Function at 0x100070dfc
Capabilities:
Resume thread

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x150
mov qword [rsp + 0xd8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov sil, dl
mov rbx, rcx
lea r12, [0x100010cc0]
mov qword [rsp + 0x30], r12
lea r13, [0x1000120b8]
mov qword [rsp + 0x38], r13
lea r14, [0x100010ca8]
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x1f7
mov dword [rsp + 0x4c], 1
mov r15d, 0xff
mov dword [rsp + 0x50], r15d
xor edi, edi
mov word [rax - 0xa8], di
mov byte [rax - 0xa6], dil
mov byte [rax - 0xa5], 1
xor edx, edx
lea r8d, [rdi + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000e7c38
nop
cmp qword [rbx + 0x10], rdi
je 0x1000710f6
mov byte [rbx + 9], 1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
or ebp, 0xffffffff
cmp sil, dil
je 0x100070fe7
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, ebp
jne 0x100070fe7
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x20a
lea esi, [rdi + 0xb]
mov dword [rsp + 0x4c], esi
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], di
mov byte [rsp + 0xd2], dil
mov byte [rsp + 0xd3], 1
lea ebp, [rdi + 0x78]
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx + 0x1c]
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], eax
mov r9, qword [rbx + 0x10]
lea r8, [0x100010e00]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000eac7c
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x20d
mov dword [rsp + 0x4c], esi
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], di
mov byte [rsp + 0xd2], dil
mov byte [rsp + 0xd3], 1
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov eax, dword [rbx + 0x1c]
mov dword [rsp + 0x20], eax
lea r8, [0x100010e90]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000e8e14
mov dword [rbx + 0x1c], 5
lea rcx, [rsp + 0xe0]
call fcn.1000e7d24
mov eax, 0x8000ffff
jmp 0x100071105
mov edx, ebp
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, ebp
jne 0x1000710f6
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x219
mov esi, 0xb
mov dword [rsp + 0x4c], esi
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], di
mov byte [rsp + 0xd2], dil
mov byte [rsp + 0xd3], 1
lea ebp, [rsi + 0x6d]
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx + 0x1c]
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], eax
mov r9, qword [rbx + 0x10]
lea r8, [0x1000120f0]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000eac7c
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x48], 0x21c
mov dword [rsp + 0x4c], esi
mov dword [rsp + 0x50], r15d
mov word [rsp + 0xd0], di
mov byte [rsp + 0xd2], dil
mov byte [rsp + 0xd3], 1
mov r8, rbp
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov eax, dword [rbx + 0x1c]
mov dword [rsp + 0x20], eax
lea r8, [0x1000121c0]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.1000e8e14
mov dword [rbx + 0x1c], 5
mov edi, 0x8000ffff
jmp 0x1000710f6
lea rcx, [rsp + 0xe0]
call fcn.1000e7d24
mov eax, edi
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret