Function at 0x102bf0d0
Capabilities:
Create thread
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x36c
push esi
cmp dword [ebx + 0xc], 1
jne 0x102bfb8b
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x34]
mov dword [0x104e9cf0], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0
jne 0x102bf129
mov dword [ebp - 0x38], 0
jmp 0x102bf1ad
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
push 0x1c
lea ecx, [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [ebp - 0x12c], 0
je 0x102bf1a7
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x14]
jne 0x102bf1a7
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x120]
mov dword [ebp - 0x18], ecx
push 0x1c
lea edx, [ebp - 0x12c]
push edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x102bf16f
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x38], ecx
mov edx, dword [0x104e9cf0]
add edx, dword [ebp - 0x38]
mov dword [0x104e9cf8], edx
push 0x102c2980
push 1
call dword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 8]
push eax
call fcn.100798a0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x102bfb8b
cmp dword [ebp - 0x3c], 0
je 0x102bf1f3
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
xor eax, eax
mov byte [ebp - 5], al
xor ecx, ecx
mov byte [ebp - 6], cl
xor edx, edx
mov byte [ebp - 8], dl
xor eax, eax
mov byte [ebp - 9], al
mov cl, byte [ebp - 5]
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 6]
mov byte [ebp - 0x30], dl
mov eax, 0x3d4ef223
mov dword [ebp - 0xb0], 0x67e0b600
mov dword [ebp - 0xac], eax
mov ecx, 0x4892e45c
mov dword [ebp - 0xa8], 0xa5211b5a
mov dword [ebp - 0xa4], ecx
mov edx, 8
imul eax, edx, 0
mov ecx, 8
imul edx, ecx, 0
mov ecx, dword [ebp + eax - 0xb0]
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp + edx - 0x60], ecx
mov dword [ebp + edx - 0x5c], eax
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp + edx - 0x60]
mov ecx, dword [ebp + edx - 0x5c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov edx, 8
shl edx, 0
mov eax, 8
shl eax, 0
mov ecx, dword [ebp + edx - 0xb0]
mov edx, dword [ebp + edx - 0xac]
mov dword [ebp + eax - 0x60], ecx
mov dword [ebp + eax - 0x5c], edx
mov eax, 8
shl eax, 0
mov ecx, dword [ebp + eax - 0x60]
mov edx, dword [ebp + eax - 0x5c]
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], edx
lea eax, [ebp - 0x148]
mov dword [ebp - 0x2a0], eax
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x29c], ecx
lea edx, [ebp - 0x60]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x48], eax
mov ecx, 8
imul edx, ecx, 0
mov eax, 0x3d4ef251
mov dword [ebp + edx - 0x190], 0x892c445
mov dword [ebp + edx - 0x18c], eax
mov ecx, 0x3d4ef251
mov dword [ebp - 0x160], 0x892c445
mov dword [ebp - 0x15c], ecx
mov edx, 8
shl edx, 0
mov eax, 0x4892e45c
mov dword [ebp + edx - 0x190], 0xa5211b5a
mov dword [ebp + edx - 0x18c], eax
mov ecx, 0x4892e45c
mov dword [ebp - 0x158], 0xa5211b5a
mov dword [ebp - 0x154], ecx
lea edx, [ebp - 0x160]
mov dword [ebp - 0x298], edx
lea eax, [ebp - 0x150]
mov dword [ebp - 0x294], eax
mov ecx, 0x3d4ef223
mov dword [ebp - 0xa0], 0x67e0b600
mov dword [ebp - 0x9c], ecx
mov edx, 0x4892e45c
mov dword [ebp - 0x98], 0xa5211b5a
mov dword [ebp - 0x94], edx
mov eax, 8
imul ecx, eax, 0
mov edx, 8
imul eax, edx, 0
mov edx, dword [ebp - 0x10]
mov esi, dword [ebp + ecx - 0xa0]
mov ecx, dword [ebp + ecx - 0x9c]
mov dword [edx + eax], esi
mov dword [edx + eax + 4], ecx
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + eax]
mov eax, dword [ecx + eax + 4]
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x174], eax
mov ecx, 8
shl ecx, 0
mov edx, 8
shl edx, 0
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp + ecx - 0xa0]
mov ecx, dword [ebp + ecx - 0x9c]
mov dword [eax + edx], esi
mov dword [eax + edx + 4], ecx
mov edx, 8
shl edx, 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + edx]
mov edx, dword [eax + edx + 4]
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x16c], edx
lea eax, [ebp - 0x178]
mov dword [ebp - 0x290], eax
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x28c], ecx
xor edx, edx
mov byte [ebp - 7], dl
mov al, byte [ebp - 7]
mov byte [ebp - 0x20], al
movaps xmm0, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x340], xmm0
mov ecx, dword [ebp - 0x10]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x330], xmm0
movaps xmm0, xmmword [ebp - 0x330]
pxor xmm0, xmmword [ebp - 0x340]
movaps xmmword [ebp - 0x350], xmm0
movaps xmm0, xmmword [ebp - 0x350]
mov edx, dword [ebp - 0x10]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov cl, byte [ebp - 8]
mov byte [ebp - 0x24], cl
mov dl, byte [ebp - 9]
mov byte [ebp - 0x28], dl
mov eax, 0x496e9634
mov dword [ebp - 0xe0], 0x64fba503
mov dword [ebp - 0xdc], eax
mov ecx, 0x4d6c438
mov dword [ebp - 0xd8], 0xc1403b35
mov dword [ebp - 0xd4], ecx
mov edx, 0xc536156b
mov dword [ebp - 0xd0], 0xe07ce31b
mov dword [ebp - 0xcc], edx
mov eax, 0x77d8f16a
mov dword [ebp - 0xc8], 0x5d267171
mov dword [ebp - 0xc4], eax
mov ecx, 0x669adfb9
mov dword [ebp - 0xc0], 0x71c68509
mov dword [ebp - 0xbc], ecx
mov edx, 0x3c050948
mov dword [ebp - 0xb8], 0x89f28e8e
mov dword [ebp - 0xb4], edx
mov eax, 8
imul ecx, eax, 0
mov edx, 8
imul eax, edx, 0
mov edx, dword [ebp + ecx - 0xe0]
mov ecx, dword [ebp + ecx - 0xdc]
mov dword [ebp + eax - 0x90], edx
mov dword [ebp + eax - 0x8c], ecx
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp + eax - 0x90]
mov edx, dword [ebp + eax - 0x8c]
mov dword [ebp - 0x230], ecx
mov dword [ebp - 0x22c], edx
mov eax, 8
shl eax, 0
mov ecx, 8
shl ecx, 0
mov edx, dword [ebp + eax - 0xe0]
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp + ecx - 0x90], edx
mov dword [ebp + ecx - 0x8c], eax
mov ecx, 8
shl ecx, 0
mov edx, dword [ebp + ecx - 0x90]
mov eax, dword [ebp + ecx - 0x8c]
mov dword [ebp - 0x228], edx
mov dword [ebp - 0x224], eax
mov ecx, 8
shl ecx, 1
mov edx, 8
shl edx, 1
mov eax, dword [ebp + ecx - 0xe0]
mov ecx, dword [ebp + ecx - 0xdc]
mov dword [ebp + edx - 0x90], eax
mov dword [ebp + edx - 0x8c], ecx
mov edx, 8
shl edx, 1
mov eax, dword [ebp + edx - 0x90]
mov ecx, dword [ebp + edx - 0x8c]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], ecx
mov edx, 8
imul eax, edx, 3
mov ecx, 8
imul edx, ecx, 3
mov ecx, dword [ebp + eax - 0xe0]
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp + edx - 0x90], ecx
mov dword [ebp + edx - 0x8c], eax
mov ecx, 8
imul edx, ecx, 3
mov eax, dword [ebp + edx - 0x90]
mov ecx, dword [ebp + edx - 0x8c]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], ecx
mov edx, 8
shl edx, 2
mov eax, 8
shl eax, 2
mov ecx, dword [ebp + edx - 0xe0]
mov edx, dword [ebp + edx - 0xdc]
mov dword [ebp + eax - 0x90], ecx
mov dword [ebp + eax - 0x8c], edx
mov eax, 8
shl eax, 2
mov ecx, dword [ebp + eax - 0x90]
mov edx, dword [ebp + eax - 0x8c]
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x20c], edx
mov eax, 8
imul ecx, eax, 5
mov edx, 8
imul eax, edx, 5
mov edx, dword [ebp + ecx - 0xe0]
mov ecx, dword [ebp + ecx - 0xdc]
mov dword [ebp + eax - 0x90], edx
mov dword [ebp + eax - 0x8c], ecx
mov edx, 8
imul eax, edx, 5
mov ecx, dword [ebp + eax - 0x90]
mov edx, dword [ebp + eax - 0x8c]
mov dword [ebp - 0x208], ecx
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x230]
mov dword [ebp - 0x280], eax
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x27c], ecx
lea edx, [ebp - 0x90]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x4c], eax
mov ecx, 8
imul edx, ecx, 0
mov eax, 0x3d4ef251
mov dword [ebp + edx - 0x1c0], 0x892c445
mov dword [ebp + edx - 0x1bc], eax
mov ecx, 0x3d4ef251
mov dword [ebp - 0x268], 0x892c445
mov dword [ebp - 0x264], ecx
mov edx, 8
shl edx, 0
mov eax, 0x4892e45c
mov dword [ebp + edx - 0x1c0], 0xa5211b5a
mov dword [ebp + edx - 0x1bc], eax
mov ecx, 0x4892e45c
mov dword [ebp - 0x260], 0xa5211b5a
mov dword [ebp - 0x25c], ecx
mov edx, 8
shl edx, 1
mov eax, 0xa357664b
mov dword [ebp + edx - 0x1c0], 0x8f08c357
mov dword [ebp + edx - 0x1bc], eax
mov ecx, 0xa357664b
mov dword [ebp - 0x258], 0x8f08c357
mov dword [ebp - 0x254], ecx
mov edx, 8
imul eax, edx, 3
mov ecx, 0x12b4840e
mov dword [ebp + eax - 0x1c0], 0x324b5114
mov dword [ebp + eax - 0x1bc], ecx
mov edx, 0x12b4840e
mov dword [ebp - 0x250], 0x324b5114
mov dword [ebp - 0x24c], edx
mov eax, 8
shl eax, 2
mov ecx, 0x669af1cd
mov dword [ebp + eax - 0x1c0], 0x2afe929
mov dword [ebp + eax - 0x1bc], ecx
mov edx, 0x669af1cd
mov dword [ebp - 0x248], 0x2afe929
mov dword [ebp - 0x244], edx
mov eax, 8
imul ecx, eax, 5
mov edx, 0x3c050948
mov dword [ebp + ecx - 0x1c0], 0x89f28e8e
mov dword [ebp + ecx - 0x1bc], edx
mov eax, 0x3c050948
mov dword [ebp - 0x240], 0x89f28e8e
mov dword [ebp - 0x23c], eax
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x288], ecx
lea edx, [ebp - 0x238]
mov dword [ebp - 0x284], edx
mov eax, 0x496e9634
mov dword [ebp - 0x110], 0x64fba503
mov dword [ebp - 0x10c], eax
mov ecx, 0x4d6c438
mov dword [ebp - 0x108], 0xc1403b35
mov dword [ebp - 0x104], ecx
mov edx, 0xc536156b
mov dword [ebp - 0x100], 0xe07ce31b
mov dword [ebp - 0xfc], edx
mov eax, 0x77d8f16a
mov dword [ebp - 0xf8], 0x5d267171
mov dword [ebp - 0xf4], eax
mov ecx, 0x669adfb9
mov dword [ebp - 0xf0], 0x71c68509
mov dword [ebp - 0xec], ecx
mov edx, 0x3c050948
mov dword [ebp - 0xe8], 0x89f28e8e
mov dword [ebp - 0xe4], edx
mov eax, 8
imul ecx, eax, 0
mov edx, 8
imul eax, edx, 0
mov edx, dword [ebp - 4]
mov esi, dword [ebp + ecx - 0x110]
mov ecx, dword [ebp + ecx - 0x10c]
mov dword [edx + eax], esi
mov dword [edx + eax + 4], ecx
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax]
mov eax, dword [ecx + eax + 4]
mov dword [ebp - 0x1f8], edx
mov dword [ebp - 0x1f4], eax
mov ecx, 8
shl ecx, 0
mov edx, 8
shl edx, 0
mov eax, dword [ebp - 4]
mov esi, dword [ebp + ecx - 0x110]
mov ecx, dword [ebp + ecx - 0x10c]
mov dword [eax + edx], esi
mov dword [eax + edx + 4], ecx
mov edx, 8
shl edx, 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + edx]
mov edx, dword [eax + edx + 4]
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0x1ec], edx
mov eax, 8
shl eax, 1
mov ecx, 8
shl ecx, 1
mov edx, dword [ebp - 4]
mov esi, dword [ebp + eax - 0x110]
mov eax, dword [ebp + eax - 0x10c]
mov dword [edx + ecx], esi
mov dword [edx + ecx + 4], eax
mov ecx, 8
shl ecx, 1
mov edx, dword [ebp - 4]
mov eax, dword [edx + ecx]
mov ecx, dword [edx + ecx + 4]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov edx, 8
imul eax, edx, 3
mov ecx, 8
imul edx, ecx, 3
mov ecx, dword [ebp - 4]
mov esi, dword [ebp + eax - 0x110]
mov eax, dword [ebp + eax - 0x10c]
mov dword [ecx + edx], esi
mov dword [ecx + edx + 4], eax
mov ecx, 8
imul edx, ecx, 3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + edx]
mov edx, dword [eax + edx + 4]
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1dc], edx
mov eax, 8
shl eax, 2
mov ecx, 8
shl ecx, 2
mov edx, dword [ebp - 4]
mov esi, dword [ebp + eax - 0x110]
mov eax, dword [ebp + eax - 0x10c]
mov dword [edx + ecx], esi
mov dword [edx + ecx + 4], eax
mov ecx, 8
shl ecx, 2
mov edx, dword [ebp - 4]
mov eax, dword [edx + ecx]
mov ecx, dword [edx + ecx + 4]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], ecx
mov edx, 8
imul eax, edx, 5
mov ecx, 8
imul edx, ecx, 5
mov ecx, dword [ebp - 4]
mov esi, dword [ebp + eax - 0x110]
mov eax, dword [ebp + eax - 0x10c]
mov dword [ecx + edx], esi
mov dword [ecx + edx + 4], eax
mov ecx, 8
imul edx, ecx, 5
mov eax, dword [ebp - 4]
mov ecx, dword [eax + edx]
mov edx, dword [eax + edx + 4]
mov dword [ebp - 0x1d0], ecx
mov dword [ebp - 0x1cc], edx
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x278], eax
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x274], ecx
xor edx, edx
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xa]
mov byte [ebp - 0x2c], al
movaps xmm0, xmmword [ebp - 0x1c0]
movaps xmmword [ebp - 0x2c0], xmm0
mov ecx, dword [ebp - 4]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x2b0], xmm0
movaps xmm0, xmmword [ebp - 0x2b0]
pxor xmm0, xmmword [ebp - 0x2c0]
movaps xmmword [ebp - 0x2d0], xmm0
movaps xmm0, xmmword [ebp - 0x2d0]
mov edx, dword [ebp - 4]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 4]
add eax, 0x10
mov dword [ebp - 0x40], eax
movaps xmm0, xmmword [ebp - 0x1b0]
movaps xmmword [ebp - 0x2f0], xmm0
mov ecx, dword [ebp - 0x40]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x2e0], xmm0
movaps xmm0, xmmword [ebp - 0x2e0]
pxor xmm0, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x360], xmm0
movaps xmm0, xmmword [ebp - 0x360]
mov edx, dword [ebp - 0x40]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 4]
add eax, 0x20
mov dword [ebp - 0x44], eax
movaps xmm0, xmmword [ebp - 0x1a0]
movaps xmmword [ebp - 0x310], xmm0
mov ecx, dword [ebp - 0x44]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x300], xmm0
movaps xmm0, xmmword [ebp - 0x300]
pxor xmm0, xmmword [ebp - 0x310]
movaps xmmword [ebp - 0x320], xmm0
movaps xmm0, xmmword [ebp - 0x320]
mov edx, dword [ebp - 0x44]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x4c], eax
push 0
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [ebx + 0xc], 1
jne 0x102bfbab
push 0
push 0
mov eax, dword [ebx + 8]
push eax
push 0x102bfbc0
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x18
mov eax, 1
jmp 0x102bfbb6
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc