Function at 0x1400d6ae0
Capabilities:
Create thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov r14, rcx
xor r15d, r15d
mov esi, r15d
mov dword [rbp + 0x67], r15d
movabs r12, 0x7ffffffffff0bdbf
movabs r13, 0x7fffffffffffffff
mov ebx, r15d
nop dword [rax]
lea rcx, [rbp + 0x7f]
call fcn.140011640
mov rax, qword [rbp + 0x7f]
cmp rax, r12
je 0x1400d6b45
setl cl
test cl, cl
je 0x1400d6b45
add rax, 0xf4240
mov qword [rbp + 0x67], rax
jmp 0x1400d6b49
mov qword [rbp + 0x67], r13
lea rcx, [rbp + 0x67]
call fcn.140018df0
mov rax, qword [0x140132b48]
add rax, 0x19a41c8
mov qword [rbp + 0x67], r15
mov qword [rbp - 0x31], rax
lea rax, [rbp + 0x67]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], 8
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x39]
mov edx, 0x221a5c
mov rcx, qword [0x140132b50]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp qword [rbp + 0x67], 0
je 0x1400d6b20
mov rax, qword [0x140132b48]
add rax, 0x19a41c8
mov qword [rbp + 0x77], r15
mov qword [rbp - 9], rax
lea rax, [rbp + 0x77]
mov qword [rbp - 1], rax
mov qword [rbp + 7], 8
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x11]
mov edx, 0x221a5c
mov rcx, qword [0x140132b50]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x77]
add rax, 0x7ec
mov dword [rbp + 0x67], r15d
mov qword [rbp - 0x31], rax
lea rax, [rbp + 0x67]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], 4
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x39]
mov edx, 0x221a5c
mov rcx, qword [0x140132b50]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp dword [rbp + 0x67], 0
je 0x1400d6b20
call fcn.1400f4f50
test rax, rax
je 0x1400d6b20
call fcn.1400f4f50
add rax, 0x324
mov dword [rbp + 0x67], r15d
mov qword [rbp - 9], rax
lea rax, [rbp + 0x67]
mov qword [rbp - 1], rax
mov qword [rbp + 7], 4
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x11]
mov edx, 0x221a5c
mov rcx, qword [0x140132b50]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp dword [rbp + 0x67], 0
jle 0x1400d6b20
call fcn.1400f5830
cmp eax, 0x64
jg 0x1400d6b20
cmp byte [r14], 0
je 0x1400d6b20
mov edi, dword [0x140132b40]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
test rax, rax
je 0x1400d6b20
lea rdx, [rbp + 0x6f]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x1400d6b20
cmp dword [rbp + 0x6f], edi
jne 0x1400d6b20
call fcn.1400f4f50
add rax, 0x1468
mov qword [rbp + 0x77], r15
mov qword [rbp - 9], rax
lea rax, [rbp + 0x77]
mov qword [rbp - 1], rax
mov qword [rbp + 7], 8
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x11]
mov edx, 0x221a5c
mov rcx, qword [0x140132b50]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [rbp + 0x67], r15d
mov rax, qword [rbp + 0x77]
add rax, 0x40
mov qword [rbp - 0x31], rax
lea rax, [rbp + 0x67]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], 4
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x28
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x39]
mov edx, 0x221a5c
mov rcx, qword [0x140132b50]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edi, dword [rbp + 0x67]
cmp edi, ebx
jbe 0x1400d6e6c
mov edx, 0xbfffbfff
xor ecx, ecx
call qword [sym.imp.WINMM.dll_waveOutSetVolume]
mov ecx, 8
call fcn.1400c888c
lea rcx, [0x1400d6ea0]
mov qword [rax], rcx
mov qword [rbp + 0x67], rax
or esi, 1
lea rcx, [rbp - 0x51]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140094300]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x59], rax
test rax, rax
je 0x1400d6e83
cmp dword [rbp - 0x51], 0
je 0x1400d6e77
movaps xmm0, xmmword [rbp - 0x59]
movdqa xmmword [rbp - 0x49], xmm0
lea rcx, [rbp - 0x49]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400d6e77
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x59], xmm0
mov ebx, edi
jmp 0x1400d6b20
jae 0x1400d6b20
jmp 0x1400d6b1a
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x51], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3