Function at 0x100364ae
Capabilities:
Create thread
Inject thread

Disassembly:
push 0x26c
mov eax, 0x10088640
call fcn.10083a29
cmp byte [0x103d8a18], 0
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jne 0x100366ef
xor edi, edi
push edi
call dword [sym.imp.MSVCR100.dll__time64]
pop ecx
push eax
call dword [sym.imp.MSVCR100.dll_srand]
pop ecx
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 0x3e8
idiv ecx
push 0x10098570
push edi
mov dword [0x10114474], edx
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x100f415c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [0x100e08d4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.100360da
mov dword [esp], 0x100350d6
push 0xfffffffffffffffc
push eax
mov dword [0x100dfd8c], eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x1038431c], eax
cmp eax, edi
je 0x10036a56
push edi
push edi
push edi
push 0x10036152
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push edi
mov eax, 0x10033616
sub eax, 0x92e115
push 5
mov dword [ebp - 0x1b], eax
lea eax, [ebp - 0x1c]
push eax
push 0x92e110
push dword [0x100e08d4]
mov dword [0x1035fee4], 0x14
mov byte [ebp - 0x1c], 0xe8
mov word [ebp - 0x17], 0x9090
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor eax, eax
lea edi, [ebp - 0x228]
stosd dword es:[edi], eax
xor edi, edi
push edi
push 4
lea eax, [ebp - 0x228]
push eax
push 0xb26f2e
push dword [0x100e08d4]
mov byte [0x103d8a18], 1
call ebx
mov eax, dword [ebp - 0x228]
push edi
push 4
mov dword [0x10112768], eax
lea eax, [ebp - 0x228]
push eax
push 0x6bc380
push dword [0x100e08d4]
call ebx
mov eax, dword [ebp - 0x228]
push edi
push 6
mov dword [0x10112764], eax
lea eax, [ebp - 0x28]
push eax
push 0xa7b177
push dword [0x100e08d4]
mov dword [ebp - 0x28], 0x90909090
mov dword [ebp - 0x24], 0x90909090
mov word [ebp - 0x20], 0x9090
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push str.recv
push str.ws2_32.dll
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
push 0x1009859c
push str.kernel32.dll
mov dword [0x10114408], eax
call esi
push eax
call edi
push 0
push 5
push 0x10385044
push dword [0x10114408]
mov dword [0x10114150], eax
push dword [0x100e08d4]
call ebx
mov eax, dword [0x10114408]
mov ecx, 0x10034d41
push 0
sub ecx, eax
sub ecx, 5
push 5
mov byte [0x103c0bbc], 0xe9
mov dword [0x103c0bbd], ecx
push 0x103c0bbc
push eax
push dword [0x100e08d4]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0x100985ac
push str.user32.dll
call esi
push eax
call edi
xor edi, edi
push edi
push 5
push 0x101141c4
push eax
push dword [0x100e08d4]
mov dword [0x10114400], eax
call ebx
mov eax, dword [0x10114400]
push edi
push 5
push 0x10114190
mov ecx, 0x1003643e
sub ecx, eax
push eax
push dword [0x100e08d4]
sub ecx, 5
mov byte [0x10114190], 0xe9
mov dword [0x10114191], ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x100366f1
xor edi, edi
cmp byte [0x103d8a19], 0
jne 0x10036a56
push edi
push edi
push edi
mov byte [0x103d8a19], 1
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov edi, 0x1f4
push edi
mov dword [0x10113e5c], eax
lea eax, [ebp - 0x224]
push 0
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
push edi
lea eax, [ebp - 0x224]
push eax
push 0x1008b460
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
lea edi, [eax - 8]
pop ecx
lea eax, [ebp - 0x224]
push eax
mov esi, 0x10111f10
call fcn.100064da
mov dword [esp], 0x1f4
call dword [sym.imp.mfc100.dll_Ordinal_265]
xor edi, edi
pop ecx
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], vtable.CBitmap.0
lea esi, [ebp - 0x278]
mov dword [ebp - 4], edi
call fcn.10004edd
push 0x10111f10
mov byte [ebp - 4], 1
push str._sMap__bkBrush.jpg
push dword [ebp - 0x228]
call dword [sym.imp.MSVCR100.dll_sprintf]
mov ecx, dword [ebp - 0x228]
add esp, 0xc
mov eax, esi
push eax
call fcn.10004cc8
mov eax, dword [ebp - 0x274]
mov esi, dword [sym.imp.mfc100.dll_Ordinal_2184]
or dword [ebp - 0x258], 0xffffffff
or dword [ebp - 0x254], 0xffffffff
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x274], edi
mov dword [ebp - 0x270], edi
mov dword [ebp - 0x26c], edi
mov dword [ebp - 0x268], edi
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x264], edi
mov word [ebp - 0x25c], di
call esi
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push eax
mov ecx, 0x100a6314
call esi
push dword [ebp - 0x228]
call dword [sym.imp.mfc100.dll_Ordinal_1296]
mov esi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
pop ecx
push edi
call esi
push 0xd8e4f1
mov dword [0x100a7090], eax
call esi
mov dword [0x100a708c], eax
push edi
push 5
pop esi
push esi
push 0x10112634
push 0xad9f20
push dword [0x100e08d4]
call ebx
push edi
push esi
push 0x101125d0
push 0x6bdcb3
push dword [0x100e08d4]
call ebx
push edi
push 6
push 0x101125bc
push 0x7a06d0
push dword [0x100e08d4]
call ebx
push edi
push 8
push 0x101125a8
push 0x6f8431
push dword [0x100e08d4]
call ebx
push edi
push 6
push 0x10112580
push 0x702576
push dword [0x100e08d4]
call ebx
push edi
push esi
push 0x1011260c
push 0x6bc37f
push dword [0x100e08d4]
call ebx
push edi
push esi
push 0x101125f8
push 0xb26f2d
push dword [0x100e08d4]
call ebx
mov eax, dword [0x358e584]
mov esi, dword [eax]
push edi
push 5
push 0x10112574
push dword [esi + 0x144]
push dword [0x100e08d4]
call ebx
push edi
push 5
push 0x10112568
push dword [esi + 0x148]
push dword [0x100e08d4]
call ebx
push edi
push 5
push 0x1011255c
push dword [esi + 0x14c]
push dword [0x100e08d4]
call ebx
push edi
push 5
push 0x10112550
push dword [esi + 0x150]
push dword [0x100e08d4]
call ebx
push edi
push 5
push 0x101122ec
push dword [esi + 0x44]
push dword [0x100e08d4]
call ebx
push 0x1c
lea eax, [ebp - 0x244]
push eax
mov edi, 0xe4ecb4
push edi
push dword [0x100e08d4]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
call esi
lea eax, [ebp - 0x230]
push eax
push 4
push dword [ebp - 0x238]
push edi
push dword [0x100e08d4]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
call edi
push 0x1c
lea eax, [ebp - 0x244]
push eax
mov ebx, 0xe4ecd0
push ebx
push dword [0x100e08d4]
call esi
lea eax, [ebp - 0x230]
push eax
push 4
push dword [ebp - 0x238]
push ebx
push dword [0x100e08d4]
call edi
push 0x1c
lea eax, [ebp - 0x244]
push eax
mov ebx, 0xe4ea9c
push ebx
push dword [0x100e08d4]
call esi
lea eax, [ebp - 0x230]
push eax
push 4
push dword [ebp - 0x238]
push ebx
push dword [0x100e08d4]
call edi
mov esi, dword [sym.imp.MSVCR100.dll_strcpy]
push 0x100985d8
push 0x101127e8
call esi
push 0x100985e8
push 0x10112801
call esi
push 0x100985f8
push 0x1011281a
call esi
push 0x10098604
push 0x10112833
call esi
push 0x10098614
push 0x1011284c
call esi
push 0x10098620
push 0x10112865
call esi
push 0x10098630
push 0x1011287e
call esi
add esp, 0x38
lea ecx, [ebp - 0x278]
call fcn.10004e7d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], vtable.CBitmap.0
call fcn.10001900
call fcn.10083aac
ret