Function at 0x10098a40
Capabilities:
Create thread

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1a8
mov eax, dword [0x100ad040]
xor eax, esp
mov dword [esp + 0x1a4], eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x100ad8da
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x100adbb8
push eax
call esi
push ebx
push 0x202
call eax
mov byte [0x100ae688], 1
push str.Igplgn10_fnn
call edi
push str._qfbwfNvwfB
push eax
call esi
push 0x100adbd0
push 0
push 0
call eax
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 0
sete byte [esp + 0xb]
mov edx, 0x6b10a9ff
mov ecx, 0x411be08d
mov eax, 0x6df065ad
mov ebp, 0x95239f42
mov edi, 0x7d13219b
jmp 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x7d13219b
mov ecx, 0x352bb8fb
mov edx, 0x997c728b
cmove ecx, edx
mov edx, 0x8f6128cd
nop dword [eax]
cmp edx, 0xe00ba01
jg 0x10098b60
cmp edx, 0xcb556cab
jle 0x10098bd0
cmp edx, 0xe2b49b59
jle 0x10098c97
cmp edx, 0xef9e94c8
jg 0x10098dba
cmp edx, 0xeb80327e
jg 0x10098f9d
cmp edx, 0xe2b49b5a
je 0x10099135
cmp edx, 0xe8cfe969
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0xc5015346
mov edx, 0x130ea991
mov ebx, 0xe2b49b5a
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0x5d708773
jg 0x10098c40
cmp edx, 0x5148330d
jg 0x10098ce2
cmp edx, 0x2a0cb98d
jle 0x10098df9
cmp edx, 0x3548caf1
jg 0x10098fbf
cmp edx, 0x2a0cb98e
je 0x10099150
cmp edx, 0x32479324
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x6fe1b019
mov edx, 0xdc5eb6a6
mov ebx, 0x777efca5
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0xa4aea399
jg 0x10098d2b
cmp edx, 0x93b4128c
jle 0x10098e38
cmp edx, 0xa0b90ef9
jg 0x10098ff2
cmp edx, 0x93b4128d
je 0x10099171
cmp edx, 0x95239f42
jne 0x10098af0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xd40ce441
mov ecx, 0x21d6723
cmove eax, ecx
mov edx, 0x8f6128cd
mov ecx, 0xf154795a
mov esi, dword [esp + 0xc]
jmp 0x10098af0
cmp edx, 0x70049332
jg 0x10098d74
cmp edx, 0x6b10a9fe
jle 0x10098e66
cmp edx, 0x6d547d3a
jg 0x10099025
cmp edx, 0x6b10a9ff
je 0x1009918a
cmp edx, 0x6c08fe70
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x4c4862f0
mov edx, 0xef9e94c9
mov ebx, 0x15cbec09
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0xccfdb910
jle 0x10098ea5
cmp edx, 0xdc2ace5e
jg 0x10099058
cmp edx, 0xccfdb911
je 0x10099197
cmp edx, 0xceb174bd
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0xf154795a
mov edx, 0x5148330e
mov ebx, 0x753a4bea
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0x563c72dd
jle 0x10098ee2
cmp edx, 0x57a716c2
jg 0x1009908b
cmp edx, 0x563c72de
je 0x100991a1
cmp edx, 0x572c1897
jne 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x7d13219b
mov ecx, 0x4c4862f0
mov edx, 0x8ee93622
jmp 0x10099164
cmp edx, 0xbcb9a034
jle 0x10098f1f
cmp edx, 0xc27f9685
jg 0x100990be
cmp edx, 0xbcb9a035
je 0x100991b0
cmp edx, 0xbee78b63
jne 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x6df065ad
mov ecx, 0xe9856ea8
mov edx, 0x214d51e9
jmp 0x10099164
cmp edx, 0x753a4be9
jle 0x10098f5e
cmp edx, 0x7ba92472
jg 0x100990f1
cmp edx, 0x753a4bea
je 0x100991cb
cmp edx, 0x777efca5
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x6c1c4f6a
mov edx, 0xccfdb911
cmove edx, ebp
jmp 0x10098af0
cmp edx, 0xffdbdd24
jg 0x1009910e
cmp edx, 0xef9e94c9
je 0x100991e6
cmp edx, 0xf8d1755d
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x29d48eb3
mov edx, 0xbcb9a035
mov ebx, 0xeb80327f
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0xe00ba02
je 0x10099201
cmp edx, 0x130ea991
je 0x1009921c
cmp edx, 0x15cbec09
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x352bb8fb
mov edx, 0x636f6049
mov ebx, 0xf8d1755d
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0x85732c20
je 0x10099237
cmp edx, 0x88dcc3b0
je 0x10099252
cmp edx, 0x8f6128cd
jne 0x10098af0
mov edx, 0x6b10a9ff
jmp 0x10098af0
cmp edx, 0x5d708774
je 0x1009926d
cmp edx, 0x605a5961
je 0x10099288
cmp edx, 0x636f6049
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x411be08d
mov edx, 0xa4aea39a
mov ebx, 0x4563f269
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0xcb556cac
je 0x100992a3
cmp edx, 0xcb9ccf21
je 0x100992be
cmp edx, 0xcce2f284
jne 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x6d9765ad
mov ecx, 0xc5015346
mov edx, 0xeb34e4e
jmp 0x10099164
cmp edx, 0x5148330e
je 0x100992d7
cmp edx, 0x557117b3
je 0x10098ad1
cmp edx, 0x55ab06b5
jne 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0xd40ce441
mov ecx, 0x352bb8fb
mov edx, 0xa9bc4b02
jmp 0x10098ae5
cmp edx, 0xa4aea39a
je 0x100992f2
cmp edx, 0xb079b7cc
je 0x1009930d
cmp edx, 0xb38f6bc3
jne 0x10098af0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x8f6128cd
mov ecx, 0xf154795a
mov eax, 0x7d13219b
jmp 0x10098af0
cmp edx, 0x70049333
je 0x10099326
cmp edx, 0x7503b80e
je 0x10099339
cmp edx, 0x75364b6b
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x997c728b
mov edx, 0xc88ab2b7
mov ebx, 0x6e5f990b
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0xeb80327f
je 0x10099354
cmp edx, 0xec1227fe
jne 0x10098af0
mov edx, 0x8f6128cd
jmp 0x10098af0
cmp edx, 0x3548caf2
je 0x1009936f
cmp edx, 0x4563f269
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x352bb8fb
mov edx, 0xccfdb911
mov ebx, 0x563c72de
cmove edx, ebx
jmp 0x10098af0
cmp edx, 0xa0b90efa
je 0x1009938a
cmp edx, 0xa4376fa7
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x214d51e9
mov edx, 0xccfdb911
mov ebx, 0xb079b7cc
cmove edx, ebx
jmp 0x10098af0
cmp edx, 0x6d547d3b
je 0x100993a5
cmp edx, 0x6e5f990b
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x8ee93622
mov edx, 0xccfdb911
mov ebx, 0xcb9ccf21
cmove edx, ebx
jmp 0x10098af0
cmp edx, 0xdc2ace5f
je 0x100993b4
cmp edx, 0xdc5eb6a6
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x70f92a8e
mov edx, 0xdc2ace5f
mov ebx, 0xcb556cac
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0x57a716c3
je 0x100993cf
cmp edx, 0x5a8c1beb
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0xe9856ea8
mov edx, 0x21ee6fe
mov ebx, 0xa0b90efa
cmovl edx, ebx
jmp 0x10098af0
cmp edx, 0xc27f9686
je 0x100993ea
cmp edx, 0xc88ab2b7
jne 0x10098af0
mov edx, dword [esp]
cmp edx, 0x997c728b
mov edx, 0xccfdb911
mov ebx, 0xffdbdd25
cmove edx, ebx
jmp 0x10098af0
cmp edx, 0x7ba92473
je 0x1009941d
cmp edx, 0x7db471fe
je 0x1009942a
jmp 0x10098af0
cmp edx, 0x21ee6fe
jne 0x10099439
mov edx, dword [esp]
cmp edx, 0xeb34e4e
mov edx, 0x88dcc3b0
mov ebx, 0xceb174bd
cmovl edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0xa9bc4b02
mov edx, 0xccfdb911
mov ebx, 0xc27f9686
cmove edx, ebx
jmp 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x21d6723
mov ecx, 0x70f92a8e
mov edx, 0x6fe1b019
cmovl ecx, edx
mov edx, 0x8f6128cd
jmp 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x21d6723
mov ecx, 0x352bb8fb
mov edx, 0x29d48eb3
jmp 0x10098ae5
mov dword [esp], ecx
mov edx, 0x7503b80e
jmp 0x10098af0
mov edx, 0xec1227fe
jmp 0x10098af0
mov edx, 0x8f6128cd
mov ecx, 0x135d4572
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x29d48eb3
mov edx, 0xccfdb911
mov ebx, 0xb38f6bc3
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0xe9856ea8
mov edx, 0xccfdb911
mov ebx, 0x572c1897
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x6c1c4f6a
mov edx, 0x32479324
mov ebx, 0x57a716c3
cmovl edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0xeb34e4e
mov edx, 0xccfdb911
mov ebx, 0x2a0cb98e
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0xc5015346
mov edx, 0xccfdb911
mov ebx, 0xbee78b63
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x214d51e9
mov edx, 0xa4376fa7
mov ebx, 0x605a5961
cmovl edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x135d4572
mov edx, 0x85732c20
mov ebx, 0xe00ba02
cmovl edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x516eb0d6
mov edx, 0xccfdb911
mov ebx, 0xcce2f284
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x135d4572
mov edx, 0xccfdb911
mov ebx, 0x7db471fe
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x6fe1b019
mov edx, 0xccfdb911
mov ebx, 0x55ab06b5
cmove edx, ebx
jmp 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x6df065ad
mov ecx, 0x352bb8fb
mov edx, 0x2958898d
jmp 0x10098ae5
mov edx, dword [esp]
cmp edx, 0xf154795a
mov edx, 0xccfdb911
mov ebx, 0x6d547d3b
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x411be08d
mov edx, 0xccfdb911
mov ebx, 0x70049333
cmove edx, ebx
jmp 0x10098af0
mov ecx, dword [esp + 4]
cmp ecx, 0x6d9765ad
mov ecx, 0x352bb8fb
mov edx, 0x6c1c4f6a
jmp 0x10098ae5
mov dword [esp + 4], eax
mov edx, 0x8f6128cd
mov ecx, 0x516eb0d6
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x2958898d
mov edx, 0x6c08fe70
mov ebx, 0x5a8c1beb
cmovl edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x2958898d
mov edx, 0xccfdb911
mov ebx, 0x7ba92473
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x4c4862f0
mov edx, 0xccfdb911
mov ebx, 0x557117b3
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0xa9bc4b02
mov edx, 0xe8cfe969
mov ebx, 0x75364b6b
cmovl edx, ebx
jmp 0x10098af0
mov edx, 0x8f6128cd
mov ecx, 0x411be08d
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x70f92a8e
mov edx, 0xccfdb911
mov ebx, 0x93b4128d
cmove edx, ebx
jmp 0x10098af0
mov edx, dword [esp]
cmp edx, 0x516eb0d6
mov edx, 0x5d708774
mov ebx, 0x3548caf2
cmovl edx, ebx
jmp 0x10098af0
push 0
push 0
push 0
push 0x1008e750
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
test eax, eax
jne 0x10099409
mov esi, dword [esp + 0xc]
mov edx, 0x8f6128cd
mov ecx, 0xf154795a
mov eax, 0x21d6723
jmp 0x10098af0
cmp byte [esp + 0xb], 0
mov eax, 0x6d9765ad
cmovne eax, edi
mov edx, 0x8f6128cd
mov ecx, 0xf154795a
jmp 0x10098af0
cmp edx, 0xffdbdd25
jne 0x10098af0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1a4]
xor ecx, esp
call fcn.1009a5dc
add esp, 0x1a8
pop esi
pop edi
pop ebx
pop ebp
ret