Function at 0x100da700
Capabilities:
Resume thread

Disassembly:
sub esp, 0x2dc
mov eax, dword [0x101b03d4]
xor eax, esp
mov dword [esp + 0x2d8], eax
mov eax, dword [esp + 0x2e0]
push ebp
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0xc], eax
je 0x100da730
mov ecx, dword [0x102c8204]
mov dword [eax], ecx
mov dl, dl
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
cmp dword [0x102c81fc], eax
je 0x100da75b
mov eax, 0x10dd
pop ebp
mov ecx, dword [esp + 0x2d8]
xor ecx, esp
call fcn.100fb12a
add esp, 0x2dc
ret 4
cmp dword [0x102c8200], ebp
je 0x100da771
mov al, al
call fcn.100da600
push edx
pop edx
jmp 0x100daa77
push ebx
push esi
push edi
push ecx
pop ecx
mov esi, esi
mov cl, cl
mov esi, dword [0x102c820c]
cmp esi, ebp
je 0x100da865
mov ebx, 0xd
lea ecx, [ecx]
cmp dword [esi + 4], ebp
je 0x100da80d
mov eax, dword [esi + 0x10]
mov cl, cl
mov edx, dword [esi + 0x10]
mov edi, dword [edx + 0x20]
push ebx
pop ebx
mov ecx, dword [esi + 0x10]
movzx edx, byte [ecx + 0x17]
cmp edi, edx
jge 0x100da7e2
lea ecx, [ecx]
mov dword [esp + 0x10], ebp
mov esi, esi
mov edx, dword [esi + 0xc]
lea ecx, [esp + 0x10]
push ecx
push ebp
push eax
add edx, edi
push edx
call fcn.100db2d0
mov cl, cl
cmp dword [esp + 0x10], ebp
jne 0x100da7e2
mov edi, eax
sub edi, dword [esi + 0x10]
mov eax, eax
mov ecx, dword [esi + 0x10]
movzx edx, byte [ecx + 0x17]
cmp edi, edx
jl 0x100da7b0
mov eax, dword [esi + 0x10]
movzx ecx, byte [eax + 0x17]
cmp edi, ecx
je 0x100da802
mov dword [0x102c8200], ebx
mov ah, ah
mov edx, dword [esi + 8]
mov dword [0x102c8204], edx
mov ah, ah
mov cl, cl
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov dword [eax], ecx
nop
jmp 0x100da85b
mov ah, ah
xchg ebx, eax
xchg ebx, eax
mov eax, dword [esi + 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
add eax, dword [esi + 0xc]
lea edx, [eax + 5]
mov bl, bl
mov byte [eax], 0xe9
add eax, 1
sub ecx, edx
mov dword [eax], ecx
mov edx, edx
mov dl, dl
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + 0x18]
add eax, 4
cmp eax, ecx
jae 0x100da84c
lea ecx, [ecx]
mov byte [eax], 0xcc
add eax, 1
mov ah, ah
cmp eax, ecx
jb 0x100da840
mov esi, esi
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov dword [eax], ecx
mov ecx, ecx
mov dl, dl
nop
mov esi, dword [esi]
cmp esi, ebp
jne 0x100da790
mov edi, dword [0x102c8208]
cmp edi, ebp
je 0x100da93f
mov ebp, dword [sym.imp.KERNEL32.DLL_GetThreadContext]
mov ebx, dword [sym.imp.KERNEL32.DLL_SetThreadContext]
nop
push ebx
pop ebx
mov dword [esp + 0x1c], 0x10001
mov edx, edx
mov eax, dword [edi + 4]
lea edx, [esp + 0x1c]
push edx
push eax
call ebp
test eax, eax
je 0x100da933
mov esi, dword [0x102c820c]
test esi, esi
je 0x100da933
mov eax, dword [esp + 0xd4]
cmp dword [esi + 4], 0
je 0x100da8ee
mov ecx, dword [esi + 0x10]
cmp eax, ecx
jb 0x100da92d
lea edx, [ecx + 4]
cmp eax, edx
jae 0x100da92d
sub eax, ecx
mov dword [esp + 0xd4], eax
mov dh, dh
mov eax, dword [esi + 0xc]
add dword [esp + 0xd4], eax
mov edx, edx
mov edx, dword [edi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call ebx
mov ah, ah
jmp 0x100da926
mov ecx, dword [esi + 0xc]
cmp eax, ecx
jb 0x100da92d
mov edx, dword [esi + 0x10]
movzx edx, byte [edx + 0x17]
add edx, ecx
cmp eax, edx
jae 0x100da92d
sub eax, ecx
mov dword [esp + 0xd4], eax
mov edi, edi
mov eax, dword [esi + 0x10]
add dword [esp + 0xd4], eax
mov ecx, ecx
mov edx, dword [edi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call ebx
mov ebx, ebx
mov eax, dword [esp + 0xd4]
mov esi, dword [esi]
test esi, esi
jne 0x100da8b4
mov edi, dword [edi]
test edi, edi
jne 0x100da880
xor ebp, ebp
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
mov ebx, eax
mov dl, dl
mov esi, dword [0x102c820c]
cmp esi, ebp
je 0x100da9f5
mov ebp, dword [sym.imp.KERNEL32.DLL_FlushInstructionCache]
lea ecx, [ecx]
mov cl, cl
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
lea eax, [esp + 0x10]
push eax
movzx eax, byte [edx + 0x17]
push ecx
mov ecx, dword [esi + 0xc]
push eax
push ecx
call fcn.100ae430
push edx
pop edx
mov edx, dword [esi + 0x10]
movzx eax, byte [edx + 0x17]
mov ecx, dword [esi + 0xc]
push eax
push ecx
push ebx
call ebp
mov dl, dl
xor ecx, ecx
cmp dword [esi + 4], ecx
je 0x100da9d8
mov eax, dword [esi + 0x10]
cmp eax, ecx
je 0x100da9d8
mov edx, eax
and edx, 0xffff0000
xchg ebx, eax
xchg ebx, eax
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ecx
push edx
pop edx
mov edi, dword [edx + 8]
mov dword [eax + 0x18], edi
mov ebp, ebp
mov dword [edx + 8], eax
mov edx, edx
nop
mov dword [esi + 0x10], ecx
push edx
pop edx
mov bh, bh
mov edi, dword [esi]
push edx
pop edx
push esi
call fcn.100e9b00
add esp, 4
mov al, al
mov esi, edi
mov dh, dh
test edi, edi
jne 0x100da960
xor ebp, ebp
mov dword [0x102c820c], ebp
nop
mov esi, dword [0x102c81f0]
cmp esi, ebp
je 0x100daa23
mov bh, bh
lea edx, [esp + 0x14]
push edx
push 0x20
push 0x10000
push esi
call fcn.100ae430
mov edx, edx
mov esi, dword [esi + 4]
cmp esi, ebp
jne 0x100daa06
xchg ebx, eax
xchg ebx, eax
mov esi, dword [0x102c8208]
cmp esi, ebp
je 0x100daa53
mov ebx, dword [sym.imp.KERNEL32.DLL_ResumeThread]
mov eax, dword [esi + 4]
push eax
call ebx
mov dl, dl
mov edi, dword [esi]
mov ch, ch
push esi
call fcn.100e9b00
add esp, 4
mov dh, dh
mov esi, edi
nop
cmp edi, ebp
jne 0x100daa35
mov dword [0x102c8208], ebp
push eax
pop eax
mov dword [0x102c81fc], ebp
mov bl, bl
mov eax, dword [esp + 0x18]
cmp eax, ebp
pop edi
pop esi
pop ebx
je 0x100daa77
mov ecx, dword [0x102c8204]
mov dword [eax], ecx
nop
mov ecx, dword [esp + 0x2dc]
mov eax, dword [0x102c8200]
pop ebp
xor ecx, esp
call fcn.100fb12a
add esp, 0x2dc
ret 4