Function at 0x18001bab0
Capabilities:
Resume thread

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rcx, qword [0x180167408]
lea r8, [0x1801673c8]
lea rdx, [0x18001ad20]
call fcn.180091db8
test eax, eax
je 0x18001baeb
cmp eax, 3
jne 0x18001bfe9
mov rdi, qword [0x180167408]
xor r14d, r14d
mov ebx, r14d
xor eax, eax
mov r13d, 1
lock cmpxchg dword [0x18016893c], r13d
je 0x18001bb33
nop dword [rax + rax]
cmp rbx, 0x20
jae 0x18001bb1a
xor ecx, ecx
jmp 0x18001bb1d
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x18016893c], r13d
jne 0x18001bb10
cmp qword [0x180168940], r14
je 0x18001bfe2
mov r12d, 5
test rdi, rdi
jne 0x18001bb57
mov ecx, r13d
call fcn.180091cb4
mov ebp, eax
jmp 0x18001bb84
mov ecx, dword [0x180169eec]
mov ebx, r14d
test ecx, ecx
je 0x18001bb7f
mov r8, qword [0x180169ee0]
mov rax, r8
nop
cmp rdi, qword [rax]
je 0x18001bbc8
inc ebx
add rax, 0x38
cmp ebx, ecx
jb 0x18001bb70
mov ebp, 4
mov eax, r14d
xchg dword [0x18016893c], eax
test ebp, ebp
jne 0x18001bfe9
mov rdx, qword [0x180168980]
cmp rdx, qword [0x180168988]
mov rax, qword [0x180167408]
mov qword [rsp + 0x90], rax
je 0x18001bc70
mov qword [rdx], rax
add qword [0x180168980], 8
jmp 0x18001bc84
cmp ebx, 0xffffffff
je 0x18001bb7f
mov eax, ebx
imul rdx, rax, 0x38
test byte [rdx + r8 + 0x20], 2
jne 0x18001bc68
mov r8d, r13d
lea rcx, [rsp + 0x20]
mov edx, ebx
call fcn.1800917fc
mov ebp, eax
test eax, eax
jne 0x18001bb84
mov edx, r13d
mov ecx, ebx
call fcn.180091ba8
mov r15, qword [rsp + 0x20]
mov ebp, eax
test r15, r15
je 0x18001bb84
mov eax, dword [rsp + 0x2c]
test eax, eax
je 0x18001bc51
mov rbx, r15
mov esi, eax
nop dword [rax + rax]
mov r8d, dword [rbx]
xor edx, edx
lea ecx, [rdx + 0x5a]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rdi, rax
test rax, rax
je 0x18001bc48
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 4
sub rsi, r13
jne 0x18001bc20
mov rcx, qword [0x180168940]
mov r8, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x18001bb84
mov ebp, r12d
jmp 0x18001bb84
lea r8, [rsp + 0x90]
lea rcx, [0x180168978]
call fcn.18001e7f0
mov rcx, qword [0x180167400]
lea r8, [0x1801673c0]
lea rdx, [0x18001adc0]
call fcn.180091db8
test eax, eax
jne 0x18001bfe9
mov rdi, qword [0x180167400]
mov rbx, r14
lock cmpxchg dword [0x18016893c], r13d
je 0x18001bce3
nop dword [rax + rax]
cmp rbx, 0x20
jae 0x18001bcca
xor ecx, ecx
jmp 0x18001bccd
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x18016893c], r13d
jne 0x18001bcc0
cmp qword [0x180168940], r14
je 0x18001bfe2
test rdi, rdi
jne 0x18001bd01
mov ecx, r13d
call fcn.180091cb4
mov ebp, eax
jmp 0x18001bd2c
mov ecx, dword [0x180169eec]
mov ebx, r14d
test ecx, ecx
je 0x18001bd27
mov r8, qword [0x180169ee0]
mov rax, r8
cmp rdi, qword [rax]
je 0x18001bd70
inc ebx
add rax, 0x38
cmp ebx, ecx
jb 0x18001bd18
mov ebp, 4
mov eax, r14d
xchg dword [0x18016893c], eax
test ebp, ebp
jne 0x18001bfe9
mov rdx, qword [0x180168980]
cmp rdx, qword [0x180168988]
mov rax, qword [0x180167400]
mov qword [rsp + 0x98], rax
je 0x18001be20
mov qword [rdx], rax
add qword [0x180168980], 8
jmp 0x18001be34
cmp ebx, 0xffffffff
je 0x18001bd27
mov eax, ebx
imul rdx, rax, 0x38
test byte [rdx + r8 + 0x20], 2
jne 0x18001be18
mov r8d, r13d
lea rcx, [rsp + 0x30]
mov edx, ebx
call fcn.1800917fc
mov ebp, eax
test eax, eax
jne 0x18001bd2c
mov edx, r13d
mov ecx, ebx
call fcn.180091ba8
mov r15, qword [rsp + 0x30]
mov ebp, eax
test r15, r15
je 0x18001bd2c
mov eax, dword [rsp + 0x3c]
test eax, eax
je 0x18001be01
mov rbx, r15
mov esi, eax
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [rbx]
xor edx, edx
lea ecx, [rdx + 0x5a]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rdi, rax
test rax, rax
je 0x18001bdf8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 4
sub rsi, r13
jne 0x18001bdd0
mov rcx, qword [0x180168940]
mov r8, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x18001bd2c
mov ebp, r12d
jmp 0x18001bd2c
lea r8, [rsp + 0x98]
lea rcx, [0x180168978]
call fcn.18001e7f0
mov rcx, qword [0x1801673f8]
lea r8, [0x1801673b8]
lea rdx, [0x18001aeb0]
call fcn.180091db8
test eax, eax
jne 0x18001bfe9
mov rdi, qword [0x1801673f8]
mov rbx, r14
lock cmpxchg dword [0x18016893c], r13d
je 0x18001be93
nop dword [rax + rax]
cmp rbx, 0x20
jae 0x18001be7a
xor ecx, ecx
jmp 0x18001be7d
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x18016893c], r13d
jne 0x18001be70
cmp qword [0x180168940], r14
je 0x18001bfe2
test rdi, rdi
jne 0x18001beb2
mov ecx, r13d
call fcn.180091cb4
mov r12d, eax
jmp 0x18001bee5
mov ecx, dword [0x180169eec]
mov ebx, r14d
test ecx, ecx
je 0x18001bedf
mov r8, qword [0x180169ee0]
mov rax, r8
nop dword [rax]
cmp rdi, qword [rax]
je 0x18001bf2c
inc ebx
add rax, 0x38
cmp ebx, ecx
jb 0x18001bed0
mov r12d, 4
xchg dword [0x18016893c], r14d
test r12d, r12d
jne 0x18001bfe9
mov rdx, qword [0x180168980]
cmp rdx, qword [0x180168988]
mov rax, qword [0x1801673f8]
mov qword [rsp + 0xa0], rax
je 0x18001bfc8
mov qword [rdx], rax
movzx eax, r13b
add qword [0x180168980], 8
jmp 0x18001bfeb
cmp ebx, 0xffffffff
je 0x18001bedf
mov eax, ebx
imul rdx, rax, 0x38
test byte [rdx + r8 + 0x20], 2
jne 0x18001bee5
mov r8d, r13d
lea rcx, [rsp + 0x40]
mov edx, ebx
call fcn.1800917fc
mov r12d, eax
test eax, eax
jne 0x18001bee5
mov edx, r13d
mov ecx, ebx
call fcn.180091ba8
mov rbp, qword [rsp + 0x40]
mov r12d, eax
test rbp, rbp
je 0x18001bee5
mov eax, dword [rsp + 0x4c]
test eax, eax
je 0x18001bfb1
mov rdi, rbp
mov esi, eax
nop dword [rax]
mov r8d, dword [rdi]
xor edx, edx
lea ecx, [rdx + 0x5a]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rbx, rax
test rax, rax
je 0x18001bfa8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rdi, 4
sub rsi, r13
jne 0x18001bf80
mov rcx, qword [0x180168940]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x18001bee5
lea r8, [rsp + 0xa0]
lea rcx, [0x180168978]
call fcn.18001e7f0
movzx eax, r13b
jmp 0x18001bfeb
xchg dword [0x18016893c], r14d
xor al, al
mov rbx, qword [rsp + 0xa8]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret