Function at 0x10186a40
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x154
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x18], eax
mov eax, dword [0x1028ebc8]
mov dword [ebp - 0x14], eax
xor eax, eax
sub eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x18]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0x29], al
mov al, byte [ebp - 0x29]
test al, 1
jne 0x10186ab7
jmp 0x10187696
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0x38], ecx
sub eax, 0x2a5b686b
sub eax, 1
add eax, 0x2a5b686b
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [ebp - 0x3a], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x39], al
mov dl, byte [ebp - 0x39]
mov cl, byte [ebp - 0x3a]
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10186b17
jmp 0x10187696
mov eax, dword [0x1028ebcc]
mov ecx, dword [0x1028ebc8]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x40], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x3f], cl
xor al, 0xff
mov byte [ebp - 0x3e], al
xor cl, 0xff
mov byte [ebp - 0x3d], cl
mov cl, 1
xor cl, 1
mov byte [ebp - 0x3c], cl
and al, 0xff
mov byte [ebp - 0x3b], al
mov al, byte [ebp - 0x3c]
mov dl, byte [ebp - 0x3d]
mov cl, byte [ebp - 0x3e]
mov ah, byte [ebp - 0x3b]
mov dh, byte [ebp - 0x3f]
mov bl, byte [ebp - 0x40]
and bl, al
mov ch, dl
and ch, 0xff
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [ebp - 0x43], ah
or cl, dl
xor cl, 0xff
mov byte [ebp - 0x42], cl
or al, 1
mov byte [ebp - 0x41], al
mov cl, byte [ebp - 0x41]
mov al, byte [ebp - 0x42]
and al, cl
mov byte [ebp - 0x44], al
mov cl, byte [ebp - 0x44]
mov al, byte [ebp - 0x43]
or al, cl
test al, 1
jne 0x10186bac
jmp 0x10187450
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x24]
mov dword [edi], ebx
mov dword [eax], esi
mov dword [ecx], edx
cmp dword [eax], 1
sete al
mov byte [ebp - 0x61], al
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x60], eax
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0x5c], ecx
sub eax, 0x38eef07c
sub eax, 1
add eax, 0x38eef07c
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x60]
imul eax, edx
and eax, 1
cmp eax, 0
sete ah
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [ebp - 0x68], ch
mov dl, al
xor dl, 0xff
mov byte [ebp - 0x67], dl
mov cl, 1
xor cl, 1
mov byte [ebp - 0x66], cl
and ch, 0xff
mov byte [ebp - 0x65], ch
and ah, cl
mov byte [ebp - 0x64], ah
and dl, 0xff
mov byte [ebp - 0x63], dl
and al, cl
mov byte [ebp - 0x62], al
mov dl, byte [ebp - 0x66]
mov ah, byte [ebp - 0x67]
mov cl, byte [ebp - 0x68]
mov dh, byte [ebp - 0x62]
mov ch, byte [ebp - 0x63]
mov bl, byte [ebp - 0x64]
mov al, byte [ebp - 0x65]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10186c83
jmp 0x10187450
mov al, byte [ebp - 0x61]
test al, 1
jne 0x10186c93
jmp 0x10186f7c
mov eax, dword [0x1028ebcc]
mov ecx, dword [0x1028ebc8]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x6b], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x6a], cl
xor al, 0xff
mov byte [ebp - 0x69], al
mov cl, byte [ebp - 0x6b]
mov ah, byte [ebp - 0x69]
mov al, byte [ebp - 0x6a]
xor al, 0xff
mov byte [ebp - 0x70], al
mov dl, 1
xor dl, 1
mov byte [ebp - 0x6f], dl
and ah, 0xff
mov byte [ebp - 0x6e], ah
and cl, dl
mov byte [ebp - 0x6d], cl
and al, 0xff
mov byte [ebp - 0x6c], al
mov cl, byte [ebp - 0x6c]
mov ah, byte [ebp - 0x6d]
mov al, byte [ebp - 0x6e]
mov ch, byte [ebp - 0x6f]
mov dl, byte [ebp - 0x6a]
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [ebp - 0x71], al
mov al, byte [ebp - 0x71]
mov dl, byte [ebp - 0x6f]
mov ah, byte [ebp - 0x70]
mov cl, byte [ebp - 0x69]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10186d29
jmp 0x10187211
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
xor ecx, ecx
lea ecx, [sym.proxy.dll_DllEntry]
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x80], eax
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0x7c], ecx
sub eax, 0x73d1e1be
sub eax, 1
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x78]
add edx, 0x73d1e1be
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [ebp - 0x82], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x81], al
mov dl, byte [ebp - 0x81]
mov ah, byte [ebp - 0x82]
mov al, ah
xor al, 0xff
mov byte [ebp - 0x86], al
mov cl, dl
xor cl, 0xff
mov byte [ebp - 0x85], cl
mov ch, 1
xor ch, 1
mov byte [ebp - 0x84], ch
and al, 0xff
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [ebp - 0x83], al
mov al, byte [ebp - 0x83]
mov dl, byte [ebp - 0x84]
mov ah, byte [ebp - 0x85]
mov cl, byte [ebp - 0x86]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10186e25
jmp 0x10187211
mov eax, dword [0x1028ebcc]
mov ecx, dword [0x1028ebc8]
mov edx, eax
add edx, 0x6f634216
sub edx, 1
sub edx, 0x6f634216
imul eax, edx
and eax, 1
cmp eax, 0
sete ah
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [ebp - 0x8d], ch
mov dl, al
xor dl, 0xff
mov byte [ebp - 0x8c], dl
mov cl, 1
xor cl, 1
mov byte [ebp - 0x8b], cl
and ch, 0xff
mov byte [ebp - 0x8a], ch
and ah, cl
mov byte [ebp - 0x89], ah
and dl, 0xff
mov byte [ebp - 0x88], dl
and al, cl
mov byte [ebp - 0x87], al
mov dl, byte [ebp - 0x87]
mov cl, byte [ebp - 0x88]
mov ah, byte [ebp - 0x89]
mov al, byte [ebp - 0x8a]
or al, ah
or cl, dl
xor al, cl
mov byte [ebp - 0x8e], al
mov cl, byte [ebp - 0x8b]
mov dl, byte [ebp - 0x8c]
mov al, byte [ebp - 0x8d]
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [ebp - 0x8f], al
mov cl, byte [ebp - 0x8f]
mov al, byte [ebp - 0x8e]
or al, cl
test al, 1
jne 0x10186ef6
jmp 0x1018769b
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0x9c], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x98]
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x9f], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x9e], cl
and al, cl
mov byte [ebp - 0x9d], al
mov al, byte [ebp - 0x9d]
mov dl, byte [ebp - 0x9e]
mov cl, byte [ebp - 0x9f]
xor cl, dl
or al, cl
test al, 1
jne 0x10186f77
jmp 0x1018769b
jmp 0x10186f7c
mov eax, dword [0x1028ebcc]
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0xa8], ecx
mov ecx, eax
sub ecx, 0x7911a60e
sub ecx, 1
add ecx, 0x7911a60e
imul eax, ecx
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [ebp - 0xaf], al
mov ah, cl
xor ah, 0xff
mov byte [ebp - 0xae], ah
xor al, 0xff
mov byte [ebp - 0xad], al
mov dl, 1
xor dl, 0
mov byte [ebp - 0xac], dl
and ah, 0
mov byte [ebp - 0xab], ah
and cl, dl
mov byte [ebp - 0xaa], cl
and al, 0
mov byte [ebp - 0xa9], al
mov cl, byte [ebp - 0xad]
mov al, byte [ebp - 0xae]
mov ah, byte [ebp - 0xa9]
mov dh, byte [ebp - 0xaa]
mov dl, byte [ebp - 0xab]
mov bl, byte [ebp - 0xac]
mov ch, byte [ebp - 0xaf]
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [ebp - 0xb1], dl
or al, cl
xor al, 0xff
mov byte [ebp - 0xb0], al
mov al, byte [ebp - 0xb1]
mov cl, byte [ebp - 0xb0]
mov dl, byte [ebp - 0xac]
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10187067
jmp 0x101876a0
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x1028ebc8]
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xb8]
mov edx, eax
sub edx, 0x6e064df9
sub edx, 1
add edx, 0x6e064df9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0xc2], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0xc1], cl
xor al, 0xff
mov byte [ebp - 0xc0], al
xor cl, 0xff
mov byte [ebp - 0xbf], cl
mov cl, 1
xor cl, 0
mov byte [ebp - 0xbe], cl
and al, 0
mov byte [ebp - 0xbd], al
mov dl, byte [ebp - 0xbe]
mov ah, byte [ebp - 0xbf]
mov cl, byte [ebp - 0xc0]
mov al, byte [ebp - 0xbd]
mov dh, byte [ebp - 0xc1]
mov bl, byte [ebp - 0xc2]
and bl, dl
mov ch, ah
and ch, 0
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10187128
jmp 0x101876a0
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0xd0], eax
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0xcc], ecx
sub eax, 0x14cc8825
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xc8]
sub ecx, 1
add ecx, 0x14cc8825
imul eax, ecx
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
and eax, 1
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd8]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x101871a4
jmp 0x10187561
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0xdc], eax
mov eax, dword [0x1028ebc8]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xdc]
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0xe1], al
mov cl, byte [ebp - 0xe1]
mov eax, dword [ebp - 0xe0]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10187202
jmp 0x10187561
mov eax, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov eax, dword [0x1028ebcc]
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0xe8], ecx
mov ecx, eax
sub ecx, 0x2b445403
sub ecx, 1
add ecx, 0x2b445403
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0xe2], al
mov eax, dword [ebp - 0xe8]
cmp eax, 0xa
setl al
mov byte [ebp - 0xe9], al
mov dl, byte [ebp - 0xe9]
mov cl, byte [ebp - 0xe2]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0xea], al
mov al, byte [ebp - 0xea]
test al, 1
jne 0x10187284
jmp 0x101876a5
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0xf8], eax
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0xf4], ecx
sub eax, 0xaf9e5098
sub eax, 1
add eax, 0xaf9e5098
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf4]
mov edx, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xf8]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [ebp - 0xfa], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0xf9], al
mov dl, byte [ebp - 0xf9]
mov cl, byte [ebp - 0xfa]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0xfb], al
mov al, byte [ebp - 0xfb]
test al, 1
jne 0x1018730b
jmp 0x101876a5
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0x108], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
and eax, 1
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0x109], al
mov al, byte [ebp - 0x109]
test al, 1
jne 0x10187376
jmp 0x10187566
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
xor ecx, ecx
lea ecx, [sym.proxy.dll_DllEntry]
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x1028ebcc]
mov eax, dword [0x1028ebc8]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [ebp - 0x10b], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x10a], al
mov al, byte [ebp - 0x10b]
xor al, 0xff
mov byte [ebp - 0x10c], al
mov cl, byte [ebp - 0x10c]
mov dh, byte [ebp - 0x10a]
mov bl, byte [ebp - 0x10b]
mov ah, dh
xor ah, 0xff
mov dl, 1
xor dl, 1
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [ebp - 0x10d], al
mov al, byte [ebp - 0x10d]
test al, 1
jne 0x1018744b
jmp 0x10187566
jmp 0x10186d29
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x118], eax
mov eax, dword [0x1028ebc8]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x118]
mov ecx, eax
add ecx, 0xbbc58d1e
sub ecx, 1
sub ecx, 0xbbc58d1e
imul eax, ecx
and eax, 1
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0x11d], al
mov al, byte [ebp - 0x11d]
test al, 1
jne 0x101874c2
jmp 0x101876aa
push eax
mov eax, esp
mov dword [ebp - 0x12c], eax
push eax
mov eax, esp
mov dword [ebp - 0x128], eax
push eax
mov eax, esp
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x128]
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x12c]
mov ebx, dword [ebp - 0x24]
mov dword [edi], ebx
mov dword [edx], esi
mov dword [eax], ecx
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x130]
mov eax, dword [0x1028ebc8]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [ebp - 0x132], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x131], al
mov dl, byte [ebp - 0x131]
mov cl, byte [ebp - 0x132]
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x1018755c
jmp 0x101876aa
jmp 0x10186bac
jmp 0x101871a4
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x13c], eax
mov eax, dword [0x1028ebc8]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x13c]
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [ebp - 0x140], eax
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x13c]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x141], al
mov cl, byte [ebp - 0x141]
mov eax, dword [ebp - 0x138]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x101875d4
jmp 0x101876ed
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
xor ecx, ecx
lea ecx, [sym.proxy.dll_DllEntry]
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x1028ebcc]
mov dword [ebp - 0x150], eax
mov ecx, dword [0x1028ebc8]
mov dword [ebp - 0x14c], ecx
add eax, 0x91a7b213
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x148]
sub ecx, 1
sub ecx, 0x91a7b213
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x151], al
mov cl, byte [ebp - 0x151]
mov eax, dword [ebp - 0x14c]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0x152], al
mov al, byte [ebp - 0x152]
test al, 1
jne 0x10187691
jmp 0x101876ed
jmp 0x10187376
jmp 0x10186ab7
jmp 0x10186ef6
jmp 0x10187067
jmp 0x10187284
push eax
mov eax, esp
mov dword [ebp - 0x160], eax
push eax
mov eax, esp
mov dword [ebp - 0x15c], eax
push eax
mov eax, esp
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x158]
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [eax], esi
mov dword [ecx], edx
mov eax, dword [eax]
jmp 0x101874c2
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
mov eax, dword [ebp - 0x48]
xor ecx, ecx
lea ecx, [sym.proxy.dll_DllEntry]
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x101875d4