Function at 0x447a90
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
xor ecx, ecx
mov ebp, esp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x90
mov dword [eax + 4], 0xffffffff
mov dword [ebp - 0x8c], edx
mov edx, eax
mov eax, 0x1b7
call fcn.00446690
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1b8
mov eax, dword [ebx + 4]
mov dword [esp + 4], str.dwDebugEventCode___ld_n
cmp eax, 3
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
mov esi, dword [0x8f0770]
call fcn.0057d110
mov ecx, dword [eax + 0x10]
mov dword [eax + 0x14], 1
lea edx, [ecx + ecx]
xor ecx, ecx
test esi, esi
setne cl
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x447b74
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1bb
mov edi, dword [ebx + 0x18]
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_SuspendThread]
sub esp, 4
mov esi, eax
cmp eax, 0xffffffff
je 0x447b55
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_ResumeThread]
sub esp, 4
cmp eax, 0xffffffff
je 0x448147
xor eax, eax
test esi, esi
setg al
mov dword [esp], eax
mov dword [esp + 4], str.Expecting_suspended_thread_n
call fcn.00444b30
call fcn.0057d110
shr dword [eax + 0x10], 1
call fcn.0057d110
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x447b18
mov eax, dword [ebx + 0x18]
xor ecx, ecx
mov edx, ebx
mov dword [ebp - 0x88], eax
mov eax, 0x1bd
call fcn.00446690
mov eax, dword [ebx + 4]
cmp eax, 6
je 0x447e4e
cmp eax, 2
jne 0x447cef
mov esi, dword [sym.imp.kernel32.dll_SuspendThread]
mov dword [ebp - 0x84], esi
mov esi, dword [ebp - 0x88]
lea esi, [esi]
mov edi, dword [0x8f0770]
call fcn.0057d110
mov dword [ebp - 0x88], esi
mov ecx, dword [eax + 0x10]
mov dword [eax + 0x14], 1
lea edx, [ecx + ecx]
xor ecx, ecx
test edi, edi
setne cl
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x447c56
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1c9
mov esi, dword [ebx + 0x10]
mov dword [esp], esi
mov eax, dword [ebp - 0x84]
call eax
sub esp, 4
mov edi, eax
cmp eax, 0xffffffff
je 0x447c37
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_ResumeThread]
sub esp, 4
cmp eax, 0xffffffff
je 0x448140
xor eax, eax
test edi, edi
setg al
mov dword [esp], eax
mov dword [esp + 4], str.Expecting_suspended_thread_n
call fcn.00444b30
call fcn.0057d110
shr dword [eax + 0x10], 1
call fcn.0057d110
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x447bf8
mov esi, dword [ebp - 0x88]
mov edi, edx
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1ca
mov dword [esp], esi
mov eax, dword [ebp - 0x84]
call eax
sub esp, 4
mov ecx, eax
cmp eax, 0xffffffff
je 0x447cb5
mov dword [ebp - 0x88], eax
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_ResumeThread]
mov ecx, dword [ebp - 0x88]
sub esp, 4
cmp eax, 0xffffffff
je 0x447cbe
xor eax, eax
test ecx, ecx
sete al
mov edi, eax
mov dword [esp + 4], str.Expecting_running_thread_n
mov dword [esp], edi
call fcn.00444b30
xor ecx, ecx
mov edx, ebx
mov eax, 0x1cc
mov esi, dword [ebx + 0x10]
call fcn.00446690
cmp dword [ebx + 4], 2
je 0x447bc8
mov dword [ebp - 0x88], esi
mov esi, dword fs:[0x18]
jmp 0x447d0c
sub eax, 6
cmp eax, 1
ja 0x447db3
lea eax, [ebp - 0x6c]
mov dword [esp + 4], 0xa
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WaitForDebugEvent]
sub esp, 8
mov edi, eax
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1d3
mov eax, dword [esi + 0x34]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 4], str.WaitForDebugEvent_returned__x__lu__n
cmp dword [esi + 0x34], 0x79
sete al
mov dword [esp], eax
call fcn.00444b30
mov eax, 0x1d5
mov ecx, 0x4e20
mov edx, ebx
call fcn.00446690
mov eax, dword [ebx + 4]
cmp eax, 6
jne 0x447d00
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1d7
mov dword [esp + 4], str.ntdll.dll_reported_out_of_order_n
mov eax, dword [0x717c20]
cmp dword [ebx + 0x14], eax
setne al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
mov eax, dword [ebx + 4]
sub eax, 6
cmp eax, 1
jbe 0x447d0c
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1d9
mov eax, dword [ebx + 0x68]
mov dword [esp + 4], str.dll_cnt___d_n
cmp eax, 2
mov dword [esp + 8], eax
seta al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
cmp dword [ebx + 4], 2
je 0x447ec6
nop
mov edx, ebx
mov eax, 0x1ff
mov ecx, 0xc8
call fcn.00446690
mov eax, dword [ebx + 4]
lea edx, [eax - 2]
and edx, 0xfffffffd
je 0x447df0
sub eax, 6
cmp eax, 1
jbe 0x447df0
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x202
mov eax, dword [ebx + 4]
mov dword [esp + 4], str.dwDebugEventCode___ld_n
cmp eax, 0xffffffff
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1c1
mov eax, dword [ebx + 4]
mov dword [esp + 4], str.dwDebugEventCode___ld_n
cmp eax, 6
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1c2
mov dword [esp + 4], str.The_first_reported_DLL_is_not_ntdll.dll_n
mov eax, dword [0x717c20]
cmp dword [ebx + 0x14], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
mov eax, 0x1c3
xor ecx, ecx
mov edx, ebx
call fcn.00446690
mov eax, dword [ebx + 4]
jmp 0x447baa
call fcn.0057d110
mov esi, dword [sym.imp.kernel32.dll_SuspendThread]
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1e2
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call esi
sub esp, 4
mov edi, eax
cmp eax, 0xffffffff
jne 0x448115
xor eax, eax
test edi, edi
mov dword [esp + 4], str.Expecting_running_thread_n
sete al
xor edi, edi
mov dword [esp], eax
call fcn.00444b30
mov dword [ebp - 0x84], esi
lea esi, [esi]
lea esi, [esi]
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1e7
mov esi, dword [ebx + 0x10]
mov dword [esp], esi
mov eax, dword [ebp - 0x84]
call eax
sub esp, 4
mov edx, eax
cmp eax, 0xffffffff
je 0x447f6b
mov dword [ebp - 0x88], eax
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_ResumeThread]
mov edx, dword [ebp - 0x88]
sub esp, 4
cmp eax, 0xffffffff
je 0x44814e
xor eax, eax
test edx, edx
sete al
mov dword [esp + 4], str.Expecting_running_thread_n
mov dword [esp], eax
call fcn.00444b30
cmp edi, 4
ja 0x447f91
mov eax, dword [ebx + 0xc]
mov dword [ebp + edi*4 - 0x80], eax
add edi, 1
mov ecx, 0x4e20
mov edx, ebx
mov eax, 0x1ea
call fcn.00446690
cmp dword [ebx + 4], 2
je 0x447f20
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1ec
xor eax, eax
cmp edi, 5
setbe al
mov dword [esp + 4], str.too_many_threads_created_n
xor esi, esi
mov dword [esp], eax
call fcn.00444b30
mov eax, dword [ebx + 0xc]
jmp 0x447fe7
add esi, 1
cmp edi, esi
je 0x447fed
cmp dword [ebp + esi*4 - 0x80], eax
jne 0x447fe0
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1ef
xor eax, eax
cmp esi, edi
setb al
mov dword [esp + 4], str.unexpected_thread_n
mov dword [esp], eax
call fcn.00444b30
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1f1
mov eax, dword [ebx + 4]
mov dword [esp + 4], str.dwDebugEventCode___ld_n
cmp eax, 1
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1f2
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], str.ExceptionCode___lx_n
cmp eax, 0x80000003
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1f4
mov dword [esp + 4], str.ExceptionAddress___DbgBreakPoint_n
mov eax, dword [0x717c4c]
cmp dword [ebx + 0x1c], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x447df0
mov dword [esp + 8], 0x80010001
mov eax, dword [ebx + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ContinueDebugEvent]
sub esp, 0xc
mov esi, eax
call fcn.0057d110
mov dword [eax], 0x59334b
mov dword [eax + 4], 0x1f9
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 4], str.ContinueDebugEvent_failed__last_error__ld._n
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.00444b30
mov dword [ebx + 4], 0xffffffff
jmp 0x447df0
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ResumeThread]
sub esp, 4
cmp eax, 0xffffffff
jne 0x447ef7
mov edi, 0xfffffffe
jmp 0x447ef7
xor eax, eax
jmp 0x447c3e
xor eax, eax
jmp 0x447b5c
xor eax, eax
jmp 0x447f72