Function at 0x1000663f
Capabilities:
Resume thread

Disassembly:
push ebx
push edi
push esi
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi + 0xa4]
add eax, 8
lea ecx, [esp + 0x1c]
push 0
push 4
push ecx
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov al, byte [0x100bd148]
test al, al
je 0x10006c74
mov ecx, 0x100bd120
call fcn.100207e0
push 0x8d
push 0x13acd2a9
push 0x147caec
push 0x100bd120
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd170]
test al, al
je 0x10006ccb
mov ecx, 0x100bd150
call fcn.1002082a
push 0x58
push 0x82c14
push 0x200
push 0x100bd150
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd1a8]
test al, al
je 0x10006d1b
mov ecx, 0x100bd180
call fcn.100207e0
push 0x8d
push 0x13d44005
push 0x14a5d14
push 0x100bd180
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd1d0]
test al, al
je 0x10006d72
mov ebx, dword [esp + 0x18]
mov ecx, 0x100bd1b0
call fcn.1002082a
push 0x58
push 0x83c64
push 0x204
push 0x100bd1b0
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd200]
test al, al
je 0x10006dc2
mov ecx, 0x100bd1e0
call fcn.1002082a
push 0x17a1
push 0x30eae7
push 0x612
push 0x100bd1e0
call fcn.10003dc3
add esp, 0x10
mov eax, dword [ebx + 0x28]
add eax, dword [esp + 0x1c]
mov dword [edi + 0xb0], eax
mov al, byte [0x100bd238]
test al, al
je 0x10006e12
mov ecx, 0x100bd210
call fcn.100207e0
push 0x8e
push 0x144a6b18
push 0x14e3850
push 0x100bd210
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd260]
test al, al
je 0x10006e69
mov ecx, 0x100bd240
call fcn.1002082a
push 0x59
push 0x86d60
push 0x20a
push 0x100bd240
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd298]
test al, al
je 0x10006eb9
mov ecx, 0x100bd270
call fcn.100207e0
push 0x8e
push 0x14724c78
push 0x150ca78
push 0x100bd270
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd2c0]
test al, al
je 0x10006f10
mov ecx, 0x100bd2a0
call fcn.1002082a
push 0x59
push 0x87de0
push 0x20e
push 0x100bd2a0
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd2f0]
test al, al
je 0x10006f60
mov ecx, 0x100bd2d0
call fcn.1002082a
push 0x17a2
push 0x326ee8
push 0x630
push 0x100bd2d0
call fcn.10003dc3
add esp, 0x10
push edi
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov al, byte [0x100bd328]
test al, al
je 0x10006fb0
mov ecx, 0x100bd300
call fcn.100207e0
push 0x8f
push 0x14ea479b
push 0x154a5b4
push 0x100bd300
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd350]
test al, al
je 0x10007007
mov ecx, 0x100bd330
call fcn.1002082a
push 0x5a
push 0x8af9c
push 0x214
push 0x100bd330
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd388]
test al, al
je 0x10007057
mov ecx, 0x100bd360
call fcn.100207e0
push 0x8f
push 0x15129cff
push 0x15737dc
push 0x100bd360
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd3b0]
test al, al
je 0x100070ae
mov ecx, 0x100bd390
call fcn.1002082a
push 0x5a
push 0x8c04c
push 0x218
push 0x100bd390
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd3e0]
test al, al
je 0x100070fe
mov ecx, 0x100bd3c0
call fcn.1002082a
push 0x17a3
push 0x33f875
push 0x64e
push 0x100bd3c0
call fcn.10003dc3
add esp, 0x10
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov al, byte [0x100bd418]
test al, al
je 0x1000714e
mov ecx, 0x100bd3f0
call fcn.100207e0
push 0x90
push 0x158c6832
push 0x15b1318
push 0x100bd3f0
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd440]
test al, al
je 0x100071a5
mov ecx, 0x100bd420
call fcn.1002082a
push 0x5b
push 0x8f2c8
push 0x21e
push 0x100bd420
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd478]
test al, al
je 0x100071f5
mov ecx, 0x100bd450
call fcn.100207e0
push 0x90
push 0x15b5319a
push 0x15da540
push 0x100bd450
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd4a0]
test al, al
je 0x1000724c
mov ecx, 0x100bd480
call fcn.1002082a
push 0x5b
push 0x903a8
push 0x222
push 0x100bd480
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd4d0]
test al, al
je 0x1000729c
mov ecx, 0x100bd4b0
call fcn.1002082a
push 0x17a4
push 0x35878e
push 0x66c
push 0x100bd4b0
call fcn.10003dc3
add esp, 0x10
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [0x100bd508]
test al, al
je 0x100072ec
mov ecx, 0x100bd4e0
call fcn.100207e0
push 0x91
push 0x1630ccdd
push 0x161807c
push 0x100bd4e0
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd530]
test al, al
je 0x10007343
mov ecx, 0x100bd510
call fcn.1002082a
push 0x5c
push 0x936e4
push 0x228
push 0x100bd510
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd568]
test al, al
je 0x10007393
mov ecx, 0x100bd540
call fcn.100207e0
push 0x91
push 0x165a0a49
push 0x16412a4
push 0x100bd540
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd590]
test al, al
je 0x100073ea
mov ecx, 0x100bd570
call fcn.1002082a
push 0x5c
push 0x947f4
push 0x22c
push 0x100bd570
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd5c0]
test al, al
je 0x1000743a
mov ecx, 0x100bd5a0
call fcn.1002082a
push 0x17a5
push 0x371c33
push 0x68a
push 0x100bd5a0
call fcn.10003dc3
add esp, 0x10
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [0x100bd5f8]
test al, al
je 0x1000748a
mov ecx, 0x100bd5d0
call fcn.100207e0
push 0x92
push 0x16d7759c
push 0x167ede0
push 0x100bd5d0
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd620]
test al, al
je 0x100074e1
mov ecx, 0x100bd600
call fcn.1002082a
push 0x5d
push 0x97bf0
push 0x232
push 0x100bd600
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd658]
test al, al
je 0x10007531
mov ecx, 0x100bd630
call fcn.100207e0
push 0x92
push 0x1701270c
push 0x16a8008
push 0x100bd630
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd680]
test al, al
je 0x10007588
mov ecx, 0x100bd660
call fcn.1002082a
push 0x5d
push 0x98d30
push 0x236
push 0x100bd660
call fcn.10003dc3
add esp, 0x10
mov al, byte [0x100bd6b0]
test al, al
je 0x100075d8
mov ecx, 0x100bd690
call fcn.1002082a
push 0x17a6
push 0x38b664
push 0x6a8
push 0x100bd690
call fcn.10003dc3
add esp, 0x10
pop esi
pop edi
pop ebx
ret
push 0x100bd148
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006672
mov byte [0x100bd140], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd120], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd130], xmm0
push 0x1001bd18
call fcn.100013b0
add esp, 4
push 0x100bd148
call fcn.10020e93
add esp, 4
jmp 0x10006672
push 0x100bd170
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100066a5
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd150], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd160], xmm0
push 0x1001bd2a
call fcn.100013b0
add esp, 4
push 0x100bd170
call fcn.10020e93
add esp, 4
jmp 0x100066a5
push 0x100bd1a8
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100066d5
mov byte [0x100bd1a0], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd180], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd190], xmm0
push 0x1001bd3c
call fcn.100013b0
add esp, 4
push 0x100bd1a8
call fcn.10020e93
add esp, 4
jmp 0x100066d5
push 0x100bd1d0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006708
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd1b0], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd1c0], xmm0
push 0x1001bd4e
call fcn.100013b0
add esp, 4
push 0x100bd1d0
call fcn.10020e93
add esp, 4
jmp 0x10006708
push 0x100bd200
call fcn.10020dec
add esp, 4
test eax, eax
je 0x1000673c
movaps xmm0, xmmword [0x100ac380]
movaps xmmword [0x100bd1e0], xmm0
movaps xmm0, xmmword [0x100ac390]
movaps xmmword [0x100bd1f0], xmm0
push 0x1001bd60
call fcn.100013b0
add esp, 4
push 0x100bd200
call fcn.10020e93
add esp, 4
jmp 0x1000673c
push 0x100bd238
call fcn.10020dec
add esp, 4
test eax, eax
je 0x1000677c
mov byte [0x100bd230], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd210], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd220], xmm0
push 0x1001bd72
call fcn.100013b0
add esp, 4
push 0x100bd238
call fcn.10020e93
add esp, 4
jmp 0x1000677c
push 0x100bd260
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100067af
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd240], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd250], xmm0
push 0x1001bd84
call fcn.100013b0
add esp, 4
push 0x100bd260
call fcn.10020e93
add esp, 4
jmp 0x100067af
push 0x100bd298
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100067df
mov byte [0x100bd290], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd270], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd280], xmm0
push 0x1001bd96
call fcn.100013b0
add esp, 4
push 0x100bd298
call fcn.10020e93
add esp, 4
jmp 0x100067df
push 0x100bd2c0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006812
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd2a0], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd2b0], xmm0
push 0x1001bda8
call fcn.100013b0
add esp, 4
push 0x100bd2c0
call fcn.10020e93
add esp, 4
jmp 0x10006812
push 0x100bd2f0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006842
movaps xmm0, xmmword [0x100ac380]
movaps xmmword [0x100bd2d0], xmm0
movaps xmm0, xmmword [0x100ac390]
movaps xmmword [0x100bd2e0], xmm0
push 0x1001bdba
call fcn.100013b0
add esp, 4
push 0x100bd2f0
call fcn.10020e93
add esp, 4
jmp 0x10006842
push 0x100bd328
call fcn.10020dec
add esp, 4
test eax, eax
je 0x1000687f
mov byte [0x100bd320], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd300], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd310], xmm0
push 0x1001bdcc
call fcn.100013b0
add esp, 4
push 0x100bd328
call fcn.10020e93
add esp, 4
jmp 0x1000687f
push 0x100bd350
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100068b2
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd330], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd340], xmm0
push 0x1001bdde
call fcn.100013b0
add esp, 4
push 0x100bd350
call fcn.10020e93
add esp, 4
jmp 0x100068b2
push 0x100bd388
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100068e2
mov byte [0x100bd380], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd360], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd370], xmm0
push 0x1001bdf0
call fcn.100013b0
add esp, 4
push 0x100bd388
call fcn.10020e93
add esp, 4
jmp 0x100068e2
push 0x100bd3b0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006915
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd390], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd3a0], xmm0
push 0x1001be02
call fcn.100013b0
add esp, 4
push 0x100bd3b0
call fcn.10020e93
add esp, 4
jmp 0x10006915
push 0x100bd3e0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006945
movaps xmm0, xmmword [0x100ac380]
movaps xmmword [0x100bd3c0], xmm0
movaps xmm0, xmmword [0x100ac390]
movaps xmmword [0x100bd3d0], xmm0
push 0x1001be14
call fcn.100013b0
add esp, 4
push 0x100bd3e0
call fcn.10020e93
add esp, 4
jmp 0x10006945
push 0x100bd418
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006981
mov byte [0x100bd410], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd3f0], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd400], xmm0
push 0x1001be26
call fcn.100013b0
add esp, 4
push 0x100bd418
call fcn.10020e93
add esp, 4
jmp 0x10006981
push 0x100bd440
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100069b4
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd420], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd430], xmm0
push 0x1001be38
call fcn.100013b0
add esp, 4
push 0x100bd440
call fcn.10020e93
add esp, 4
jmp 0x100069b4
push 0x100bd478
call fcn.10020dec
add esp, 4
test eax, eax
je 0x100069e4
mov byte [0x100bd470], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd450], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd460], xmm0
push 0x1001be4a
call fcn.100013b0
add esp, 4
push 0x100bd478
call fcn.10020e93
add esp, 4
jmp 0x100069e4
push 0x100bd4a0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006a17
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd480], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd490], xmm0
push 0x1001be5c
call fcn.100013b0
add esp, 4
push 0x100bd4a0
call fcn.10020e93
add esp, 4
jmp 0x10006a17
push 0x100bd4d0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006a47
movaps xmm0, xmmword [0x100ac380]
movaps xmmword [0x100bd4b0], xmm0
movaps xmm0, xmmword [0x100ac390]
movaps xmmword [0x100bd4c0], xmm0
push 0x1001be6e
call fcn.100013b0
add esp, 4
push 0x100bd4d0
call fcn.10020e93
add esp, 4
jmp 0x10006a47
push 0x100bd508
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006a83
mov byte [0x100bd500], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd4e0], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd4f0], xmm0
push 0x1001be80
call fcn.100013b0
add esp, 4
push 0x100bd508
call fcn.10020e93
add esp, 4
jmp 0x10006a83
push 0x100bd530
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006ab6
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd510], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd520], xmm0
push 0x1001be92
call fcn.100013b0
add esp, 4
push 0x100bd530
call fcn.10020e93
add esp, 4
jmp 0x10006ab6
push 0x100bd568
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006ae6
mov byte [0x100bd560], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd540], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd550], xmm0
push 0x1001bea4
call fcn.100013b0
add esp, 4
push 0x100bd568
call fcn.10020e93
add esp, 4
jmp 0x10006ae6
push 0x100bd590
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006b19
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd570], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd580], xmm0
push 0x1001beb6
call fcn.100013b0
add esp, 4
push 0x100bd590
call fcn.10020e93
add esp, 4
jmp 0x10006b19
push 0x100bd5c0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006b49
movaps xmm0, xmmword [0x100ac380]
movaps xmmword [0x100bd5a0], xmm0
movaps xmm0, xmmword [0x100ac390]
movaps xmmword [0x100bd5b0], xmm0
push 0x1001bec8
call fcn.100013b0
add esp, 4
push 0x100bd5c0
call fcn.10020e93
add esp, 4
jmp 0x10006b49
push 0x100bd5f8
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006b84
mov byte [0x100bd5f0], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd5d0], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd5e0], xmm0
push 0x1001beda
call fcn.100013b0
add esp, 4
push 0x100bd5f8
call fcn.10020e93
add esp, 4
jmp 0x10006b84
push 0x100bd620
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006bb7
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd600], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd610], xmm0
push 0x1001beec
call fcn.100013b0
add esp, 4
push 0x100bd620
call fcn.10020e93
add esp, 4
jmp 0x10006bb7
push 0x100bd658
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006be7
mov byte [0x100bd650], 1
movaps xmm0, xmmword [0x100ac340]
movaps xmmword [0x100bd630], xmm0
movaps xmm0, xmmword [0x100ac350]
movaps xmmword [0x100bd640], xmm0
push 0x1001befe
call fcn.100013b0
add esp, 4
push 0x100bd658
call fcn.10020e93
add esp, 4
jmp 0x10006be7
push 0x100bd680
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006c1a
movaps xmm0, xmmword [0x100ac360]
movaps xmmword [0x100bd660], xmm0
movaps xmm0, xmmword [0x100ac370]
movaps xmmword [0x100bd670], xmm0
push 0x1001bf10
call fcn.100013b0
add esp, 4
push 0x100bd680
call fcn.10020e93
add esp, 4
jmp 0x10006c1a
push 0x100bd6b0
call fcn.10020dec
add esp, 4
test eax, eax
je 0x10006c4a
movaps xmm0, xmmword [0x100ac380]
movaps xmmword [0x100bd690], xmm0
movaps xmm0, xmmword [0x100ac390]
movaps xmmword [0x100bd6a0], xmm0
push 0x1001bf22
call fcn.100013b0
add esp, 4
push 0x100bd6b0
call fcn.10020e93
add esp, 4
jmp 0x10006c4a