Function at 0x140029f40
Capabilities:
Resume thread
Suspend thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x510
mov rax, qword [0x140161498]
xor rax, rsp
mov qword [rsp + 0x500], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x14016a638], 0
mov ebp, eax
jne 0x140029f97
lea rcx, str.GC_stop_world___called_before_GC_thr_init__
call qword [0x1401610d8]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
cmp dword [0x14016a538], 0
je 0x140029fa5
call fcn.140029100
lea rcx, [0x14016ce20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor esi, esi
lea r14, [0x14016a640]
lea r12, [0x14016ae40]
lea r15, [0x14016ae40]
nop dword [rax]
mov rbx, qword [r14]
test rbx, rbx
je 0x14002a239
nop dword [rax]
cmp qword [rbx + 0x18], rsi
je 0x14002a22d
cmp qword [rbx + 0x28], rsi
jne 0x14002a22d
cmp dword [rbx + 8], ebp
je 0x14002a22d
cmp dword [0x14016a570], esi
je 0x14002a030
cmp dword [0x140162468], esi
jne 0x14002a030
cmp rbx, r15
je 0x14002a030
xor r8d, r8d
mov rcx, rbx
and rcx, 0xfffffffffffff000
lea edx, [r8 + 1]
call fcn.140023b80
nop dword [rax + rax]
mov eax, 0xffffffff
xchg byte [0x140162474], al
cmp al, 0xff
je 0x14002a030
mov edi, esi
mov rcx, qword [rbx + 0x10]
lea rdx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x14002a062
cmp dword [rsp + 0x20], 0x103
jne 0x14002a105
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_SuspendThread]
cmp eax, 0xffffffff
je 0x14002a0b2
mov rcx, qword [rbx + 0x10]
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x60], 0x100003
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
jne 0x14002a11a
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x14002a0b2
lea rcx, str.ResumeThread_failed_in_suspend_loop
call qword [0x1401610d8]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
cmp edi, 1
jle 0x14002a0df
nop
xor ecx, ecx
mov byte [0x140162474], sil
call qword [sym.imp.KERNEL32.dll_Sleep]
nop word [rax + rax]
mov eax, 0xffffffff
xchg byte [0x140162474], al
cmp al, 0xff
je 0x14002a0d0
inc edi
cmp edi, 0xf4240
jl 0x14002a041
lea rcx, str.SuspendThread_loop_failed
call qword [0x1401610d8]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x14002a041
nop
mov rcx, rbx
mov byte [0x140162474], sil
call fcn.1400291e0
jmp 0x14002a22d
mov rax, qword [rsp + 0xa8]
mov qword [rbx + 0x368], rax
mov rax, qword [rsp + 0xb0]
mov qword [rbx + 0x370], rax
mov rax, qword [rsp + 0xb8]
mov qword [rbx + 0x378], rax
mov rax, qword [rsp + 0xc0]
mov qword [rbx + 0x380], rax
mov rax, qword [rsp + 0xd0]
mov qword [rbx + 0x388], rax
mov rax, qword [rsp + 0xd8]
mov qword [rbx + 0x390], rax
mov rax, qword [rsp + 0xe0]
mov qword [rbx + 0x398], rax
mov rax, qword [rsp + 0xe8]
mov qword [rbx + 0x3a0], rax
mov rax, qword [rsp + 0xf0]
mov qword [rbx + 0x3a8], rax
mov rax, qword [rsp + 0xf8]
mov qword [rbx + 0x3b0], rax
mov rax, qword [rsp + 0x100]
mov qword [rbx + 0x3b8], rax
mov rax, qword [rsp + 0x108]
mov qword [rbx + 0x3c0], rax
mov rax, qword [rsp + 0x110]
mov qword [rbx + 0x3c8], rax
mov rax, qword [rsp + 0x118]
mov qword [rbx + 0x3d0], rax
mov rax, qword [rsp + 0x120]
mov qword [rbx + 0x3d8], rax
mov rax, qword [rsp + 0xc8]
mov qword [rbx + 0x360], rax
mov byte [rbx + 0x3b], 1
nop
mov rax, qword [0x14016a4c0]
mov byte [0x140162474], sil
test rax, rax
je 0x14002a22d
mov rdx, qword [rbx + 0x10]
mov ecx, 0xa
call rax
mov rbx, qword [rbx]
test rbx, rbx
jne 0x140029fe0
add r14, 8
cmp r14, r12
jl 0x140029fd0
lea rcx, [0x14016ce20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x14016a538], esi
je 0x14002a289
xchg dword [0x14016b414], esi
test esi, esi
jns 0x14002a289
mov rcx, qword [0x14016b358]
call qword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x14002a289
lea rcx, str.SetEvent_failed
call qword [0x1401610d8]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
mov rcx, qword [rsp + 0x500]
xor rcx, rsp
call fcn.14002eb00
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret