Function at 0x1000d7a0
Capabilities:
Check for software breakpoints
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100152fa
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push esi
push edi
mov eax, dword [0x1001f018]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x5de171], 0x89
jne 0x1000ec76
cmp byte [0x5de172], 0x8a
jne 0x1000ec76
cmp byte [0x5de173], 0xa0
jne 0x1000ec76
cmp byte [0x5de174], 0
jne 0x1000ec76
cmp byte [0x5de175], 0
jne 0x1000ec76
cmp byte [0x5de176], 0
jne 0x1000ec76
cmp byte [0x5b5fff], 0xf5
jne 0x1000ec76
cmp byte [0x5b6000], 0
jne 0x1000ec76
cmp byte [0x5b6001], 0
jne 0x1000ec76
cmp byte [0x5b6002], 0
jne 0x1000ec76
mov bl, 0x8d
cmp byte [0x5a1797], bl
jne 0x1000ec3e
mov al, 0xd4
cmp byte [0x5a1798], al
jne 0x1000ec3e
cmp byte [0x5a1799], 0xf7
jne 0x1000ec3e
cmp byte [0x5a179a], 0xff
jne 0x1000ec3e
cmp byte [0x5a179b], 0xff
jne 0x1000ec3e
cmp byte [0x5ad824], bl
jne 0x1000ec3e
cmp byte [0x5ad825], 0xac
jne 0x1000ec3e
cmp byte [0x5ad826], 0xef
jne 0x1000ec3e
cmp byte [0x5ad827], 0xff
jne 0x1000ec3e
cmp byte [0x5ad828], 0xff
jne 0x1000ec3e
cmp byte [0x5af96d], bl
jne 0x1000ec3e
cmp byte [0x5af96e], 0x1c
jne 0x1000ec3e
cmp byte [0x5af96f], 0x8e
jne 0x1000ec3e
cmp byte [0x5af970], 0xff
jne 0x1000ec3e
cmp byte [0x5af971], 0xff
jne 0x1000ec3e
cmp byte [0x59c79d], bl
jne 0x1000ec3e
cmp byte [0x59c79e], al
jne 0x1000ec3e
cmp byte [0x59c79f], 0xf7
jne 0x1000ec3e
cmp byte [0x59c7a0], 0xff
jne 0x1000ec3e
cmp byte [0x59c7a1], 0xff
jne 0x1000ec3e
cmp byte [0x5afbf1], bl
jne 0x1000ec3e
cmp byte [0x5afbf2], 4
jne 0x1000ec3e
cmp byte [0x5afbf3], 0x86
jne 0x1000ec3e
cmp byte [0x5afbf4], 0xff
jne 0x1000ec3e
cmp byte [0x5afbf5], 0xff
jne 0x1000ec3e
cmp byte [0x59cedc], bl
jne 0x1000ec3e
cmp byte [0x59cedd], 0xe4
jne 0x1000ec3e
cmp byte [0x59cede], 0xf7
jne 0x1000ec3e
cmp byte [0x59cedf], 0xff
jne 0x1000ec3e
cmp byte [0x59cee0], 0xff
jne 0x1000ec3e
cmp byte [0x5b1ccb], bl
jne 0x1000ec3e
cmp byte [0x5b1ccc], 4
jne 0x1000ec3e
cmp byte [0x5b1ccd], 0x97
jne 0x1000ec3e
cmp byte [0x5b1cce], 0xff
jne 0x1000ec3e
cmp byte [0x5b1ccf], 0xff
jne 0x1000ec3e
cmp byte [0x5b170a], bl
jne 0x1000ec3e
cmp byte [0x5b170b], 0x34
jne 0x1000ec3e
cmp byte [0x5b170c], 0xaf
jne 0x1000ec3e
cmp byte [0x5b170d], 0xff
jne 0x1000ec3e
cmp byte [0x5b170e], 0xff
jne 0x1000ec3e
cmp byte [0x5b0c07], bl
jne 0x1000ec3e
cmp byte [0x5b0c08], 0x7c
jne 0x1000ec3e
cmp byte [0x5b0c09], 0xcf
jne 0x1000ec3e
cmp byte [0x5b0c0a], 0xff
jne 0x1000ec3e
cmp byte [0x5b0c0b], 0xff
jne 0x1000ec3e
cmp byte [0x5b187c], bl
jne 0x1000ec3e
cmp byte [0x5b187d], 0x24
jne 0x1000ec3e
cmp byte [0x5b187e], 0xa7
jne 0x1000ec3e
cmp byte [0x5b187f], 0xff
jne 0x1000ec3e
cmp byte [0x5b1880], 0xff
jne 0x1000ec3e
cmp byte [0x59d1e2], bl
jne 0x1000ec3e
mov al, 0x90
cmp byte [0x59d1e3], al
je 0x1000ec3e
mov dl, 0xe7
cmp byte [0x59d1e4], dl
jne 0x1000ec3e
cmp byte [0x59d1e5], 0xff
jne 0x1000ec3e
cmp byte [0x59d1e6], 0xff
jne 0x1000ec3e
cmp byte [0x5b1aa9], bl
jne 0x1000ec3e
cmp byte [0x5b1aaa], 0x14
jne 0x1000ec3e
cmp byte [0x5b1aab], 0x9f
jne 0x1000ec3e
cmp byte [0x5b1aac], 0xff
jne 0x1000ec3e
cmp byte [0x5b1aad], 0xff
jne 0x1000ec3e
cmp byte [0x5ac554], bl
jne 0x1000ec3e
mov cl, 0x74
cmp byte [0x5ac555], cl
jne 0x1000ec3e
cmp byte [0x5ac556], 0xb6
jne 0x1000ec3e
cmp byte [0x5ac557], 0xff
jne 0x1000ec3e
cmp byte [0x5ac558], 0xff
jne 0x1000ec3e
cmp byte [0x59d6ad], bl
jne 0x1000ec3e
cmp byte [0x59d6ae], 0xcc
jne 0x1000ec3e
cmp byte [0x59d6af], 0xef
jne 0x1000ec3e
cmp byte [0x59d6b0], 0xff
jne 0x1000ec3e
cmp byte [0x59d6b1], 0xff
jne 0x1000ec3e
cmp byte [0x5ac22c], bl
jne 0x1000ec3e
cmp byte [0x5ac22d], 0xfc
jne 0x1000ec3e
cmp byte [0x5ac22e], 0xbe
jne 0x1000ec3e
cmp byte [0x5ac22f], 0xff
jne 0x1000ec3e
cmp byte [0x5ac230], 0xff
jne 0x1000ec3e
cmp byte [0x534fd2], bl
jne 0x1000ec3e
cmp byte [0x534fd3], al
je 0x1000ec3e
cmp byte [0x534fd4], 0xf7
jne 0x1000ec3e
cmp byte [0x534fd5], 0xff
jne 0x1000ec3e
cmp byte [0x534fd6], 0xff
jne 0x1000ec3e
cmp byte [0x59ded9], bl
jne 0x1000ec3e
cmp byte [0x59deda], al
je 0x1000ec3e
cmp byte [0x59dedb], 0xef
jne 0x1000ec3e
cmp byte [0x59dedc], 0xff
jne 0x1000ec3e
cmp byte [0x59dedd], 0xff
jne 0x1000ec3e
cmp byte [0x59dc87], bl
jne 0x1000ec3e
cmp byte [0x59dc88], al
je 0x1000ec3e
cmp byte [0x59dc89], 0xf7
jne 0x1000ec3e
cmp byte [0x59dc8a], 0xff
jne 0x1000ec3e
cmp byte [0x59dc8b], 0xff
jne 0x1000ec3e
cmp byte [0x5b2c98], bl
jne 0x1000ec3e
cmp byte [0x5b2c99], 0x6c
jne 0x1000ec3e
cmp byte [0x5b2c9a], 0x6e
jne 0x1000ec3e
cmp byte [0x5b2c9b], 0xff
jne 0x1000ec3e
cmp byte [0x5b2c9c], 0xff
jne 0x1000ec3e
cmp byte [0x59f471], bl
jne 0x1000ec3e
cmp byte [0x59f472], 0x24
jne 0x1000ec3e
cmp byte [0x59f473], 0xbf
jne 0x1000ec3e
cmp byte [0x59f474], 0xff
jne 0x1000ec3e
cmp byte [0x59f475], 0xff
jne 0x1000ec3e
cmp byte [0x59f211], bl
jne 0x1000ec3e
cmp byte [0x59f212], 0x44
jne 0x1000ec3e
cmp byte [0x59f213], 0xc7
jne 0x1000ec3e
cmp byte [0x59f214], 0xff
jne 0x1000ec3e
cmp byte [0x59f215], 0xff
jne 0x1000ec3e
cmp byte [0x50fb50], bl
jne 0x1000ec3e
cmp byte [0x50fb51], 0x5a
je 0x1000ec3e
cmp byte [0x50fb52], 0xf7
jne 0x1000ec3e
cmp byte [0x50fb53], 0xff
jne 0x1000ec3e
cmp byte [0x50fb54], 0xff
jne 0x1000ec3e
cmp byte [0x50f357], bl
jne 0x1000ec3e
cmp byte [0x50f358], 0xb4
jne 0x1000ec3e
cmp byte [0x50f359], 0xef
jne 0x1000ec3e
cmp byte [0x50f35a], 0xff
jne 0x1000ec3e
cmp byte [0x50f35b], 0xff
jne 0x1000ec3e
cmp byte [0x5ade26], bl
jne 0x1000ec3e
cmp byte [0x5ade27], cl
jne 0x1000ec3e
cmp byte [0x5ade28], 0xdf
jne 0x1000ec3e
cmp byte [0x5ade29], 0xff
jne 0x1000ec3e
push 0x1388
mov ecx, 0x64
call fcn.10007d10
push eax
push 2
mov eax, 0x10047868
call fcn.10011080
add esp, 0xc
push 0
push str._XDAME_
push 0xb
call fcn.10004970
add esp, 0xc
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x64
call fcn.10007d10
push eax
push 1
push 2
push 0x1001f140
mov dword [ebp - 0x1c], eax
call fcn.10011240
add esp, 4
push eax
xor esi, esi
push esi
mov ecx, 0x1003d6d8
call fcn.100075a0
mov eax, dword [0x1004761c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, dword [sym.imp.USER32.dll_UnregisterClassA]
add esp, 0x14
cmp eax, esi
je 0x1000ecd8
push esi
push esi
push 0x10
push eax
call edi
mov ecx, dword [0x100485dc]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1004761c], esi
call ebx
mov eax, dword [0x10047744]
cmp eax, esi
je 0x1000ecfd
push esi
push esi
push 0x10
push eax
call edi
mov eax, dword [0x100485dc]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x10047744], esi
call ebx
mov eax, dword [0x1004786c]
cmp eax, esi
je 0x1000ed22
push esi
push esi
push 0x10
push eax
call edi
mov edx, dword [0x100485dc]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1004786c], esi
call ebx
mov eax, dword [ebp - 0x1c]
push 0x2b39c0
push 0x6a
mov esi, 0x10047868
call fcn.100107c0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0
push 0
push esi
push 0x10010fe0
push 0
push 0
mov dword [0x10047870], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x10047870]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x10047870]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1004786c]
test eax, eax
je 0x1000edaf
push 0
push 0
push 0x10
push eax
call edi
mov eax, dword [0x100485dc]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x1004786c], 0
call ebx
call fcn.10010c50
int3