Function at 0x1000e460
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f0
mov eax, dword [0x1006600c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x2d4], edi
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
push 0xf
mov dword [ebp - 0x2f0], eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [edi + 4]
mov ebx, eax
mov dword [ebp - 0x2d8], ebx
lea eax, [ecx - 1]
neg ecx
sbb ecx, ecx
and ecx, eax
je 0x1000e69a
lea edi, [ecx*4]
push edi
call fcn.10035c4b
add esp, 4
mov dword [0x1008cd74], eax
test eax, eax
je 0x1000e695
push edi
push esi
push eax
call fcn.1002cc40
mov eax, dword [ebp - 0x2d4]
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x2e0], ecx
add esp, 0xc
mov dword [ebp - 0x2dc], edi
cmp dword [eax + 4], ecx
jbe 0x1000e688
mov esi, dword [sym.imp.KERNEL32.dll_GetThreadContext]
add eax, 0xdc
mov edx, dword [ebp - 0x2d4]
mov dword [ebp - 0x2e4], eax
nop dword [eax + eax]
mov eax, dword [eax]
cmp eax, ebx
je 0x1000e669
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x1000e5c4
test ebx, ebx
je 0x1000e5c4
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
cmp eax, 0xffffffff
je 0x1000e644
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x2d0], 0x10001
push eax
push ebx
mov dword [ebp - 0x2e8], 0
call esi
test eax, eax
je 0x1000e5c4
nop word [eax + eax]
mov eax, dword [ebp - 0x2ec]
xor esi, esi
mov edi, dword [ebp - 0x218]
nop
mov edx, dword [eax]
cmp edi, edx
jb 0x1000e5af
mov ecx, dword [eax + 8]
add ecx, edx
cmp edi, ecx
jb 0x1000e5f4
inc esi
add eax, 0x70
cmp esi, 1
jl 0x1000e5a0
mov esi, dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edi, dword [ebp - 0x2dc]
mov eax, dword [0x1008cd74]
mov ecx, dword [ebp - 0x2e0]
mov dword [eax + ecx*4], ebx
cmp ebx, 0xffffffff
je 0x1000e65d
mov edx, dword [ebp - 0x2d4]
test ebx, ebx
mov ebx, dword [ebp - 0x2d8]
je 0x1000e669
inc ecx
mov dword [ebp - 0x2e0], ecx
jmp 0x1000e669
mov esi, dword [ebp - 0x2e8]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp esi, 3
jge 0x1000e636
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x2d0]
inc esi
push eax
mov dword [ebp - 0x2e8], esi
mov esi, dword [sym.imp.KERNEL32.dll_GetThreadContext]
push ebx
call esi
test eax, eax
jne 0x1000e590
jmp 0x1000e5be
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
jmp 0x1000e5b8
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1008cd74]
mov ecx, dword [ebp - 0x2e0]
mov dword [eax + ecx*4], 0
mov ebx, dword [ebp - 0x2d8]
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x2e4]
inc edi
add eax, 0x40
mov dword [ebp - 0x2dc], edi
mov dword [ebp - 0x2e4], eax
cmp edi, dword [edx + 4]
jb 0x1000e530
mov dword [0x1008cd54], ecx
mov esi, 1
jmp 0x1000e69a
call fcn.1000e300
push dword [ebp - 0x2f0]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10029cb8
mov esp, ebp
pop ebp
ret