Function at 0x100eaab0
Capabilities:
Resume thread

Disassembly:
sub esp, 0x2dc
mov eax, dword [0x101c52b4]
xor eax, esp
mov dword [esp + 0x2d8], eax
mov eax, dword [esp + 0x2e0]
push ebp
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0xc], eax
je 0x100eaae0
mov ecx, dword [0x102dd1ac]
mov dword [eax], ecx
xchg ebx, eax
xchg ebx, eax
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
cmp dword [0x102dd1a4], eax
je 0x100eab0b
mov eax, 0x10dd
pop ebp
mov ecx, dword [esp + 0x2d8]
xor ecx, esp
call fcn.1010e4d7
add esp, 0x2dc
ret 4
cmp dword [0x102dd1a8], ebp
je 0x100eab21
mov al, al
call fcn.100ea9b0
mov bl, bl
jmp 0x100eae2b
push ebx
push esi
push edi
mov esi, esi
mov bl, bl
mov eax, eax
mov esi, dword [0x102dd1b4]
cmp esi, ebp
je 0x100eac16
mov ebx, 0xd
lea ecx, [ecx]
cmp dword [esi + 4], ebp
je 0x100eabbe
mov eax, dword [esi + 0x10]
mov eax, eax
mov edx, dword [esi + 0x10]
mov edi, dword [edx + 0x20]
mov ebp, ebp
mov ecx, dword [esi + 0x10]
movzx edx, byte [ecx + 0x17]
cmp edi, edx
jge 0x100eab92
lea ecx, [ecx]
mov dword [esp + 0x10], ebp
mov dl, dl
mov edx, dword [esi + 0xc]
lea ecx, [esp + 0x10]
push ecx
push ebp
push eax
add edx, edi
push edx
call fcn.100eb590
mov dl, dl
cmp dword [esp + 0x10], ebp
jne 0x100eab92
mov edi, eax
sub edi, dword [esi + 0x10]
mov bl, bl
mov ecx, dword [esi + 0x10]
movzx edx, byte [ecx + 0x17]
cmp edi, edx
jl 0x100eab60
mov eax, dword [esi + 0x10]
movzx ecx, byte [eax + 0x17]
cmp edi, ecx
je 0x100eabb2
mov dword [0x102dd1a8], ebx
mov bl, bl
mov edx, dword [esi + 8]
mov dword [0x102dd1ac], edx
push eax
pop eax
mov ecx, ecx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov dword [eax], ecx
mov cl, cl
jmp 0x100eac0c
xchg ebx, eax
xchg ebx, eax
push eax
pop eax
mov eax, dword [esi + 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
add eax, dword [esi + 0xc]
lea edx, [eax + 5]
mov dl, dl
mov byte [eax], 0xe9
add eax, 1
sub ecx, edx
mov dword [eax], ecx
mov cl, cl
push edx
pop edx
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + 0x18]
add eax, 4
cmp eax, ecx
jae 0x100eabfc
mov edi, edi
mov byte [eax], 0xcc
add eax, 1
mov ch, ch
cmp eax, ecx
jb 0x100eabf0
push edx
pop edx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov dword [eax], ecx
mov al, al
push ebx
pop ebx
mov eax, eax
mov esi, dword [esi]
cmp esi, ebp
jne 0x100eab40
mov edi, dword [0x102dd1b0]
cmp edi, ebp
je 0x100eacef
mov ebp, dword [sym.imp.KERNEL32.DLL_GetThreadContext]
mov ebx, dword [sym.imp.KERNEL32.DLL_SetThreadContext]
mov bh, bh
mov dword [esp + 0x1c], 0x10001
mov eax, eax
mov eax, dword [edi + 4]
lea edx, [esp + 0x1c]
push edx
push eax
call ebp
test eax, eax
je 0x100eace3
mov esi, dword [0x102dd1b4]
test esi, esi
je 0x100eace3
mov eax, dword [esp + 0xd4]
cmp dword [esi + 4], 0
je 0x100eac9e
mov ecx, dword [esi + 0x10]
cmp eax, ecx
jb 0x100eacdd
lea edx, [ecx + 4]
cmp eax, edx
jae 0x100eacdd
sub eax, ecx
mov dword [esp + 0xd4], eax
push eax
pop eax
mov eax, dword [esi + 0xc]
add dword [esp + 0xd4], eax
xchg ebx, eax
xchg ebx, eax
mov edx, dword [edi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call ebx
mov ebx, ebx
jmp 0x100eacd6
mov ecx, dword [esi + 0xc]
cmp eax, ecx
jb 0x100eacdd
mov edx, dword [esi + 0x10]
movzx edx, byte [edx + 0x17]
add edx, ecx
cmp eax, edx
jae 0x100eacdd
sub eax, ecx
mov dword [esp + 0xd4], eax
mov ah, ah
mov eax, dword [esi + 0x10]
add dword [esp + 0xd4], eax
mov esi, esi
mov edx, dword [edi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call ebx
mov ch, ch
mov eax, dword [esp + 0xd4]
mov esi, dword [esi]
test esi, esi
jne 0x100eac64
mov edi, dword [edi]
test edi, edi
jne 0x100eac30
xor ebp, ebp
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
mov ebx, eax
push edx
pop edx
mov esi, dword [0x102dd1b4]
cmp esi, ebp
je 0x100eada6
mov ebp, dword [sym.imp.KERNEL32.DLL_FlushInstructionCache]
lea ecx, [ecx]
xchg ebx, eax
xchg ebx, eax
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
lea eax, [esp + 0x10]
push eax
movzx eax, byte [edx + 0x17]
push ecx
mov ecx, dword [esi + 0xc]
push eax
push ecx
call fcn.100bccd0
mov ebp, ebp
mov edx, dword [esi + 0x10]
movzx eax, byte [edx + 0x17]
mov ecx, dword [esi + 0xc]
push eax
push ecx
push ebx
call ebp
mov ch, ch
xor ecx, ecx
cmp dword [esi + 4], ecx
je 0x100ead89
mov eax, dword [esi + 0x10]
cmp eax, ecx
je 0x100ead89
mov edx, eax
and edx, 0xffff0000
mov bh, bh
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ecx
mov al, al
mov edi, dword [edx + 8]
mov dword [eax + 0x18], edi
mov al, al
mov dword [edx + 8], eax
mov edx, edx
mov eax, eax
mov dword [esi + 0x10], ecx
mov bl, bl
mov cl, cl
mov edi, dword [esi]
mov ebp, ebp
push esi
call fcn.100fcea8
add esp, 4
mov cl, cl
mov esi, edi
mov eax, eax
test edi, edi
jne 0x100ead10
xor ebp, ebp
mov dword [0x102dd1b4], ebp
push edx
pop edx
mov esi, dword [0x102dd198]
cmp esi, ebp
je 0x100eadd5
mov cl, cl
lea edx, [esp + 0x14]
push edx
push 0x20
push 0x10000
push esi
call fcn.100bccd0
push edx
pop edx
mov esi, dword [esi + 4]
cmp esi, ebp
jne 0x100eadb8
mov dl, dl
mov esi, dword [0x102dd1b0]
cmp esi, ebp
je 0x100eae06
mov ebx, dword [sym.imp.KERNEL32.DLL_ResumeThread]
mov eax, dword [esi + 4]
push eax
call ebx
mov dh, dh
mov edi, dword [esi]
mov cl, cl
push esi
call fcn.100fcea8
add esp, 4
push ecx
pop ecx
mov esi, edi
push ecx
pop ecx
cmp edi, ebp
jne 0x100eade7
mov dword [0x102dd1b0], ebp
mov dh, dh
mov dword [0x102dd1a4], ebp
mov edx, edx
mov eax, dword [esp + 0x18]
cmp eax, ebp
pop edi
pop esi
pop ebx
je 0x100eae2b
mov ecx, dword [0x102dd1ac]
mov dword [eax], ecx
push ebx
pop ebx
mov ecx, dword [esp + 0x2dc]
mov eax, dword [0x102dd1a8]
pop ebp
xor ecx, esp
call fcn.1010e4d7
add esp, 0x2dc
ret 4