Function at 0x140001010
Capabilities:
Create thread
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov rax, qword [0x14000a038]
xor rax, rsp
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x50], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ebx, dword [rsp + 0x78]
inc ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
lea r9, str.NITRO_ASYNC_THREADS
mov r8d, 0x10
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv_s]
nop
cmp qword [rsp + 0x48], 0
je 0x1400010b4
lea rcx, [rsp + 0x88]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
lea ecx, [rax - 1]
cmp ecx, 0x13
cmovbe ebx, eax
mov r13d, ebx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
xor edi, edi
mov esi, edi
mov qword [rsp + 0x40], rdi
mov r15d, edi
test ebx, ebx
je 0x140001162
mov ebx, r13d
shl rbx, 5
cmp rbx, 0x1000
jb 0x14000111a
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14000127c
call fcn.1400041ec
mov rcx, rax
test rax, rax
je 0x140001113
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
lea rsi, [rbx + rax]
mov rbp, rax
jmp 0x14000113a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x140001130
mov rcx, rbx
call fcn.1400041ec
mov rbp, rax
lea rsi, [rbx + rax]
jmp 0x14000113a
mov rax, rdi
mov rbp, rdi
lea rsi, [rbx + rdi]
mov r15, rsi
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x40], rsi
mov r8, r13
shl r8, 5
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r12, rsi
mov qword [rsp + 0x38], rsi
jmp 0x14000116c
mov r12, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x30]
mov r14, rdi
mov rbx, rbp
cmp rbp, r15
je 0x1400011c7
mov r12, qword [rsp + 0x50]
nop dword [rax]
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r12
mov rax, r14
inc r14
test rax, rax
je 0x1400011b9
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [fcn.1400027b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbx], rax
pause
add rbx, 0x20
cmp rbx, r15
jne 0x140001180
mov r12, qword [rsp + 0x38]
mov rcx, rbp
call fcn.1400027b0
mov rbx, rbp
cmp rbp, r12
je 0x14000120b
nop word [rax + rax]
mov rax, rdi
inc rdi
test rax, rax
je 0x140001202
mov edx, 0x3e8
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 0x20
cmp rbx, r12
jne 0x1400011e0
test rbp, rbp
je 0x14000124b
sub rsi, rbp
and rsi, 0xffffffffffffffe0
mov rax, rbp
cmp rsi, 0x1000
jb 0x14000123f
add rsi, 0x27
mov rbp, qword [rbp - 8]
sub rax, rbp
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000123f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rsi
mov rcx, rbp
call fcn.140004228
nop
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.140004320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140002090
int3