Function at 0x1800e9760
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2f8]
sub rsp, 0x3e0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18017d2b8]
xor rax, rsp
mov qword [rbp + 0x228], rax
imul r15d, ecx, 0x341
mov rdi, rdx
mov r14d, ecx
mov ebx, ecx
cmp ecx, r15d
ja 0x1800ea1a1
movsd xmm6, qword [0x180159948]
lea rdx, [0x180154000]
mov r12, qword [rbp - 0x80]
lea rcx, [0x180153fb4]
movsd xmm7, qword [rbp - 0x80]
lea r8, [0x180150c30]
movsd xmm8, qword [rbp - 0x80]
xor r13d, r13d
movsd xmm9, qword [rbp - 0x80]
movsd xmm10, qword [rbp - 0x80]
movsd xmm11, qword [rbp - 0x80]
mov esi, dword [rbp - 0x70]
movsd xmm12, qword [rbp - 0x80]
movsd xmm13, qword [rbp - 0x80]
movsd xmm14, qword [rbp - 0x80]
movsd xmm15, qword [rbp - 0x80]
nop word [rax + rax]
cmp ebx, 0x2af8
ja 0x1800e9a25
je 0x1800ea1a1
cmp ebx, 0xd48
ja 0x1800e998d
je 0x1800e996e
mov eax, ebx
sub eax, 0x44
je 0x1800e9961
sub eax, 0x34
je 0x1800ea166
sub eax, 0x4c
je 0x1800e991d
cmp eax, 0x18
jne 0x1800ea155
mov qword [rsp + 0x28], r13
lea r8, [0x180014b00]
mov r9, rdi
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi], rax
test rax, rax
jne 0x1800e98f0
mov eax, 0x9a
cmp eax, 0x9a
je 0x1800e98e4
cmp eax, 0xb6e
je 0x1800e98e0
cmp eax, 0x1642
je 0x1800ea1a1
jmp 0x1800e98e4
mov byte [rbp - 0x78], r13b
add eax, 0xad4
cmp eax, 0x207c
jbe 0x1800e98c5
mov ecx, 0x4c
cmp ecx, 0x4c
je 0x1800e9904
cmp ecx, 0xd4
je 0x1800e9914
jmp 0x1800e990c
mov eax, 1
xchg dword [rdi + 0xc], eax
add ecx, 0xa
cmp ecx, 0x60
jb 0x1800e98f5
mov byte [rbp - 0x78], 1
jmp 0x1800ea140
movzx eax, word [0x18014dfb4]
mov word [rbp + 0x1f8], ax
mov eax, dword [str.stemIn]
mov dword [rbp + 0x1fa], 0x795374
mov dword [rbp + 0x1fd], eax
movzx eax, word [0x180153ffc]
mov word [rbp + 0x201], ax
movzx eax, byte [0x180153ffe]
mov byte [rbp + 0x203], al
jmp 0x1800ea155
movsd xmm7, qword [0x18015cfc8]
jmp 0x1800ea155
movsd xmm0, qword [0x18015abb0]
movsd qword [rbp - 0x28], xmm0
movsd xmm0, qword [0x18015a598]
movsd qword [rbp - 0x30], xmm0
jmp 0x1800ea155
cmp ebx, 0x1a4c
je 0x1800e99fc
cmp ebx, 0x2648
je 0x1800e99d2
cmp ebx, 0x2750
jne 0x1800ea155
movsd xmm15, qword [0x180159c30]
movsd xmm14, qword [0x18015c888]
movsd xmm13, qword [0x18015bc00]
movsd xmm12, qword [0x18015a918]
jmp 0x1800ea155
movzx eax, word [0x180153fb0]
mov word [rbp + 0x203], ax
movzx eax, byte [0x180153fb2]
mov byte [rbp + 0x205], al
mov dword [rbp + 0x208], 0x6b
jmp 0x1800ea155
movsd xmm8, qword [0x18015dbd8]
movsd xmm9, qword [0x18015def8]
movsd xmm10, qword [0x18015cb00]
movsd xmm11, qword [0x180159b80]
jmp 0x1800ea155
cmp ebx, 0x5b60
ja 0x1800e9eda
je 0x1800e9e38
cmp ebx, 0x3454
je 0x1800e9ccf
cmp ebx, 0x4158
je 0x1800e9be7
cmp ebx, 0x4bcc
je 0x1800e9ba9
cmp ebx, 0x4e5c
jne 0x1800ea155
movsd xmm0, qword [rbp - 0x18]
lea rax, [rbp + 0x1c0]
movsd xmm1, qword [0x18015d8a8]
lea r9, [rbp + 0x38]
mov qword [rsp + 0x88], rax
lea r8, [rbp + 0x40]
movsd qword [rbp], xmm0
lea rax, [rbp - 0x10]
movsd xmm0, qword [rbp - 0x30]
lea rcx, [rbp + 0x50]
mov qword [rsp + 0x80], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x78], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x70], rax
lea rax, [rbp]
mov qword [rsp + 0x68], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x50], rdx
lea rdx, [rbp + 0x48]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x28]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x30]
movsd qword [rbp + 0x18], xmm0
movsd xmm0, qword [rbp - 0x28]
movsd qword [rbp + 0x28], xmm0
movsd xmm0, qword [0x18015a5c0]
mov dword [rsp + 0x28], 0xbc
