Function at 0x140016294
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r14
push rbp
lea rbp, [rax - 0x18]
sub rsp, 0x110
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
mov rax, qword [0x1400a1028]
xor rax, rsp
mov qword [rbp - 0x30], rax
lea rcx, [rsp + 0x30]
call fcn.140034e88
movss xmm6, dword [rax]
call fcn.1400276a0
mulss xmm6, dword [0x1400974bc]
subss xmm6, dword [0x140097590]
addss xmm6, dword [rax + 0x38]
movss xmm8, dword [0x1400975f4]
movaps xmm1, xmm8
movaps xmm0, xmm6
call fcn.140034bb8
mov r8, qword [0x1400c9120]
mov rax, qword [r8 + 0x1d20]
movss xmm4, dword [rax + 0x11c]
subss xmm4, dword [rax + 0x54]
addss xmm4, dword [rax + 0xa0]
addss xmm4, dword [0x140097574]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d20]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm4
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x140097700]
movups xmmword [rsp + 0x70], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x4c], 0x3f800000
and dword [rsp + 0x40], 0
and dword [rsp + 0x44], 0
mov dword [rsp + 0x30], 0x42700000
mov dword [rsp + 0x34], 0x42700000
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x1400c9238]
call fcn.14005c794
movaps xmm6, xmmword [0x140097700]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 8
mov edi, 0xf
mov qword [rsp + 0x68], rdi
movabs rax, 0x656d616e5f676174
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x58], 0
lea r9, str._null
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x50]
lea rcx, [0x1400c92a0]
call fcn.1400176a4
nop
lea rcx, str.Millennium_Steam_Patcher_v
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], 0x1c
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.140009988
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140016461
mov rbx, qword [rax]
movdqa xmmword [rsp + 0x70], xmm6
movss dword [rsp + 0x20], xmm8
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14002d2f8
movss xmm6, dword [rax]
lea rcx, [rsp + 0x40]
call fcn.140034e88
movss xmm7, dword [rax]
call fcn.1400276a0
mulss xmm7, dword [0x1400974bc]
mulss xmm6, dword [0x1400974bc]
subss xmm7, xmm6
addss xmm7, dword [rax + 0x38]
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.140034bb8
mov r8, qword [0x1400c9120]
mov rax, qword [r8 + 0x1d20]
movss xmm4, dword [rax + 0x11c]
subss xmm4, dword [rax + 0x54]
addss xmm4, dword [rax + 0xa0]
addss xmm4, dword [0x1400975a0]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d20]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm4
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.14005adb4
nop
mov r14d, 0x1000
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140016571
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x14001656c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001656c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140063cd0
movdqa xmm0, xmmword [0x140097640]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x1400165bc
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x1400165b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400165b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140063cd0
movdqa xmm0, xmmword [0x140097640]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140016609
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x140016604
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016604
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140063cd0
movaps xmm0, xmmword [0x1400976e0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
mov ebx, 3
mov ecx, ebx
call fcn.1400277c8
lea rcx, [rsp + 0x30]
call fcn.140034e88
movss xmm6, dword [rax]
call fcn.1400276a0
mulss xmm6, dword [0x1400974bc]
subss xmm6, dword [0x1400975b0]
addss xmm6, dword [rax + 0x38]
movaps xmm1, xmm8
movaps xmm0, xmm6
call fcn.140034bb8
mov r8, qword [0x1400c9120]
mov rax, qword [r8 + 0x1d20]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x54]
addss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140097590]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d20]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [r8 + 0x1d20]
movss xmm2, dword [rax + 0x118]
subss xmm2, dword [rax + 0x50]
addss xmm2, dword [rax + 0x9c]
movss xmm6, dword [0x140097560]
addss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d20]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm2
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov dword [rsp + 0x30], 0x435c0000
mov dword [rsp + 0x34], 0x42340000
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, str.install_page
call fcn.14002dd90
movaps xmm0, xmmword [0x1400976d0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
mov ecx, ebx
call fcn.1400277c8
movaps xmm0, xmmword [0x1400976f0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea ecx, [rbx + 2]
call fcn.1400277c8
mov dword [rsp + 0x30], 0x42d20000
mov dword [rsp + 0x34], 0x41f00000
lea rdx, [rsp + 0x30]
lea rcx, str.Integrate
call fcn.14005b3dc
test al, al
je 0x1400167c3
mov byte [0x1400c9100], 1
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140016a24]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor ecx, ecx
call fcn.140029200
test al, al
je 0x1400168d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 4
mov qword [rbp - 0x78], rdi
mov dword [rsp + 0x70], 0x79646f62
mov byte [rsp + 0x74], 0
lea r9, str.null
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [0x1400c92a0]
call fcn.1400176a4
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14001684c
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140016847
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016847
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140063cd0
lea rcx, [rsp + 0x50]
mov rbx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x68]
cmp rdi, 0x10
cmovae rcx, rbx
mov r8, qword [rsp + 0x60]
cmp r8, 4
jne 0x14001687e
lea rdx, str.null
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001689a
lea rcx, [rsp + 0x50]
cmp rdi, 0x10
cmovae rcx, rbx
call fcn.140035670
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x50]
cmp rdi, 0x10
jb 0x1400168d0
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, r14
jb 0x1400168c8
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400168c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140063cd0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.140034bb8
mov r8, qword [0x1400c9120]
mov rax, qword [r8 + 0x1d20]
movss xmm4, dword [rax + 0x118]
subss xmm4, dword [rax + 0x50]
addss xmm4, dword [rax + 0x9c]
subss xmm4, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d20]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm4
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov dword [rsp + 0x30], 0x42d20000
mov dword [rsp + 0x34], 0x41f00000
lea rdx, [rsp + 0x30]
lea rcx, str.Remove
call fcn.14005b3dc
test al, al
je 0x140016989
mov byte [0x1400c9100], 0
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140016a50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp byte [0x1400c9100], 0
je 0x1400169d7
lea rcx, [rsp + 0x40]
call fcn.140034e88
movss xmm2, dword [rax]
movss dword [rsp + 0x30], xmm2
mov dword [rsp + 0x34], 0x40800000
movss xmm0, dword [0x1400c929c]
addss xmm0, dword [0x1400c9294]
movd xmm1, dword [0x1400c9298]
cvtdq2ps xmm1, xmm1
divss xmm0, xmm1
lea rdx, [rsp + 0x30]
call fcn.14005c9c4
mov ecx, 2
call fcn.140027824
call fcn.14002ddec
mov ecx, 1
call fcn.140027824
mov rcx, qword [rbp - 0x30]
xor rcx, rsp
call fcn.140063870
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov r14, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret