Function at 0x10006d6fc
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push r13
push r14
push r15
sub rsp, 0x2a0
mov qword [rsp + 0xd8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r12
mov rbx, rcx
lea r12, [0x100010cc0]
mov qword [rsp + 0x30], r12
lea r13, [0x100010d30]
mov qword [rsp + 0x38], r13
lea r14, [0x100010ca8]
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x122
mov dword [rsp + 0x4c], 1
mov r15d, 0xff
mov dword [rsp + 0x50], r15d
xor esi, esi
mov word [rax - 0x1e8], si
mov byte [rax - 0x1e6], sil
mov byte [rax - 0x1e5], 1
xor edx, edx
lea r8d, [rsi + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000e7c38
nop
cmp qword [rbx + 0x10], rsi
jne 0x10006daa5
cmp dword [rbx + 0x1c], 1
jne 0x10006daa5
lea rax, [rbx + 0x18]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 4
mov r9, rbx
lea r8, [0x10006dddc]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__beginthreadex]
cmp rax, rsi
jne 0x10006d919
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x13a
mov dword [rsp + 0x4c], 0xb
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], si
mov byte [rsp + 0xd2], sil
mov byte [rsp + 0xd3], 1
lea ebx, [rsi + 0x78]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
call qword [sym.imp.msvcrt.dll__errno]
mov r9d, dword [rax]
lea r8, [0x100010d70]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000e8e14
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x13b
mov dword [rsp + 0x4c], 0xb
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], si
mov byte [rsp + 0xd2], sil
mov byte [rsp + 0xd3], 1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x30]
call fcn.1000e77ac
mov rbx, rax
call qword [sym.imp.msvcrt.dll__errno]
mov r8d, dword [rax]
lea rdx, [rsp + 0x1f8]
mov rcx, rbx
call fcn.1000e77ac
lea r9d, [rsi + 1]
mov r8, rax
mov edx, 0x3008
lea rcx, [rsp + 0xe0]
call fcn.1000eb278
lea rcx, [rsp + 0x150]
call fcn.1000e7688
lea rcx, [rsp + 0x30]
call fcn.1000e7688
nop
lea rcx, [rsp + 0xe0]
call fcn.1000e7d24
mov eax, 0x8007000e
jmp 0x10006db21
cmp rax, 0xffffffffffffffff
jne 0x10006da7e
call qword [sym.imp.msvcrt.dll__errno]
cmp dword [rax], 0xb
jne 0x10006d945
lea rcx, [rsp + 0xe0]
call fcn.1000e7d24
mov eax, 0x8007000e
jmp 0x10006db21
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x147
mov dword [rsp + 0x4c], 0xb
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], si
mov byte [rsp + 0xd2], sil
mov byte [rsp + 0xd3], 1
mov ebx, 0x78
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
call qword [sym.imp.msvcrt.dll__errno]
mov r9d, dword [rax]
lea r8, [0x100010d70]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000e8e14
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x148
mov dword [rsp + 0x4c], 0xb
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], si
mov byte [rsp + 0xd2], sil
mov byte [rsp + 0xd3], 1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
or r8d, 0xffffffff
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x30]
call fcn.1000e77ac
mov rbx, rax
call qword [sym.imp.msvcrt.dll__errno]
mov r8d, dword [rax]
lea rdx, [rsp + 0x1f8]
mov rcx, rbx
call fcn.1000e77ac
mov r9d, 1
mov r8, rax
mov edx, 0x3008
lea rcx, [rsp + 0xe0]
call fcn.1000eb278
lea rcx, [rsp + 0x150]
call fcn.1000e7688
lea rcx, [rsp + 0x30]
call fcn.1000e7688
nop
lea rcx, [rsp + 0xe0]
call fcn.1000e7d24
mov eax, 0x8007000e
jmp 0x10006db21
mov qword [rbx + 0x10], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov byte [rbx + 8], al
mov dword [rbx + 0x1c], 2
lea rcx, [rsp + 0xe0]
call fcn.1000e7d24
xor eax, eax
jmp 0x10006db21
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x127
mov dword [rsp + 0x4c], 0xb
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], si
mov byte [rsp + 0xd2], sil
mov byte [rsp + 0xd3], 1
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
mov r9d, dword [rbx + 0x1c]
lea r8, [0x100010d10]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000e8e14
nop
lea rcx, [rsp + 0xe0]
call fcn.1000e7d24
mov eax, 0x8000ffff
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov r12, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
ret