Function at 0x1008c820
Capabilities:
Create thread

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1a8
mov eax, dword [0x100a1040]
xor eax, esp
mov dword [esp + 0x1a4], eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x100a18da
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x100a1bb9
push eax
call esi
push ebx
push 0x202
call eax
mov byte [0x100a1bb8], 1
push 0x100a193f
call edi
push 0x100a1bc4
push eax
call esi
push 0x100a1bd1
push 0
push 0
call eax
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 0
sete byte [esp + 0xb]
mov edx, 0x2971b780
mov ecx, 0x5f23f6bf
mov eax, 0xde38310f
mov ebp, 0x376d0a92
mov edi, 0xc7b11ff4
jmp 0x1008c8d0
mov ecx, dword [esp + 4]
cmp ecx, 0x181529b8
mov ecx, 0xa2a6d80c
mov edx, 0x282f27b7
cmove ecx, edx
mov edx, 0x2bfce66e
nop dword [eax]
cmp edx, 0x1beb777c
jg 0x1008c940
cmp edx, 0xc7b7668c
jg 0x1008c9b0
cmp edx, 0xa1168ef1
jg 0x1008ca67
cmp edx, 0x8ee6bff3
jle 0x1008cb91
cmp edx, 0x9000d45c
jg 0x1008cd8d
cmp edx, 0x8ee6bff4
je 0x1008cf23
cmp edx, 0x8fe2a0a1
jne 0x1008c8d0
mov ecx, dword [esp + 4]
cmp ecx, 0x3da73fb4
mov ecx, 0xa2a6d80c
mov edx, 0x27e27f33
jmp 0x1008c8c5
cmp edx, 0x39b48606
jg 0x1008ca10
cmp edx, 0x2bfce66d
jg 0x1008cab0
cmp edx, 0x21d06034
jle 0x1008cbd0
cmp edx, 0x243b3470
jg 0x1008cdc0
cmp edx, 0x21d06035
je 0x1008cf3c
cmp edx, 0x2408ca71
jne 0x1008c8d0
mov ecx, dword [esp + 4]
cmp ecx, 0xd6c99be9
mov ecx, 0xa2a6d80c
mov edx, 0xd52305c8
jmp 0x1008c8c5
cmp edx, 0xfbaa7e4b
jg 0x1008cafb
cmp edx, 0xd7a929a9
jle 0x1008cc0f
cmp edx, 0xe4462dea
jg 0x1008cde5
cmp edx, 0xd7a929aa
je 0x1008cf55
cmp edx, 0xdc0368b0
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xc1676e9
mov edx, 0x21417e60
mov ebx, 0x64edfc68
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0x59b64e5e
jg 0x1008cb46
cmp edx, 0x54cf7e42
jle 0x1008cc4e
cmp edx, 0x56c9a9f8
jg 0x1008cdfe
cmp edx, 0x54cf7e43
je 0x1008cf70
cmp edx, 0x56959e3d
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x490f1601
mov edx, 0x8a2f8ed8
mov ebx, 0x4f67b9dc
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0xafa81fe8
jle 0x1008cc8d
cmp edx, 0xc77b736a
jg 0x1008ce37
cmp edx, 0xafa81fe9
je 0x1008cf8b
cmp edx, 0xbc485a0b
jne 0x1008c8d0
mov ecx, dword [esp + 4]
cmp ecx, 0xde38310f
mov ecx, 0xa2a6d80c
mov edx, 0xe6a12a37
jmp 0x1008c8c5
cmp edx, 0x343e1b0c
jle 0x1008cccc
cmp edx, 0x376d0a91
jg 0x1008ce68
cmp edx, 0x343e1b0d
je 0x1008cf9a
cmp edx, 0x34fc7020
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x5f23f6bf
mov edx, 0xffd05d13
mov ebx, 0x1beb777d
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0xfe42dd2
jle 0x1008ccff
cmp edx, 0x12c89ae1
jg 0x1008ce9b
cmp edx, 0xfe42dd3
je 0x1008cfb5
cmp edx, 0x112c17a5
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x27e27f33
mov edx, 0x63633759
mov ebx, 0xac25020
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0x63633758
jle 0x1008cd3e
cmp edx, 0x6921e516
jg 0x1008cece
cmp edx, 0x63633759
je 0x1008cfc8
cmp edx, 0x64edfc68
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xe6a12a37
mov edx, 0xcadf4f33
mov ebx, 0x57032024
cmove edx, ebx
jmp 0x1008c8d0
cmp edx, 0x8a2f8ed7
jle 0x1008cefc
cmp edx, 0x8a2f8ed8
je 0x1008cfe3
cmp edx, 0x8c07894c
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xd52305c8
mov edx, 0xa687017a
mov ebx, 0xcff7acab
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0x1beb777d
je 0x1008cffe
cmp edx, 0x1ede8987
je 0x1008d019
cmp edx, 0x21417e60
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x1ba65e24
mov edx, 0x343e1b0d
mov ebx, 0x4bd143b9
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0xc7b7668d
je 0x1008d04c
cmp edx, 0xcadf4f33
je 0x1008d056
cmp edx, 0xcff7acab
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xc64b7f14
mov edx, 0xcadf4f33
mov ebx, 0xafa81fe9
cmove edx, ebx
jmp 0x1008c8d0
cmp edx, 0x39b48607
je 0x1008d060
cmp edx, 0x4bd143b9
je 0x1008d07b
cmp edx, 0x4f67b9dc
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x282f27b7
mov edx, 0x5c53900d
mov ebx, 0x12e4ce8f
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0xa1168ef2
je 0x1008d096
cmp edx, 0xa61d1c76
je 0x1008d0b1
cmp edx, 0xa687017a
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xd52305c8
mov edx, 0xcadf4f33
mov ebx, 0x1ede8987
cmove edx, ebx
jmp 0x1008c8d0
cmp edx, 0x2bfce66e
je 0x1008d0cc
cmp edx, 0x3168dc24
je 0x1008d0d6
cmp edx, 0x32be8127
jne 0x1008c8d0
mov edx, 0x2bfce66e
mov ecx, 0x9cc6f1e2
jmp 0x1008c8d0
cmp edx, 0xfbaa7e4c
je 0x1008d0f1
cmp edx, 0xffd05d13
je 0x1008d10c
cmp edx, 0xac25020
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xc64b7f14
mov edx, 0x37e4bc61
mov ebx, 0x243b3471
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0x59b64e5f
je 0x1008d127
cmp edx, 0x5c53900d
je 0x1008d142
cmp edx, 0x6102342d
jne 0x1008c8d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xd6c99be9
mov ecx, 0x3da73fb4
cmove eax, ecx
mov edx, 0x2bfce66e
mov ecx, 0xc64b7f14
mov esi, dword [esp + 0xc]
jmp 0x1008c8d0
cmp edx, 0x9000d45d
je 0x1008d15d
cmp edx, 0x931a723b
jne 0x1008c8d0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x2bfce66e
mov ecx, 0xc64b7f14
mov eax, 0x2d460e7d
jmp 0x1008c8d0
cmp edx, 0x243b3471
je 0x1008d178
cmp edx, 0x2971b780
jne 0x1008c8d0
mov dword [esp], ecx
mov edx, 0x112c17a5
jmp 0x1008c8d0
cmp edx, 0xe4462deb
je 0x1008c8b1
cmp edx, 0xf78a1c39
je 0x1008ce28
jmp 0x1008c8d0
cmp edx, 0x56c9a9f9
je 0x1008d193
cmp edx, 0x57032024
jne 0x1008c8d0
cmp byte [esp + 0xb], 0
mov eax, 0x181529b8
mov ecx, 0x2d460e7d
cmovne eax, ecx
mov edx, 0x2bfce66e
mov ecx, 0xc64b7f14
jmp 0x1008c8d0
cmp edx, 0xc77b736b
je 0x1008d1ae
cmp edx, 0xc7b11ff4
jne 0x1008c8d0
mov ecx, dword [esp + 4]
cmp ecx, 0xde38310f
mov ecx, 0xaed86329
mov edx, 0x49565ac7
jmp 0x1008d1f6
cmp edx, 0x376d0a92
je 0x1008d1c9
cmp edx, 0x37e4bc61
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xe6a12a37
mov edx, 0xdc0368b0
mov ebx, 0x8c07894c
cmovl edx, ebx
jmp 0x1008c8d0
cmp edx, 0x12c89ae2
je 0x1008d1e2
cmp edx, 0x12e4ce8f
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x27e27f33
mov edx, 0xcadf4f33
mov ebx, 0x931a723b
cmove edx, ebx
jmp 0x1008c8d0
cmp edx, 0x6921e517
je 0x1008d203
cmp edx, 0x69c53628
jne 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xbd41252d
mov edx, 0xcadf4f33
cmove edx, edi
jmp 0x1008c8d0
cmp edx, 0x84a3ef5e
jne 0x1008d219
mov edx, dword [esp]
cmp edx, 0x5f23f6bf
mov edx, 0xcadf4f33
mov ebx, 0xfe42dd3
cmove edx, ebx
jmp 0x1008c8d0
mov ecx, dword [esp + 4]
cmp ecx, 0x181529b8
mov ecx, 0x6356feff
mov edx, 0xbd41252d
jmp 0x1008d1f6
mov ecx, dword [esp + 4]
cmp ecx, 0x2d460e7d
mov ecx, 0x1ba65e24
mov edx, 0x4cf915ed
jmp 0x1008d1f6
mov edx, dword [esp]
cmp edx, 0x6356feff
mov edx, 0xcadf4f33
mov ebx, 0x21d06035
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x49565ac7
mov edx, 0xcadf4f33
mov ebx, 0x2408ca71
cmove edx, ebx
jmp 0x1008c8d0
mov edx, 0x2bfce66e
mov ecx, 0x5f23f6bf
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x1ba65e24
mov edx, 0xcadf4f33
mov ebx, 0x12c89ae2
cmove edx, ebx
jmp 0x1008c8d0
mov dword [esp + 4], eax
mov edx, 0x2bfce66e
mov ecx, 0xc1676e9
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x4cf915ed
mov edx, 0x34fc7020
mov ebx, 0x56959e3d
cmovl edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x49565ac7
mov edx, 0x54cf7e43
mov ebx, 0x3168dc24
cmovl edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x4f52da61
mov edx, 0xa61d1c76
mov ebx, 0x9000d45d
cmovl edx, ebx
jmp 0x1008c8d0
push 0
push 0
push 0
push 0x10082ad0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
test eax, eax
jne 0x1008d038
mov esi, dword [esp + 0xc]
mov edx, 0x2bfce66e
mov ecx, 0xc64b7f14
mov eax, 0x3da73fb4
jmp 0x1008c8d0
mov edx, 0x2bfce66e
jmp 0x1008c8d0
mov edx, 0xc7b7668d
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xbd41252d
mov edx, 0x69c53628
mov ebx, 0x59b64e5f
cmovl edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xc1676e9
mov edx, 0xcadf4f33
mov ebx, 0x8ee6bff4
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x6521f92d
mov edx, 0x6921e517
mov ebx, 0xd7a929aa
cmovl edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x4f52da61
mov edx, 0xcadf4f33
mov ebx, 0x8fe2a0a1
cmove edx, ebx
jmp 0x1008c8d0
mov edx, 0x2971b780
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x490f1601
mov edx, 0xcadf4f33
mov ebx, 0x865c28f4
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xa2a6d80c
mov edx, 0xcadf4f33
mov ebx, 0x32be8127
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x6356feff
mov edx, 0xa1168ef2
mov ebx, 0x84a3ef5e
cmovl edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xaed86329
mov edx, 0xcadf4f33
mov ebx, 0xbc485a0b
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x282f27b7
mov edx, 0xcadf4f33
mov ebx, 0x6102342d
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x4cf915ed
mov edx, 0xcadf4f33
mov ebx, 0xe4462deb
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xaed86329
mov edx, 0x39b48607
mov ebx, 0xc77b736b
cmovl edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x9cc6f1e2
mov edx, 0xcadf4f33
mov ebx, 0xf78a1c39
cmove edx, ebx
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0xa2a6d80c
mov edx, 0xfbaa7e4c
mov ebx, 0x56c9a9f9
cmovl edx, ebx
jmp 0x1008c8d0
mov ecx, dword [esp + 4]
cmp ecx, 0x2d460e7d
mov ecx, 0xa2a6d80c
mov edx, 0x490f1601
jmp 0x1008c8c5
mov ecx, dword [esp + 4]
cmp ecx, 0x3da73fb4
mov ecx, 0x4f52da61
mov edx, 0x6521f92d
cmovl ecx, edx
mov edx, 0x2bfce66e
jmp 0x1008c8d0
mov edx, dword [esp]
cmp edx, 0x6521f92d
mov edx, 0xcadf4f33
cmove edx, ebp
jmp 0x1008c8d0
cmp edx, 0x865c28f4
jne 0x1008c8d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1a4]
xor ecx, esp
call fcn.1008e3cc
add esp, 0x1a8
pop esi
pop edi
pop ebx
pop ebp
ret