Function at 0x1000ba52
Capabilities:
Resume thread

Disassembly:
push ebx
push edi
push esi
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi + 0xa4]
add eax, 8
lea ecx, [esp + 0x1c]
push 0
push 4
push ecx
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
mov al, byte [0x1007fee8]
test al, al
je 0x1000c0bd
mov ecx, 0x10082010
call fcn.1001b7a0
push 0x1f4
push 0xac2bac
push 0x49c
push 0x10082010
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007fef0]
test al, al
je 0x1000c11e
mov ecx, 0x10082040
call fcn.1001b7ea
push 0x5fb4
push 0x7da38
push 0x940
push 0x10082040
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007fef8]
test al, al
je 0x1000c170
mov ecx, 0x10082060
call fcn.1001b7a0
push 0x1f4
push 0xad55fc
push 0x4a4
push 0x10082060
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff00]
test al, al
je 0x1000c1d1
mov ebx, dword [esp + 0x18]
mov ecx, 0x10082090
call fcn.1001b7ea
push 0x5fb4
push 0x7e7c7
push 0x950
push 0x10082090
call fcn.100077cc
add esp, 0x10
mov al, byte [0x1007ff08]
test al, al
je 0x1000c223
mov ecx, 0x100820b0
call fcn.1001b7a0
push 0x64
push 0x2295f8
push 0x702
push 0x100820b0
call fcn.100077cc
add esp, 0x10
mov eax, dword [ebx + 0x28]
add eax, dword [esp + 0x1c]
mov dword [edi + 0xb0], eax
nop
mov al, byte [0x1007ff10]
test al, al
je 0x1000c284
mov ecx, 0x100820e0
call fcn.1001b7a0
push 0x1f5
push 0xb11ea2
push 0x4b0
push 0x100820e0
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff18]
test al, al
je 0x1000c2e5
mov ecx, 0x10082110
call fcn.1001b7ea
push 0x5fb5
push 0x813e3
push 0x968
push 0x10082110
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff20]
test al, al
je 0x1000c337
mov ecx, 0x10082130
call fcn.1001b7a0
push 0x1f5
push 0xb24c6a
push 0x4b8
push 0x10082130
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff28]
test al, al
je 0x1000c398
mov ecx, 0x10082160
call fcn.1001b7ea
push 0x5fb5
push 0x8219a
push 0x978
push 0x10082160
call fcn.100077cc
add esp, 0x10
mov al, byte [0x1007ff30]
test al, al
je 0x1000c3ea
mov ecx, 0x10082180
call fcn.1001b7a0
push 0x65
push 0x239274
push 0x720
push 0x10082180
call fcn.100077cc
add esp, 0x10
push edi
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
nop
mov al, byte [0x1007ff38]
test al, al
je 0x1000c44b
mov ecx, 0x100821b0
call fcn.1001b7a0
push 0x1f6
push 0xb622f0
push 0x4c4
push 0x100821b0
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff40]
test al, al
je 0x1000c4ac
mov ecx, 0x100821e0
call fcn.1001b7ea
push 0x5fb6
push 0x84e58
push 0x990
push 0x100821e0
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff48]
test al, al
je 0x1000c4fe
mov ecx, 0x10082200
call fcn.1001b7a0
push 0x1f6
push 0xb75430
push 0x4cc
push 0x10082200
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff50]
test al, al
je 0x1000c55f
mov ecx, 0x10082230
call fcn.1001b7ea
push 0x5fb6
push 0x85c38
push 0x9a0
push 0x10082230
call fcn.100077cc
add esp, 0x10
mov al, byte [0x1007ff58]
test al, al
je 0x1000c5b1
mov ecx, 0x10082250
call fcn.1001b7a0
push 0x66
push 0x249260
push 0x73e
push 0x10082250
call fcn.100077cc
add esp, 0x10
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
nop
mov al, byte [0x1007ff60]
test al, al
je 0x1000c612
mov ecx, 0x10082280
call fcn.1001b7a0
push 0x1f7
push 0xbb3896
push 0x4d8
push 0x10082280
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff68]
test al, al
je 0x1000c673
mov ecx, 0x100822b0
call fcn.1001b7ea
push 0x5fb7
push 0x88996
push 0x9b8
push 0x100822b0
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff70]
test al, al
je 0x1000c6c5
mov ecx, 0x100822d0
call fcn.1001b7a0
push 0x1f7
push 0xbc6d4e
push 0x4e0
push 0x100822d0
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff78]
test al, al
je 0x1000c726
mov ecx, 0x10082300
call fcn.1001b7ea
push 0x5fb7
push 0x8979f
push 0x9c8
push 0x10082300
call fcn.100077cc
add esp, 0x10
mov al, byte [0x1007ff80]
test al, al
je 0x1000c778
mov ecx, 0x10082320
call fcn.1001b7a0
push 0x67
push 0x2595bc
push 0x75c
push 0x10082320
call fcn.100077cc
add esp, 0x10
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov al, byte [0x1007ff88]
test al, al
je 0x1000c7d9
mov ecx, 0x10082350
call fcn.1001b7a0
push 0x1f8
push 0xc05f94
push 0x4ec
push 0x10082350
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff90]
test al, al
je 0x1000c83a
mov ecx, 0x10082380
call fcn.1001b7ea
push 0x5fb8
push 0x8c59f
push 0x9e0
push 0x10082380
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ff98]
test al, al
je 0x1000c88c
mov ecx, 0x100823a0
call fcn.1001b7a0
push 0x1f8
push 0xc197c4
push 0x4f4
push 0x100823a0
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ffa0]
test al, al
je 0x1000c8ed
mov ecx, 0x100823d0
call fcn.1001b7ea
push 0x5fb8
push 0x8d3cf
push 0x9f0
push 0x100823d0
call fcn.100077cc
add esp, 0x10
mov al, byte [0x1007ffa8]
test al, al
je 0x1000c93f
mov ecx, 0x100823f0
call fcn.1001b7a0
push 0x68
push 0x269c88
push 0x77a
push 0x100823f0
call fcn.100077cc
add esp, 0x10
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov al, byte [0x1007ffb0]
test al, al
je 0x1000c9a0
mov ecx, 0x10082420
call fcn.1001b7a0
push 0x1f9
push 0xc597ea
push 0x500
push 0x10082420
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ffb8]
test al, al
je 0x1000ca01
mov ecx, 0x10082450
call fcn.1001b7ea
push 0x5fb9
push 0x90271
push 0xa08
push 0x10082450
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ffc0]
test al, al
je 0x1000ca53
mov ecx, 0x10082470
call fcn.1001b7a0
push 0x1f9
push 0xc6d392
push 0x508
push 0x10082470
call fcn.100077cc
add esp, 0x10
nop
mov al, byte [0x1007ffc8]
test al, al
je 0x1000cab4
mov ecx, 0x100824a0
call fcn.1001b7ea
push 0x5fb9
push 0x910ca
push 0xa18
push 0x100824a0
call fcn.100077cc
add esp, 0x10
mov al, byte [0x1007ffd0]
test al, al
je 0x1000cb06
mov ecx, 0x100824c0
call fcn.1001b7a0
push 0x69
push 0x27a6c4
push 0x798
push 0x100824c0
call fcn.100077cc
add esp, 0x10
pop esi
pop edi
pop ebx
ret
push 0x1007fee8
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000ba86
mov byte [0x10082034], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082010], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082020], xmm0
mov dword [0x10082030], 0x226611f2
push 0x1001849b
call fcn.100013b0
add esp, 4
push 0x1007fee8
call fcn.1001be53
add esp, 4
jmp 0x1000ba86
push 0x1007fef0
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000babb
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082040], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x10082050], xmm0
push 0x100184b7
call fcn.100013b0
add esp, 4
push 0x1007fef0
call fcn.1001be53
add esp, 4
jmp 0x1000babb
push 0x1007fef8
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000baef
mov byte [0x10082084], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082060], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082070], xmm0
mov dword [0x10082080], 0x226611f2
push 0x100184cd
call fcn.100013b0
add esp, 4
push 0x1007fef8
call fcn.1001be53
add esp, 4
jmp 0x1000baef
push 0x1007ff00
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bb24
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082090], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x100820a0], xmm0
push 0x100184e9
call fcn.100013b0
add esp, 4
push 0x1007ff00
call fcn.1001be53
add esp, 4
jmp 0x1000bb24
push 0x1007ff08
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bb5b
mov byte [0x100820d4], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x100820b0], xmm0
movaps xmm0, xmmword [0x10074640]
movaps xmmword [0x100820c0], xmm0
mov dword [0x100820d0], 0x226611f2
push 0x100184ff
call fcn.100013b0
add esp, 4
push 0x1007ff08
call fcn.1001be53
add esp, 4
jmp 0x1000bb5b
push 0x1007ff10
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bb99
mov byte [0x10082104], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x100820e0], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x100820f0], xmm0
mov dword [0x10082100], 0x226611f2
push 0x1001851b
call fcn.100013b0
add esp, 4
push 0x1007ff10
call fcn.1001be53
add esp, 4
jmp 0x1000bb99
push 0x1007ff18
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bbce
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082110], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x10082120], xmm0
