Function at 0x4019c1
Capabilities:
Create thread
Terminate process
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
mov rax, rsp
mov rbx, rax
mov dword [rbp - 0xc], 4
mov eax, dword [rbp - 0xc]
cdqe
sub rax, 1
mov qword [rbp - 8], rax
mov eax, dword [rbp - 0xc]
cdqe
mov r14, rax
mov r15d, 0
mov eax, dword [rbp - 0xc]
cdqe
mov r12, rax
mov r13d, 0
mov eax, dword [rbp - 0xc]
cdqe
shl rax, 3
add rax, 0xf
shr rax, 4
shl rax, 4
call fcn.00403450
sub rsp, rax
lea rax, [rsp + 0x30]
add rax, 7
shr rax, 3
shl rax, 3
mov qword [rbp - 0x20], rax
mov eax, dword [rbp - 0xc]
cdqe
sub rax, 1
mov qword [rbp - 0x28], rax
mov eax, dword [rbp - 0xc]
cdqe
mov rsi, rax
mov edi, 0
mov eax, dword [rbp - 0xc]
cdqe
mov r10, rax
mov r11d, 0
mov eax, dword [rbp - 0xc]
cdqe
shl rax, 2
add rax, 0xf
shr rax, 4
shl rax, 4
call fcn.00403450
sub rsp, rax
lea rax, [rsp + 0x30]
add rax, 3
shr rax, 2
shl rax, 2
mov qword [rbp - 0x30], rax
mov eax, dword [rbp - 0xc]
cdqe
sub rax, 1
mov qword [rbp - 0x38], rax
mov eax, dword [rbp - 0xc]
cdqe
mov r8, rax
mov r9d, 0
mov eax, dword [rbp - 0xc]
cdqe
mov rdx, rax
mov ecx, 0
mov eax, dword [rbp - 0xc]
cdqe
shl rax, 3
add rax, 0xf
shr rax, 4
shl rax, 4
call fcn.00403450
sub rsp, rax
lea rax, [rsp + 0x30]
add rax, 7
shr rax, 3
shl rax, 3
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x18], 0
jmp 0x401bb9
mov ecx, 4
call sub.msvcrt.dll_malloc
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
mov edx, dword [rbp - 0x18]
mov dword [rax], edx
mov eax, dword [rbp - 0x18]
cdqe
lea rdx, [rax*4]
mov rax, qword [rbp - 0x30]
add rax, rdx
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, rdx
lea r8, [0x00401987]
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateThread]
call rax
mov rcx, rax
mov rdx, qword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
cdqe
mov qword [rdx + rax*8], rcx
mov rdx, qword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
cdqe
mov rax, qword [rdx + rax*8]
test rax, rax
jne 0x401bb5
mov ecx, 2
mov rax, qword [fcn.00403570]
call rax
mov r9, rax
mov r8d, 0x14
mov edx, 1
lea rcx, str.Cannot_spawn_thread_n
call sub.msvcrt.dll_fwrite
mov ecx, 3
mov rax, qword [sym.imp.KERNEL32.dll_ExitProcess]
call rax
add dword [rbp - 0x18], 1
mov eax, dword [rbp - 0x18]
cmp eax, dword [rbp - 0xc]
jl 0x401b04
mov rdx, qword [rbp - 0x20]
mov eax, dword [rbp - 0xc]
mov r9d, 0xffffffff
mov r8d, 1
mov ecx, eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
call rax
mov dword [rbp - 0x14], 0
jmp 0x401c36
mov eax, dword [rbp - 0x14]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp - 0x40]
add rdx, rax
mov rcx, qword [rbp - 0x20]
mov eax, dword [rbp - 0x14]
cdqe
mov rax, qword [rcx + rax*8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
call rax
mov rdx, qword [rbp - 0x20]
mov eax, dword [rbp - 0x14]
cdqe
mov rax, qword [rdx + rax*8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
add dword [rbp - 0x14], 1
mov eax, dword [rbp - 0x14]
cmp eax, dword [rbp - 0xc]
jl 0x401bec
mov dword [rbp - 0x10], 0
jmp 0x401c6c
mov rdx, qword [rbp - 0x40]
mov eax, dword [rbp - 0x10]
cdqe
mov rdx, qword [rdx + rax*8]
mov eax, dword [rbp - 0x10]
mov r8, rdx
mov edx, eax
lea rcx, str.Thread_result__d:__llu_n
call fcn.00401550
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
cmp eax, dword [rbp - 0xc]
jl 0x401c47
mov rsp, rbx
nop
lea rsp, [rbp + 8]
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret