Function at 0x10006c2f
Capabilities:
Resume thread

Disassembly:
push ebx
push edi
push esi
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi + 0xa4]
add eax, 8
lea ecx, [esp + 0x1c]
push 0
push 4
push ecx
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov al, byte [0x100beb68]
test al, al
je 0x10007264
mov ecx, 0x100beb50
call fcn.10022d6e
push 0x84
push 0xecf5a9d0
push 0x29d6
push 0x100beb50
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100beb90]
test al, al
je 0x100072b9
mov ecx, 0x100beb70
call fcn.10022db8
push 0x5a
push 0x339f
push 0x108200
push 0x100beb70
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bebb8]
test al, al
je 0x1000731e
mov ecx, 0x100beba0
call fcn.10022d6e
push 0x84
push 0xeed08290
push 0x2a2a
push 0x100beba0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bebe0]
test al, al
je 0x10007373
mov ebx, dword [esp + 0x18]
mov ecx, 0x100bebc0
call fcn.10022db8
push 0x5a
push 0x3406
push 0x10a304
push 0x100bebc0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bec08]
test al, al
je 0x100073d8
mov ecx, 0x100bebf0
call fcn.10022e02
push 0xd9cc
push 0xeea53e6
push 0x7b4da
push 0x100bebf0
call fcn.100040e3
add esp, 0x10
mov eax, dword [ebx + 0x28]
add eax, dword [esp + 0x1c]
mov dword [edi + 0xb0], eax
mov al, byte [0x100bec28]
test al, al
je 0x10007434
mov ecx, 0x100bec10
call fcn.10022d6e
push 0x85
push 0xf45faf80
push 0x2aa8
push 0x100bec10
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bec50]
test al, al
je 0x10007489
mov ecx, 0x100bec30
call fcn.10022db8
push 0x5b
push 0x353b
push 0x10d48a
push 0x100bec30
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bec78]
test al, al
je 0x100074ee
mov ecx, 0x100bec60
call fcn.10022d6e
push 0x85
push 0xf63ffd80
push 0x2afc
push 0x100bec60
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100beca0]
test al, al
je 0x10007543
mov ecx, 0x100bec80
call fcn.10022db8
push 0x5b
push 0x35a4
push 0x10f58e
push 0x100bec80
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100becc8]
test al, al
je 0x100075a8
mov ecx, 0x100becb0
call fcn.10022e02
push 0xd9cd
push 0xf60a210
push 0x7daf0
push 0x100becb0
call fcn.100040e3
add esp, 0x10
push edi
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov al, byte [0x100bece8]
test al, al
je 0x10007604
mov ecx, 0x100becd0
call fcn.10022d6e
push 0x86
push 0xfbe4ff70
push 0x2b7a
push 0x100becd0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bed10]
test al, al
je 0x10007659
mov ecx, 0x100becf0
call fcn.10022db8
push 0x5c
push 0x36de
push 0x112714
push 0x100becf0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bed38]
test al, al
je 0x100076be
mov ecx, 0x100bed20
call fcn.10022d6e
push 0x86
push 0xfdcac2b0
push 0x2bce
push 0x100bed20
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bed60]
test al, al
je 0x10007713
mov ecx, 0x100bed40
call fcn.10022db8
push 0x5c
push 0x3747
push 0x114818
push 0x100bed40
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bed88]
test al, al
je 0x10007778
mov ecx, 0x100bed70
call fcn.10022e02
push 0xd9ce
push 0xfd8a132
push 0x80106
push 0x100bed70
call fcn.100040e3
add esp, 0x10
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov al, byte [0x100beda8]
test al, al
je 0x100077d4
mov ecx, 0x100bed90
call fcn.10022d6e
push 0x87
push 0x38599a0
push 0x2c4c
push 0x100bed90
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bedd0]
test al, al
je 0x10007829
mov ecx, 0x100bedb0
call fcn.10022db8
push 0x5d
push 0x3886
push 0x11799e
push 0x100bedb0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bedf8]
test al, al
je 0x1000788e
mov ecx, 0x100bede0
call fcn.10022d6e
push 0x87
push 0x570d220
push 0x2ca0
push 0x100bede0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bee20]
test al, al
je 0x100078e3
mov ecx, 0x100bee00
call fcn.10022db8
push 0x5d
push 0x38f1
push 0x119aa2
push 0x100bee00
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bee48]
test al, al
je 0x10007948
mov ecx, 0x100bee30
call fcn.10022e02
push 0xd9cf
push 0x1052514c
push 0x8271c
push 0x100bee30
call fcn.100040e3
add esp, 0x10
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [0x100bee68]
test al, al
je 0x100079a4
mov ecx, 0x100bee50
call fcn.10022d6e
push 0x88
push 0xb417e10
push 0x2d1e
push 0x100bee50
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bee90]
test al, al
je 0x100079f9
mov ecx, 0x100bee70
call fcn.10022db8
push 0x5e
push 0x3a34
push 0x11cc28
push 0x100bee70
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100beeb8]
test al, al
je 0x10007a5e
mov ecx, 0x100beea0
call fcn.10022d6e
push 0x88
push 0xd322bd0
push 0x2d72
push 0x100beea0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100beee0]
test al, al
je 0x10007ab3
mov ecx, 0x100beec0
call fcn.10022db8
push 0x5e
push 0x3aa0
push 0x11ed2c
push 0x100beec0
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bef08]
test al, al
je 0x10007b18
mov ecx, 0x100beef0
call fcn.10022e02
push 0xd9d0
push 0x10cdb25e
push 0x84d32
push 0x100beef0
call fcn.100040e3
add esp, 0x10
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [0x100bef28]
test al, al
je 0x10007b74
mov ecx, 0x100bef10
call fcn.10022d6e
push 0x89
push 0x1318acc0
push 0x2df0
push 0x100bef10
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bef50]
test al, al
je 0x10007bc9
mov ecx, 0x100bef30
call fcn.10022db8
push 0x5f
push 0x3be8
push 0x121eb2
push 0x100bef30
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100bef78]
test al, al
je 0x10007c2e
mov ecx, 0x100bef60
call fcn.10022d6e
push 0x89
push 0x150ecfc0
push 0x2e44
push 0x100bef60
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100befa0]
test al, al
je 0x10007c83
mov ecx, 0x100bef80
call fcn.10022db8
push 0x5f
push 0x3c55
push 0x123fb6
push 0x100bef80
call fcn.100040e3
add esp, 0x10
mov al, byte [0x100befc8]
test al, al
je 0x10007ce8
mov ecx, 0x100befb0
call fcn.10022e02
push 0xd9d1
push 0x114ac468
push 0x87348
push 0x100befb0
call fcn.100040e3
add esp, 0x10
pop esi
pop edi
pop ebx
ret
push 0x100beb68
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006c62
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100beb50], xmm0
mov dword [0x100beb60], 0x715a41e3
mov word [0x100beb64], 0x182
push 0x1001dc06
call fcn.100013b0
add esp, 4
push 0x100beb68
call fcn.1002346b
add esp, 4
jmp 0x10006c62
push 0x100beb90
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006c95
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100beb70], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100beb80], xmm0
mov dword [0x100beb88], 0x483841a2
mov word [0x100beb8c], 0x182
push 0x1001dc1c
call fcn.100013b0
add esp, 4
push 0x100beb90
call fcn.1002346b
add esp, 4
jmp 0x10006c95
push 0x100bebb8
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006cc5
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100beba0], xmm0
mov dword [0x100bebb0], 0x715a41e3
mov word [0x100bebb4], 0x182
push 0x1001dc2e
call fcn.100013b0
add esp, 4
push 0x100bebb8
call fcn.1002346b
add esp, 4
jmp 0x10006cc5
push 0x100bebe0
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006cf8
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bebc0], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bebd0], xmm0
mov dword [0x100bebd8], 0x483841a2
mov word [0x100bebdc], 0x182
push 0x1001dc44
call fcn.100013b0
add esp, 4
push 0x100bebe0
call fcn.1002346b
add esp, 4
jmp 0x10006cf8
push 0x100bec08
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006d2c
mov byte [0x100bec06], 1
movaps xmm0, xmmword [0x100ae270]
movaps xmmword [0x100bebf0], xmm0
mov dword [0x100bec00], 0x465b6bc3
mov word [0x100bec04], 0x6aab
push 0x1001dc56
call fcn.100013b0
add esp, 4
push 0x100bec08
call fcn.1002346b
add esp, 4
jmp 0x10006d2c
push 0x100bec28
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006d6c
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bec10], xmm0
mov dword [0x100bec20], 0x715a41e3
mov word [0x100bec24], 0x182
push 0x1001dc6c
call fcn.100013b0
add esp, 4
push 0x100bec28
call fcn.1002346b
add esp, 4
jmp 0x10006d6c
push 0x100bec50
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006d9f
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bec30], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bec40], xmm0
mov dword [0x100bec48], 0x483841a2
mov word [0x100bec4c], 0x182
push 0x1001dc82
call fcn.100013b0
add esp, 4
push 0x100bec50
call fcn.1002346b
add esp, 4
jmp 0x10006d9f
push 0x100bec78
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006dcf
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bec60], xmm0
mov dword [0x100bec70], 0x715a41e3
mov word [0x100bec74], 0x182
push 0x1001dc94
call fcn.100013b0
add esp, 4
push 0x100bec78
call fcn.1002346b
add esp, 4
jmp 0x10006dcf
push 0x100beca0
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006e02
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bec80], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bec90], xmm0
mov dword [0x100bec98], 0x483841a2
mov word [0x100bec9c], 0x182
push 0x1001dcaa
call fcn.100013b0
add esp, 4
push 0x100beca0
call fcn.1002346b
add esp, 4
jmp 0x10006e02
push 0x100becc8
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006e32
mov byte [0x100becc6], 1
movaps xmm0, xmmword [0x100ae270]
movaps xmmword [0x100becb0], xmm0
mov dword [0x100becc0], 0x465b6bc3
mov word [0x100becc4], 0x6aab
push 0x1001dcbc
call fcn.100013b0
add esp, 4
push 0x100becc8
call fcn.1002346b
add esp, 4
jmp 0x10006e32
push 0x100bece8
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006e6f
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100becd0], xmm0
mov dword [0x100bece0], 0x715a41e3
mov word [0x100bece4], 0x182
push 0x1001dcd2
call fcn.100013b0
add esp, 4
push 0x100bece8
call fcn.1002346b
add esp, 4
jmp 0x10006e6f
push 0x100bed10
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006ea2
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100becf0], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bed00], xmm0
mov dword [0x100bed08], 0x483841a2
mov word [0x100bed0c], 0x182
push 0x1001dce8
call fcn.100013b0
add esp, 4
push 0x100bed10
call fcn.1002346b
add esp, 4
jmp 0x10006ea2
push 0x100bed38
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006ed2
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bed20], xmm0
mov dword [0x100bed30], 0x715a41e3
mov word [0x100bed34], 0x182
push 0x1001dcfa
call fcn.100013b0
add esp, 4
push 0x100bed38
call fcn.1002346b
add esp, 4
jmp 0x10006ed2
push 0x100bed60
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006f05
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bed40], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bed50], xmm0
mov dword [0x100bed58], 0x483841a2
mov word [0x100bed5c], 0x182
push 0x1001dd10
call fcn.100013b0
add esp, 4
push 0x100bed60
call fcn.1002346b
add esp, 4
jmp 0x10006f05
push 0x100bed88
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006f35
mov byte [0x100bed86], 1
movaps xmm0, xmmword [0x100ae270]
movaps xmmword [0x100bed70], xmm0
mov dword [0x100bed80], 0x465b6bc3
mov word [0x100bed84], 0x6aab
push 0x1001dd22
call fcn.100013b0
add esp, 4
push 0x100bed88
call fcn.1002346b
add esp, 4
jmp 0x10006f35
push 0x100beda8
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006f71
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bed90], xmm0
mov dword [0x100beda0], 0x715a41e3
mov word [0x100beda4], 0x182
push 0x1001dd38
call fcn.100013b0
add esp, 4
push 0x100beda8
call fcn.1002346b
add esp, 4
jmp 0x10006f71
push 0x100bedd0
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006fa4
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bedb0], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bedc0], xmm0
mov dword [0x100bedc8], 0x483841a2
mov word [0x100bedcc], 0x182
push 0x1001dd4e
call fcn.100013b0
add esp, 4
push 0x100bedd0
call fcn.1002346b
add esp, 4
jmp 0x10006fa4
push 0x100bedf8
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10006fd4
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bede0], xmm0
mov dword [0x100bedf0], 0x715a41e3
mov word [0x100bedf4], 0x182
push 0x1001dd60
call fcn.100013b0
add esp, 4
push 0x100bedf8
call fcn.1002346b
add esp, 4
jmp 0x10006fd4
push 0x100bee20
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10007007
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bee00], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bee10], xmm0
mov dword [0x100bee18], 0x483841a2
mov word [0x100bee1c], 0x182
push 0x1001dd76
call fcn.100013b0
add esp, 4
push 0x100bee20
call fcn.1002346b
add esp, 4
jmp 0x10007007
push 0x100bee48
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10007037
mov byte [0x100bee46], 1
movaps xmm0, xmmword [0x100ae270]
movaps xmmword [0x100bee30], xmm0
mov dword [0x100bee40], 0x465b6bc3
mov word [0x100bee44], 0x6aab
push 0x1001dd88
call fcn.100013b0
add esp, 4
push 0x100bee48
call fcn.1002346b
add esp, 4
jmp 0x10007037
push 0x100bee68
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10007073
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bee50], xmm0
mov dword [0x100bee60], 0x715a41e3
mov word [0x100bee64], 0x182
push 0x1001dd9e
call fcn.100013b0
add esp, 4
push 0x100bee68
call fcn.1002346b
add esp, 4
jmp 0x10007073
push 0x100bee90
call fcn.100233c4
add esp, 4
test eax, eax
je 0x100070a6
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bee70], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bee80], xmm0
mov dword [0x100bee88], 0x483841a2
mov word [0x100bee8c], 0x182
push 0x1001ddb4
call fcn.100013b0
add esp, 4
push 0x100bee90
call fcn.1002346b
add esp, 4
jmp 0x100070a6
push 0x100beeb8
call fcn.100233c4
add esp, 4
test eax, eax
je 0x100070d6
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100beea0], xmm0
mov dword [0x100beeb0], 0x715a41e3
mov word [0x100beeb4], 0x182
push 0x1001ddc6
call fcn.100013b0
add esp, 4
push 0x100beeb8
call fcn.1002346b
add esp, 4
jmp 0x100070d6
push 0x100beee0
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10007109
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100beec0], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100beed0], xmm0
mov dword [0x100beed8], 0x483841a2
mov word [0x100beedc], 0x182
push 0x1001dddc
call fcn.100013b0
add esp, 4
push 0x100beee0
call fcn.1002346b
add esp, 4
jmp 0x10007109
push 0x100bef08
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10007139
mov byte [0x100bef06], 1
movaps xmm0, xmmword [0x100ae270]
movaps xmmword [0x100beef0], xmm0
mov dword [0x100bef00], 0x465b6bc3
mov word [0x100bef04], 0x6aab
push 0x1001ddee
call fcn.100013b0
add esp, 4
push 0x100bef08
call fcn.1002346b
add esp, 4
jmp 0x10007139
push 0x100bef28
call fcn.100233c4
add esp, 4
test eax, eax
je 0x10007174
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bef10], xmm0
mov dword [0x100bef20], 0x715a41e3
mov word [0x100bef24], 0x182
push 0x1001de04
call fcn.100013b0
add esp, 4
push 0x100bef28
call fcn.1002346b
add esp, 4
jmp 0x10007174
push 0x100bef50
call fcn.100233c4
add esp, 4
test eax, eax
je 0x100071a7
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bef30], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bef40], xmm0
mov dword [0x100bef48], 0x483841a2
mov word [0x100bef4c], 0x182
push 0x1001de1a
call fcn.100013b0
add esp, 4
push 0x100bef50
call fcn.1002346b
add esp, 4
jmp 0x100071a7
push 0x100bef78
call fcn.100233c4
add esp, 4
test eax, eax
je 0x100071d7
movaps xmm0, xmmword [0x100ae240]
movaps xmmword [0x100bef60], xmm0
mov dword [0x100bef70], 0x715a41e3
mov word [0x100bef74], 0x182
push 0x1001de2c
call fcn.100013b0
add esp, 4
push 0x100bef78
call fcn.1002346b
add esp, 4
jmp 0x100071d7
push 0x100befa0
call fcn.100233c4
add esp, 4
test eax, eax
je 0x1000720a
movaps xmm0, xmmword [0x100ae250]
movaps xmmword [0x100bef80], xmm0
movsd xmm0, qword [0x100ae260]
movsd qword [0x100bef90], xmm0
mov dword [0x100bef98], 0x483841a2
mov word [0x100bef9c], 0x182
push 0x1001de42
call fcn.100013b0
add esp, 4
push 0x100befa0
call fcn.1002346b
add esp, 4
jmp 0x1000720a
push 0x100befc8
call fcn.100233c4
add esp, 4
test eax, eax
je 0x1000723a
mov byte [0x100befc6], 1
movaps xmm0, xmmword [0x100ae270]
movaps xmmword [0x100befb0], xmm0
mov dword [0x100befc0], 0x465b6bc3
mov word [0x100befc4], 0x6aab
push 0x1001de54
call fcn.100013b0
add esp, 4
push 0x100befc8
call fcn.1002346b
add esp, 4
jmp 0x1000723a