push 0x10018537
call fcn.100013b0
add esp, 4
push 0x1007ff18
call fcn.1001be53
add esp, 4
jmp 0x1000bbce
push 0x1007ff20
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bc02
mov byte [0x10082154], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082130], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082140], xmm0
mov dword [0x10082150], 0x226611f2
push 0x1001854d
call fcn.100013b0
add esp, 4
push 0x1007ff20
call fcn.1001be53
add esp, 4
jmp 0x1000bc02
push 0x1007ff28
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bc37
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082160], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x10082170], xmm0
push 0x10018569
call fcn.100013b0
add esp, 4
push 0x1007ff28
call fcn.1001be53
add esp, 4
jmp 0x1000bc37
push 0x1007ff30
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bc6a
mov byte [0x100821a4], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082180], xmm0
movaps xmm0, xmmword [0x10074640]
movaps xmmword [0x10082190], xmm0
mov dword [0x100821a0], 0x226611f2
push 0x1001857f
call fcn.100013b0
add esp, 4
push 0x1007ff30
call fcn.1001be53
add esp, 4
jmp 0x1000bc6a
push 0x1007ff38
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bca5
mov byte [0x100821d4], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x100821b0], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x100821c0], xmm0
mov dword [0x100821d0], 0x226611f2
push 0x1001859b
call fcn.100013b0
add esp, 4
push 0x1007ff38
call fcn.1001be53
add esp, 4
jmp 0x1000bca5
push 0x1007ff40
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bcda
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x100821e0], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x100821f0], xmm0
push 0x100185b7
call fcn.100013b0
add esp, 4
push 0x1007ff40
call fcn.1001be53
add esp, 4
jmp 0x1000bcda
push 0x1007ff48
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bd0e
mov byte [0x10082224], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082200], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082210], xmm0
mov dword [0x10082220], 0x226611f2
push 0x100185cd
call fcn.100013b0
add esp, 4
push 0x1007ff48
call fcn.1001be53
add esp, 4
jmp 0x1000bd0e
push 0x1007ff50
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bd43
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082230], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x10082240], xmm0
push 0x100185e9
call fcn.100013b0
add esp, 4
push 0x1007ff50
call fcn.1001be53
add esp, 4
jmp 0x1000bd43
push 0x1007ff58
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bd76
mov byte [0x10082274], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082250], xmm0
movaps xmm0, xmmword [0x10074640]
movaps xmmword [0x10082260], xmm0
mov dword [0x10082270], 0x226611f2
push 0x100185ff
call fcn.100013b0
add esp, 4
push 0x1007ff58
call fcn.1001be53
add esp, 4
jmp 0x1000bd76
push 0x1007ff60
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bdb0
mov byte [0x100822a4], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082280], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082290], xmm0
mov dword [0x100822a0], 0x226611f2
push 0x1001861b
call fcn.100013b0
add esp, 4
push 0x1007ff60
call fcn.1001be53
add esp, 4
jmp 0x1000bdb0
push 0x1007ff68
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bde5
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x100822b0], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x100822c0], xmm0
push 0x10018637
call fcn.100013b0
add esp, 4
push 0x1007ff68
call fcn.1001be53
add esp, 4
jmp 0x1000bde5
push 0x1007ff70
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000be19
mov byte [0x100822f4], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x100822d0], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x100822e0], xmm0
mov dword [0x100822f0], 0x226611f2
push 0x1001864d
call fcn.100013b0
add esp, 4
push 0x1007ff70
call fcn.1001be53
add esp, 4
jmp 0x1000be19
push 0x1007ff78
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000be4e
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082300], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x10082310], xmm0
push 0x10018669
call fcn.100013b0
add esp, 4
push 0x1007ff78
call fcn.1001be53
add esp, 4
jmp 0x1000be4e
push 0x1007ff80
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000be81
mov byte [0x10082344], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082320], xmm0
movaps xmm0, xmmword [0x10074640]
movaps xmmword [0x10082330], xmm0
mov dword [0x10082340], 0x226611f2
push 0x1001867f
call fcn.100013b0
add esp, 4
push 0x1007ff80
call fcn.1001be53
add esp, 4
jmp 0x1000be81
push 0x1007ff88
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bebb
mov byte [0x10082374], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082350], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082360], xmm0
mov dword [0x10082370], 0x226611f2
push 0x1001869b
call fcn.100013b0
add esp, 4
push 0x1007ff88
call fcn.1001be53
add esp, 4
jmp 0x1000bebb
push 0x1007ff90
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bef0
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082380], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x10082390], xmm0
push 0x100186b7
call fcn.100013b0
add esp, 4
push 0x1007ff90
call fcn.1001be53
add esp, 4
jmp 0x1000bef0
push 0x1007ff98
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bf24
mov byte [0x100823c4], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x100823a0], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x100823b0], xmm0
mov dword [0x100823c0], 0x226611f2
push 0x100186cd
call fcn.100013b0
add esp, 4
push 0x1007ff98
call fcn.1001be53
add esp, 4
jmp 0x1000bf24
push 0x1007ffa0
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bf59
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x100823d0], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x100823e0], xmm0
push 0x100186e9
call fcn.100013b0
add esp, 4
push 0x1007ffa0
call fcn.1001be53
add esp, 4
jmp 0x1000bf59
push 0x1007ffa8
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bf8c
mov byte [0x10082414], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x100823f0], xmm0
movaps xmm0, xmmword [0x10074640]
movaps xmmword [0x10082400], xmm0
mov dword [0x10082410], 0x226611f2
push 0x100186ff
call fcn.100013b0
add esp, 4
push 0x1007ffa8
call fcn.1001be53
add esp, 4
jmp 0x1000bf8c
push 0x1007ffb0
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bfc5
mov byte [0x10082444], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082420], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082430], xmm0
mov dword [0x10082440], 0x226611f2
push 0x1001871b
call fcn.100013b0
add esp, 4
push 0x1007ffb0
call fcn.1001be53
add esp, 4
jmp 0x1000bfc5
push 0x1007ffb8
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000bffa
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x10082450], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x10082460], xmm0
push 0x10018737
call fcn.100013b0
add esp, 4
push 0x1007ffb8
call fcn.1001be53
add esp, 4
jmp 0x1000bffa
push 0x1007ffc0
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000c02e
mov byte [0x10082494], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x10082470], xmm0
movaps xmm0, xmmword [0x10074610]
movaps xmmword [0x10082480], xmm0
mov dword [0x10082490], 0x226611f2
push 0x1001874d
call fcn.100013b0
add esp, 4
push 0x1007ffc0
call fcn.1001be53
add esp, 4
jmp 0x1000c02e
push 0x1007ffc8
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000c063
movaps xmm0, xmmword [0x10074620]
movaps xmmword [0x100824a0], xmm0
movsd xmm0, qword [0x10074630]
movsd qword [0x100824b0], xmm0
push 0x10018769
call fcn.100013b0
add esp, 4
push 0x1007ffc8
call fcn.1001be53
add esp, 4
jmp 0x1000c063
push 0x1007ffd0
call fcn.1001bdac
add esp, 4
test eax, eax
je 0x1000c096
mov byte [0x100824e4], 1
movaps xmm0, xmmword [0x10074600]
movaps xmmword [0x100824c0], xmm0
movaps xmm0, xmmword [0x10074640]
movaps xmmword [0x100824d0], xmm0
mov dword [0x100824e0], 0x226611f2
push 0x1001877f
call fcn.100013b0
add esp, 4
push 0x1007ffd0
call fcn.1001be53
add esp, 4
jmp 0x1000c096