Function at 0x180010b90
Capabilities:
Resume thread
Suspend thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x480
mov rax, qword [0x180080920]
xor rax, rsp
mov qword [rsp + 0x470], rax
cmp ecx, 0xb
jne 0x180010d1a
mov r8d, dword [0x180082b78]
xor edx, edx
lea ecx, [rdx + 0x5a]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_SuspendThread]
xor ebx, ebx
cmp eax, 0xffffffff
jne 0x180010bf1
mov ebp, ebx
jmp 0x180010c33
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x440
call fcn.18004c900
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.1800064e0
mov rcx, rdi
test al, al
jne 0x180010c25
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rbp, rbx
jmp 0x180010c33
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rbp, qword [rsp + 0xf4]
lea rdx, [rsp + 0x20]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
test eax, eax
je 0x180010c55
test byte [rsp + 0x20], 2
jne 0x180010c55
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [0x180090a90]
movabs rdi, 0xeeeeeeeeeeeeeeef
mov r9, qword [0x180090a88]
and rbp, 0xfffffffffffffffc
sub rax, r9
mov r14d, ebx
sar rax, 2
imul rax, rdi
test rax, rax
je 0x180010cff
mov rsi, rbx
cmp rax, rbx
jbe 0x180010fd1
xor r8d, r8d
imul rcx, rsi, 0x3c
lea edx, [r8 + 0xb]
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rax, qword [0x180090a90]
mov r9, qword [0x180090a88]
sub rax, r9
sar rax, 2
imul rax, rdi
cmp rax, rsi
jbe 0x180010fd1
imul rcx, rsi, 0x3c
mov r8, rbp
mov edx, 0x10
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rax, qword [0x180090a90]
inc r14d
mov r9, qword [0x180090a88]
sub rax, r9
mov esi, r14d
sar rax, 2
imul rax, rdi
cmp rax, rsi
ja 0x180010c90
mov byte [0x180082e08], bl
mov al, 1
mov qword [0x180082df0], rbx
mov qword [0x180082df8], rbx
jmp 0x180010fa3
cmp ecx, 0xc
jne 0x180010df3
mov ecx, 0x10
call sym.TitanEngine.dll_GetContextData
mov rdx, qword [0x180090a90]
xor ebx, ebx
mov r9, qword [0x180090a88]
movabs rdi, 0xeeeeeeeeeeeeeeef
sub rdx, r9
mov r14, rax
sar rdx, 2
and r14, 0xfffffffffffffff3
imul rdx, rdi
mov ebp, ebx
test rdx, rdx
je 0x180010dd8
mov esi, ebx
cmp rdx, rbx
jbe 0x180010fd1
xor r8d, r8d
imul rcx, rsi, 0x3c
lea edx, [r8 + 0xc]
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rax, qword [0x180090a90]
mov r9, qword [0x180090a88]
sub rax, r9
sar rax, 2
imul rax, rdi
cmp rax, rsi
jbe 0x180010fd1
imul rcx, rsi, 0x3c
mov r8, r14
mov edx, 0x10
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rdx, qword [0x180090a90]
inc ebp
mov r9, qword [0x180090a88]
sub rdx, r9
mov esi, ebp
sar rdx, 2
imul rdx, rdi
cmp rdx, rsi
ja 0x180010d6b
mov byte [0x180082e22], bl
mov al, 1
mov qword [0x180082e0a], rbx
mov qword [0x180082e12], rbx
jmp 0x180010fa3
cmp ecx, 0xd
jne 0x180010ecc
mov ecx, 0x10
call sym.TitanEngine.dll_GetContextData
mov rdx, qword [0x180090a90]
xor ebx, ebx
mov r9, qword [0x180090a88]
movabs rdi, 0xeeeeeeeeeeeeeeef
sub rdx, r9
mov r14, rax
sar rdx, 2
and r14, 0xffffffffffffffcf
imul rdx, rdi
mov ebp, ebx
test rdx, rdx
je 0x180010eb1
mov esi, ebx
cmp rdx, rbx
jbe 0x180010fd1
xor r8d, r8d
imul rcx, rsi, 0x3c
lea edx, [r8 + 0xd]
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rax, qword [0x180090a90]
mov r9, qword [0x180090a88]
sub rax, r9
sar rax, 2
imul rax, rdi
cmp rax, rsi
jbe 0x180010fd1
imul rcx, rsi, 0x3c
mov r8, r14
mov edx, 0x10
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rdx, qword [0x180090a90]
inc ebp
mov r9, qword [0x180090a88]
sub rdx, r9
mov esi, ebp
sar rdx, 2
imul rdx, rdi
cmp rdx, rsi
ja 0x180010e44
mov byte [0x180082e3c], bl
mov al, 1
mov qword [0x180082e24], rbx
mov qword [0x180082e2c], rbx
jmp 0x180010fa3
cmp ecx, 0xe
jne 0x180010fa1
mov ecx, 0x10
call sym.TitanEngine.dll_GetContextData
mov rdx, qword [0x180090a90]
xor ebx, ebx
mov r9, qword [0x180090a88]
movabs rdi, 0xeeeeeeeeeeeeeeef
sub rdx, r9
mov r14, rax
sar rdx, 2
and r14, 0xffffffffffffff3f
imul rdx, rdi
mov ebp, ebx
test rdx, rdx
je 0x180010f89
mov esi, ebx
cmp rdx, rbx
jbe 0x180010fd1
xor r8d, r8d
imul rcx, rsi, 0x3c
lea edx, [r8 + 0xe]
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rax, qword [0x180090a90]
mov r9, qword [0x180090a88]
sub rax, r9
sar rax, 2
imul rax, rdi
cmp rax, rsi
jbe 0x180010fd1
imul rcx, rsi, 0x3c
mov r8, r14
mov edx, 0x10
mov rcx, qword [rcx + r9]
call sym.TitanEngine.dll_SetContextDataEx
mov rdx, qword [0x180090a90]
inc ebp
mov r9, qword [0x180090a88]
sub rdx, r9
mov esi, ebp
sar rdx, 2
imul rdx, rdi
cmp rdx, rsi
ja 0x180010f20
mov byte [0x180082e56], bl
mov al, 1
mov qword [0x180082e3e], rbx
mov qword [0x180082e46], rbx
jmp 0x180010fa3
xor al, al
mov rcx, qword [rsp + 0x470]
xor rcx, rsp
call fcn.180049ad0
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
call fcn.180005850
int3