0xfe
nop dword [rax + rax]
cmp ebx, 0xfe
jne 0x18003a15b
mov r9, r13
lea r8d, [rbx + 0x22]
mov rdx, r14
xor ecx, ecx
call fcn.1800554e0
mov rdx, qword [r12]
lea r8d, [rbx + 0x22]
mov r9, r14
xor ecx, ecx
call fcn.1800554e0
add ebx, 0x9cc4
cmp ebx, 0x9cc4
jbe 0x18003a130
mov ebx, dword [rsp + 0x4c]
jmp 0x18003a03f
add qword [rsi + 0x1e8], 0x20
jmp case.0x180039ea4.14
mov r8d, 5
lea rdx, str.m_sa
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, dword [0x180113674]
mov dword [rbp - 1], eax
movzx eax, word [0x180113678]
mov word [rbp + 3], ax
jmp 0x18003a03f
mov eax, dword [rsp + 0x54]
mov rsi, r10
mov dword [rsp + 0x48], eax
mov qword [rbp - 0x71], r10
jmp case.0x180039ea4.14
mov rax, qword [rsi + 0x60]
mov qword [rbp - 0x41], rax
lea r13, [rax + 0x658]
jmp case.0x180039ea4.14
mov r14, qword [rbp - 0x41]
add r14, 0x6a0
jmp case.0x180039ea4.14
cmp qword [0x180135a28], 0
je 0x18003a1f4
cmp qword [0x180135a20], 0
mov byte [rsp + 0x48], 1
jne case.0x180039ea4.14
mov byte [rsp + 0x48], 0
mov eax, dword [rsp + 0x40]
lea rcx, [0x180000000]
inc ebx
inc r15d
mov dword [rsp + 0x4c], ebx
cmp ebx, eax
jb 0x180039e80
mov r9d, dword [rsp + 0x50]
lea r15d, [r9 + 0xf]
mov dword [rsp + 0x54], r15d
cmp r9d, r15d
jae case.0x18003a277.10
mov r13, qword [rbp - 0x79]
lea r14d, [r9 - 0x71]
mov esi, dword [rsp + 0x54]
mov r8d, 0x20
movzx r12d, byte [rsp + 0x44]
xor ebx, ebx
mov dword [rsp + 0x4c], r14d
lea r11d, [r8 + 0x45]
lea r10d, [r8 + 0x53]
cmp r14d, 0x3c
ja case.0x18003a277.12
movzx eax, byte [rcx + r14 + 0x3a578]
mov ecx, dword [rcx + rax*4 + 0x3a544]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, r13
xchg qword [0x180135a10], rax
jmp case.0x18003a277.12
lea rcx, [rbp - 9]
call qword [sym.imp.WINMM.dll_mciGetDeviceIDW]
mov esi, eax
jmp 0x18003a465
test r12b, r12b
je 0x18003a37b
xor r9d, r9d
mov ebx, r9d
lea edi, [r9 + 0xb]
nop dword [rax]
cmp ebx, 0xa
ja case.default.0x18003a2cc
lea rdx, [0x180000000]
mov eax, ebx
mov ecx, dword [rdx + rax*4 + 0x3a5b8]
add rcx, rdx
jmp rcx
mov dword [rbp - 0x2b], 0x730061
jmp case.default.0x18003a2cc
mov dword [rbp - 0x25], 0x3c0020
jmp case.default.0x18003a2cc
mov dword [rbp - 0x13], 0x6f0074
jmp case.default.0x18003a2cc
mov dword [rbp - 0x33], 0x6b0063
jmp case.default.0x18003a2cc
mov word [rbp - 0x27], r11w
jmp case.default.0x18003a2cc
mov word [rbp - 0x21], r8w
mov dword [rbp - 0x1f], 0x740073
jmp case.default.0x18003a2cc
mov word [rbp - 0x39], r10w
mov dword [rbp - 0x37], 0x610074
jmp case.default.0x18003a2cc
mov dword [rbp - 0x2f], 0x62005f
jmp case.default.0x18003a2cc
mov dword [rbp - 0x1b], 0x630061
mov dword [rbp - 0x17], 0x5f006b
jmp case.default.0x18003a2cc
lea rdx, [rbp - 0x39]
mov ecx, esi
call qword [sym.imp.WINMM.dll_mciGetDeviceIDFromElementIDW]
mov r8d, 0x20
xor r9d, r9d
lea r10d, [r8 + 0x53]
lea r11d, [r8 + 0x45]
jmp case.default.0x18003a2cc
mov dword [rbp - 0xf], 0x70
inc ebx
sub rdi, 1
jne 0x18003a2b0
mov r14d, dword [rsp + 0x4c]
xor ebx, ebx
mov r15d, dword [rsp + 0x54]
movzx r12d, byte [rsp + 0x44]
mov r13, qword [rbp - 0x79]
mov r9d, dword [rsp + 0x50]
mov byte [rsp + 0x48], 1
jmp case.0x18003a277.12
test r13, r13
jne 0x18003a3b3
mov ecx, 0xe0
nop
mov eax, ecx
sub eax, 0xe0
je 0x18003a3a4
cmp eax, 1
je case.0x18003a277.10
jmp 0x18003a3a9
mov byte [rsp + 0x48], 0
inc ecx
cmp ecx, 0xe2
jb 0x18003a390
movzx eax, r12b
test esi, esi
mov ecx, ebx
cmovne ecx, eax
movzx r12d, cl
mov byte [rsp + 0x44], cl
jmp case.0x18003a277.12
mov r9, qword [rbp - 0x71]
lea r8, [0x18007a740]
mov qword [rsp + 0x28], rbx
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r13, rax
mov qword [rbp - 0x79], rax
jmp 0x18003a465
mov dword [rbp + 0xb], r10d
jmp case.0x18003a277.12
mov dword [rsp + 0x48], ebx
jmp case.0x18003a277.12
mov rax, qword [rbp - 0x71]
mov r12b, 1
mov byte [rsp + 0x44], r12b
mov qword [rax + 0x80], rdx
jmp case.0x18003a277.12
movsd xmm0, qword [str.urso]
movzx eax, word [0x180113688]
movsd qword [rbp + 0x11], xmm0
mov word [rbp + 0x19], ax
jmp case.0x18003a277.12
mov eax, dword [0x18011368c]
mov dword [rbp + 0xd], eax
movzx eax, word [0x180113690]
mov word [rbp + 0x11], ax
jmp case.0x18003a277.12
mov r8d, 1
lea rdx, [0x180113694]
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov rax, qword [rbp - 0x71]
mov qword [0x180135a08], rax
mov r9d, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
lea rcx, [0x180000000]
mov r8d, 0x20
inc r9d
inc r14d
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x4c], r14d
lea r10d, [r8 + 0x53]
lea r11d, [r8 + 0x45]
cmp r9d, r15d
jb 0x18003a253
mov eax, dword [rsp + 0x48]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.180106610
mov rbx, qword [rsp + 0x148]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret