Function at 0x140070c40
Capabilities:
Resume thread
Suspend thread

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x648
mov dword [rsp + 0x30], 0
call fcn.1400735d0
mov rcx, qword [rsp + 0x660]
mov rax, qword [rax + 0x48]
cmp qword [rcx + 0x48], rax
jne 0x140070c84
mov dword [rsp + 0x44], 1
jmp 0x140070c8c
mov dword [rsp + 0x44], 0
movzx eax, byte [rsp + 0x44]
mov byte [rsp + 0x34], al
movzx eax, byte [rsp + 0x34]
test eax, eax
je 0x140070eba
xor eax, eax
cmp eax, 1
je 0x140070ccf
cmp byte [rsp + 0x668], 0
je 0x140070cbd
mov dword [rsp + 0x48], 1
jmp 0x140070cc5
mov dword [rsp + 0x48], 0
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
jmp 0x140070cd7
mov dword [rsp + 0x4c], 0
cmp dword [rsp + 0x4c], 0
jne 0x140070ce3
jmp 0x140070d72
lea rcx, [rsp + 0x3c]
call fcn.140004910
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x20], 4
mov r9d, 0xe8
lea r8, [0x14015e590]
lea rdx, [0x14015e620]
lea rcx, [rsp + 0x130]
call fcn.1400b5f40
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x68]
call fcn.140004910
lea rdx, str.Check_failed:_suspension_state__ProcessSuspensionState::kRunning
mov rcx, rax
call fcn.140003dd0
lea rdx, [0x14015da14]
mov rcx, rax
call fcn.140003dd0
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.140004830
nop
mov eax, dword [rsp + 0x30]
and eax, 1
test eax, eax
je 0x140070d8f
and dword [rsp + 0x30], 0xfffffffe
lea rcx, [rsp + 0x130]
call fcn.1400b60e0
mov rax, qword [rsp + 0x660]
mov dword [rax + 0x70], 0
xor eax, eax
cmp eax, 1
je 0x140070dcd
movzx eax, byte [rsp + 0x670]
test eax, eax
je 0x140070dbb
mov dword [rsp + 0x50], 1
jmp 0x140070dc3
mov dword [rsp + 0x50], 0
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x54], eax
jmp 0x140070dd5
mov dword [rsp + 0x54], 0
cmp dword [rsp + 0x54], 0
jne 0x140070de1
jmp 0x140070e88
lea rcx, [rsp + 0x3d]
call fcn.140004910
mov qword [rsp + 0x98], rax
mov dword [rsp + 0x20], 4
mov r9d, 0xea
lea r8, [0x14015e710]
lea rdx, [0x14015e7a0]
lea rcx, [rsp + 0x230]
call fcn.1400b5f40
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0x30]
or eax, 2
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x88]
call fcn.140004910
lea rdx, str.Check_failed:__is_64_reading_32
mov rcx, rax
call fcn.140003dd0
lea rdx, [0x14015db3c]
mov rcx, rax
call fcn.140003dd0
mov qword [rsp + 0x90], rax
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
call fcn.140004830
nop
mov eax, dword [rsp + 0x30]
and eax, 2
test eax, eax
je 0x140070ea5
and dword [rsp + 0x30], 0xfffffffd
lea rcx, [rsp + 0x230]
call fcn.1400b60e0
mov rax, qword [rsp + 0x660]
mov rcx, rax
call fcn.14006fe80
jmp 0x1400712cc
mov rcx, qword [rsp + 0x658]
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0xffffffff
jne 0x140070fab
call fcn.14006f8c0
cmp eax, 2
jle 0x140070ee6
jmp 0x140070f87
lea rcx, [rsp + 0x3e]
call fcn.140004910
mov qword [rsp + 0xb8], rax
call fcn.1400b5d50
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0xf3
lea r8, [0x14015e890]
lea rdx, [0x14015e920]
lea rcx, [rsp + 0x430]
call fcn.1400b67e0
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsp + 0x30]
or eax, 4
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0xa8]
call fcn.140004910
lea rdx, [0x14015dfb8]
mov rcx, rax
call fcn.140003dd0
mov qword [rsp + 0xb0], rax
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
call fcn.140004830
nop
mov eax, dword [rsp + 0x30]
and eax, 4
test eax, eax
je 0x140070fa4
and dword [rsp + 0x30], 0xfffffffb
lea rcx, [rsp + 0x430]
call fcn.1400b6840
xor al, al
jmp 0x1400712ce
cmp dword [rsp + 0x38], 0
ja 0x1400710f2
cmp byte [rsp + 0x668], 1
jne 0x1400710f2
call fcn.14006f8c0
cmp eax, 1
jle 0x140070fd3
jmp 0x1400710c4
lea rcx, [rsp + 0x3f]
call fcn.140004910
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0x20], 1
mov r9d, 0xf8
lea r8, [0x14015ea10]
lea rdx, [0x14015eaa0]
lea rcx, [rsp + 0x330]
call fcn.1400b5f40
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rax
mov eax, dword [rsp + 0x30]
or eax, 8
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0xc8]
call fcn.140004910
lea rdx, str.Thread
mov rcx, rax
call fcn.140003dd0
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x660]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0xd0], rax
mov rdx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xd8]
call fcn.140009da0
lea rdx, str._should_be_suspended__but_previous_suspend_count_is
mov rcx, rax
call fcn.140003dd0
mov qword [rsp + 0xe0], rax
mov edx, dword [rsp + 0x38]
mov rcx, qword [rsp + 0xe0]
call fcn.140023220
mov qword [rsp + 0xe8], rax
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0xf0]
call fcn.140004830
nop
mov eax, dword [rsp + 0x30]
and eax, 8
test eax, eax
je 0x1400710e1
and dword [rsp + 0x30], 0xfffffff7
lea rcx, [rsp + 0x330]
call fcn.1400b60e0
mov rax, qword [rsp + 0x660]
mov dword [rax + 0x70], 0
jmp 0x140071125
cmp byte [rsp + 0x668], 1
jne 0x140071106
mov dword [rsp + 0x58], 1
jmp 0x14007110e
mov dword [rsp + 0x58], 0
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x660]
mov dword [rcx + 0x70], eax
movzx eax, byte [rsp + 0x670]
test eax, eax
je 0x140071166
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0xf8], rax
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rsp + 0xf8]
call fcn.14006f910
movzx eax, al
test eax, eax
jne 0x140071164
xor al, al
jmp 0x1400712ce
jmp 0x1400711e5
mov ecx, 0x800
call fcn.140081950
movzx eax, al
test eax, eax
je 0x1400711b2
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0x100], rax
mov r8d, 0x800
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rsp + 0x100]
call fcn.14006fa60
movzx eax, al
test eax, eax
jne 0x1400711b0
xor al, al
jmp 0x1400712ce
jmp 0x1400711e5
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0x108], rax
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rsp + 0x108]
call fcn.14006fed0
movzx eax, al
test eax, eax
jne 0x1400711e5
xor al, al
jmp 0x1400712ce
mov rcx, qword [rsp + 0x658]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
test eax, eax
jne 0x1400712cc
call fcn.14006f8c0
cmp eax, 2
jle 0x14007120a
jmp 0x1400712ab
lea rcx, [rsp + 0x40]
call fcn.140004910
mov qword [rsp + 0x128], rax
call fcn.1400b5d50
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x11b
lea r8, [0x14015eb90]
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits64__void__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea rcx, [rsp + 0x538]
call fcn.1400b67e0
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x118], rax
mov eax, dword [rsp + 0x30]
or eax, 0x10
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x118]
call fcn.140004910
lea rdx, [0x14015e1c8]
mov rcx, rax
call fcn.140003dd0
mov qword [rsp + 0x120], rax
mov rdx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x128]
call fcn.140004830
nop
mov eax, dword [rsp + 0x30]
and eax, 0x10
test eax, eax
je 0x1400712c8
and dword [rsp + 0x30], 0xffffffef
lea rcx, [rsp + 0x538]
call fcn.1400b6840
xor al, al
jmp 0x1400712ce
mov al, 1
add rsp, 0x648
ret