Function at 0x10085870
Capabilities:
Create thread

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x1009a040]
xor ecx, esp
mov dword [esp + 0x10], ecx
cmp eax, 1
sete byte [esp + 7]
mov edx, 0xf5613cc9
mov ecx, 0x4f397483
mov eax, 0x92436c48
mov esi, 0x49ae0dec
mov edi, 0x59910ebe
mov ebx, 0x1eed04a0
jmp 0x100858d0
mov ecx, dword [esp + 8]
cmp ecx, 0x92436c48
mov ecx, 0x1fe03e77
mov edx, 0x5751dadd
cmove ecx, edx
mov edx, 0x93ea4d1b
nop dword [eax + eax]
cmp edx, 0xf0248d75
jg 0x10085940
cmp edx, 0xabbb37eb
jle 0x100859b0
cmp edx, 0xcbced874
jg 0x10085a67
cmp edx, 0xb42b1c34
jle 0x10085b81
cmp edx, 0xb42b1c35
je 0x10085d00
cmp edx, 0xbeb9c652
je 0x10085d21
cmp edx, 0xc171d68e
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0x70301f42
mov edx, 0x5675466f
mov ebp, 0xa4c1d38f
cmovl edx, ebp
jmp 0x100858d0
cmp edx, 0x38b19141
jle 0x10085a10
cmp edx, 0x69357ead
jg 0x10085acb
cmp edx, 0x49ae0deb
jle 0x10085bb4
cmp edx, 0x49ae0dec
je 0x10085d3c
cmp edx, 0x5675466f
je 0x10085d57
cmp edx, 0x605850f1
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0x4636563a
mov edx, 0x69357eae
mov ebp, 0x193543e5
cmovl edx, ebp
jmp 0x100858d0
cmp edx, 0x93ea4d1a
jg 0x10085b11
cmp edx, 0x8c55e292
jle 0x10085bd6
cmp edx, 0x8c55e293
je 0x10085d72
cmp edx, 0x9157fc1f
je 0x10085d8d
cmp edx, 0x93e877ed
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0x9fa246dc
mov edx, 0x8baf666f
mov ebp, 0x9157fc1f
cmovl edx, ebp
jmp 0x100858d0
cmp edx, 0x1ff5a3b6
jle 0x10085b50
cmp edx, 0x2912f8a4
jle 0x10085c09
cmp edx, 0x2912f8a5
je 0x10085da8
cmp edx, 0x33f6e96f
je 0x10085dc3
cmp edx, 0x3672f1b2
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0xbaf4e2e9
mov edx, 0x2912f8a5
mov ebp, 0x74f351c6
cmovl edx, ebp
jmp 0x100858d0
cmp edx, 0xe22c3961
jle 0x10085c3c
cmp edx, 0xe22c3962
je 0x10085dde
cmp edx, 0xe52e460c
je 0x10085ded
cmp edx, 0xeaa4e998
jne 0x100858d0
mov dword [esp + 0xc], 0
lea eax, [esp + 0xc]
push eax
push 0
push 0
push sym.proxy.dll_DllEntry
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0x93ea4d1b
mov ecx, 0x34f193c9
mov eax, 0x9530b594
jmp 0x100858d0
cmp edx, 0x74f351c5
jle 0x10085c6d
cmp edx, 0x74f351c6
je 0x10085e00
cmp edx, 0x7d156b4f
je 0x10085e16
cmp edx, 0x7eea201c
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0x5751dadd
mov edx, 0x3a94eb88
cmove edx, ebx
jmp 0x100858d0
cmp edx, 0x9cf3539a
jg 0x10085c94
cmp edx, 0x93ea4d1b
je 0x10085e32
cmp edx, 0x9b2aaed5
jne 0x10085ee6
mov edx, dword [esp]
cmp edx, 0xabc7b05
mov edx, 0x3a94eb88
mov ebp, 0x7d156b4f
cmove edx, ebp
jmp 0x100858d0
cmp edx, 0x193543e4
jg 0x10085cc7
cmp edx, 0xf0248d76
je 0x10085e3c
cmp edx, 0xf5613cc9
jne 0x100858d0
mov dword [esp], ecx
mov edx, 0x33f6e96f
jmp 0x100858d0
cmp edx, 0xabbb37ec
je 0x10085cf1
cmp edx, 0xb260ded4
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0xbaf4e2e9
mov edx, 0x3a94eb88
mov ebp, 0xb42b1c35
cmove edx, ebp
jmp 0x100858d0
cmp edx, 0x38b19142
je 0x100858af
cmp edx, 0x3a94eb88
jne 0x100858d0
mov edx, 0x9cf3539b
jmp 0x100858d0
cmp edx, 0x899b2e14
je 0x10085e57
cmp edx, 0x8baf666f
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0x9fa246dc
mov edx, 0x3a94eb88
mov ebp, 0x96435f69
cmove edx, ebp
jmp 0x100858d0
cmp edx, 0x1ff5a3b7
je 0x10085e72
cmp edx, 0x25c727a5
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0x5751dadd
mov edx, 0xf0248d76
mov ebp, 0x605850f1
cmovl edx, ebp
jmp 0x100858d0
cmp edx, 0xcbced875
je 0x10085e8b
cmp edx, 0xd3e8577b
jne 0x100858d0
mov ecx, dword [esp + 8]
cmp ecx, 0x657f36ae
mov ecx, 0x1fe03e77
mov edx, 0x70301f42
jmp 0x100858c3
cmp edx, 0x69357eae
je 0x10085ea6
cmp edx, 0x6db38e6a
jne 0x100858d0
mov edx, 0x93ea4d1b
mov ecx, 0x4636563a
jmp 0x100858d0
cmp edx, 0x9cf3539b
je 0x10085ec1
cmp edx, 0xa4c1d38f
jne 0x100858d0
mov edx, dword [esp]
cmp edx, 0x59910ebe
mov edx, 0x3a94eb88
mov ebp, 0x38b19142
cmove edx, ebp
jmp 0x100858d0
cmp edx, 0x193543e5
je 0x10085ecb
cmp edx, 0x1eed04a0
jne 0x100858d0
cmp byte [esp + 7], 0
mov eax, 0x9530b594
mov ecx, 0x657f36ae
cmovne eax, ecx
mov edx, 0x93ea4d1b
mov ecx, 0x34f193c9
jmp 0x100858d0
mov ecx, dword [esp + 8]
cmp ecx, 0x657f36ae
mov ecx, 0x81db66c9
mov edx, 0x9706da13
cmovl ecx, edx
mov edx, 0x93ea4d1b
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x1fe03e77
mov edx, 0x8c55e293
mov ebp, 0x9b2aaed5
cmovl edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x81db66c9
mov edx, 0x3a94eb88
mov ebp, 0xd3e8577b
cmove edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x70301f42
mov edx, 0x3a94eb88
mov ebp, 0xeaa4e998
cmove edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x1fe03e77
mov edx, 0x3a94eb88
mov ebp, 0x6db38e6a
cmove edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x9706da13
mov edx, 0x3a94eb88
mov ebp, 0x1ff5a3b7
cmove edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0xabc7b05
mov edx, 0xbeb9c652
mov ebp, 0xb260ded4
cmovl edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x34f193c9
mov edx, 0x25c727a5
mov ebp, 0x3672f1b2
cmovl edx, ebp
jmp 0x100858d0
mov edx, 0x93ea4d1b
mov ecx, 0x4f397483
jmp 0x100858d0
mov dword [esp + 8], eax
mov edx, 0x93ea4d1b
mov ecx, 0xabc7b05
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x9706da13
mov edx, 0x93e877ed
cmovl edx, esi
jmp 0x100858d0
mov ecx, dword [esp + 8]
cmp ecx, 0x9530b594
mov ecx, 0xbaf4e2e9
cmovl ecx, edi
mov edx, 0x93ea4d1b
jmp 0x100858d0
mov edx, 0xf5613cc9
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x59910ebe
mov edx, 0xc171d68e
mov ebp, 0x7eea201c
cmovl edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x4636563a
mov edx, 0x3a94eb88
mov ebp, 0xabbb37ec
cmove edx, ebp
jmp 0x100858d0
mov ecx, dword [esp + 8]
cmp ecx, 0x9530b594
mov ecx, 0x1fe03e77
mov edx, 0x9fa246dc
jmp 0x100858c3
mov edx, dword [esp]
cmp edx, 0x4f397483
mov edx, 0x3a94eb88
mov ebp, 0xe52e460c
cmove edx, ebp
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x4f397483
mov edx, 0xcbced875
mov ebp, 0x899b2e14
cmovl edx, ebp
jmp 0x100858d0
mov edx, 0x93ea4d1b
jmp 0x100858d0
mov edx, dword [esp]
cmp edx, 0x34f193c9
mov edx, 0x3a94eb88
mov ebp, 0xe22c3962
cmove edx, ebp
jmp 0x100858d0
cmp edx, 0x96435f69
jne 0x100858d0
mov ecx, dword [esp + 0x10]
xor ecx, esp
call fcn.100869cc
mov eax, 1
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc