Function at 0x1800163d0
Capabilities:
Create thread
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rax, qword [0x1800737f8]
xor rax, rsp
mov qword [rsp + 0x88], rax
imul eax, edx, 0x8ca
mov rdi, r8
mov r14d, edx
mov r12, rcx
mov ebx, edx
mov dword [rsp + 0x58], eax
cmp edx, eax
ja 0x180016800
mov rbp, qword [rsp + 0x38]
lea rcx, str.__._ds
mov r15, qword [rsp + 0x38]
mov r13, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
cmp ebx, 0x3658
ja 0x180016627
je 0x180016800
cmp ebx, 0x108
ja 0x18001656d
je 0x18001650d
mov eax, ebx
sub eax, 0x25
je 0x1800164fa
sub eax, 2
je 0x1800164d0
sub eax, 0x7e
je 0x1800164b1
cmp eax, 0xe
jne 0x1800167f0
mov r8d, 0xd7
mov dword [rsp + 0x50], 0
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.180048e40
mov r9d, 0x103
xor r8d, r8d
mov rdx, rdi
xor ecx, ecx
call fcn.18003c430
mov rsi, qword [rdi + 0x18]
lea rcx, str.__._ds
jmp 0x1800167f0
lea r8, str.SubSub
mov edx, 0x50
xor ecx, ecx
call fcn.180020650
lea rcx, str.__._ds
jmp 0x1800167f0
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
mov r8d, 0xf1
call fcn.180021380
mov rbp, rax
lea rcx, str.__._ds
jmp 0x1800167f0
mov qword [0x1800738d8], rdi
mov qword [rdi + 0x80], r12
jmp 0x1800167f0
mov r8d, dword [r12]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x180016520
cmp eax, r8d
lea rdx, str.____ds
cmovg rdx, rcx
lea rcx, [rsp + 0x78]
call fcn.18005fb90
mov r8, rdi
lea rdx, [rsp + 0x78]
lea rcx, [0x180075540]
call fcn.18005fb90
lea rax, [0x180075540]
mov qword [rsp + 0x48], rax
lea rcx, str.__._ds
jmp 0x1800167f0
cmp ebx, 0x1236
je 0x1800165ea
cmp ebx, 0x1332
je 0x1800165dc
cmp ebx, 0x2447
je 0x1800165c8
cmp ebx, 0x263d
jne 0x1800167f0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], 2
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, rbp
mov ecx, 2
call fcn.18005f180
lea rcx, str.__._ds
jmp 0x1800167f0
mov rax, r15
mov byte [rsp + 0x48], 1
xchg qword [0x1800738e0], rax
jmp 0x1800167f0
mov qword [rsp + 0x40], 0
jmp 0x1800167f0
mov qword [rsp + 0x28], 0
lea r8, [0x180016ba0]
mov r9, rdi
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15, rax
test rax, rax
je 0x180016830
lea rcx, str.__._ds
jmp 0x1800167f0
cmp ebx, 0x7269
ja 0x18001678f
je 0x180016769
cmp ebx, 0x3948
je 0x180016707
cmp ebx, 0x4c53
je 0x1800166bc
cmp ebx, 0x581a
je 0x18001667e
cmp ebx, 0x5f5e
jne 0x1800167f0
xor r8d, r8d
mov r9, r13
xor ecx, ecx
lea edx, [r8 + 0x4c]
call fcn.180006ae0
lea rcx, str.__._ds
jmp 0x1800167f0
mov rax, qword [rdi + 0x20]
test rsi, rsi
je 0x180016696
mov qword [rsi + 0x20], rax
test rax, rax
je 0x1800166a3
mov qword [rax + 0x18], rsi
jmp 0x1800166a3
test rax, rax
je 0x1800166a3
mov qword [rax + 0x18], 0
cmp rdi, qword [0x1800740b0]
jne 0x1800167f0
mov qword [0x1800740b0], rax
jmp 0x1800167f0
mov r8, qword [rsp + 0x40]
test r8, r8
je 0x180016837
cmp qword [r8 + 8], 2
jne 0x180016837
lea rax, [rsp + 0x68]
mov qword [rsp + 0x68], 1
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov rdx, rbp
mov ecx, 0x88
call fcn.180016bb0
mov r13, rax
lea rcx, str.__._ds
jmp 0x1800167f0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x70], 1
lea r9, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, rbp
mov ecx, 1
call fcn.18005f180
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], 3
lea r9, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r8d, 0xbb
mov rdx, rbp
mov ecx, 3
call fcn.18005f180
lea rcx, str.__._ds
jmp 0x1800167f0
mov r9d, 0xba
mov byte [rsp + 0x30], 1
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, rbp
call fcn.1800401b0
mov rbp, rax
lea rcx, str.__._ds
jmp 0x1800167f0
cmp ebx, 0x81f0
je 0x180016800
cmp ebx, 0xaf81
je 0x1800167db
cmp ebx, 0x106e8
jne 0x1800167f0
mov r9d, 0x14d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180053590
lea rcx, str.__._ds
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x18], 0
jmp 0x1800167f0
mov rax, qword [0x1800740b8]
cmp rdi, rax
cmove rax, rsi
mov qword [0x1800740b8], rax
imul eax, r14d, 0x7d
add ebx, eax
cmp ebx, dword [rsp + 0x58]
jbe 0x180016431
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.1800604b0
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x48], 0
jmp 0x180016800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__builtin_ia32_loaddqusi512_mask
call fcn.18005f980
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3