Function at 0x1007bc00
Capabilities:
Create thread

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1a8
mov eax, dword [0x10091040]
xor eax, esp
mov dword [esp + 0x1a4], eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x100918da
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10091bb8
push eax
call esi
push ebx
push 0x202
call eax
mov byte [0x10092688], 1
push 0x1009193f
call edi
push str.e9_
push eax
call esi
push 0x10091bd0
push 0
push 0
call eax
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 0
sete byte [esp + 0xb]
mov edx, 0xd9cbe5d
mov ecx, 0xe70830e4
mov eax, 0x2c810701
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, 0xd700842b
jmp 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0xbe72d652
mov ecx, 0x1bb9232
mov edx, 0xb2add7e2
cmove ecx, edx
mov edx, 0xf4adac7a
nop
cmp edx, 0x117cd3cd
jle 0x1007bd20
cmp edx, 0x5930b6de
jle 0x1007bd90
cmp edx, 0x6eaeede5
jg 0x1007be47
cmp edx, 0x67aa0b5c
jle 0x1007bf54
cmp edx, 0x6a6639c4
jg 0x1007c14a
cmp edx, 0x67aa0b5d
je 0x1007c2e2
cmp edx, 0x6857c5bc
jne 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0xd700842b
mov ecx, 0x5f6dcdb7
mov edx, 0x1f5c18c5
jmp 0x1007c553
cmp edx, 0xd7562969
jg 0x1007bdf0
cmp edx, 0xa43e75ee
jg 0x1007be92
cmp edx, 0x91230428
jle 0x1007bf91
cmp edx, 0x93b7ca47
jg 0x1007c17d
cmp edx, 0x91230429
je 0x1007c2fd
cmp edx, 0x916d7c2b
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x52ec9c79
mov edx, 0x5930b6df
mov ebx, 0xae723730
cmove edx, ebx
jmp 0x1007bcb0
cmp edx, 0x3293aefb
jg 0x1007becc
cmp edx, 0x27051df1
jle 0x1007bfd0
cmp edx, 0x2d57fde3
jg 0x1007c19a
cmp edx, 0x27051df2
je 0x1007c318
cmp edx, 0x2bef7793
jne 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0xe9b4e3c3
mov ecx, 0x1bb9232
mov edx, 0x9f72649
jmp 0x1007bca6
cmp edx, 0xf64fcabc
jg 0x1007bf15
cmp edx, 0xecc8904b
jle 0x1007c00f
cmp edx, 0xf4adac79
jg 0x1007c1cb
cmp edx, 0xecc8904c
je 0x1007c333
cmp edx, 0xf39956b8
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xe70830e4
mov edx, 0x5930b6df
mov ebx, 0x62aedb6d
cmove edx, ebx
jmp 0x1007bcb0
cmp edx, 0x749554bd
jle 0x1007c04e
cmp edx, 0x7ba9f675
jg 0x1007c1fe
cmp edx, 0x749554be
je 0x1007c34e
cmp edx, 0x79698a5b
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xf58850bf
mov edx, 0x284454
mov ebx, 0x6b5e25da
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0xae72372f
jle 0x1007c08d
cmp edx, 0xc680fe92
jg 0x1007c238
cmp edx, 0xae723730
je 0x1007c369
cmp edx, 0xbebf4734
jne 0x1007bcb0
mov edx, 0xf4adac7a
jmp 0x1007bcb0
cmp edx, 0x3d4f2854
jle 0x1007c0cc
cmp edx, 0x51d85e13
jg 0x1007c26b
cmp edx, 0x3d4f2855
je 0x1007c382
cmp edx, 0x4c3aab7e
jne 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0x2c810701
mov ecx, 0x1bb9232
mov edx, 0xe0c5db9c
jmp 0x1007bca6
cmp edx, 0x284453
jle 0x1007c10b
cmp edx, 0x35d58ec
jg 0x1007c29e
cmp edx, 0x284454
je 0x1007c39d
cmp edx, 0x2897564
jne 0x1007bcb0
mov edx, 0xf4adac7a
mov ecx, 0xe70830e4
jmp 0x1007bcb0
cmp edx, 0x5eca0833
jg 0x1007c2c3
cmp edx, 0x5930b6df
je 0x1007c3b8
cmp edx, 0x5d9c1c9a
jne 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0xdd4aa3b1
mov ecx, 0x1bb9232
mov edx, 0x98207c0a
jmp 0x1007bca6
cmp edx, 0x818f30c1
je 0x1007c3c2
cmp edx, 0x84888d73
je 0x1007c3dd
cmp edx, 0x8e176566
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xf58850bf
mov edx, 0x5930b6df
mov ebx, 0x9f4fc516
cmove edx, ebx
jmp 0x1007bcb0
cmp edx, 0x117cd3ce
je 0x1007c3f8
cmp edx, 0x20314a0f
je 0x1007c413
cmp edx, 0x22a1c1ab
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x98207c0a
mov edx, 0x5930b6df
mov ebx, 0x5eca0834
cmove edx, ebx
jmp 0x1007bcb0
cmp edx, 0xd756296a
je 0x1007c42e
cmp edx, 0xd795e9f8
je 0x1007c449
cmp edx, 0xe1e8caf4
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1e406cf
mov edx, 0x5930b6df
mov ebx, 0xf948f813
cmove edx, ebx
jmp 0x1007bcb0
cmp edx, 0x6eaeede6
je 0x1007c464
cmp edx, 0x6fc0abe1
je 0x1007c47f
cmp edx, 0x6ff78294
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x4be81d99
mov edx, 0x117cd3ce
mov ebx, 0x27051df2
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0xa43e75ef
je 0x1007c49a
cmp edx, 0xa54b3f25
je 0x1007c4cd
cmp edx, 0xa69d1655
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xb2add7e2
mov edx, 0x3293aefc
mov ebx, 0x22a1c1ab
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0x3293aefc
je 0x1007c4e8
cmp edx, 0x33dbfbd0
je 0x1007c503
cmp edx, 0x39ad1540
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x9f72649
mov edx, 0x84888d73
mov ebx, 0xf5e12634
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0xf64fcabd
je 0x1007c524
cmp edx, 0xf948f813
je 0x1007c53f
cmp edx, 0xfb9a8e50
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x5f6dcdb7
mov edx, 0x5930b6df
mov ebx, 0x2d57fde4
cmove edx, ebx
jmp 0x1007bcb0
cmp edx, 0x6a6639c5
je 0x1007c560
cmp edx, 0x6b5e25da
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xf0096d4c
mov edx, 0xd280ebf9
mov ebx, 0xf39956b8
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0x93b7ca48
je 0x1007c57b
cmp edx, 0x9f4fc516
je 0x1007c515
jmp 0x1007bcb0
cmp edx, 0x2d57fde4
je 0x1007c596
cmp edx, 0x2f63abe6
jne 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0xdd4aa3b1
mov ecx, 0x1e406cf
mov edx, 0xf0096d4c
jmp 0x1007c553
cmp edx, 0xf4adac7a
je 0x1007c5af
cmp edx, 0xf5e12634
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xe70830e4
mov edx, 0x79698a5b
mov ebx, 0x67aa0b5d
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0x7ba9f676
je 0x1007c5b9
cmp edx, 0x7d49bf7b
jne 0x1007bcb0
call ebp
cmp eax, 0xb7
mov eax, 0xe9b4e3c3
cmove eax, edi
mov edx, 0xf4adac7a
mov ecx, 0x1ce3ea9c
mov esi, dword [esp + 0xc]
jmp 0x1007bcb0
cmp edx, 0xc680fe93
je 0x1007c5c8
cmp edx, 0xd280ebf9
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xf0096d4c
mov edx, 0x5930b6df
mov ebx, 0x6857c5bc
cmove edx, ebx
jmp 0x1007bcb0
cmp edx, 0x51d85e14
je 0x1007bc92
cmp edx, 0x585044ca
jne 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1ce3ea9c
mov edx, 0x20314a0f
mov ebx, 0x749554be
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0x35d58ed
je 0x1007c5e3
cmp edx, 0xd9cbe5d
jne 0x1007bcb0
mov dword [esp], ecx
mov edx, 0x39ad1540
jmp 0x1007bcb0
cmp edx, 0x62aedb6d
jne 0x1007c5fe
mov dword [esp + 4], eax
mov edx, 0xf4adac7a
mov ecx, 0x4be81d99
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xd072f2de
mov edx, 0x35d58ed
mov ebx, 0xa69d1655
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x66dd22bf
mov edx, 0x5930b6df
mov ebx, 0x4c3aab7e
cmove edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x33714d85
mov edx, 0x5930b6df
mov ebx, 0x818f30c1
cmove edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1f5c18c5
mov edx, 0x6fc0abe1
mov ebx, 0x585044ca
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x9f72649
mov edx, 0x5930b6df
mov ebx, 0xa43e75ef
cmove edx, ebx
jmp 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0x2c810701
mov ecx, 0x66dd22bf
mov edx, 0x328733c5
jmp 0x1007c553
mov edx, dword [esp]
cmp edx, 0x328733c5
mov edx, 0x5930b6df
mov ebx, 0x2bef7793
cmove edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1bb9232
mov edx, 0xd756296a
mov ebx, 0x8e176566
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, 0xbebf4734
jmp 0x1007bcb0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0xf4adac7a
mov ecx, 0x1ce3ea9c
mov eax, 0xdd4aa3b1
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x33714d85
mov edx, 0xd795e9f8
mov ebx, 0xecc8904c
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x4be81d99
mov edx, 0x5930b6df
mov ebx, 0x2f63abe6
cmove edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1ce3ea9c
mov edx, 0x5930b6df
mov ebx, 0x2897564
cmove edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1e406cf
mov edx, 0xe1e8caf4
mov ebx, 0xc680fe93
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x52ec9c79
mov edx, 0x6eaeede6
mov ebx, 0x6ff78294
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x5f6dcdb7
mov edx, 0xa54b3f25
mov ebx, 0x916d7c2b
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x328733c5
mov edx, 0x3d4f2855
mov ebx, 0x93b7ca48
cmovl edx, ebx
jmp 0x1007bcb0
push 0
push 0
push 0
push 0x100741a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
test eax, eax
jne 0x1007c4b9
mov esi, dword [esp + 0xc]
mov edx, 0xf4adac7a
mov ecx, 0x1ce3ea9c
mov eax, 0xd700842b
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x66dd22bf
mov edx, 0x91230429
mov ebx, 0xfb9a8e50
cmovl edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xb2add7e2
mov edx, 0x5930b6df
mov ebx, 0x7d49bf7b
cmove edx, ebx
jmp 0x1007bcb0
cmp byte [esp + 0xb], 0
mov eax, 0xbe72d652
mov ecx, 0xdd4aa3b1
cmovne eax, ecx
mov edx, 0xf4adac7a
mov ecx, 0x1ce3ea9c
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xd072f2de
mov edx, 0x5930b6df
mov ebx, 0x5d9c1c9a
cmove edx, ebx
jmp 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0xe9b4e3c3
mov ecx, 0x52ec9c79
mov edx, 0xd072f2de
cmovl ecx, edx
mov edx, 0xf4adac7a
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xe0c5db9c
mov edx, 0x5930b6df
mov ebx, 0x33dbfbd0
cmove edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1f5c18c5
mov edx, 0x5930b6df
mov ebx, 0x51d85e14
cmove edx, ebx
jmp 0x1007bcb0
mov ecx, dword [esp + 4]
cmp ecx, 0xd700842b
mov ecx, 0x1bb9232
mov edx, 0x33714d85
jmp 0x1007bca6
mov edx, 0xd9cbe5d
jmp 0x1007bcb0
mov edx, 0xf4adac7a
mov ecx, 0xf58850bf
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0x1bb9232
mov edx, 0x5930b6df
mov ebx, 0x7ba9f676
cmove edx, ebx
jmp 0x1007bcb0
mov edx, dword [esp]
cmp edx, 0xe0c5db9c
mov edx, 0x6a6639c5
mov ebx, 0xf64fcabd
cmovl edx, ebx
jmp 0x1007bcb0
cmp edx, 0x5eca0834
jne 0x1007bcb0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1a4]
xor ecx, esp
call fcn.1007d79c
add esp, 0x1a8
pop esi
pop edi
pop ebx
pop ebp
ret