Function at 0x100d0ad0
Capabilities:
Resume thread

Disassembly:
sub esp, 0x2dc
mov eax, dword [0x101a42b4]
xor eax, esp
mov dword [esp + 0x2d8], eax
mov eax, dword [esp + 0x2e0]
push ebp
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0xc], eax
je 0x100d0b00
mov ecx, dword [0x102bc184]
mov dword [eax], ecx
mov dh, dh
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
cmp dword [0x102bc17c], eax
je 0x100d0b2b
mov eax, 0x10dd
pop ebp
mov ecx, dword [esp + 0x2d8]
xor ecx, esp
call fcn.100f43d6
add esp, 0x2dc
ret 4
cmp dword [0x102bc180], ebp
je 0x100d0b41
mov bh, bh
call fcn.100d09c0
mov ecx, ecx
jmp 0x100d0e5b
push ebx
push esi
push edi
mov bl, bl
test dl, dl
test eax, 0x38fa
mov esi, dword [0x102bc18c]
cmp esi, ebp
je 0x100d0c38
mov ebx, 0xd
cmp dword [esi + 4], ebp
je 0x100d0be2
mov eax, dword [esi + 0x10]
mov ebp, ebp
mov edx, dword [esi + 0x10]
mov edi, dword [edx + 0x20]
mov ch, ch
mov ecx, dword [esi + 0x10]
movzx edx, byte [ecx + 0x17]
cmp edi, edx
jge 0x100d0bb3
mov dword [esp + 0x10], ebp
mov bh, bh
mov edx, dword [esi + 0xc]
lea ecx, [esp + 0x10]
push ecx
push ebp
push eax
add edx, edi
push edx
call fcn.100d15c0
mov ah, ah
cmp dword [esp + 0x10], ebp
jne 0x100d0bb3
mov edi, eax
sub edi, dword [esi + 0x10]
mov edi, edi
mov ecx, dword [esi + 0x10]
movzx edx, byte [ecx + 0x17]
cmp edi, edx
jl 0x100d0b81
mov eax, dword [esi + 0x10]
movzx ecx, byte [eax + 0x17]
cmp edi, ecx
je 0x100d0bd6
mov dword [0x102bc180], ebx
test eax, 0x6d3e
mov edx, dword [esi + 8]
mov dword [0x102bc184], edx
test ch, ch
mov ebx, ebx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov dword [eax], ecx
xchg ebx, eax
xchg ebx, eax
jmp 0x100d0c2e
mov ebp, ebp
test ecx, ecx
mov eax, dword [esi + 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
add eax, dword [esi + 0xc]
lea edx, [eax + 5]
test edi, edi
mov byte [eax], 0xe9
add eax, 1
sub ecx, edx
mov dword [eax], ecx
push ebx
pop ebx
mov al, al
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + 0x18]
add eax, 4
cmp eax, ecx
jae 0x100d0c1e
mov byte [eax], 0xcc
add eax, 1
push ebx
pop ebx
cmp eax, ecx
jb 0x100d0c12
test esi, esi
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov dword [eax], ecx
mov bl, bl
mov ah, ah
mov ebx, ebx
mov esi, dword [esi]
cmp esi, ebp
jne 0x100d0b60
mov edi, dword [0x102bc188]
cmp edi, ebp
je 0x100d0d1b
mov ebp, dword [sym.imp.KERNEL32.DLL_GetThreadContext]
mov ebx, dword [sym.imp.KERNEL32.DLL_SetThreadContext]
mov ah, ah
mov dword [esp + 0x1c], 0x10001
test edi, edi
mov eax, dword [edi + 4]
lea edx, [esp + 0x1c]
push edx
push eax
call ebp
test eax, eax
je 0x100d0d0f
mov esi, dword [0x102bc18c]
test esi, esi
je 0x100d0d0f
mov eax, dword [esp + 0xd4]
cmp dword [esi + 4], 0
je 0x100d0cc6
mov ecx, dword [esi + 0x10]
cmp eax, ecx
jb 0x100d0d05
lea edx, [ecx + 4]
cmp eax, edx
jae 0x100d0d05
sub eax, ecx
mov dword [esp + 0xd4], eax
mov ah, ah
mov eax, dword [esi + 0xc]
add dword [esp + 0xd4], eax
nop
mov edx, dword [edi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call ebx
test eax, 0x2a96
jmp 0x100d0cfe
mov ecx, dword [esi + 0xc]
cmp eax, ecx
jb 0x100d0d05
mov edx, dword [esi + 0x10]
movzx edx, byte [edx + 0x17]
add edx, ecx
cmp eax, edx
jae 0x100d0d05
sub eax, ecx
mov dword [esp + 0xd4], eax
mov esi, esi
mov eax, dword [esi + 0x10]
add dword [esp + 0xd4], eax
test eax, eax
mov edx, dword [edi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call ebx
mov dh, dh
mov eax, dword [esp + 0xd4]
mov esi, dword [esi]
test esi, esi
jne 0x100d0c86
mov edi, dword [edi]
test edi, edi
jne 0x100d0c52
xor ebp, ebp
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
mov ebx, eax
mov edx, edx
mov esi, dword [0x102bc18c]
cmp esi, ebp
je 0x100d0dd6
mov ebp, dword [sym.imp.KERNEL32.DLL_FlushInstructionCache]
lea esp, [esp]
test ecx, ecx
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
lea eax, [esp + 0x10]
push eax
movzx eax, byte [edx + 0x17]
push ecx
mov ecx, dword [esi + 0xc]
push eax
push ecx
call fcn.100a3450
test cl, cl
mov edx, dword [esi + 0x10]
movzx eax, byte [edx + 0x17]
mov ecx, dword [esi + 0xc]
push eax
push ecx
push ebx
call ebp
test edx, edx
xor ecx, ecx
cmp dword [esi + 4], ecx
je 0x100d0db9
mov eax, dword [esi + 0x10]
cmp eax, ecx
je 0x100d0db9
mov edx, eax
and edx, 0xffff0000
mov eax, eax
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ecx
mov eax, eax
mov edi, dword [edx + 8]
mov dword [eax + 0x18], edi
mov bh, bh
mov dword [edx + 8], eax
test edx, edx
push eax
pop eax
mov dword [esi + 0x10], ecx
mov ch, ch
mov bl, bl
mov edi, dword [esi]
mov ebp, ebp
push esi
call fcn.100e2dad
add esp, 4
xchg ebx, eax
xchg ebx, eax
mov esi, edi
test bh, bh
test edi, edi
jne 0x100d0d40
xor ebp, ebp
mov dword [0x102bc18c], ebp
test ah, ah
mov esi, dword [0x102bc170]
cmp esi, ebp
je 0x100d0e05
mov ah, ah
lea edx, [esp + 0x14]
push edx
push 0x20
push 0x10000
push esi
call fcn.100a3450
mov ebx, ebx
mov esi, dword [esi + 4]
cmp esi, ebp
jne 0x100d0de8
test eax, eax
mov esi, dword [0x102bc188]
cmp esi, ebp
je 0x100d0e36
mov ebx, dword [sym.imp.KERNEL32.DLL_ResumeThread]
mov eax, dword [esi + 4]
push eax
call ebx
mov edx, edx
mov edi, dword [esi]
mov ah, ah
push esi
call fcn.100e2dad
add esp, 4
mov ah, ah
mov esi, edi
test al, al
cmp edi, ebp
jne 0x100d0e17
mov dword [0x102bc188], ebp
test dh, dh
mov dword [0x102bc17c], ebp
push ebx
pop ebx
mov eax, dword [esp + 0x18]
cmp eax, ebp
pop edi
pop esi
pop ebx
je 0x100d0e5b
mov ecx, dword [0x102bc184]
mov dword [eax], ecx
mov esi, esi
mov ecx, dword [esp + 0x2dc]
mov eax, dword [0x102bc180]
pop ebp
xor ecx, esp
call fcn.100f43d6
add esp, 0x2dc
ret 4