Function at 0x180001560
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov rax, qword [0x18001a008]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov ecx, 4
mov ebp, edx
call fcn.180001db0
mov edi, 0xa
mov r14, rax
mov esi, edi
mov dword [rax], 0x3e8
nop dword [rax]
call fcn.180005d28
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [r14], eax
test ebx, ebx
jle 0x1800015f8
nop dword [rax]
call fcn.180005d28
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x1800015d0
sub rsi, 1
jne 0x1800015a0
lea ecx, [rsi + 3]
call qword [sym.imp.KERNEL32.dll_Sleep]
test ebp, ebp
je 0x1800018db
sub ebp, 1
je 0x1800016a3
sub ebp, 1
je 0x1800018ce
cmp ebp, 1
jne 0x18000194e
lea ecx, [rsi + 4]
call fcn.180001db0
mov rsi, rax
mov dword [rax], 0x3e8
nop dword [rax + rax]
call fcn.180005d28
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [rsi], eax
test ebx, ebx
jle 0x180001698
nop dword [rax]
call fcn.180005d28
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x180001670
sub rdi, 1
jne 0x180001640
jmp 0x18000194e
mov ecx, 4
mov qword [rsp + 0x60], r15
call fcn.180001db0
mov r14, rax
mov rsi, rdi
mov dword [rax], 0x3e8
nop
call fcn.180005d28
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [r14], eax
test ebx, ebx
jle 0x180001718
nop dword [rax]
call fcn.180005d28
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x1800016f0
sub rsi, 1
jne 0x1800016c0
call section..text
lea ecx, [rsi + 5]
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r8d, r8d
mov qword [rsp + 0x30], 0xfffffffffd9da600
lea edx, [rsi + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerW]
lea ecx, [rsi + 3]
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r15d, r15d
test rbp, rbp
je 0x180001829
lea ecx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], r15d
xor r8d, r8d
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x18000179d
mov edx, 0xffffffff
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [rsi + 1]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 4
call fcn.180001db0
mov r14, rax
mov rsi, rdi
mov dword [rax], 0x3e8
call fcn.180005d28
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [r14], eax
test ebx, ebx
jle 0x180001808
call fcn.180005d28
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x1800017e0
sub rsi, 1
jne 0x1800017b3
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x180001270]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 4
call fcn.180001db0
mov r15, qword [rsp + 0x60]
mov rsi, rax
mov dword [rax], 0x3e8
call fcn.180005d28
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [rsi], eax
test ebx, ebx
jle 0x1800018c8
nop
call fcn.180005d28
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x1800018a0
sub rdi, 1
jne 0x180001873
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18000194e
mov ecx, 4
call fcn.180001db0
mov rsi, rax
mov dword [rax], 0x3e8
nop
call fcn.180005d28
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [rsi], eax
test ebx, ebx
jle 0x180001948
nop dword [rax]
call fcn.180005d28
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub r8d, edx
inc r8d
cmp r8d, ebx
jl 0x180001920
sub rdi, 1
jne 0x1800018f0
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.180001d90
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret