Function at 0x140003cc0
Capabilities:
Check mutex on windows
Create thread

Disassembly:
mov r11, rsp
sub rsp, 0x88
mov rax, qword [0x14001e008]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov qword [r11 + 0x18], rbx
mov r8, rdx
mov qword [r11 - 8], rbp
lea rdx, str.WbNmemYU5FgG0R2fnAu9F7rORVn16vF_MPOPbuPBSbk
mov qword [r11 - 0x20], r12
mov qword [r11 - 0x30], r14
mov r14, rcx
mov ecx, 1
call qword [0x14001fcc0]
xor ecx, ecx
call fcn.14000749c
mov rcx, rax
call fcn.1400073ec
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov ecx, 0x20
mov qword [0x14001fca8], rax
call fcn.140005c14
xor r12d, r12d
mov qword [0x14001fc70], rax
mov rbx, rax
test rax, rax
je 0x140003d67
lea ecx, [r12 + 0x40]
mov qword [rax + 8], r12
call fcn.140005c14
mov qword [rbx], rax
test rax, rax
je 0x140003d67
mov qword [rbx + 0x10], 8
mov dword [rbx + 0x18], 0x100
jmp 0x140003d6e
mov qword [0x14001fc70], r12
call fcn.1400073c0
mov ebp, eax
mov eax, 0x45e7b273
imul ebp
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1d4c0
sub ebp, ecx
mov rcx, qword [0x14001fc60]
add ebp, 0x1d4c0
mov edx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140003f35
mov qword [rsp + 0x78], rsi
mov eax, 0x10624dd3
mul ebp
mov qword [rsp + 0x70], rdi
mov eax, 0x88888889
shr edx, 6
mul edx
mov qword [rsp + 0x60], r13
mov r13, 0xffffffffffffffff
mov qword [rsp + 0x50], r15
mov r15d, edx
shr r15d, 5
mov r8, qword [0x14001fcb8]
mov r9, r14
add dword [0x14001fc78], r15d
xor edx, edx
mov qword [rsp + 0x28], r12
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140003ea9
mov rbx, qword [0x14001fc70]
test rbx, rbx
je 0x140003e9b
mov rdi, qword [rbx + 8]
mov rcx, qword [rbx + 0x10]
mov rax, rdi
cmp rcx, rdi
jne 0x140003e6a
mov esi, 0x200
mov eax, 8
cmp rcx, rsi
cmovb rsi, rcx
add rsi, rcx
mov rcx, qword [rbx]
mul rsi
cmovo rax, r13
mov rdx, rax
call fcn.140005bf8
test rax, rax
je 0x140003e96
mov qword [rbx], rax
mov rax, qword [rbx + 8]
mov qword [rbx + 0x10], rsi
cmp rax, rdi
jbe 0x140003e86
nop
mov rcx, qword [rbx]
lea rdx, [rcx + rax*8]
dec rax
mov rcx, qword [rdx - 8]
mov qword [rdx], rcx
cmp rax, rdi
ja 0x140003e70
mov rax, qword [rbx]
lea rcx, [rsp + 0x30]
mov qword [rax + rdi*8], rcx
inc qword [rbx + 8]
mov rax, qword [rsp + 0x30]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [0x14001fc70]
test rax, rax
je 0x140003f02
mov edi, r12d
cmp qword [rax + 8], rdi
jbe 0x140003f02
mov rbx, r12
mov rsi, r12
mov rcx, qword [rax]
lea rdx, [rsp + 0x38]
mov rcx, qword [rsi + rcx]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x140003eec
cmp dword [rsp + 0x38], 0x103
je 0x140003eec
mov rdx, rbx
call fcn.140001980
mov rax, qword [0x14001fc70]
inc edi
add rsi, 8
movsxd rbx, edi
cmp rbx, qword [rax + 8]
jb 0x140003ec4
cmp byte [r14], r12b
jne 0x140003f21
mov rcx, qword [0x14001fc60]
mov edx, ebp
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x140003de1
mov r13, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov r15, qword [rsp + 0x50]
mov rcx, qword [0x14001fca8]
mov r14, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x80]
mov rbx, qword [rsp + 0xa0]
test rcx, rcx
je 0x140003f61
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [0x14001fcb0]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140003f90
add rsp, 0x88
ret