mov qword [rsp + 0x20], rax
movsd qword [rbp - 0x20], xmm1
movsd qword [rbp + 0x50], xmm12
movsd qword [rbp - 8], xmm13
movsd qword [rbp + 0x38], xmm14
movsd qword [rbp + 0x20], xmm15
movsd qword [rbp + 0x10], xmm11
movsd qword [rbp - 0x10], xmm10
movsd qword [rbp + 0x1c0], xmm9
movsd qword [rbp + 0x48], xmm8
movsd qword [rbp + 0x40], xmm7
movsd qword [rbp + 8], xmm0
movsd qword [rbp + 0x30], xmm1
call fcn.1800ee150
movsd xmm0, qword [0x18015b498]
lea r9, [rbp + 0x60]
movsd qword [rbp + 0x58], xmm0
lea r8, str.H_ri
movsd xmm0, qword [rbp - 0x60]
lea rcx, [rbp + 0x68]
mov esi, eax
movsd qword [rbp + 0x60], xmm0
movsd qword [rbp + 0x68], xmm6
lea rax, [rbp + 0x58]
jmp 0x1800ea122
movups xmm0, xmmword [str.ernel32.dll]
lea r8, [rbp + 0x1f8]
mov edx, 0x29
movsd xmm1, qword [0x180153fa8]
lea rcx, [rbp + 0x208]
movups xmmword [rbp + 0x20a], xmm0
movsd qword [rbp + 0x21a], xmm1
call fcn.180012590
mov r12, rax
jmp 0x1800ea140
movsd xmm0, qword [0x18015b498]
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], rax
lea r9, [rbp + 0x78]
movsd qword [rbp + 0x70], xmm0
lea r8, str.R_ri
movsd xmm0, qword [rbp - 0x60]
lea rdx, str.eraAtoi13
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea rcx, [rbp + 0x80]
movsd qword [rbp + 0x78], xmm0
movsd qword [rbp + 0x80], xmm6
mov qword [rsp + 0x20], rdi
call fcn.1800fe9c0
movsd xmm0, qword [0x18015a5e8]
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
lea r9, [rbp + 0x90]
movsd qword [rbp + 0x88], xmm0
lea r8, str.R_di
movsd xmm0, qword [rbp - 0x68]
lea rdx, str.eraAtoi13
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea rcx, [rbp + 0x98]
movsd qword [rbp + 0x90], xmm0
movsd qword [rbp + 0x98], xmm6
mov qword [rsp + 0x20], rdi
call fcn.1800fe9c0
lea rax, [0x180153fe8]
mov dword [rbp - 0x58], r13d
mov qword [rsp + 0x28], rax
lea r9, str.eraAtoi13
lea r8, [rbp - 0x58]
mov qword [rsp + 0x20], rdi
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], esi
mov ecx, 0xd4
call fcn.1800186b0
jmp 0x1800ea140
movsd xmm0, qword [0x18015a8c8]
lea rax, [rbp + 0xa0]
movsd xmm1, qword [0x18015b480]
lea r9, [rbp + 0xf0]
mov qword [rsp + 0x88], rax
lea r8, [rbp + 0xf8]
movsd qword [rbp - 0x18], xmm0
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x80], rax
lea rdx, [rbp + 0x100]
movsd qword [rbp + 0xb8], xmm0
lea rax, [rbp - 0x68]
movsd xmm0, qword [rbp - 0x30]
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x68], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 0x108]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xe8]
movsd qword [rbp + 0xd0], xmm0
movsd xmm0, qword [rbp - 0x28]
movsd qword [rbp + 0xe0], xmm0
movsd xmm0, qword [0x18015a5c0]
mov dword [rsp + 0x28], 0xbc
mov qword [rsp + 0x20], rax
movsd qword [rbp - 0x20], xmm1
movsd qword [rbp + 0x108], xmm12
movsd qword [rbp + 0xb0], xmm13
movsd qword [rbp + 0xf0], xmm14
movsd qword [rbp + 0xd8], xmm15
movsd qword [rbp + 0xc8], xmm11
movsd qword [rbp + 0xa8], xmm10
movsd qword [rbp + 0xa0], xmm9
movsd qword [rbp + 0x100], xmm8
movsd qword [rbp + 0xf8], xmm7
movsd qword [rbp + 0xc0], xmm0
movsd qword [rbp + 0xe8], xmm1
call fcn.1800ee150
mov esi, eax
jmp 0x1800ea140
movsd xmm0, qword [0x18015a5e8]
lea rax, [rbp + 0x110]
mov qword [rsp + 0x30], rax
lea r9, [rbp + reloc.SHLWAPI.dll_SHRegGetIntW]
movsd qword [rbp + 0x110], xmm0
lea r8, str.H_di
movsd xmm0, qword [rbp - 0x68]
lea rdx, str.eraAtoi13
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea rcx, [rbp + 0x120]
movsd qword [rbp + reloc.SHLWAPI.dll_SHRegGetIntW], xmm0
movsd qword [rbp + 0x120], xmm6
mov qword [rsp + 0x20], rdi
call fcn.1800fe9c0
lea rax, [0x180153ff4]
mov dword [rbp - 0x48], r13d
mov qword [rsp + 0x28], rax
lea r9, str.eraAtoi13
lea r8, [rbp - 0x48]
mov qword [rsp + 0x20], rdi
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x40], esi
mov ecx, 0xd4
call fcn.1800186b0
movsd xmm0, qword [0x18015a530]
movsd qword [rbp - 0x20], xmm0
jmp 0x1800ea140
cmp ebx, 0x6864
je 0x1800e9f93
cmp ebx, 0x7150
je 0x1800ea18e
cmp ebx, 0x7568
jne 0x1800ea155
movsd xmm0, qword [0x18015a5e8]
lea rax, [rbp + 0x128]
mov qword [rsp + 0x30], rax
lea r9, [rbp + 0x130]
movsd qword [rbp + 0x128], xmm0
lea r8, str.A_di
movsd xmm0, qword [rbp - 0x68]
lea rdx, str.eraAtoi13
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea rcx, [rbp + 0x138]
movsd qword [rbp + 0x130], xmm0
movsd qword [rbp + 0x138], xmm6
mov qword [rsp + 0x20], rdi
call fcn.1800fe9c0
lea rax, [0x180153fd4]
mov dword [rbp - 0x38], r13d
mov qword [rsp + 0x28], rax
lea r9, str.eraAtoi13
lea r8, [rbp - 0x38]
mov qword [rsp + 0x20], rdi
lea rdx, [rbp - 0x70]
mov dword [rbp - 0x70], esi
mov ecx, 0xd4
call fcn.1800186b0
jmp 0x1800ea140
movsd xmm0, qword [rbp - 0x18]
lea rax, [rbp + 0x140]
mov qword [rsp + 0x88], rax
lea r9, [rbp + 0x190]
movsd qword [rbp + 0x158], xmm0
lea rax, [rbp + 0x148]
movsd xmm0, qword [rbp - 0x30]
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x80], rax
lea rcx, [rbp + 0x1a8]
movsd qword [rbp + 0x170], xmm0
lea rax, [rbp - 0x68]
movsd xmm0, qword [rbp - 0x28]
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0x150]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x158]
mov qword [rsp + 0x68], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x168]
mov qword [rsp + 0x50], r8
lea r8, [rbp + 0x198]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x170]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x178]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x180]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x188]
movsd qword [rbp + 0x180], xmm0
movsd xmm0, qword [0x18015b140]
movsd qword [rbp + 0x160], xmm0
movsd xmm0, qword [rbp - 0x20]
mov dword [rsp + 0x28], 0xbc
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x1a8], xmm12
movsd qword [rbp + 0x150], xmm13
movsd qword [rbp + 0x190], xmm14
movsd qword [rbp + 0x178], xmm15
movsd qword [rbp + 0x168], xmm11
movsd qword [rbp + 0x148], xmm10
movsd qword [rbp + 0x140], xmm9
movsd qword [rbp + 0x1a0], xmm8
movsd qword [rbp + 0x198], xmm7
movsd qword [rbp + 0x188], xmm0
call fcn.1800ee150
movsd xmm0, qword [0x18015b498]
lea r9, [rbp + 0x1b8]
movsd qword [rbp + 0x1b0], xmm0
lea r8, str.A_ri
movsd xmm0, qword [rbp - 0x60]
lea rcx, [rbp - 0x80]
mov esi, eax
movsd qword [rbp + 0x1b8], xmm0
movsd qword [rbp - 0x80], xmm6
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x30], rax
lea rdx, str.eraAtoi13
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
mov qword [rsp + 0x20], rdi
call fcn.1800fe9c0
lea r8, [0x180150c30]
lea rdx, [0x180154000]
lea rcx, [0x180153fb4]
imul eax, r14d, 0x31
add ebx, eax
cmp ebx, r15d
jbe 0x1800e9850
jmp 0x1800ea1a1
movsd xmm0, qword [rdi]
mulsd xmm0, qword [0x18015c108]
movsd xmm1, qword [0x18015b958]
addsd xmm0, qword [0x18015a928]
call sub.api_ms_win_crt_math_l1_1_0.dll_fmod
movsd qword [rbp - 0x78], xmm0
jmp 0x1800ea1a1
lea rcx, [rbp + 0x1c8]
call r12
mov eax, dword [rbp + 0x1e8]
mov dword [rbp - 0x78], eax
mov rax, qword [rbp - 0x78]
mov rcx, qword [rbp + 0x228]
xor rcx, rsp
call fcn.180110960
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret