Function at 0x180019ef0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0x90
mov r12d, dword [rbp + 0x77]
mov r14, rdx
imul eax, r12d, 0x4a1
mov edi, r12d
mov dword [rbp - 9], eax
cmp r12d, eax
ja 0x18001a1f3
mov r13, qword [rbp + 0x7f]
mov ebx, dword [rbp + 0x77]
mov r15, qword [rbp + 7]
mov rsi, qword [rbp + 7]
xor edx, edx
cmp edi, 0x5655
ja 0x18001a0f1
je 0x18001a235
cmp edi, 0x128
ja 0x18001a0d1
je 0x18001a096
mov eax, edi
sub eax, 0x53
je 0x18001a044
sub eax, 0x38
je 0x180019f94
cmp eax, 0x29
jne 0x18001a235
mov qword [rbp - 1], r9
mov r15d, edx
mov ebx, edx
jmp 0x18001a235
lea rax, [r14 - 0x40081000]
test rax, 0xfffffffffffbefff
je 0x18001a003
mov dword [rbp + 7], edx
mov ecx, 0x64
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x5d
je 0x18001a003
sub eax, 9
je 0x18001a250
sub eax, 5
je 0x180019ffd
sub eax, 7
je 0x180019fe9
cmp eax, 1
jne 0x180019ff4
test rsi, rsi
je 0x18001a003
mov rax, qword [rbp + 7]
cmp qword [rsi + 0x10], rax
jae 0x18001a003
mov rsi, qword [rsi + 0x18]
test rsi, rsi
jne 0x180019fd8
jmp 0x18001a003
mov rax, qword [0x1800643ee]
mov rsi, qword [rax + 0x18]
inc ecx
cmp ecx, 0x6b
jb 0x180019fb0
jmp 0x18001a003
mov eax, dword [0x180074acc]
mov qword [rsp + 0x48], rdx
lea rax, [rbp - 0x21]
mov qword [rsp + 0x40], rdx
xor r9d, r9d
mov qword [rsp + 0x38], rdx
xor r8d, r8d
mov qword [rsp + 0x30], rdx
mov rcx, r14
mov qword [rsp + 0x28], rdx
mov dword [rbp - 0x21], edx
mov edx, 0xf7
mov qword [rsp + 0x20], rax
call fcn.18002a460
mov r9, qword [rbp + 0x6f]
jmp 0x18001a235
mov qword [rsp + 0x28], rdx
lea r8, [0x180019ed0]
mov dword [rsp + 0x20], edx
mov r9, r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
test rax, rax
je 0x18001a252
xor r9d, r9d
mov dword [rbp - 0x21], 1
mov r8d, 0x8a
lea rdx, [rbp - 0x21]
mov rcx, r14
call fcn.180021c60
mov r9, qword [rbp + 0x6f]
mov byte [rbp + 0x77], 1
jmp 0x18001a235
mov dword [rbp - 0x11], edx
lea rax, [rbp - 0x21]
lea rdx, [rbp - 0x11]
mov qword [rsp + 0x20], rax
mov r9, r14
mov dword [rbp - 0x19], reloc.SHELL32.dll_ILFindLastID
lea r8, [rbp - 0x19]
mov dword [rbp - 0x21], ILClone
mov ecx, 0xa7
call fcn.180024620
mov r9, qword [rbp + 0x6f]
mov dword [rbp - 0x19], eax
jmp 0x18001a235
cmp edi, 0x19f0
je 0x18001a1f3
cmp edi, 0x3840
jne 0x18001a235
mov dword [rbp - 0x29], edx
jmp 0x18001a235
cmp edi, 0xdee4
ja 0x18001a1db
je 0x18001a1bb
cmp edi, 0x5c80
je 0x18001a258
cmp edi, 0x6fcc
je 0x18001a188
cmp edi, 0xa758
jne 0x18001a235
movsxd rax, dword [r8]
mov rcx, r15
sub rcx, qword [rbp - 1]
cmp rcx, rax
jg 0x18001a21a
mov qword [rsp + 0x28], rdx
lea r8, [rbp - 1]
mov qword [rsp + 0x20], rdx
mov r9d, 0xf9
xor edx, edx
xor ecx, ecx
call fcn.1800186e0
cmp al, 0xa
jne 0x18001a177
lea r9, [rbp - 1]
xor r8d, r8d
mov edx, 0xd1
xor ecx, ecx
call fcn.180023530
mov r9, qword [rbp + 0x6f]
mov word [r14], ax
jmp 0x18001a235
mov r9, qword [rbp + 0x6f]
mov edi, 0x14dfc
mov dword [rbp + 0x77], ebx
jmp 0x18001a235
mov eax, dword [r8]
lea r9, [rbp - 0x29]
mov rcx, qword [rbp - 1]
lea rdx, [rbp - 0x11]
mov r8d, 0x4d
mov dword [rbp - 0x11], eax
call fcn.180017180
movsxd r15, dword [rbp - 0x29]
mov rbx, rax
mov r9, qword [rbp + 0x6f]
cdqe
add qword [rbp - 1], rax
add r15, r9
jmp 0x18001a235
lea r9, [rbp - 1]
xor r8d, r8d
mov edx, 0xd1
xor ecx, ecx
call fcn.180023530
mov rcx, qword [rbp + 0x57]
mov r9, qword [rbp + 0x6f]
mov word [rcx], ax
jmp 0x18001a235
cmp edi, 0x11670
je 0x18001a224
cmp edi, 0x14dfc
je 0x18001a211
cmp edi, 0x18588
jne 0x18001a235
mov eax, dword [rbp + 0x77]
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [r13], rdx
mov ebx, 1
mov edi, 0x14dfc
mov dword [rbp + 0x77], ebx
jmp 0x18001a235
mov rcx, qword [rbp - 1]
mov eax, r15d
sub eax, ecx
mov qword [r13 + 0x10], rcx
mov dword [r13 + 8], eax
imul eax, r12d, 0x4f
add edi, eax
cmp edi, dword [rbp - 9]
ja 0x18001a1f3
mov r8, qword [rbp + 0x67]
jmp 0x180019f47
jmp 0x18001a250
mov byte [rbp + 0x77], 0
jmp 0x18001a1f3
mov eax, dword [rbp - 0x19]
jmp 0x18001a1f6