Function at 0x140018f80
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
mov rdi, rcx
xor ebp, ebp
add rcx, 0x130
call fcn.1400361d0
test eax, eax
setne dl
mov byte [rdi + 0x1b8], dl
test eax, eax
je 0x140018fcd
cmp qword [rdi + 0x178], 0x10000
jae 0x140018fcd
lea rcx, [rdi + 0x130]
call fcn.1400365d0
mov eax, dword [rdi + 0x3a0]
cmp byte [rdi + 0x1b8], bpl
je 0x14001929b
cmp eax, 1
je 0x140019278
mov dword [rdi + 0x3a0], 1
call fcn.140017640
test al, al
je 0x1400192f0
lea rcx, [rdi + 0xd0]
call fcn.14002e8c0
test al, al
je 0x1400192f0
mov rcx, qword [rdi + 0xd0]
mov rax, qword [rcx]
cmp rax, rcx
je 0x140019095
nop dword [rax]
nop word [rax + rax]
mov qword [rax + 0x58], rbp
mov qword [rax + 0x50], rbp
mov byte [rax + 0x9c], bpl
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x19], bpl
je 0x14001906b
mov rcx, qword [rax + 8]
cmp byte [rcx + 0x19], bpl
jne 0x140019066
cmp rax, qword [rcx + 0x10]
jne 0x140019066
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], bpl
je 0x140019053
mov rax, rcx
jmp 0x14001908c
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], bpl
jne 0x14001908c
nop word [rax + rax]
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], bpl
je 0x140019080
cmp rax, qword [rdi + 0xd0]
jne 0x140019030
mov dword [rdi + 0x274], 0x4cbebc20
mov dword [rdi + 0x264], 0x4cbebc20
mov dword [rdi + 0x260], 0x4cbebc20
mov dword [rdi + 0x25c], 0x4cbebc20
mov dword [rdi + 0x258], 0x4cbebc20
mov dword [rdi + 0x254], 0x4cbebc20
mov dword [rdi + 0x250], 0x4cbebc20
mov dword [rdi + 0x270], 0x4cbebc20
mov dword [rdi + 0x26c], 0x4cbebc20
mov dword [rdi + 0x268], 0x4cbebc20
mov qword [rdi + 0x290], rbp
mov qword [rdi + 0x288], rbp
mov qword [rdi + 0x280], rbp
mov qword [rdi + 0x278], rbp
mov qword [rdi + 0x2b0], rbp
mov qword [rdi + 0x2a8], rbp
mov qword [rdi + 0x2a0], rbp
mov qword [rdi + 0x298], rbp
mov byte [rdi + 0x388], bpl
mov qword [rdi + 0x390], rbp
mov qword [rdi + 0x398], rbp
mov qword [rdi + 0x308], rbp
mov qword [rdi + 0x320], rbp
mov qword [rdi + 0x310], rbp
lea rcx, [rdi + 0x328]
cmp qword [rdi + 0x340], 8
jb 0x140019173
mov rcx, qword [rdi + 0x328]
mov qword [rdi + 0x338], rbp
mov word [rcx], bp
mov qword [rdi + 0x318], rbp
mov qword [rdi + 0x1c0], rbp
lea rcx, [rdi + 0x428]
call fcn.1400022d0
lea rcx, [rdi + 0x230]
call fcn.1400356c0
lea rcx, [rdi + 0x220]
call fcn.1400354c0
lea rcx, [rdi + 0x220]
lea rdx, [rdi + 0x150]
call fcn.140035370
mov rcx, rax
lea rdx, [rdi + 0x150]
call fcn.14001c9c0
lea rcx, [rdi + 0xd0]
call fcn.14002f5a0
mov rcx, rdi
call fcn.14001a970
add rdi, 0xa8
cmp byte [rdi + 8], bpl
jne 0x1400192db
cmp qword [rdi + 0x18], rbp
je 0x1400192db
mov word [rdi + 8], 0x101
mov dword [rdi + 0x20], 0x32
mov ecx, 8
call fcn.140039934
mov qword [rax], rdi
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebp
mov r9, rax
lea r8, [0x14001d230]
xor edx, edx
xor ecx, ecx
call fcn.140044898
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140019303
cmp dword [rsp + 0x38], 0
je 0x1400192f8
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.140038edc
test eax, eax
jne 0x1400192f8
jmp 0x1400192db
mov eax, dword [0x1400802b8]
inc eax
mov dword [0x1400802b8], eax
cmp eax, 5
jle 0x1400192db
mov dword [0x1400802b8], ebp
mov rcx, rdi
call fcn.140018cc0
jmp 0x1400192db
test eax, eax
je 0x1400192db
mov dword [rdi + 0x3a0], ebp
mov rcx, rdi
call fcn.14001a970
mov byte [rdi + 0xb0], bpl
mov ebx, 0x1388
cmp byte [rdi + 0xb1], bpl
je 0x1400192db
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, 0x32
js 0x1400192db
cmp byte [rdi + 0xb1], bpl
jne 0x1400192c2
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret
xor ecx, ecx
call fcn.14004440c
nop
mov ecx, 1
call fcn.140038e40
nop
mov dword [rsp + 0x38], ebp
mov ecx, 6
call fcn.140038e40
int3