Function at 0x100016f0
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x12fc
call fcn.100dbf20
mov eax, dword [0x10125708]
mov dx, word [0x1010d3ac]
mov dword [esp + 0x24], eax
mov ax, word [0x1010d3a8]
push ebx
mov word [esp + 0x10], ax
movzx eax, byte [0x1010d3aa]
push esi
push edi
mov byte [esp + 0x1a], al
mov edi, ecx
mov al, byte [0x1010d3ae]
push 0x18
mov word [esp + 0x20], dx
mov byte [esp + 0x22], al
mov word [esp + 0x18], dx
mov byte [esp + 0x1a], al
call fcn.100daf78
add esp, 4
mov esi, eax
xorps xmm0, xmm0
push 0x1010d3b0
movups xmmword [esi], xmm0
push 0x1010d3cc
movq qword [esi + 0x10], xmm0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0x18
push esi
push 0
push dword [edi]
call eax
mov eax, dword [esi + 4]
lea ecx, [esp + 0x34]
push ecx
push 4
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 0
push ecx
add eax, 8
mov dword [esp + 0x40], 0
push eax
push dword [edi]
call dword [0x101256cc]
push 0x1000
lea eax, [esp + 0x30c]
push 0
push eax
call fcn.100dd0a0
add esp, 0xc
lea eax, [esp + 0x308]
push 0
push 0x1000
push eax
push dword [esp + 0x2c]
push dword [edi]
call dword [0x101256cc]
lea esi, [esp + 0x308]
mov dword [esp + 0x2c], 0
add esi, dword [esp + 0x344]
mov eax, 0x8664
cmp dword [esi + 0xe8], 0
mov ebx, dword [esi + 0x28]
setne byte [esp + 0x13]
add ebx, dword [esp + 0x20]
mov dword [esp + 0x28], ebx
cmp word [esi + 4], ax
jne 0x10001820
cmp dword [esi + 0xf8], 0
mov dword [esp + 0x2c], esi
setne byte [esp + 0x13]
push 0
push 3
lea eax, [esp + 0x24]
push eax
push ebx
push dword [edi]
call dword [0x101256cc]
push 0
push 3
lea eax, [esp + 0x20]
push eax
push ebx
push dword [edi]
call dword [0x101256c0]
push 3
push ebx
push dword [edi]
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
push 0
push 3
lea eax, [esp + 0x1c]
push eax
push ebx
push dword [edi]
call dword [0x101256cc]
xor eax, eax
nop dword [eax]
nop word [eax + eax]
mov cl, byte [esp + eax + 0x14]
cmp cl, byte [esp + eax + 0x18]
jne 0x10001988
inc eax
cmp eax, 3
jb 0x10001870
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x24]
push eax
push dword [edi]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [esp + 0x24], 0x103
je 0x100018bb
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor bl, bl
xor esi, esi
nop
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0x10001
push eax
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov eax, dword [esp + 0x28]
cmp dword [esp + 0xf0], eax
mov eax, 1
movzx ebx, bl
cmove ebx, eax
lea eax, [esp + 0x24]
push eax
push dword [edi]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [esp + 0x24], 0x103
jne 0x1000197c
test bl, bl
jne 0x10001924
inc esi
cmp esi, 0x96
jb 0x100018c0
mov eax, 5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov ebx, dword [esp + 0x28]
lea eax, [esp + 0x1c]
push 0
push 3
push eax
push ebx
push dword [edi]
call dword [0x101256c0]
push 3
push ebx
push dword [edi]
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov esi, dword [esp + 0x30]
mov edx, esi
mov ecx, dword [edi]
call fcn.100019b0
test eax, eax
jne 0x10001973
cmp dword [esp + 0x2c], eax
mov ecx, dword [edi]
push esi
setne al
push eax
push ebx
call fcn.10001410
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp byte [esp + 0x13], 0
mov eax, 1
pop edi
mov ecx, 4
pop esi
cmovne eax, ecx
pop ebx
mov esp, ebp
pop ebp
ret