Function at 0x1400099d0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
cmp qword [rcx + 0x68], 0
mov rdi, rcx
jne 0x140009a39
mov rax, qword [rcx]
mov ebx, 0x8000000a
mov rax, qword [rax + 0x18]
call qword [str.PN_t_]
xor ecx, ecx
test rax, rax
je 0x140009a2f
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xc2
lea r9, str.CSystemHelper::ExecuteAsync
mov edx, 4
lea r8, str._s__d_:_Result__0x_X
mov rcx, rax
call fcn.14002374c
mov ecx, eax
test eax, eax
jns 0x140009a2f
call fcn.140025d30
int3
cmp qword [rcx + 0x58], 0
jne 0x140009bf8
cmp qword [rcx + 0x10], 0
jne 0x140009bf8
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
nop dword [rax + rax]
mov rcx, qword [rdi + 0x18]
mov rbx, rax
test rcx, rcx
je 0x140009a7f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov qword [rdi + 0x18], rbx
test rbx, rbx
jne 0x140009ae1
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jne 0x140009a9f
mov ebx, 0x80004005
jmp 0x140009aad
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x18]
call qword [str.PN_t_]
xor ecx, ecx
test ebx, ebx
jns 0x140009c43
test rax, rax
je 0x140009c43
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xc8
jmp 0x140009c1d
and qword [rsp + 0x28], 0
lea r8, [0x140009300]
and dword [rsp + 0x20], 0
mov r9, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop dword [rax + rax]
mov rcx, qword [rdi + 0x10]
mov rbx, rax
test rcx, rcx
je 0x140009b1e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov qword [rdi + 0x10], rbx
test rbx, rbx
jne 0x140009b80
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jne 0x140009b3e
mov ebx, 0x80004005
jmp 0x140009b4c
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x18]
call qword [str.PN_t_]
xor ecx, ecx
test ebx, ebx
jns 0x140009c43
test rax, rax
je 0x140009c43
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xd2
jmp 0x140009c1d
mov rcx, qword [rdi + 0x18]
or edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop dword [rax + rax]
test eax, eax
je 0x140009bc8
mov rax, qword [rdi]
mov rcx, rdi
mov ebx, 0x8000ffff
mov rax, qword [rax + 0x18]
call qword [str.PN_t_]
xor ecx, ecx
test rax, rax
je 0x140009a2f
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xd7
jmp 0x140009a09
mov ebx, dword [rdi + 0x70]
test ebx, ebx
jns 0x140009c5c
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x18]
call qword [str.PN_t_]
xor ecx, ecx
test rax, rax
je 0x140009c43
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xdb
jmp 0x140009c1d
mov rax, qword [rcx]
mov ebx, 0x800704df
mov rax, qword [rax + 0x18]
call qword [str.PN_t_]
xor ecx, ecx
test rax, rax
je 0x140009c43
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0xc3
lea r9, str.CSystemHelper::ExecuteAsync
mov edx, 4
lea r8, str._s__d_:_Result__0x_X
mov rcx, rax
call fcn.14002374c
mov ecx, eax
test eax, eax
jns 0x140009c43
call fcn.140025d30
int3
mov ecx, ebx
int3