Function at 0x10010021
Capabilities:
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0x1c
call fcn.10010847
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], esp
xor eax, eax
call dword [0x10030517]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x10010093
push 0x19
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], esp
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x100100bf
push 0x46
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov dword [ebp - 8], eax
mov dword [ebp - 0x1c], esp
push 0
push 4
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x100100f5
push 0x73
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], 0x1c
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x10]
push dword [ebp - 0xc]
xor eax, eax
call dword [0x1003051b]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x10010136
push 0xde
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x1001035f
mov ebx, dword [ebp - 0x10]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], eax
jne 0x10010178
mov ebx, dword [ebp - 0x10]
add ebx, 8
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], eax
je 0x10010178
mov eax, 1
jmp 0x1001017d
mov eax, 0
test eax, eax
je 0x10010328
inc dword [ebp - 0x18]
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 0x18]
cmp eax, 0
jge 0x100101ae
push 0x1ed
push 0x4016e2a
push 0xa
call fcn.10010853
add esp, 0xc
mov dword [ebp - 0x1c], eax
lea ebx, [ebp - 0x20]
call fcn.10002870
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.10010847
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
lea esi, [ebp - 0x1c]
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.10002870
pop edx
mov eax, ecx
cmp ecx, edx
jle 0x100101ef
mov ecx, edx
sub eax, ecx
sub edx, ecx
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
test edx, edx
je 0x10010205
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.1001084d
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.10002870
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x10010241
push 0x211
push 0x4016e2a
push 4
call fcn.10010853
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1001025e
push 0x211
push 0x4016e2a
push 1
call fcn.10010853
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x10]
add ebx, 8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], esp
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 0
push 0x1f03ff
xor eax, eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
nop
nop
cmp dword [ebp - 0x24], esp
je 0x100102a7
push 0x231
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.10002870
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x100102d5
push 0x261
push 0x4016e2a
push 4
call fcn.10010853
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x100102f2
push 0x261
push 0x4016e2a
push 1
call fcn.10010853
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], esp
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x10010328
push 0x261
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x10]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_Thread32Next]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x10010357
push 0x29d
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov dword [ebp - 0x14], eax
jmp 0x10010139
mov dword [ebp - 0x1c], esp
push dword [ebp - 0xc]
xor eax, eax
call dword [0x1003051f]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x1001038b
push 0x2d3
push 0x4016e2a
push 6
call fcn.10010853
add esp, 0xc
mov ebx, dword [ebp - 0x10]
push ebx
call fcn.1001084d
add esp, 4
mov esp, ebp
pop ebp
ret 4