Function at 0x18000cbf4
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov word [rax + 8], cx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x210
xor r15d, r15d
movzx r14d, cx
mov rcx, r8
mov rdi, r8
mov rbx, rdx
mov r13d, r15d
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x30], r15
call fcn.180017038
mov r9, qword [rbp + 0x178]
mov rdx, qword [rbp + 0x188]
mov r8, rbx
movzx ecx, r14w
mov qword [rsp + 0x48], rax
call fcn.18000c158
mov rdx, qword [rbp + 0x180]
mov rcx, rdi
mov r8, rax
mov rbx, rax
mov qword [rsp + 0x38], rax
call fcn.18000c320
mov rcx, rbx
call fcn.18000c060
test eax, eax
jne 0x18000cca9
movzx ecx, word [rbx + 8]
call fcn.18000be44
test rax, rax
je 0x18000cca9
mov r9, qword [rax + 8]
test r9, r9
je 0x18000cca9
mov rcx, qword [rbx + 0x20]
lea rdx, [rsp + 0x30]
mov r8, rdi
call r9
lea rcx, [rsp + 0x38]
call fcn.18000c20c
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rbp + 0x170]
mov edi, 1
test rbx, rbx
je 0x18000ceaa
mov edx, edi
mov rcx, rbx
call fcn.1800159cc
mov rdx, rbx
movzx ecx, r14w
mov qword [rsi + 8], rax
call fcn.18000cbc0
xor ebx, ebx
mov r14, rax
movabs rax, 0xcccccccccccccccd
xor r8d, r8d
mov r15, r14
mov qword [rsp + 0x40], rbx
mul r14
mov r12, rdx
xor edx, edx
shr r12, 2
lea rcx, [r12 + r12*4]
sub r15, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x50], rax
cmp r14, 5
ja 0x18000cd2f
mov r12d, edi
mov r15d, edi
jmp 0x18000cd38
mov r14d, 5
add r15, r12
xor r8d, r8d
mov qword [rsp + 0x38], r8
test r14, r14
je 0x18000ce31
movzx ecx, word [rbp + 0x150]
call fcn.18000cb9c
mov r13, qword [rsp + 0x48]
lea rsi, [rbp - 0x46]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x50]
cmp r8, 4
mov rdx, r12
mov qword [rsi - 0x2a], rcx
mov rcx, qword [rbp + 0x158]
cmove rdx, r15
mov qword [rsi - 8], rcx
mov rcx, qword [rbp + 0x188]
lea rdi, [rdx + rbx]
mov qword [rsi], rcx
mov rcx, qword [rbp + 0x178]
mov qword [rsi - 0x10], r13
mov qword [rsi + 8], rcx
mov rcx, rax
imul rcx, rdx
mov edx, 1
call fcn.1800159cc
xor ecx, ecx
lea r9, [rsi - 0x2a]
mov qword [rsi + 0x18], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x28], rcx
mov qword [rsi - 0x22], rax
movzx eax, word [rbp + 0x150]
lea r8, [0x18000caf4]
xor edx, edx
mov dword [rsi + 0x10], ecx
mov dword [rsi + 0x14], 1
mov word [rsi - 0x12], ax
mov qword [rsi - 0x1a], rdi
mov dword [rsp + 0x20], ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r8, qword [rsp + 0x38]
mov rbx, rdi
mov qword [rsp + r8*8 + 0x68], rax
mov rax, qword [rsp + 0x60]
mov edi, 1
add r8, rdi
mov qword [rsp + 0x40], rbx
lea rsi, [rsi + 0x4a]
mov qword [rsp + 0x38], r8
cmp r8, r14
jb 0x18000cd63
mov rsi, qword [rbp + 0x170]
mov r13, qword [rsp + 0x58]
lea rdx, [rsp + 0x68]
or r9d, 0xffffffff
mov r8d, edi
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
xor r15d, r15d
test r14, r14
je 0x18000cea5
lea rbx, [rbp - 0x46]
cmp dword [rbx + 0x14], r15d
jne 0x18000ce78
cmp dword [rbx + 0x10], r15d
jbe 0x18000ce78
mov rcx, qword [rsi + 8]
mov r8d, dword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
add rcx, r13
call fcn.180015280
mov eax, dword [rbx + 0x10]
add r13, rax
mov rcx, qword [rbx + 0x18]
mov qword [rbx - 8], r15
mov qword [rbx], r15
mov qword [rbx - 0x10], r15
mov dword [rbx + 0x14], edi
test rcx, rcx
je 0x18000ce98
call fcn.180015178
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x10], r15d
add rbx, 0x4a
sub r14, rdi
jne 0x18000ce52
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x18000cec1
mov rcx, rax
call fcn.180015178
mov rbx, qword [rsp + 0x30]
cmp rbx, r13
jne 0x18000cee5
test rbx, rbx
jne 0x18000ced9
mov eax, 0x251d
mov qword [rsi], r15
mov word [rsi + 0x10], ax
jmp 0x18000cee1
mov word [rsi + 0x10], r15w
mov qword [rsi], rbx
mov eax, edi
jmp 0x18000cf08
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x18000cefa
call fcn.180015178
mov qword [rsi + 8], r15
mov qword [rsi], r15
mov eax, 0x1e
mov qword [rsi], r15
mov word [rsi + 0x10], ax
xor eax, eax
mov rbx, qword [rsp + 0x260]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret