Function at 0x1009c9e0
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x22c0
call fcn.100c0c40
mov eax, dword [0x100db040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0x228c], ecx
mov dword [ebp - 0x2294], 0
mov byte [ebp - 0x228d], 1
mov dword [ebp - 0x2298], 0
mov eax, dword [ebp - 0x228c]
cmp dword [eax + 0x10], 0
jne 0x1009ca32
mov ecx, dword [ebp - 0x228c]
call fcn.1009c480
nop
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 4]
cmp dword [edx + 4], 0
jne 0x1009ca53
push 0x45a
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x1009d1b8
mov eax, dword [ebp + 0x10]
mov dword [0x106b9ad4], eax
mov ecx, dword [ebp + 0x14]
mov dword [0x106b9bdc], ecx
cmp dword [ebp + 0xc], 0
jne 0x1009cb09
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp dword [ebp + 8], eax
jne 0x1009cab7
push 0x2cc
push 0
lea edx, [ebp - 0x3d8]
push edx
call fcn.100a23c0
add esp, 0xc
mov dword [ebp - 0x3d8], 0x10007
call 0x1009ca9e
pop eax
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x324], ebp
mov dword [ebp - 0x314], esp
xor eax, eax
jne 0x1009ca79
jmp 0x1009cb07
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0x2cc
push 0
lea edx, [ebp - 0x3d8]
push edx
call fcn.100a23c0
add esp, 0xc
mov dword [ebp - 0x3d8], 0x10007
lea eax, [ebp - 0x3d8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
jne 0x1009cb07
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
jmp 0x1009d1b8
jmp 0x1009cb19
mov ecx, 0xb3
mov esi, dword [ebp + 0xc]
lea edi, [ebp - 0x3d8]
rep movsd dword es:[edi], dword [esi]
push 0x108
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.100a23c0
add esp, 0xc
mov dword [ebp - 0x22a8], 0x14c
mov ecx, dword [ebp - 0x320]
xor edx, edx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x100], 3
mov eax, dword [ebp - 0x324]
xor ecx, ecx
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xe0], 3
mov edx, dword [ebp - 0x314]
xor eax, eax
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd0], 3
push 0x420
call fcn.100a3b58
add esp, 4
mov dword [ebp - 0x2294], eax
cmp dword [ebp - 0x2294], 0
jne 0x1009cbb9
jmp 0x1009d162
push 0x420
push 0
mov ecx, dword [ebp - 0x2294]
push ecx
call fcn.100a23c0
add esp, 0xc
mov edx, dword [ebp - 0x2294]
mov dword [edx], 0x20
mov eax, dword [ebp - 0x2294]
mov dword [eax + 0x18], 0x400
xor ecx, ecx
mov dword [ebp - 0x22c0], ecx
mov dword [ebp - 0x22bc], ecx
mov dword [ebp - 0x22b8], ecx
mov dword [ebp - 0x22b4], ecx
mov dword [ebp - 0x22b0], ecx
mov dword [ebp - 0x22ac], ecx
mov dword [ebp - 0x22c0], 0x18
push 0x688
push 0
lea edx, [ebp - 0xa60]
push edx
call fcn.100a23c0
add esp, 0xc
mov dword [ebp - 0xa60], 0x688
mov dword [ebp - 0x229c], 0
jmp 0x1009cc53
mov eax, dword [ebp - 0x229c]
add eax, 1
mov dword [ebp - 0x229c], eax
push 0
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 4]
mov eax, dword [edx + 0x1c]
push eax
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 4]
mov eax, dword [edx + 0x14]
push eax
push 0x1009d1f0
lea ecx, [ebp - 0x3d8]
push ecx
lea edx, [ebp - 0x10c]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x22a8]
push eax
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 4]
mov eax, dword [edx + 0x38]
call eax
test eax, eax
jne 0x1009ccd7
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x10c]
push edx
push 0
push str.StackWalk64
mov eax, dword [ebp - 0x228c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x228c]
mov eax, dword [edx + 0x10]
call eax
nop
jmp 0x1009d162
mov ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0x2288], ecx
mov dword [ebp - 0x2284], edx
mov eax, 1
imul ecx, eax, 0
mov byte [ebp + ecx - 0x2280], 0
mov edx, 1
imul eax, edx, 0
mov byte [ebp + eax - 0x1e80], 0
mov ecx, 1
imul edx, ecx, 0
mov byte [ebp + edx - 0x1a80], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x1680], xmm0
mov dword [ebp - 0x1678], 0
mov eax, 1
imul ecx, eax, 0
mov byte [ebp + ecx - 0x1670], 0
mov dword [ebp - 0x1674], 0
mov edx, 1
imul eax, edx, 0
mov byte [ebp + eax - 0xe60], 0
mov ecx, 1
imul edx, ecx, 0
mov byte [ebp + edx - 0x1268], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0xfc]
jne 0x1009cde6
mov ecx, dword [ebp - 0x108]
cmp ecx, dword [ebp - 0xf8]
jne 0x1009cde6
mov edx, dword [ebp - 0x228c]
cmp dword [edx + 0x1c], 0
jle 0x1009cdd5
mov eax, dword [ebp - 0x228c]
mov ecx, dword [ebp - 0x2298]
cmp ecx, dword [eax + 0x1c]
jle 0x1009cdd5
mov edx, dword [ebp - 0x108]
push edx
mov eax, dword [ebp - 0x10c]
push eax
push 0
push str.StackWalk64_Endless_Callstack_
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x228c]
mov eax, dword [edx + 0x10]
call eax
nop
jmp 0x1009d162
mov ecx, dword [ebp - 0x2298]
add ecx, 1
mov dword [ebp - 0x2298], ecx
jmp 0x1009cdf0
mov dword [ebp - 0x2298], 0
mov edx, dword [ebp - 0x10c]
or edx, dword [ebp - 0x108]
je 0x1009d0db
mov eax, dword [ebp - 0x2294]
push eax
lea ecx, [ebp - 0x1680]
push ecx
mov edx, dword [ebp - 0x108]
push edx
mov eax, dword [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x228c]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0x28]
call edx
test eax, eax
je 0x1009cea9
mov eax, dword [ebp - 0x2294]
add eax, 0x1c
push eax
mov edx, 0x400
lea ecx, [ebp - 0x2280]
call fcn.1009b980
add esp, 4
push 0x1000
push 0x400
lea ecx, [ebp - 0x1e80]
push ecx
mov edx, dword [ebp - 0x2294]
add edx, 0x1c
push edx
mov eax, dword [ebp - 0x228c]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0x3c]
call edx
push 0
push 0x400
lea eax, [ebp - 0x1a80]
push eax
mov ecx, dword [ebp - 0x2294]
add ecx, 0x1c
push ecx
mov edx, dword [ebp - 0x228c]
mov eax, dword [edx + 4]
mov ecx, dword [eax + 0x3c]
call ecx
nop
jmp 0x1009cee5
mov edx, dword [ebp - 0x108]
push edx
mov eax, dword [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SymGetSymFromAddr64
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x228c]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [0x10673bf0]
add ecx, 1
mov dword [0x10673bf0], ecx
mov edx, dword [ebp - 0x228c]
mov eax, dword [edx + 4]
cmp dword [eax + 0x18], 0
je 0x1009cf92
lea ecx, [ebp - 0x22c0]
push ecx
lea edx, [ebp - 0x1678]
push edx
mov eax, dword [ebp - 0x108]
push eax
mov ecx, dword [ebp - 0x10c]
push ecx
mov edx, dword [ebp - 0x228c]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 4]
mov eax, dword [edx + 0x18]
call eax
test eax, eax
je 0x1009cf58
mov ecx, dword [ebp - 0x22b8]
mov dword [ebp - 0x1674], ecx
mov edx, dword [ebp - 0x22b4]
push edx
mov edx, 0x400
lea ecx, [ebp - 0x1670]
call fcn.1009b980
add esp, 4
jmp 0x1009cf92
mov eax, dword [ebp - 0x108]
push eax
mov ecx, dword [ebp - 0x10c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SymGetLineFromAddr64
mov edx, dword [ebp - 0x228c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x228c]
mov edx, dword [eax + 0x10]
call edx
mov eax, dword [0x10673bf0]
add eax, 1
mov dword [0x10673bf0], eax
lea ecx, [ebp - 0xa60]
push ecx
mov edx, dword [ebp - 0x108]
push edx
mov eax, dword [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x228c]
mov ecx, dword [eax + 4]
call fcn.1009c260
test eax, eax
je 0x1009d0ad
mov ecx, dword [ebp - 0xa40]
mov dword [ebp - 0x22a0], ecx
cmp dword [ebp - 0x22a0], 8
ja case.default.0x1009cfe2
mov edx, dword [ebp - 0x22a0]
jmp dword [edx*4 + 0x1009d1cc]
mov dword [ebp - 0x126c], str._nosymbols_
jmp 0x1009d05f
mov dword [ebp - 0x126c], str.COFF
jmp 0x1009d05f
mov dword [ebp - 0x126c], 0x100d1320
jmp 0x1009d05f
mov dword [ebp - 0x126c], 0x100d1324
jmp 0x1009d05f
mov dword [ebp - 0x126c], str._exported_
jmp 0x1009d05f
mov dword [ebp - 0x126c], str._deferred_
jmp 0x1009d05f
mov dword [ebp - 0x126c], 0x100d1340
jmp 0x1009d05f
mov dword [ebp - 0x126c], 0x100d1344
jmp 0x1009d05f
mov dword [ebp - 0x126c], str.Virtual
jmp 0x1009d05f
mov dword [ebp - 0x126c], 0
lea eax, [ebp - 0xa3c]
push eax
mov edx, 0x400
lea ecx, [ebp - 0x1268]
call fcn.1009b980
add esp, 4
mov ecx, dword [ebp - 0xa58]
mov edx, dword [ebp - 0xa54]
mov dword [ebp - 0xe68], ecx
mov dword [ebp - 0xe64], edx
lea eax, [ebp - 0x91c]
push eax
mov edx, 0x400
lea ecx, [ebp - 0xe60]
call fcn.1009b980
add esp, 4
jmp 0x1009d0db
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x10c]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SymGetModuleInfo64
mov eax, dword [ebp - 0x228c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x228c]
mov eax, dword [edx + 0x10]
call eax
nop
mov dword [ebp - 0x22a4], 1
cmp dword [ebp - 0x229c], 0
jne 0x1009d0f8
mov dword [ebp - 0x22a4], 0
mov byte [ebp - 0x228d], 0
lea ecx, [ebp - 0x2288]
push ecx
mov edx, dword [ebp - 0x22a4]
push edx
mov eax, dword [ebp - 0x228c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x228c]
mov eax, dword [edx + 0xc]
call eax
nop
mov ecx, dword [ebp - 0xfc]
or ecx, dword [ebp - 0xf8]
jne 0x1009d15d
mov byte [ebp - 0x228d], 1
lea edx, [ebp - 0x2288]
push edx
push 2
mov eax, dword [ebp - 0x228c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x228c]
mov eax, dword [edx + 0xc]
call eax
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
nop
jmp 0x1009d162
jmp 0x1009cc44
cmp dword [ebp - 0x2294], 0
je 0x1009d17a
mov ecx, dword [ebp - 0x2294]
push ecx
call fcn.100a40b3
add esp, 4
movzx edx, byte [ebp - 0x228d]
test edx, edx
jne 0x1009d1a2
lea eax, [ebp - 0x2288]
push eax
push 2
mov ecx, dword [ebp - 0x228c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x228c]
mov eax, dword [edx + 0xc]
call eax
nop
cmp dword [ebp + 0xc], 0
jne 0x1009d1b3
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
nop
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
ret 0x10