Function at 0x180001710
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov rax, qword [0x180020008]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov ecx, 4
mov ebp, edx
call fcn.180001f64
mov edi, 0xa
mov r14, rax
mov esi, edi
mov dword [rax], 0x3e8
nop dword [rax]
call fcn.180004514
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [r14], eax
test ebx, ebx
jle 0x1800017a8
nop dword [rax]
call fcn.180004514
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x180001780
sub rsi, 1
jne 0x180001750
lea ecx, [rsi + 3]
call qword [sym.imp.KERNEL32.dll_Sleep]
test ebp, ebp
je 0x180001a8b
sub ebp, 1
je 0x180001853
sub ebp, 1
je 0x180001a7e
cmp ebp, 1
jne 0x180001afe
lea ecx, [rsi + 4]
call fcn.180001f64
mov rsi, rax
mov dword [rax], 0x3e8
nop dword [rax + rax]
call fcn.180004514
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [rsi], eax
test ebx, ebx
jle 0x180001848
nop dword [rax]
call fcn.180004514
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x180001820
sub rdi, 1
jne 0x1800017f0
jmp 0x180001afe
mov ecx, 4
mov qword [rsp + 0x60], r15
call fcn.180001f64
mov r14, rax
mov rsi, rdi
mov dword [rax], 0x3e8
nop
call fcn.180004514
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [r14], eax
test ebx, ebx
jle 0x1800018c8
nop dword [rax]
call fcn.180004514
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x1800018a0
sub rsi, 1
jne 0x180001870
lea ecx, [rsi + 5]
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r8d, r8d
mov qword [rsp + 0x30], 0xfffffffffd9da600
lea edx, [rsi + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerW]
lea ecx, [rsi + 3]
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r15d, r15d
test rbp, rbp
je 0x1800019d9
lea ecx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], r15d
xor r8d, r8d
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x180001948
mov edx, 0xffffffff
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [rsi + 1]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 4
call fcn.180001f64
mov r14, rax
mov rsi, rdi
mov dword [rax], 0x3e8
nop
call fcn.180004514
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [r14], eax
test ebx, ebx
jle 0x1800019b8
nop dword [rax]
call fcn.180004514
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x180001990
sub rsi, 1
jne 0x180001960
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x1800013c0]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 4
call fcn.180001f64
mov r15, qword [rsp + 0x60]
mov rsi, rax
mov dword [rax], 0x3e8
call fcn.180004514
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [rsi], eax
test ebx, ebx
jle 0x180001a78
nop
call fcn.180004514
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
inc r8d
cmp r8d, ebx
jl 0x180001a50
sub rdi, 1
jne 0x180001a23
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180001afe
mov ecx, 4
call fcn.180001f64
mov rsi, rax
mov dword [rax], 0x3e8
nop
call fcn.180004514
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
inc ebx
lea eax, [rbx*4]
mov dword [rsi], eax
test ebx, ebx
jle 0x180001af8
nop dword [rax]
call fcn.180004514
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub r8d, edx
inc r8d
cmp r8d, ebx
jl 0x180001ad0
sub rdi, 1
jne 0x180001aa0
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.180001f40
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret