Function at 0x180061bc0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
lea r14d, [r8 + 7]
mov r15, r9
mov ebx, r8d
mov rdi, rdx
mov r12, rcx
cmp r8d, r14d
jae 0x180061eae
mov rsi, qword [rsp + 0x40]
lea rdx, [0x180000000]
mov rbp, qword [rsp + 0x40]
xor r13d, r13d
nop dword [rax]
lea eax, [rbx - 0x30]
cmp eax, 0x10
ja case.0x180061c26.50
mov ecx, dword [rdx + rax*4 + 0x61ed4]
add rcx, rdx
jmp rcx
mov rsi, qword [rdi + 0x10]
jmp case.0x180061c26.50
mov qword [rsp + 0x28], r13
lea r8, [0x18002d900]
mov r9, rdi
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rdi], rax
test rax, rax
je 0x180061da1
lea rdx, [0x180000000]
jmp case.0x180061c26.50
mov ebx, 0x10
cmp ebx, 0x880
ja 0x180061cfc
je 0x180061d65
cmp ebx, 0x10
je 0x180061cf4
cmp ebx, 0x1c0
je 0x180061cef
cmp ebx, 0x370
je 0x180061cb4
cmp ebx, 0x520
je 0x180061cef
cmp ebx, 0x6d0
jne 0x180061d22
mov rax, qword [rdi + 8]
mov rcx, rsi
call qword [rax + 0x10]
jmp 0x180061d22
mov rax, qword [rdi + 8]
mov rcx, rsi
call qword [rax + 0x10]
add dword [rdi + 0x18], 0xffffffff
mov rsi, rbp
jne 0x180061d22
mov rcx, qword [rdi + 8]
mov ebx, 0x3f
mov rax, qword [rcx + 0x28]
test rax, rax
je 0x180061cdf
mov rcx, qword [rcx + 0x30]
call rax
mov qword [rdi + 8], r13
lea rdx, [0x180000000]
jmp case.0x180061c26.50
mov rbp, qword [rsi]
jmp 0x180061d22
cmp dword [rdi + 0x18], r13d
je 0x180061cc7
jmp 0x180061d22
cmp ebx, 0xa30
je 0x180061d1f
cmp ebx, 0xbe0
je 0x180061d4e
cmp ebx, 0xd90
je 0x180061d39
cmp ebx, 0xf40
jne 0x180061d22
mov rsi, rbp
dec dword [rdi + 0x18]
add ebx, 0x1b0
cmp ebx, 0x10e0
jbe 0x180061c75
jmp case.0x180061c26.63
add dword [rdi + 0x18], 0xffffffff
je 0x180061cc7
mov rax, qword [rdi + 8]
mov rcx, rsi
mov rbp, qword [rsi]
call qword [rax + 0x10]
jmp 0x180061d22
cmp dword [rdi + 0x18], r13d
je 0x180061cc7
mov rax, qword [rdi + 8]
mov rcx, rsi
mov rbp, qword [rsi]
call qword [rax + 0x10]
mov rsi, rbp
jmp 0x180061d22
cmp dword [r12], 1
jl 0x180061dae
mov qword [rsp + 0x38], r13
jmp case.0x180061c26.50
mov eax, 0xe8
nop dword [rax]
cmp eax, 0xe8
je 0x180061dd9
add eax, 0x47
cmp eax, 0x12f
jb 0x180061d80
inc ebx
cmp ebx, r14d
jb 0x180061c10
jmp 0x180061eae
mov byte [rsp + 0x90], r13b
jmp 0x180061eae
mov r9d, 0xaa
mov dword [rsp + 0x90], 0xffffffff
lea r8, [rsp + 0x90]
mov rdx, rdi
xor ecx, ecx
call fcn.1800e4c20
mov eax, r13d
jmp 0x180061eb5
mov r8, qword [r15]
mov edx, 0x110
xor ecx, ecx
call fcn.1800e5740
mov r8, qword [r15]
test eax, eax
je 0x180061e3c
mov qword [rsp + 0x20], r8
xor r9d, r9d
lea r8, [rsp + 0x30]
xor edx, edx
mov ecx, 0xac
call fcn.180093140
mov ecx, dword [rsp + 0x30]
test ecx, ecx
jle 0x180061e4d
xor r9d, r9d
mov dword [rsp + 0x90], ecx
mov qword [rsp + 0x28], r13
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea ecx, [r9 + 0x39]
call fcn.180087b20
jmp 0x180061e4d
mov edx, 0x2e
xor ecx, ecx
call fcn.1800437e0
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rdi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov dword [rsp + 0x20], 0xf1
call fcn.18002be30
mov eax, r13d
jmp 0x180061eb5
mov qword [rdi + 0x10], r13
mov eax, r13d
jmp 0x180061eb5
mov r9, rdi
mov dword [rsp + 0x90], 1
lea r8, [rsp + 0x90]
xor edx, edx
mov ecx, StrCmpICW
call fcn.18000ee00
mov byte [rsp + 0x90], 1
mov eax, dword [rsp + 0x90]
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret